@poe-platform/safe-bash 0.1.758 → 0.1.760

package/dist/safe-bash/chunks/{chunk-WNWIBBJZ.js → chunk-CRQDMBQA.js}

@@ -1626,9 +1626,14 @@ function createPythonShellCapability(context, options = {}) {
     const stdout = [];
     const stderr = [];
     let captured = 0;
+    let outputFailure;
     const sink = (target, type) => ({ async write(chunk) {
       childSignal.throwIfAborted();
-      if (chunk.length > outputLimit - captured) throw new RangeError("Python shell output limit exceeded");
+      if (outputFailure) throw outputFailure;
+      if (chunk.length > outputLimit - captured) {
+        outputFailure = new RangeError("Python shell output limit exceeded");
+        throw outputFailure;
+      }
       captured += chunk.length;
       if (publish) {
         for (let offset = 0; offset < chunk.length; offset += chunkBytes) {
@@ -1652,6 +1657,7 @@ function createPythonShellCapability(context, options = {}) {
         externalInvocation: true
       });
       childSignal.throwIfAborted();
+      if (outputFailure) throw outputFailure;
       return { stdout, stderr, exitCode: result.exitCode };
     } catch (error) {
       if (!publish && !signal.aborted && childSignal.aborted && childSignal.reason?.name === "TimeoutError") {
@@ -1732,9 +1738,90 @@ function record(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new TypeError("Expected a structured Python LLM request");
   return value;
 }
+function jsonBytes(value, limit) {
+  if (limit === Infinity) return 0;
+  let bytes = 0;
+  const ancestors = /* @__PURE__ */ new Set();
+  const add2 = (size) => {
+    if (size > limit - bytes) throw new RangeError("Python LLM serialized response limit exceeded");
+    bytes += size;
+  };
+  const string = (text2) => {
+    add2(2);
+    if (text2.length > limit - bytes) throw new RangeError("Python LLM serialized response limit exceeded");
+    for (let i = 0; i < text2.length; i++) {
+      const point = text2.codePointAt(i);
+      if (point > 65535) {
+        add2(4);
+        i++;
+      } else if (point === 34 || point === 92) add2(2);
+      else if (point < 32) add2([8, 9, 10, 12, 13].includes(point) ? 2 : 6);
+      else if (point >= 55296 && point <= 57343) add2(6);
+      else add2(point < 128 ? 1 : point < 2048 ? 2 : 3);
+    }
+  };
+  const visit = (item) => {
+    if (typeof item === "string") {
+      string(item);
+      return;
+    }
+    if (item === null || typeof item === "boolean" || typeof item === "number" && Number.isFinite(item)) {
+      add2(JSON.stringify(item).length);
+      return;
+    }
+    if (!item || typeof item !== "object" || ancestors.has(item)) throw new TypeError("Python LLM response must contain acyclic data");
+    ancestors.add(item);
+    add2(2);
+    let entries = 0;
+    if (Array.isArray(item)) {
+      if (item.length > limit - bytes) throw new RangeError("Python LLM serialized response limit exceeded");
+      for (let i = 0; i < item.length; i++) {
+        const descriptor = Object.getOwnPropertyDescriptor(item, String(i));
+        if (!descriptor || !("value" in descriptor)) throw new TypeError("Python LLM response must contain data");
+        if (entries++) add2(1);
+        visit(descriptor.value);
+      }
+    } else {
+      for (const key in item) {
+        if (!Object.hasOwn(item, key)) continue;
+        const descriptor = Object.getOwnPropertyDescriptor(item, key);
+        if (!("value" in descriptor)) throw new TypeError("Python LLM response must contain data");
+        if (entries++) add2(1);
+        string(key);
+        add2(1);
+        visit(descriptor.value);
+      }
+    }
+    ancestors.delete(item);
+  };
+  visit(value);
+  return bytes;
+}
+function* textFragments(text2, limit) {
+  let start = 0, bytes = 0;
+  for (let i = 0; i < text2.length; ) {
+    const point = text2.codePointAt(i);
+    const width = point < 128 ? 1 : point < 2048 ? 2 : point < 65536 ? 3 : 4;
+    if (width > limit) throw new RangeError("Python LLM stream chunk limit cannot fit a Unicode scalar");
+    if (width > limit - bytes) {
+      yield text2.slice(start, i);
+      start = i;
+      bytes = 0;
+    }
+    bytes += width;
+    i += point > 65535 ? 2 : 1;
+  }
+  if (start < text2.length || !text2.length) yield text2.slice(start);
+}
 function createPythonLlmCapability(context, service, options = {}) {
   const chunkBytes = options.maxStreamChunkBytes ?? 16384;
   if (!Number.isSafeInteger(chunkBytes) || chunkBytes < 1) throw new RangeError("Invalid Python LLM stream chunk limit");
+  const bufferedLimit = options.maxBufferedResponseBytes ?? Infinity;
+  const eventLimit = options.maxBufferedEvents ?? bufferedLimit;
+  const metadataLimit = options.maxMetadataBytes ?? bufferedLimit;
+  for (const limit of [bufferedLimit, eventLimit, metadataLimit]) {
+    if (limit !== Infinity && (!Number.isSafeInteger(limit) || limit < 1)) throw new RangeError("Invalid Python LLM host limit");
+  }
   const prepare = async (value, signal) => {
     const payload = record(value);
     for (const key of ["template", "conversation"]) {
@@ -1791,7 +1878,15 @@ function createPythonLlmCapability(context, service, options = {}) {
           request.signal.throwIfAborted();
           yield { type: "bytes", data: Array.from(event.data.subarray(offset, offset + chunkBytes)) };
         }
-      } else yield event;
+      } else if (event.type === "text") {
+        for (const text2 of textFragments(event.text, chunkBytes)) {
+          request.signal.throwIfAborted();
+          yield { type: "text", text: text2 };
+        }
+      } else {
+        jsonBytes(event.response, metadataLimit);
+        yield event;
+      }
     }
   };
   return {
@@ -1814,15 +1909,41 @@ function createPythonLlmCapability(context, service, options = {}) {
         });
       }
       if (operation.operation !== "complete") throw new TypeError("Unsupported Python LLM operation");
-      const text2 = [], data = [];
+      const request = await prepare(payload, signal);
+      const bounded = { ...request, maxOutputBytes: Math.min(request.maxOutputBytes ?? Infinity, bufferedLimit) };
+      let text2 = "", textBytes = 0, dataBytes = 0, received = 0;
+      const data = [];
       let response = {};
-      for await (const value2 of events(payload, { signal })) {
-        const event = record(value2);
-        if (event.type === "text") text2.push(event.text);
-        else if (event.type === "bytes") for (const byte of event.data) data.push(byte);
-        else if (event.type === "response") response = { ...record(event.response) };
+      let envelopeBytes = jsonBytes({ text: "", data: [] }, bufferedLimit);
+      const admit = (size) => {
+        if (size > bufferedLimit - envelopeBytes - textBytes - dataBytes) throw new RangeError("Python LLM buffered response limit exceeded");
+      };
+      for await (const event of service.stream(bounded)) {
+        bounded.signal.throwIfAborted();
+        if (++received > eventLimit) throw new RangeError("Python LLM buffered event limit exceeded");
+        if (event.type === "text") {
+          const size = bufferedLimit === Infinity || !event.text ? 0 : jsonBytes(event.text, bufferedLimit - envelopeBytes - textBytes - dataBytes + 2) - 2;
+          admit(size);
+          textBytes += size;
+          if (event.text) text2 += event.text;
+        } else if (event.type === "bytes") {
+          let size = 0;
+          if (bufferedLimit !== Infinity) for (let i = 0; i < event.data.length; i++) {
+            size += String(event.data[i]).length + (data.length || i ? 1 : 0);
+            admit(size);
+          }
+          dataBytes += size;
+          for (const byte of event.data) data.push(byte);
+        } else {
+          jsonBytes(event.response, metadataLimit);
+          const details = record(event.response);
+          const size = jsonBytes({ ...details, text: "", data: [] }, bufferedLimit);
+          if (size > bufferedLimit - textBytes - dataBytes) throw new RangeError("Python LLM buffered response limit exceeded");
+          envelopeBytes = size;
+          response = { ...details };
+        }
       }
-      return { ...response, text: text2.join(""), data };
+      return { ...response, text: text2, data };
     },
     stream: events
   };

package/dist/safe-bash/command-chunks/{chunk-L2C5TIII.js → chunk-MC4XXPQJ.js}

@@ -48,11 +48,11 @@ import {
   trimImage,
   unflattenImage,
   unpremultiplyRgbaImage
-} from "./chunk-XYCWDGOG.js";
+} from "./chunk-UCI6ZQFB.js";
 import {
   PdfDocument,
   encodePng
-} from "./chunk-TCAGGM44.js";
+} from "./chunk-S3SCPBHC.js";
 import {
   createLuaFilterCapability
 } from "./chunk-Y2KHC6TZ.js";

package/dist/safe-bash/command-chunks/{chunk-TCAGGM44.js → chunk-S3SCPBHC.js}

@@ -4,7 +4,7 @@ import {
 
 // packages/pdf-ast/src/cos/filters.ts
 init_buffer();
-import { deflate, Inflate } from "pako";
+import { deflate, Inflate, Z_BUF_ERROR } from "pako";
 
 // packages/pdf-ast/src/vendor/pdfjs-fonts.mjs
 init_buffer();
@@ -19365,22 +19365,31 @@ function decodeFlate(bytes, parms, maxDecodedBytes = DEFAULT_MAX_DECODED_BYTES)
     inflated = new BoundedFlateStream(bytes, maxDecodedBytes).getBytes();
   } catch (error) {
     if (error instanceof PdfError && error.code === "E_LIMIT") throw error;
+    const wrapped = bytes[0] === 31 && bytes[1] === 139 || bytes.length >= 2 && (bytes[0] & 15) === 8 && bytes[0] >>> 4 <= 7 && (bytes[0] << 8 | bytes[1]) % 31 === 0;
     const decoder = new Inflate({
-      raw: !(bytes[0] === 31 && bytes[1] === 139),
+      raw: !wrapped,
       chunkSize: Math.max(1, Math.min(64 * 1024, maxDecodedBytes + 1))
     });
+    const chunks = [];
     let length = 0;
     decoder.onData = (chunk) => {
       length += chunk.length;
       if (length > maxDecodedBytes) {
         throw new PdfError("E_LIMIT", "FlateDecode output exceeds maximum decoded byte budget");
       }
-      decoder.chunks.push(chunk);
+      chunks.push(chunk);
     };
-    if (!decoder.push(bytes, true) || decoder.err || !decoder.ended) {
+    const complete = decoder.push(bytes, true);
+    const truncated = wrapped && decoder.err === Z_BUF_ERROR && length > 0;
+    if ((!complete || decoder.err || !decoder.ended) && !truncated) {
       throw new PdfError("E_CAPABILITY", "Invalid FlateDecode compressed stream");
     }
-    inflated = decoder.result;
+    inflated = new Uint8Array(length);
+    let offset = 0;
+    for (const chunk of chunks) {
+      inflated.set(chunk, offset);
+      offset += chunk.length;
+    }
   }
   return applyPredictor(inflated, parms);
 }
@@ -30960,7 +30969,7 @@ function resolvePageFonts(doc, resourcesDict) {
     const glyphNames = buildFontEncodingGlyphNamesMap(encNode);
     const widths = /* @__PURE__ */ new Map();
     let defaultWidth = 556;
-    const isTwoByteCid = subtype === "Type0" || Boolean(cmap?.isTwoByte);
+    const isTwoByteCid = subtype === "Type0";
     let fontMatrix;
     let charProcs;
     let fontResources;
@@ -32413,7 +32422,7 @@ function evaluateContentStreamToDisplayList(params) {
               const [x, y] = transformPoint(st.ctm, seg.x, seg.y);
               transformedSegments.push({ kind: "cubic", x1, y1, x2, y2, x, y });
             } else if (seg.kind === "rect") {
-              if (hasRotOrShear) {
+              if (hasRotOrShear || seg.width * st.ctm[0] < 0 || seg.height * st.ctm[3] < 0) {
                 const [p0x, p0y] = transformPoint(st.ctm, seg.x, seg.y);
                 const [p1x, p1y] = transformPoint(st.ctm, seg.x + seg.width, seg.y);
                 const [p2x, p2y] = transformPoint(st.ctm, seg.x + seg.width, seg.y + seg.height);
@@ -32446,7 +32455,12 @@ function evaluateContentStreamToDisplayList(params) {
               transformedSegments.push({ kind: "close" });
             }
           }
-          if (node.clip && transformedSegments.length > 0) {
+          const applyClip = () => {
+            if (!node.clip) return;
+            st.clipPaths = [...st.clipPaths ?? [], {
+              segments: transformedSegments,
+              fillRule: node.clip === "W*" ? "evenodd" : "nonzero"
+            }];
             let cMinX = Infinity, cMinY = Infinity, cMaxX = -Infinity, cMaxY = -Infinity;
             for (const s of transformedSegments) {
               if (s.kind === "move" || s.kind === "line") {
@@ -32474,8 +32488,11 @@ function evaluateContentStreamToDisplayList(params) {
                 Math.min(st.clipRect[3], cMaxY)
               ] : [cMinX, cMinY, cMaxX, cMaxY];
             }
+          };
+          if (node.paint === "n") {
+            applyClip();
+            break;
           }
-          if (node.paint === "n") break;
           const isFill = ["f", "F", "f*", "B", "B*", "b", "b*"].includes(node.paint);
           const isStroke = ["S", "s", "B", "B*", "b", "b*"].includes(node.paint);
           let evaluatedFillPattern = false;
@@ -32608,7 +32625,10 @@ function evaluateContentStreamToDisplayList(params) {
               }
             }
           }
-          if (evaluatedFillPattern && !isStroke) break;
+          if (evaluatedFillPattern && !isStroke) {
+            applyClip();
+            break;
+          }
           const fillRule = node.paint.includes("*") ? "evenodd" : "nonzero";
           const ctmScale = Math.max(1e-6, Math.hypot(st.ctm[0], st.ctm[1]));
           const scaledStrokeWidth = st.strokeWidth === 0 ? 0 : st.strokeWidth * ctmScale;
@@ -32628,6 +32648,7 @@ function evaluateContentStreamToDisplayList(params) {
             ...st.dashPhase !== void 0 ? { dashPhase: st.dashPhase } : {},
             ...st.clipRect ? { clipRect: [...st.clipRect] } : {}
           } });
+          applyClip();
           break;
         }
         case "xobject": {
@@ -34736,8 +34757,8 @@ function segmentsToScreenEdges(segments, pageHeight, scale, closeSubpaths = fals
       if (closeSubpaths && hasOpenSubpath && (curX !== startX || curY !== startY)) {
         edges.push({ x0: curX, y0: curY, x1: startX, y1: startY });
       }
-      const [rx0, ry0] = toScreen(seg.x, seg.y + seg.height);
-      const [rx1, ry1] = toScreen(seg.x + seg.width, seg.y);
+      const [rx0, ry0] = toScreen(seg.x, seg.y);
+      const [rx1, ry1] = toScreen(seg.x + seg.width, seg.y + seg.height);
       edges.push(
         { x0: rx0, y0: ry0, x1: rx1, y1: ry0 },
         { x0: rx1, y0: ry0, x1: rx1, y1: ry1 },
@@ -34880,21 +34901,24 @@ function renderDisplayListToBitmap(displayList, options = {}) {
   }
   const aaVec = options.antialiasVector !== false;
   const aaTxt = options.antialiasText !== false;
-  const clipMasks = /* @__PURE__ */ new Map();
+  let cachedClips;
+  let cachedClipMask;
   const imageClipMasks = /* @__PURE__ */ new Map();
   for (const original of paintOperations(displayList)) {
     if (original.kind === "glyph" && (original.value.renderMode === 3 || !original.value.outline && !original.value.unicode.trim())) continue;
     const operation = original.kind === "glyph" ? { kind: "path", value: glyphPaint(original.value) } : original;
     const clips = original.value.clipPaths;
-    let clipMask = clips ? clipMasks.get(clips) : void 0;
+    let clipMask = clips && clips === cachedClips ? cachedClipMask : void 0;
     if (clips && !clipMask) {
       clipMask = new Uint8Array(width * height * 4).fill(255);
-      for (const segments of clips) {
+      for (const clip of clips) {
+        const { segments, fillRule } = "segments" in clip ? clip : { segments: clip, fillRule: "nonzero" };
         const layer = new Uint8Array(width * height * 4);
-        fillEdgesScanline4x4(layer, width, height, segmentsToScreenEdges(segments, displayList.height, scale, true), { r: 1, g: 1, b: 1 });
+        fillEdgesScanline4x4(layer, width, height, segmentsToScreenEdges(segments, displayList.height, scale, true), { r: 1, g: 1, b: 1 }, 1, fillRule);
         for (let i = 3; i < layer.length; i += 4) clipMask[i] = Math.round(clipMask[i] * layer[i] / 255);
       }
-      clipMasks.set(clips, clipMask);
+      cachedClips = clips;
+      cachedClipMask = clipMask;
     }
     const imageClips = original.value.clipImages;
     if (imageClips) {

package/dist/safe-bash/command-chunks/{chunk-XYCWDGOG.js → chunk-UCI6ZQFB.js}

@@ -1,7 +1,7 @@
 import {
   PdfDocument,
   renderPdfPageToPng
-} from "./chunk-TCAGGM44.js";
+} from "./chunk-S3SCPBHC.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";

package/dist/safe-bash/commands/python/index.browser.js

@@ -16,7 +16,7 @@ import {
   pythonCommands,
   pythonDocumentPackages,
   pythonHostFailureCode
-} from "../../chunks/chunk-WNWIBBJZ.js";
+} from "../../chunks/chunk-CRQDMBQA.js";
 import {
   PythonFailure,
   inspectPythonCapabilities

package/dist/safe-bash/commands/python/index.d.ts

@@ -4,7 +4,7 @@ import { type PythonDiagnosticObserver } from './diagnostics.js';
 import { createPythonHostBridge, type PythonHostCapability, type PythonHostBridgeOptions } from './host-capabilities.js';
 export * from './host-capabilities.js';
 export { createPythonShellCapability } from './shell-capability.js';
-export { createPythonLlmCapability } from './llm-capability.js';
+export { createPythonLlmCapability, type PythonLlmCapabilityOptions } from './llm-capability.js';
 /** A dedicated interpreter worker. The service event loop must never block. */
 export interface PythonWorkerEndpoint {
     postMessage(value: unknown): void;

package/dist/safe-bash/commands/python/llm-capability.d.ts

@@ -1,8 +1,12 @@
 import type { CommandContext } from '../../contracts/index.js';
 import type { LlmService } from '../llm/service.js';
 import type { PythonHostCapability } from './host-capabilities.js';
-/** Reuses the invocation's authorized service; Python receives only model data. */
-export declare function createPythonLlmCapability(context: Pick<CommandContext, 'fs' | 'cwd' | 'inputBudget'>, service: LlmService, options?: {
+export interface PythonLlmCapabilityOptions {
     readonly maxStreamChunkBytes?: number;
-}): PythonHostCapability;
+    readonly maxBufferedResponseBytes?: number;
+    readonly maxBufferedEvents?: number;
+    readonly maxMetadataBytes?: number;
+}
+/** Reuses the invocation's authorized service; Python receives only model data. */
+export declare function createPythonLlmCapability(context: Pick<CommandContext, 'fs' | 'cwd' | 'inputBudget'>, service: LlmService, options?: PythonLlmCapabilityOptions): PythonHostCapability;
 //# sourceMappingURL=llm-capability.d.ts.map

package/dist/safe-bash/commands/python/llm-capability.js

@@ -5,11 +5,112 @@ function record(value) {
         throw new TypeError('Expected a structured Python LLM request');
     return value;
 }
+/** Count the wire representation before retaining/serializing host metadata. */
+function jsonBytes(value, limit) {
+    if (limit === Infinity)
+        return 0;
+    let bytes = 0;
+    const ancestors = new Set();
+    const add = (size) => {
+        if (size > limit - bytes)
+            throw new RangeError('Python LLM serialized response limit exceeded');
+        bytes += size;
+    };
+    const string = (text) => {
+        add(2);
+        if (text.length > limit - bytes)
+            throw new RangeError('Python LLM serialized response limit exceeded');
+        for (let i = 0; i < text.length; i++) {
+            const point = text.codePointAt(i);
+            if (point > 65535) {
+                add(4);
+                i++;
+            }
+            else if (point === 34 || point === 92)
+                add(2);
+            else if (point < 32)
+                add([8, 9, 10, 12, 13].includes(point) ? 2 : 6);
+            else if (point >= 0xd800 && point <= 0xdfff)
+                add(6);
+            else
+                add(point < 128 ? 1 : point < 2048 ? 2 : 3);
+        }
+    };
+    const visit = (item) => {
+        if (typeof item === 'string') {
+            string(item);
+            return;
+        }
+        if (item === null || typeof item === 'boolean' || typeof item === 'number' && Number.isFinite(item)) {
+            add(JSON.stringify(item).length);
+            return;
+        }
+        if (!item || typeof item !== 'object' || ancestors.has(item))
+            throw new TypeError('Python LLM response must contain acyclic data');
+        ancestors.add(item);
+        add(2);
+        let entries = 0;
+        if (Array.isArray(item)) {
+            if (item.length > limit - bytes)
+                throw new RangeError('Python LLM serialized response limit exceeded');
+            for (let i = 0; i < item.length; i++) {
+                const descriptor = Object.getOwnPropertyDescriptor(item, String(i));
+                if (!descriptor || !('value' in descriptor))
+                    throw new TypeError('Python LLM response must contain data');
+                if (entries++)
+                    add(1);
+                visit(descriptor.value);
+            }
+        }
+        else {
+            for (const key in item) {
+                if (!Object.hasOwn(item, key))
+                    continue;
+                const descriptor = Object.getOwnPropertyDescriptor(item, key);
+                if (!('value' in descriptor))
+                    throw new TypeError('Python LLM response must contain data');
+                if (entries++)
+                    add(1);
+                string(key);
+                add(1);
+                visit(descriptor.value);
+            }
+        }
+        ancestors.delete(item);
+    };
+    visit(value);
+    return bytes;
+}
+function* textFragments(text, limit) {
+    let start = 0, bytes = 0;
+    for (let i = 0; i < text.length;) {
+        const point = text.codePointAt(i);
+        const width = point < 128 ? 1 : point < 2048 ? 2 : point < 65536 ? 3 : 4;
+        if (width > limit)
+            throw new RangeError('Python LLM stream chunk limit cannot fit a Unicode scalar');
+        if (width > limit - bytes) {
+            yield text.slice(start, i);
+            start = i;
+            bytes = 0;
+        }
+        bytes += width;
+        i += point > 65535 ? 2 : 1;
+    }
+    if (start < text.length || !text.length)
+        yield text.slice(start);
+}
 /** Reuses the invocation's authorized service; Python receives only model data. */
 export function createPythonLlmCapability(context, service, options = {}) {
     const chunkBytes = options.maxStreamChunkBytes ?? 16384;
     if (!Number.isSafeInteger(chunkBytes) || chunkBytes < 1)
         throw new RangeError('Invalid Python LLM stream chunk limit');
+    const bufferedLimit = options.maxBufferedResponseBytes ?? Infinity;
+    const eventLimit = options.maxBufferedEvents ?? bufferedLimit;
+    const metadataLimit = options.maxMetadataBytes ?? bufferedLimit;
+    for (const limit of [bufferedLimit, eventLimit, metadataLimit]) {
+        if (limit !== Infinity && (!Number.isSafeInteger(limit) || limit < 1))
+            throw new RangeError('Invalid Python LLM host limit');
+    }
     const prepare = async (value, signal) => {
         const payload = record(value);
         for (const key of ['template', 'conversation']) {
@@ -73,8 +174,16 @@ export function createPythonLlmCapability(context, service, options = {}) {
                     yield { type: 'bytes', data: Array.from(event.data.subarray(offset, offset + chunkBytes)) };
                 }
             }
-            else
+            else if (event.type === 'text') {
+                for (const text of textFragments(event.text, chunkBytes)) {
+                    request.signal.throwIfAborted();
+                    yield { type: 'text', text };
+                }
+            }
+            else {
+                jsonBytes(event.response, metadataLimit);
                 yield event;
+            }
         }
     };
     return {
@@ -93,19 +202,49 @@ export function createPythonLlmCapability(context, service, options = {}) {
             }
             if (operation.operation !== 'complete')
                 throw new TypeError('Unsupported Python LLM operation');
-            const text = [], data = [];
+            const request = await prepare(payload, signal);
+            const bounded = { ...request, maxOutputBytes: Math.min(request.maxOutputBytes ?? Infinity, bufferedLimit) };
+            let text = '', textBytes = 0, dataBytes = 0, received = 0;
+            const data = [];
             let response = {};
-            for await (const value of events(payload, { signal })) {
-                const event = record(value);
-                if (event.type === 'text')
-                    text.push(event.text);
-                else if (event.type === 'bytes')
+            let envelopeBytes = jsonBytes({ text: '', data: [] }, bufferedLimit);
+            const admit = (size) => {
+                if (size > bufferedLimit - envelopeBytes - textBytes - dataBytes)
+                    throw new RangeError('Python LLM buffered response limit exceeded');
+            };
+            for await (const event of service.stream(bounded)) {
+                bounded.signal.throwIfAborted();
+                if (++received > eventLimit)
+                    throw new RangeError('Python LLM buffered event limit exceeded');
+                if (event.type === 'text') {
+                    const size = bufferedLimit === Infinity || !event.text ? 0 : jsonBytes(event.text, bufferedLimit - envelopeBytes - textBytes - dataBytes + 2) - 2;
+                    admit(size);
+                    textBytes += size;
+                    if (event.text)
+                        text += event.text;
+                }
+                else if (event.type === 'bytes') {
+                    let size = 0;
+                    if (bufferedLimit !== Infinity)
+                        for (let i = 0; i < event.data.length; i++) {
+                            size += String(event.data[i]).length + (data.length || i ? 1 : 0);
+                            admit(size);
+                        }
+                    dataBytes += size;
                     for (const byte of event.data)
                         data.push(byte);
-                else if (event.type === 'response')
-                    response = { ...record(event.response) };
+                }
+                else {
+                    jsonBytes(event.response, metadataLimit);
+                    const details = record(event.response);
+                    const size = jsonBytes({ ...details, text: '', data: [] }, bufferedLimit);
+                    if (size > bufferedLimit - textBytes - dataBytes)
+                        throw new RangeError('Python LLM buffered response limit exceeded');
+                    envelopeBytes = size;
+                    response = { ...details };
+                }
             }
-            return { ...response, text: text.join(''), data };
+            return { ...response, text, data };
         },
         stream: events,
     };

package/dist/safe-bash/commands/python/shell-capability.js

@@ -73,10 +73,15 @@ export function createPythonShellCapability(context, options = {}) {
         const stdout = [];
         const stderr = [];
         let captured = 0;
+        let outputFailure;
         const sink = (target, type) => ({ async write(chunk) {
                 childSignal.throwIfAborted();
-                if (chunk.length > outputLimit - captured)
-                    throw new RangeError('Python shell output limit exceeded');
+                if (outputFailure)
+                    throw outputFailure;
+                if (chunk.length > outputLimit - captured) {
+                    outputFailure = new RangeError('Python shell output limit exceeded');
+                    throw outputFailure;
+                }
                 captured += chunk.length;
                 if (publish) {
                     for (let offset = 0; offset < chunk.length; offset += chunkBytes) {
@@ -97,6 +102,9 @@ export function createPythonShellCapability(context, options = {}) {
                 stdin: childInput, stdout: sink(stdout, 'stdout'), stderr: sink(stderr, 'stderr'), externalInvocation: true,
             });
             childSignal.throwIfAborted();
+            // A command may catch sink rejection and return a status; the host limit still failed.
+            if (outputFailure)
+                throw outputFailure;
             return { stdout, stderr, exitCode: result.exitCode };
         }
         catch (error) {

package/dist/safe-bash/core.browser.js

@@ -158,7 +158,7 @@ import {
   sha256,
   sha384,
   sha512
-} from "./chunks/chunk-WNWIBBJZ.js";
+} from "./chunks/chunk-CRQDMBQA.js";
 import {
   PythonFailure,
   inspectPythonCapabilities