poe-code 14.0.56 → 14.0.58

package/dist/index.js

@@ -127268,7 +127268,7 @@ function encodeReplayData(value, options = {}) {
         kind: "regex",
         source: entry.source,
         flags: entry.flags,
-        lastIndex: entry.lastIndex
+        lastIndex: child(entry.lastIndex, "lastIndex")
       };
     } else if (isSandboxArguments(entry)) {
       nodes[id] = { kind: "arguments", data: serializeArguments(entry, child) };
@@ -127435,11 +127435,12 @@ function decodeReplayData(input, options = {}, parent) {
         return result3;
       }
       if (kind === "regex") {
-        if (typeof node.source !== "string" || typeof node.flags !== "string" || typeof node.lastIndex !== "number" || !Number.isFinite(node.lastIndex)) {
+        if (typeof node.source !== "string" || typeof node.flags !== "string" || !Object.hasOwn(node, "lastIndex")) {
           throw new TypeError("Invalid replay regular expression.");
         }
-        const result3 = createSandboxRegex(node.source, node.flags, node.lastIndex, compilation);
+        const result3 = createSandboxRegex(node.source, node.flags, 0, compilation);
         restored.set(id, result3);
+        result3.lastIndex = child(own(node, "lastIndex"));
         return result3;
       }
       if (kind === "arguments") {
@@ -128445,10 +128446,10 @@ function charge(context) {
   allocateRegexSteps(context.steps);
 }
 function normalizeLastIndex(lastIndex) {
-  if (!Number.isFinite(lastIndex) || lastIndex <= 0) {
+  if (Number.isNaN(lastIndex) || lastIndex <= 0) {
     return 0;
   }
-  return Math.floor(lastIndex);
+  return Math.min(Math.floor(lastIndex), Number.MAX_SAFE_INTEGER);
 }
 function charactersEqual(left, right, ignoreCase) {
   return left !== void 0 && foldCharacter(left, ignoreCase) === foldCharacter(right, ignoreCase);
@@ -128496,6 +128497,7 @@ function getRegexMember(target, property, budget) {
     return budget === void 0 ? flags : budget.allocateString(flags);
   }
   if (property === "lastIndex") return target.lastIndex;
+  if (Object.hasOwn(regexFlagProperties, property)) return target.flags.includes(regexFlagProperties[property]);
   if (!isRegexMethodName(property)) {
     return void 0;
   }
@@ -128530,14 +128532,16 @@ function setRegexMember(target, property, value) {
   if (property !== "lastIndex") {
     throw new TypeError(`RegExp#${String(property)} is not writable.`);
   }
-  target.lastIndex = Number(value);
+  target.lastIndex = value;
 }
 async function callRegexMethod(target, methodName, args, budget, context) {
   if (target === null || typeof target !== "object" || methodName === "exec" && !isSandboxRegex(target)) {
     throw new TypeError(`RegExp#${methodName} requires ${methodName === "exec" ? "a regex" : "an object"} receiver.`);
   }
   const retained = {};
-  budget.setRetainedValues(retained, () => [target, ...args]);
+  let cursor2;
+  let convertedInput;
+  budget.setRetainedValues(retained, () => [target, ...args, cursor2, convertedInput]);
   try {
     const input = await sandboxString(args[0], budget, context);
     if (methodName === "test") {
@@ -128551,15 +128555,18 @@ async function callRegexMethod(target, methodName, args, budget, context) {
       }
     }
     if (!isSandboxRegex(target)) throw new TypeError("RegExp execution requires a regex receiver.");
-    const match = executeRegex(target, input);
+    if (typeof args[0] !== "string") convertedInput = input;
+    cursor2 = target.lastIndex;
+    const lastIndex = await sandboxNumber(cursor2, budget, context);
+    const match = executeRegex(target, input, lastIndex);
     return methodName === "test" ? match !== null : toMatchArray(match, input);
   } finally {
     budget.setRetainedValues(retained, void 0);
   }
 }
-function executeRegex(target, input) {
+function executeRegex(target, input, lastIndex) {
   const pattern = getSandboxRegexPattern(target);
-  const match = matchRegex(pattern, input, target.lastIndex);
+  const match = matchRegex(pattern, input, lastIndex);
   if (pattern.flags.global) {
     target.lastIndex = match === null ? 0 : match.index + match.text.length;
   }
@@ -128573,7 +128580,7 @@ function toMatchArray(match, input) {
   Object.assign(result, { index: match.index, input, groups: void 0 });
   return result;
 }
-var regexMethodNames;
+var regexMethodNames, regexFlagProperties;
 var init_regex = __esm({
   "packages/safe-js/src/interp/methods/regex.ts"() {
     "use strict";
@@ -128583,6 +128590,16 @@ var init_regex = __esm({
     init_object_model();
     init_string_coercion();
     regexMethodNames = /* @__PURE__ */ new Set(["exec", "test"]);
+    regexFlagProperties = {
+      hasIndices: "d",
+      global: "g",
+      ignoreCase: "i",
+      multiline: "m",
+      dotAll: "s",
+      unicode: "u",
+      unicodeSets: "v",
+      sticky: "y"
+    };
   }
 });
 
@@ -130573,13 +130590,14 @@ function deepCopyToSandbox(value) {
     seen: /* @__PURE__ */ new WeakMap()
   });
 }
-function cloneSandboxValue(value) {
+function cloneSandboxValue(value, options = {}) {
   const initializeIterators = [];
   const copy = copyToSandbox(
     value,
     {
       seen: /* @__PURE__ */ new WeakMap(),
-      initializeIterators
+      initializeIterators,
+      ...options
     },
     "<root>",
     true
@@ -130678,11 +130696,12 @@ function measureSandboxData(values, options = {}) {
     }
     if (isSandboxPromise(value)) return;
     if (isSandboxRegex(value)) {
-      const { source, flags } = captureRegexData(value);
+      const { source, flags, lastIndex } = captureRegexData(value);
       const compiled = regexCompiledData(getSandboxRegexPattern(value));
       const staged = compiled.ticket === void 0 ? 0 : compiled.ticket.owner.budget.compileTicketUsage(compiled.ticket);
       usage += Math.max(6 + source.length + flags.length + compiled.units, staged - 1);
       if (compiled.ticket !== void 0) options.compileTickets?.add(compiled.ticket);
+      visit(lastIndex, depth + 1);
       return;
     }
     if (isSandboxArguments(value)) {
@@ -130763,7 +130782,16 @@ function copyToSandbox(value, state, path193 = "<root>", cloneSandboxCollections
     return value;
   }
   if (isLiveCapability(value)) throw new TypeError("Live capabilities require their owning realm bridge.");
-  if (isSandboxClosure(value) || isSandboxGenerator(value) || isSandboxRegex(value) || isSandboxPromise(value)) {
+  if (isSandboxRegex(value)) {
+    if (!cloneSandboxCollections) return value;
+    const existing = state.seen.get(value);
+    if (existing !== void 0) return existing;
+    const copy = createSandboxRegex(value.source, value.flags, 0, state.compilation);
+    state.seen.set(value, copy);
+    if (!state.resetRegexLastIndex) copy.lastIndex = copyToSandbox(value.lastIndex, state, `${path193}.lastIndex`, true, depth + 1);
+    return copy;
+  }
+  if (isSandboxClosure(value) || isSandboxGenerator(value) || isSandboxPromise(value)) {
     return value;
   }
   if (isSandboxCollectionIterator(value)) {
@@ -130972,9 +131000,9 @@ function copyFromSandbox(value, state, path193 = "<root>", options, depth = 0) {
       if (existing !== void 0) return existing;
       guard.allocate(1 + source.length + flags.length);
       const regex = new RegExp(source, flags);
-      regex.lastIndex = lastIndex;
-      guard.retainScratch();
       state.seen.set(value, regex);
+      Reflect.set(regex, "lastIndex", copyFromSandbox(lastIndex, state, `${path193}.lastIndex`, options, depth + 1));
+      guard.retainScratch();
       return regex;
     } finally {
       guard.close();
@@ -131856,7 +131884,7 @@ function validateTaggedValue(record2, path193, state) {
     case "undefined":
       return;
     case "number":
-      if (!["-Infinity", "Infinity", "NaN"].includes(String(record2.value))) {
+      if (!["-Infinity", "Infinity", "NaN", "-0"].includes(String(record2.value))) {
         fail2("invalidValue", `${path193}.value`, "unknown non-finite number value");
       }
       return;
@@ -131878,6 +131906,11 @@ function validateTaggedValue(record2, path193, state) {
       requireString2(record2.flags, `${path193}.flags`, state.limits);
       requireSafeInteger(record2.lastIndex, `${path193}.lastIndex`, 0);
       return;
+    case "regex-object":
+      requireString2(record2.source, `${path193}.source`, state.limits);
+      requireString2(record2.flags, `${path193}.flags`, state.limits);
+      if (!Object.hasOwn(record2, "lastIndex")) fail2("invalidValue", `${path193}.lastIndex`, "missing regex cursor");
+      return;
     case "array":
     case "arguments":
     case "object":
@@ -144051,6 +144084,50 @@ var init_var_hoist = __esm({
   }
 });
 
+// packages/safe-js/src/interp/resources.ts
+import { AsyncLocalStorage as AsyncLocalStorage8 } from "node:async_hooks";
+async function withRunResources(signal, execute2) {
+  const controller = new AbortController();
+  const cancel2 = () => controller.abort(signal?.reason);
+  const cleanups = /* @__PURE__ */ new Set();
+  const resources = {
+    signal: controller.signal,
+    referenceReleases: /* @__PURE__ */ new Set(),
+    add(close) {
+      cleanups.add(close);
+    }
+  };
+  signal?.addEventListener("abort", cancel2, { once: true });
+  if (signal?.aborted) cancel2();
+  let result;
+  let failure;
+  let errors2 = [];
+  try {
+    result = await runResources.run(resources, execute2);
+  } catch (error3) {
+    failure = { reason: error3 };
+  } finally {
+    signal?.removeEventListener("abort", cancel2);
+    controller.abort(new Error("SafeJS run finished."));
+    for (const release2 of resources.referenceReleases) release2();
+    resources.referenceReleases.clear();
+    const outcomes = await Promise.allSettled(
+      [...cleanups].map((close) => Promise.resolve().then(close))
+    );
+    errors2 = outcomes.flatMap((outcome) => outcome.status === "rejected" ? [outcome.reason] : []);
+  }
+  if (failure !== void 0) throw failure.reason;
+  if (errors2.length > 0) throw new AggregateError(errors2, "SafeJS resource cleanup failed.");
+  return result;
+}
+var runResources;
+var init_resources = __esm({
+  "packages/safe-js/src/interp/resources.ts"() {
+    "use strict";
+    runResources = new AsyncLocalStorage8();
+  }
+});
+
 // packages/safe-js/src/interp/methods/array.ts
 function getArrayMember(value, property, options) {
   const index = getArrayIndex(property);
@@ -145250,7 +145327,11 @@ function callStringMethod(value, methodName, args, budget, callClosure = async (
     return budget.allocateString(result + value.slice(spanStart));
   }
   if (methodName === "replace" || methodName === "replaceAll") {
-    return callReplaceLikeMethod(value, methodName, args, budget, callClosure);
+    return callReplaceLikeMethod(value, methodName, args, budget, callClosure, context);
+  }
+  const regex = args[0];
+  if (isSandboxRegex(regex) && regex.lastIndex !== null && typeof regex.lastIndex === "object" && (methodName === "match" && !regex.flags.includes("g") || methodName === "matchAll" && regex.flags.includes("g"))) {
+    return callStringRegexCursor(value, methodName, regex, budget, parent, context);
   }
   if ((methodName === "match" || methodName === "matchAll" || methodName === "search") && !isSandboxRegex(args[0])) {
     return callStringPattern(value, methodName, args[0], budget, parent, context);
@@ -145365,7 +145446,7 @@ function callStringMethod(value, methodName, args, budget, callClosure = async (
     operation.release();
   }
 }
-function callReplaceLikeMethod(value, methodName, args, budget, callClosure) {
+function callReplaceLikeMethod(value, methodName, args, budget, callClosure, context) {
   const search = args[0];
   const replacement = args[1];
   if (!isSandboxRegex(search) && typeof search !== "string" || typeof replacement !== "string" && !isSandboxClosure(replacement)) {
@@ -145383,7 +145464,8 @@ function callReplaceLikeMethod(value, methodName, args, budget, callClosure) {
       replacement,
       methodName === "replaceAll",
       budget,
-      callClosure
+      callClosure,
+      context
     );
   }
   if (typeof replacement === "string") {
@@ -145400,20 +145482,28 @@ function callReplaceLikeMethod(value, methodName, args, budget, callClosure) {
     callClosure
   );
 }
-async function replaceRegex(value, regex, replacement, replaceAll2, budget, callClosure) {
+async function replaceRegex(value, regex, replacement, replaceAll2, budget, callClosure, context) {
   if (regex.flags.includes("g")) regex.lastIndex = 0;
-  const matches = collectRegexMatches(regex, value, replaceAll2 || regex.flags.includes("g"));
-  let result = "";
-  let copiedThrough = 0;
-  for (const match of matches) {
-    result += value.slice(copiedThrough, match.index);
-    result += typeof replacement === "string" ? expandReplacement(replacement, match.text, match.captures, value, match.index) : String(
-      await callClosure(replacement, [match.text, ...match.captures, match.index, value])
-    );
-    copiedThrough = match.index + match.text.length;
+  const cursor2 = regex.lastIndex;
+  const retained = {};
+  budget.setRetainedValues(retained, () => [value, regex, cursor2, replacement]);
+  try {
+    const lastIndex = await sandboxNumber(cursor2, budget, context);
+    const matches = collectRegexMatches(regex, value, replaceAll2 || regex.flags.includes("g"), void 0, lastIndex);
+    let result = "";
+    let copiedThrough = 0;
+    for (const match of matches) {
+      result += value.slice(copiedThrough, match.index);
+      result += typeof replacement === "string" ? expandReplacement(replacement, match.text, match.captures, value, match.index) : String(
+        await callClosure(replacement, [match.text, ...match.captures, match.index, value])
+      );
+      copiedThrough = match.index + match.text.length;
+    }
+    result += value.slice(copiedThrough);
+    return budget.allocateString(result);
+  } finally {
+    budget.setRetainedValues(retained, void 0);
   }
-  result += value.slice(copiedThrough);
-  return budget.allocateString(result);
 }
 function expandReplacement(replacement, match, captures, input, matchIndex) {
   let result = "";
@@ -145529,7 +145619,7 @@ async function callStringPattern(value, methodName, pattern, budget, parent, con
   const operation = budget.acquireCompileOwner(false, parent?.owner);
   const compilation = new CompileScope(operation.owner);
   const retainedPattern = {};
-  budget.setRetainedValues(retainedPattern, () => [pattern]);
+  budget.setRetainedValues(retainedPattern, () => [value, pattern]);
   try {
     const source = pattern === void 0 ? "" : await sandboxString(pattern, budget, context);
     const regex = createSandboxRegex(source, methodName === "matchAll" ? "g" : "", 0, compilation);
@@ -145540,35 +145630,51 @@ async function callStringPattern(value, methodName, pattern, budget, parent, con
     operation.release();
   }
 }
-function callMatchLikeMethod(value, methodName, args, compilation) {
+async function callStringRegexCursor(value, methodName, regex, budget, parent, context) {
+  const operation = budget.acquireCompileOwner(false, parent?.owner);
+  const compilation = new CompileScope(operation.owner);
+  const cursor2 = regex.lastIndex;
+  const retained = {};
+  budget.setRetainedValues(retained, () => [value, regex, cursor2]);
+  try {
+    const lastIndex = await sandboxNumber(cursor2, budget, context);
+    return callMatchLikeMethod(value, methodName, [regex], compilation, lastIndex);
+  } finally {
+    budget.setRetainedValues(retained, void 0);
+    compilation.dispose();
+    operation.release();
+  }
+}
+function callMatchLikeMethod(value, methodName, args, compilation, lastIndex) {
   const regex = args[0];
   if (!isSandboxRegex(regex))
     throw new TypeError(`String#${methodName} requires a regex argument.`);
   if (methodName === "search") {
-    const lastIndex = regex.lastIndex;
-    if (!Object.is(lastIndex, 0)) regex.lastIndex = 0;
-    const match = executeRegex(regex, value);
-    if (!Object.is(regex.lastIndex, lastIndex)) regex.lastIndex = lastIndex;
+    const lastIndex2 = regex.lastIndex;
+    if (!Object.is(lastIndex2, 0)) regex.lastIndex = 0;
+    const match = executeRegex(regex, value, 0);
+    if (!Object.is(regex.lastIndex, lastIndex2)) regex.lastIndex = lastIndex2;
     return match?.index ?? -1;
   }
   if (methodName === "matchAll" && !regex.flags.includes("g"))
     throw new TypeError("String#matchAll requires a global regex.");
   if (methodName === "match" && !regex.flags.includes("g"))
-    return toMatchArray(executeRegex(regex, value), value);
+    return toMatchArray(executeRegex(regex, value, lastIndex ?? Number(regex.lastIndex)), value);
   if (methodName === "match") regex.lastIndex = 0;
-  const matcher = methodName === "matchAll" ? createSandboxRegex(regex.source, regex.flags, regex.lastIndex, compilation) : regex;
-  const matches = collectRegexMatches(matcher, value, true, compilation.owner?.budget);
+  const matcher = methodName === "matchAll" ? createSandboxRegex(regex.source, regex.flags, normalizeLastIndex(lastIndex ?? Number(regex.lastIndex)), compilation) : regex;
+  const matches = collectRegexMatches(matcher, value, true, compilation.owner?.budget, Number(matcher.lastIndex));
   if (methodName === "match" && matches.length === 0) return null;
   return methodName === "match" ? matches.map((match) => match.text) : matches.map((match) => toMatchArray(match, value));
 }
-function collectRegexMatches(regex, value, all, budget) {
+function collectRegexMatches(regex, value, all, budget, lastIndex = 0) {
   const matches = [];
   do {
-    const match = executeRegex(regex, value);
+    const match = executeRegex(regex, value, lastIndex);
     if (match === null) break;
     budget?.allocateArrayLength(matches.length + 1);
     matches.push(match);
-    if (all && match.text.length === 0) regex.lastIndex += 1;
+    lastIndex = match.index + match.text.length;
+    if (all && match.text.length === 0) regex.lastIndex = ++lastIndex;
   } while (all);
   return matches;
 }
@@ -145591,6 +145697,7 @@ var init_string = __esm({
     "use strict";
     init_builtin_call();
     init_compile_guard();
+    init_engine2();
     init_string_coercion();
     init_values();
     init_regex();
@@ -147051,61 +147158,56 @@ async function evaluateMemberAssignmentExpression(node, context) {
   if (node.left.type !== "MemberExpression") {
     throw new TypeError("Expected member assignment target.");
   }
-  const member = await evaluateMemberAccess(node.left, context);
-  if (member.kind === "error") {
-    return member;
-  }
-  if (member.kind === "completion") {
-    return member.result;
-  }
-  if (member.kind === "nullish") {
-    throw new TypeError("Cannot assign properties of null or undefined.");
-  }
-  let property;
-  let current = void 0;
-  if (node.operator !== "=") {
+  return evaluateMemberAccess(node.left, context, async (member) => {
+    if (member.kind === "nullish") {
+      throw new TypeError("Cannot assign properties of null or undefined.");
+    }
+    let property;
+    let current = void 0;
+    if (node.operator !== "=") {
+      if (member.object === null || member.object === void 0) {
+        throw new TypeError("Cannot assign properties of null or undefined.");
+      }
+      property = await toPropertyKey(member.property, context.budget, createCoercionContext(context));
+      current = getPropertyValue(member.object, property, context);
+    }
+    if (node.operator === "&&=" && !isTruthy(current)) {
+      return {
+        kind: "normal",
+        hasValue: true,
+        value: current
+      };
+    }
+    if (node.operator === "||=" && isTruthy(current)) {
+      return {
+        kind: "normal",
+        hasValue: true,
+        value: current
+      };
+    }
+    if (node.operator === "??=" && current !== null && current !== void 0) {
+      return {
+        kind: "normal",
+        hasValue: true,
+        value: current
+      };
+    }
+    const right = await evaluateNode2(node.right, context);
+    if (right.kind !== "normal") {
+      return right;
+    }
+    const value = node.operator === "=" || node.operator === "&&=" || node.operator === "||=" || node.operator === "??=" ? right.value : await applyCompoundAssignmentOperator(node.operator, current, right.value, context);
     if (member.object === null || member.object === void 0) {
       throw new TypeError("Cannot assign properties of null or undefined.");
     }
-    property = await toPropertyKey(member.property, context.budget, createCoercionContext(context));
-    current = getPropertyValue(member.object, property, context);
-  }
-  if (node.operator === "&&=" && !isTruthy(current)) {
+    property ??= await toPropertyKey(member.property, context.budget, createCoercionContext(context));
+    setSandboxProperty(member.object, property, value, context.budget);
     return {
       kind: "normal",
       hasValue: true,
-      value: current
-    };
-  }
-  if (node.operator === "||=" && isTruthy(current)) {
-    return {
-      kind: "normal",
-      hasValue: true,
-      value: current
-    };
-  }
-  if (node.operator === "??=" && current !== null && current !== void 0) {
-    return {
-      kind: "normal",
-      hasValue: true,
-      value: current
+      value
     };
-  }
-  const right = await evaluateNode2(node.right, context);
-  if (right.kind !== "normal") {
-    return right;
-  }
-  const value = node.operator === "=" || node.operator === "&&=" || node.operator === "||=" || node.operator === "??=" ? right.value : await applyCompoundAssignmentOperator(node.operator, current, right.value, context);
-  if (member.object === null || member.object === void 0) {
-    throw new TypeError("Cannot assign properties of null or undefined.");
-  }
-  property ??= await toPropertyKey(member.property, context.budget, createCoercionContext(context));
-  setSandboxProperty(member.object, property, value, context.budget);
-  return {
-    kind: "normal",
-    hasValue: true,
-    value
-  };
+  });
 }
 async function evaluateLogicalExpression(node, context) {
   const left = await evaluateNode2(node.left, context);
@@ -148084,33 +148186,28 @@ async function evaluateDeleteExpression(node, context) {
       "Unary operator 'delete' requires a member target."
     );
   }
-  const member = await evaluateMemberAccess(node.argument, context);
-  if (member.kind === "error") {
-    return member;
-  }
-  if (member.kind === "completion") {
-    return member.result;
-  }
-  if (member.kind === "nullish" || member.object === null || member.object === void 0) {
-    if (member.kind === "nullish" && node.argument.optional) {
-      return {
-        kind: "normal",
-        hasValue: true,
-        value: true
-      };
+  return evaluateMemberAccess(node.argument, context, async (member) => {
+    if (member.kind === "nullish" || member.object === null || member.object === void 0) {
+      if (member.kind === "nullish") {
+        return {
+          kind: "normal",
+          hasValue: true,
+          value: true
+        };
+      }
+      throw new TypeError("Cannot delete properties of null or undefined.");
     }
-    throw new TypeError("Cannot delete properties of null or undefined.");
-  }
-  if (!isIndexableSandboxValue(member.object)) {
-    throw new TypeError("Unary operator 'delete' requires a sandbox object property.");
-  }
-  const property = await toPropertyKey(member.property, context.budget, createCoercionContext(context));
-  const deleted = deleteSandboxProperty(member.object, property);
-  return {
-    kind: "normal",
-    hasValue: true,
-    value: deleted
-  };
+    if (!isIndexableSandboxValue(member.object)) {
+      throw new TypeError("Unary operator 'delete' requires a sandbox object property.");
+    }
+    const property = await toPropertyKey(member.property, context.budget, createCoercionContext(context));
+    const deleted = deleteSandboxProperty(member.object, property);
+    return {
+      kind: "normal",
+      hasValue: true,
+      value: deleted
+    };
+  });
 }
 async function evaluateUpdateExpression(node, context) {
   if (node.argument.type === "Identifier") {
@@ -148146,41 +148243,35 @@ async function evaluateMemberUpdateExpression(node, context) {
   if (node.argument.type !== "MemberExpression") {
     throw new TypeError("Expected member update target.");
   }
-  const member = await evaluateMemberAccess(node.argument, context);
-  if (member.kind === "error") {
-    return member;
-  }
-  if (member.kind === "completion") {
-    return member.result;
-  }
-  if (member.kind === "nullish" || member.object === null || member.object === void 0) {
-    throw new TypeError("Cannot update properties of null or undefined.");
-  }
-  const property = await toPropertyKey(member.property, context.budget, createCoercionContext(context));
-  const current = toNumber(
-    await toNumericPrimitive(getPropertyValue(member.object, property, context), context)
-  );
-  const next = node.operator === "++" ? current + 1 : current - 1;
-  setSandboxProperty(member.object, property, next, context.budget);
-  return {
-    kind: "normal",
-    hasValue: true,
-    value: node.prefix ? next : current
-  };
+  return evaluateMemberAccess(node.argument, context, async (member) => {
+    if (member.kind === "nullish" || member.object === null || member.object === void 0) {
+      throw new TypeError("Cannot update properties of null or undefined.");
+    }
+    const property = await toPropertyKey(member.property, context.budget, createCoercionContext(context));
+    const current = toNumber(
+      await toNumericPrimitive(getPropertyValue(member.object, property, context), context)
+    );
+    const next = node.operator === "++" ? current + 1 : current - 1;
+    setSandboxProperty(member.object, property, next, context.budget);
+    return {
+      kind: "normal",
+      hasValue: true,
+      value: node.prefix ? next : current
+    };
+  });
 }
 async function evaluateMemberExpression(node, context) {
-  const member = await evaluateMemberAccess(node, context);
-  if (member.kind === "error") return member;
-  if (member.kind === "completion") return member.result;
-  if (member.kind === "nullish" || member.object === null || member.object === void 0) {
-    if (member.kind === "nullish" && node.optional) return { kind: "normal", hasValue: true, value: void 0 };
-    throw new TypeError("Cannot read properties of null or undefined.");
-  }
-  return {
-    kind: "normal",
-    hasValue: true,
-    value: getPropertyValue(member.object, await toPropertyKey(member.property, context.budget, createCoercionContext(context)), context)
-  };
+  return evaluateMemberAccess(node, context, async (member) => {
+    if (member.kind === "nullish" || member.object === null || member.object === void 0) {
+      if (member.kind === "nullish") return { kind: "normal", hasValue: true, value: void 0 };
+      throw new TypeError("Cannot read properties of null or undefined.");
+    }
+    return {
+      kind: "normal",
+      hasValue: true,
+      value: getPropertyValue(member.object, await toPropertyKey(member.property, context.budget, createCoercionContext(context)), context)
+    };
+  });
 }
 function getPropertyValue(target, property, context) {
   if (isGuestHostObject(target)) return getHostObjectMember(target, String(property));
@@ -148288,26 +148379,27 @@ function attachFatalSandboxErrorContext(error3, node, stackFrames) {
   attachErrorSpan(error3, node.span);
   replaceErrorStack(error3, stackFrames);
 }
-async function evaluateMemberAccess(node, context) {
+async function evaluateMemberAccess(node, context, consume) {
   const object = await evaluateNode2(node.object, context);
-  if (object.kind !== "normal") {
-    return {
-      kind: "completion",
-      result: object
-    };
-  }
+  if (object.kind !== "normal") return object;
   if ((object.value === null || object.value === void 0) && node.optional) {
-    return {
-      kind: "nullish"
-    };
+    return consume({ kind: "nullish" });
+  }
+  const retained = {};
+  let property;
+  context.budget.setRetainedValues(retained, () => [object.value, property]);
+  const release2 = () => context.budget.setRetainedValues(retained, void 0);
+  const pending = runResources.getStore()?.referenceReleases;
+  pending?.add(release2);
+  try {
+    const result = node.computed ? await evaluateNode2(node.property, context) : { kind: "normal", value: getStaticPropertyName2(node.property) };
+    if (result.kind !== "normal") return result;
+    property = result.value;
+    return await consume({ kind: "resolved", object: object.value, property });
+  } finally {
+    release2();
+    pending?.delete(release2);
   }
-  const property = node.computed ? await evaluateNode2(node.property, context) : { kind: "normal", value: getStaticPropertyName2(node.property) };
-  if (property.kind !== "normal") return { kind: "completion", result: property };
-  return {
-    kind: "resolved",
-    object: object.value,
-    property: property.value
-  };
 }
 async function evaluateMemberProperty(node, context) {
   const property = await evaluateNode2(node, context);
@@ -148344,137 +148436,132 @@ async function evaluateMemberCallExpression(node, context) {
   if (node.callee.type !== "MemberExpression") {
     throw new TypeError("Expected member call expression.");
   }
-  const reference = await evaluateMemberAccess(node.callee, context);
-  if (reference.kind === "error") {
-    return reference;
-  }
-  if (reference.kind === "completion") {
-    return reference.result;
-  }
-  if (reference.kind === "nullish" || reference.object === null || reference.object === void 0) {
-    if (reference.kind === "nullish") {
-      return {
-        kind: "normal",
-        hasValue: true,
-        value: void 0
-      };
+  return evaluateMemberAccess(node.callee, context, async (reference) => {
+    if (reference.kind === "nullish" || reference.object === null || reference.object === void 0) {
+      if (reference.kind === "nullish") {
+        return {
+          kind: "normal",
+          hasValue: true,
+          value: void 0
+        };
+      }
+      throw new TypeError("Cannot read properties of null or undefined.");
     }
-    throw new TypeError("Cannot read properties of null or undefined.");
-  }
-  const member = {
-    ...reference,
-    property: await toPropertyKey(reference.property, context.budget, createCoercionContext(context))
-  };
-  if (typeof member.object === "string" && isStringMethodName(member.property)) {
-    return evaluateStringMethodCall(node, member.object, member.property, context);
-  }
-  if (typeof member.object === "number" && isNumberMethodName(member.property)) {
-    return evaluateNumberMethodCall(node, member.object, member.property, context);
-  }
-  if (Array.isArray(member.object) && isArrayMethodName(member.property) && !Object.hasOwn(member.object, member.property)) {
-    return evaluateArrayMethodCall(node, member.object, member.property, context);
-  }
-  if (isSandboxMap(member.object) && isMapMethodName(member.property)) {
-    return evaluateMapMethodCall(node, member.object, member.property, context);
-  }
-  if (isSandboxSet(member.object) && isSetMethodName(member.property)) {
-    return evaluateSetMethodCall(node, member.object, member.property, context);
-  }
-  if (typeof member.object === "string") {
-    return evaluatePrimitiveMemberCall(
-      node,
-      "String",
-      member.property,
-      getStringMember(member.object, member.property, context.budget),
-      context
-    );
-  }
-  if (typeof member.object === "number") {
-    return evaluatePrimitiveMemberCall(
-      node,
-      "Number",
-      member.property,
-      getNumberMember(member.property, context.budget),
-      context
-    );
-  }
-  if (Array.isArray(member.object) && !Object.hasOwn(member.object, member.property)) {
-    return evaluatePrimitiveMemberCall(
-      node,
-      "Array",
-      member.property,
-      getArrayMemberValue(member.object, member.property, context),
-      context
-    );
-  }
-  if (isSandboxMap(member.object)) {
-    return evaluatePrimitiveMemberCall(
-      node,
-      "Map",
-      member.property,
-      getMapMember(member.object, member.property, createMapMethodOptions(context)),
-      context
-    );
-  }
-  if (isSandboxDate(member.object)) {
-    return evaluateResolvedCallExpression(node, getDateMember(member.property, context.budget, context.compilation?.owner), context, member.object);
-  }
-  if (isFloat32Array(member.object)) {
-    return evaluateResolvedCallExpression(
-      node,
-      getFloat32Member(member.object, member.property, context.budget),
-      context,
-      member.object
-    );
-  }
-  if (isSandboxSet(member.object)) {
-    return evaluatePrimitiveMemberCall(
-      node,
-      "Set",
-      member.property,
-      getSetMember(member.object, member.property, createSetMethodOptions(context)),
-      context
-    );
-  }
-  if (isSandboxGenerator(member.object)) {
-    const memberValue = getGeneratorMember(member.object, member.property, context.budget);
-    if (memberValue === void 0) {
-      throw new TypeError(`Generator#${String(member.property)} is not a supported method.`);
+    const member = {
+      ...reference,
+      property: await toPropertyKey(reference.property, context.budget, createCoercionContext(context))
+    };
+    if (typeof member.object === "string" && isStringMethodName(member.property)) {
+      return evaluateStringMethodCall(node, member.object, member.property, context);
     }
-    return evaluateResolvedCallExpression(node, memberValue, context, member.object);
-  }
-  if (isSandboxClosure(member.object)) {
-    const memberValue = getClosureMemberValue(member.object, member.property, context);
-    if (memberValue === void 0) {
-      throw new TypeError(`Function#${String(member.property)} is not a supported method.`);
+    if (typeof member.object === "number" && isNumberMethodName(member.property)) {
+      return evaluateNumberMethodCall(node, member.object, member.property, context);
+    }
+    if (Array.isArray(member.object) && isArrayMethodName(member.property) && !Object.hasOwn(member.object, member.property)) {
+      return evaluateArrayMethodCall(node, member.object, member.property, context);
+    }
+    if (isSandboxMap(member.object) && isMapMethodName(member.property)) {
+      return evaluateMapMethodCall(node, member.object, member.property, context);
+    }
+    if (isSandboxSet(member.object) && isSetMethodName(member.property)) {
+      return evaluateSetMethodCall(node, member.object, member.property, context);
+    }
+    if (typeof member.object === "string") {
+      return evaluatePrimitiveMemberCall(
+        node,
+        "String",
+        member.property,
+        getStringMember(member.object, member.property, context.budget),
+        context
+      );
+    }
+    if (typeof member.object === "number") {
+      return evaluatePrimitiveMemberCall(
+        node,
+        "Number",
+        member.property,
+        getNumberMember(member.property, context.budget),
+        context
+      );
+    }
+    if (Array.isArray(member.object) && !Object.hasOwn(member.object, member.property)) {
+      return evaluatePrimitiveMemberCall(
+        node,
+        "Array",
+        member.property,
+        getArrayMemberValue(member.object, member.property, context),
+        context
+      );
+    }
+    if (isSandboxMap(member.object)) {
+      return evaluatePrimitiveMemberCall(
+        node,
+        "Map",
+        member.property,
+        getMapMember(member.object, member.property, createMapMethodOptions(context)),
+        context
+      );
+    }
+    if (isSandboxDate(member.object)) {
+      return evaluateResolvedCallExpression(node, getDateMember(member.property, context.budget, context.compilation?.owner), context, member.object);
+    }
+    if (isFloat32Array(member.object)) {
+      return evaluateResolvedCallExpression(
+        node,
+        getFloat32Member(member.object, member.property, context.budget),
+        context,
+        member.object
+      );
+    }
+    if (isSandboxSet(member.object)) {
+      return evaluatePrimitiveMemberCall(
+        node,
+        "Set",
+        member.property,
+        getSetMember(member.object, member.property, createSetMethodOptions(context)),
+        context
+      );
+    }
+    if (isSandboxGenerator(member.object)) {
+      const memberValue = getGeneratorMember(member.object, member.property, context.budget);
+      if (memberValue === void 0) {
+        throw new TypeError(`Generator#${String(member.property)} is not a supported method.`);
+      }
+      return evaluateResolvedCallExpression(node, memberValue, context, member.object);
+    }
+    if (isSandboxClosure(member.object)) {
+      const memberValue = getClosureMemberValue(member.object, member.property, context);
+      if (memberValue === void 0) {
+        throw new TypeError(`Function#${String(member.property)} is not a supported method.`);
+      }
+      return evaluateResolvedCallExpression(node, memberValue, context, member.object);
+    }
+    if (isSandboxPromise(member.object)) {
+      return evaluateResolvedCallExpression(
+        node,
+        getPromiseMember(member.property, context.budget),
+        context,
+        member.object
+      );
+    }
+    if (isSandboxRegex(member.object) && isRegexMethodName(member.property)) {
+      return evaluateResolvedCallExpression(
+        node,
+        getRegexMember(member.object, member.property, context.budget),
+        context,
+        member.object
+      );
+    }
+    if (!isIndexableSandboxValue(member.object)) {
+      throw new TypeError("Attempted to read a property from a non-object value.");
     }
-    return evaluateResolvedCallExpression(node, memberValue, context, member.object);
-  }
-  if (isSandboxPromise(member.object)) {
-    return evaluateResolvedCallExpression(
-      node,
-      getPromiseMember(member.property, context.budget),
-      context,
-      member.object
-    );
-  }
-  if (isSandboxRegex(member.object) && isRegexMethodName(member.property)) {
     return evaluateResolvedCallExpression(
       node,
-      getRegexMember(member.object, member.property, context.budget),
+      getMemberValue(member.object, member.property, context),
       context,
       member.object
     );
-  }
-  if (!isIndexableSandboxValue(member.object)) {
-    throw new TypeError("Attempted to read a property from a non-object value.");
-  }
-  return evaluateResolvedCallExpression(
-    node,
-    getMemberValue(member.object, member.property, context),
-    context,
-    member.object
-  );
+  });
 }
 function evaluatePrimitiveMemberCall(node, receiverType, property, value, context) {
   if (value === void 0) {
@@ -149252,6 +149339,7 @@ var init_interpreter = __esm({
     init_promise_tracker();
     init_jobs4();
     init_cancel2();
+    init_resources();
     init_shape();
     init_async();
     init_host_call();
@@ -151112,7 +151200,7 @@ function createMiscGlobals(options) {
   return {
     structuredClone: createSandboxClosure({
       sandbox: true,
-      call: ([value]) => structuredCloneSandboxValue(value, options.budget),
+      call: ([value], context) => structuredCloneSandboxValue(value, options.budget, context?.compilation),
       name: "structuredClone"
     }),
     parseInt: createSandboxClosure({
@@ -151137,11 +151225,20 @@ function createMiscGlobals(options) {
     })
   };
 }
-function structuredCloneSandboxValue(value, budget) {
-  assertSandboxGraphDepth(value);
-  const clone = cloneSandboxValue(value);
-  assertStructuredCloneable(clone, /* @__PURE__ */ new WeakSet());
-  return allocateProducedSandboxValue(clone, budget);
+function structuredCloneSandboxValue(value, budget, parent) {
+  const operation = budget.acquireCompileOwner(false, parent?.owner);
+  const compilation = parent?.owner === operation.owner ? parent : new CompileScope(operation.owner);
+  try {
+    const clone = cloneSandboxValue(value, { compilation, resetRegexLastIndex: true });
+    assertSandboxGraphDepth(clone);
+    assertStructuredCloneable(clone, /* @__PURE__ */ new WeakSet());
+    allocateProducedSandboxValue(clone, budget);
+    if (compilation !== parent) reconcileCompiledValues(budget, [clone], compilation);
+    return clone;
+  } finally {
+    if (compilation !== parent) compilation.dispose();
+    operation.release();
+  }
 }
 function assertStructuredCloneable(value, seen) {
   if (isSandboxClosure(value) || isSandboxPromise(value) || isSandboxCollectionIterator(value)) {
@@ -151173,6 +151270,7 @@ var init_misc = __esm({
     "use strict";
     init_collection_iterator();
     init_graph_depth();
+    init_compile_guard();
     init_values();
   }
 });
@@ -151706,47 +151804,6 @@ var init_globals = __esm({
   }
 });
 
-// packages/safe-js/src/interp/resources.ts
-import { AsyncLocalStorage as AsyncLocalStorage8 } from "node:async_hooks";
-async function withRunResources(signal, execute2) {
-  const controller = new AbortController();
-  const cancel2 = () => controller.abort(signal?.reason);
-  const cleanups = /* @__PURE__ */ new Set();
-  const resources = {
-    signal: controller.signal,
-    add(close) {
-      cleanups.add(close);
-    }
-  };
-  signal?.addEventListener("abort", cancel2, { once: true });
-  if (signal?.aborted) cancel2();
-  let result;
-  let failure;
-  let errors2 = [];
-  try {
-    result = await runResources.run(resources, execute2);
-  } catch (error3) {
-    failure = { reason: error3 };
-  } finally {
-    signal?.removeEventListener("abort", cancel2);
-    controller.abort(new Error("SafeJS run finished."));
-    const outcomes = await Promise.allSettled(
-      [...cleanups].map((close) => Promise.resolve().then(close))
-    );
-    errors2 = outcomes.flatMap((outcome) => outcome.status === "rejected" ? [outcome.reason] : []);
-  }
-  if (failure !== void 0) throw failure.reason;
-  if (errors2.length > 0) throw new AggregateError(errors2, "SafeJS resource cleanup failed.");
-  return result;
-}
-var runResources;
-var init_resources = __esm({
-  "packages/safe-js/src/interp/resources.ts"() {
-    "use strict";
-    runResources = new AsyncLocalStorage8();
-  }
-});
-
 // packages/safe-js/src/modules/registry.ts
 function createUnknownModuleMessage2(moduleName, moduleNames) {
   if (moduleNames.length === 0) {
@@ -152119,6 +152176,7 @@ var init_realm = __esm({
       extensions;
       consoleExtension;
       cleanups = [];
+      referenceReleases = /* @__PURE__ */ new Set();
       callbacks = /* @__PURE__ */ new Map();
       pendingCallbacks = /* @__PURE__ */ new Set();
       callbackCache = /* @__PURE__ */ new WeakMap();
@@ -152445,7 +152503,7 @@ var init_realm = __esm({
           const pending = withSandboxPromiseRejectionTracker(
             this.tracker,
             () => runResources.run(
-              { signal: this.controller.signal, add: this.onCleanup },
+              { signal: this.controller.signal, referenceReleases: this.referenceReleases, add: this.onCleanup },
               () => withCancellationSignal(
                 this.controller.signal,
                 () => active && this.phase.getStore()?.active ? runAsyncPrefix(invoke2) : this.queue.run(invoke2)
@@ -152640,7 +152698,7 @@ var init_realm = __esm({
           () => withSandboxPromiseRejectionTracker(
             this.tracker,
             () => runResources.run(
-              { signal: this.controller.signal, add: this.onCleanup },
+              { signal: this.controller.signal, referenceReleases: this.referenceReleases, add: this.onCleanup },
               () => withCancellationSignal(this.controller.signal, task)
             )
           )
@@ -152697,6 +152755,8 @@ var init_realm = __esm({
         this.hostObjects.clear();
         for (const reference of this.guestReferences.keys()) revokeGuestReference(reference, this);
         this.guestReferences.clear();
+        for (const release2 of this.referenceReleases) release2();
+        this.referenceReleases.clear();
         this.budget.setRetainedValues(this, void 0);
         releaseObjectPrototype(this.budget);
         this.disposal = (async () => {