bonsai-js 0.2.0 → 0.3.0

package/dist/execution-context-DqYC3L92.mjs

@@ -0,0 +1,564 @@
+import { i as ExpressionError, n as BonsaiSecurityError } from "./errors-t5i9AEaf.mjs";
+//#region src/lexer.ts
+const KEYWORDS = new Map([
+	["true", {
+		type: "Boolean",
+		value: "true"
+	}],
+	["false", {
+		type: "Boolean",
+		value: "false"
+	}],
+	["null", {
+		type: "Null",
+		value: "null"
+	}],
+	["undefined", {
+		type: "Undefined",
+		value: "undefined"
+	}],
+	["in", {
+		type: "Operator",
+		value: "in"
+	}],
+	["not", {
+		type: "Operator",
+		value: "not"
+	}]
+]);
+function isDigit(ch) {
+	return ch >= "0" && ch <= "9";
+}
+function isAlpha(ch) {
+	return ch >= "a" && ch <= "z" || ch >= "A" && ch <= "Z" || ch === "_" || ch === "$";
+}
+function isAlphaNumeric(ch) {
+	return isAlpha(ch) || isDigit(ch);
+}
+function isHexDigit(ch) {
+	return isDigit(ch) || ch >= "a" && ch <= "f" || ch >= "A" && ch <= "F";
+}
+function tokenize(source) {
+	const tokens = [];
+	let i = 0;
+	while (i < source.length) {
+		const ch = source[i];
+		if (ch === " " || ch === "	" || ch === "\n" || ch === "\r") {
+			i++;
+			continue;
+		}
+		if (isDigit(ch)) {
+			const start = i;
+			if (ch === "0" && i + 1 < source.length && (source[i + 1] === "x" || source[i + 1] === "X")) {
+				i += 2;
+				while (i < source.length && (isHexDigit(source[i]) || source[i] === "_")) i++;
+				tokens.push({
+					type: "Number",
+					value: source.slice(start, i),
+					start,
+					end: i
+				});
+				continue;
+			}
+			if (ch === "0" && i + 1 < source.length && (source[i + 1] === "b" || source[i + 1] === "B")) {
+				i += 2;
+				while (i < source.length && (source[i] === "0" || source[i] === "1" || source[i] === "_")) i++;
+				tokens.push({
+					type: "Number",
+					value: source.slice(start, i),
+					start,
+					end: i
+				});
+				continue;
+			}
+			if (ch === "0" && i + 1 < source.length && (source[i + 1] === "o" || source[i + 1] === "O")) {
+				i += 2;
+				while (i < source.length && (source[i] >= "0" && source[i] <= "7" || source[i] === "_")) i++;
+				tokens.push({
+					type: "Number",
+					value: source.slice(start, i),
+					start,
+					end: i
+				});
+				continue;
+			}
+			while (i < source.length && (isDigit(source[i]) || source[i] === "_")) i++;
+			if (i < source.length && source[i] === "." && i + 1 < source.length && isDigit(source[i + 1])) {
+				i++;
+				while (i < source.length && (isDigit(source[i]) || source[i] === "_")) i++;
+			}
+			if (i < source.length && (source[i] === "e" || source[i] === "E")) {
+				i++;
+				if (i < source.length && (source[i] === "+" || source[i] === "-")) i++;
+				while (i < source.length && (isDigit(source[i]) || source[i] === "_")) i++;
+			}
+			tokens.push({
+				type: "Number",
+				value: source.slice(start, i),
+				start,
+				end: i
+			});
+			continue;
+		}
+		if (ch === "\"" || ch === "'") {
+			const quote = ch;
+			const start = i;
+			i++;
+			let value = "";
+			while (i < source.length && source[i] !== quote) {
+				if (source[i] === "\\") {
+					i++;
+					const escaped = source[i];
+					switch (escaped) {
+						case "n":
+							value += "\n";
+							break;
+						case "t":
+							value += "	";
+							break;
+						case "r":
+							value += "\r";
+							break;
+						case "\\":
+							value += "\\";
+							break;
+						case "0":
+							value += "\0";
+							break;
+						case "x": {
+							const hex = source.slice(i + 1, i + 3);
+							if (hex.length < 2 || !isHexDigit(hex[0]) || !isHexDigit(hex[1])) throw new ExpressionError("Invalid \\x escape: expected 2 hex digits", {
+								source,
+								start,
+								end: i + 3
+							});
+							value += String.fromCharCode(parseInt(hex, 16));
+							i += 2;
+							break;
+						}
+						case "u":
+							if (i + 1 < source.length && source[i + 1] === "{") {
+								const closeBrace = source.indexOf("}", i + 2);
+								if (closeBrace === -1) throw new ExpressionError("Invalid \\u{} escape: missing closing brace", {
+									source,
+									start,
+									end: source.length
+								});
+								const hex = source.slice(i + 2, closeBrace);
+								if (hex.length === 0) throw new ExpressionError("Invalid \\u{} escape: empty code point", {
+									source,
+									start,
+									end: closeBrace + 1
+								});
+								for (const c of hex) if (!isHexDigit(c)) throw new ExpressionError(`Invalid \\u{} escape: non-hex digit "${c}"`, {
+									source,
+									start,
+									end: closeBrace + 1
+								});
+								const MAX_UNICODE_CODE_POINT = 1114111;
+								const codePoint = parseInt(hex, 16);
+								if (codePoint > MAX_UNICODE_CODE_POINT) throw new ExpressionError("Invalid \\u{} escape: code point out of range", {
+									source,
+									start,
+									end: closeBrace + 1
+								});
+								value += String.fromCodePoint(codePoint);
+								i = closeBrace;
+							} else {
+								const UNICODE_ESCAPE_LEN = 4;
+								const hex = source.slice(i + 1, i + 1 + UNICODE_ESCAPE_LEN);
+								if (hex.length < UNICODE_ESCAPE_LEN) throw new ExpressionError("Invalid \\u escape: expected 4 hex digits", {
+									source,
+									start,
+									end: i + 1 + UNICODE_ESCAPE_LEN
+								});
+								for (const c of hex) if (!isHexDigit(c)) throw new ExpressionError("Invalid \\u escape: expected 4 hex digits", {
+									source,
+									start,
+									end: i + 1 + UNICODE_ESCAPE_LEN
+								});
+								value += String.fromCharCode(parseInt(hex, 16));
+								i += UNICODE_ESCAPE_LEN;
+							}
+							break;
+						default:
+							value += escaped;
+							break;
+					}
+				} else value += source[i];
+				i++;
+			}
+			if (i >= source.length) throw new ExpressionError("Unterminated string", {
+				source,
+				start,
+				end: i
+			});
+			i++;
+			tokens.push({
+				type: "String",
+				value,
+				start,
+				end: i
+			});
+			continue;
+		}
+		if (ch === "`") {
+			const start = i;
+			i++;
+			let raw = "`";
+			while (i < source.length && source[i] !== "`") if (source[i] === "$" && i + 1 < source.length && source[i + 1] === "{") {
+				raw += "${";
+				i += 2;
+				let depth = 1;
+				while (i < source.length && depth > 0) {
+					const ic = source[i];
+					if (ic === "\"" || ic === "'") {
+						raw += ic;
+						i++;
+						while (i < source.length && source[i] !== ic) {
+							if (source[i] === "\\" && i + 1 < source.length) {
+								raw += source[i] + source[i + 1];
+								i += 2;
+								continue;
+							}
+							raw += source[i];
+							i++;
+						}
+						if (i < source.length) {
+							raw += source[i];
+							i++;
+						}
+						continue;
+					}
+					if (ic === "{") depth++;
+					else if (ic === "}") depth--;
+					if (depth > 0) raw += ic;
+					i++;
+				}
+				raw += "}";
+			} else {
+				raw += source[i];
+				i++;
+			}
+			if (i >= source.length) throw new ExpressionError("Unterminated template literal", {
+				source,
+				start,
+				end: i
+			});
+			raw += "`";
+			i++;
+			tokens.push({
+				type: "TemplateLiteral",
+				value: raw,
+				start,
+				end: i
+			});
+			continue;
+		}
+		if (isAlpha(ch)) {
+			const start = i;
+			while (i < source.length && isAlphaNumeric(source[i])) i++;
+			const value = source.slice(start, i);
+			const kw = KEYWORDS.get(value);
+			if (kw) tokens.push({
+				type: kw.type,
+				value: kw.value,
+				start,
+				end: i
+			});
+			else tokens.push({
+				type: "Identifier",
+				value,
+				start,
+				end: i
+			});
+			continue;
+		}
+		const start = i;
+		if (ch === "." && i + 2 < source.length && source[i + 1] === "." && source[i + 2] === ".") {
+			tokens.push({
+				type: "Spread",
+				value: "...",
+				start,
+				end: i + 3
+			});
+			i += 3;
+			continue;
+		}
+		if (ch === ".") {
+			tokens.push({
+				type: "Punctuation",
+				value: ".",
+				start,
+				end: i + 1
+			});
+			i++;
+			continue;
+		}
+		if (ch === "|") {
+			if (i + 1 < source.length && source[i + 1] === ">") {
+				tokens.push({
+					type: "Pipe",
+					value: "|>",
+					start,
+					end: i + 2
+				});
+				i += 2;
+				continue;
+			}
+			if (i + 1 < source.length && source[i + 1] === "|") {
+				tokens.push({
+					type: "Operator",
+					value: "||",
+					start,
+					end: i + 2
+				});
+				i += 2;
+				continue;
+			}
+		}
+		if (ch === "&" && i + 1 < source.length && source[i + 1] === "&") {
+			tokens.push({
+				type: "Operator",
+				value: "&&",
+				start,
+				end: i + 2
+			});
+			i += 2;
+			continue;
+		}
+		if (ch === "=" && i + 1 < source.length && source[i + 1] === "=") {
+			tokens.push({
+				type: "Operator",
+				value: "==",
+				start,
+				end: i + 2
+			});
+			i += 2;
+			continue;
+		}
+		if (ch === "!" && i + 1 < source.length && source[i + 1] === "=") {
+			tokens.push({
+				type: "Operator",
+				value: "!=",
+				start,
+				end: i + 2
+			});
+			i += 2;
+			continue;
+		}
+		if (ch === "!") {
+			tokens.push({
+				type: "Operator",
+				value: "!",
+				start,
+				end: i + 1
+			});
+			i++;
+			continue;
+		}
+		if (ch === "<") {
+			if (i + 1 < source.length && source[i + 1] === "=") {
+				tokens.push({
+					type: "Operator",
+					value: "<=",
+					start,
+					end: i + 2
+				});
+				i += 2;
+				continue;
+			}
+			tokens.push({
+				type: "Operator",
+				value: "<",
+				start,
+				end: i + 1
+			});
+			i++;
+			continue;
+		}
+		if (ch === ">") {
+			if (i + 1 < source.length && source[i + 1] === "=") {
+				tokens.push({
+					type: "Operator",
+					value: ">=",
+					start,
+					end: i + 2
+				});
+				i += 2;
+				continue;
+			}
+			tokens.push({
+				type: "Operator",
+				value: ">",
+				start,
+				end: i + 1
+			});
+			i++;
+			continue;
+		}
+		if (ch === "*" && i + 1 < source.length && source[i + 1] === "*") {
+			tokens.push({
+				type: "Operator",
+				value: "**",
+				start,
+				end: i + 2
+			});
+			i += 2;
+			continue;
+		}
+		if (ch === "?") {
+			if (i + 1 < source.length && source[i + 1] === ".") {
+				tokens.push({
+					type: "OptionalChain",
+					value: "?.",
+					start,
+					end: i + 2
+				});
+				i += 2;
+				continue;
+			}
+			if (i + 1 < source.length && source[i + 1] === "?") {
+				tokens.push({
+					type: "NullishCoalescing",
+					value: "??",
+					start,
+					end: i + 2
+				});
+				i += 2;
+				continue;
+			}
+			tokens.push({
+				type: "Punctuation",
+				value: "?",
+				start,
+				end: i + 1
+			});
+			i++;
+			continue;
+		}
+		if (ch === "+" || ch === "-" || ch === "*" || ch === "/" || ch === "%") {
+			tokens.push({
+				type: "Operator",
+				value: ch,
+				start,
+				end: i + 1
+			});
+			i++;
+			continue;
+		}
+		if ("()[]{},:".includes(ch)) {
+			tokens.push({
+				type: "Punctuation",
+				value: ch,
+				start,
+				end: i + 1
+			});
+			i++;
+			continue;
+		}
+		throw new ExpressionError(`Unexpected character "${ch}"`, {
+			source,
+			start,
+			end: i + 1
+		});
+	}
+	tokens.push({
+		type: "EOF",
+		value: "",
+		start: i,
+		end: i
+	});
+	return tokens;
+}
+//#endregion
+//#region src/execution-context.ts
+const BLOCKED_PROPERTIES = new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+const MAX_INDEX_DIGITS = 10;
+function isCanonicalIndex(key) {
+	if (key.length === 0 || key.length > MAX_INDEX_DIGITS) return false;
+	const n = Number(key);
+	return Number.isInteger(n) && n >= 0 && String(n) === key;
+}
+const TIMEOUT_CHECK_INTERVAL = 1e3;
+const DEFAULT_MAX_DEPTH = 100;
+const DEFAULT_MAX_ARRAY_LENGTH = 1e5;
+/** Immutable per-instance security configuration derived from BonsaiOptions. */
+var SecurityPolicy = class {
+	maxDepth;
+	maxArrayLength;
+	timeout;
+	allowedProperties;
+	deniedProperties;
+	constructor(options = {}) {
+		this.maxDepth = options.maxDepth ?? DEFAULT_MAX_DEPTH;
+		this.maxArrayLength = options.maxArrayLength ?? DEFAULT_MAX_ARRAY_LENGTH;
+		this.timeout = options.timeout ?? 0;
+		this.allowedProperties = options.allowedProperties ? new Set(options.allowedProperties) : void 0;
+		this.deniedProperties = options.deniedProperties ? new Set(options.deniedProperties) : void 0;
+	}
+};
+/** Mutable per-evaluation state: tracks depth, step count, and deadline for a single evaluation. */
+var ExecutionContext = class {
+	stepCount = 0;
+	depth = 0;
+	deadline;
+	policy;
+	now;
+	constructor(policy, now = Date.now) {
+		this.policy = policy;
+		this.now = now;
+		this.deadline = policy.timeout ? now() + policy.timeout : 0;
+	}
+	/** Reset mutable state for reuse. Avoids allocating a new instance per evaluation. */
+	reset() {
+		this.stepCount = 0;
+		this.depth = 0;
+		this.deadline = this.policy.timeout ? this.now() + this.policy.timeout : 0;
+	}
+	step() {
+		if (this.deadline) {
+			this.stepCount++;
+			if (this.stepCount % TIMEOUT_CHECK_INTERVAL === 0) this.checkTimeout();
+		}
+	}
+	checkTimeout() {
+		if (this.deadline && this.now() >= this.deadline) throw new BonsaiSecurityError("TIMEOUT", `Expression timeout: exceeded ${this.policy.timeout}ms`);
+	}
+	enterDepth() {
+		if (++this.depth > this.policy.maxDepth) throw new BonsaiSecurityError("MAX_DEPTH", `Maximum expression depth (${this.policy.maxDepth}) exceeded`);
+	}
+	exitDepth() {
+		this.depth--;
+	}
+	withDepth(fn) {
+		this.enterDepth();
+		try {
+			return fn();
+		} finally {
+			this.exitDepth();
+		}
+	}
+	checkNameAccess(key, kind) {
+		if (BLOCKED_PROPERTIES.has(key)) throw new BonsaiSecurityError("BLOCKED_PROPERTY", `Blocked: access to "${key}" is not allowed`);
+		if (kind === "identifier" || kind === "object-key") return;
+		if (isCanonicalIndex(key)) return;
+		if (this.policy.allowedProperties) {
+			if (!this.policy.allowedProperties.has(key)) throw new BonsaiSecurityError("PROPERTY_NOT_ALLOWED", `Blocked: "${key}" is not in allowed properties`);
+		}
+		if (this.policy.deniedProperties) {
+			if (this.policy.deniedProperties.has(key)) throw new BonsaiSecurityError("PROPERTY_DENIED", `Blocked: "${key}" is in denied properties`);
+		}
+	}
+	checkArrayLength(length) {
+		if (length > this.policy.maxArrayLength) throw new BonsaiSecurityError("MAX_ARRAY_LENGTH", `Array length (${length}) exceeds maximum (${this.policy.maxArrayLength})`);
+	}
+};
+//#endregion
+export { tokenize as i, ExecutionContext as n, SecurityPolicy as r, BLOCKED_PROPERTIES as t };
+
+//# sourceMappingURL=execution-context-DqYC3L92.mjs.map

package/dist/execution-context-DqYC3L92.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context-DqYC3L92.mjs","names":[],"sources":["../src/lexer.ts","../src/execution-context.ts"],"sourcesContent":["import type { Token, PunctuationValue } from './types.js'\nimport { ExpressionError } from './errors.js'\n\nconst KEYWORDS = new Map<string, { type: Token['type']; value: string }>([\n  ['true', { type: 'Boolean', value: 'true' }],\n  ['false', { type: 'Boolean', value: 'false' }],\n  ['null', { type: 'Null', value: 'null' }],\n  ['undefined', { type: 'Undefined', value: 'undefined' }],\n  ['in', { type: 'Operator', value: 'in' }],\n  ['not', { type: 'Operator', value: 'not' }],\n])\n\nfunction isDigit(ch: string): boolean {\n  return ch >= '0' && ch <= '9'\n}\n\nfunction isAlpha(ch: string): boolean {\n  return (ch >= 'a' && ch <= 'z') || (ch >= 'A' && ch <= 'Z') || ch === '_' || ch === '$'\n}\n\nfunction isAlphaNumeric(ch: string): boolean {\n  return isAlpha(ch) || isDigit(ch)\n}\n\nfunction isHexDigit(ch: string): boolean {\n  return isDigit(ch) || (ch >= 'a' && ch <= 'f') || (ch >= 'A' && ch <= 'F')\n}\n\nexport function tokenize(source: string): Token[] {\n  const tokens: Token[] = []\n  let i = 0\n\n  while (i < source.length) {\n    const ch = source[i]\n\n    // Skip whitespace\n    if (ch === ' ' || ch === '\\t' || ch === '\\n' || ch === '\\r') {\n      i++\n      continue\n    }\n\n    // Numbers: decimal, hex, binary, octal, scientific, underscores\n    if (isDigit(ch)) {\n      const start = i\n\n      // Hex: 0x...\n      if (ch === '0' && i + 1 < source.length && (source[i + 1] === 'x' || source[i + 1] === 'X')) {\n        i += 2\n        while (i < source.length && (isHexDigit(source[i]) || source[i] === '_')) i++\n        tokens.push({ type: 'Number', value: source.slice(start, i), start, end: i })\n        continue\n      }\n\n      // Binary: 0b...\n      if (ch === '0' && i + 1 < source.length && (source[i + 1] === 'b' || source[i + 1] === 'B')) {\n        i += 2\n        while (i < source.length && (source[i] === '0' || source[i] === '1' || source[i] === '_')) i++\n        tokens.push({ type: 'Number', value: source.slice(start, i), start, end: i })\n        continue\n      }\n\n      // Octal: 0o...\n      if (ch === '0' && i + 1 < source.length && (source[i + 1] === 'o' || source[i + 1] === 'O')) {\n        i += 2\n        while (i < source.length && ((source[i] >= '0' && source[i] <= '7') || source[i] === '_')) i++\n        tokens.push({ type: 'Number', value: source.slice(start, i), start, end: i })\n        continue\n      }\n\n      // Decimal (with optional underscore separators)\n      while (i < source.length && (isDigit(source[i]) || source[i] === '_')) i++\n      if (i < source.length && source[i] === '.' && i + 1 < source.length && isDigit(source[i + 1])) {\n        i++ // skip '.'\n        while (i < source.length && (isDigit(source[i]) || source[i] === '_')) i++\n      }\n\n      // Scientific notation: e/E followed by optional +/- and digits\n      if (i < source.length && (source[i] === 'e' || source[i] === 'E')) {\n        i++\n        if (i < source.length && (source[i] === '+' || source[i] === '-')) i++\n        while (i < source.length && (isDigit(source[i]) || source[i] === '_')) i++\n      }\n\n      tokens.push({ type: 'Number', value: source.slice(start, i), start, end: i })\n      continue\n    }\n\n    // Strings\n    if (ch === '\"' || ch === \"'\") {\n      const quote = ch\n      const start = i\n      i++ // skip opening quote\n      let value = ''\n      while (i < source.length && source[i] !== quote) {\n        if (source[i] === '\\\\') {\n          i++\n          const escaped = source[i]\n          switch (escaped) {\n            case 'n': value += '\\n'; break\n            case 't': value += '\\t'; break\n            case 'r': value += '\\r'; break\n            case '\\\\': value += '\\\\'; break\n            case '0': value += '\\0'; break\n            case 'x': {\n              const hex = source.slice(i + 1, i + 3)\n              if (hex.length < 2 || !isHexDigit(hex[0]) || !isHexDigit(hex[1])) {\n                throw new ExpressionError('Invalid \\\\x escape: expected 2 hex digits', { source, start, end: i + 3 })\n              }\n              value += String.fromCharCode(parseInt(hex, 16))\n              i += 2\n              break\n            }\n            case 'u': {\n              if (i + 1 < source.length && source[i + 1] === '{') {\n                const closeBrace = source.indexOf('}', i + 2)\n                if (closeBrace === -1) {\n                  throw new ExpressionError('Invalid \\\\u{} escape: missing closing brace', { source, start, end: source.length })\n                }\n                const hex = source.slice(i + 2, closeBrace)\n                if (hex.length === 0) {\n                  throw new ExpressionError('Invalid \\\\u{} escape: empty code point', { source, start, end: closeBrace + 1 })\n                }\n                for (const c of hex) {\n                  if (!isHexDigit(c)) {\n                    throw new ExpressionError(`Invalid \\\\u{} escape: non-hex digit \"${c}\"`, { source, start, end: closeBrace + 1 })\n                  }\n                }\n                const MAX_UNICODE_CODE_POINT = 0x10FFFF\n                const codePoint = parseInt(hex, 16)\n                if (codePoint > MAX_UNICODE_CODE_POINT) {\n                  throw new ExpressionError('Invalid \\\\u{} escape: code point out of range', { source, start, end: closeBrace + 1 })\n                }\n                value += String.fromCodePoint(codePoint)\n                i = closeBrace\n              } else {\n                const UNICODE_ESCAPE_LEN = 4\n                const hex = source.slice(i + 1, i + 1 + UNICODE_ESCAPE_LEN)\n                if (hex.length < UNICODE_ESCAPE_LEN) {\n                  throw new ExpressionError('Invalid \\\\u escape: expected 4 hex digits', { source, start, end: i + 1 + UNICODE_ESCAPE_LEN })\n                }\n                for (const c of hex) {\n                  if (!isHexDigit(c)) {\n                    throw new ExpressionError('Invalid \\\\u escape: expected 4 hex digits', { source, start, end: i + 1 + UNICODE_ESCAPE_LEN })\n                  }\n                }\n                value += String.fromCharCode(parseInt(hex, 16))\n                i += UNICODE_ESCAPE_LEN\n              }\n              break\n            }\n            default: value += escaped; break\n          }\n        } else {\n          value += source[i]\n        }\n        i++\n      }\n      if (i >= source.length) {\n        throw new ExpressionError('Unterminated string', { source, start, end: i })\n      }\n      i++ // skip closing quote\n      tokens.push({ type: 'String', value, start, end: i })\n      continue\n    }\n\n    // Template literals\n    if (ch === '`') {\n      const start = i\n      i++ // skip opening backtick\n      let raw = '`'\n      while (i < source.length && source[i] !== '`') {\n        if (source[i] === '$' && i + 1 < source.length && source[i + 1] === '{') {\n          raw += '${'\n          i += 2\n          let depth = 1\n          while (i < source.length && depth > 0) {\n            const ic = source[i]\n            // Skip string literals inside interpolations\n            if (ic === '\"' || ic === \"'\") {\n              raw += ic\n              i++\n              while (i < source.length && source[i] !== ic) {\n                if (source[i] === '\\\\' && i + 1 < source.length) {\n                  raw += source[i] + source[i + 1]\n                  i += 2\n                  continue\n                }\n                raw += source[i]\n                i++\n              }\n              if (i < source.length) {\n                raw += source[i] // closing quote\n                i++\n              }\n              continue\n            }\n            if (ic === '{') depth++\n            else if (ic === '}') depth--\n            if (depth > 0) raw += ic\n            i++\n          }\n          raw += '}'\n        } else {\n          raw += source[i]\n          i++\n        }\n      }\n      if (i >= source.length) {\n        throw new ExpressionError('Unterminated template literal', { source, start, end: i })\n      }\n      raw += '`'\n      i++ // skip closing backtick\n      tokens.push({ type: 'TemplateLiteral', value: raw, start, end: i })\n      continue\n    }\n\n    // Identifiers and keywords\n    if (isAlpha(ch)) {\n      const start = i\n      while (i < source.length && isAlphaNumeric(source[i])) i++\n      const value = source.slice(start, i)\n      const kw = KEYWORDS.get(value)\n      if (kw) {\n        tokens.push({ type: kw.type, value: kw.value, start, end: i } as Token)\n      } else {\n        tokens.push({ type: 'Identifier', value, start, end: i })\n      }\n      continue\n    }\n\n    // Multi-character operators and punctuation\n    const start = i\n\n    // Spread operator ...\n    if (ch === '.' && i + 2 < source.length && source[i + 1] === '.' && source[i + 2] === '.') {\n      tokens.push({ type: 'Spread', value: '...', start, end: i + 3 })\n      i += 3\n      continue\n    }\n\n    // Dot (punctuation)\n    if (ch === '.') {\n      tokens.push({ type: 'Punctuation', value: '.', start, end: i + 1 })\n      i++\n      continue\n    }\n\n    // Pipe |> or logical ||\n    if (ch === '|') {\n      if (i + 1 < source.length && source[i + 1] === '>') {\n        tokens.push({ type: 'Pipe', value: '|>', start, end: i + 2 })\n        i += 2\n        continue\n      }\n      if (i + 1 < source.length && source[i + 1] === '|') {\n        tokens.push({ type: 'Operator', value: '||', start, end: i + 2 })\n        i += 2\n        continue\n      }\n    }\n\n    // &&\n    if (ch === '&' && i + 1 < source.length && source[i + 1] === '&') {\n      tokens.push({ type: 'Operator', value: '&&', start, end: i + 2 })\n      i += 2\n      continue\n    }\n\n    // == !=\n    if (ch === '=' && i + 1 < source.length && source[i + 1] === '=') {\n      tokens.push({ type: 'Operator', value: '==', start, end: i + 2 })\n      i += 2\n      continue\n    }\n    if (ch === '!' && i + 1 < source.length && source[i + 1] === '=') {\n      tokens.push({ type: 'Operator', value: '!=', start, end: i + 2 })\n      i += 2\n      continue\n    }\n\n    // ! (logical not) - must come after != check\n    if (ch === '!') {\n      tokens.push({ type: 'Operator', value: '!', start, end: i + 1 })\n      i++\n      continue\n    }\n\n    // <= >= < >\n    if (ch === '<') {\n      if (i + 1 < source.length && source[i + 1] === '=') {\n        tokens.push({ type: 'Operator', value: '<=', start, end: i + 2 })\n        i += 2\n        continue\n      }\n      tokens.push({ type: 'Operator', value: '<', start, end: i + 1 })\n      i++\n      continue\n    }\n    if (ch === '>') {\n      if (i + 1 < source.length && source[i + 1] === '=') {\n        tokens.push({ type: 'Operator', value: '>=', start, end: i + 2 })\n        i += 2\n        continue\n      }\n      tokens.push({ type: 'Operator', value: '>', start, end: i + 1 })\n      i++\n      continue\n    }\n\n    // ** (exponentiation) — must come before single *\n    if (ch === '*' && i + 1 < source.length && source[i + 1] === '*') {\n      tokens.push({ type: 'Operator', value: '**', start, end: i + 2 })\n      i += 2\n      continue\n    }\n\n    // ?. (optional chaining) or ?? (nullish coalescing) or ? (ternary)\n    if (ch === '?') {\n      if (i + 1 < source.length && source[i + 1] === '.') {\n        tokens.push({ type: 'OptionalChain', value: '?.', start, end: i + 2 })\n        i += 2\n        continue\n      }\n      if (i + 1 < source.length && source[i + 1] === '?') {\n        tokens.push({ type: 'NullishCoalescing', value: '??', start, end: i + 2 })\n        i += 2\n        continue\n      }\n      tokens.push({ type: 'Punctuation', value: '?', start, end: i + 1 })\n      i++\n      continue\n    }\n\n    // Single-character operators\n    if (ch === '+' || ch === '-' || ch === '*' || ch === '/' || ch === '%') {\n      tokens.push({ type: 'Operator', value: ch, start, end: i + 1 })\n      i++\n      continue\n    }\n\n    // Punctuation\n    if ('()[]{},:'.includes(ch)) {\n      tokens.push({ type: 'Punctuation', value: ch as PunctuationValue, start, end: i + 1 })\n      i++\n      continue\n    }\n\n    throw new ExpressionError(`Unexpected character \"${ch}\"`, { source, start, end: i + 1 })\n  }\n\n  tokens.push({ type: 'EOF', value: '', start: i, end: i })\n  return tokens\n}\n","import type { BonsaiOptions } from './types.js'\nimport { BonsaiSecurityError } from './errors.js'\n\n/**\n * Discriminates how a property name is being accessed so security checks can\n * apply different rules (e.g. root identifiers bypass allow/deny lists).\n */\nexport type AccessKind = 'identifier' | 'member' | 'method' | 'object-key'\n\nexport const BLOCKED_PROPERTIES: ReadonlySet<string> = new Set([\n  '__proto__', 'constructor', 'prototype',\n])\n\nconst MAX_INDEX_DIGITS = 10\n\nfunction isCanonicalIndex(key: string): boolean {\n  if (key.length === 0 || key.length > MAX_INDEX_DIGITS) return false\n  const n = Number(key)\n  return Number.isInteger(n) && n >= 0 && String(n) === key\n}\n\nconst TIMEOUT_CHECK_INTERVAL = 1000\nconst DEFAULT_MAX_DEPTH = 100\nconst DEFAULT_MAX_ARRAY_LENGTH = 100_000\n\n/** Immutable per-instance security configuration derived from BonsaiOptions. */\nexport class SecurityPolicy {\n  readonly maxDepth: number\n  readonly maxArrayLength: number\n  readonly timeout: number\n  readonly allowedProperties?: ReadonlySet<string>\n  readonly deniedProperties?: ReadonlySet<string>\n\n  constructor(options: BonsaiOptions = {}) {\n    this.maxDepth = options.maxDepth ?? DEFAULT_MAX_DEPTH\n    this.maxArrayLength = options.maxArrayLength ?? DEFAULT_MAX_ARRAY_LENGTH\n    this.timeout = options.timeout ?? 0\n    this.allowedProperties = options.allowedProperties\n      ? new Set(options.allowedProperties)\n      : undefined\n    this.deniedProperties = options.deniedProperties\n      ? new Set(options.deniedProperties)\n      : undefined\n  }\n}\n\n/** Mutable per-evaluation state: tracks depth, step count, and deadline for a single evaluation. */\nexport class ExecutionContext {\n  private stepCount = 0\n  private depth = 0\n  private deadline: number\n  readonly policy: SecurityPolicy\n  private readonly now: () => number\n\n  constructor(policy: SecurityPolicy, now: () => number = Date.now) {\n    this.policy = policy\n    this.now = now\n    this.deadline = policy.timeout ? now() + policy.timeout : 0\n  }\n\n  /** Reset mutable state for reuse. Avoids allocating a new instance per evaluation. */\n  reset(): void {\n    this.stepCount = 0\n    this.depth = 0\n    this.deadline = this.policy.timeout ? this.now() + this.policy.timeout : 0\n  }\n\n  step(): void {\n    if (this.deadline) {\n      this.stepCount++\n      if (this.stepCount % TIMEOUT_CHECK_INTERVAL === 0) {\n        this.checkTimeout()\n      }\n    }\n  }\n\n  checkTimeout(): void {\n    if (this.deadline && this.now() >= this.deadline) {\n      throw new BonsaiSecurityError(\n        'TIMEOUT',\n        `Expression timeout: exceeded ${this.policy.timeout}ms`,\n      )\n    }\n  }\n\n  enterDepth(): void {\n    if (++this.depth > this.policy.maxDepth) {\n      throw new BonsaiSecurityError(\n        'MAX_DEPTH',\n        `Maximum expression depth (${this.policy.maxDepth}) exceeded`,\n      )\n    }\n  }\n\n  exitDepth(): void {\n    this.depth--\n  }\n\n  withDepth<T>(fn: () => T): T {\n    this.enterDepth()\n    try {\n      return fn()\n    } finally {\n      this.exitDepth()\n    }\n  }\n\n  checkNameAccess(key: string, kind: AccessKind): void {\n    if (BLOCKED_PROPERTIES.has(key)) {\n      throw new BonsaiSecurityError(\n        'BLOCKED_PROPERTY',\n        `Blocked: access to \"${key}\" is not allowed`,\n      )\n    }\n\n    if (kind === 'identifier' || kind === 'object-key') return\n\n    if (isCanonicalIndex(key)) return\n\n    if (this.policy.allowedProperties) {\n      if (!this.policy.allowedProperties.has(key)) {\n        throw new BonsaiSecurityError(\n          'PROPERTY_NOT_ALLOWED',\n          `Blocked: \"${key}\" is not in allowed properties`,\n        )\n      }\n    }\n\n    if (this.policy.deniedProperties) {\n      if (this.policy.deniedProperties.has(key)) {\n        throw new BonsaiSecurityError(\n          'PROPERTY_DENIED',\n          `Blocked: \"${key}\" is in denied properties`,\n        )\n      }\n    }\n  }\n\n  checkArrayLength(length: number): void {\n    if (length > this.policy.maxArrayLength) {\n      throw new BonsaiSecurityError(\n        'MAX_ARRAY_LENGTH',\n        `Array length (${length}) exceeds maximum (${this.policy.maxArrayLength})`,\n      )\n    }\n  }\n}\n"],"mappings":";;AAGA,MAAM,WAAW,IAAI,IAAoD;CACvE,CAAC,QAAQ;EAAE,MAAM;EAAW,OAAO;EAAQ,CAAC;CAC5C,CAAC,SAAS;EAAE,MAAM;EAAW,OAAO;EAAS,CAAC;CAC9C,CAAC,QAAQ;EAAE,MAAM;EAAQ,OAAO;EAAQ,CAAC;CACzC,CAAC,aAAa;EAAE,MAAM;EAAa,OAAO;EAAa,CAAC;CACxD,CAAC,MAAM;EAAE,MAAM;EAAY,OAAO;EAAM,CAAC;CACzC,CAAC,OAAO;EAAE,MAAM;EAAY,OAAO;EAAO,CAAC;CAC5C,CAAC;AAEF,SAAS,QAAQ,IAAqB;AACpC,QAAO,MAAM,OAAO,MAAM;;AAG5B,SAAS,QAAQ,IAAqB;AACpC,QAAQ,MAAM,OAAO,MAAM,OAAS,MAAM,OAAO,MAAM,OAAQ,OAAO,OAAO,OAAO;;AAGtF,SAAS,eAAe,IAAqB;AAC3C,QAAO,QAAQ,GAAG,IAAI,QAAQ,GAAG;;AAGnC,SAAS,WAAW,IAAqB;AACvC,QAAO,QAAQ,GAAG,IAAK,MAAM,OAAO,MAAM,OAAS,MAAM,OAAO,MAAM;;AAGxE,SAAgB,SAAS,QAAyB;CAChD,MAAM,SAAkB,EAAE;CAC1B,IAAI,IAAI;AAER,QAAO,IAAI,OAAO,QAAQ;EACxB,MAAM,KAAK,OAAO;AAGlB,MAAI,OAAO,OAAO,OAAO,OAAQ,OAAO,QAAQ,OAAO,MAAM;AAC3D;AACA;;AAIF,MAAI,QAAQ,GAAG,EAAE;GACf,MAAM,QAAQ;AAGd,OAAI,OAAO,OAAO,IAAI,IAAI,OAAO,WAAW,OAAO,IAAI,OAAO,OAAO,OAAO,IAAI,OAAO,MAAM;AAC3F,SAAK;AACL,WAAO,IAAI,OAAO,WAAW,WAAW,OAAO,GAAG,IAAI,OAAO,OAAO,KAAM;AAC1E,WAAO,KAAK;KAAE,MAAM;KAAU,OAAO,OAAO,MAAM,OAAO,EAAE;KAAE;KAAO,KAAK;KAAG,CAAC;AAC7E;;AAIF,OAAI,OAAO,OAAO,IAAI,IAAI,OAAO,WAAW,OAAO,IAAI,OAAO,OAAO,OAAO,IAAI,OAAO,MAAM;AAC3F,SAAK;AACL,WAAO,IAAI,OAAO,WAAW,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,KAAM;AAC3F,WAAO,KAAK;KAAE,MAAM;KAAU,OAAO,OAAO,MAAM,OAAO,EAAE;KAAE;KAAO,KAAK;KAAG,CAAC;AAC7E;;AAIF,OAAI,OAAO,OAAO,IAAI,IAAI,OAAO,WAAW,OAAO,IAAI,OAAO,OAAO,OAAO,IAAI,OAAO,MAAM;AAC3F,SAAK;AACL,WAAO,IAAI,OAAO,WAAY,OAAO,MAAM,OAAO,OAAO,MAAM,OAAQ,OAAO,OAAO,KAAM;AAC3F,WAAO,KAAK;KAAE,MAAM;KAAU,OAAO,OAAO,MAAM,OAAO,EAAE;KAAE;KAAO,KAAK;KAAG,CAAC;AAC7E;;AAIF,UAAO,IAAI,OAAO,WAAW,QAAQ,OAAO,GAAG,IAAI,OAAO,OAAO,KAAM;AACvE,OAAI,IAAI,OAAO,UAAU,OAAO,OAAO,OAAO,IAAI,IAAI,OAAO,UAAU,QAAQ,OAAO,IAAI,GAAG,EAAE;AAC7F;AACA,WAAO,IAAI,OAAO,WAAW,QAAQ,OAAO,GAAG,IAAI,OAAO,OAAO,KAAM;;AAIzE,OAAI,IAAI,OAAO,WAAW,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM;AACjE;AACA,QAAI,IAAI,OAAO,WAAW,OAAO,OAAO,OAAO,OAAO,OAAO,KAAM;AACnE,WAAO,IAAI,OAAO,WAAW,QAAQ,OAAO,GAAG,IAAI,OAAO,OAAO,KAAM;;AAGzE,UAAO,KAAK;IAAE,MAAM;IAAU,OAAO,OAAO,MAAM,OAAO,EAAE;IAAE;IAAO,KAAK;IAAG,CAAC;AAC7E;;AAIF,MAAI,OAAO,QAAO,OAAO,KAAK;GAC5B,MAAM,QAAQ;GACd,MAAM,QAAQ;AACd;GACA,IAAI,QAAQ;AACZ,UAAO,IAAI,OAAO,UAAU,OAAO,OAAO,OAAO;AAC/C,QAAI,OAAO,OAAO,MAAM;AACtB;KACA,MAAM,UAAU,OAAO;AACvB,aAAQ,SAAR;MACE,KAAK;AAAK,gBAAS;AAAM;MACzB,KAAK;AAAK,gBAAS;AAAM;MACzB,KAAK;AAAK,gBAAS;AAAM;MACzB,KAAK;AAAM,gBAAS;AAAM;MAC1B,KAAK;AAAK,gBAAS;AAAM;MACzB,KAAK,KAAK;OACR,MAAM,MAAM,OAAO,MAAM,IAAI,GAAG,IAAI,EAAE;AACtC,WAAI,IAAI,SAAS,KAAK,CAAC,WAAW,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,GAAG,CAC9D,OAAM,IAAI,gBAAgB,6CAA6C;QAAE;QAAQ;QAAO,KAAK,IAAI;QAAG,CAAC;AAEvG,gBAAS,OAAO,aAAa,SAAS,KAAK,GAAG,CAAC;AAC/C,YAAK;AACL;;MAEF,KAAK;AACH,WAAI,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;QAClD,MAAM,aAAa,OAAO,QAAQ,KAAK,IAAI,EAAE;AAC7C,YAAI,eAAe,GACjB,OAAM,IAAI,gBAAgB,+CAA+C;SAAE;SAAQ;SAAO,KAAK,OAAO;SAAQ,CAAC;QAEjH,MAAM,MAAM,OAAO,MAAM,IAAI,GAAG,WAAW;AAC3C,YAAI,IAAI,WAAW,EACjB,OAAM,IAAI,gBAAgB,0CAA0C;SAAE;SAAQ;SAAO,KAAK,aAAa;SAAG,CAAC;AAE7G,aAAK,MAAM,KAAK,IACd,KAAI,CAAC,WAAW,EAAE,CAChB,OAAM,IAAI,gBAAgB,wCAAwC,EAAE,IAAI;SAAE;SAAQ;SAAO,KAAK,aAAa;SAAG,CAAC;QAGnH,MAAM,yBAAyB;QAC/B,MAAM,YAAY,SAAS,KAAK,GAAG;AACnC,YAAI,YAAY,uBACd,OAAM,IAAI,gBAAgB,iDAAiD;SAAE;SAAQ;SAAO,KAAK,aAAa;SAAG,CAAC;AAEpH,iBAAS,OAAO,cAAc,UAAU;AACxC,YAAI;cACC;QACL,MAAM,qBAAqB;QAC3B,MAAM,MAAM,OAAO,MAAM,IAAI,GAAG,IAAI,IAAI,mBAAmB;AAC3D,YAAI,IAAI,SAAS,mBACf,OAAM,IAAI,gBAAgB,6CAA6C;SAAE;SAAQ;SAAO,KAAK,IAAI,IAAI;SAAoB,CAAC;AAE5H,aAAK,MAAM,KAAK,IACd,KAAI,CAAC,WAAW,EAAE,CAChB,OAAM,IAAI,gBAAgB,6CAA6C;SAAE;SAAQ;SAAO,KAAK,IAAI,IAAI;SAAoB,CAAC;AAG9H,iBAAS,OAAO,aAAa,SAAS,KAAK,GAAG,CAAC;AAC/C,aAAK;;AAEP;MAEF;AAAS,gBAAS;AAAS;;UAG7B,UAAS,OAAO;AAElB;;AAEF,OAAI,KAAK,OAAO,OACd,OAAM,IAAI,gBAAgB,uBAAuB;IAAE;IAAQ;IAAO,KAAK;IAAG,CAAC;AAE7E;AACA,UAAO,KAAK;IAAE,MAAM;IAAU;IAAO;IAAO,KAAK;IAAG,CAAC;AACrD;;AAIF,MAAI,OAAO,KAAK;GACd,MAAM,QAAQ;AACd;GACA,IAAI,MAAM;AACV,UAAO,IAAI,OAAO,UAAU,OAAO,OAAO,IACxC,KAAI,OAAO,OAAO,OAAO,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AACvE,WAAO;AACP,SAAK;IACL,IAAI,QAAQ;AACZ,WAAO,IAAI,OAAO,UAAU,QAAQ,GAAG;KACrC,MAAM,KAAK,OAAO;AAElB,SAAI,OAAO,QAAO,OAAO,KAAK;AAC5B,aAAO;AACP;AACA,aAAO,IAAI,OAAO,UAAU,OAAO,OAAO,IAAI;AAC5C,WAAI,OAAO,OAAO,QAAQ,IAAI,IAAI,OAAO,QAAQ;AAC/C,eAAO,OAAO,KAAK,OAAO,IAAI;AAC9B,aAAK;AACL;;AAEF,cAAO,OAAO;AACd;;AAEF,UAAI,IAAI,OAAO,QAAQ;AACrB,cAAO,OAAO;AACd;;AAEF;;AAEF,SAAI,OAAO,IAAK;cACP,OAAO,IAAK;AACrB,SAAI,QAAQ,EAAG,QAAO;AACtB;;AAEF,WAAO;UACF;AACL,WAAO,OAAO;AACd;;AAGJ,OAAI,KAAK,OAAO,OACd,OAAM,IAAI,gBAAgB,iCAAiC;IAAE;IAAQ;IAAO,KAAK;IAAG,CAAC;AAEvF,UAAO;AACP;AACA,UAAO,KAAK;IAAE,MAAM;IAAmB,OAAO;IAAK;IAAO,KAAK;IAAG,CAAC;AACnE;;AAIF,MAAI,QAAQ,GAAG,EAAE;GACf,MAAM,QAAQ;AACd,UAAO,IAAI,OAAO,UAAU,eAAe,OAAO,GAAG,CAAE;GACvD,MAAM,QAAQ,OAAO,MAAM,OAAO,EAAE;GACpC,MAAM,KAAK,SAAS,IAAI,MAAM;AAC9B,OAAI,GACF,QAAO,KAAK;IAAE,MAAM,GAAG;IAAM,OAAO,GAAG;IAAO;IAAO,KAAK;IAAG,CAAU;OAEvE,QAAO,KAAK;IAAE,MAAM;IAAc;IAAO;IAAO,KAAK;IAAG,CAAC;AAE3D;;EAIF,MAAM,QAAQ;AAGd,MAAI,OAAO,OAAO,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,OAAO,OAAO,IAAI,OAAO,KAAK;AACzF,UAAO,KAAK;IAAE,MAAM;IAAU,OAAO;IAAO;IAAO,KAAK,IAAI;IAAG,CAAC;AAChE,QAAK;AACL;;AAIF,MAAI,OAAO,KAAK;AACd,UAAO,KAAK;IAAE,MAAM;IAAe,OAAO;IAAK;IAAO,KAAK,IAAI;IAAG,CAAC;AACnE;AACA;;AAIF,MAAI,OAAO,KAAK;AACd,OAAI,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAClD,WAAO,KAAK;KAAE,MAAM;KAAQ,OAAO;KAAM;KAAO,KAAK,IAAI;KAAG,CAAC;AAC7D,SAAK;AACL;;AAEF,OAAI,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAClD,WAAO,KAAK;KAAE,MAAM;KAAY,OAAO;KAAM;KAAO,KAAK,IAAI;KAAG,CAAC;AACjE,SAAK;AACL;;;AAKJ,MAAI,OAAO,OAAO,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAChE,UAAO,KAAK;IAAE,MAAM;IAAY,OAAO;IAAM;IAAO,KAAK,IAAI;IAAG,CAAC;AACjE,QAAK;AACL;;AAIF,MAAI,OAAO,OAAO,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAChE,UAAO,KAAK;IAAE,MAAM;IAAY,OAAO;IAAM;IAAO,KAAK,IAAI;IAAG,CAAC;AACjE,QAAK;AACL;;AAEF,MAAI,OAAO,OAAO,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAChE,UAAO,KAAK;IAAE,MAAM;IAAY,OAAO;IAAM;IAAO,KAAK,IAAI;IAAG,CAAC;AACjE,QAAK;AACL;;AAIF,MAAI,OAAO,KAAK;AACd,UAAO,KAAK;IAAE,MAAM;IAAY,OAAO;IAAK;IAAO,KAAK,IAAI;IAAG,CAAC;AAChE;AACA;;AAIF,MAAI,OAAO,KAAK;AACd,OAAI,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAClD,WAAO,KAAK;KAAE,MAAM;KAAY,OAAO;KAAM;KAAO,KAAK,IAAI;KAAG,CAAC;AACjE,SAAK;AACL;;AAEF,UAAO,KAAK;IAAE,MAAM;IAAY,OAAO;IAAK;IAAO,KAAK,IAAI;IAAG,CAAC;AAChE;AACA;;AAEF,MAAI,OAAO,KAAK;AACd,OAAI,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAClD,WAAO,KAAK;KAAE,MAAM;KAAY,OAAO;KAAM;KAAO,KAAK,IAAI;KAAG,CAAC;AACjE,SAAK;AACL;;AAEF,UAAO,KAAK;IAAE,MAAM;IAAY,OAAO;IAAK;IAAO,KAAK,IAAI;IAAG,CAAC;AAChE;AACA;;AAIF,MAAI,OAAO,OAAO,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAChE,UAAO,KAAK;IAAE,MAAM;IAAY,OAAO;IAAM;IAAO,KAAK,IAAI;IAAG,CAAC;AACjE,QAAK;AACL;;AAIF,MAAI,OAAO,KAAK;AACd,OAAI,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAClD,WAAO,KAAK;KAAE,MAAM;KAAiB,OAAO;KAAM;KAAO,KAAK,IAAI;KAAG,CAAC;AACtE,SAAK;AACL;;AAEF,OAAI,IAAI,IAAI,OAAO,UAAU,OAAO,IAAI,OAAO,KAAK;AAClD,WAAO,KAAK;KAAE,MAAM;KAAqB,OAAO;KAAM;KAAO,KAAK,IAAI;KAAG,CAAC;AAC1E,SAAK;AACL;;AAEF,UAAO,KAAK;IAAE,MAAM;IAAe,OAAO;IAAK;IAAO,KAAK,IAAI;IAAG,CAAC;AACnE;AACA;;AAIF,MAAI,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,KAAK;AACtE,UAAO,KAAK;IAAE,MAAM;IAAY,OAAO;IAAI;IAAO,KAAK,IAAI;IAAG,CAAC;AAC/D;AACA;;AAIF,MAAI,WAAW,SAAS,GAAG,EAAE;AAC3B,UAAO,KAAK;IAAE,MAAM;IAAe,OAAO;IAAwB;IAAO,KAAK,IAAI;IAAG,CAAC;AACtF;AACA;;AAGF,QAAM,IAAI,gBAAgB,yBAAyB,GAAG,IAAI;GAAE;GAAQ;GAAO,KAAK,IAAI;GAAG,CAAC;;AAG1F,QAAO,KAAK;EAAE,MAAM;EAAO,OAAO;EAAI,OAAO;EAAG,KAAK;EAAG,CAAC;AACzD,QAAO;;;;ACtVT,MAAa,qBAA0C,IAAI,IAAI;CAC7D;CAAa;CAAe;CAC7B,CAAC;AAEF,MAAM,mBAAmB;AAEzB,SAAS,iBAAiB,KAAsB;AAC9C,KAAI,IAAI,WAAW,KAAK,IAAI,SAAS,iBAAkB,QAAO;CAC9D,MAAM,IAAI,OAAO,IAAI;AACrB,QAAO,OAAO,UAAU,EAAE,IAAI,KAAK,KAAK,OAAO,EAAE,KAAK;;AAGxD,MAAM,yBAAyB;AAC/B,MAAM,oBAAoB;AAC1B,MAAM,2BAA2B;;AAGjC,IAAa,iBAAb,MAA4B;CAC1B;CACA;CACA;CACA;CACA;CAEA,YAAY,UAAyB,EAAE,EAAE;AACvC,OAAK,WAAW,QAAQ,YAAY;AACpC,OAAK,iBAAiB,QAAQ,kBAAkB;AAChD,OAAK,UAAU,QAAQ,WAAW;AAClC,OAAK,oBAAoB,QAAQ,oBAC7B,IAAI,IAAI,QAAQ,kBAAkB,GAClC,KAAA;AACJ,OAAK,mBAAmB,QAAQ,mBAC5B,IAAI,IAAI,QAAQ,iBAAiB,GACjC,KAAA;;;;AAKR,IAAa,mBAAb,MAA8B;CAC5B,YAAoB;CACpB,QAAgB;CAChB;CACA;CACA;CAEA,YAAY,QAAwB,MAAoB,KAAK,KAAK;AAChE,OAAK,SAAS;AACd,OAAK,MAAM;AACX,OAAK,WAAW,OAAO,UAAU,KAAK,GAAG,OAAO,UAAU;;;CAI5D,QAAc;AACZ,OAAK,YAAY;AACjB,OAAK,QAAQ;AACb,OAAK,WAAW,KAAK,OAAO,UAAU,KAAK,KAAK,GAAG,KAAK,OAAO,UAAU;;CAG3E,OAAa;AACX,MAAI,KAAK,UAAU;AACjB,QAAK;AACL,OAAI,KAAK,YAAY,2BAA2B,EAC9C,MAAK,cAAc;;;CAKzB,eAAqB;AACnB,MAAI,KAAK,YAAY,KAAK,KAAK,IAAI,KAAK,SACtC,OAAM,IAAI,oBACR,WACA,gCAAgC,KAAK,OAAO,QAAQ,IACrD;;CAIL,aAAmB;AACjB,MAAI,EAAE,KAAK,QAAQ,KAAK,OAAO,SAC7B,OAAM,IAAI,oBACR,aACA,6BAA6B,KAAK,OAAO,SAAS,YACnD;;CAIL,YAAkB;AAChB,OAAK;;CAGP,UAAa,IAAgB;AAC3B,OAAK,YAAY;AACjB,MAAI;AACF,UAAO,IAAI;YACH;AACR,QAAK,WAAW;;;CAIpB,gBAAgB,KAAa,MAAwB;AACnD,MAAI,mBAAmB,IAAI,IAAI,CAC7B,OAAM,IAAI,oBACR,oBACA,uBAAuB,IAAI,kBAC5B;AAGH,MAAI,SAAS,gBAAgB,SAAS,aAAc;AAEpD,MAAI,iBAAiB,IAAI,CAAE;AAE3B,MAAI,KAAK,OAAO;OACV,CAAC,KAAK,OAAO,kBAAkB,IAAI,IAAI,CACzC,OAAM,IAAI,oBACR,wBACA,aAAa,IAAI,gCAClB;;AAIL,MAAI,KAAK,OAAO;OACV,KAAK,OAAO,iBAAiB,IAAI,IAAI,CACvC,OAAM,IAAI,oBACR,mBACA,aAAa,IAAI,2BAClB;;;CAKP,iBAAiB,QAAsB;AACrC,MAAI,SAAS,KAAK,OAAO,eACvB,OAAM,IAAI,oBACR,oBACA,iBAAiB,OAAO,qBAAqB,KAAK,OAAO,eAAe,GACzE"}

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { a as CompiledExpression, c as Token, d as ValidationResult, i as BonsaiPlugin, l as TokenType, n as BonsaiInstance, o as ExpressionReferences, r as BonsaiOptions, s as FunctionFn, t as ASTNode, u as TransformFn } from "./types-ClpZDF5z.mjs";
+import { a as CompiledExpression, c as InferredTypeName, d as Token, f as TokenType, i as BonsaiPlugin, l as PolicySnapshot, m as ValidationResult, n as BonsaiInstance, o as ExpressionReferences, p as TransformFn, r as BonsaiOptions, s as FunctionFn, t as ASTNode, u as ResolveResult } from "./types-BhsZZsLY.mjs";
 
 //#region src/errors.d.ts
 interface ErrorLocation {
@@ -73,5 +73,5 @@ declare function evaluateExpression<T = unknown>(expression: string, context?: R
  */
 declare function bonsai(options?: BonsaiOptions): BonsaiInstance;
 //#endregion
-export { type ASTNode, type BonsaiInstance, type BonsaiOptions, type BonsaiPlugin, BonsaiReferenceError, BonsaiSecurityError, BonsaiTypeError, type CompiledExpression, ExpressionError, type ExpressionReferences, type FunctionFn, type Token, type TokenType, type TransformFn, type ValidationResult, bonsai, compile, evaluateExpression, formatBonsaiError, formatError, parse, tokenize };
+export { type ASTNode, type BonsaiInstance, type BonsaiOptions, type BonsaiPlugin, BonsaiReferenceError, BonsaiSecurityError, BonsaiTypeError, type CompiledExpression, ExpressionError, type ExpressionReferences, type FunctionFn, type InferredTypeName, type PolicySnapshot, type ResolveResult, type Token, type TokenType, type TransformFn, type ValidationResult, bonsai, compile, evaluateExpression, formatBonsaiError, formatError, parse, tokenize };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/errors.ts","../src/lexer.ts","../src/parser.ts","../src/compiler.ts","../src/index.ts"],"mappings":";;;UAIiB,aAAA;EACf,MAAA;EACA,KAAA;EACA,GAAA;AAAA;;cAIW,eAAA,SAAwB,KAAA;EAAA,SAC1B,UAAA;EAAA,SACA,KAAA;EAAA,SACA,GAAA;EAAA,SACA,MAAA;EAAA,SACA,UAAA;cAGP,OAAA,UACA,QAAA,EAAU,aAAA,EACV,UAAA;AAAA;;cAcS,eAAA,SAAwB,KAAA;EAAA,SAC1B,SAAA;EAAA,SACA,QAAA;EAAA,SACA,QAAA;EACT,QAAA,GAAW,aAAA;EACX,SAAA;cAEY,SAAA,UAAmB,QAAA,UAAkB,KAAA;AAAA;;cAetC,mBAAA,SAA4B,KAAA;EAAA,SAC9B,IAAA;EACT,QAAA,GAAW,aAAA;EACX,SAAA;cAEY,IAAA,UAAc,OAAA;AAAA;;cAQf,oBAAA,SAA6B,KAAA;EAAA,SAC/B,UAAA;EAAA,SACA,IAAA;EAAA,SACA,UAAA;EACT,QAAA,GAAW,aAAA;EACX,SAAA;cAEY,IAAA,uCAA2C,UAAA,UAAoB,UAAA;AAAA;;iBAmE7D,WAAA,CACd,OAAA,UACA,QAAA,EAAU,aAAA,EACV,UAAA;;iBA6Bc,iBAAA,CAAkB,KAAA;;;iBCpJlB,QAAA,CAAS,MAAA,WAAiB,KAAA;;;iBCS1B,KAAA,CAAM,MAAA,UAAgB,MAAA,YAAa,OAAA;;;iBCnCnC,OAAA,CAAQ,GAAA,EAAK,OAAA,GAAU,OAAA;;;;;;;iBC8CvB,kBAAA,aAAA,CAAgC,UAAA,UAAoB,OAAA,GAAU,MAAA,oBAA0B,CAAA;;AJrCxG;;;;;;;;;;iBIqDgB,MAAA,CAAO,OAAA,GAAS,aAAA,GAAqB,cAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/errors.ts","../src/lexer.ts","../src/parser.ts","../src/compiler.ts","../src/index.ts"],"mappings":";;;UAIiB,aAAA;EACf,MAAA;EACA,KAAA;EACA,GAAA;AAAA;;cAIW,eAAA,SAAwB,KAAA;EAAA,SAC1B,UAAA;EAAA,SACA,KAAA;EAAA,SACA,GAAA;EAAA,SACA,MAAA;EAAA,SACA,UAAA;cAGP,OAAA,UACA,QAAA,EAAU,aAAA,EACV,UAAA;AAAA;;cAcS,eAAA,SAAwB,KAAA;EAAA,SAC1B,SAAA;EAAA,SACA,QAAA;EAAA,SACA,QAAA;EACT,QAAA,GAAW,aAAA;EACX,SAAA;cAEY,SAAA,UAAmB,QAAA,UAAkB,KAAA;AAAA;;cAetC,mBAAA,SAA4B,KAAA;EAAA,SAC9B,IAAA;EACT,QAAA,GAAW,aAAA;EACX,SAAA;cAEY,IAAA,UAAc,OAAA;AAAA;;cAQf,oBAAA,SAA6B,KAAA;EAAA,SAC/B,UAAA;EAAA,SACA,IAAA;EAAA,SACA,UAAA;EACT,QAAA,GAAW,aAAA;EACX,SAAA;cAEY,IAAA,uCAA2C,UAAA,UAAoB,UAAA;AAAA;;iBAmE7D,WAAA,CACd,OAAA,UACA,QAAA,EAAU,aAAA,EACV,UAAA;;iBA6Bc,iBAAA,CAAkB,KAAA;;;iBCpJlB,QAAA,CAAS,MAAA,WAAiB,KAAA;;;iBCS1B,KAAA,CAAM,MAAA,UAAgB,MAAA,YAAa,OAAA;;;iBCnCnC,OAAA,CAAQ,GAAA,EAAK,OAAA,GAAU,OAAA;;;;;;;iBCiDvB,kBAAA,aAAA,CAAgC,UAAA,UAAoB,OAAA,GAAU,MAAA,oBAA0B,CAAA;;AJxCxG;;;;;;;;;;iBIwDgB,MAAA,CAAO,OAAA,GAAS,aAAA,GAAqB,cAAA"}