@poe-platform/safe-js 0.1.381 → 0.1.383

package/dist/safe-js/chunks/{chunk-WEP4P7RG.js → chunk-LUFFFEON.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-O3MW27ZJ.js";
+} from "./chunk-XIEVJEAG.js";
 
 // packages/safe-js/src/migrate.ts
 import { createHash } from "node:crypto";
@@ -8249,4 +8249,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-WEP4P7RG.js.map
+//# sourceMappingURL=chunk-LUFFFEON.js.map

package/dist/safe-js/chunks/{chunk-O3MW27ZJ.js → chunk-XIEVJEAG.js}

@@ -8504,6 +8504,41 @@ function copyCollectionProperties(source, target, encode) {
   if (!Object.isExtensible(properties)) Object.preventExtensions(target);
 }
 
+// packages/safe-js/src/interp/string-iterator.ts
+var states4 = /* @__PURE__ */ new WeakMap();
+function isSandboxStringIterator(value) {
+  return typeof value === "object" && value !== null && states4.has(value);
+}
+function restoreSandboxStringIterator(state, target = /* @__PURE__ */ Object.create(null)) {
+  validateStringIteratorState(state);
+  states4.set(target, { ...state });
+  return target;
+}
+function validateStringIteratorState(state) {
+  if (!Number.isSafeInteger(state.index) || state.index < 0 || (state.input === void 0 ? state.index !== 0 : typeof state.input !== "string" || state.index > state.input.length || state.index > 0 && state.input.codePointAt(state.index - 1) > 65535))
+    throw new TypeError("Invalid String iterator state.");
+}
+function stringIteratorState(value) {
+  const state = states4.get(value);
+  if (state === void 0) throw new TypeError("String iterator next requires a String iterator receiver.");
+  return state;
+}
+function nextStringIterator(value, budget) {
+  if (!isSandboxStringIterator(value)) throw new TypeError("String iterator next requires a String iterator receiver.");
+  const state = stringIteratorState(value);
+  budget.visitNode();
+  if (state.input === void 0) return { value: void 0, done: true };
+  if (state.index >= state.input.length) {
+    state.input = void 0;
+    state.index = 0;
+    return { value: void 0, done: true };
+  }
+  const width = state.input.codePointAt(state.index) > 65535 ? 2 : 1;
+  const entry = budget.allocateString(state.input.slice(state.index, state.index + width));
+  state.index += width;
+  return { value: entry, done: false };
+}
+
 // packages/safe-js/src/interp/raw-json.ts
 var rawJsonValues = /* @__PURE__ */ new WeakSet();
 function createRawJson(text) {
@@ -9746,7 +9781,8 @@ async function acquireSandboxIterator(value, budget, context, asyncProtocol = fa
   const key = asyncProtocol ? Symbol.asyncIterator : Symbol.iterator;
   if (context.getProperty === void 0 || isGuestHostObject(value))
     return asyncProtocol ? getSandboxAsyncIterator(value, budget, context, signal) : getSandboxIterator(value, budget, context);
-  if (getSandboxPropertyDescriptor(value, key, budget) === void 0 && !(isSandboxRegExpIterator(value) && !asyncProtocol && getSandboxPropertyDescriptor(value, "next", budget) !== void 0)) {
+  const lookupTarget = value !== void 0 && value !== null && typeof value !== "object" ? getBoxedPrototype(value, budget) : value;
+  if (getSandboxPropertyDescriptor(lookupTarget, key, budget) === void 0 && !(isSandboxRegExpIterator(value) && !asyncProtocol && getSandboxPropertyDescriptor(value, "next", budget) !== void 0)) {
     if (isSandboxGenerator(value)) {
       if (!hasExplicitSandboxPrototype(value) && value.async === true === asyncProtocol && getSandboxPropertyDescriptor(value, "next", budget) !== void 0)
         return guestIterator(value, await context.getProperty(value, "next"), asyncProtocol, budget, context, signal);
@@ -13353,6 +13389,36 @@ function createPrimitiveConstructor(options, budget) {
   }
   for (const [name, value] of methods2)
     Object.defineProperty(prototype, name, { value, writable: true, configurable: true });
+  if (kind === "string") {
+    const iteratorPrototype = /* @__PURE__ */ Object.create(null);
+    setSandboxPrototype(iteratorPrototype, resolveIntrinsicIdentity(budget, '["%IteratorPrototype%"]'));
+    Object.defineProperties(iteratorPrototype, {
+      next: { value: createSandboxClosure({
+        guest: true,
+        sandbox: true,
+        name: "next",
+        length: 0,
+        call: (_args, context) => nextStringIterator(context?.thisValue, budget)
+      }), writable: true, configurable: true },
+      [Symbol.toStringTag]: { value: "String Iterator", configurable: true }
+    });
+    registerBuiltinIdentities(budget, { "%StringIteratorPrototype%": iteratorPrototype });
+    registerIntrinsicObject(budget, iteratorPrototype);
+    Object.defineProperty(prototype, Symbol.iterator, { value: createSandboxClosure({
+      guest: true,
+      sandbox: true,
+      name: "[Symbol.iterator]",
+      length: 0,
+      call: async (_args, context) => {
+        const receiver = context?.thisValue;
+        if (receiver === null || receiver === void 0) throw new TypeError("String iterator requires a receiver.");
+        const input = await sandboxString(receiver, budget, context);
+        const iterator = restoreSandboxStringIterator({ input, index: 0 });
+        setSandboxPrototype(iterator, iteratorPrototype, budget);
+        return iterator;
+      }
+    }), writable: true, configurable: true });
+  }
   installBoxedPrototype(budget, prototype, constructor);
   return constructor;
 }
@@ -14975,6 +15041,18 @@ function createArrayGlobal(budget) {
   const statics = {
     isArray: createSandboxClosure({ sandbox: true, name: "isArray", call: ([value]) => Array.isArray(value) }),
     from: createSandboxClosure({ sandbox: true, name: "from", call: (args, context) => arrayFromSandboxValues(args, budget, context) }),
+    fromAsync: createSandboxClosure({
+      guest: true,
+      sandbox: true,
+      name: "fromAsync",
+      length: 1,
+      call: (args, context) => executeAsyncFunction(
+        (onSuspend) => arrayFromSandboxValues(args, budget, context, onSuspend),
+        budget,
+        void 0,
+        context
+      )
+    }),
     of: createSandboxClosure({
       guest: true,
       sandbox: true,
@@ -15261,7 +15339,17 @@ function defineDataProperty(target, key, descriptor, budget, context, throwOnFai
 function isAssignableSandboxTarget(value) {
   return typeof value === "object" && value !== null && !isSandboxClosure(value) && !isSandboxGenerator(value) && !isSandboxMap(value) && !isSandboxSet(value) && !isSandboxPromise(value) && !isSandboxRegex(value);
 }
-async function arrayFromSandboxValues(args, budget, context) {
+async function arrayFromSandboxValues(args, budget, context, onSuspend) {
+  const asyncProtocol = onSuspend !== void 0;
+  const awaitAsync = async (pending) => {
+    onSuspend();
+    const leaveAwait = budget.enterAwait();
+    try {
+      return await suspendJob(pending);
+    } finally {
+      leaveAwait();
+    }
+  };
   const [items, mapFn, thisValue] = args;
   if (mapFn !== void 0 && !isSandboxClosure(mapFn)) {
     throw new TypeError("Array.from mapping callback must be a function.");
@@ -15270,11 +15358,11 @@ async function arrayFromSandboxValues(args, budget, context) {
     throw new TypeError("Array.from requires a non-null input.");
   }
   const read = (property) => context?.getProperty !== void 0 ? context.getProperty(items, property) : getSandboxDataProperty(items, property, budget);
-  const observableMethod = context?.getProperty !== void 0 && !isGuestHostObject(items) && getSandboxPropertyDescriptor(typeof items === "object" ? items : getBoxedPrototype(items, budget), Symbol.iterator, budget) !== void 0;
+  const observableMethod = !asyncProtocol && context?.getProperty !== void 0 && !isGuestHostObject(items) && getSandboxPropertyDescriptor(typeof items === "object" ? items : getBoxedPrototype(items, budget), Symbol.iterator, budget) !== void 0;
   const iteratorMethod = observableMethod ? await context.getProperty(items, Symbol.iterator) : void 0;
   if (iteratorMethod !== null && iteratorMethod !== void 0 && !isSandboxClosure(iteratorMethod) && typeof iteratorMethod !== "function")
     throw new TypeError("Iterator method must be callable.");
-  let iterator = observableMethod ? void 0 : context === void 0 ? getSandboxIterator(items, budget) : await acquireSandboxIterator(items, budget, context);
+  let iterator = observableMethod ? void 0 : context === void 0 ? asyncProtocol ? getSandboxAsyncIterator(items, budget) : getSandboxIterator(items, budget) : await acquireSandboxIterator(items, budget, context, asyncProtocol);
   const iterable = observableMethod ? iteratorMethod !== null && iteratorMethod !== void 0 : iterator !== void 0;
   const constructor = context?.thisValue;
   let result;
@@ -15282,10 +15370,13 @@ async function arrayFromSandboxValues(args, budget, context) {
   let failure;
   const retained = {};
   budget.setRetainedValues(retained, () => [
-    items,
+    // Once acquired, a rooted protocol iterator owns the remaining input. Keep
+    // the original only for array-like reads or implicit unrooted iterators.
+    iterator?.retainedValue === void 0 ? items : void 0,
     iteratorMethod,
     iterator?.retainedValue,
     mapFn,
+    thisValue,
     constructor,
     result,
     currentValue,
@@ -15328,17 +15419,19 @@ async function arrayFromSandboxValues(args, budget, context) {
         await closeOnThrow(error);
       }
       if (iterator !== void 0) {
-        const next = await iterator.next();
+        const pending = Promise.resolve(iterator.next());
+        const next = await (asyncProtocol ? awaitAsync(pending) : pending);
         if (typeof next !== "object" || next === null)
           throw new TypeError("Iterator result must be an object.");
         if ((await readIteratorResult(iterator, next, "done")).value) break;
         currentValue = (await readIteratorResult(iterator, next, "value")).value;
       } else {
         currentValue = await read(index);
+        if (asyncProtocol) currentValue = await awaitAsync(awaitSandboxValue(currentValue, void 0, budget, context));
       }
       try {
         if (Array.isArray(result)) budget.allocateArrayLength(index + 1);
-        if (mapFn !== void 0)
+        if (mapFn !== void 0) {
           currentValue = await invokeBuiltinClosure(
             mapFn,
             [currentValue, index],
@@ -15346,6 +15439,8 @@ async function arrayFromSandboxValues(args, budget, context) {
             context,
             thisValue
           );
+          if (asyncProtocol) currentValue = await awaitAsync(awaitSandboxValue(currentValue, void 0, budget, context));
+        }
         const key = String(index);
         const growth = key.length + 1 + (Array.isArray(result) ? Math.max(0, index + 1 - result.length) : 0) + (budget.limits.dataSize === void 0 ? 0 : measureSandboxData([currentValue]));
         budget.visitNode();
@@ -21924,6 +22019,10 @@ function serializeCollectionProperties(value, encode, dataOnly = false) {
 function captureGuestHeapNode(value, encode) {
   if (isSandboxModuleNamespace(value))
     return { kind: "module-namespace", entries: Object.keys(value).map((key) => [key, encode(value[key])]) };
+  if (isSandboxStringIterator(value)) {
+    const cursor = stringIteratorState(value);
+    return { kind: "string-iterator", input: encode(cursor.input), index: cursor.index, state: captureObjectState(value, encode) };
+  }
   if (isRawJson(value)) return { kind: "raw-json", text: value.rawJSON };
   const intrinsic = getIntrinsicIdentity(value);
   if (intrinsic !== void 0) {
@@ -26870,7 +26969,7 @@ function validateGuestHeapNode(raw, heap, maxArrayLength = 4294967295) {
     createRawJson(node.text);
     return true;
   }
-  if (!["intrinsic", "bound-function", "guest-function", "guest-class", "guest-generator", "scope-frame", "guest-object", "guest-array", "array-iterator", "map", "set"].includes(String(node.kind))) return false;
+  if (!["intrinsic", "bound-function", "guest-function", "guest-class", "guest-generator", "scope-frame", "guest-object", "guest-array", "array-iterator", "string-iterator", "map", "set"].includes(String(node.kind))) return false;
   const reference = (value, kinds) => {
     const ref = record3(value);
     fields(ref, ["kind", "id"]);
@@ -26928,6 +27027,13 @@ function validateGuestHeapNode(raw, heap, maxArrayLength = 4294967295) {
     fields(node, ["kind", "id"], ["state"]);
     if (typeof node.id !== "string" || !intrinsicCatalogue().has(node.id)) throw new TypeError("Unknown intrinsic identity.");
     if (Object.hasOwn(node, "state")) state(node.state);
+  } else if (node.kind === "string-iterator") {
+    fields(node, ["kind", "input", "index", "state"]);
+    const index = integer(node.index);
+    if (typeof node.input !== "string" && !absent(node.input))
+      throw new TypeError("Invalid String iterator state.");
+    validateStringIteratorState({ input: typeof node.input === "string" ? node.input : void 0, index });
+    state(node.state);
   } else if (node.kind === "array-iterator") {
     fields(node, ["kind", "source", "index", "method", "state"]);
     integer(node.index);
@@ -28734,7 +28840,7 @@ var structuredCloneErrorNames = ["Error", "EvalError", "RangeError", "ReferenceE
 function* cloneStructuredGraph(value, state, budget, depth = 0) {
   assertSandboxDataDepth(depth);
   budget.visitNode();
-  if (typeof value === "symbol" || isSandboxModuleNamespace(value) || isSandboxClosure(value) || isSandboxPromise(value) || isSandboxGenerator(value) || isSandboxCollectionIterator(value) || isSandboxRegExpIterator(value) || isSandboxArrayIterator(value) || isSandboxArguments(value))
+  if (typeof value === "symbol" || isSandboxModuleNamespace(value) || isSandboxClosure(value) || isSandboxPromise(value) || isSandboxGenerator(value) || isSandboxCollectionIterator(value) || isSandboxRegExpIterator(value) || isSandboxArrayIterator(value) || isSandboxStringIterator(value) || isSandboxArguments(value))
     throw new DOMException("Value cannot be structured cloned.", "DataCloneError");
   if (typeof value !== "object" || value === null) return allocateProducedSandboxValue(value, budget);
   if (isLiveCapability(value)) throw new DOMException("Capabilities cannot be structured cloned.", "DataCloneError");
@@ -28921,6 +29027,7 @@ function measureSandboxData(values, options = {}) {
       return;
     }
     if (isSandboxArrayIterator(value)) visit(arrayIteratorState(value).source, depth + 1);
+    if (isSandboxStringIterator(value)) visit(stringIteratorState(value).input, depth + 1);
     if (isSandboxRegExpIterator(value)) {
       const state = regexpIteratorState(value);
       visit(state.matcher, depth + 1);
@@ -29118,7 +29225,7 @@ function copyToSandbox(value, state, path = "<root>", cloneSandboxCollections =
   if (isSandboxClosure(value) || isSandboxGenerator(value) || isSandboxPromise(value)) {
     return value;
   }
-  if (isSandboxArrayIterator(value)) {
+  if (isSandboxArrayIterator(value) || isSandboxStringIterator(value)) {
     if (!cloneSandboxCollections) return value;
     throw new TypeError("Array iterators require a portable guest snapshot, not a data copy.");
   }
@@ -29598,7 +29705,7 @@ function copyFromSandbox(value, state, path = "<root>", options, depth = 0) {
   if (isSandboxGenerator(value)) {
     throw new TypeError("Sandbox generators cannot cross into host values.");
   }
-  if (isSandboxArrayIterator(value)) throw new TypeError("Sandbox Array iterators cannot cross into host values.");
+  if (isSandboxArrayIterator(value) || isSandboxStringIterator(value)) throw new TypeError("Sandbox iterators cannot cross into host values.");
   if (isSandboxCollectionIterator(value)) {
     throw new TypeError("Sandbox collection iterators cannot cross into host values.");
   }
@@ -43984,4 +44091,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-O3MW27ZJ.js.map
+//# sourceMappingURL=chunk-XIEVJEAG.js.map