js-confuser-vm 0.0.2 → 0.0.3

package/dist/runtime.js

@@ -26,19 +26,19 @@ var CLOSURE_SYM = Symbol(); // Nameless for obfuscation
 // While the outer frame is alive: reads/writes go to frame.locals[slot].
 // After the outer frame returns (closed): reads/writes hit this.value.
 function Upvalue(frame, slot) {
-  this.frame = frame;
-  this.slot = slot;
+  this._frame = frame;
+  this._slot = slot;
   this._closed = false;
   this._value = undefined;
 }
-Upvalue.prototype.read = function () {
-  return this._closed ? this._value : this.frame.locals[this.slot];
+Upvalue.prototype._read = function () {
+  return this._closed ? this._value : this._frame.locals[this._slot];
 };
-Upvalue.prototype.write = function (v) {
-  if (this._closed) this._value = v;else this.frame.locals[this.slot] = v;
+Upvalue.prototype._write = function (v) {
+  if (this._closed) this._value = v;else this._frame.locals[this._slot] = v;
 };
-Upvalue.prototype.close = function () {
-  this._value = this.frame.locals[this.slot];
+Upvalue.prototype._close = function () {
+  this._value = this._frame.locals[this._slot];
   this._closed = true;
 };
 
@@ -51,11 +51,12 @@ function Closure(fn) {
 function Frame(closure, returnPc, parent, thisVal) {
   this.closure = closure;
   this.locals = new Array(closure.fn.localCount).fill(undefined);
-  this.pc = closure.fn.startPc; // <- initialize from fn descriptor
-  this.returnPc = returnPc; // pc to resume in parent frame after RETURN
-  this.parent = parent;
+  this._pc = closure.fn.startPc; // <- initialize from fn descriptor
+  this._returnPc = returnPc; // pc to resume in parent frame after RETURN
+  this._parent = parent;
   this.thisVal = thisVal !== undefined ? thisVal : undefined;
   this._newObj = null; // <- set by NEW so RETURN can see it
+  this._handlerStack = []; // <- exception handlers pushed by TRY_SETUP
 }
 
 // VM
@@ -64,15 +65,15 @@ function VM(bytecode, mainStartPc, constants, globals) {
   this.constants = constants;
   this.globals = globals;
   this._stack = [];
-  this.frameStack = [];
-  this.openUpvalues = []; // all currently open Upvalue objects across all frames
+  this._frameStack = [];
+  this._openUpvalues = []; // all currently open Upvalue objects across all frames
 
   var mainFn = {
     paramCount: 0,
     localCount: 0,
     startPc: mainStartPc // <- where main begins
   };
-  this.currentFrame = new Frame(new Closure(mainFn), null, null);
+  this._currentFrame = new Frame(new Closure(mainFn), null, null);
 }
 VM.prototype._push = function (v) {
   this._stack.push(v);
@@ -83,23 +84,41 @@ VM.prototype._pop = function () {
 VM.prototype.peek = function () {
   return this._stack[this._stack.length - 1];
 };
+
+// Read one instruction word from this.bytecode at `pc`, unwrapping the
+// encoding so callers always get a plain { op, operand } pair regardless
+// of whether ENCODE_BYTECODE is active.
+VM.prototype.readWord = function (pc) {
+  var word = this.bytecode[pc];
+  if (ENCODE_BYTECODE) {
+    return {
+      op: word & 0xff,
+      operand: word >>> 8
+    };
+  } else {
+    return {
+      op: word[0],
+      operand: word[1]
+    };
+  }
+};
 VM.prototype.captureUpvalue = function (frame, slot) {
   // Reuse existing open upvalue for this frame+slot if one exists.
   // This is what makes two closures share the same mutable cell.
-  for (var i = 0; i < this.openUpvalues.length; i++) {
-    var uv = this.openUpvalues[i];
-    if (uv.frame === frame && uv.slot === slot) return uv;
+  for (var i = 0; i < this._openUpvalues.length; i++) {
+    var uv = this._openUpvalues[i];
+    if (uv._frame === frame && uv._slot === slot) return uv;
   }
   var uv = new Upvalue(frame, slot);
-  this.openUpvalues.push(uv);
+  this._openUpvalues.push(uv);
   return uv;
 };
-VM.prototype.closeUpvaluesFor = function (frame) {
+VM.prototype._closeUpvaluesFor = function (frame) {
   // Called on RETURN - close every upvalue that was pointing into this frame.
   // After this, closures that captured from the frame read from upvalue.value.
-  this.openUpvalues = this.openUpvalues.filter(function (uv) {
-    if (uv.frame === frame) {
-      uv.close();
+  this._openUpvalues = this._openUpvalues.filter(function (uv) {
+    if (uv._frame === frame) {
+      uv._close();
       return false;
     }
     return true;
@@ -111,20 +130,15 @@ VM.prototype.run = function () {
   };
   var t = now();
   while (true) {
-    var frame = this.currentFrame;
+    var frame = this._currentFrame;
     var bc = this.bytecode;
-    if (frame.pc >= bc.length) break;
+    if (frame._pc >= bc.length) break;
     var op, operand;
-    var word = bc[frame.pc++];
-    if (ENCODE_BYTECODE) {
-      op = word & 0xff;
-      operand = word >>> 8;
-    } else {
-      op = word[0];
-      operand = word[1];
-    }
+    var word = this.readWord(frame._pc++);
+    op = word.op;
+    operand = word.operand;
 
-    // console.log(frame.pc - 1, op, operand);
+    // console.log(frame._pc - 1, op, operand);
 
     // Debugging protection
     if (TIMING_CHECKS) {
@@ -135,465 +149,586 @@ VM.prototype.run = function () {
         op = OP.POP;
       }
     }
-
-    /* @SWITCH */
-    switch (op) {
-      case OP.LOAD_CONST:
-        this._push(this.constants[operand]);
-        break;
-      case OP.LOAD_LOCAL:
-        this._push(frame.locals[operand]);
-        break;
-      case OP.STORE_LOCAL:
-        frame.locals[operand] = this._pop();
-        break;
-      case OP.LOAD_GLOBAL:
-        this._push(this.globals[this.constants[operand]]);
-        break;
-      case OP.STORE_GLOBAL:
-        this.globals[this.constants[operand]] = this._pop();
-        break;
-      case OP.GET_PROP:
-        {
-          // Stack: [..., obj, key] -> [..., obj, obj[key]]
-          // obj is PEEKED (not popped) - CALL_METHOD needs it as receiver
-          var key = this._pop();
-          var obj = this.peek();
-          this._push(obj[key]);
-          break;
-        }
-      case OP.ADD:
-        {
-          var b = this._pop();
-          this._push(this._pop() + b);
-          break;
-        }
-      case OP.SUB:
-        {
-          var b = this._pop();
-          this._push(this._pop() - b);
-          break;
-        }
-      case OP.MUL:
-        {
-          var b = this._pop();
-          this._push(this._pop() * b);
-          break;
-        }
-      case OP.DIV:
-        {
-          var b = this._pop();
-          this._push(this._pop() / b);
-          break;
-        }
-      case OP.MOD:
-        {
-          var b = this._pop();
-          this._push(this._pop() % b);
-          break;
-        }
-      case OP.BAND:
-        {
-          var b = this._pop();
-          this._push(this._pop() & b);
-          break;
-        }
-      case OP.BOR:
-        {
-          var b = this._pop();
-          this._push(this._pop() | b);
-          break;
-        }
-      case OP.BXOR:
-        {
-          var b = this._pop();
-          this._push(this._pop() ^ b);
-          break;
-        }
-      case OP.SHL:
-        {
-          var b = this._pop();
-          this._push(this._pop() << b);
-          break;
-        }
-      case OP.SHR:
-        {
-          var b = this._pop();
-          this._push(this._pop() >> b);
-          break;
-        }
-      case OP.USHR:
-        {
-          var b = this._pop();
-          this._push(this._pop() >>> b);
-          break;
-        }
-      case OP.LT:
-        {
-          var b = this._pop();
-          this._push(this._pop() < b);
-          break;
-        }
-      case OP.GT:
-        {
-          var b = this._pop();
-          this._push(this._pop() > b);
+    try {
+      /* @SWITCH */
+      switch (op) {
+        case OP.LOAD_CONST:
+          this._push(this.constants[operand]);
+          break;
+        case OP.LOAD_INT:
+          this._push(operand);
+          break;
+        case OP.LOAD_LOCAL:
+          this._push(frame.locals[operand]);
+          break;
+        case OP.STORE_LOCAL:
+          frame.locals[operand] = this._pop();
+          break;
+        case OP.LOAD_GLOBAL:
+          this._push(this.globals[this.constants[operand]]);
+          break;
+        case OP.STORE_GLOBAL:
+          this.globals[this.constants[operand]] = this._pop();
+          break;
+        case OP.GET_PROP:
+          {
+            // Stack: [..., obj, key] -> [..., obj, obj[key]]
+            // obj is PEEKED (not popped) - CALL_METHOD needs it as receiver
+            var key = this._pop();
+            var obj = this.peek();
+            this._push(obj[key]);
+            break;
+          }
+        case OP.ADD:
+          {
+            var b = this._pop();
+            this._push(this._pop() + b);
+            break;
+          }
+        case OP.SUB:
+          {
+            var b = this._pop();
+            this._push(this._pop() - b);
+            break;
+          }
+        case OP.MUL:
+          {
+            var b = this._pop();
+            this._push(this._pop() * b);
+            break;
+          }
+        case OP.DIV:
+          {
+            var b = this._pop();
+            this._push(this._pop() / b);
+            break;
+          }
+        case OP.MOD:
+          {
+            var b = this._pop();
+            this._push(this._pop() % b);
+            break;
+          }
+        case OP.BAND:
+          {
+            var b = this._pop();
+            this._push(this._pop() & b);
+            break;
+          }
+        case OP.BOR:
+          {
+            var b = this._pop();
+            this._push(this._pop() | b);
+            break;
+          }
+        case OP.BXOR:
+          {
+            var b = this._pop();
+            this._push(this._pop() ^ b);
+            break;
+          }
+        case OP.SHL:
+          {
+            var b = this._pop();
+            this._push(this._pop() << b);
+            break;
+          }
+        case OP.SHR:
+          {
+            var b = this._pop();
+            this._push(this._pop() >> b);
+            break;
+          }
+        case OP.USHR:
+          {
+            var b = this._pop();
+            this._push(this._pop() >>> b);
+            break;
+          }
+        case OP.LT:
+          {
+            var b = this._pop();
+            this._push(this._pop() < b);
+            break;
+          }
+        case OP.GT:
+          {
+            var b = this._pop();
+            this._push(this._pop() > b);
+            break;
+          }
+        case OP.EQ:
+          {
+            var b = this._pop();
+            this._push(this._pop() === b);
+            break;
+          }
+        case OP.LTE:
+          {
+            var b = this._pop();
+            this._push(this._pop() <= b);
+            break;
+          }
+        case OP.GTE:
+          {
+            var b = this._pop();
+            this._push(this._pop() >= b);
+            break;
+          }
+        case OP.NEQ:
+          {
+            var b = this._pop();
+            this._push(this._pop() !== b);
+            break;
+          }
+        case OP.LOOSE_EQ:
+          {
+            var b = this._pop();
+            this._push(this._pop() == b);
+            break;
+          }
+        case OP.LOOSE_NEQ:
+          {
+            var b = this._pop();
+            this._push(this._pop() != b);
+            break;
+          }
+        case OP.IN:
+          {
+            var b = this._pop();
+            this._push(this._pop() in b);
+            break;
+          }
+        case OP.INSTANCEOF:
+          {
+            var ctor = this._pop();
+            var obj = this._pop();
+            if (typeof ctor === "function") {
+              // Native constructor (e.g. Array, Date) - native instanceof is fine
+              this._push(obj instanceof ctor);
+            } else {
+              // VM Closure - ctor.prototype was set by MAKE_CLOSURE / user assignment.
+              // Walk obj's prototype chain looking for identity with ctor.prototype.
+              var proto = ctor.prototype; // the .prototype property on the Closure
+              var target = Object.getPrototypeOf(obj);
+              var result = false;
+              while (target !== null) {
+                if (target === proto) {
+                  result = true;
+                  break;
+                }
+                target = Object.getPrototypeOf(target);
+              }
+              this._push(result);
+            }
+            break;
+          }
+        case OP.UNARY_NEG:
+          this._push(-this._pop());
           break;
-        }
-      case OP.EQ:
-        {
-          var b = this._pop();
-          this._push(this._pop() === b);
+        case OP.UNARY_POS:
+          this._push(this._pop());
           break;
-        }
-      case OP.LTE:
-        {
-          var b = this._pop();
-          this._push(this._pop() <= b);
+        case OP.UNARY_NOT:
+          this._push(!this._pop());
           break;
-        }
-      case OP.GTE:
-        {
-          var b = this._pop();
-          this._push(this._pop() >= b);
+        case OP.UNARY_BITNOT:
+          this._push(~this._pop());
           break;
-        }
-      case OP.NEQ:
-        {
-          var b = this._pop();
-          this._push(this._pop() !== b);
+        case OP.TYPEOF:
+          this._push(typeof this._pop());
           break;
-        }
-      case OP.LOOSE_EQ:
-        {
-          var b = this._pop();
-          this._push(this._pop() == b);
+        case OP.VOID:
+          this._pop();
+          this._push(undefined);
+          break;
+        case OP.TYPEOF_SAFE:
+          {
+            // operand is a const index holding the variable name string.
+            // Mimics JS semantics: typeof undeclaredVar === "undefined" (no throw).
+            var name = this._pop(); // LOAD_CONST pushed the name - consume it
+            var val = Object.prototype.hasOwnProperty.call(this.globals, name) ? this.globals[name] : undefined;
+            this._push(typeof val);
+            break;
+          }
+        case OP.JUMP:
+          frame._pc = operand;
           break;
-        }
-      case OP.LOOSE_NEQ:
-        {
-          var b = this._pop();
-          this._push(this._pop() != b);
+        case OP.JUMP_IF_FALSE:
+          if (!this._pop()) frame._pc = operand;
           break;
-        }
-      case OP.IN:
-        {
-          var b = this._pop();
-          this._push(this._pop() in b);
+        case OP.JUMP_IF_TRUE_OR_POP:
+          // || semantics: if truthy, we're done - leave value, jump over RHS.
+          // If falsy, discard it and fall through to evaluate RHS.
+          if (this.peek()) {
+            frame._pc = operand;
+          } else {
+            this._pop();
+          }
           break;
-        }
-      case OP.INSTANCEOF:
-        {
-          var ctor = this._pop();
-          var obj = this._pop();
-          if (typeof ctor === "function") {
-            // Native constructor (e.g. Array, Date) - native instanceof is fine
-            this._push(obj instanceof ctor);
+        case OP.JUMP_IF_FALSE_OR_POP:
+          // && semantics: if falsy, we're done - leave value, jump over RHS.
+          // If truthy, discard it and fall through to evaluate RHS.
+          if (!this.peek()) {
+            frame._pc = operand;
           } else {
-            // VM Closure - ctor.prototype was set by MAKE_CLOSURE / user assignment.
-            // Walk obj's prototype chain looking for identity with ctor.prototype.
-            var proto = ctor.prototype; // the .prototype property on the Closure
-            var target = Object.getPrototypeOf(obj);
-            var result = false;
-            while (target !== null) {
-              if (target === proto) {
-                result = true;
-                break;
+            this._pop();
+          }
+          break;
+        case OP.MAKE_CLOSURE:
+          {
+            // operand = startPc: absolute index of the function body's first instruction.
+            // Metadata is read from the value stack (pushed by _emitClosureMetadata).
+            // Stack layout when we arrive here (top is rightmost):
+            //   [isLocal_0, idx_0, ..., isLocal_N-1, idx_N-1, uvCount, localCount, paramCount]
+            var startPc = operand;
+            var paramCount = this._pop();
+            var localCount = this._pop();
+            var uvCount = this._pop();
+
+            // Upvalues were pushed in order 0..N-1 so we pop them in reverse.
+            var uvDescs = new Array(uvCount);
+            for (var i = uvCount - 1; i >= 0; i--) {
+              var uvIndex = this._pop();
+              var isLocalRaw = this._pop();
+              uvDescs[i] = {
+                isLocal: isLocalRaw,
+                _index: uvIndex
+              };
+            }
+            var fn = {
+              paramCount: paramCount,
+              localCount: localCount,
+              startPc: startPc,
+              upvalueDescriptors: uvDescs
+            };
+            var closure = new Closure(fn);
+            for (var i = 0; i < uvDescs.length; i++) {
+              var uvd = uvDescs[i];
+              if (uvd.isLocal) {
+                // Capture directly from current frame's local slot
+                closure.upvalues.push(this.captureUpvalue(frame, uvd._index));
+              } else {
+                // Relay - take upvalue from the enclosing closure's list
+                closure.upvalues.push(frame.closure.upvalues[uvd._index]);
               }
-              target = Object.getPrototypeOf(target);
             }
-            this._push(result);
+            // Wrap in a native callable shell so host code (array methods,
+            // test assertions, setTimeout, etc.) can invoke VM closures.
+            // CLOSURE_SYM lets VM-internal CALL/NEW bypass the sub-VM entirely.
+            var self = this;
+            var shell = function (c) {
+              return function () {
+                var args = Array.prototype.slice.call(arguments);
+                var sub = new VM(self.bytecode, 0, self.constants, self.globals);
+                // Sloppy-mode: null/undefined thisArg → global object
+                var f = new Frame(c, null, null, this == null ? self.globals : this);
+                for (var i = 0; i < args.length; i++) f.locals[i] = args[i];
+                f.locals[c.fn.paramCount] = args;
+                sub._currentFrame = f;
+                return sub.run();
+              };
+            }(closure);
+            shell[CLOSURE_SYM] = closure;
+            shell.prototype = closure.prototype; // unified prototype for new/instanceof
+            this._push(shell);
+            break;
           }
-          break;
-        }
-      case OP.UNARY_NEG:
-        this._push(-this._pop());
-        break;
-      case OP.UNARY_POS:
-        this._push(this._pop());
-        break;
-      case OP.UNARY_NOT:
-        this._push(!this._pop());
-        break;
-      case OP.UNARY_BITNOT:
-        this._push(~this._pop());
-        break;
-      case OP.TYPEOF:
-        this._push(typeof this._pop());
-        break;
-      case OP.VOID:
-        this._pop();
-        this._push(undefined);
-        break;
-      case OP.TYPEOF_SAFE:
-        {
-          // operand is a const index holding the variable name string.
-          // Mimics JS semantics: typeof undeclaredVar === "undefined" (no throw).
-          var name = this._pop(); // LOAD_CONST pushed the name - consume it
-          var val = Object.prototype.hasOwnProperty.call(this.globals, name) ? this.globals[name] : undefined;
-          this._push(typeof val);
-          break;
-        }
-      case OP.JUMP:
-        frame.pc = operand;
-        break;
-      case OP.JUMP_IF_FALSE:
-        if (!this._pop()) frame.pc = operand;
-        break;
-      case OP.JUMP_IF_TRUE_OR_POP:
-        // || semantics: if truthy, we're done - leave value, jump over RHS.
-        // If falsy, discard it and fall through to evaluate RHS.
-        if (this.peek()) {
-          frame.pc = operand;
-        } else {
-          this._pop();
-        }
-        break;
-      case OP.JUMP_IF_FALSE_OR_POP:
-        // && semantics: if falsy, we're done - leave value, jump over RHS.
-        // If truthy, discard it and fall through to evaluate RHS.
-        if (!this.peek()) {
-          frame.pc = operand;
-        } else {
-          this._pop();
-        }
-        break;
-      case OP.MAKE_CLOSURE:
-        {
-          var fn = this.constants[operand];
-          var closure = new Closure(fn);
-          for (var i = 0; i < fn.upvalueDescriptors.length; i++) {
-            var desc = fn.upvalueDescriptors[i];
-            if (desc.isLocal) {
-              // Capture directly from current frame's local slot
-              closure.upvalues.push(this.captureUpvalue(frame, desc._index));
-            } else {
-              // Relay - take upvalue from the enclosing closure's list
-              closure.upvalues.push(frame.closure.upvalues[desc._index]);
+        case OP.DATA:
+          // Should never appear in compiled output (reserved opcode slot).
+          throw new Error("DATA opcode executed at pc " + (frame._pc - 1));
+        case OP.LOAD_UPVALUE:
+          this._push(frame.closure.upvalues[operand]._read());
+          break;
+        case OP.STORE_UPVALUE:
+          frame.closure.upvalues[operand]._write(this._pop());
+          break;
+        case OP.BUILD_ARRAY:
+          {
+            // Pop \`operand\` values off the stack in reverse, assemble array.
+            var elems = this._stack.splice(this._stack.length - operand);
+            this._push(elems);
+            break;
+          }
+        case OP.BUILD_OBJECT:
+          {
+            // Stack has: key0, val0, key1, val1 ... keyN, valN  (pushed left->right)
+            // Pop all pairs and build the object.
+            var pairs = this._stack.splice(this._stack.length - operand * 2);
+            var o = {};
+            for (var i = 0; i < pairs.length; i += 2) {
+              o[pairs[i]] = pairs[i + 1]; // key at even index, val at odd
             }
+            this._push(o);
+            break;
+          }
+        case OP.SET_PROP:
+          {
+            // Stack: [..., obj, key, val]
+            // Leaves val on stack - assignment is an expression in JS.
+            var val = this._pop();
+            var key = this._pop();
+            var obj = this._pop();
+            // Reflect.set performs [[Set]] without throwing on failure,
+            // correctly simulating sloppy-mode assignment from a strict-mode host
+            // (output.js is an ES module). This also properly invokes inherited
+            // or prototype-chain setter functions.
+            Reflect.set(obj, key, val);
+            this._push(val); // assignment expression evaluates to the assigned value
+            break;
+          }
+        case OP.GET_PROP_COMPUTED:
+          {
+            // Stack: [..., obj, key]  - key is a runtime value (nums[i])
+            // Mirrors GET_PROP but pops the key that was pushed dynamically.
+            var key = this._pop();
+            var obj = this._pop();
+            this._push(obj[key]);
+            break;
           }
-          // Wrap in a native callable shell so host code (array methods,
-          // test assertions, setTimeout, etc.) can invoke VM closures.
-          // CLOSURE_SYM lets VM-internal CALL/NEW bypass the sub-VM entirely.
-          var self = this;
-          var shell = function (c) {
-            return function () {
-              var args = Array.prototype.slice.call(arguments);
-              var sub = new VM(self.bytecode, 0, self.constants, self.globals);
-              // Sloppy-mode: null/undefined thisArg → global object
-              var f = new Frame(c, null, null, this == null ? self.globals : this);
+        case OP.DELETE_PROP:
+          {
+            var key = this._pop();
+            var obj = this._pop();
+            this._push(delete obj[key]);
+            break;
+          }
+        case OP.CALL:
+          {
+            var args = this._stack.splice(this._stack.length - operand);
+            var callee = this._pop();
+            if (callee && callee[CLOSURE_SYM]) {
+              // VM closure - run directly in this VM, no sub-VM overhead
+              var c = callee[CLOSURE_SYM];
+              // Sloppy-mode: plain function call → global object as this
+              var f = new Frame(c, frame._pc, frame, this.globals);
               for (var i = 0; i < args.length; i++) f.locals[i] = args[i];
               f.locals[c.fn.paramCount] = args;
-              sub.currentFrame = f;
-              return sub.run();
-            };
-          }(closure);
-          shell[CLOSURE_SYM] = closure;
-          shell.prototype = closure.prototype; // unified prototype for new/instanceof
-          this._push(shell);
-          break;
-        }
-      case OP.LOAD_UPVALUE:
-        this._push(frame.closure.upvalues[operand].read());
-        break;
-      case OP.STORE_UPVALUE:
-        frame.closure.upvalues[operand].write(this._pop());
-        break;
-      case OP.BUILD_ARRAY:
-        {
-          // Pop \`operand\` values off the stack in reverse, assemble array.
-          var elems = this._stack.splice(this._stack.length - operand);
-          this._push(elems);
-          break;
-        }
-      case OP.BUILD_OBJECT:
-        {
-          // Stack has: key0, val0, key1, val1 ... keyN, valN  (pushed left->right)
-          // Pop all pairs and build the object.
-          var pairs = this._stack.splice(this._stack.length - operand * 2);
-          var o = {};
-          for (var i = 0; i < pairs.length; i += 2) {
-            o[pairs[i]] = pairs[i + 1]; // key at even index, val at odd
-          }
-          this._push(o);
-          break;
-        }
-      case OP.SET_PROP:
-        {
-          // Stack: [..., obj, key, val]
-          // Leaves val on stack - assignment is an expression in JS.
-          var val = this._pop();
-          var key = this._pop();
-          var obj = this._pop();
-          // Reflect.set performs [[Set]] without throwing on failure,
-          // correctly simulating sloppy-mode assignment from a strict-mode host
-          // (output.js is an ES module). This also properly invokes inherited
-          // or prototype-chain setter functions.
-          Reflect.set(obj, key, val);
-          this._push(val); // assignment expression evaluates to the assigned value
-          break;
-        }
-      case OP.GET_PROP_COMPUTED:
-        {
-          // Stack: [..., obj, key]  - key is a runtime value (nums[i])
-          // Mirrors GET_PROP but pops the key that was pushed dynamically.
-          var key = this._pop();
-          var obj = this._pop();
-          this._push(obj[key]);
-          break;
-        }
-      case OP.DELETE_PROP:
-        {
-          var key = this._pop();
-          var obj = this._pop();
-          this._push(delete obj[key]);
-          break;
-        }
-      case OP.CALL:
-        {
-          var args = this._stack.splice(this._stack.length - operand);
-          var callee = this._pop();
-          if (callee && callee[CLOSURE_SYM]) {
-            // VM closure - run directly in this VM, no sub-VM overhead
-            var c = callee[CLOSURE_SYM];
-            // Sloppy-mode: plain function call → global object as this
-            var f = new Frame(c, frame.pc, frame, this.globals);
-            for (var i = 0; i < args.length; i++) f.locals[i] = args[i];
-            f.locals[c.fn.paramCount] = args;
-            this.frameStack.push(this.currentFrame);
-            this.currentFrame = f;
-          } else {
-            // Native function
-            this._push(callee.apply(null, args));
+              this._frameStack.push(this._currentFrame);
+              this._currentFrame = f;
+            } else {
+              // Native function
+              this._push(callee.apply(null, args));
+            }
+            break;
           }
-          break;
-        }
-      case OP.CALL_METHOD:
-        {
-          var args = this._stack.splice(this._stack.length - operand);
-          var callee = this._pop();
-          var receiver = this._pop(); // left on stack by GET_PROP
-          if (callee && callee[CLOSURE_SYM]) {
-            // VM closure - run directly in this VM with receiver as this
-            var c = callee[CLOSURE_SYM];
-            var f = new Frame(c, frame.pc, frame, receiver);
-            for (var i = 0; i < args.length; i++) f.locals[i] = args[i];
-            f.locals[c.fn.paramCount] = args;
-            this.frameStack.push(this.currentFrame);
-            this.currentFrame = f;
-          } else {
-            // Native method
-            this._push(callee.apply(receiver, args));
+        case OP.CALL_METHOD:
+          {
+            var args = this._stack.splice(this._stack.length - operand);
+            var callee = this._pop();
+            var receiver = this._pop(); // left on stack by GET_PROP
+            if (callee && callee[CLOSURE_SYM]) {
+              // VM closure - run directly in this VM with receiver as this
+              var c = callee[CLOSURE_SYM];
+              var f = new Frame(c, frame._pc, frame, receiver);
+              for (var i = 0; i < args.length; i++) f.locals[i] = args[i];
+              f.locals[c.fn.paramCount] = args;
+              this._frameStack.push(this._currentFrame);
+              this._currentFrame = f;
+            } else {
+              // Native method
+              this._push(callee.apply(receiver, args));
+            }
+            break;
           }
-          break;
-        }
-      case OP.LOAD_THIS:
-        this._push(frame.thisVal);
-        break;
-      case OP.NEW:
-        {
-          var args = this._stack.splice(this._stack.length - operand);
-          var callee = this._pop();
-          if (callee && callee[CLOSURE_SYM]) {
-            // VM closure constructor - prototype is unified via shell.prototype = closure.prototype
-            var c = callee[CLOSURE_SYM];
-            var newObj = Object.create(c.prototype || null);
-            var f = new Frame(c, frame.pc, frame, newObj);
-            f._newObj = newObj;
-            for (var i = 0; i < args.length; i++) f.locals[i] = args[i];
-            f.locals[c.fn.paramCount] = args;
-            this.frameStack.push(this.currentFrame);
-            this.currentFrame = f;
-          } else {
-            // Native constructor (e.g. new Error(), new Date()).
-            // Reflect.construct is required - Object.create+apply does NOT set
-            // internal slots ([[NumberData]], [[StringData]], etc.) for built-ins.
-            this._push(Reflect.construct(callee, args));
+        case OP.LOAD_THIS:
+          this._push(frame.thisVal);
+          break;
+        case OP.NEW:
+          {
+            var args = this._stack.splice(this._stack.length - operand);
+            var callee = this._pop();
+            if (callee && callee[CLOSURE_SYM]) {
+              // VM closure constructor - prototype is unified via shell.prototype = closure.prototype
+              var c = callee[CLOSURE_SYM];
+              var newObj = Object.create(c.prototype || null);
+              var f = new Frame(c, frame._pc, frame, newObj);
+              f._newObj = newObj;
+              for (var i = 0; i < args.length; i++) f.locals[i] = args[i];
+              f.locals[c.fn.paramCount] = args;
+              this._frameStack.push(this._currentFrame);
+              this._currentFrame = f;
+            } else {
+              // Native constructor (e.g. new Error(), new Date()).
+              // Reflect.construct is required - Object.create+apply does NOT set
+              // internal slots ([[NumberData]], [[StringData]], etc.) for built-ins.
+              this._push(Reflect.construct(callee, args));
+            }
+            break;
           }
-          break;
-        }
-      case OP.RETURN:
-        {
-          var retVal = this._pop();
-          this.closeUpvaluesFor(frame); // must happen before frame is abandoned
-          if (this.frameStack.length === 0) return retVal;
+        case OP.RETURN:
+          {
+            var retVal = this._pop();
+            this._closeUpvaluesFor(frame); // must happen before frame is abandoned
+            if (this._frameStack.length === 0) return retVal;
 
-          // new-call rule: primitive return -> discard, use the constructed object instead
-          if (frame._newObj !== null) {
-            if (typeof retVal !== "object" || retVal === null) retVal = frame._newObj;
+            // new-call rule: primitive return -> discard, use the constructed object instead
+            if (frame._newObj !== null) {
+              if (typeof retVal !== "object" || retVal === null) retVal = frame._newObj;
+            }
+            this._currentFrame = this._frameStack.pop();
+            this._push(retVal);
+            break;
           }
-          this.currentFrame = this.frameStack.pop();
-          this._push(retVal);
+        case OP.POP:
+          this._pop();
           break;
-        }
-      case OP.POP:
-        this._pop();
-        break;
-      case OP.DUP:
-        this._push(this.peek());
-        break;
-      case OP.THROW:
-        throw this._pop();
-      case OP.FOR_IN_SETUP:
-        {
-          // Pop the object; build an ordered list of all enumerable own+inherited
-          // string keys by walking the prototype chain manually.
-          // Uses getOwnPropertyNames (includes non-enumerable) + descriptor check,
-          // so we never rely on Object.keys() and we handle inheritance correctly.
-          var obj = this._pop();
-          var keys = [];
-          if (obj !== null && obj !== undefined) {
-            var seen = Object.create(null);
-            var cur = Object(obj); // box primitives
-            while (cur !== null) {
-              var ownNames = Object.getOwnPropertyNames(cur);
-              for (var i = 0; i < ownNames.length; i++) {
-                var k = ownNames[i];
-                if (!(k in seen)) {
-                  seen[k] = true;
-                  var propDesc = Object.getOwnPropertyDescriptor(cur, k);
-                  if (propDesc && propDesc.enumerable) {
-                    keys.push(k);
+        case OP.DUP:
+          this._push(this.peek());
+          break;
+        case OP.THROW:
+          throw this._pop();
+        case OP.FOR_IN_SETUP:
+          {
+            // Pop the object; build an ordered list of all enumerable own+inherited
+            // string keys by walking the prototype chain manually.
+            // Uses getOwnPropertyNames (includes non-enumerable) + descriptor check,
+            // so we never rely on Object.keys() and we handle inheritance correctly.
+            var obj = this._pop();
+            var keys = [];
+            if (obj !== null && obj !== undefined) {
+              var seen = Object.create(null);
+              var cur = Object(obj); // box primitives
+              while (cur !== null) {
+                var ownNames = Object.getOwnPropertyNames(cur);
+                for (var i = 0; i < ownNames.length; i++) {
+                  var k = ownNames[i];
+                  if (!(k in seen)) {
+                    seen[k] = true;
+                    var propDesc = Object.getOwnPropertyDescriptor(cur, k);
+                    if (propDesc && propDesc.enumerable) {
+                      keys.push(k);
+                    }
                   }
                 }
+                cur = Object.getPrototypeOf(cur);
               }
-              cur = Object.getPrototypeOf(cur);
             }
+            this._push({
+              _keys: keys,
+              i: 0
+            });
+            break;
           }
-          this._push({
-            keys: keys,
-            i: 0
-          });
-          break;
-        }
-      case OP.FOR_IN_NEXT:
-        {
-          // operand = jump target for the done case.
-          // Pop the iterator; if exhausted jump to exit, otherwise push next key.
-          var iter = this._pop();
-          if (iter.i >= iter.keys.length) {
-            frame.pc = operand;
-          } else {
-            this._push(iter.keys[iter.i++]);
+        case OP.FOR_IN_NEXT:
+          {
+            // operand = jump target for the done case.
+            // Pop the iterator; if exhausted jump to exit, otherwise push next key.
+            var iter = this._pop();
+            if (iter.i >= iter._keys.length) {
+              frame._pc = operand;
+            } else {
+              this._push(iter._keys[iter.i++]);
+            }
+            break;
           }
-          break;
-        }
-      case OP.PATCH:
-        {
-          // Pop destination PC, then write constants[operand] (packed word array)
-          // directly into this.bytecode starting at that PC.
-          var destPc = this._pop();
-          var words = this.constants[operand];
-          if (ENCODE_BYTECODE) {
-            words = decodeBytecode(words);
-          }
-          for (var i = 0; i < words.length; i++) {
-            this.bytecode[destPc + i] = words[i];
+        case OP.PATCH:
+          {
+            // Writes at operand the bytecode[arg1:arg2]
+            var destPc = operand;
+            var instructions = this.bytecode.slice(this._pop(), this._pop());
+            for (var i = 0; i < instructions.length; i++) {
+              this.bytecode[destPc + i] = instructions[i];
+            }
+            break;
           }
-          break;
-        }
-      default:
-        throw new Error("Unknown opcode: " + op + " at pc " + (frame.pc - 1));
+        case OP.TRY_SETUP:
+          {
+            // Push an exception handler record onto the current frame.
+            // Saves: catch PC (operand), current stack depth, current frame-stack depth.
+            // If an exception is thrown before TRY_END fires, the VM jumps here.
+            frame._handlerStack.push({
+              handlerPc: operand,
+              stackDepth: this._stack.length,
+              frameStackDepth: this._frameStack.length
+            });
+            break;
+          }
+        case OP.TRY_END:
+          {
+            // Normal exit from a try block — disarm the exception handler.
+            frame._handlerStack.pop();
+            break;
+          }
+        case OP.DEFINE_GETTER:
+          {
+            // Stack: [..., obj, key, getterFn]
+            // Pops all three; defines an enumerable, configurable getter on obj.
+            // If a setter was already defined for this key, it is preserved.
+            var getterFn = this._pop();
+            var key = this._pop();
+            var obj = this._pop();
+            var existingDesc = Object.getOwnPropertyDescriptor(obj, key);
+            var getDesc = {
+              get: getterFn,
+              configurable: true,
+              enumerable: true
+            };
+            if (existingDesc && typeof existingDesc.set === "function") {
+              getDesc.set = existingDesc.set;
+            }
+            Object.defineProperty(obj, key, getDesc);
+            break;
+          }
+        case OP.DEFINE_SETTER:
+          {
+            // Stack: [..., obj, key, setterFn]
+            // Pops all three; defines an enumerable, configurable setter on obj.
+            // If a getter was already defined for this key, it is preserved.
+            var setterFn = this._pop();
+            var key = this._pop();
+            var obj = this._pop();
+            var existingDesc = Object.getOwnPropertyDescriptor(obj, key);
+            var setDesc = {
+              set: setterFn,
+              configurable: true,
+              enumerable: true
+            };
+            if (existingDesc && typeof existingDesc.get === "function") {
+              setDesc.get = existingDesc.get;
+            }
+            Object.defineProperty(obj, key, setDesc);
+            break;
+          }
+        case OP.DEBUGGER:
+          {
+            debugger;
+            break;
+          }
+        default:
+          throw new Error("Unknown opcode: " + op + " at pc " + (frame._pc - 1));
+      }
+    } catch (err) {
+      // Exception handler unwinding (CPython-style frame walk, Lua-style upvalue close).
+      // Walk from the current frame upward until we find a frame that has an open
+      // exception handler (TRY_SETUP without a matching TRY_END).
+      // For every frame we abandon along the way, close its captured upvalues.
+      var handledFrame = null;
+      var searchFrame = this._currentFrame;
+      while (true) {
+        if (searchFrame._handlerStack.length > 0) {
+          handledFrame = searchFrame;
+          break;
+        }
+        // No handler in this frame — abandon it and walk up.
+        this._closeUpvaluesFor(searchFrame);
+        if (this._frameStack.length === 0) break;
+        searchFrame = this._frameStack.pop();
+        this._currentFrame = searchFrame;
+      }
+      if (!handledFrame) throw err; // no handler anywhere — propagate to host
+
+      var h = handledFrame._handlerStack.pop();
+      // Restore the VM value stack to the depth recorded at TRY_SETUP time,
+      // then push the caught exception so the catch binding can store it.
+      this._stack.length = h.stackDepth;
+      this._push(err);
+      // Discard any call-frames that were pushed inside the try body
+      // (functions called from within the try block that are still live).
+      this._frameStack.length = h.frameStackDepth;
+      // Jump to the catch block.
+      handledFrame._pc = h.handlerPc;
+      this._currentFrame = handledFrame;
     }
   }
 };