@poe-platform/safe-bash 0.1.745 → 0.1.747

package/dist/safe-bash-command-whoami/index.js

@@ -4,6 +4,7 @@ import {
 
 // packages/safe-bash-command-whoami/dist/index.js
 init_buffer();
+import { isFsError } from "../safe-bash-contracts/errors.js";
 import { commandRuntimeIdentity, writeText } from "../safe-bash-contracts/index.js";
 function settings(options = {}) {
   const limits = {
@@ -31,19 +32,23 @@ Packaged by Safe-Bash (Sandbox VFS-ish/GNU runtime)
 async function resolvePasswdUser(context, euid, maxBytes) {
   try {
     const bytes = await context.fs.readFile("/etc/passwd", { signal: context.signal });
-    if (bytes.byteLength <= maxBytes) {
-      const text = new TextDecoder().decode(bytes);
-      for (const line of text.split("\n")) {
-        const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith("#"))
-          continue;
-        const parts = trimmed.split(":");
-        if (parts.length >= 3 && Number(parts[2]) === euid) {
-          return parts[0];
-        }
+    context.signal.throwIfAborted();
+    if (bytes.byteLength > maxBytes)
+      throw new RangeError("/etc/passwd exceeds size limit");
+    const text = new TextDecoder().decode(bytes);
+    for (const line of text.split("\n")) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#"))
+        continue;
+      const parts = trimmed.split(":");
+      if (parts.length >= 3 && Number(parts[2]) === euid) {
+        return parts[0];
       }
     }
-  } catch {
+  } catch (error) {
+    context.signal.throwIfAborted();
+    if (!isFsError(error, "ENOENT"))
+      throw error;
   }
   return void 0;
 }
@@ -96,7 +101,16 @@ function createWhoamiCommand(options = {}) {
       const euid = options.euid ?? options.uid ?? (rawEuid !== void 0 && /^\d+$/.test(rawEuid) ? Number(rawEuid) : void 0);
       let username;
       if (euid !== void 0) {
-        username = await resolvePasswdUser(context, euid, limits.maxPasswdBytes);
+        try {
+          username = await resolvePasswdUser(context, euid, limits.maxPasswdBytes);
+        } catch (error) {
+          context.signal.throwIfAborted();
+          if (!(error instanceof RangeError))
+            throw error;
+          await writeText(context.stderr, `whoami: ${error.message}
+`);
+          return { exitCode: 1 };
+        }
         if (!username) {
           if (euid === 0)
             username = "root";

package/dist/safe-bash-query-engine/index.js

@@ -1,9 +1,9 @@
 import {
   YqValueFailure,
   createYqQuerySession
-} from "../safe-bash/command-chunks/chunk-BMBXSLVX.js";
-import "../safe-bash/command-chunks/chunk-YHANNN7I.js";
-import "../safe-bash/command-chunks/chunk-LYKC7WJB.js";
+} from "../safe-bash/command-chunks/chunk-6QU5OLPJ.js";
+import "../safe-bash/command-chunks/chunk-S3BO2NJT.js";
+import "../safe-bash/command-chunks/chunk-6742OVAC.js";
 import "../safe-bash/command-chunks/chunk-TPDKSK66.js";
 import "../safe-bash/command-chunks/chunk-A7SJ2FC6.js";
 import "../safe-bash/command-chunks/chunk-XZ7QGZMG.js";

package/dist/safe-bash-query-engine/interpreter.js

@@ -1,6 +1,6 @@
 import {
   Interpreter
-} from "../safe-bash/command-chunks/chunk-LYKC7WJB.js";
+} from "../safe-bash/command-chunks/chunk-6742OVAC.js";
 import "../safe-bash/command-chunks/chunk-TPDKSK66.js";
 import "../safe-bash/command-chunks/chunk-A7SJ2FC6.js";
 import "../safe-bash/command-chunks/chunk-XZ7QGZMG.js";

package/dist/safe-bash-query-engine/parser.js

@@ -2,7 +2,7 @@ import {
   functions,
   moduleProgram,
   parse
-} from "../safe-bash/command-chunks/chunk-YHANNN7I.js";
+} from "../safe-bash/command-chunks/chunk-S3BO2NJT.js";
 import "../safe-bash/command-chunks/chunk-OMJILKF3.js";
 import "../safe-bash/command-chunks/chunk-E4JIJFSF.js";
 import "../safe-bash/command-chunks/chunk-R2FMX7XC.js";

package/dist/safe-bash-query-engine/query-core.js

@@ -1,9 +1,9 @@
 import {
   YqValueFailure,
   createYqQuerySession
-} from "../safe-bash/command-chunks/chunk-BMBXSLVX.js";
-import "../safe-bash/command-chunks/chunk-YHANNN7I.js";
-import "../safe-bash/command-chunks/chunk-LYKC7WJB.js";
+} from "../safe-bash/command-chunks/chunk-6QU5OLPJ.js";
+import "../safe-bash/command-chunks/chunk-S3BO2NJT.js";
+import "../safe-bash/command-chunks/chunk-6742OVAC.js";
 import "../safe-bash/command-chunks/chunk-TPDKSK66.js";
 import "../safe-bash/command-chunks/chunk-A7SJ2FC6.js";
 import "../safe-bash/command-chunks/chunk-XZ7QGZMG.js";

package/dist/safe-playwright-cloudflare/browser-private-transport.js

@@ -15,20 +15,14 @@ function protocolObject(data, maxBytes, maxGraphNodes, maxGraphDepth) {
     });
 }
 export function createBrowserPrivateTransport(options = {}) {
-    const { maxClients = 8, ...guardOptions } = options;
-    const maxTargets = options.maxPrivateTargets ?? 256;
+    const { maxClients = Infinity, ...guardOptions } = options;
+    const maxTargets = options.maxPrivateTargets ?? Infinity;
     const maxBytes = options.maxMessageBytes ?? Infinity;
-    const creationTimeoutMs = options.creationTimeoutMs ?? 10000;
-    for (const [name, value] of Object.entries({
-        ...guardOptions,
-        maxClients,
-        maxTargets,
-        ...(options.maxMessageBytes === undefined ? {} : { maxBytes }),
-        creationTimeoutMs,
-    })) {
-        if (!Number.isSafeInteger(value) ||
+    const creationTimeoutMs = options.creationTimeoutMs ?? Infinity;
+    for (const [name, value] of Object.entries(options)) {
+        if (value !== undefined && value !== Infinity && (!Number.isSafeInteger(value) ||
             value <= 0 ||
-            (name.endsWith("TimeoutMs") && value > 2147483647))
+            (name.endsWith("TimeoutMs") && value > 2147483647)))
             throw new TypeError(`Invalid private browser limit: ${name}`);
     }
     const clients = new Set();
@@ -258,7 +252,8 @@ export function createBrowserPrivateTransport(options = {}) {
             active: true,
             tokens: new Map(),
             destroyed: new Set(),
-            deadline: AbortSignal.timeout(creationTimeoutMs),
+            deadline: Number.isFinite(creationTimeoutMs)
+                ? AbortSignal.timeout(creationTimeoutMs) : new AbortController().signal,
             expire: () => fail(new Error("Private target creation identity timed out")),
         };
         creation = entry;

package/dist/safe-playwright-cloudflare/browser-storage-control.js

@@ -75,6 +75,11 @@ export function createBrowserStorageControl(options) {
     let closing;
     let timer;
     let timedCommandId;
+    let clock = performance.now();
+    function now() {
+        clock = Math.max(clock, performance.now());
+        return clock;
+    }
     function scheduleDeadline() {
         if (!Number.isFinite(limits.commandTimeoutMs) || closed)
             return;
@@ -88,15 +93,19 @@ export function createBrowserStorageControl(options) {
         if (!first)
             return;
         const [id, command] = first;
-        const remaining = limits.commandTimeoutMs - (performance.now() - command.started);
+        const previous = now();
+        const remaining = limits.commandTimeoutMs - (previous - command.started);
+        const step = Math.min(Math.max(0, remaining), 2147483647);
         timer = setTimeout(() => {
             timer = undefined;
             timedCommandId = undefined;
-            if (performance.now() - command.started >= limits.commandTimeoutMs)
+            // Timer completion advances the logical clock even when workerd freezes performance.now().
+            clock = Math.max(now(), previous + step);
+            if (clock - command.started >= limits.commandTimeoutMs)
                 expireCommand(id, command.method);
             // Long deadlines are chunked to avoid the native timer's signed-int overflow.
             scheduleDeadline();
-        }, Math.min(Math.max(0, remaining), 2147483647));
+        }, step);
     }
     function notifyDetached(reason) {
         const event = {
@@ -251,7 +260,7 @@ export function createBrowserStorageControl(options) {
                 bytes,
                 sessionId,
                 method,
-                started: performance.now(),
+                started: now(),
             });
             pendingBytes += bytes;
             scheduleDeadline();

package/dist/safe-playwright-cloudflare/browser-trace-archive.js

@@ -30,7 +30,7 @@ export async function writeTraceArchive(options) {
     const zipLimits = {
         maxArchiveBytes: limits.maxArchiveBytes, maxEntryBytes: limits.maxBytes,
         maxTotalBytes: limits.maxBytes, maxMembers: limits.maxFiles,
-        maxPathBytes: 65535, maxDepth: 32, maxPaxBytes: 65535, maxTextBytes: 65535,
+        maxPathBytes: Infinity, maxDepth: Infinity, maxPaxBytes: Infinity, maxTextBytes: Infinity,
         chunkSize: 65536,
     };
     const entries = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-bash",
-  "version": "0.1.745",
+  "version": "0.1.747",
   "description": "Extensible virtual shell with pluggable filesystems and streaming commands",
   "type": "module",
   "license": "MIT",
@@ -72,25 +72,31 @@
     },
     "./contracts": {
       "types": {
+        "workerd": "./dist/safe-bash/contracts/index.d.ts",
         "browser": "./dist/safe-bash/contracts/index.d.ts",
         "default": "./dist/safe-bash/contracts/node.d.ts"
       },
+      "workerd": "./dist/safe-bash/contracts/index.js",
       "browser": "./dist/safe-bash/contracts/index.js",
       "import": "./dist/safe-bash/contracts/node.js"
     },
     "./contracts/index": {
       "types": {
+        "workerd": "./dist/safe-bash/contracts/index.d.ts",
         "browser": "./dist/safe-bash/contracts/index.d.ts",
         "default": "./dist/safe-bash/contracts/node.d.ts"
       },
+      "workerd": "./dist/safe-bash/contracts/index.js",
       "browser": "./dist/safe-bash/contracts/index.js",
       "import": "./dist/safe-bash/contracts/node.js"
     },
     "./contracts/path": {
       "types": {
+        "workerd": "./dist/safe-bash/contracts/path.d.ts",
         "browser": "./dist/safe-bash/contracts/path.d.ts",
         "default": "./dist/safe-bash/contracts/node-path.d.ts"
       },
+      "workerd": "./dist/safe-bash/contracts/path.js",
       "browser": "./dist/safe-bash/contracts/path.js",
       "import": "./dist/safe-bash/contracts/node-path.js"
     },
@@ -100,9 +106,9 @@
     },
     "./commands/op": {
       "types": "./dist/safe-bash/commands/op/index.d.ts",
-      "import": "./dist/safe-bash/commands/op/index.js",
       "workerd": "./dist/safe-bash/commands/op/index.browser.js",
-      "browser": "./dist/safe-bash/commands/op/index.browser.js"
+      "browser": "./dist/safe-bash/commands/op/index.browser.js",
+      "import": "./dist/safe-bash/commands/op/index.js"
     },
     "./commands/network": {
       "types": {
@@ -278,6 +284,7 @@
     },
     "./node": {
       "types": "./dist/safe-bash/node.d.ts",
+      "workerd": null,
       "browser": null,
       "import": "./dist/safe-bash/node.js"
     },
@@ -313,6 +320,7 @@
     },
     "./commands/docx": {
       "types": "./dist/safe-bash/commands/docx/index.d.ts",
+      "workerd": "./dist/safe-bash/commands/docx/index.browser.js",
       "browser": "./dist/safe-bash/commands/docx/index.browser.js",
       "import": "./dist/safe-bash/commands/docx/index.js"
     },
@@ -322,21 +330,25 @@
     },
     "./commands/python": {
       "types": "./dist/safe-bash/commands/python/index.d.ts",
+      "workerd": "./dist/safe-bash/commands/python/index.browser.js",
       "browser": "./dist/safe-bash/commands/python/index.browser.js",
       "import": "./dist/safe-bash/commands/python/index.js"
     },
     "./commands/python/worker": {
       "types": "./dist/safe-bash/commands/python/worker.d.ts",
+      "workerd": "./dist/safe-bash/commands/python/worker.browser.js",
       "browser": "./dist/safe-bash/commands/python/worker.browser.js",
       "import": "./dist/safe-bash/commands/python/worker.js"
     },
     "./commands/python/node": {
       "types": "./dist/safe-bash/commands/python/node.d.ts",
+      "workerd": null,
       "browser": null,
       "import": "./dist/safe-bash/commands/python/node.js"
     },
     "./commands/python/docker": {
       "types": "./dist/safe-bash/commands/python/docker.d.ts",
+      "workerd": null,
       "browser": null,
       "import": "./dist/safe-bash/commands/python/docker.js"
     },
@@ -346,6 +358,7 @@
     },
     "./commands/playwright": {
       "types": "./dist/safe-bash/commands/playwright/index.d.ts",
+      "workerd": "./dist/safe-bash/commands/playwright/index.js",
       "browser": "./dist/safe-bash/commands/playwright/index.js",
       "import": "./dist/safe-bash/commands/playwright/index.js"
     },
@@ -407,6 +420,7 @@
     },
     "./playwright": {
       "types": "./dist/safe-bash/commands/playwright/index.d.ts",
+      "workerd": "./dist/safe-bash/commands/playwright/index.js",
       "browser": "./dist/safe-bash/commands/playwright/index.js",
       "import": "./dist/safe-bash/commands/playwright/index.js"
     },
@@ -631,7 +645,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.745",
+    "@poe-platform/safe-fs": "0.1.747",
     "pdf-lib": "1.17.1",
     "@types/node": "^25.2.2",
     "pako": "3.0.1",
@@ -659,16 +673,6 @@
       "types": "./dist/safe-bash-command-git/runtime.d.ts",
       "workerd": "./dist/safe-bash-command-git/runtime.workerd.js",
       "default": "./dist/safe-bash-command-git/runtime.js"
-    },
-    "#image-ast-streams": {
-      "types": {
-        "workerd": "./dist/image-ast/browser/streams/web.d.ts",
-        "browser": "./dist/image-ast/browser/streams/web.d.ts",
-        "default": "./dist/image-ast/streams/node.d.ts"
-      },
-      "workerd": "./dist/image-ast/streams/web.js",
-      "browser": "./dist/image-ast/streams/web.js",
-      "default": "./dist/image-ast/streams/node.js"
     }
   },
   "peerDependencies": {

package/dist/image-ast/streams/node.d.ts

@@ -1,10 +0,0 @@
-import { Buffer } from "node:buffer";
-export { EventEmitter } from "node:events";
-export { Duplex } from "node:stream";
-export declare const outputBytes: {
-    (array: import("node:buffer").WithImplicitCoercion<ArrayLike<number>>): Buffer<ArrayBuffer>;
-    <TArrayBuffer extends import("node:buffer").WithImplicitCoercion<ArrayBufferLike>>(arrayBuffer: TArrayBuffer, byteOffset?: number, length?: number): Buffer<import("node:buffer").ImplicitArrayBuffer<TArrayBuffer>>;
-    (string: import("node:buffer").WithImplicitCoercion<string>, encoding?: BufferEncoding): Buffer<ArrayBuffer>;
-    (arrayOrString: import("node:buffer").WithImplicitCoercion<ArrayLike<number> | string>): Buffer<ArrayBuffer>;
-};
-export declare const isBuffer: (obj: any) => obj is Buffer;

package/dist/image-ast/streams/node.js

@@ -1,5 +0,0 @@
-import { Buffer } from "node:buffer";
-export { EventEmitter } from "node:events";
-export { Duplex } from "node:stream";
-export const outputBytes = Buffer.from;
-export const isBuffer = Buffer.isBuffer;

package/dist/image-ast/streams/web.js

@@ -1,94 +0,0 @@
-export const outputBytes = Uint8Array.from.bind(Uint8Array);
-export const isBuffer = (_input) => false;
-export class EventEmitter {
-    listeners = new Map();
-    on(event, listener) {
-        let listeners = this.listeners.get(event);
-        if (!listeners)
-            this.listeners.set(event, listeners = new Set());
-        listeners.add(listener);
-        return this;
-    }
-    once(event, listener) {
-        const once = (...args) => { this.removeListener(event, once); listener(...args); };
-        return this.on(event, once);
-    }
-    removeListener(event, listener) {
-        this.listeners.get(event)?.delete(listener);
-        return this;
-    }
-    emit(event, ...args) {
-        const listeners = [...this.listeners.get(event) ?? []];
-        for (const listener of listeners)
-            listener(...args);
-        return listeners.length > 0;
-    }
-}
-/** Browser Sharp streams use standard Web Streams for pressure and cancellation. */
-export class Duplex extends EventEmitter {
-    readable;
-    writable;
-    writableFinished = false;
-    controller;
-    closed = false;
-    constructor() {
-        super();
-        this.readable = new ReadableStream({
-            start: controller => { this.controller = controller; },
-            pull: () => { this._read(); },
-            cancel: reason => { this.destroy(reason instanceof Error ? reason : undefined); },
-        }, { highWaterMark: 0 });
-        this.writable = new WritableStream({
-            write: chunk => new Promise((resolve, reject) => {
-                this._write(chunk, "utf8", error => {
-                    if (error) {
-                        this.destroy(error);
-                        reject(error);
-                    }
-                    else
-                        resolve();
-                });
-            }),
-            close: () => { this.writableFinished = true; this.emit("finish"); },
-            abort: reason => { this.destroy(reason instanceof Error ? reason : undefined); },
-        });
-    }
-    _write(_chunk, _encoding, callback) {
-        callback(new Error("Writable operation is not implemented"));
-    }
-    _read() { throw new Error("Readable operation is not implemented"); }
-    push(chunk) {
-        if (this.closed)
-            return false;
-        if (chunk === null) {
-            this.closed = true;
-            this.controller.close();
-        }
-        else
-            this.controller.enqueue(new Uint8Array(chunk));
-        return (this.controller.desiredSize ?? 0) > 0;
-    }
-    destroy(error) {
-        if (!this.closed) {
-            this.closed = true;
-            this.controller.error(error ?? new Error("Stream cancelled"));
-            this.emit("error", error ?? new Error("Stream cancelled"));
-        }
-        return this;
-    }
-    async *[Symbol.asyncIterator]() {
-        const reader = this.readable.getReader();
-        try {
-            while (true) {
-                const result = await reader.read();
-                if (result.done)
-                    return;
-                yield result.value;
-            }
-        }
-        finally {
-            await reader.cancel();
-            reader.releaseLock();
-        }
-    }
-}