poe-code 11.0.29 → 11.0.31

package/packages/safejs/dist/cli.js

@@ -20,7 +20,7 @@ import {
   parseMcpConfig,
   splitFrontmatter,
   withBrokenPipeGuard
-} from "./chunks/chunk-DB2DNWCX.js";
+} from "./chunks/chunk-5IU6NPGM.js";
 import {
   Budget,
   SandboxError,
@@ -32,7 +32,7 @@ import {
   replaceErrorStack,
   restore,
   run
-} from "./chunks/chunk-HC3QSP5N.js";
+} from "./chunks/chunk-NPXVDTLX.js";
 import "./chunks/chunk-4YIDX44G.js";
 
 // packages/safejs/src/cli.ts

package/packages/safejs/dist/core.js

@@ -3,7 +3,7 @@ import {
   createReplayableRandom,
   lint,
   run
-} from "./chunks/chunk-HC3QSP5N.js";
+} from "./chunks/chunk-NPXVDTLX.js";
 import "./chunks/chunk-4YIDX44G.js";
 export {
   Budget,

package/packages/safejs/dist/index.js

@@ -27,7 +27,7 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-DB2DNWCX.js";
+} from "./chunks/chunk-5IU6NPGM.js";
 import {
   Budget,
   FileSnapshotBackend,
@@ -49,7 +49,7 @@ import {
   registerPendingHostCallPolicy,
   restore,
   run
-} from "./chunks/chunk-HC3QSP5N.js";
+} from "./chunks/chunk-NPXVDTLX.js";
 import "./chunks/chunk-4YIDX44G.js";
 
 // packages/safejs/src/runner/run-harness.ts

package/packages/safejs/dist/interp/host-call.js

@@ -1,5 +1,5 @@
 import { createHash, randomUUID } from "node:crypto";
-import { cloneSandboxValue, createSandboxClosure, measureSandboxData } from "./values.js";
+import { cloneSandboxValue, createSandboxClosure, defineOwnDataProperty, isArrayIndexKey, measureSandboxData } from "./values.js";
 import { decodeReplayData, encodeReplayData } from "../snapshot/replay-data.js";
 import { validateSnapshotData } from "../snapshot/validation.js";
 import { pendingHostCallResumeIdentityMatches } from "../snapshot/policy.js";
@@ -520,21 +520,45 @@ function stableStringify(value) {
     return JSON.stringify(normalize(value, seen));
 }
 function normalize(value, seen) {
+    if (typeof value === "function")
+        return undefined;
+    if (typeof value === "bigint")
+        throw new TypeError("Do not know how to serialize a BigInt");
     if (value === undefined)
-        return { $type: "undefined" };
+        return Object.assign(Object.create(null), { $type: "undefined" });
     if (typeof value === "number" && !Number.isFinite(value))
-        return { $type: "number", value: String(value) };
+        return Object.assign(Object.create(null), { $type: "number", value: String(value) });
     if (value === null || typeof value !== "object")
         return value;
     if (seen.has(value))
         throw new TypeError("Host call arguments cannot contain cycles.");
     seen.add(value);
     try {
-        if (Array.isArray(value))
-            return value.map((entry) => normalize(entry, seen));
-        return Object.fromEntries(Object.keys(value)
-            .sort()
-            .map((key) => [key, normalize(value[key], seen)]));
+        if (Array.isArray(value)) {
+            const normalized = new Array(value.length);
+            Object.setPrototypeOf(normalized, null);
+            for (const [key, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {
+                if (!isArrayIndexKey(key))
+                    continue;
+                if (!("value" in descriptor)) {
+                    throw new TypeError("Host call arguments cannot contain accessor properties.");
+                }
+                defineOwnDataProperty(normalized, key, normalize(descriptor.value, seen));
+            }
+            return normalized;
+        }
+        const normalized = Object.create(null);
+        const descriptors = Object.getOwnPropertyDescriptors(value);
+        for (const key of Object.keys(descriptors).sort()) {
+            const descriptor = descriptors[key];
+            if (!descriptor.enumerable)
+                continue;
+            if (!("value" in descriptor)) {
+                throw new TypeError("Host call arguments cannot contain accessor properties.");
+            }
+            defineOwnDataProperty(normalized, key, normalize(descriptor.value, seen));
+        }
+        return normalized;
     }
     finally {
         seen.delete(value);