poe-code 11.0.17 → 11.0.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "poe-code",
-  "version": "11.0.17",
+  "version": "11.0.19",
   "description": "CLI tool to configure Poe API for developer workflows.",
   "license": "MIT",
   "type": "module",

package/packages/safejs/dist/chunks/{chunk-COHIMIAF.js → chunk-2USRJY3R.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-D4DDI3HH.js";
+} from "./chunk-TIKUUEG2.js";
 
 // packages/safejs/src/migrate.ts
 import { createHash } from "node:crypto";
@@ -8055,4 +8055,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-COHIMIAF.js.map
+//# sourceMappingURL=chunk-2USRJY3R.js.map

package/packages/safejs/dist/chunks/{chunk-D4DDI3HH.js → chunk-TIKUUEG2.js}

@@ -16879,7 +16879,6 @@ function graphEntries(value) {
   if (isSandboxArguments(value)) {
     return getSandboxArgumentEntries(value).map(([key, entry]) => [`.${key}`, entry]);
   }
-  if (Array.isArray(value)) return value.map((entry, index) => [`[${index}]`, entry]);
   if (value instanceof Map) {
     return [...value.entries()].flatMap(([key, entry], index) => [
       [`.<map>[${index}].key`, key],
@@ -16893,7 +16892,7 @@ function graphEntries(value) {
   for (const key of Object.keys(value)) {
     const descriptor = Object.getOwnPropertyDescriptor(value, key);
     if (descriptor !== void 0 && "value" in descriptor)
-      entries.push([`.${key}`, descriptor.value]);
+      entries.push([Array.isArray(value) ? `[${key}]` : `.${key}`, descriptor.value]);
   }
   return entries;
 }
@@ -16931,6 +16930,35 @@ function serializeArguments(value, serializeValue) {
   };
 }
 
+// packages/safejs/src/snapshot/arrays.ts
+function requiresArrayEntries(value) {
+  const keys = Object.keys(value);
+  return keys.length !== value.length || keys.some((key, index) => key !== String(index));
+}
+function serializeArray(value, serializeValue) {
+  if (!requiresArrayEntries(value)) {
+    return {
+      kind: "array",
+      items: Array.from({ length: value.length }, (_, index) => {
+        const key = String(index);
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        return serializeValue(
+          descriptor !== void 0 && "value" in descriptor ? descriptor.value : void 0,
+          key
+        );
+      })
+    };
+  }
+  const entries = /* @__PURE__ */ Object.create(null);
+  for (const key of Object.keys(value)) {
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+    if (descriptor !== void 0 && "value" in descriptor) {
+      entries[key] = serializeValue(descriptor.value, key);
+    }
+  }
+  return { kind: "array", length: value.length, entries };
+}
+
 // packages/safejs/src/snapshot/dump-format.ts
 var DUMP_FORMAT_VERSION = 1;
 var EXECUTION_SEMANTICS = "jobs-v6";
@@ -17017,10 +17045,10 @@ function serializeHeapReference(value, path, state) {
         return serialized === SKIP_VALUE ? { kind: "undefined" } : serialized;
       });
     } else if (Array.isArray(value)) {
-      state.heap[String(id)] = {
-        kind: "array",
-        items: serializeArrayItems(value, path, state)
-      };
+      state.heap[String(id)] = serializeArray(value, (entry, key) => {
+        const serialized = serializeDumpValue(entry, `${path}[${key}]`, state);
+        return serialized === SKIP_VALUE ? { kind: "undefined" } : serialized;
+      });
     } else {
       const errorType = sandboxErrorTypes.get(value);
       state.heap[String(id)] = {
@@ -17057,7 +17085,7 @@ function indexHeapContainers(snapshot) {
   const heapIds = /* @__PURE__ */ new WeakMap();
   let nextId = 1;
   for (const [value, stat2] of stats.entries()) {
-    if (stat2.count > 1 || stat2.cyclic || isSandboxArguments(value) || sandboxErrorTypes.has(value)) {
+    if (stat2.count > 1 || stat2.cyclic || Array.isArray(value) && requiresArrayEntries(value) || isSandboxArguments(value) || sandboxErrorTypes.has(value)) {
       heapIds.set(value, nextId);
       nextId += 1;
     }
@@ -17090,7 +17118,7 @@ function collectContainerStats(value, stats, ancestors) {
   }
   stat2.expanded = true;
   ancestors.add(value);
-  const entries = isSandboxArguments(value) ? getSandboxArgumentEntries(value).map(([, entry]) => entry) : Array.isArray(value) ? getArrayDataItems(value) : getEnumerableDataValues(value);
+  const entries = isSandboxArguments(value) ? getSandboxArgumentEntries(value).map(([, entry]) => entry) : getEnumerableDataValues(value);
   for (const entry of entries) {
     collectContainerStats(entry, stats, ancestors);
   }
@@ -17209,7 +17237,7 @@ function validateDumpHeap(root, state) {
       continue;
     }
     if (entry.kind === "array") {
-      requireArray(entry.items, `${path}.items`, state);
+      validateArrayHeap(entry, path, state);
       continue;
     }
     if (entry.kind === "object") {
@@ -17356,6 +17384,30 @@ function validateGeneratorShape(record2, path, state) {
     }
   });
 }
+function validateArrayHeap(record2, path, state) {
+  if (Object.hasOwn(record2, "items")) {
+    requireArray(record2.items, `${path}.items`, state);
+    if (Object.hasOwn(record2, "length") || Object.hasOwn(record2, "entries"))
+      fail("invalidValue", path, "array must use either items or length and entries");
+    return;
+  }
+  const length = requireSafeInteger(record2.length, `${path}.length`, 0);
+  if (length > 4294967295) fail("invalidValue", `${path}.length`, "exceeds maximum array length");
+  if (length > state.limits.maxEntries)
+    fail(
+      "budgetExceeded",
+      `${path}.length`,
+      `exceeds collection entry limit ${state.limits.maxEntries}`
+    );
+  const entries = requireRecord(record2.entries, `${path}.entries`);
+  for (const key of Object.keys(entries)) {
+    if (key === "length")
+      fail("invalidValue", `${path}.entries.length`, "array length is stored separately");
+    const index = Number(key);
+    if (String(index) === key && Number.isInteger(index) && index >= 0 && index < 4294967295 && index >= length)
+      fail("invalidValue", `${path}.entries${formatKey(key)}`, "array index exceeds its length");
+  }
+}
 function validateErrorType(record2, path) {
   if (!Object.hasOwn(record2, "errorType")) return;
   if (record2.kind !== "object" || !sandboxErrorNames.includes(record2.errorType)) {
@@ -18107,9 +18159,10 @@ async function evaluateTryStatement(node, context, evaluateNode2) {
   }
   return finalizerResult;
 }
-function createCapturedException(reason, stackFrames) {
+function createCapturedException(reason, stackFrames, sandbox = false) {
   return {
     reason,
+    sandbox,
     stackFrames,
     [capturedExceptionBrand]: true
   };
@@ -18117,7 +18170,7 @@ function createCapturedException(reason, stackFrames) {
 function isCapturedException(value) {
   return typeof value === "object" && value !== null && capturedExceptionBrand in value;
 }
-function coerceThrownValue(reason, budget, stackFrames, span) {
+function coerceThrownValue(reason, budget, stackFrames, span, sandbox = false) {
   if (isSubsetErrorValue(reason)) {
     attachErrorSpan(reason, readErrorSpan(reason) ?? span);
     return reason;
@@ -18129,6 +18182,9 @@ function coerceThrownValue(reason, budget, stackFrames, span) {
       span
     });
   }
+  if (sandbox) {
+    return reason;
+  }
   if (isErrorLikeValue(reason)) {
     return createSubsetErrorValue(reason.name || "Error", reason.message, stackFrames, budget, {
       chargeBudget: false,
@@ -25846,7 +25902,7 @@ async function evaluateNode(node, context) {
         error
       };
     }
-    const exception = isCapturedException(error) ? coerceThrownValue(error.reason, context.budget, error.stackFrames, node.span) : coerceThrownValue(error, context.budget, context.callStack, node.span);
+    const exception = isCapturedException(error) ? coerceThrownValue(error.reason, context.budget, error.stackFrames, node.span, error.sandbox) : coerceThrownValue(error, context.budget, context.callStack, node.span, true);
     return {
       kind: "throw",
       hasValue: true,
@@ -27541,7 +27597,7 @@ async function evaluateStringMethodCall(node, target, methodName, context) {
     if (isFatalSandboxError(error)) {
       throw error;
     }
-    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)]);
+    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)], true);
   } finally {
     leaveCall();
   }
@@ -27568,7 +27624,7 @@ async function evaluateArrayMethodCall(node, target, methodName, context) {
     if (isFatalSandboxError(error)) {
       throw error;
     }
-    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)]);
+    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)], true);
   } finally {
     leaveCall();
   }
@@ -27595,7 +27651,7 @@ async function evaluateMapMethodCall(node, target, methodName, context) {
     if (isFatalSandboxError(error)) {
       throw error;
     }
-    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)]);
+    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)], true);
   } finally {
     leaveCall();
   }
@@ -27622,7 +27678,7 @@ async function evaluateSetMethodCall(node, target, methodName, context) {
     if (isFatalSandboxError(error)) {
       throw error;
     }
-    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)]);
+    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)], true);
   } finally {
     leaveCall();
   }
@@ -28000,7 +28056,7 @@ async function evaluateNumberMethodCall(node, target, methodName, context) {
     if (isFatalSandboxError(error)) {
       throw error;
     }
-    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)]);
+    throw captureException(error, [...context.callStack, formatStackFrame(node, methodName)], true);
   }
 }
 function createArrayMethodOptions(context) {
@@ -28042,12 +28098,15 @@ async function invokeSandboxClosure(callee, args, context, stack, span, thisValu
     if (isSandboxPromise(result) && result.synchronousPrefix !== void 0) {
       await result.synchronousPrefix;
     }
-    return !construct && callee.async === true ? normalizeClosureResult(wrapHostResult(result, stack), context.budget) : await wrapHostResult(result, stack);
+    return !construct && callee.async === true ? normalizeClosureResult(
+      wrapHostResult(result, stack, callee.sandbox === true),
+      context.budget
+    ) : await wrapHostResult(result, stack, callee.sandbox === true);
   } catch (error) {
     if (isFatalSandboxError(error)) {
       throw error;
     }
-    throw captureException(error, stack);
+    throw captureException(error, stack, callee.sandbox === true);
   } finally {
     leaveCall();
   }
@@ -28172,19 +28231,19 @@ function isInterpreterError(value) {
 function hasOwnProperty2(value, name) {
   return Object.prototype.hasOwnProperty.call(value, name);
 }
-function wrapHostResult(result, stack) {
+function wrapHostResult(result, stack, sandbox) {
   if (!isPromiseLikeResult(result)) {
     return result;
   }
   return Promise.resolve(result).then(
     (value) => value,
     (reason) => Promise.reject(
-      isInterpreterError(reason) || reason instanceof SandboxError || isCapturedException(reason) ? reason : createCapturedException(reason, stack)
+      isInterpreterError(reason) || reason instanceof SandboxError || isCapturedException(reason) ? reason : createCapturedException(reason, stack, sandbox)
     )
   );
 }
-function captureException(error, stack) {
-  return isCapturedException(error) ? error : createCapturedException(error, stack);
+function captureException(error, stack, sandbox) {
+  return isCapturedException(error) ? error : createCapturedException(error, stack, sandbox);
 }
 function isFatalSandboxError(error) {
   return error instanceof SandboxError && (error.code === "budgetExceeded" || error.code === "reentry");
@@ -29065,4 +29124,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-D4DDI3HH.js.map
+//# sourceMappingURL=chunk-TIKUUEG2.js.map