@poe-platform/safe-bash 0.1.758 → 0.1.759

package/dist/image-ast/index.browser.js

@@ -8654,6 +8654,7 @@ var messages_default2 = {
   "-5": "buffer error",
   "-6": "incompatible version"
 };
+var Z_BUF_ERROR = -5;
 var MAX_MEM_LEVEL2 = 9;
 var HEAP_SIZE2 = 573;
 var MIN_MATCH2 = 3;
@@ -30545,22 +30546,31 @@ function decodeFlate(bytes, parms, maxDecodedBytes = DEFAULT_MAX_DECODED_BYTES)
     inflated = new BoundedFlateStream(bytes, maxDecodedBytes).getBytes();
   } catch (error) {
     if (error instanceof PdfError && error.code === "E_LIMIT") throw error;
+    const wrapped = bytes[0] === 31 && bytes[1] === 139 || bytes.length >= 2 && (bytes[0] & 15) === 8 && bytes[0] >>> 4 <= 7 && (bytes[0] << 8 | bytes[1]) % 31 === 0;
     const decoder = new Inflate2({
-      raw: !(bytes[0] === 31 && bytes[1] === 139),
+      raw: !wrapped,
       chunkSize: Math.max(1, Math.min(64 * 1024, maxDecodedBytes + 1))
     });
+    const chunks = [];
     let length = 0;
     decoder.onData = (chunk) => {
       length += chunk.length;
       if (length > maxDecodedBytes) {
         throw new PdfError("E_LIMIT", "FlateDecode output exceeds maximum decoded byte budget");
       }
-      decoder.chunks.push(chunk);
+      chunks.push(chunk);
     };
-    if (!decoder.push(bytes, true) || decoder.err || !decoder.ended) {
+    const complete2 = decoder.push(bytes, true);
+    const truncated = wrapped && decoder.err === Z_BUF_ERROR && length > 0;
+    if ((!complete2 || decoder.err || !decoder.ended) && !truncated) {
       throw new PdfError("E_CAPABILITY", "Invalid FlateDecode compressed stream");
     }
-    inflated = decoder.result;
+    inflated = new Uint8Array(length);
+    let offset = 0;
+    for (const chunk of chunks) {
+      inflated.set(chunk, offset);
+      offset += chunk.length;
+    }
   }
   return applyPredictor(inflated, parms);
 }
@@ -42450,7 +42460,7 @@ function resolvePageFonts(doc, resourcesDict) {
     const glyphNames = buildFontEncodingGlyphNamesMap(encNode);
     const widths = /* @__PURE__ */ new Map();
     let defaultWidth = 556;
-    const isTwoByteCid = subtype === "Type0" || Boolean(cmap?.isTwoByte);
+    const isTwoByteCid = subtype === "Type0";
     let fontMatrix;
     let charProcs;
     let fontResources;

package/dist/image-ast/index.js

@@ -8654,6 +8654,7 @@ var messages_default2 = {
   "-5": "buffer error",
   "-6": "incompatible version"
 };
+var Z_BUF_ERROR = -5;
 var MAX_MEM_LEVEL2 = 9;
 var HEAP_SIZE2 = 573;
 var MIN_MATCH2 = 3;
@@ -30545,22 +30546,31 @@ function decodeFlate(bytes, parms, maxDecodedBytes = DEFAULT_MAX_DECODED_BYTES)
     inflated = new BoundedFlateStream(bytes, maxDecodedBytes).getBytes();
   } catch (error) {
     if (error instanceof PdfError && error.code === "E_LIMIT") throw error;
+    const wrapped = bytes[0] === 31 && bytes[1] === 139 || bytes.length >= 2 && (bytes[0] & 15) === 8 && bytes[0] >>> 4 <= 7 && (bytes[0] << 8 | bytes[1]) % 31 === 0;
     const decoder = new Inflate2({
-      raw: !(bytes[0] === 31 && bytes[1] === 139),
+      raw: !wrapped,
       chunkSize: Math.max(1, Math.min(64 * 1024, maxDecodedBytes + 1))
     });
+    const chunks = [];
     let length = 0;
     decoder.onData = (chunk) => {
       length += chunk.length;
       if (length > maxDecodedBytes) {
         throw new PdfError("E_LIMIT", "FlateDecode output exceeds maximum decoded byte budget");
       }
-      decoder.chunks.push(chunk);
+      chunks.push(chunk);
     };
-    if (!decoder.push(bytes, true) || decoder.err || !decoder.ended) {
+    const complete2 = decoder.push(bytes, true);
+    const truncated = wrapped && decoder.err === Z_BUF_ERROR && length > 0;
+    if ((!complete2 || decoder.err || !decoder.ended) && !truncated) {
       throw new PdfError("E_CAPABILITY", "Invalid FlateDecode compressed stream");
     }
-    inflated = decoder.result;
+    inflated = new Uint8Array(length);
+    let offset = 0;
+    for (const chunk of chunks) {
+      inflated.set(chunk, offset);
+      offset += chunk.length;
+    }
   }
   return applyPredictor(inflated, parms);
 }
@@ -42450,7 +42460,7 @@ function resolvePageFonts(doc, resourcesDict) {
     const glyphNames = buildFontEncodingGlyphNamesMap(encNode);
     const widths = /* @__PURE__ */ new Map();
     let defaultWidth = 556;
-    const isTwoByteCid = subtype === "Type0" || Boolean(cmap?.isTwoByte);
+    const isTwoByteCid = subtype === "Type0";
     let fontMatrix;
     let charProcs;
     let fontResources;

package/dist/pdf-ast/index.js

@@ -644,6 +644,7 @@ var messages_default = {
   "-5": "buffer error",
   "-6": "incompatible version"
 };
+var Z_BUF_ERROR = -5;
 var MAX_MEM_LEVEL = 9;
 var HEAP_SIZE = 573;
 var MIN_MATCH = 3;
@@ -22735,22 +22736,31 @@ function decodeFlate(bytes, parms, maxDecodedBytes = DEFAULT_MAX_DECODED_BYTES)
     inflated = new BoundedFlateStream(bytes, maxDecodedBytes).getBytes();
   } catch (error) {
     if (error instanceof PdfError && error.code === "E_LIMIT") throw error;
+    const wrapped = bytes[0] === 31 && bytes[1] === 139 || bytes.length >= 2 && (bytes[0] & 15) === 8 && bytes[0] >>> 4 <= 7 && (bytes[0] << 8 | bytes[1]) % 31 === 0;
     const decoder = new Inflate({
-      raw: !(bytes[0] === 31 && bytes[1] === 139),
+      raw: !wrapped,
       chunkSize: Math.max(1, Math.min(64 * 1024, maxDecodedBytes + 1))
     });
+    const chunks = [];
     let length = 0;
     decoder.onData = (chunk) => {
       length += chunk.length;
       if (length > maxDecodedBytes) {
         throw new PdfError("E_LIMIT", "FlateDecode output exceeds maximum decoded byte budget");
       }
-      decoder.chunks.push(chunk);
+      chunks.push(chunk);
     };
-    if (!decoder.push(bytes, true) || decoder.err || !decoder.ended) {
+    const complete = decoder.push(bytes, true);
+    const truncated = wrapped && decoder.err === Z_BUF_ERROR && length > 0;
+    if ((!complete || decoder.err || !decoder.ended) && !truncated) {
       throw new PdfError("E_CAPABILITY", "Invalid FlateDecode compressed stream");
     }
-    inflated = decoder.result;
+    inflated = new Uint8Array(length);
+    let offset = 0;
+    for (const chunk of chunks) {
+      inflated.set(chunk, offset);
+      offset += chunk.length;
+    }
   }
   return applyPredictor(inflated, parms);
 }
@@ -35164,7 +35174,7 @@ function resolvePageFonts(doc, resourcesDict) {
     const glyphNames = buildFontEncodingGlyphNamesMap(encNode);
     const widths = /* @__PURE__ */ new Map();
     let defaultWidth = 556;
-    const isTwoByteCid = subtype === "Type0" || Boolean(cmap?.isTwoByte);
+    const isTwoByteCid = subtype === "Type0";
     let fontMatrix;
     let charProcs;
     let fontResources;

package/dist/safe-bash/chunks/{chunk-WNWIBBJZ.js → chunk-AYPUGSOV.js}

@@ -1626,9 +1626,14 @@ function createPythonShellCapability(context, options = {}) {
     const stdout = [];
     const stderr = [];
     let captured = 0;
+    let outputFailure;
     const sink = (target, type) => ({ async write(chunk) {
       childSignal.throwIfAborted();
-      if (chunk.length > outputLimit - captured) throw new RangeError("Python shell output limit exceeded");
+      if (outputFailure) throw outputFailure;
+      if (chunk.length > outputLimit - captured) {
+        outputFailure = new RangeError("Python shell output limit exceeded");
+        throw outputFailure;
+      }
       captured += chunk.length;
       if (publish) {
         for (let offset = 0; offset < chunk.length; offset += chunkBytes) {
@@ -1652,6 +1657,7 @@ function createPythonShellCapability(context, options = {}) {
         externalInvocation: true
       });
       childSignal.throwIfAborted();
+      if (outputFailure) throw outputFailure;
       return { stdout, stderr, exitCode: result.exitCode };
     } catch (error) {
       if (!publish && !signal.aborted && childSignal.aborted && childSignal.reason?.name === "TimeoutError") {

package/dist/safe-bash/command-chunks/{chunk-XYCWDGOG.js → chunk-7JA44PVV.js}

@@ -1,7 +1,7 @@
 import {
   PdfDocument,
   renderPdfPageToPng
-} from "./chunk-TCAGGM44.js";
+} from "./chunk-BAUGDXLZ.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";

package/dist/safe-bash/command-chunks/{chunk-TCAGGM44.js → chunk-BAUGDXLZ.js}

@@ -4,7 +4,7 @@ import {
 
 // packages/pdf-ast/src/cos/filters.ts
 init_buffer();
-import { deflate, Inflate } from "pako";
+import { deflate, Inflate, Z_BUF_ERROR } from "pako";
 
 // packages/pdf-ast/src/vendor/pdfjs-fonts.mjs
 init_buffer();
@@ -19365,22 +19365,31 @@ function decodeFlate(bytes, parms, maxDecodedBytes = DEFAULT_MAX_DECODED_BYTES)
     inflated = new BoundedFlateStream(bytes, maxDecodedBytes).getBytes();
   } catch (error) {
     if (error instanceof PdfError && error.code === "E_LIMIT") throw error;
+    const wrapped = bytes[0] === 31 && bytes[1] === 139 || bytes.length >= 2 && (bytes[0] & 15) === 8 && bytes[0] >>> 4 <= 7 && (bytes[0] << 8 | bytes[1]) % 31 === 0;
     const decoder = new Inflate({
-      raw: !(bytes[0] === 31 && bytes[1] === 139),
+      raw: !wrapped,
       chunkSize: Math.max(1, Math.min(64 * 1024, maxDecodedBytes + 1))
     });
+    const chunks = [];
     let length = 0;
     decoder.onData = (chunk) => {
       length += chunk.length;
       if (length > maxDecodedBytes) {
         throw new PdfError("E_LIMIT", "FlateDecode output exceeds maximum decoded byte budget");
       }
-      decoder.chunks.push(chunk);
+      chunks.push(chunk);
     };
-    if (!decoder.push(bytes, true) || decoder.err || !decoder.ended) {
+    const complete = decoder.push(bytes, true);
+    const truncated = wrapped && decoder.err === Z_BUF_ERROR && length > 0;
+    if ((!complete || decoder.err || !decoder.ended) && !truncated) {
       throw new PdfError("E_CAPABILITY", "Invalid FlateDecode compressed stream");
     }
-    inflated = decoder.result;
+    inflated = new Uint8Array(length);
+    let offset = 0;
+    for (const chunk of chunks) {
+      inflated.set(chunk, offset);
+      offset += chunk.length;
+    }
   }
   return applyPredictor(inflated, parms);
 }
@@ -30960,7 +30969,7 @@ function resolvePageFonts(doc, resourcesDict) {
     const glyphNames = buildFontEncodingGlyphNamesMap(encNode);
     const widths = /* @__PURE__ */ new Map();
     let defaultWidth = 556;
-    const isTwoByteCid = subtype === "Type0" || Boolean(cmap?.isTwoByte);
+    const isTwoByteCid = subtype === "Type0";
     let fontMatrix;
     let charProcs;
     let fontResources;

package/dist/safe-bash/command-chunks/{chunk-L2C5TIII.js → chunk-HVEAK3OS.js}

@@ -48,11 +48,11 @@ import {
   trimImage,
   unflattenImage,
   unpremultiplyRgbaImage
-} from "./chunk-XYCWDGOG.js";
+} from "./chunk-7JA44PVV.js";
 import {
   PdfDocument,
   encodePng
-} from "./chunk-TCAGGM44.js";
+} from "./chunk-BAUGDXLZ.js";
 import {
   createLuaFilterCapability
 } from "./chunk-Y2KHC6TZ.js";

package/dist/safe-bash/commands/python/index.browser.js

@@ -16,7 +16,7 @@ import {
   pythonCommands,
   pythonDocumentPackages,
   pythonHostFailureCode
-} from "../../chunks/chunk-WNWIBBJZ.js";
+} from "../../chunks/chunk-AYPUGSOV.js";
 import {
   PythonFailure,
   inspectPythonCapabilities

package/dist/safe-bash/commands/python/shell-capability.js

@@ -73,10 +73,15 @@ export function createPythonShellCapability(context, options = {}) {
         const stdout = [];
         const stderr = [];
         let captured = 0;
+        let outputFailure;
         const sink = (target, type) => ({ async write(chunk) {
                 childSignal.throwIfAborted();
-                if (chunk.length > outputLimit - captured)
-                    throw new RangeError('Python shell output limit exceeded');
+                if (outputFailure)
+                    throw outputFailure;
+                if (chunk.length > outputLimit - captured) {
+                    outputFailure = new RangeError('Python shell output limit exceeded');
+                    throw outputFailure;
+                }
                 captured += chunk.length;
                 if (publish) {
                     for (let offset = 0; offset < chunk.length; offset += chunkBytes) {
@@ -97,6 +102,9 @@ export function createPythonShellCapability(context, options = {}) {
                 stdin: childInput, stdout: sink(stdout, 'stdout'), stderr: sink(stderr, 'stderr'), externalInvocation: true,
             });
             childSignal.throwIfAborted();
+            // A command may catch sink rejection and return a status; the host limit still failed.
+            if (outputFailure)
+                throw outputFailure;
             return { stdout, stderr, exitCode: result.exitCode };
         }
         catch (error) {

package/dist/safe-bash/core.browser.js

@@ -158,7 +158,7 @@ import {
   sha256,
   sha384,
   sha512
-} from "./chunks/chunk-WNWIBBJZ.js";
+} from "./chunks/chunk-AYPUGSOV.js";
 import {
   PythonFailure,
   inspectPythonCapabilities