@poe-platform/safe-js 0.1.725 → 0.1.726

package/README.md

@@ -53,6 +53,18 @@ console.log(result.returnValue);
 
 Scripts have no ambient `process`, `require`, `fetch`, or filesystem access. Host functions still execute with the host's privileges. Register only the capabilities the script needs; this is not OS or process isolation.
 
+`new Promise(executor)` is supported, as are the Promise static helpers and
+`then`, `catch`, and `finally`. The executor runs synchronously with `resolve`
+and `reject`; its return value is ignored, thrown errors reject the promise,
+and the first resolve or reject call wins. Resolving adopts promises and
+thenables; resolving a promise with itself rejects with a `TypeError`.
+Executor work uses the interpreter's existing budgets, and budget exhaustion
+remains fatal even after settlement. For example,
+`await run("return await new Promise(resolve => resolve(42));")` returns a
+successful result with `returnValue: 42`. Browser event and timer adapters
+require the host to grant those capabilities; Promise construction does not
+provide ambient browser APIs.
+
 ```js
 const result = await run(`
   function Counter(value) { this.value = value; }

package/dist/safe-js/chunks/{chunk-QU2F65UQ.js → chunk-4VWGTW5F.js}

@@ -39,7 +39,7 @@ import {
   sandboxErrorTypes,
   syntaxDiagnostics,
   templateRealms
-} from "./chunk-KOO6YGQG.js";
+} from "./chunk-T2HKPVB3.js";
 
 // packages/safe-js/src/interp/native-promise-properties.ts
 import { types } from "node:util";
@@ -49338,4 +49338,4 @@ authorization of the copyright holder.
 SPDX-License-Identifier: Unicode-3.0
 
 */
-//# sourceMappingURL=chunk-QU2F65UQ.js.map
+//# sourceMappingURL=chunk-4VWGTW5F.js.map

package/dist/safe-js/chunks/{chunk-V2ESZF34.js → chunk-EYIWCEOM.js}

@@ -2,7 +2,7 @@ import {
   hashParsedAst,
   hashSource,
   validateSnapshotMigration
-} from "./chunk-Y7LSEUWV.js";
+} from "./chunk-QPG4Q7NQ.js";
 import {
   SnapshotValidationError,
   assertSnapshotInactive,
@@ -15,13 +15,13 @@ import {
   validateGuestFunctionAst,
   validateRuntimeSnapshotDescriptors,
   validateTemplateObjects
-} from "./chunk-QU2F65UQ.js";
+} from "./chunk-4VWGTW5F.js";
 import {
   ParseError,
   parseExecutableModule,
   parseModule,
   replaceErrorStack
-} from "./chunk-KOO6YGQG.js";
+} from "./chunk-T2HKPVB3.js";
 
 // packages/safe-js/src/restore.ts
 var SnapshotMismatchError = class extends Error {
@@ -111,4 +111,4 @@ export {
   SnapshotMismatchError,
   restore
 };
-//# sourceMappingURL=chunk-V2ESZF34.js.map
+//# sourceMappingURL=chunk-EYIWCEOM.js.map

package/dist/safe-js/chunks/{chunk-YRALPIEZ.js → chunk-JVWED75K.js}

@@ -1,6 +1,6 @@
 import {
   isSandboxClosure
-} from "./chunk-QU2F65UQ.js";
+} from "./chunk-4VWGTW5F.js";
 
 // packages/safe-js/src/lint/runtime-modules.ts
 var AsyncFunction = (async () => void 0).constructor;
@@ -34,4 +34,4 @@ function isAsyncRuntimeExport(value) {
 export {
   createLintModulesFromRuntimeRegistry
 };
-//# sourceMappingURL=chunk-YRALPIEZ.js.map
+//# sourceMappingURL=chunk-JVWED75K.js.map

package/dist/safe-js/chunks/{chunk-PKRGP34X.js → chunk-LAULA6ZA.js}

@@ -1,10 +1,10 @@
 import {
   restore
-} from "./chunk-V2ESZF34.js";
+} from "./chunk-EYIWCEOM.js";
 import {
   attachDumpController,
   createDumpController
-} from "./chunk-FYSWUSHN.js";
+} from "./chunk-MLXEO7D4.js";
 import {
   getOwnErrorCode,
   hasOwnErrorCode
@@ -12,7 +12,7 @@ import {
 import {
   hashParsedAst,
   hashSource
-} from "./chunk-Y7LSEUWV.js";
+} from "./chunk-QPG4Q7NQ.js";
 import {
   DUMP_FORMAT_VERSION,
   EXECUTION_SEMANTICS,
@@ -100,7 +100,7 @@ import {
   withSandboxPromiseRejectionTracker,
   wrapCallerInjectedBindings,
   wrapCancelableBindings
-} from "./chunk-QU2F65UQ.js";
+} from "./chunk-4VWGTW5F.js";
 import {
   Budget,
   CompileScope,
@@ -115,7 +115,7 @@ import {
   parseSourceModule,
   replaceErrorStack,
   safeAddEvent
-} from "./chunk-KOO6YGQG.js";
+} from "./chunk-T2HKPVB3.js";
 
 // packages/safe-js/src/realm.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
@@ -2825,4 +2825,4 @@ export {
   UnhandledRejectionError,
   run
 };
-//# sourceMappingURL=chunk-PKRGP34X.js.map
+//# sourceMappingURL=chunk-LAULA6ZA.js.map

package/dist/safe-js/chunks/{chunk-O2CPPE6M.js → chunk-MFPMOTC3.js}

@@ -1,6 +1,6 @@
 import {
   deepCopyToSandbox
-} from "./chunk-QU2F65UQ.js";
+} from "./chunk-4VWGTW5F.js";
 
 // packages/safe-js/src/modules/harness.ts
 function makeHarnessModule(frontmatter, meta) {
@@ -52,4 +52,4 @@ ${prompt}`;
 export {
   makeHarnessModule
 };
-//# sourceMappingURL=chunk-O2CPPE6M.js.map
+//# sourceMappingURL=chunk-MFPMOTC3.js.map

package/dist/safe-js/chunks/{chunk-FYSWUSHN.js → chunk-MLXEO7D4.js}

@@ -1,10 +1,10 @@
 import {
   SnapshotNotReadyError,
   serializeSafeJSSnapshot
-} from "./chunk-QU2F65UQ.js";
+} from "./chunk-4VWGTW5F.js";
 import {
   SandboxError
-} from "./chunk-KOO6YGQG.js";
+} from "./chunk-T2HKPVB3.js";
 
 // packages/safe-js/src/snapshot/dump.ts
 var RUN_DUMP_CONTROLLER = /* @__PURE__ */ Symbol("SafeJS.run-dump-controller");
@@ -195,4 +195,4 @@ export {
   dumpCurrent,
   serializeRunSnapshot
 };
-//# sourceMappingURL=chunk-FYSWUSHN.js.map
+//# sourceMappingURL=chunk-MLXEO7D4.js.map

package/dist/safe-js/chunks/{chunk-Y7LSEUWV.js → chunk-QPG4Q7NQ.js}

@@ -2,14 +2,14 @@ import {
   HostCallJournal,
   decodeReplayData,
   validateSnapshotData
-} from "./chunk-QU2F65UQ.js";
+} from "./chunk-4VWGTW5F.js";
 import {
   CompileScope,
   SandboxError,
   functionSources,
   parse,
   parseModule
-} from "./chunk-KOO6YGQG.js";
+} from "./chunk-T2HKPVB3.js";
 
 // packages/safe-js/src/parse/hash.ts
 var FNV_OFFSET_BASIS = 2166136261;
@@ -219,4 +219,4 @@ export {
   validateMigrationReconciliation,
   validateSnapshotMigration
 };
-//# sourceMappingURL=chunk-Y7LSEUWV.js.map
+//# sourceMappingURL=chunk-QPG4Q7NQ.js.map

package/dist/safe-js/chunks/{chunk-KOO6YGQG.js → chunk-T2HKPVB3.js}

@@ -2009,8 +2009,30 @@ var stride = 3;
 var legacyEscape = 256;
 var tokenCacheSize = 256;
 var CompactTokens = class {
-  constructor(sourcePositions) {
+  constructor(sourcePositions, lazyPositions = false) {
     this.sourcePositions = sourcePositions;
+    if (!lazyPositions) return;
+    class ParserToken {
+      constructor(type, value, start, end) {
+        this.type = type;
+        this.value = value;
+        this.#start = start;
+        this.#end = end;
+      }
+      type;
+      value;
+      #start;
+      #end;
+      get start() {
+        if (typeof this.#start === "number") this.#start = sourcePositions.position(this.#start);
+        return this.#start;
+      }
+      get end() {
+        if (typeof this.#end === "number") this.#end = sourcePositions.position(this.#end);
+        return this.#end;
+      }
+    }
+    this.parserToken = (type, value, start, end) => new ParserToken(type, value, start, end);
   }
   sourcePositions;
   rows = new Uint32Array(1024 * stride);
@@ -2018,6 +2040,7 @@ var CompactTokens = class {
   templates = /* @__PURE__ */ new Map();
   tokens = /* @__PURE__ */ new Map();
   last;
+  parserToken;
   // Only indexing, iteration, length, push and at are used by the lexer/parser.
   // Historical tokens are materialized on demand in a bounded cache.
   indexed = new Proxy([], {
@@ -2065,7 +2088,12 @@ var CompactTokens = class {
     if (cached !== void 0) return cached;
     const base = index * stride;
     const bits = this.rows[base + 2];
-    const token = {
+    const token = this.parserToken?.(
+      types[bits & 255],
+      this.values[index],
+      this.rows[base],
+      this.rows[base + 1]
+    ) ?? {
       type: types[bits & 255],
       value: this.values[index],
       start: this.sourcePositions.position(this.rows[base]),
@@ -2194,8 +2222,8 @@ function tokenize(source, options = {}) {
   const lexer = new Lexer(source, options);
   return lexer.tokenize();
 }
-function tokenizeCompact(source, options, positions) {
-  const tokens = new CompactTokens(positions);
+function tokenizeCompact(source, options, positions, lazyPositions = false) {
+  const tokens = new CompactTokens(positions, lazyPositions);
   new Lexer(source, { ...options, sharedPositions: true }, tokens.indexed).tokenize();
   return tokens.finish();
 }
@@ -4233,7 +4261,7 @@ function parseSourceModule(source, filename = "<input>", owner, options = {}) {
       throw new SandboxError({ budget: "stringLength", current: source.length, limit });
     owner?.budget.visitNode(source.length);
     const tokenOptions = { allowRegexLiterals: true, statementList: true, compilation, sharedPositions: options.sharedPositions };
-    const tokens = options.compactAst ? tokenizeCompact(source, tokenOptions, new CompactSourcePositions(source)) : tokenize(source, tokenOptions);
+    const tokens = options.compactAst ? tokenizeCompact(source, tokenOptions, new CompactSourcePositions(source), true) : tokenize(source, tokenOptions);
     parser = new Parser(
       tokens,
       source,
@@ -4323,7 +4351,7 @@ function parseEvalScript(source, context = {}, owner, filename = "<eval>", optio
       allowHtmlComments: true,
       compilation
     };
-    const tokens = options.compactAst ? tokenizeCompact(source, tokenOptions, new CompactSourcePositions(source)) : tokenize(source, tokenOptions);
+    const tokens = options.compactAst ? tokenizeCompact(source, tokenOptions, new CompactSourcePositions(source), true) : tokenize(source, tokenOptions);
     const parser = new Parser(tokens, source, compilation, "normal", {
       grammar,
       newTarget: context.newTarget === true,
@@ -5012,30 +5040,50 @@ var Parser = class {
     return { type: "BlockStatement", body: [statement], span: statement.span };
   }
   parseIfStatement() {
-    if (this.ifStatementDepth >= MAX_IF_STATEMENT_DEPTH) {
-      const token = this.currentToken();
-      throw new Error(
-        `If statement nesting limit exceeded at line ${token.start.line}, column ${token.start.column}.`
-      );
-    }
-    this.ifStatementDepth += 1;
+    const pending = [];
+    let entered = 0;
     try {
-      const ifToken = this.expectKeyword("if");
-      this.expectPunctuator("(");
-      const test = this.parseExpression({ allowSequence: true }).node;
-      this.expectPunctuator(")");
-      const consequent = this.parseIfClause();
-      const elseToken = this.consumeKeyword("else");
-      const alternate = elseToken === void 0 ? void 0 : this.parseIfClause();
-      return {
-        type: "IfStatement",
-        test,
-        consequent,
-        alternate,
-        span: createSpan2(ifToken.start, alternate?.span.end ?? consequent.span.end)
-      };
+      for (; ; ) {
+        if (this.ifStatementDepth >= MAX_IF_STATEMENT_DEPTH) {
+          const token2 = this.currentToken();
+          throw new Error(
+            `If statement nesting limit exceeded at line ${token2.start.line}, column ${token2.start.column}.`
+          );
+        }
+        this.ifStatementDepth++;
+        entered++;
+        const token = this.expectKeyword("if");
+        this.expectPunctuator("(");
+        const test = this.parseExpression({ allowSequence: true }).node;
+        this.expectPunctuator(")");
+        const consequent = this.parseIfClause();
+        const hasElse = this.consumeKeyword("else") !== void 0;
+        if (hasElse && this.currentToken().type === "keyword" && this.currentToken().value === "if") {
+          pending.push({ token, test, consequent });
+          continue;
+        }
+        const alternate = hasElse ? this.parseIfClause() : void 0;
+        let result = {
+          type: "IfStatement",
+          test,
+          consequent,
+          alternate,
+          span: createSpan2(token.start, alternate?.span.end ?? consequent.span.end)
+        };
+        while (pending.length > 0) {
+          const parent = pending.pop();
+          result = {
+            type: "IfStatement",
+            test: parent.test,
+            consequent: parent.consequent,
+            alternate: result,
+            span: createSpan2(parent.token.start, result.span.end)
+          };
+        }
+        return result;
+      }
     } finally {
-      this.ifStatementDepth -= 1;
+      this.ifStatementDepth -= entered;
     }
   }
   parseSwitchStatement() {
@@ -8661,4 +8709,4 @@ export {
   Float16Array2 as Float16Array,
   numericTypedArrayConstructors
 };
-//# sourceMappingURL=chunk-KOO6YGQG.js.map
+//# sourceMappingURL=chunk-T2HKPVB3.js.map