@poe-platform/safe-js 0.1.384 → 0.1.386

package/dist/safe-js/chunks/{chunk-4OTKJDYX.js → chunk-IZEDCQDW.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-N3C4UP54.js";
+} from "./chunk-XJL73BPS.js";
 
 // packages/safe-js/src/migrate.ts
 import { createHash } from "node:crypto";
@@ -8249,4 +8249,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-4OTKJDYX.js.map
+//# sourceMappingURL=chunk-IZEDCQDW.js.map

package/dist/safe-js/chunks/{chunk-N3C4UP54.js → chunk-XJL73BPS.js}

@@ -7272,12 +7272,16 @@ function copySandboxArgumentProperties(source, target, copyValue) {
 }
 
 // packages/safe-js/src/interp/collection-iterator.ts
+var collectionIteratorPrototypes = /* @__PURE__ */ new WeakMap();
 var states = /* @__PURE__ */ new WeakMap();
 function isSandboxCollectionIterator(value) {
   return typeof value === "object" && value !== null && states.has(value);
 }
-function createSandboxCollectionIterator(collection, method) {
-  return restoreSandboxCollectionIterator({ collection, collectionKind: collection.kind, method, index: 0, exhausted: false });
+function createSandboxCollectionIterator(collection, method, budget) {
+  const iterator = restoreSandboxCollectionIterator({ collection, collectionKind: collection.kind, method, index: 0, exhausted: false });
+  const prototype = budget === void 0 ? void 0 : collectionIteratorPrototypes.get(budget)?.[collection.kind];
+  if (prototype !== void 0) setSandboxPrototype(iterator, prototype, budget);
+  return iterator;
 }
 function restoreSandboxCollectionIterator(snapshot, target = /* @__PURE__ */ Object.create(null)) {
   const { collection, collectionKind, method, index, exhausted } = snapshot;
@@ -7345,11 +7349,12 @@ function arrayIteratorState(value) {
 }
 
 // packages/safe-js/src/interp/regexp-iterator.ts
+var regexpIteratorPrototypes = /* @__PURE__ */ new WeakMap();
 var states3 = /* @__PURE__ */ new WeakMap();
 function isSandboxRegExpIterator(value) {
   return typeof value === "object" && value !== null && states3.has(value);
 }
-function restoreSandboxRegExpIterator(state, target = /* @__PURE__ */ Object.create(null)) {
+function restoreSandboxRegExpIterator(state, target = /* @__PURE__ */ Object.create(null), budget) {
   if ((state.global !== void 0 || state.unicode !== void 0) && (typeof state.global !== "boolean" || typeof state.unicode !== "boolean"))
     throw new TypeError("Invalid RegExp iterator modes.");
   if (state.matcher !== void 0 && (state.matcher === null || typeof state.matcher !== "object"))
@@ -7357,6 +7362,8 @@ function restoreSandboxRegExpIterator(state, target = /* @__PURE__ */ Object.cre
   if (!state.exhausted && (state.matcher === void 0 || state.input === void 0))
     throw new TypeError("A live RegExp iterator requires its matcher and input.");
   states3.set(target, state.exhausted ? { ...state, matcher: void 0, input: void 0, exhausted: true } : { ...state });
+  const prototype = budget === void 0 ? void 0 : regexpIteratorPrototypes.get(budget);
+  if (prototype !== void 0) setSandboxPrototype(target, prototype, budget);
   return target;
 }
 function regexpIteratorState(value) {
@@ -9747,8 +9754,10 @@ function getRegExpIteratorMember(property, budget) {
   });
   if (property !== "next") return void 0;
   return createSandboxClosure({
+    guest: true,
     sandbox: true,
     name: "next",
+    length: 0,
     call: (_args, context) => {
       const receiver = context?.thisValue;
       if (!isSandboxRegExpIterator(receiver))
@@ -9787,7 +9796,7 @@ async function acquireSandboxIterator(value, budget, context, asyncProtocol = fa
       if (!hasExplicitSandboxPrototype(value) && value.async === true === asyncProtocol && getSandboxPropertyDescriptor(value, "next", budget) !== void 0)
         return guestIterator(value, await context.getProperty(value, "next"), asyncProtocol, budget, context, signal);
     }
-    if (!asyncProtocol && (typeof value === "string" ? lookupTarget !== void 0 : (Array.isArray(value) || isSandboxBox(value) || isSandboxMap(value) || isSandboxSet(value)) && (hasExplicitSandboxPrototype(value) || getSandboxPrototype(value, budget) !== null))) return void 0;
+    if (!asyncProtocol && (typeof value === "string" ? lookupTarget !== void 0 : (Array.isArray(value) || isSandboxBox(value) || isSandboxMap(value) || isSandboxSet(value) || isSandboxCollectionIterator(value)) && (hasExplicitSandboxPrototype(value) || getSandboxPrototype(value, budget) !== null))) return void 0;
     if (!asyncProtocol) return getSandboxIterator(value, budget, context);
     if (isSandboxGenerator(value) && value.async && !hasExplicitSandboxPrototype(value))
       return getSandboxAsyncIterator(value, budget, context, signal);
@@ -9981,12 +9990,16 @@ function getSandboxIterator(value, budget, context) {
       }
     };
   }
+  if (isSandboxCollectionIterator(value) && hasExplicitSandboxPrototype(value))
+    return context?.getProperty === void 0 ? guestProtocolAdapter(value, budget ?? new Budget(), context, false) : void 0;
   if (isSandboxCollectionIterator(value))
     return {
       next: () => nextCollectionIterator(value, budget),
       snapshotIndex: () => 0,
       snapshot: () => ({ kind: "builtin", value, index: 0 })
     };
+  if (isSandboxRegExpIterator(value) && hasExplicitSandboxPrototype(value))
+    return context?.getProperty === void 0 ? guestProtocolAdapter(value, budget ?? new Budget(), context, false) : void 0;
   if (isSandboxRegExpIterator(value)) {
     if (context !== void 0 && budget !== void 0)
       return {
@@ -13238,7 +13251,7 @@ function callStringRegexCursor(value, methodName, regex, budget, parent, context
     const finish = (lastIndex2) => {
       if (matcher !== void 0) {
         matcher.lastIndex = normalizeLastIndex(lastIndex2);
-        return restoreSandboxRegExpIterator({ matcher, input: value, exhausted: false });
+        return restoreSandboxRegExpIterator({ matcher, input: value, exhausted: false }, void 0, budget);
       }
       return callMatchLikeMethod(value, methodName, [regex], compilation, lastIndex2);
     };
@@ -13288,7 +13301,7 @@ function callMatchLikeMethod(value, methodName, args, compilation, lastIndex) {
   if (methodName === "match") regex.lastIndex = 0;
   const matcher = methodName === "matchAll" ? createSandboxRegex(regex.source, regex.flags, normalizeLastIndex(lastIndex ?? Number(regex.lastIndex)), compilation) : regex;
   if (methodName === "matchAll")
-    return restoreSandboxRegExpIterator({ matcher, input: value, exhausted: false });
+    return restoreSandboxRegExpIterator({ matcher, input: value, exhausted: false }, void 0, compilation.owner?.budget);
   const matches = collectRegexMatches(matcher, value, matcher.flags.includes("g"), compilation.owner?.budget, Number(matcher.lastIndex));
   return matches.length === 0 ? null : matches.map((match) => match.text);
 }
@@ -16087,7 +16100,7 @@ async function callMapMethod(target, methodName, args, options, stack = []) {
     case "keys":
     case "values":
     case "entries":
-      return createSandboxCollectionIterator(target, methodName);
+      return createSandboxCollectionIterator(target, methodName, options.budget);
   }
 }
 
@@ -16188,7 +16201,7 @@ async function callSetMethod(target, methodName, args, options, stack = []) {
     case "keys":
     case "values":
     case "entries":
-      return createSandboxCollectionIterator(target, methodName);
+      return createSandboxCollectionIterator(target, methodName, options.budget);
   }
 }
 
@@ -18667,7 +18680,7 @@ function getPropertyValue(target, property, context, receiver = target) {
   const descriptor = getSandboxPropertyDescriptor(target, property, context.budget);
   if (descriptor !== void 0)
     return readPropertyDescriptor(descriptor, receiver, createCoercionContext(context), true);
-  if (isSandboxRegExpIterator(target)) return getRegExpIteratorMember(property, context.budget);
+  if (isSandboxRegExpIterator(target)) return hasExplicitSandboxPrototype(target) ? void 0 : getRegExpIteratorMember(property, context.budget);
   if (typeof target === "symbol" || typeof target === "bigint") {
     const prototype = getBoxedPrototype(target, context.budget);
     return prototype === void 0 ? void 0 : getPropertyValue(prototype, property, context, receiver);
@@ -18689,7 +18702,7 @@ function getPropertyValue(target, property, context, receiver = target) {
   if (isSandboxMap(target)) return getSandboxPrototype(target, context.budget) === null ? getMapMember(target, property, createMapMethodOptions(context)) : void 0;
   if (isSandboxSet(target)) return getSandboxPrototype(target, context.budget) === null ? getSetMember(target, property, createSetMethodOptions(context)) : void 0;
   if (isSandboxCollectionIterator(target))
-    return getCollectionIteratorMember(target, property, context.budget);
+    return hasExplicitSandboxPrototype(target) ? void 0 : getCollectionIteratorMember(target, property, context.budget);
   if (isSandboxGenerator(target)) return hasExplicitSandboxPrototype(target) ? void 0 : getGeneratorMember(target, property, context.budget);
   if (isSandboxClosure(target)) return getClosureMemberValue(target, property, context);
   if (isSandboxPromise(target)) return hasExplicitSandboxPrototype(target) ? void 0 : getPromiseMember(property, context.budget);
@@ -22023,6 +22036,29 @@ function captureGuestHeapNode(value, encode) {
     const cursor = stringIteratorState(value);
     return { kind: "string-iterator", input: encode(cursor.input), index: cursor.index, state: captureObjectState(value, encode) };
   }
+  if (isSandboxCollectionIterator(value) && hasGuestObjectState(value)) {
+    const cursor = snapshotCollectionIterator(value);
+    return {
+      kind: "guest-collection-iterator",
+      collectionKind: cursor.collectionKind,
+      method: cursor.method,
+      collection: encode(cursor.collection),
+      index: cursor.index,
+      exhausted: cursor.exhausted,
+      state: captureObjectState(value, encode)
+    };
+  }
+  if (isSandboxRegExpIterator(value) && hasGuestObjectState(value)) {
+    const cursor = regexpIteratorState(value);
+    return {
+      kind: "guest-regexp-iterator",
+      matcher: encode(cursor.matcher),
+      input: encode(cursor.input),
+      exhausted: cursor.exhausted,
+      ...cursor.global === void 0 ? {} : { global: cursor.global, unicode: cursor.unicode },
+      state: captureObjectState(value, encode)
+    };
+  }
   if (isRawJson(value)) return { kind: "raw-json", text: value.rawJSON };
   const intrinsic = getIntrinsicIdentity(value);
   if (intrinsic !== void 0) {
@@ -25208,6 +25244,34 @@ function installCollectionPrototypes(budget, mapConstructor, setConstructor) {
     for (const method of /* @__PURE__ */ new Set([...Object.values(methods2), size, species])) registerIntrinsicFunction(budget, method);
   }
 }
+function installCollectionIteratorPrototypes(budget) {
+  for (const name of ["Map", "Set"]) {
+    const iteratorPrototype = /* @__PURE__ */ Object.create(null);
+    const kind = name === "Map" ? "map" : "set";
+    const next = createSandboxClosure({
+      guest: true,
+      sandbox: true,
+      name: "next",
+      length: 0,
+      call: (_args, context) => {
+        const receiver = context?.thisValue;
+        if (!isSandboxCollectionIterator(receiver) || collectionIteratorState(receiver).collectionKind !== kind)
+          throw new TypeError("Iterator next requires a matching collection iterator receiver.");
+        return nextCollectionIterator(receiver, budget);
+      }
+    });
+    setSandboxPrototype(iteratorPrototype, resolveIntrinsicIdentity(budget, '["%IteratorPrototype%"]'));
+    Object.defineProperties(iteratorPrototype, {
+      next: { value: next, writable: true, configurable: true },
+      [Symbol.toStringTag]: { value: `${name} Iterator`, configurable: true }
+    });
+    const installed = collectionIteratorPrototypes.get(budget) ?? {};
+    installed[kind] = iteratorPrototype;
+    collectionIteratorPrototypes.set(budget, installed);
+    registerBuiltinIdentities(budget, { [`%${name}IteratorPrototype%`]: iteratorPrototype });
+    registerIntrinsicObject(budget, iteratorPrototype);
+  }
+}
 
 // packages/safe-js/src/interp/globals/collections.ts
 var mapConstructors = /* @__PURE__ */ new WeakSet();
@@ -25716,6 +25780,17 @@ async function regexSplit(target, input, limit, constructor, budget, context) {
 }
 
 // packages/safe-js/src/interp/globals/regex.ts
+function installRegExpIteratorPrototype(budget) {
+  const prototype = /* @__PURE__ */ Object.create(null);
+  setSandboxPrototype(prototype, resolveIntrinsicIdentity(budget, '["%IteratorPrototype%"]'));
+  Object.defineProperties(prototype, {
+    next: { value: getRegExpIteratorMember("next", budget), writable: true, configurable: true },
+    [Symbol.toStringTag]: { value: "RegExp String Iterator", configurable: true }
+  });
+  regexpIteratorPrototypes.set(budget, prototype);
+  registerBuiltinIdentities(budget, { "%RegExpStringIteratorPrototype%": prototype });
+  registerIntrinsicObject(budget, prototype);
+}
 function createRegexGlobals(options) {
   const invoke = (construct) => async (args, context) => {
     const selected = options.compileOwner ?? context?.compilation?.owner;
@@ -25917,7 +25992,7 @@ function createRegexGlobals(options) {
             exhausted: false,
             global: flags.includes("g"),
             unicode: flags.includes("u") || flags.includes("v")
-          });
+          }, void 0, options.budget);
         } finally {
           release();
         }
@@ -26902,6 +26977,8 @@ function createBuiltinBindings(options) {
     ...createPromiseGlobals(options),
     ...createRegexGlobals(options)
   };
+  installCollectionIteratorPrototypes(options.budget);
+  installRegExpIteratorPrototype(options.budget);
   createFunctionPrototype(options.budget, options.functionHasInstance);
   if (options.typedArrayPrototypes !== false) createNumericTypedArrayPrototypes(options.budget, bindings);
   if (options.errorPrototypes !== false) createErrorPrototypes(options.budget, bindings);
@@ -26969,7 +27046,7 @@ function validateGuestHeapNode(raw, heap, maxArrayLength = 4294967295) {
     createRawJson(node.text);
     return true;
   }
-  if (!["intrinsic", "bound-function", "guest-function", "guest-class", "guest-generator", "scope-frame", "guest-object", "guest-array", "array-iterator", "string-iterator", "map", "set"].includes(String(node.kind))) return false;
+  if (!["intrinsic", "bound-function", "guest-function", "guest-class", "guest-generator", "scope-frame", "guest-object", "guest-array", "array-iterator", "string-iterator", "guest-collection-iterator", "guest-regexp-iterator", "map", "set"].includes(String(node.kind))) return false;
   const reference = (value, kinds) => {
     const ref = record3(value);
     fields(ref, ["kind", "id"]);
@@ -27027,6 +27104,29 @@ function validateGuestHeapNode(raw, heap, maxArrayLength = 4294967295) {
     fields(node, ["kind", "id"], ["state"]);
     if (typeof node.id !== "string" || !intrinsicCatalogue().has(node.id)) throw new TypeError("Unknown intrinsic identity.");
     if (Object.hasOwn(node, "state")) state(node.state);
+  } else if (node.kind === "guest-regexp-iterator") {
+    fields(node, ["kind", "matcher", "input", "exhausted", "state"], ["global", "unicode"]);
+    if (typeof node.exhausted !== "boolean" || typeof node.input !== "string" && !absent(node.input))
+      throw new TypeError("Invalid RegExp iterator state.");
+    if ((Object.hasOwn(node, "global") || Object.hasOwn(node, "unicode")) && (typeof node.global !== "boolean" || typeof node.unicode !== "boolean"))
+      throw new TypeError("Invalid RegExp iterator modes.");
+    if (absent(node.matcher)) {
+      if (!node.exhausted) throw new TypeError("Live RegExp iterator requires a matcher.");
+    } else {
+      const matcher = reference(node.matcher);
+      if (matcher.kind === "symbol" || matcher.kind === "scope-frame") throw new TypeError("Invalid RegExp iterator matcher.");
+    }
+    if (!node.exhausted && absent(node.input)) throw new TypeError("Live RegExp iterator requires input.");
+    state(node.state);
+  } else if (node.kind === "guest-collection-iterator") {
+    fields(node, ["kind", "collectionKind", "method", "collection", "index", "exhausted", "state"]);
+    if (!["map", "set"].includes(String(node.collectionKind)) || !["keys", "values", "entries"].includes(String(node.method)) || typeof node.exhausted !== "boolean")
+      throw new TypeError("Invalid collection iterator state.");
+    integer(node.index);
+    if (absent(node.collection)) {
+      if (!node.exhausted || node.index !== 0) throw new TypeError("Invalid exhausted collection iterator.");
+    } else reference(node.collection, [String(node.collectionKind)]);
+    state(node.state);
   } else if (node.kind === "string-iterator") {
     fields(node, ["kind", "input", "index", "state"]);
     const index = integer(node.index);
@@ -29035,6 +29135,7 @@ function measureSandboxData(values, options = {}) {
       for (const [key, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {
         usage += key.length + 1;
         if ("value" in descriptor) visit(descriptor.value, depth + 1);
+        else for (const closure of retainedAccessorClosures(descriptor)) visit(closure, depth + 1);
       }
       return;
     }
@@ -29043,6 +29144,7 @@ function measureSandboxData(values, options = {}) {
       for (const [key, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {
         usage += key.length + 1;
         if ("value" in descriptor) visit(descriptor.value, depth + 1);
+        else for (const closure of retainedAccessorClosures(descriptor)) visit(closure, depth + 1);
       }
       return;
     }
@@ -29230,8 +29332,8 @@ function copyToSandbox(value, state, path = "<root>", cloneSandboxCollections =
     throw new TypeError("Array iterators require a portable guest snapshot, not a data copy.");
   }
   if (isSandboxRegExpIterator(value)) {
-    if (hasGuestObjectState(value)) throw new TypeError("Guest prototype links and custom descriptors cannot be copied as data.");
     if (!cloneSandboxCollections) return value;
+    if (hasGuestObjectState(value)) throw new TypeError("Guest prototype links and custom descriptors cannot be copied as data.");
     const existing = state.seen.get(value);
     if (existing !== void 0) return existing;
     const snapshot = regexpIteratorState(value);
@@ -29246,8 +29348,8 @@ function copyToSandbox(value, state, path = "<root>", cloneSandboxCollections =
     return copy;
   }
   if (isSandboxCollectionIterator(value)) {
-    if (hasGuestObjectState(value)) throw new TypeError("Guest prototype links and custom descriptors cannot be copied as data.");
     if (!cloneSandboxCollections) return value;
+    if (hasGuestObjectState(value)) throw new TypeError("Guest prototype links and custom descriptors cannot be copied as data.");
     const existing = state.seen.get(value);
     if (existing !== void 0) return existing;
     const snapshot = snapshotCollectionIterator(value);
@@ -44091,4 +44193,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-N3C4UP54.js.map
+//# sourceMappingURL=chunk-XJL73BPS.js.map