[environment] Map: Add prototype object and Map.groupBy

Bug: 487347678
Change-Id: I37f8126dbd08e989f229246f68675540cfc8c9f4
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/9052178
Commit-Queue: Danylo Mocherniuk <mdanylo@google.com>
Reviewed-by: Danylo Mocherniuk <mdanylo@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>

Author: Liedtke

Sources/Fuzzilli/Environment/JavaScriptEnvironment.swift

@@ -368,6 +368,8 @@ public class JavaScriptEnvironment: ComponentBase {
         registerObjectGroup(.jsFunctions)
         registerObjectGroup(.jsSymbols)
         registerObjectGroup(.jsMaps)
+        registerObjectGroup(.jsMapPrototype)
+        registerObjectGroup(.jsMapConstructor)
         registerObjectGroup(.jsWeakMaps)
         registerObjectGroup(.jsSets)
         registerObjectGroup(.jsWeakSets)
@@ -1211,7 +1213,7 @@ public extension ILType {
     static let jsProxyConstructor = ILType.constructor([.object(), .object()] => .jsAnything)
 
     /// Type of the JavaScript Map constructor builtin.
-    static let jsMapConstructor = ILType.constructor([.object()] => .jsMap)
+    static let jsMapConstructor = ILType.constructor([.object()] => .jsMap) + .object(ofGroup: "MapConstructor", withProperties: ["prototype"], withMethods: ["groupBy"])
 
     /// Type of the JavaScript WeakMap constructor builtin.
     static let jsWeakMapConstructor = ILType.constructor([.object()] => .jsWeakMap)
@@ -1671,6 +1673,21 @@ public extension ObjectGroup {
         ]
     )
 
+    static let jsMapPrototype = createPrototypeObjectGroup(jsMaps,
+        constructor: .jsMapConstructor)
+
+    static let jsMapConstructor = ObjectGroup(
+        name: "MapConstructor",
+        constructorPath: "Map",
+        instanceType: .jsMapConstructor,
+        properties: [
+            "prototype" : jsMapPrototype.instanceType
+        ],
+        methods: [
+            "groupBy": [.iterable, .function()] => .jsMap
+        ]
+    )
+
     /// ObjectGroup modelling JavaScript WeakMap objects
     static let jsWeakMaps = ObjectGroup(
         name: "WeakMap",