@poe-platform/safe-bash 0.1.759 → 0.1.761

package/dist/safe-bash/chunks/{chunk-AYPUGSOV.js → chunk-CRQDMBQA.js}

@@ -1738,9 +1738,90 @@ function record(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new TypeError("Expected a structured Python LLM request");
   return value;
 }
+function jsonBytes(value, limit) {
+  if (limit === Infinity) return 0;
+  let bytes = 0;
+  const ancestors = /* @__PURE__ */ new Set();
+  const add2 = (size) => {
+    if (size > limit - bytes) throw new RangeError("Python LLM serialized response limit exceeded");
+    bytes += size;
+  };
+  const string = (text2) => {
+    add2(2);
+    if (text2.length > limit - bytes) throw new RangeError("Python LLM serialized response limit exceeded");
+    for (let i = 0; i < text2.length; i++) {
+      const point = text2.codePointAt(i);
+      if (point > 65535) {
+        add2(4);
+        i++;
+      } else if (point === 34 || point === 92) add2(2);
+      else if (point < 32) add2([8, 9, 10, 12, 13].includes(point) ? 2 : 6);
+      else if (point >= 55296 && point <= 57343) add2(6);
+      else add2(point < 128 ? 1 : point < 2048 ? 2 : 3);
+    }
+  };
+  const visit = (item) => {
+    if (typeof item === "string") {
+      string(item);
+      return;
+    }
+    if (item === null || typeof item === "boolean" || typeof item === "number" && Number.isFinite(item)) {
+      add2(JSON.stringify(item).length);
+      return;
+    }
+    if (!item || typeof item !== "object" || ancestors.has(item)) throw new TypeError("Python LLM response must contain acyclic data");
+    ancestors.add(item);
+    add2(2);
+    let entries = 0;
+    if (Array.isArray(item)) {
+      if (item.length > limit - bytes) throw new RangeError("Python LLM serialized response limit exceeded");
+      for (let i = 0; i < item.length; i++) {
+        const descriptor = Object.getOwnPropertyDescriptor(item, String(i));
+        if (!descriptor || !("value" in descriptor)) throw new TypeError("Python LLM response must contain data");
+        if (entries++) add2(1);
+        visit(descriptor.value);
+      }
+    } else {
+      for (const key in item) {
+        if (!Object.hasOwn(item, key)) continue;
+        const descriptor = Object.getOwnPropertyDescriptor(item, key);
+        if (!("value" in descriptor)) throw new TypeError("Python LLM response must contain data");
+        if (entries++) add2(1);
+        string(key);
+        add2(1);
+        visit(descriptor.value);
+      }
+    }
+    ancestors.delete(item);
+  };
+  visit(value);
+  return bytes;
+}
+function* textFragments(text2, limit) {
+  let start = 0, bytes = 0;
+  for (let i = 0; i < text2.length; ) {
+    const point = text2.codePointAt(i);
+    const width = point < 128 ? 1 : point < 2048 ? 2 : point < 65536 ? 3 : 4;
+    if (width > limit) throw new RangeError("Python LLM stream chunk limit cannot fit a Unicode scalar");
+    if (width > limit - bytes) {
+      yield text2.slice(start, i);
+      start = i;
+      bytes = 0;
+    }
+    bytes += width;
+    i += point > 65535 ? 2 : 1;
+  }
+  if (start < text2.length || !text2.length) yield text2.slice(start);
+}
 function createPythonLlmCapability(context, service, options = {}) {
   const chunkBytes = options.maxStreamChunkBytes ?? 16384;
   if (!Number.isSafeInteger(chunkBytes) || chunkBytes < 1) throw new RangeError("Invalid Python LLM stream chunk limit");
+  const bufferedLimit = options.maxBufferedResponseBytes ?? Infinity;
+  const eventLimit = options.maxBufferedEvents ?? bufferedLimit;
+  const metadataLimit = options.maxMetadataBytes ?? bufferedLimit;
+  for (const limit of [bufferedLimit, eventLimit, metadataLimit]) {
+    if (limit !== Infinity && (!Number.isSafeInteger(limit) || limit < 1)) throw new RangeError("Invalid Python LLM host limit");
+  }
   const prepare = async (value, signal) => {
     const payload = record(value);
     for (const key of ["template", "conversation"]) {
@@ -1797,7 +1878,15 @@ function createPythonLlmCapability(context, service, options = {}) {
           request.signal.throwIfAborted();
           yield { type: "bytes", data: Array.from(event.data.subarray(offset, offset + chunkBytes)) };
         }
-      } else yield event;
+      } else if (event.type === "text") {
+        for (const text2 of textFragments(event.text, chunkBytes)) {
+          request.signal.throwIfAborted();
+          yield { type: "text", text: text2 };
+        }
+      } else {
+        jsonBytes(event.response, metadataLimit);
+        yield event;
+      }
     }
   };
   return {
@@ -1820,15 +1909,41 @@ function createPythonLlmCapability(context, service, options = {}) {
         });
       }
       if (operation.operation !== "complete") throw new TypeError("Unsupported Python LLM operation");
-      const text2 = [], data = [];
+      const request = await prepare(payload, signal);
+      const bounded = { ...request, maxOutputBytes: Math.min(request.maxOutputBytes ?? Infinity, bufferedLimit) };
+      let text2 = "", textBytes = 0, dataBytes = 0, received = 0;
+      const data = [];
       let response = {};
-      for await (const value2 of events(payload, { signal })) {
-        const event = record(value2);
-        if (event.type === "text") text2.push(event.text);
-        else if (event.type === "bytes") for (const byte of event.data) data.push(byte);
-        else if (event.type === "response") response = { ...record(event.response) };
+      let envelopeBytes = jsonBytes({ text: "", data: [] }, bufferedLimit);
+      const admit = (size) => {
+        if (size > bufferedLimit - envelopeBytes - textBytes - dataBytes) throw new RangeError("Python LLM buffered response limit exceeded");
+      };
+      for await (const event of service.stream(bounded)) {
+        bounded.signal.throwIfAborted();
+        if (++received > eventLimit) throw new RangeError("Python LLM buffered event limit exceeded");
+        if (event.type === "text") {
+          const size = bufferedLimit === Infinity || !event.text ? 0 : jsonBytes(event.text, bufferedLimit - envelopeBytes - textBytes - dataBytes + 2) - 2;
+          admit(size);
+          textBytes += size;
+          if (event.text) text2 += event.text;
+        } else if (event.type === "bytes") {
+          let size = 0;
+          if (bufferedLimit !== Infinity) for (let i = 0; i < event.data.length; i++) {
+            size += String(event.data[i]).length + (data.length || i ? 1 : 0);
+            admit(size);
+          }
+          dataBytes += size;
+          for (const byte of event.data) data.push(byte);
+        } else {
+          jsonBytes(event.response, metadataLimit);
+          const details = record(event.response);
+          const size = jsonBytes({ ...details, text: "", data: [] }, bufferedLimit);
+          if (size > bufferedLimit - textBytes - dataBytes) throw new RangeError("Python LLM buffered response limit exceeded");
+          envelopeBytes = size;
+          response = { ...details };
+        }
       }
-      return { ...response, text: text2.join(""), data };
+      return { ...response, text: text2, data };
     },
     stream: events
   };

package/dist/safe-bash/command-chunks/{chunk-HVEAK3OS.js → chunk-6VX5ZQL5.js}

@@ -48,11 +48,11 @@ import {
   trimImage,
   unflattenImage,
   unpremultiplyRgbaImage
-} from "./chunk-7JA44PVV.js";
+} from "./chunk-GR725WRX.js";
 import {
   PdfDocument,
   encodePng
-} from "./chunk-BAUGDXLZ.js";
+} from "./chunk-OSMLVM7P.js";
 import {
   createLuaFilterCapability
 } from "./chunk-Y2KHC6TZ.js";

package/dist/safe-bash/command-chunks/{chunk-7JA44PVV.js → chunk-GR725WRX.js}

@@ -1,7 +1,7 @@
 import {
   PdfDocument,
   renderPdfPageToPng
-} from "./chunk-BAUGDXLZ.js";
+} from "./chunk-OSMLVM7P.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";

package/dist/safe-bash/command-chunks/{chunk-BAUGDXLZ.js → chunk-OSMLVM7P.js}

@@ -32422,7 +32422,7 @@ function evaluateContentStreamToDisplayList(params) {
               const [x, y] = transformPoint(st.ctm, seg.x, seg.y);
               transformedSegments.push({ kind: "cubic", x1, y1, x2, y2, x, y });
             } else if (seg.kind === "rect") {
-              if (hasRotOrShear) {
+              if (hasRotOrShear || seg.width * st.ctm[0] < 0 || seg.height * st.ctm[3] < 0) {
                 const [p0x, p0y] = transformPoint(st.ctm, seg.x, seg.y);
                 const [p1x, p1y] = transformPoint(st.ctm, seg.x + seg.width, seg.y);
                 const [p2x, p2y] = transformPoint(st.ctm, seg.x + seg.width, seg.y + seg.height);
@@ -32455,7 +32455,12 @@ function evaluateContentStreamToDisplayList(params) {
               transformedSegments.push({ kind: "close" });
             }
           }
-          if (node.clip && transformedSegments.length > 0) {
+          const applyClip = () => {
+            if (!node.clip) return;
+            st.clipPaths = [...st.clipPaths ?? [], {
+              segments: transformedSegments,
+              fillRule: node.clip === "W*" ? "evenodd" : "nonzero"
+            }];
             let cMinX = Infinity, cMinY = Infinity, cMaxX = -Infinity, cMaxY = -Infinity;
             for (const s of transformedSegments) {
               if (s.kind === "move" || s.kind === "line") {
@@ -32483,8 +32488,11 @@ function evaluateContentStreamToDisplayList(params) {
                 Math.min(st.clipRect[3], cMaxY)
               ] : [cMinX, cMinY, cMaxX, cMaxY];
             }
+          };
+          if (node.paint === "n") {
+            applyClip();
+            break;
           }
-          if (node.paint === "n") break;
           const isFill = ["f", "F", "f*", "B", "B*", "b", "b*"].includes(node.paint);
           const isStroke = ["S", "s", "B", "B*", "b", "b*"].includes(node.paint);
           let evaluatedFillPattern = false;
@@ -32617,7 +32625,10 @@ function evaluateContentStreamToDisplayList(params) {
               }
             }
           }
-          if (evaluatedFillPattern && !isStroke) break;
+          if (evaluatedFillPattern && !isStroke) {
+            applyClip();
+            break;
+          }
           const fillRule = node.paint.includes("*") ? "evenodd" : "nonzero";
           const ctmScale = Math.max(1e-6, Math.hypot(st.ctm[0], st.ctm[1]));
           const scaledStrokeWidth = st.strokeWidth === 0 ? 0 : st.strokeWidth * ctmScale;
@@ -32637,6 +32648,7 @@ function evaluateContentStreamToDisplayList(params) {
             ...st.dashPhase !== void 0 ? { dashPhase: st.dashPhase } : {},
             ...st.clipRect ? { clipRect: [...st.clipRect] } : {}
           } });
+          applyClip();
           break;
         }
         case "xobject": {
@@ -33953,6 +33965,44 @@ function formatExtractedPageText(page, options = {}) {
 
 // packages/pdf-ast/src/render/raster.ts
 init_buffer();
+
+// packages/pdf-ast/src/render/cubic.ts
+init_buffer();
+function flattenCubic(x1, y1, x2, y2, x3, y3, x4, y4) {
+  const points = [[x1, y1]];
+  const subdivide = (ax, ay, bx, by, cx, cy, dx, dy, level) => {
+    if (level > 16) return;
+    const abx = (ax + bx) / 2, aby = (ay + by) / 2;
+    const bcx = (bx + cx) / 2, bcy = (by + cy) / 2;
+    const cdx = (cx + dx) / 2, cdy = (cy + dy) / 2;
+    const abcx = (abx + bcx) / 2, abcy = (aby + bcy) / 2;
+    const bcdx = (bcx + cdx) / 2, bcdy = (bcy + cdy) / 2;
+    const midx = (abcx + bcdx) / 2, midy = (abcy + bcdy) / 2;
+    const chordX = dx - ax, chordY = dy - ay;
+    const d2 = Math.abs((bx - dx) * chordY - (by - dy) * chordX);
+    const d3 = Math.abs((cx - dx) * chordY - (cy - dy) * chordX);
+    const significant2 = d2 > 1e-30, significant3 = d3 > 1e-30;
+    if (!significant2 && !significant3) {
+      if (Math.abs(ax + cx - 2 * bx) + Math.abs(ay + cy - 2 * by) + Math.abs(bx + dx - 2 * cx) + Math.abs(by + dy - 2 * cy) <= 4) {
+        points.push([midx, midy]);
+        return;
+      }
+    } else {
+      const distance = (significant2 ? d2 : 0) + (significant3 ? d3 : 0);
+      if (distance * distance <= 0.25 * (chordX * chordX + chordY * chordY)) {
+        points.push([bcx, bcy]);
+        return;
+      }
+    }
+    subdivide(ax, ay, abx, aby, abcx, abcy, midx, midy, level + 1);
+    subdivide(midx, midy, bcdx, bcdy, cdx, cdy, dx, dy, level + 1);
+  };
+  subdivide(x1, y1, x2, y2, x3, y3, x4, y4, 0);
+  points.push([x4, y4]);
+  return points;
+}
+
+// packages/pdf-ast/src/render/raster.ts
 function encodePng(bitmap) {
   return encodeRgbaToPng(bitmap.width, bitmap.height, bitmap.data);
 }
@@ -34719,14 +34769,11 @@ function segmentsToScreenEdges(segments, pageHeight, scale, closeSubpaths = fals
       const [p1x, p1y] = toScreen(seg.x1, seg.y1);
       const [p2x, p2y] = toScreen(seg.x2, seg.y2);
       const [p3x, p3y] = toScreen(seg.x, seg.y);
-      const steps = 12;
+      const points = flattenCubic(curX, curY, p1x, p1y, p2x, p2y, p3x, p3y);
       let px = curX;
       let py = curY;
-      for (let s = 1; s <= steps; s++) {
-        const t = s / steps;
-        const mt = 1 - t;
-        const qx = mt * mt * mt * curX + 3 * mt * mt * t * p1x + 3 * mt * t * t * p2x + t * t * t * p3x;
-        const qy = mt * mt * mt * curY + 3 * mt * mt * t * p1y + 3 * mt * t * t * p2y + t * t * t * p3y;
+      for (let i = 1; i < points.length; i++) {
+        const [qx, qy] = points[i];
         edges.push({ x0: px, y0: py, x1: qx, y1: qy });
         px = qx;
         py = qy;
@@ -34745,8 +34792,8 @@ function segmentsToScreenEdges(segments, pageHeight, scale, closeSubpaths = fals
       if (closeSubpaths && hasOpenSubpath && (curX !== startX || curY !== startY)) {
         edges.push({ x0: curX, y0: curY, x1: startX, y1: startY });
       }
-      const [rx0, ry0] = toScreen(seg.x, seg.y + seg.height);
-      const [rx1, ry1] = toScreen(seg.x + seg.width, seg.y);
+      const [rx0, ry0] = toScreen(seg.x, seg.y);
+      const [rx1, ry1] = toScreen(seg.x + seg.width, seg.y + seg.height);
       edges.push(
         { x0: rx0, y0: ry0, x1: rx1, y1: ry0 },
         { x0: rx1, y0: ry0, x1: rx1, y1: ry1 },
@@ -34889,21 +34936,24 @@ function renderDisplayListToBitmap(displayList, options = {}) {
   }
   const aaVec = options.antialiasVector !== false;
   const aaTxt = options.antialiasText !== false;
-  const clipMasks = /* @__PURE__ */ new Map();
+  let cachedClips;
+  let cachedClipMask;
   const imageClipMasks = /* @__PURE__ */ new Map();
   for (const original of paintOperations(displayList)) {
     if (original.kind === "glyph" && (original.value.renderMode === 3 || !original.value.outline && !original.value.unicode.trim())) continue;
     const operation = original.kind === "glyph" ? { kind: "path", value: glyphPaint(original.value) } : original;
     const clips = original.value.clipPaths;
-    let clipMask = clips ? clipMasks.get(clips) : void 0;
+    let clipMask = clips && clips === cachedClips ? cachedClipMask : void 0;
     if (clips && !clipMask) {
       clipMask = new Uint8Array(width * height * 4).fill(255);
-      for (const segments of clips) {
+      for (const clip of clips) {
+        const { segments, fillRule } = "segments" in clip ? clip : { segments: clip, fillRule: "nonzero" };
         const layer = new Uint8Array(width * height * 4);
-        fillEdgesScanline4x4(layer, width, height, segmentsToScreenEdges(segments, displayList.height, scale, true), { r: 1, g: 1, b: 1 });
+        fillEdgesScanline4x4(layer, width, height, segmentsToScreenEdges(segments, displayList.height, scale, true), { r: 1, g: 1, b: 1 }, 1, fillRule);
         for (let i = 3; i < layer.length; i += 4) clipMask[i] = Math.round(clipMask[i] * layer[i] / 255);
       }
-      clipMasks.set(clips, clipMask);
+      cachedClips = clips;
+      cachedClipMask = clipMask;
     }
     const imageClips = original.value.clipImages;
     if (imageClips) {
@@ -37216,3 +37266,15 @@ export {
  * Copyright 2017 Mozilla Foundation. Licensed under Apache-2.0.
  * See licenses/PDFJS-APACHE-2.0.txt and THIRD_PARTY_NOTICES.md.
  */
+/*!
+ * Anti-Grain Geometry - Version 2.3
+ * Copyright (C) 2002-2005 Maxim Shemanarev (http://www.antigrain.com)
+ *
+ * Permission to copy, use, modify, sell and distribute this software
+ * is granted provided this copyright notice appears in all copies.
+ * This software is provided "as is" without express or implied
+ * warranty, and with no claim as to its suitability for any purpose.
+ *
+ * Adapted from PDFium third_party/agg23/agg_curves.cpp, curve4_div.
+ * See THIRD_PARTY_NOTICES.md for the pinned revision and adaptations.
+ */

package/dist/safe-bash/commands/htmlq/index.d.ts

@@ -2,5 +2,5 @@ import { HtmlError, detachHtmlNode, htmlText, htmlq, htmlqBaseline, htmlqBytes,
 export { selectHtml, parseHtmlqArguments, htmlqBytes, htmlq, parseHtml, parseHtmlSync, inclusiveHtmlDescendants, serializeHtml, serializeHtmlBytes, htmlText, detachHtmlNode, HtmlError, htmlqBaseline, };
 export type { HtmlqArguments, HtmlqCommandOptions, HtmlqCommandsOptions, HtmlqRunOptions, HtmlqResult, HtmlAccounting, HtmlOptions, HtmlLimits, HtmlNode, HtmlNamespace, HtmlAttribute, HtmlErrorCode, } from "../../../safe-bash-command-htmlq/index.js";
 export { createHtmlqCommand, createHtmlqCommands, htmlqCommand, htmlqCommands } from "../../../safe-bash-command-htmlq/index.js";
-export declare function evalSyncHtmlq(inBytes: Uint8Array, opArgs: readonly string[], readFileSync?: (filePath: string) => Uint8Array | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean): string | undefined;
+export declare function evalSyncHtmlq(inBytes: Uint8Array | undefined, opArgs: readonly string[], readFileSync?: (filePath: string) => Uint8Array | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean): string | undefined;
 //# sourceMappingURL=index.d.ts.map

package/dist/safe-bash/commands/htmlq/index.js

@@ -17,7 +17,7 @@ const syncHtmlLimits = Object.freeze({
     outputBytes: Infinity,
 });
 export function evalSyncHtmlq(inBytes, opArgs, readFileSync, writeFileSync) {
-    if (inBytes.byteLength > 16384)
+    if (inBytes && inBytes.byteLength > 16384)
         return undefined;
     try {
         const invocation = invocationOptions({ signal: syncAbortSignal(), limits: syncHtmlLimits });
@@ -33,6 +33,9 @@ export function evalSyncHtmlq(inBytes, opArgs, readFileSync, writeFileSync) {
                 return undefined;
             srcBytes = fBytes;
         }
+        // Missing bytes mean inherited stdin has not been collected by the fast path.
+        if (!srcBytes)
+            return undefined;
         const budget = new HtmlBudget(invocation);
         const original = syncHtmlDecoder.decode(srcBytes);
         const document = parseHtmlSync(original, invocation, budget);

package/dist/safe-bash/commands/python/index.browser.js

@@ -16,7 +16,7 @@ import {
   pythonCommands,
   pythonDocumentPackages,
   pythonHostFailureCode
-} from "../../chunks/chunk-AYPUGSOV.js";
+} from "../../chunks/chunk-CRQDMBQA.js";
 import {
   PythonFailure,
   inspectPythonCapabilities

package/dist/safe-bash/commands/python/index.d.ts

@@ -4,7 +4,7 @@ import { type PythonDiagnosticObserver } from './diagnostics.js';
 import { createPythonHostBridge, type PythonHostCapability, type PythonHostBridgeOptions } from './host-capabilities.js';
 export * from './host-capabilities.js';
 export { createPythonShellCapability } from './shell-capability.js';
-export { createPythonLlmCapability } from './llm-capability.js';
+export { createPythonLlmCapability, type PythonLlmCapabilityOptions } from './llm-capability.js';
 /** A dedicated interpreter worker. The service event loop must never block. */
 export interface PythonWorkerEndpoint {
     postMessage(value: unknown): void;

package/dist/safe-bash/commands/python/llm-capability.d.ts

@@ -1,8 +1,12 @@
 import type { CommandContext } from '../../contracts/index.js';
 import type { LlmService } from '../llm/service.js';
 import type { PythonHostCapability } from './host-capabilities.js';
-/** Reuses the invocation's authorized service; Python receives only model data. */
-export declare function createPythonLlmCapability(context: Pick<CommandContext, 'fs' | 'cwd' | 'inputBudget'>, service: LlmService, options?: {
+export interface PythonLlmCapabilityOptions {
     readonly maxStreamChunkBytes?: number;
-}): PythonHostCapability;
+    readonly maxBufferedResponseBytes?: number;
+    readonly maxBufferedEvents?: number;
+    readonly maxMetadataBytes?: number;
+}
+/** Reuses the invocation's authorized service; Python receives only model data. */
+export declare function createPythonLlmCapability(context: Pick<CommandContext, 'fs' | 'cwd' | 'inputBudget'>, service: LlmService, options?: PythonLlmCapabilityOptions): PythonHostCapability;
 //# sourceMappingURL=llm-capability.d.ts.map

package/dist/safe-bash/commands/python/llm-capability.js

@@ -5,11 +5,112 @@ function record(value) {
         throw new TypeError('Expected a structured Python LLM request');
     return value;
 }
+/** Count the wire representation before retaining/serializing host metadata. */
+function jsonBytes(value, limit) {
+    if (limit === Infinity)
+        return 0;
+    let bytes = 0;
+    const ancestors = new Set();
+    const add = (size) => {
+        if (size > limit - bytes)
+            throw new RangeError('Python LLM serialized response limit exceeded');
+        bytes += size;
+    };
+    const string = (text) => {
+        add(2);
+        if (text.length > limit - bytes)
+            throw new RangeError('Python LLM serialized response limit exceeded');
+        for (let i = 0; i < text.length; i++) {
+            const point = text.codePointAt(i);
+            if (point > 65535) {
+                add(4);
+                i++;
+            }
+            else if (point === 34 || point === 92)
+                add(2);
+            else if (point < 32)
+                add([8, 9, 10, 12, 13].includes(point) ? 2 : 6);
+            else if (point >= 0xd800 && point <= 0xdfff)
+                add(6);
+            else
+                add(point < 128 ? 1 : point < 2048 ? 2 : 3);
+        }
+    };
+    const visit = (item) => {
+        if (typeof item === 'string') {
+            string(item);
+            return;
+        }
+        if (item === null || typeof item === 'boolean' || typeof item === 'number' && Number.isFinite(item)) {
+            add(JSON.stringify(item).length);
+            return;
+        }
+        if (!item || typeof item !== 'object' || ancestors.has(item))
+            throw new TypeError('Python LLM response must contain acyclic data');
+        ancestors.add(item);
+        add(2);
+        let entries = 0;
+        if (Array.isArray(item)) {
+            if (item.length > limit - bytes)
+                throw new RangeError('Python LLM serialized response limit exceeded');
+            for (let i = 0; i < item.length; i++) {
+                const descriptor = Object.getOwnPropertyDescriptor(item, String(i));
+                if (!descriptor || !('value' in descriptor))
+                    throw new TypeError('Python LLM response must contain data');
+                if (entries++)
+                    add(1);
+                visit(descriptor.value);
+            }
+        }
+        else {
+            for (const key in item) {
+                if (!Object.hasOwn(item, key))
+                    continue;
+                const descriptor = Object.getOwnPropertyDescriptor(item, key);
+                if (!('value' in descriptor))
+                    throw new TypeError('Python LLM response must contain data');
+                if (entries++)
+                    add(1);
+                string(key);
+                add(1);
+                visit(descriptor.value);
+            }
+        }
+        ancestors.delete(item);
+    };
+    visit(value);
+    return bytes;
+}
+function* textFragments(text, limit) {
+    let start = 0, bytes = 0;
+    for (let i = 0; i < text.length;) {
+        const point = text.codePointAt(i);
+        const width = point < 128 ? 1 : point < 2048 ? 2 : point < 65536 ? 3 : 4;
+        if (width > limit)
+            throw new RangeError('Python LLM stream chunk limit cannot fit a Unicode scalar');
+        if (width > limit - bytes) {
+            yield text.slice(start, i);
+            start = i;
+            bytes = 0;
+        }
+        bytes += width;
+        i += point > 65535 ? 2 : 1;
+    }
+    if (start < text.length || !text.length)
+        yield text.slice(start);
+}
 /** Reuses the invocation's authorized service; Python receives only model data. */
 export function createPythonLlmCapability(context, service, options = {}) {
     const chunkBytes = options.maxStreamChunkBytes ?? 16384;
     if (!Number.isSafeInteger(chunkBytes) || chunkBytes < 1)
         throw new RangeError('Invalid Python LLM stream chunk limit');
+    const bufferedLimit = options.maxBufferedResponseBytes ?? Infinity;
+    const eventLimit = options.maxBufferedEvents ?? bufferedLimit;
+    const metadataLimit = options.maxMetadataBytes ?? bufferedLimit;
+    for (const limit of [bufferedLimit, eventLimit, metadataLimit]) {
+        if (limit !== Infinity && (!Number.isSafeInteger(limit) || limit < 1))
+            throw new RangeError('Invalid Python LLM host limit');
+    }
     const prepare = async (value, signal) => {
         const payload = record(value);
         for (const key of ['template', 'conversation']) {
@@ -73,8 +174,16 @@ export function createPythonLlmCapability(context, service, options = {}) {
                     yield { type: 'bytes', data: Array.from(event.data.subarray(offset, offset + chunkBytes)) };
                 }
             }
-            else
+            else if (event.type === 'text') {
+                for (const text of textFragments(event.text, chunkBytes)) {
+                    request.signal.throwIfAborted();
+                    yield { type: 'text', text };
+                }
+            }
+            else {
+                jsonBytes(event.response, metadataLimit);
                 yield event;
+            }
         }
     };
     return {
@@ -93,19 +202,49 @@ export function createPythonLlmCapability(context, service, options = {}) {
             }
             if (operation.operation !== 'complete')
                 throw new TypeError('Unsupported Python LLM operation');
-            const text = [], data = [];
+            const request = await prepare(payload, signal);
+            const bounded = { ...request, maxOutputBytes: Math.min(request.maxOutputBytes ?? Infinity, bufferedLimit) };
+            let text = '', textBytes = 0, dataBytes = 0, received = 0;
+            const data = [];
             let response = {};
-            for await (const value of events(payload, { signal })) {
-                const event = record(value);
-                if (event.type === 'text')
-                    text.push(event.text);
-                else if (event.type === 'bytes')
+            let envelopeBytes = jsonBytes({ text: '', data: [] }, bufferedLimit);
+            const admit = (size) => {
+                if (size > bufferedLimit - envelopeBytes - textBytes - dataBytes)
+                    throw new RangeError('Python LLM buffered response limit exceeded');
+            };
+            for await (const event of service.stream(bounded)) {
+                bounded.signal.throwIfAborted();
+                if (++received > eventLimit)
+                    throw new RangeError('Python LLM buffered event limit exceeded');
+                if (event.type === 'text') {
+                    const size = bufferedLimit === Infinity || !event.text ? 0 : jsonBytes(event.text, bufferedLimit - envelopeBytes - textBytes - dataBytes + 2) - 2;
+                    admit(size);
+                    textBytes += size;
+                    if (event.text)
+                        text += event.text;
+                }
+                else if (event.type === 'bytes') {
+                    let size = 0;
+                    if (bufferedLimit !== Infinity)
+                        for (let i = 0; i < event.data.length; i++) {
+                            size += String(event.data[i]).length + (data.length || i ? 1 : 0);
+                            admit(size);
+                        }
+                    dataBytes += size;
                     for (const byte of event.data)
                         data.push(byte);
-                else if (event.type === 'response')
-                    response = { ...record(event.response) };
+                }
+                else {
+                    jsonBytes(event.response, metadataLimit);
+                    const details = record(event.response);
+                    const size = jsonBytes({ ...details, text: '', data: [] }, bufferedLimit);
+                    if (size > bufferedLimit - textBytes - dataBytes)
+                        throw new RangeError('Python LLM buffered response limit exceeded');
+                    envelopeBytes = size;
+                    response = { ...details };
+                }
             }
-            return { ...response, text: text.join(''), data };
+            return { ...response, text, data };
         },
         stream: events,
     };

package/dist/safe-bash/core.browser.js

@@ -158,7 +158,7 @@ import {
   sha256,
   sha384,
   sha512
-} from "./chunks/chunk-AYPUGSOV.js";
+} from "./chunks/chunk-CRQDMBQA.js";
 import {
   PythonFailure,
   inspectPythonCapabilities
@@ -52607,7 +52607,7 @@ var syncHtmlLimits = Object.freeze({
   outputBytes: Infinity
 });
 function evalSyncHtmlq(inBytes, opArgs, readFileSync, writeFileSync) {
-  if (inBytes.byteLength > 16384) return void 0;
+  if (inBytes && inBytes.byteLength > 16384) return void 0;
   try {
     const invocation = invocationOptions({ signal: syncAbortSignal3(), limits: syncHtmlLimits });
     const args = parseHtmlqArguments(opArgs, invocation);
@@ -52619,6 +52619,7 @@ function evalSyncHtmlq(inBytes, opArgs, readFileSync, writeFileSync) {
       if (!fBytes || fBytes.byteLength > 16384) return void 0;
       srcBytes = fBytes;
     }
+    if (!srcBytes) return void 0;
     const budget = new HtmlBudget(invocation);
     const original = syncHtmlDecoder.decode(srcBytes);
     const document = parseHtmlSync(original, invocation, budget);
@@ -90388,7 +90389,7 @@ unsigned int ${ident}_len = ${view.byteLength};
         })() : w0Plain === "base32" ? (() => {
           const b32 = (0, base_exports.evalSyncBase32)(inBytes, allArgs, readFile);
           return b32 !== void 0 ? sharedSyncPipeDecoder.decode(b32) : void 0;
-        })() : w0Plain === "xq" || w0Plain === "yq" ? this.evalSyncXqOrYq(w0Plain, inBytes, allArgs, readFile) : w0Plain === "xmllint" ? evalSyncXmllint(inBytes, allArgs, readFile) : evalSyncHtmlq(inBytes, allArgs, readFile, (p, b) => {
+        })() : w0Plain === "xq" || w0Plain === "yq" ? this.evalSyncXqOrYq(w0Plain, inBytes, allArgs, readFile) : w0Plain === "xmllint" ? evalSyncXmllint(inBytes, allArgs, readFile) : evalSyncHtmlq(optInBytes, allArgs, readFile, (p, b) => {
           try {
             if (this._inSyncLoopPreflight) return Boolean(this.canFastMemoryRedirect && this._isMemoryBackingFs);
             return tryWriteMemoryFileSync(this.backingFs, resolvePath(rawState.cwd, p), b, false, 438 & ~(rawState.umask ?? 18), this.commandSignal);

package/dist/safe-bash/shell/runtime.js

@@ -38325,7 +38325,7 @@ export class Runtime {
                                                                                                                                                                                                                                                                                                                                                         ? this.evalSyncXqOrYq(w0Plain, inBytes, allArgs, readFile)
                                                                                                                                                                                                                                                                                                                                                         : w0Plain === "xmllint"
                                                                                                                                                                                                                                                                                                                                                             ? evalSyncXmllint(inBytes, allArgs, readFile)
-                                                                                                                                                                                                                                                                                                                                                            : evalSyncHtmlq(inBytes, allArgs, readFile, (p, b) => { try {
+                                                                                                                                                                                                                                                                                                                                                            : evalSyncHtmlq(optInBytes, allArgs, readFile, (p, b) => { try {
                                                                                                                                                                                                                                                                                                                                                                 if (this._inSyncLoopPreflight)
                                                                                                                                                                                                                                                                                                                                                                     return Boolean(this.canFastMemoryRedirect && this._isMemoryBackingFs);
                                                                                                                                                                                                                                                                                                                                                                 return tryWriteMemoryFileSync(this.backingFs, resolvePath(rawState.cwd, p), b, false, 0o666 & ~(rawState.umask ?? 0o022), this.commandSignal);