@poe-platform/safe-js 0.1.88 → 0.1.89

package/dist/safe-js/chunks/{chunk-AD7V4BRD.js → chunk-KWV4LCEU.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-5J6BX3HD.js";
+} from "./chunk-M4M56OCI.js";
 
 // packages/safe-js/src/migrate.ts
 import { createHash } from "node:crypto";
@@ -8245,4 +8245,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-AD7V4BRD.js.map
+//# sourceMappingURL=chunk-KWV4LCEU.js.map

package/dist/safe-js/chunks/{chunk-5J6BX3HD.js → chunk-M4M56OCI.js}

@@ -6997,6 +6997,27 @@ function getSandboxPrototype(value, budget) {
   if (prototypes.has(value)) return prototypes.get(value) ?? null;
   return budget !== void 0 && isPrototypeRecord(value) ? intrinsicPrototypes.get(budget) ?? null : null;
 }
+function getSandboxDataProperty(value, key, budget) {
+  let current = value;
+  let depth = 0;
+  while (typeof current === "object" && current !== null) {
+    if (isGuestHostObject(current)) return getHostObjectMember(current, String(key));
+    if (isGuestClosure(current)) return getGuestFunctionProperty(current, String(key));
+    if (isSandboxClosure(current)) {
+      const properties = current.properties;
+      return properties !== void 0 && Object.hasOwn(properties, String(key)) ? properties[String(key)] : void 0;
+    }
+    if (isSandboxMap(current) || isSandboxSet(current) || isSandboxPromise(current) || isSandboxRegex(current) || isSandboxGenerator(current))
+      return void 0;
+    if (Object.hasOwn(current, String(key))) return current[String(key)];
+    current = getSandboxPrototype(current, budget);
+    if (current !== null) {
+      budget?.visitNode();
+      assertSandboxDataDepth(++depth);
+    }
+  }
+  return void 0;
+}
 function setSandboxPrototype(value, prototype, budget) {
   if (budget !== void 0 && intrinsicPrototypes.get(budget) === value && prototype !== null) {
     throw new TypeError("Object.prototype has an immutable null prototype.");
@@ -8157,6 +8178,119 @@ function isCounter(value) {
 // packages/safe-js/src/interp/cancel.ts
 import { AsyncLocalStorage as AsyncLocalStorage4 } from "node:async_hooks";
 
+// packages/safe-js/src/interp/string-coercion.ts
+function sandboxString(value, budget, context, joining = /* @__PURE__ */ new Set()) {
+  if (value === null || typeof value !== "object") {
+    if (typeof value === "function") throw new TypeError("Expected a sandbox value.");
+    return budget.allocateString(String(value));
+  }
+  return stringifyObject(value, budget, context, joining);
+}
+async function stringifyObject(value, budget, context, joining) {
+  const leaveCall = budget.enterCall();
+  try {
+    budget.visitNode();
+    for (const name of ["toString", "valueOf"]) {
+      const descriptor = Object.getOwnPropertyDescriptor(value, name);
+      let result;
+      if (descriptor === void 0) {
+        if (name === "valueOf") continue;
+        result = await defaultToString(value, budget, context, joining);
+      } else {
+        const hook = ownDataValue(value, name);
+        if (!isSandboxClosure(hook)) continue;
+        if (context?.invokeClosure === void 0) {
+          throw new TypeError("String hooks require a sandbox call context.");
+        }
+        result = await context.invokeClosure(hook, [], value);
+      }
+      if (result === null || typeof result !== "object") {
+        return sandboxString(result, budget, context, joining);
+      }
+    }
+    throw new TypeError("Cannot convert object to primitive value");
+  } finally {
+    leaveCall();
+  }
+}
+async function defaultToString(value, budget, context, joining) {
+  if (isSandboxDate(value)) return budget.allocateString(dateString(value));
+  if (Array.isArray(value) || isFloat32Array(value)) {
+    if (Object.hasOwn(value, "join")) {
+      const join = ownDataValue(value, "join");
+      if (!isSandboxClosure(join))
+        return isFloat32Array(value) ? "[object Float32Array]" : "[object Array]";
+      if (context?.invokeClosure === void 0) {
+        throw new TypeError("String hooks require a sandbox call context.");
+      }
+      return context.invokeClosure(join, [], value);
+    }
+    if (joining.has(value)) return "";
+    joining.add(value);
+    try {
+      const length = isFloat32Array(value) ? float32Storage(value).length : value.length;
+      let text = "";
+      for (let index = 0; index < length; index++) {
+        budget.visitNode();
+        const element = ownDataValue(value, String(index));
+        const part = element === null || element === void 0 ? "" : await sandboxString(element, budget, context, joining);
+        text = budget.allocateString(text + (index === 0 ? "" : ",") + part);
+      }
+      return text;
+    } finally {
+      joining.delete(value);
+    }
+  }
+  if (sandboxErrorTypes.has(value)) {
+    const nameValue = ownDataValue(value, "name");
+    const name = nameValue === void 0 ? "Error" : await sandboxString(nameValue, budget, context, joining);
+    const messageValue = ownDataValue(value, "message");
+    const message = messageValue === void 0 ? "" : await sandboxString(messageValue, budget, context, joining);
+    return name === "" ? message : message === "" ? name : `${name}: ${message}`;
+  }
+  return isSandboxPromise(value) ? "[object Promise]" : "[object Object]";
+}
+function ownDataValue(value, name) {
+  const descriptor = Object.getOwnPropertyDescriptor(value, name);
+  if (descriptor !== void 0 && !Object.hasOwn(descriptor, "value")) {
+    throw new TypeError("String conversion requires sandbox data properties.");
+  }
+  return descriptor?.value;
+}
+
+// packages/safe-js/src/interp/property-key.ts
+async function toPropertyKey(value, budget, context) {
+  if (typeof value === "string") return value;
+  const invocation = context.invokeClosure === void 0 ? {
+    ...context,
+    invokeClosure: async (closure, args, thisValue) => {
+      const leaveCall = budget.enterCall();
+      try {
+        const result = closure.call(args, { ...invocation, thisValue });
+        if (isSandboxPromise(result)) {
+          await result.synchronousPrefix;
+          return result;
+        }
+        return await result;
+      } finally {
+        leaveCall();
+      }
+    }
+  } : context;
+  if (typeof value === "object" && value !== null && !Array.isArray(value) && !isSandboxClosure(value) && !isSandboxMap(value) && !isSandboxSet(value) && !isSandboxPromise(value) && !isSandboxRegex(value) && !isSandboxDate(value) && !isFloat32Array(value) && !isSandboxGenerator(value) && !isGuestHostObject(value)) {
+    for (const name of ["toString", "valueOf"]) {
+      const method = getSandboxDataProperty(value, name, budget);
+      if (!isSandboxClosure(method)) continue;
+      const primitive = await invocation.invokeClosure(method, [], value);
+      if (primitive === null || typeof primitive !== "object") {
+        return budget.allocateString(String(primitive));
+      }
+    }
+    throw new TypeError("Cannot convert object to primitive value.");
+  }
+  return sandboxString(value, budget, invocation);
+}
+
 // packages/safe-js/src/interp/exceptions.ts
 var capturedExceptionBrand = /* @__PURE__ */ Symbol("CapturedException");
 async function evaluateThrowStatement(node, context, evaluateNode2) {
@@ -8547,12 +8681,13 @@ async function resolvePatternPropertyKey(property, context, evaluateNode2) {
       result: computedKey
     };
   }
-  if (typeof computedKey.value !== "string" && typeof computedKey.value !== "number") {
-    throw new TypeError("Computed catch binding keys must evaluate to a string or number.");
-  }
   return {
     ok: true,
-    value: computedKey.value
+    value: await (context.toPropertyKey?.(computedKey.value) ?? toPropertyKey(
+      computedKey.value,
+      context.budget,
+      { stack: context.callStack, thisValue: void 0 }
+    ))
   };
 }
 function getStaticPropertyKey(property) {
@@ -23089,17 +23224,17 @@ async function bindMemberExpression(pattern, value, scope, context) {
   if (object.kind !== "normal") {
     return { ok: false, result: object };
   }
+  const property = pattern.computed ? await context.evaluate(pattern.property) : { kind: "normal", value: getStaticPropertyName(pattern.property) };
+  if (property.kind !== "normal") {
+    return { ok: false, result: property };
+  }
   if (object.value === null || object.value === void 0) {
     throw new TypeError("Cannot assign properties of null or undefined.");
   }
   if (!isIndexableValue(object.value)) {
     throw new TypeError("Assignment expressions require a sandbox object property.");
   }
-  const property = pattern.computed ? await evaluateProperty(pattern.property, context) : { ok: true, value: getStaticPropertyName(pattern.property) };
-  if (!property.ok) {
-    return property;
-  }
-  context.setProperty(object.value, property.value, value);
+  context.setProperty(object.value, await context.toPropertyKey(property.value), value);
   return { ok: true };
 }
 async function evaluatePatternKey(property, context) {
@@ -23110,10 +23245,7 @@ async function evaluateProperty(property, context) {
   if (result.kind !== "normal") {
     return { ok: false, result };
   }
-  if (typeof result.value !== "string" && typeof result.value !== "number") {
-    throw new TypeError("Computed property access requires a string or number key.");
-  }
-  return { ok: true, value: result.value };
+  return { ok: true, value: await context.toPropertyKey(result.value) };
 }
 function getStaticPropertyName(property) {
   if (property.type === "Identifier") {
@@ -23185,86 +23317,6 @@ function hoistVarDeclarations(node, scope) {
   }
 }
 
-// packages/safe-js/src/interp/string-coercion.ts
-function sandboxString(value, budget, context, joining = /* @__PURE__ */ new Set()) {
-  if (value === null || typeof value !== "object") {
-    if (typeof value === "function") throw new TypeError("Expected a sandbox value.");
-    return budget.allocateString(String(value));
-  }
-  return stringifyObject(value, budget, context, joining);
-}
-async function stringifyObject(value, budget, context, joining) {
-  const leaveCall = budget.enterCall();
-  try {
-    budget.visitNode();
-    for (const name of ["toString", "valueOf"]) {
-      const descriptor = Object.getOwnPropertyDescriptor(value, name);
-      let result;
-      if (descriptor === void 0) {
-        if (name === "valueOf") continue;
-        result = await defaultToString(value, budget, context, joining);
-      } else {
-        const hook = ownDataValue(value, name);
-        if (!isSandboxClosure(hook)) continue;
-        if (context?.invokeClosure === void 0) {
-          throw new TypeError("String hooks require a sandbox call context.");
-        }
-        result = await context.invokeClosure(hook, [], value);
-      }
-      if (result === null || typeof result !== "object") {
-        return sandboxString(result, budget, context, joining);
-      }
-    }
-    throw new TypeError("Cannot convert object to primitive value");
-  } finally {
-    leaveCall();
-  }
-}
-async function defaultToString(value, budget, context, joining) {
-  if (isSandboxDate(value)) return budget.allocateString(dateString(value));
-  if (Array.isArray(value) || isFloat32Array(value)) {
-    if (Object.hasOwn(value, "join")) {
-      const join = ownDataValue(value, "join");
-      if (!isSandboxClosure(join))
-        return isFloat32Array(value) ? "[object Float32Array]" : "[object Array]";
-      if (context?.invokeClosure === void 0) {
-        throw new TypeError("String hooks require a sandbox call context.");
-      }
-      return context.invokeClosure(join, [], value);
-    }
-    if (joining.has(value)) return "";
-    joining.add(value);
-    try {
-      const length = isFloat32Array(value) ? float32Storage(value).length : value.length;
-      let text = "";
-      for (let index = 0; index < length; index++) {
-        budget.visitNode();
-        const element = ownDataValue(value, String(index));
-        const part = element === null || element === void 0 ? "" : await sandboxString(element, budget, context, joining);
-        text = budget.allocateString(text + (index === 0 ? "" : ",") + part);
-      }
-      return text;
-    } finally {
-      joining.delete(value);
-    }
-  }
-  if (sandboxErrorTypes.has(value)) {
-    const nameValue = ownDataValue(value, "name");
-    const name = nameValue === void 0 ? "Error" : await sandboxString(nameValue, budget, context, joining);
-    const messageValue = ownDataValue(value, "message");
-    const message = messageValue === void 0 ? "" : await sandboxString(messageValue, budget, context, joining);
-    return name === "" ? message : message === "" ? name : `${name}: ${message}`;
-  }
-  return isSandboxPromise(value) ? "[object Promise]" : "[object Object]";
-}
-function ownDataValue(value, name) {
-  const descriptor = Object.getOwnPropertyDescriptor(value, name);
-  if (descriptor !== void 0 && !Object.hasOwn(descriptor, "value")) {
-    throw new TypeError("String conversion requires sandbox data properties.");
-  }
-  return descriptor?.value;
-}
-
 // packages/safe-js/src/interp/methods/array.ts
 var activeArrayCallbacks = /* @__PURE__ */ new WeakMap();
 var arrayMethodNames = /* @__PURE__ */ new Set([
@@ -26217,7 +26269,7 @@ async function evaluateBinaryExpression(node, context) {
     if (typeof right.value !== "object" || right.value === null) {
       throw new TypeError("Right-hand side of 'in' must be an object.");
     }
-    leftValue = await toPropertyKey(leftValue, context);
+    leftValue = await toPropertyKey(leftValue, context.budget, createCoercionContext(context));
   }
   const value = applyBinaryOperator(node, leftValue, right.value, context);
   return {
@@ -26307,7 +26359,15 @@ async function evaluateMemberAssignmentExpression(node, context) {
   if (member.kind === "nullish") {
     throw new TypeError("Cannot assign properties of null or undefined.");
   }
-  const current = node.operator === "=" ? void 0 : getPropertyValue(member.object, member.property, context);
+  let property;
+  let current = void 0;
+  if (node.operator !== "=") {
+    if (member.object === null || member.object === void 0) {
+      throw new TypeError("Cannot assign properties of null or undefined.");
+    }
+    property = await toPropertyKey(member.property, context.budget, createCoercionContext(context));
+    current = getPropertyValue(member.object, property, context);
+  }
   if (node.operator === "&&=" && !isTruthy(current)) {
     return {
       kind: "normal",
@@ -26334,7 +26394,11 @@ async function evaluateMemberAssignmentExpression(node, context) {
     return right;
   }
   const value = node.operator === "=" || node.operator === "&&=" || node.operator === "||=" || node.operator === "??=" ? right.value : await applyCompoundAssignmentOperator(node.operator, current, right.value, context);
-  setSandboxProperty(member.object, member.property, value, context.budget);
+  if (member.object === null || member.object === void 0) {
+    throw new TypeError("Cannot assign properties of null or undefined.");
+  }
+  property ??= await toPropertyKey(member.property, context.budget, createCoercionContext(context));
+  setSandboxProperty(member.object, property, value, context.budget);
   return {
     kind: "normal",
     hasValue: true,
@@ -27273,7 +27337,10 @@ async function evaluateThrowStatement2(node, context) {
   return evaluateThrowStatement(node, context, evaluateNode);
 }
 async function evaluateTryStatement2(node, context) {
-  return evaluateTryStatement(node, context, evaluateNode);
+  return evaluateTryStatement(node, {
+    ...context,
+    toPropertyKey: (value) => toPropertyKey(value, context.budget, createCoercionContext(context))
+  }, evaluateNode);
 }
 async function evaluateUnaryExpression(node, context) {
   if (node.operator === "delete") {
@@ -27318,8 +27385,8 @@ async function evaluateDeleteExpression(node, context) {
   if (member.kind === "completion") {
     return member.result;
   }
-  if (member.kind === "nullish") {
-    if (node.argument.optional) {
+  if (member.kind === "nullish" || member.object === null || member.object === void 0) {
+    if (member.kind === "nullish" && node.argument.optional) {
       return {
         kind: "normal",
         hasValue: true,
@@ -27331,7 +27398,8 @@ async function evaluateDeleteExpression(node, context) {
   if (!isIndexableSandboxValue(member.object)) {
     throw new TypeError("Unary operator 'delete' requires a sandbox object property.");
   }
-  const deleted = deleteSandboxProperty(member.object, member.property);
+  const property = await toPropertyKey(member.property, context.budget, createCoercionContext(context));
+  const deleted = deleteSandboxProperty(member.object, property);
   return {
     kind: "normal",
     hasValue: true,
@@ -27379,14 +27447,15 @@ async function evaluateMemberUpdateExpression(node, context) {
   if (member.kind === "completion") {
     return member.result;
   }
-  if (member.kind === "nullish") {
+  if (member.kind === "nullish" || member.object === null || member.object === void 0) {
     throw new TypeError("Cannot update properties of null or undefined.");
   }
+  const property = await toPropertyKey(member.property, context.budget, createCoercionContext(context));
   const current = toNumber(
-    await toNumericPrimitive(getPropertyValue(member.object, member.property, context), context)
+    await toNumericPrimitive(getPropertyValue(member.object, property, context), context)
   );
   const next = node.operator === "++" ? current + 1 : current - 1;
-  setSandboxProperty(member.object, member.property, next, context.budget);
+  setSandboxProperty(member.object, property, next, context.budget);
   return {
     kind: "normal",
     hasValue: true,
@@ -27397,14 +27466,14 @@ async function evaluateMemberExpression(node, context) {
   const member = await evaluateMemberAccess(node, context);
   if (member.kind === "error") return member;
   if (member.kind === "completion") return member.result;
-  if (member.kind === "nullish") {
-    if (node.optional) return { kind: "normal", hasValue: true, value: void 0 };
+  if (member.kind === "nullish" || member.object === null || member.object === void 0) {
+    if (member.kind === "nullish" && node.optional) return { kind: "normal", hasValue: true, value: void 0 };
     throw new TypeError("Cannot read properties of null or undefined.");
   }
   return {
     kind: "normal",
     hasValue: true,
-    value: getPropertyValue(member.object, member.property, context)
+    value: getPropertyValue(member.object, await toPropertyKey(member.property, context.budget, createCoercionContext(context)), context)
   };
 }
 function getPropertyValue(target, property, context) {
@@ -27429,6 +27498,7 @@ function createPatternContext(context, scope = context.scope, evaluate = evaluat
   const evaluationContext = { ...context, scope };
   return {
     evaluate: (node) => evaluate(node, evaluationContext),
+    toPropertyKey: (value) => toPropertyKey(value, context.budget, createCoercionContext(evaluationContext)),
     getProperty: (value, key) => getPropertyValue(value, key, evaluationContext),
     setProperty: (target, key, value) => setSandboxProperty(target, key, value, context.budget)
   };
@@ -27523,21 +27593,8 @@ async function evaluateMemberAccess(node, context) {
       kind: "nullish"
     };
   }
-  const property = node.computed ? await evaluateMemberProperty(node.property, context) : { ok: true, value: getStaticPropertyName2(node.property) };
-  if (!property.ok) {
-    return property.result.kind === "error" ? {
-      kind: "error",
-      error: property.result.error
-    } : {
-      kind: "completion",
-      result: property.result
-    };
-  }
-  if (object.value === null || object.value === void 0) {
-    return {
-      kind: "nullish"
-    };
-  }
+  const property = node.computed ? await evaluateNode(node.property, context) : { kind: "normal", value: getStaticPropertyName2(node.property) };
+  if (property.kind !== "normal") return { kind: "completion", result: property };
   return {
     kind: "resolved",
     object: object.value,
@@ -27552,13 +27609,10 @@ async function evaluateMemberProperty(node, context) {
       result: property
     };
   }
-  if (typeof property.value === "string" || typeof property.value === "number") {
-    return {
-      ok: true,
-      value: property.value
-    };
-  }
-  throw new TypeError("Computed property access requires a string or number key.");
+  return {
+    ok: true,
+    value: await toPropertyKey(property.value, context.budget, createCoercionContext(context))
+  };
 }
 async function evaluateObjectPropertyKey(node, context) {
   if (!node.computed) {
@@ -27582,15 +27636,15 @@ async function evaluateMemberCallExpression(node, context) {
   if (node.callee.type !== "MemberExpression") {
     throw new TypeError("Expected member call expression.");
   }
-  const member = await evaluateMemberAccess(node.callee, context);
-  if (member.kind === "error") {
-    return member;
+  const reference = await evaluateMemberAccess(node.callee, context);
+  if (reference.kind === "error") {
+    return reference;
   }
-  if (member.kind === "completion") {
-    return member.result;
+  if (reference.kind === "completion") {
+    return reference.result;
   }
-  if (member.kind === "nullish") {
-    if (node.optional || node.callee.optional) {
+  if (reference.kind === "nullish" || reference.object === null || reference.object === void 0) {
+    if (reference.kind === "nullish") {
       return {
         kind: "normal",
         hasValue: true,
@@ -27599,6 +27653,10 @@ async function evaluateMemberCallExpression(node, context) {
     }
     throw new TypeError("Cannot read properties of null or undefined.");
   }
+  const member = {
+    ...reference,
+    property: await toPropertyKey(reference.property, context.budget, createCoercionContext(context))
+  };
   if (typeof member.object === "string" && isStringMethodName(member.property)) {
     return evaluateStringMethodCall(node, member.object, member.property, context);
   }
@@ -27930,23 +27988,13 @@ function applyBinaryOperator(node, left, right, context) {
       return hasSandboxProperty(right, left, context);
   }
 }
-async function toPropertyKey(value, context) {
-  if (isPlainSandboxObject(value) && !isSandboxDate(value) && !isFloat32Array(value) && !isSandboxGenerator(value) && !isGuestHostObject(value)) {
-    for (const name of ["toString", "valueOf"]) {
-      const method = getMemberValue(value, name, context);
-      if (!isSandboxClosure(method)) continue;
-      const primitive = await invokeSandboxClosure(method, [], context, context.callStack, void 0, value);
-      if (primitive === null || typeof primitive !== "object") {
-        return context.budget.allocateString(String(primitive));
-      }
-    }
-    throw new TypeError("Cannot convert object to primitive value.");
-  }
-  return sandboxString(value, context.budget, {
+function createCoercionContext(context) {
+  return {
     stack: context.callStack,
     thisValue: void 0,
+    compilation: context.compilation,
     invokeClosure: (closure, args, thisValue) => invokeSandboxClosure(closure, args, context, context.callStack, void 0, thisValue)
-  });
+  };
 }
 function hasSandboxProperty(value, key, context) {
   let current = value;
@@ -32818,4 +32866,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-5J6BX3HD.js.map
+//# sourceMappingURL=chunk-M4M56OCI.js.map