@demicodes/shell 0.7.2 → 0.9.0

package/dist/index.d.mts

@@ -91,7 +91,21 @@ interface BashEnvironmentOptions {
   shellIdFactory?: () => string;
   commandIdFactory?: () => string;
   initialEnv?: Record<string, string>;
+  /** Cap on a command's text stdout. Guards against log floods. */
   maxOutputBytes?: number;
+  /**
+   * Cap on a final stdout stream that is raw bytes rather than text.
+   *
+   * Separate from `maxOutputBytes` because the two guard different risks. Text
+   * costs context roughly in proportion to its bytes, so a tight cap is what
+   * stops a stray `cat` of a log file from flooding a window. Raw bytes are
+   * carried to be looked at — a picture, a clip — and there a megabyte buys far
+   * more than a megabyte of text does, so the same number would forbid the
+   * ordinary case. This layer deliberately stops at that distinction: which
+   * modality the bytes are, and what a given model should be shown, is decided
+   * above, where models are known.
+   */
+  maxBinaryBytes?: number;
 }
 interface ShellExecInput {
   script: string;
@@ -182,10 +196,12 @@ interface CommandMetadataRecord {
 /** Final stdout stream that is not valid UTF-8: raw bytes for the boundary above. */
 interface BinaryStdout {
   data: Uint8Array;
-  /** True when the stream exceeded the exec's output limit; data is capped. */
+  /** True when the stream exceeded the applicable cap; data is capped. */
   truncated: boolean;
   /** Total byte count of the un-capped stream. */
   totalBytes: number;
+  /** The byte ceiling that applied, so the boundary above can name it. */
+  limitBytes: number;
 }
 type ShellCommandStatus = {
   status: 'exited';
@@ -229,6 +245,7 @@ declare class BashEnvironment {
   private readonly commandIdFactory;
   private readonly initialEnv;
   private readonly defaultOutputLimitBytes;
+  private readonly defaultBinaryLimitBytes;
   private readonly shells;
   private readonly defaultShellByAgentSessionId;
   private readonly commandsById;

package/dist/index.mjs

@@ -784,6 +784,12 @@ function decodeForkStdin(stdin) {
 //#region src/environment.ts
 const DEFAULT_TIMEOUT_MS = 1e4;
 const DEFAULT_OUTPUT_LIMIT_BYTES = 1024 * 1024;
+/**
+* Ceiling for a raw-byte final stream. Sized so an ordinary viewing-grade clip
+* survives the shell and reaches the layer that decides what to do with it,
+* while still bounding a runaway producer.
+*/
+const DEFAULT_BINARY_LIMIT_BYTES = 16 * 1024 * 1024;
 /** Upper bound for a single exec observation window (also the command-bridge wait ceiling). */
 const MAX_TIMEOUT_MS = 6e5;
 var BashEnvironment = class {
@@ -793,6 +799,7 @@ var BashEnvironment = class {
 	commandIdFactory;
 	initialEnv;
 	defaultOutputLimitBytes;
+	defaultBinaryLimitBytes;
 	shells = /* @__PURE__ */ new Map();
 	defaultShellByAgentSessionId = /* @__PURE__ */ new Map();
 	commandsById = /* @__PURE__ */ new Map();
@@ -805,6 +812,7 @@ var BashEnvironment = class {
 		this.commandIdFactory = options.commandIdFactory ?? (() => globalThis.crypto.randomUUID());
 		this.initialEnv = options.initialEnv ?? {};
 		this.defaultOutputLimitBytes = options.maxOutputBytes ?? DEFAULT_OUTPUT_LIMIT_BYTES;
+		this.defaultBinaryLimitBytes = options.maxBinaryBytes ?? DEFAULT_BINARY_LIMIT_BYTES;
 	}
 	getShell(shellId) {
 		return this.shells.get(shellId) ?? null;
@@ -1426,14 +1434,15 @@ var BashEnvironment = class {
 			const strict = decodeUtf8Strict(bytes);
 			if (strict !== null) stdoutText = strict;
 			else {
-				const cap = record.outputLimitBytes;
+				const cap = this.defaultBinaryLimitBytes;
 				const truncated = bytes.length > cap;
 				binary = {
 					data: truncated ? bytes.slice(0, cap) : bytes,
 					truncated,
-					totalBytes: bytes.length
+					totalBytes: bytes.length,
+					limitBytes: cap
 				};
-				stdoutText = `<binary stdout: ${bytes.length} bytes${truncated ? `, exceeds the ${cap}-byte output limit` : ""}; raw bytes at /@/commands/${record.id}/stdout.bin>\n`;
+				stdoutText = `<binary stdout: ${bytes.length} bytes${truncated ? `, exceeds the ${cap}-byte binary limit` : ""}; raw bytes at /@/commands/${record.id}/stdout.bin>\n`;
 			}
 		}
 		const stderrText = foreground ? resultOrError.stderr : decodeBytesToUtf8(unsafeBytesFromLatin1(resultOrError.stderr));

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@demicodes/shell",
   "description": "Sandboxable bash engine and Host contract for Demi.",
-  "version": "0.7.2",
+  "version": "0.9.0",
   "private": false,
   "type": "module",
   "exports": {
@@ -19,8 +19,8 @@
     }
   },
   "dependencies": {
-    "@demicodes/utils": "^0.7.2",
     "@demicodes/just-bash": "^3.1.0-demi.2",
+    "@demicodes/utils": "^0.9.0",
     "zod": "^4.0.0"
   },
   "license": "Apache-2.0",