@poe-platform/safe-bash 0.1.762 → 0.1.764

package/dist/safe-bash-command-gh/index.js

@@ -4,7 +4,75 @@ import {
 
 // packages/safe-bash-command-gh/dist/index.js
 init_buffer();
-import { commandRuntimeIdentity, readBytes, writeBytes } from "../safe-bash-contracts/index.js";
+
+// packages/safe-bash-command-gh/dist/input.js
+init_buffer();
+import { resolvePath } from "@poe-platform/safe-fs/core";
+import { readBytes } from "../safe-bash-contracts/index.js";
+function createGhInput(context, limits) {
+  let inputBytes = 0;
+  const files = /* @__PURE__ */ new Set();
+  let failure;
+  const assertWithinLimits = () => {
+    if (failure)
+      throw failure;
+  };
+  const chargeBytes = (count) => {
+    assertWithinLimits();
+    inputBytes += count;
+    if (inputBytes > limits.maxInputBytes) {
+      failure = new Error("gh input byte limit exceeded");
+      throw failure;
+    }
+  };
+  const readFile = async (path, options) => {
+    assertWithinLimits();
+    const resolved = resolvePath(context.cwd, path);
+    const stat = await context.fs.stat(resolved, options);
+    if (!files.has(resolved)) {
+      if (files.size >= limits.maxFiles) {
+        failure = new Error("gh file limit exceeded");
+        throw failure;
+      }
+      files.add(resolved);
+    }
+    chargeBytes(stat.size);
+    const bytes = await context.fs.readFile(resolved, options);
+    if (bytes.length > stat.size)
+      chargeBytes(bytes.length - stat.size);
+    assertWithinLimits();
+    return bytes;
+  };
+  const fs = new Proxy(context.fs, {
+    get(target, property) {
+      if (property === "readFile")
+        return readFile;
+      const value = Reflect.get(target, property, target);
+      return typeof value === "function" ? value.bind(target) : value;
+    }
+  });
+  let stdin;
+  const readStdinBytes = () => stdin ??= (async () => {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of readBytes(context.stdin, context.signal)) {
+      chargeBytes(chunk.length);
+      chunks.push(chunk);
+      size += chunk.length;
+    }
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+      bytes.set(chunk, offset);
+      offset += chunk.length;
+    }
+    return bytes;
+  })();
+  return { fs, readStdinBytes, assertWithinLimits };
+}
+
+// packages/safe-bash-command-gh/dist/index.js
+import { commandRuntimeIdentity, writeBytes } from "../safe-bash-contracts/index.js";
 
 // packages/safe-bash-command-gh/dist/args.js
 init_buffer();
@@ -670,7 +738,7 @@ function encodeUtf8(text) {
 
 // packages/safe-bash-command-gh/dist/git-vfs.js
 init_buffer();
-import { resolvePath } from "@poe-platform/safe-fs/core";
+import { resolvePath as resolvePath2 } from "@poe-platform/safe-fs/core";
 import { createGitCommand } from "../safe-bash-command-git/index.js";
 var cachedGitCommand;
 function getDefaultGitCommand() {
@@ -722,7 +790,7 @@ async function pathExists(fs, path, signal) {
   }
 }
 async function findGitRoot(fs, startCwd, signal) {
-  let current = resolvePath("/", startCwd);
+  let current = resolvePath2("/", startCwd);
   for (let depth = 0; depth < 64; depth++) {
     const gitPath = current === "/" ? "/.git" : `${current}/.git`;
     if (await pathExists(fs, gitPath, signal)) {
@@ -2040,7 +2108,7 @@ function createGitHubBackend(options) {
 
 // packages/safe-bash-command-gh/dist/commands/issue.js
 init_buffer();
-import { resolvePath as resolvePath2 } from "@poe-platform/safe-fs/core";
+import { resolvePath as resolvePath3 } from "@poe-platform/safe-fs/core";
 
 // packages/safe-bash-command-gh/dist/template.js
 init_buffer();
@@ -2533,7 +2601,7 @@ function serializeIssueForJson(issue) {
   };
 }
 async function handleIssueCommand(env, rawArgs) {
-  const { context, backend, git, openBrowser, limits, stdinText, writeOut, writeErr } = env;
+  const { context, backend, git, openBrowser, limits, readStdinText, writeOut, writeErr } = env;
   const subcommand = rawArgs[0];
   const restArgs = rawArgs.slice(1);
   if (!subcommand || subcommand === "--help" || subcommand === "-h" || subcommand === "help") {
@@ -2584,7 +2652,7 @@ async function handleIssueCommand(env, rawArgs) {
     const repo = backend.getOrCreateRepo(coords.owner, coords.name);
     const title = getStringFlag(parsed, "title") ?? "New issue";
     const bodyFile = getStringFlag(parsed, "body-file");
-    const body = bodyFile !== void 0 ? bodyFile === "-" ? stdinText : decodeUtf8(await context.fs.readFile(resolvePath2(context.cwd, bodyFile), { signal: context.signal })) : getStringFlag(parsed, "body") ?? "";
+    const body = bodyFile !== void 0 ? bodyFile === "-" ? await readStdinText() : decodeUtf8(await context.fs.readFile(resolvePath3(context.cwd, bodyFile), { signal: context.signal })) : getStringFlag(parsed, "body") ?? "";
     const issue = backend.createIssue(repo, {
       title,
       body,
@@ -2770,7 +2838,7 @@ ${c.body}
       return 0;
     }
     const bodyFile = getStringFlag(parsed, "body-file");
-    const body = bodyFile !== void 0 ? bodyFile === "-" ? stdinText : decodeUtf8(await context.fs.readFile(resolvePath2(context.cwd, bodyFile), { signal: context.signal })) : getStringFlag(parsed, "body") ?? "";
+    const body = bodyFile !== void 0 ? bodyFile === "-" ? await readStdinText() : decodeUtf8(await context.fs.readFile(resolvePath3(context.cwd, bodyFile), { signal: context.signal })) : getStringFlag(parsed, "body") ?? "";
     if (!body) {
       await writeErr("body cannot be blank; provide -b/--body or -F/--body-file\n");
       return 1;
@@ -2828,7 +2896,7 @@ ${c.body}
     if (title !== void 0)
       issue.title = title;
     const bodyFile = getStringFlag(parsed, "body-file");
-    const body = bodyFile !== void 0 ? bodyFile === "-" ? stdinText : decodeUtf8(await context.fs.readFile(resolvePath2(context.cwd, bodyFile), { signal: context.signal })) : getStringFlag(parsed, "body");
+    const body = bodyFile !== void 0 ? bodyFile === "-" ? await readStdinText() : decodeUtf8(await context.fs.readFile(resolvePath3(context.cwd, bodyFile), { signal: context.signal })) : getStringFlag(parsed, "body");
     if (body !== void 0)
       issue.body = body;
     for (const lblName of getStringArrayFlag(parsed, "add-label")) {
@@ -2990,7 +3058,7 @@ ${c.body}
 
 // packages/safe-bash-command-gh/dist/commands/pr.js
 init_buffer();
-import { resolvePath as resolvePath3 } from "@poe-platform/safe-fs/core";
+import { resolvePath as resolvePath4 } from "@poe-platform/safe-fs/core";
 var PR_JSON_FIELDS = [
   "additions",
   "assignees",
@@ -3061,12 +3129,12 @@ function serializePrForJson(pr) {
     reactionGroups: []
   };
 }
-async function readBodyFromFlagOrFile(context, bodyFlag, bodyFileFlag, stdinText) {
+async function readBodyFromFlagOrFile(context, bodyFlag, bodyFileFlag, readStdinText) {
   if (bodyFileFlag !== void 0) {
     if (bodyFileFlag === "-") {
-      return stdinText;
+      return readStdinText();
     }
-    const resolved = resolvePath3(context.cwd, bodyFileFlag);
+    const resolved = resolvePath4(context.cwd, bodyFileFlag);
     const bytes = await context.fs.readFile(resolved, { signal: context.signal });
     return decodeUtf8(bytes);
   }
@@ -3083,7 +3151,7 @@ function extractRepoAndSelectorFromPrArg(selector, explicitRepoFlag) {
   return { repoOverride: explicitRepoFlag, selector };
 }
 async function handlePrCommand(env, rawArgs) {
-  const { context, backend, git, openBrowser, limits, stdinText, writeOut, writeErr } = env;
+  const { context, backend, git, openBrowser, limits, readStdinText, writeOut, writeErr } = env;
   const subcommand = rawArgs[0];
   const restArgs = rawArgs.slice(1);
   if (!subcommand || subcommand === "--help" || subcommand === "-h" || subcommand === "help") {
@@ -3178,10 +3246,10 @@ ${existingOpen.url}
     const localCommits = gitRoot ? await inspectLocalCommitsForPr(context, gitRoot, baseBranch, headBranch, git) : [];
     const localFiles = gitRoot ? await readWorktreeFiles(context.fs, gitRoot, context.signal) : void 0;
     let title = getStringFlag(parsed, "title");
-    let body = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), stdinText);
+    let body = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), readStdinText);
     if (parsed.flags.has("recover")) {
       const recoverFile = getStringFlag(parsed, "recover");
-      const recoverContent = decodeUtf8(await context.fs.readFile(resolvePath3(context.cwd, recoverFile), { signal: context.signal }));
+      const recoverContent = decodeUtf8(await context.fs.readFile(resolvePath4(context.cwd, recoverFile), { signal: context.signal }));
       const lines = recoverContent.split(/\r?\n/u);
       if (!title && lines[0])
         title = lines[0];
@@ -3200,9 +3268,9 @@ ${existingOpen.url}
       const templateFile = getStringFlag(parsed, "template");
       if (templateFile && gitRoot) {
         const candidatePaths = [
-          resolvePath3(gitRoot, templateFile),
-          resolvePath3(gitRoot, `.github/PULL_REQUEST_TEMPLATE/${templateFile}`),
-          resolvePath3(gitRoot, `.github/${templateFile}`)
+          resolvePath4(gitRoot, templateFile),
+          resolvePath4(gitRoot, `.github/PULL_REQUEST_TEMPLATE/${templateFile}`),
+          resolvePath4(gitRoot, `.github/${templateFile}`)
         ];
         for (const p of candidatePaths) {
           if (await pathExists(context.fs, p, context.signal)) {
@@ -3655,7 +3723,7 @@ ${c.body}
     const mergeOid = bytesToHex(sha1Sync(`merged:${repo.nameWithOwner}:${pr.number}:${method}:${backend.isoNow()}`));
     repo.branches.set(pr.baseRefName, mergeOid);
     const subject = getStringFlag(parsed, "subject") ?? `${pr.title} (#${pr.number})`;
-    const mergeBody = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), stdinText) ?? pr.body;
+    const mergeBody = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), readStdinText) ?? pr.body;
     repo.commits.set(mergeOid, {
       oid: mergeOid,
       messageHeadline: subject,
@@ -3715,7 +3783,7 @@ ${c.body}
       await writeErr("one of --approve, --request-changes, or --comment is required\n");
       return 1;
     }
-    const body = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), stdinText) ?? "";
+    const body = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), readStdinText) ?? "";
     if ((requestChanges || commentOnly) && !body.trim()) {
       await writeErr("body cannot be blank for --request-changes or --comment review\n");
       return 1;
@@ -3839,7 +3907,7 @@ ${c.body}
       await writeErr("no comments found for current user\n");
       return 1;
     }
-    const body = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), stdinText);
+    const body = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), readStdinText);
     if (!body) {
       await writeErr("body cannot be blank; provide -b/--body or -F/--body-file\n");
       return 1;
@@ -3910,7 +3978,7 @@ ${c.body}
     const newTitle = getStringFlag(parsed, "title");
     if (newTitle !== void 0)
       pr.title = newTitle;
-    const newBody = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), stdinText);
+    const newBody = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), readStdinText);
     if (newBody !== void 0)
       pr.body = newBody;
     const newBase = getStringFlag(parsed, "base");
@@ -4183,7 +4251,7 @@ ${c.body}
     }
     const revertBranch = `revert-${pr.number}-${pr.headRefName}`;
     const revertTitle = getStringFlag(parsed, "title") ?? `Revert "${pr.title}"`;
-    const revertBody = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), stdinText) ?? `Reverts ${repo.nameWithOwner}#${pr.number}`;
+    const revertBody = await readBodyFromFlagOrFile(context, getStringFlag(parsed, "body"), getStringFlag(parsed, "body-file"), readStdinText) ?? `Reverts ${repo.nameWithOwner}#${pr.number}`;
     const revertPr = backend.createPullRequest(repo, {
       title: revertTitle,
       body: revertBody,
@@ -4202,7 +4270,7 @@ ${c.body}
 
 // packages/safe-bash-command-gh/dist/commands/release-run-workflow.js
 init_buffer();
-import { isFsError, resolvePath as resolvePath4 } from "@poe-platform/safe-fs/core";
+import { isFsError, resolvePath as resolvePath5 } from "@poe-platform/safe-fs/core";
 var RELEASE_JSON_FIELDS = [
   "apiUrl",
   "assets",
@@ -4254,7 +4322,7 @@ function globMatches(pattern, candidate) {
   return new RegExp(`^${escaped}$`, "iu").test(candidate);
 }
 async function handleReleaseCommand(env, rawArgs) {
-  const { context, backend, openssl, openBrowser, stdinText, writeOut, writeErr } = env;
+  const { context, backend, openssl, openBrowser, readStdinText, writeOut, writeErr } = env;
   const subcommand = rawArgs[0];
   const restArgs = rawArgs.slice(1);
   if (!subcommand || subcommand === "--help" || subcommand === "-h" || subcommand === "help") {
@@ -4319,7 +4387,7 @@ async function handleReleaseCommand(env, rawArgs) {
       return 1;
     }
     const notesFile = getStringFlag(parsed, "notes-file");
-    let body = notesFile !== void 0 ? notesFile === "-" ? stdinText : decodeUtf8(await context.fs.readFile(resolvePath4(context.cwd, notesFile), { signal: context.signal })) : getStringFlag(parsed, "notes") ?? "";
+    let body = notesFile !== void 0 ? notesFile === "-" ? await readStdinText() : decodeUtf8(await context.fs.readFile(resolvePath5(context.cwd, notesFile), { signal: context.signal })) : getStringFlag(parsed, "notes") ?? "";
     if (!body && getBoolFlag(parsed, "generate-notes")) {
       const prs = Array.from(repo.pullRequests.values());
       body = "## What's Changed\n" + (prs.length > 0 ? prs.map((p) => `* ${p.title} by @${p.author.login} in #${p.number}`).join("\n") : `* Release ${tagName}`);
@@ -4337,7 +4405,7 @@ async function handleReleaseCommand(env, rawArgs) {
       const hashIdx = fileSpec.indexOf("#");
       const rawPath = hashIdx === -1 ? fileSpec : fileSpec.slice(0, hashIdx);
       const label = hashIdx === -1 ? "" : fileSpec.slice(hashIdx + 1);
-      const resolved = resolvePath4(context.cwd, rawPath);
+      const resolved = resolvePath5(context.cwd, rawPath);
       const data = await context.fs.readFile(resolved, { signal: context.signal });
       const fileName = resolved.split("/").pop() ?? rawPath;
       assets.push({
@@ -4466,7 +4534,7 @@ async function handleReleaseCommand(env, rawArgs) {
       const hashIdx = fileSpec.indexOf("#");
       const rawPath = hashIdx === -1 ? fileSpec : fileSpec.slice(0, hashIdx);
       const label = hashIdx === -1 ? "" : fileSpec.slice(hashIdx + 1);
-      const resolved = resolvePath4(context.cwd, rawPath);
+      const resolved = resolvePath5(context.cwd, rawPath);
       const data = await context.fs.readFile(resolved, { signal: context.signal });
       const fileName = resolved.split("/").pop() ?? rawPath;
       const existingIdx = rel.assets.findIndex((a) => a.name === fileName);
@@ -4513,7 +4581,7 @@ async function handleReleaseCommand(env, rawArgs) {
 `);
       return 1;
     }
-    const outDir = resolvePath4(context.cwd, getStringFlag(parsed, "dir") ?? ".");
+    const outDir = resolvePath5(context.cwd, getStringFlag(parsed, "dir") ?? ".");
     await context.fs.mkdir(outDir, { recursive: true, signal: context.signal });
     const clobber = getBoolFlag(parsed, "clobber");
     const skipExisting = getBoolFlag(parsed, "skip-existing");
@@ -4537,13 +4605,13 @@ async function handleReleaseCommand(env, rawArgs) {
     const archiveFormat = getStringFlag(parsed, "archive");
     if (archiveFormat) {
       const fileName = `${repo.name}-${rel.tagName}.${archiveFormat}`;
-      const dest = getStringFlag(parsed, "output") ? resolvePath4(context.cwd, getStringFlag(parsed, "output")) : `${outDir === "/" ? "" : outDir}/${fileName}`;
+      const dest = getStringFlag(parsed, "output") ? resolvePath5(context.cwd, getStringFlag(parsed, "output")) : `${outDir === "/" ? "" : outDir}/${fileName}`;
       return await download(dest, encodeUtf8(`ARCHIVE:${repo.nameWithOwner}:${rel.tagName}`)) ? 0 : 1;
     }
     const patterns = getStringArrayFlag(parsed, "pattern");
     const matching = rel.assets.filter((a) => patterns.length === 0 || patterns.some((pat) => globMatches(pat, a.name)));
     for (const asset of matching) {
-      const dest = getStringFlag(parsed, "output") ? resolvePath4(context.cwd, getStringFlag(parsed, "output")) : `${outDir === "/" ? "" : outDir}/${asset.name}`;
+      const dest = getStringFlag(parsed, "output") ? resolvePath5(context.cwd, getStringFlag(parsed, "output")) : `${outDir === "/" ? "" : outDir}/${asset.name}`;
       if (!await download(dest, asset.data))
         return 1;
     }
@@ -4572,7 +4640,7 @@ async function handleReleaseCommand(env, rawArgs) {
     if (title !== void 0)
       rel.name = title;
     const notesFile = getStringFlag(parsed, "notes-file");
-    const notes = notesFile !== void 0 ? notesFile === "-" ? stdinText : decodeUtf8(await context.fs.readFile(resolvePath4(context.cwd, notesFile), { signal: context.signal })) : getStringFlag(parsed, "notes");
+    const notes = notesFile !== void 0 ? notesFile === "-" ? await readStdinText() : decodeUtf8(await context.fs.readFile(resolvePath5(context.cwd, notesFile), { signal: context.signal })) : getStringFlag(parsed, "notes");
     if (notes !== void 0)
       rel.body = notes;
     if (parsed.flags.has("draft"))
@@ -4635,7 +4703,7 @@ async function handleReleaseCommand(env, rawArgs) {
     let bytes = encodeUtf8(targetTagOrFile);
     if (subcommand === "verify-asset") {
       const assetFile = parsed.positionals[1] ?? parsed.positionals[0];
-      bytes = await context.fs.readFile(resolvePath4(context.cwd, assetFile), { signal: context.signal });
+      bytes = await context.fs.readFile(resolvePath5(context.cwd, assetFile), { signal: context.signal });
     }
     const verification = await openssl.verifyAttestationSignature({ repository: repo.nameWithOwner }, bytes);
     await writeOut(`\u2713 Verification succeeded! Digest ${verification.subjectDigest} signed by ${verification.issuer} for ${verification.repository}
@@ -4872,7 +4940,7 @@ async function handleRunCommand(env, rawArgs) {
 `);
       return 1;
     }
-    const outDir = resolvePath4(context.cwd, getStringFlag(parsed, "dir") ?? ".");
+    const outDir = resolvePath5(context.cwd, getStringFlag(parsed, "dir") ?? ".");
     await context.fs.mkdir(outDir, { recursive: true, signal: context.signal });
     const nameFilters = getStringArrayFlag(parsed, "name");
     for (const art of run.artifacts) {
@@ -5025,7 +5093,7 @@ State: ${wf.state}
 
 // packages/safe-bash-command-gh/dist/commands/repo.js
 init_buffer();
-import { resolvePath as resolvePath5 } from "@poe-platform/safe-fs/core";
+import { resolvePath as resolvePath6 } from "@poe-platform/safe-fs/core";
 var REPO_JSON_FIELDS = [
   "archivedAt",
   "assignableUsers",
@@ -5268,7 +5336,7 @@ async function handleRepoCommand(env, rawArgs) {
       }, env.http, limits);
     }
     const dirArg = parsed.positionals[1] ?? repo.name;
-    const targetDir = resolvePath5(context.cwd, dirArg);
+    const targetDir = resolvePath6(context.cwd, dirArg);
     const branchFlag = extractBranchFromGitFlags(parsed.passthrough);
     const upstreamRemoteName = getStringFlag(parsed, "upstream-remote-name") ?? "upstream";
     const useSsh = repoArg.startsWith("git@") || repoArg.startsWith("ssh://") || backend.config.gitProtocol === "ssh";
@@ -5312,7 +5380,7 @@ async function handleRepoCommand(env, rawArgs) {
       return 0;
     }
     const sourceDirFlag = getStringFlag(parsed, "source");
-    const rawName = parsed.positionals[0] ?? (sourceDirFlag ? resolvePath5(context.cwd, sourceDirFlag).split("/").filter(Boolean).pop() : void 0) ?? "new-repo";
+    const rawName = parsed.positionals[0] ?? (sourceDirFlag ? resolvePath6(context.cwd, sourceDirFlag).split("/").filter(Boolean).pop() : void 0) ?? "new-repo";
     const coords = parseRepoSpec(rawName, backend.defaultHost, backend.getActiveUser());
     if (backend.getRepo(coords.owner, coords.name)) {
       await writeErr(`repository ${coords.nameWithOwner} already exists
@@ -5329,7 +5397,7 @@ async function handleRepoCommand(env, rawArgs) {
       Object.assign(initialFiles, tmplFiles);
     }
     if (sourceDirFlag && getBoolFlag(parsed, "push")) {
-      const srcPath = resolvePath5(context.cwd, sourceDirFlag);
+      const srcPath = resolvePath6(context.cwd, sourceDirFlag);
       const localFiles = await readWorktreeFiles(context.fs, srcPath, context.signal);
       Object.assign(initialFiles, localFiles);
     }
@@ -5379,7 +5447,7 @@ Copyright (c) ${coords.owner}
     if (getBoolFlag(parsed, "disable-wiki"))
       repo.hasWikiEnabled = false;
     if (sourceDirFlag) {
-      const srcPath = resolvePath5(context.cwd, sourceDirFlag);
+      const srcPath = resolvePath6(context.cwd, sourceDirFlag);
       const remoteName = getStringFlag(parsed, "remote") ?? "origin";
       await updateGitRemote(context.fs, srcPath, remoteName, repo.cloneUrl, "base", context.signal);
       if (getBoolFlag(parsed, "push")) {
@@ -5388,7 +5456,7 @@ Copyright (c) ${coords.owner}
         repo.branchFiles.set(currentBranch, worktree);
       }
     } else if (getBoolFlag(parsed, "clone")) {
-      const cloneTarget = resolvePath5(context.cwd, repo.name);
+      const cloneTarget = resolvePath6(context.cwd, repo.name);
       await cloneRepositoryIntoVfs({
         context,
         repo,
@@ -5450,7 +5518,7 @@ Copyright (c) ${coords.owner}
       await updateGitRemote(context.fs, gitRoot, "upstream", sourceRepo.cloneUrl, "base", context.signal);
     }
     if (getBoolFlag(parsed, "clone")) {
-      const targetDir = resolvePath5(context.cwd, forkRepo.name);
+      const targetDir = resolvePath6(context.cwd, forkRepo.name);
       await cloneRepositoryIntoVfs({
         context,
         repo: forkRepo,
@@ -5826,7 +5894,7 @@ Copyright (c) ${coords.owner}
         await writeErr("deploy key file required\n");
         return 1;
       }
-      const keyContent = decodeUtf8(await context.fs.readFile(resolvePath5(context.cwd, keyFile), { signal: context.signal })).trim();
+      const keyContent = decodeUtf8(await context.fs.readFile(resolvePath6(context.cwd, keyFile), { signal: context.signal })).trim();
       if (ssh) {
         await ssh.fingerprint(keyContent);
       }
@@ -5958,7 +6026,7 @@ Alphanumeric: ${item.isAlphanumeric}
 
 // packages/safe-bash-command-gh/dist/commands/api.js
 init_buffer();
-import { resolvePath as resolvePath6 } from "@poe-platform/safe-fs/core";
+import { resolvePath as resolvePath7 } from "@poe-platform/safe-fs/core";
 function setNestedField(target, keyPath, value) {
   const bracketMatch = /^([^[\]]+)((?:\[[^\]]*\])+)$/u.exec(keyPath);
   if (!bracketMatch) {
@@ -6002,7 +6070,7 @@ function setNestedField(target, keyPath, value) {
   }
 }
 async function handleApiCommand(env, rawArgs) {
-  const { context, backend, http, git, limits, stdinBytes, stdinText, writeOut, writeErr } = env;
+  const { context, backend, http, git, limits, readStdinBytes, readStdinText, writeOut, writeErr } = env;
   const schemas = [
     { short: "X", long: "method", type: "string" },
     { short: "f", long: "raw-field", type: "string[]" },
@@ -6068,7 +6136,7 @@ async function handleApiCommand(env, rawArgs) {
     let coerced = rawVal;
     if (rawVal.startsWith("@")) {
       const fileRef = rawVal.slice(1);
-      coerced = fileRef === "-" ? stdinText : decodeUtf8(await context.fs.readFile(resolvePath6(context.cwd, fileRef), { signal: context.signal }));
+      coerced = fileRef === "-" ? await readStdinText() : decodeUtf8(await context.fs.readFile(resolvePath7(context.cwd, fileRef), { signal: context.signal }));
     } else if (rawVal === "true")
       coerced = true;
     else if (rawVal === "false")
@@ -6093,7 +6161,7 @@ async function handleApiCommand(env, rawArgs) {
   }
   let requestBodyBytes = new Uint8Array();
   if (inputFlag !== void 0) {
-    requestBodyBytes = inputFlag === "-" ? stdinBytes : await context.fs.readFile(resolvePath6(context.cwd, inputFlag), { signal: context.signal });
+    requestBodyBytes = inputFlag === "-" ? await readStdinBytes() : await context.fs.readFile(resolvePath7(context.cwd, inputFlag), { signal: context.signal });
   } else if (isGraphQl) {
     const query = String(payload.query ?? "");
     const variables = {};
@@ -6134,6 +6202,7 @@ async function handleApiCommand(env, rawArgs) {
   const jqFlag = getStringFlag(parsed, "jq");
   const templateFlag = getStringFlag(parsed, "template");
   const collectedPages = [];
+  let hasArrayPage = false;
   let nextUrl = fullUrl;
   let lastStatus = 200;
   let lastHeaders = {};
@@ -6158,6 +6227,7 @@ async function handleApiCommand(env, rawArgs) {
       try {
         const parsedPage = JSON.parse(lastBodyText);
         if (Array.isArray(parsedPage) && paginate && !slurp) {
+          hasArrayPage = true;
           collectedPages.push(...parsedPage);
         } else {
           collectedPages.push(parsedPage);
@@ -6182,7 +6252,7 @@ async function handleApiCommand(env, rawArgs) {
     }
     outputPrefix = headerLines.join("\r\n") + "\r\n\r\n";
   }
-  const finalData = paginate ? slurp ? collectedPages : collectedPages.length === 1 && !Array.isArray(collectedPages[0]) ? collectedPages[0] : collectedPages : collectedPages[0];
+  const finalData = paginate ? slurp ? collectedPages : !hasArrayPage && collectedPages.length === 1 && !Array.isArray(collectedPages[0]) ? collectedPages[0] : collectedPages : collectedPages[0];
   if (jqFlag) {
     const jqOut = await evaluateJqExpression(finalData, jqFlag, context.signal, limits.maxOutputBytes);
     await writeOut(outputPrefix + jqOut);
@@ -6210,10 +6280,10 @@ async function handleApiCommand(env, rawArgs) {
 
 // packages/safe-bash-command-gh/dist/commands/auth.js
 init_buffer();
-import { resolvePath as resolvePath7 } from "@poe-platform/safe-fs/core";
+import { resolvePath as resolvePath8 } from "@poe-platform/safe-fs/core";
 function getGhConfigDir(context) {
   if (context.env.GH_CONFIG_DIR) {
-    return resolvePath7(context.cwd, context.env.GH_CONFIG_DIR);
+    return resolvePath8(context.cwd, context.env.GH_CONFIG_DIR);
   }
   const home = context.env.HOME || "/home/user";
   return `${home.replace(/\/+$/u, "")}/.config/gh`;
@@ -6236,7 +6306,7 @@ async function persistHostsConfig(context, backend) {
   });
 }
 async function handleAuthCommand(env, rawArgs) {
-  const { context, backend, stdinText, writeOut, writeErr } = env;
+  const { context, backend, readStdinText, writeOut, writeErr } = env;
   const subcommand = rawArgs[0];
   const restArgs = rawArgs.slice(1);
   if (!subcommand || subcommand === "--help" || subcommand === "-h" || subcommand === "help") {
@@ -6273,7 +6343,7 @@ async function handleAuthCommand(env, rawArgs) {
     const user = getStringFlag(parsed, "user") ?? backend.currentUser;
     let token = "gho_authenticated_token";
     if (getBoolFlag(parsed, "with-token")) {
-      token = stdinText.trim();
+      token = (await readStdinText()).trim();
       if (!token) {
         await writeErr("error: token required on standard input when using --with-token\n");
         return 1;
@@ -6488,9 +6558,9 @@ async function handleAuthCommand(env, rawArgs) {
 
 // packages/safe-bash-command-gh/dist/commands/misc.js
 init_buffer();
-import { resolvePath as resolvePath8 } from "@poe-platform/safe-fs/core";
+import { resolvePath as resolvePath9 } from "@poe-platform/safe-fs/core";
 async function handleGistCommand(env, rawArgs) {
-  const { context, backend, git, stdinText, writeOut, writeErr } = env;
+  const { context, backend, git, readStdinText, writeOut, writeErr } = env;
   const sub = rawArgs[0];
   const rest = rawArgs.slice(1);
   if (!sub || sub === "--help" || sub === "-h" || sub === "help") {
@@ -6507,10 +6577,11 @@ async function handleGistCommand(env, rawArgs) {
     const files = {};
     if (parsed.positionals.length === 0 || parsed.positionals.length === 1 && parsed.positionals[0] === "-") {
       const fn = getStringFlag(parsed, "filename") ?? "gistfile0.txt";
-      files[fn] = { filename: fn, content: stdinText, size: stdinText.length };
+      const content = await readStdinText();
+      files[fn] = { filename: fn, content, size: content.length };
     } else {
       for (const fileArg of parsed.positionals) {
-        const resolved = resolvePath8(context.cwd, fileArg);
+        const resolved = resolvePath9(context.cwd, fileArg);
         const content = decodeUtf8(await context.fs.readFile(resolved, { signal: context.signal }));
         const fn = resolved.split("/").pop() ?? fileArg;
         files[fn] = { filename: fn, content, size: content.length };
@@ -6612,7 +6683,7 @@ async function handleGistCommand(env, rawArgs) {
       gist.description = desc;
     const addFile = getStringFlag(parsed, "add");
     if (addFile) {
-      const resolved = resolvePath8(context.cwd, addFile);
+      const resolved = resolvePath9(context.cwd, addFile);
       const content = decodeUtf8(await context.fs.readFile(resolved, { signal: context.signal }));
       const fn = getStringFlag(parsed, "filename") ?? resolved.split("/").pop() ?? addFile;
       gist.files[fn] = { filename: fn, content, size: content.length };
@@ -6634,7 +6705,7 @@ async function handleGistCommand(env, rawArgs) {
 `);
       return 1;
     }
-    const targetDir = resolvePath8(context.cwd, parsed.positionals[1] ?? gist.id);
+    const targetDir = resolvePath9(context.cwd, parsed.positionals[1] ?? gist.id);
     const fileMap = Object.fromEntries(Object.values(gist.files).map((f) => [f.filename, f.content]));
     await context.fs.mkdir(targetDir, { recursive: true, signal: context.signal });
     await runGitInVfs(context, ["init", "-b", "main"], { cwd: targetDir, git });
@@ -6960,7 +7031,7 @@ async function handleLabelCommand(env, rawArgs) {
   return 1;
 }
 async function handleSecretCommand(env, rawArgs) {
-  const { context, backend, openssl, stdinText, writeOut, writeErr } = env;
+  const { context, backend, openssl, readStdinText, writeOut, writeErr } = env;
   const sub = rawArgs[0] ?? "list";
   const rest = rawArgs.slice(1);
   const schemas = [
@@ -6996,7 +7067,7 @@ async function handleSecretCommand(env, rawArgs) {
   if (sub === "set") {
     const envFile = getStringFlag(parsed, "env-file");
     if (envFile) {
-      const text = decodeUtf8(await context.fs.readFile(resolvePath8(context.cwd, envFile), { signal: context.signal }));
+      const text = decodeUtf8(await context.fs.readFile(resolvePath9(context.cwd, envFile), { signal: context.signal }));
       for (const line of text.split(/\r?\n/u)) {
         const trimmed = line.trim();
         if (!trimmed || trimmed.startsWith("#"))
@@ -7021,7 +7092,7 @@ async function handleSecretCommand(env, rawArgs) {
       await writeErr("secret name required\n");
       return 1;
     }
-    const value = getStringFlag(parsed, "body") ?? stdinText.trim();
+    const value = getStringFlag(parsed, "body") ?? (await readStdinText()).trim();
     const encrypted = await openssl.encryptSecretForGitHub(value, "gh_pub_key_b64", "key_1");
     const entry = {
       name,
@@ -7047,7 +7118,7 @@ async function handleSecretCommand(env, rawArgs) {
   return 1;
 }
 async function handleVariableCommand(env, rawArgs) {
-  const { context, backend, stdinText, writeOut, writeErr } = env;
+  const { context, backend, readStdinText, writeOut, writeErr } = env;
   const sub = rawArgs[0] ?? "list";
   const rest = rawArgs.slice(1);
   const schemas = [
@@ -7095,7 +7166,7 @@ async function handleVariableCommand(env, rawArgs) {
       await writeErr("variable name required\n");
       return 1;
     }
-    const value = getStringFlag(parsed, "body") ?? parsed.positionals[1] ?? stdinText.trim();
+    const value = getStringFlag(parsed, "body") ?? parsed.positionals[1] ?? (await readStdinText()).trim();
     const ts = backend.isoNow();
     const entry = {
       name,
@@ -7180,7 +7251,7 @@ async function handleCacheCommand(env, rawArgs) {
   return 1;
 }
 async function handleSshKeyCommand(env, rawArgs) {
-  const { context, backend, ssh, stdinText, writeOut, writeErr } = env;
+  const { context, backend, ssh, readStdinText, writeOut, writeErr } = env;
   const sub = rawArgs[0] ?? "list";
   const rest = rawArgs.slice(1);
   const schemas = [
@@ -7208,9 +7279,11 @@ async function handleSshKeyCommand(env, rawArgs) {
   }
   if (sub === "add") {
     const keyFile = parsed.positionals[0];
-    let keyContent = stdinText.trim();
+    let keyContent;
     if (keyFile && keyFile !== "-") {
-      keyContent = decodeUtf8(await context.fs.readFile(resolvePath8(context.cwd, keyFile), { signal: context.signal })).trim();
+      keyContent = decodeUtf8(await context.fs.readFile(resolvePath9(context.cwd, keyFile), { signal: context.signal })).trim();
+    } else {
+      keyContent = (await readStdinText()).trim();
     }
     if (!keyContent) {
       const generated = await ssh.keygen({ comment: `${backend.getActiveUser()}@safe-bash` });
@@ -7243,7 +7316,7 @@ async function handleSshKeyCommand(env, rawArgs) {
   return 1;
 }
 async function handleGpgKeyCommand(env, rawArgs) {
-  const { context, backend, openssl, stdinText, writeOut, writeErr } = env;
+  const { context, backend, openssl, readStdinText, writeOut, writeErr } = env;
   const sub = rawArgs[0] ?? "list";
   const rest = rawArgs.slice(1);
   const parsed = parseCommandArgs(rest, [{ short: "t", long: "title", type: "string" }]);
@@ -7267,7 +7340,7 @@ async function handleGpgKeyCommand(env, rawArgs) {
   }
   if (sub === "add") {
     const keyFile = parsed.positionals[0];
-    const rawKey = keyFile && keyFile !== "-" ? decodeUtf8(await context.fs.readFile(resolvePath8(context.cwd, keyFile), { signal: context.signal })).trim() : stdinText.trim() || "-----BEGIN PGP PUBLIC KEY BLOCK-----\nFAKE\n-----END PGP PUBLIC KEY BLOCK-----";
+    const rawKey = keyFile && keyFile !== "-" ? decodeUtf8(await context.fs.readFile(resolvePath9(context.cwd, keyFile), { signal: context.signal })).trim() : (await readStdinText()).trim() || "-----BEGIN PGP PUBLIC KEY BLOCK-----\nFAKE\n-----END PGP PUBLIC KEY BLOCK-----";
     const digest = await openssl.sha256(rawKey);
     const keyId = bytesToHex(digest).slice(0, 16).toUpperCase();
     const id = backend.nextId();
@@ -7316,7 +7389,7 @@ async function handleAttestationCommand(env, rawArgs) {
       await writeErr("artifact path required for attestation verify\n");
       return 1;
     }
-    const bytes = await context.fs.readFile(resolvePath8(context.cwd, fileArg), {
+    const bytes = await context.fs.readFile(resolvePath9(context.cwd, fileArg), {
       signal: context.signal
     });
     let bundleData = {
@@ -7325,7 +7398,7 @@ async function handleAttestationCommand(env, rawArgs) {
     const bundleFile = getStringFlag(parsed, "bundle");
     if (bundleFile) {
       try {
-        bundleData = JSON.parse(decodeUtf8(await context.fs.readFile(resolvePath8(context.cwd, bundleFile), { signal: context.signal })));
+        bundleData = JSON.parse(decodeUtf8(await context.fs.readFile(resolvePath9(context.cwd, bundleFile), { signal: context.signal })));
       } catch {
       }
     }
@@ -8154,23 +8227,31 @@ function normalizeTopLevelArgs(rawArgs) {
 }
 function createGhCommand(options = {}) {
   const limits = { ...DEFAULT_GH_LIMITS, ...options.limits };
-  const backend = options.backend ?? createGitHubBackend({
-    defaultHost: options.defaultHost,
-    defaultUser: options.defaultUser,
-    defaultToken: options.defaultToken,
-    now: options.now
-  });
+  const backends = /* @__PURE__ */ new WeakMap();
   const openssl = createDefaultOpenSslProvider(options.openssl);
-  const ssh = createDefaultSshProvider(options.ssh, backend.getActiveUser());
   const def = {
     name: "gh",
     runtimeIdentity: commandRuntimeIdentity,
     description: "Work seamlessly with GitHub from the command line",
     async execute(context) {
       context.signal.throwIfAborted();
+      let backend = options.backend ?? backends.get(context.fs);
+      if (!backend) {
+        backend = createGitHubBackend({
+          defaultHost: options.defaultHost,
+          defaultUser: options.defaultUser,
+          defaultToken: options.defaultToken,
+          now: options.now
+        });
+        backends.set(context.fs, backend);
+      }
       backend.resetUsage();
+      const ssh = createDefaultSshProvider(options.ssh, backend.getActiveUser());
+      const input = createGhInput(context, limits);
+      context = { ...context, fs: input.fs };
       let outputBytes = 0;
       const writeOut = async (text) => {
+        input.assertWithinLimits();
         const bytes = encodeUtf8(text);
         outputBytes += bytes.length;
         if (outputBytes > limits.maxOutputBytes) {
@@ -8183,22 +8264,8 @@ function createGhCommand(options = {}) {
         await writeBytes(context.stderr, bytes, context.signal);
       };
       try {
-        const stdinChunks = [];
-        let totalIn = 0;
-        for await (const chunk of readBytes(context.stdin, context.signal)) {
-          totalIn += chunk.length;
-          if (totalIn > limits.maxInputBytes) {
-            throw new Error("gh input byte limit exceeded");
-          }
-          stdinChunks.push(chunk);
-        }
-        const stdinBytes = new Uint8Array(totalIn);
-        let inOffset = 0;
-        for (const chunk of stdinChunks) {
-          stdinBytes.set(chunk, inOffset);
-          inOffset += chunk.length;
-        }
-        const stdinText = decodeUtf8(stdinBytes);
+        const readStdinBytes = input.readStdinBytes;
+        const readStdinText = async () => decodeUtf8(await readStdinBytes());
         const dispatch = async (argsToRun, depth = 0) => {
           if (depth > 8) {
             await writeErr("gh: alias expansion loop detected\n");
@@ -8240,7 +8307,7 @@ function createGhCommand(options = {}) {
             git: options.git,
             openBrowser: options.openBrowser,
             limits,
-            stdinText,
+            readStdinText,
             writeOut,
             writeErr
           };
@@ -8253,7 +8320,7 @@ function createGhCommand(options = {}) {
                 git: options.git,
                 openBrowser: options.openBrowser,
                 limits,
-                stdinText,
+                readStdinText,
                 writeOut,
                 writeErr
               }, subArgs);
@@ -8276,7 +8343,7 @@ function createGhCommand(options = {}) {
                 git: options.git,
                 openBrowser: options.openBrowser,
                 limits,
-                stdinText,
+                readStdinText,
                 writeOut,
                 writeErr
               }, subArgs);
@@ -8287,8 +8354,8 @@ function createGhCommand(options = {}) {
                 http: options.http,
                 git: options.git,
                 limits,
-                stdinBytes,
-                stdinText,
+                readStdinBytes,
+                readStdinText,
                 writeOut,
                 writeErr
               }, subArgs);
@@ -8297,7 +8364,7 @@ function createGhCommand(options = {}) {
                 limits,
                 context,
                 backend,
-                stdinText,
+                readStdinText,
                 writeOut,
                 writeErr
               }, subArgs);
@@ -8360,6 +8427,7 @@ complete -W "pr repo issue api auth release run workflow gist search label secre
           }
         };
         const exitCode = await dispatch(context.args);
+        input.assertWithinLimits();
         return { exitCode };
       } catch (error) {
         context.signal.throwIfAborted();
@@ -8370,12 +8438,13 @@ complete -W "pr repo issue api auth release run workflow gist search label secre
       }
     }
   };
-  ghBackendByExecutor.set(def.execute, {
-    backend,
-    hasCustomHttp: Boolean(options.http),
-    hasCustomBrowser: Boolean(options.openBrowser),
-    limits
-  });
+  if (options.backend)
+    ghBackendByExecutor.set(def.execute, {
+      backend: options.backend,
+      hasCustomHttp: Boolean(options.http),
+      hasCustomBrowser: Boolean(options.openBrowser),
+      limits
+    });
   return def;
 }
 var ghBackendByExecutor = /* @__PURE__ */ new WeakMap();
@@ -8566,7 +8635,7 @@ function serializePrForJsonSync(pr) {
 }
 function evalSyncGh(execFn, rawArgs, env, cwd, readFileSync) {
   const meta = ghBackendByExecutor.get(execFn);
-  if (!meta)
+  if (!meta || readFileSync)
     return void 0;
   const { backend, hasCustomHttp, limits } = meta;
   let argsToRun = rawArgs;