poe-code 11.0.30 → 11.0.31

package/packages/safejs/dist/cli.js

@@ -20,7 +20,7 @@ import {
   parseMcpConfig,
   splitFrontmatter,
   withBrokenPipeGuard
-} from "./chunks/chunk-44GTB3XV.js";
+} from "./chunks/chunk-5IU6NPGM.js";
 import {
   Budget,
   SandboxError,
@@ -32,7 +32,7 @@ import {
   replaceErrorStack,
   restore,
   run
-} from "./chunks/chunk-XPDK2VVP.js";
+} from "./chunks/chunk-NPXVDTLX.js";
 import "./chunks/chunk-4YIDX44G.js";
 
 // packages/safejs/src/cli.ts

package/packages/safejs/dist/core.js

@@ -3,7 +3,7 @@ import {
   createReplayableRandom,
   lint,
   run
-} from "./chunks/chunk-XPDK2VVP.js";
+} from "./chunks/chunk-NPXVDTLX.js";
 import "./chunks/chunk-4YIDX44G.js";
 export {
   Budget,

package/packages/safejs/dist/index.js

@@ -27,7 +27,7 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-44GTB3XV.js";
+} from "./chunks/chunk-5IU6NPGM.js";
 import {
   Budget,
   FileSnapshotBackend,
@@ -49,7 +49,7 @@ import {
   registerPendingHostCallPolicy,
   restore,
   run
-} from "./chunks/chunk-XPDK2VVP.js";
+} from "./chunks/chunk-NPXVDTLX.js";
 import "./chunks/chunk-4YIDX44G.js";
 
 // packages/safejs/src/runner/run-harness.ts

package/packages/safejs/dist/interp/host-call.js

@@ -520,10 +520,14 @@ function stableStringify(value) {
     return JSON.stringify(normalize(value, seen));
 }
 function normalize(value, seen) {
+    if (typeof value === "function")
+        return undefined;
+    if (typeof value === "bigint")
+        throw new TypeError("Do not know how to serialize a BigInt");
     if (value === undefined)
-        return { $type: "undefined" };
+        return Object.assign(Object.create(null), { $type: "undefined" });
     if (typeof value === "number" && !Number.isFinite(value))
-        return { $type: "number", value: String(value) };
+        return Object.assign(Object.create(null), { $type: "number", value: String(value) });
     if (value === null || typeof value !== "object")
         return value;
     if (seen.has(value))
@@ -532,6 +536,7 @@ function normalize(value, seen) {
     try {
         if (Array.isArray(value)) {
             const normalized = new Array(value.length);
+            Object.setPrototypeOf(normalized, null);
             for (const [key, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {
                 if (!isArrayIndexKey(key))
                     continue;
@@ -542,9 +547,18 @@ function normalize(value, seen) {
             }
             return normalized;
         }
-        return Object.fromEntries(Object.keys(value)
-            .sort()
-            .map((key) => [key, normalize(value[key], seen)]));
+        const normalized = Object.create(null);
+        const descriptors = Object.getOwnPropertyDescriptors(value);
+        for (const key of Object.keys(descriptors).sort()) {
+            const descriptor = descriptors[key];
+            if (!descriptor.enumerable)
+                continue;
+            if (!("value" in descriptor)) {
+                throw new TypeError("Host call arguments cannot contain accessor properties.");
+            }
+            defineOwnDataProperty(normalized, key, normalize(descriptor.value, seen));
+        }
+        return normalized;
     }
     finally {
         seen.delete(value);