@poe-platform/safe-bash 0.1.76 → 0.1.78

package/dist/safe-bash/browser.js

@@ -4045,6 +4045,26 @@ function bindFileOutputBudget(context, budget) {
   if (!context.registerCleanup) throw new TypeError("Shell output budgets require invocation cleanup ownership");
   filesystemOutputBudgets.set(context.registerCleanup, budget);
 }
+async function writeFileOutput(context, bytes2, write2) {
+  context.signal.throwIfAborted();
+  const budget = context.registerCleanup && filesystemOutputBudgets.get(context.registerCleanup);
+  let pending;
+  const destination = { write(chunk) {
+    context.signal.throwIfAborted();
+    return pending = (async () => {
+      await write2(chunk);
+    })();
+  } };
+  try {
+    await (budget?.(destination) ?? destination).write(bytes2);
+  } catch (error) {
+    await pending?.catch(() => {
+    });
+    context.signal.throwIfAborted();
+    throw error;
+  }
+  context.signal.throwIfAborted();
+}
 async function openFileOutput(context, path, flag, incremental) {
   let pipe;
   let task;
@@ -16293,6 +16313,7 @@ var RegexExecutionError = class extends Error {
   }
   code;
 };
+var matchRangeLimits = Object.freeze({ perRow: 1e5, perReply: 1e5 });
 var exprMatchCeilings = Object.freeze({
   maxPatternBytes: 65536,
   maxSubjectBytes: 1048576,
@@ -16393,13 +16414,28 @@ function validateReply(value2, id, rows, signal) {
     throw new RegexExecutionError("MATCH", reply.error);
   }
   if (!("results" in reply) || !Array.isArray(reply.results) || reply.results.length !== rows.length) throw new RegexExecutionError("PROTOCOL", "invalid reply rows");
-  return reply.results.map((ranges, index) => {
+  let total = 0;
+  const lengths = [];
+  for (let index = 0; index < reply.results.length; index++) {
+    signal.throwIfAborted();
+    const ranges = reply.results[index];
+    const row = rows[index];
+    if (!(ranges instanceof Float64Array)) throw new RegexExecutionError("PROTOCOL", "invalid match ranges");
+    const length = ranges.length;
+    if (length % 2 || length > 2 * (row.bytes.length + 1)) throw new RegexExecutionError("PROTOCOL", "invalid match ranges");
+    if (!row.all && length > 2) throw new RegexExecutionError("PROTOCOL", "unexpected multiple matches");
+    const count2 = length / 2;
+    if (count2 > matchRangeLimits.perRow || count2 > matchRangeLimits.perReply - total) throw new RegexExecutionError("PROTOCOL", "match range limit exceeded");
+    total += count2;
+    lengths.push(length);
+  }
+  const results = reply.results.map((ranges, index) => {
     signal.throwIfAborted();
-    if (!(ranges instanceof Float64Array) || ranges.length % 2 || ranges.length > 2 * (rows[index].bytes.length + 1)) throw new RegexExecutionError("PROTOCOL", "invalid match ranges");
+    const length = lengths[index];
+    if (ranges.length !== length) throw new RegexExecutionError("PROTOCOL", "match ranges changed after admission");
     const result = [];
     const row = rows[index];
-    if (!row.all && ranges.length > 2) throw new RegexExecutionError("PROTOCOL", "unexpected multiple matches");
-    for (let offset = 0; offset < ranges.length; offset += 2) {
+    for (let offset = 0; offset < length; offset += 2) {
       signal.throwIfAborted();
       const start = ranges[offset];
       const end = ranges[offset + 1];
@@ -16408,6 +16444,11 @@ function validateReply(value2, id, rows, signal) {
     }
     return result;
   });
+  for (let index = 0; index < reply.results.length; index++) {
+    signal.throwIfAborted();
+    if (reply.results[index].length !== lengths[index]) throw new RegexExecutionError("PROTOCOL", "match ranges changed after admission");
+  }
+  return results;
 }
 
 // packages/safe-bash/src/commands/regex-execution/portable.ts
@@ -17523,7 +17564,7 @@ async function execute(program, context, files, quiet, budget) {
         appendedSize = 0;
       };
       const writeFile = async (file) => {
-        await context.fs.appendFile(virtualPath(context, file), bytes(pattern + "\n"), { signal: context.signal });
+        await writeFileOutput(context, bytes(pattern + "\n"), (chunk) => context.fs.appendFile(virtualPath(context, file), chunk, { signal: context.signal }));
       };
       const matches = async (address) => address.kind === "number" ? number === address.number : address.kind === "last" ? (await peekNext()).done === true : getPattern(address.pattern).find(pattern, budget) !== void 0;
       for (let pc = 0; pc < program.length; ) {
@@ -17755,7 +17796,7 @@ function sedCommand(options3 = {}) {
     }
     const prepareOutputs = async () => {
       const paths = new Set(outputFiles.map((file) => virtualPath(context, file)));
-      for (const path of paths) await context.fs.writeFile(path, new Uint8Array(), { signal: context.signal });
+      for (const path of paths) await writeFileOutput(context, new Uint8Array(), (chunk) => context.fs.writeFile(path, chunk, { signal: context.signal }));
     };
     if (inPlace !== void 0) {
       if (!files.length || files.includes("-")) throw new ProgramError("in-place editing requires named files");
@@ -17775,7 +17816,7 @@ function sedCommand(options3 = {}) {
         const result = await execute(program, child, [file], quiet, budget);
         const path = virtualPath(context, file);
         if (inPlace) await context.fs.copyFile(path, path + inPlace, { signal: context.signal });
-        await context.fs.writeFile(path, bytes(rewritten), { signal: context.signal });
+        await writeFileOutput(context, bytes(rewritten), (chunk) => context.fs.writeFile(path, chunk, { signal: context.signal }));
         if (result.quit || result.status) return result.status;
       }
       return 0;