@poe-platform/safe-bash 0.1.758 → 0.1.760

package/dist/safe-bash-mcp/index.d.ts

@@ -1,6 +1,6 @@
 import { Readable, Writable } from 'node:stream';
 import http from 'node:http';
-import { CommandDefinition, VirtualShellPlugin } from "../safe-bash/contracts/node.js";
+import { CommandDefinition, VirtualShellPlugin } from '@poe-platform/safe-bash/contracts';
 
 type JsonSchemaRegistry = Record<string, unknown>;
 interface CompileJsonSchemaOptions {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-bash",
-  "version": "0.1.758",
+  "version": "0.1.760",
   "description": "Extensible virtual shell with pluggable filesystems and streaming commands",
   "type": "module",
   "license": "MIT",
@@ -841,7 +841,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.758",
+    "@poe-platform/safe-fs": "0.1.760",
     "pdf-lib": "1.17.1",
     "@noble/hashes": "2.4.0",
     "pako": "3.0.1",

package/third-party/pdf-ast/THIRD_PARTY_NOTICES.md

@@ -179,6 +179,20 @@ Word-spacing classification follows PDF.js `Font.charsToGlyphs`
 receives Tw, regardless of its Unicode label. The internal CMap reader preserves
 that classification without changing the public ToUnicode result shape.
 
+Simple-font character segmentation also follows `Font.charsToGlyphs`: Type1,
+TrueType, and Type3 strings use single-byte codes even when ToUnicode declares
+a wider codespace. `src/fonts/simple-font-codespace.test.ts` checks that behavior
+and the original upstream issue17069 equality fixture, including TJ fragments,
+word spacing, Unicode labels spanning multiple characters, and save/reopen.
+
+Ordinary clipping follows PDF.js `CanvasGraphics.consumePath`: install pending
+`W`/`W*` intersections after painting the current path, retaining nonzero/even-odd
+winding and implicit closure. `src/render/path-clipping.test.ts` ports the normal
+rendering assertions from `test/unit/api_spec.js`'s `should render with
+operationsFilter` case (7200 black and 12800 white pixels) and the unchanged
+`clippath.pdf` fixture. Other local cases cover curves, reversed rectangles,
+transforms, save/restore, text/image intersections, and issue17069's signature.
+
 
 # SVG labels
 
@@ -223,6 +237,14 @@ additional regressions use the extracted upstream streams listed in
 1996–2003 Glyph & Cog, LLC, Apache-2.0. The upstream Flate implementation is a
 JavaScript port of XPDF's implementation.
 
+`src/cos/pypdf-flate-recovery.test.ts` adapts the printable-byte example from
+pypdf 6.19.0 `tests/test_filters.py::test_decompress`, with truncation results
+checked against `pypdf.filters.decompress`. The bounded pako fallback in
+`src/cos/filters.ts` retains partial zlib/gzip output on incomplete input,
+following pypdf's recovery behavior without its byte-at-a-time decoding loop.
+The original PDF.js issue11549 fixture additionally checks the recovered
+Unicode map against pypdf's decoded bytes. pypdf attribution/license is below.
+
 # PDF standard security handler
 
 `src/vendor/pdfjs-fonts.mjs` also includes `src/core/crypto.js`,