@poe-platform/safe-bash 0.1.799 → 0.1.801

package/dist/safe-bash/chunks/chunk-ZW6K2J7P.js

@@ -1,2652 +0,0 @@
-import {
-  openFileOutput
-} from "./chunk-O4ZUCRGN.js";
-import {
-  writeDiagnostic
-} from "./chunk-T5KKDMYB.js";
-import {
-  byteLength,
-  decodeBytes,
-  encodeBytes
-} from "./chunk-KTGR4U57.js";
-import {
-  shellValueByteLength,
-  shellValueBytes
-} from "./chunk-I4OAEOP6.js";
-import {
-  FsError,
-  createOutputOperation
-} from "./chunk-IUTD5FH5.js";
-import {
-  inheritYieldCheckpoint,
-  normalizePath,
-  posixPath,
-  yieldTurn
-} from "./chunk-VYZTG3GV.js";
-import {
-  getCommandArguments
-} from "./chunk-LQHGH25W.js";
-import {
-  collectBytes,
-  outputFailure,
-  readBytes,
-  toByteSource,
-  writeBytes
-} from "./chunk-PYVEAFJM.js";
-import {
-  builtInDirectContextExecutors,
-  pathOf,
-  syncCommandEvaluators
-} from "./chunk-ENR3HB2B.js";
-import {
-  TransformStream,
-  init_platform
-} from "./chunk-YG5WAHK7.js";
-
-// packages/safe-bash/src/commands/network/public.ts
-init_platform();
-
-// packages/safe-bash/src/commands/network/wget.ts
-init_platform();
-
-// packages/safe-bash/src/commands/network/shared.ts
-init_platform();
-
-// packages/safe-bash/src/commands/network/deadline.ts
-init_platform();
-function scheduleNetworkDeadline(milliseconds, expire) {
-  const deadline = performance.now() + milliseconds;
-  let timer;
-  let closed = false;
-  const arm = () => {
-    if (closed || !Number.isFinite(deadline)) return;
-    const remaining = deadline - performance.now();
-    timer = setTimeout(remaining > 2147483647 ? arm : expire, Math.max(0, Math.min(remaining, 2147483647)));
-  };
-  arm();
-  return () => {
-    closed = true;
-    clearTimeout(timer);
-  };
-}
-
-// packages/safe-bash/src/commands/network/types.ts
-init_platform();
-var defaultNetworkLimits = Object.freeze({
-  maxUploadBytes: Infinity,
-  maxDownloadBytes: Infinity,
-  maxBufferBytes: Infinity,
-  maxHeaderBytes: Infinity,
-  maxRedirects: Infinity,
-  maxRetries: Infinity,
-  maxUrls: Infinity,
-  maxTimeMs: Infinity,
-  maxTotalTimeMs: Infinity
-});
-var cloudflareWorkerNetworkLimits = Object.freeze({
-  maxUploadBytes: 4 * 1024 * 1024,
-  maxDownloadBytes: 4 * 1024 * 1024,
-  maxBufferBytes: 1024 * 1024,
-  maxHeaderBytes: 32 * 1024,
-  maxRedirects: 2,
-  maxRetries: 1,
-  maxUrls: 8,
-  maxTimeMs: 1e4,
-  maxTotalTimeMs: 1e4
-});
-var CurlError = class extends Error {
-  constructor(exitCode, message) {
-    super(message);
-    this.exitCode = exitCode;
-    this.name = "CurlError";
-  }
-  exitCode;
-};
-
-// packages/safe-bash/src/commands/network/shared.ts
-var encode = (text) => new TextEncoder().encode(text);
-function limitsFor(overrides = {}) {
-  const result = { ...defaultNetworkLimits, ...overrides };
-  for (const [name, value] of Object.entries(overrides)) {
-    const minimum = name === "maxRedirects" || name === "maxRetries" ? 0 : 1;
-    if (value !== Infinity && (!Number.isSafeInteger(value) || value < minimum)) {
-      throw new RangeError(`Invalid network limit: ${name}`);
-    }
-  }
-  return Object.freeze(result);
-}
-async function withSignal(operation, signal) {
-  signal.throwIfAborted();
-  return new Promise((resolve, reject) => {
-    const onAbort = () => {
-      cleanup();
-      reject(signal.reason);
-    };
-    const cleanup = () => signal.removeEventListener("abort", onAbort);
-    signal.addEventListener("abort", onAbort, { once: true });
-    Promise.resolve().then(operation).then((value) => {
-      cleanup();
-      resolve(value);
-    }, (error) => {
-      cleanup();
-      reject(error);
-    });
-  });
-}
-async function delay(milliseconds, signal) {
-  let cancel;
-  try {
-    await withSignal(() => new Promise((resolve) => {
-      cancel = scheduleNetworkDeadline(milliseconds, resolve);
-    }), signal);
-  } finally {
-    cancel?.();
-  }
-}
-function header(headers, name) {
-  return headers.find(([key]) => key.toLowerCase() === name.toLowerCase())?.[1];
-}
-function networkError(error) {
-  if (error instanceof CurlError) return error;
-  const code = error && typeof error === "object" && "code" in error ? String(error.code) : "";
-  if (["ENOTFOUND", "EAI_AGAIN"].includes(code)) return new CurlError(6, "Could not resolve host");
-  if (["ECONNREFUSED", "ENETUNREACH", "EHOSTUNREACH"].includes(code)) return new CurlError(7, "Failed to connect");
-  if (/CERT|SELF_SIGNED|UNABLE_TO_VERIFY/.test(code)) return new CurlError(60, "TLS certificate verification failed");
-  if (/TLS|SSL/.test(code)) return new CurlError(35, "TLS handshake failed");
-  return new CurlError(56, "Network transfer failed");
-}
-async function diagnostic(context, error) {
-  await writeDiagnostic(context.stderr, `${context.command}: (${error.exitCode}) ${error.message}
-`, context.signal);
-}
-async function collectNetworkBytes(source, options) {
-  if (Number.isFinite(options.maxBytes)) return collectBytes(source, options);
-  const chunks = [];
-  let size = 0;
-  for await (const chunk of readBytes(source, options.signal)) {
-    chunks.push(new Uint8Array(chunk));
-    size += chunk.length;
-  }
-  const bytes = new Uint8Array(size);
-  let offset = 0;
-  for (const chunk of chunks) {
-    bytes.set(chunk, offset);
-    offset += chunk.length;
-  }
-  return bytes;
-}
-
-// packages/safe-bash/src/commands/network/args.ts
-init_platform();
-
-// packages/safe-bash/src/commands/network/platform-portable.ts
-init_platform();
-var requiresFiniteUrlLimits = true;
-function createDefaultHttpTransport() {
-  throw new TypeError("Portable network commands require an explicit HTTP transport; inject createFetchTransport() or a host transport");
-}
-function randomBytes(length) {
-  const bytes = new Uint8Array(length);
-  globalThis.crypto.getRandomValues(bytes);
-  return bytes;
-}
-function validateHeaderName(name) {
-  if (!name.length) throw new TypeError("Invalid HTTP header name");
-  for (const character of name) {
-    const code = character.charCodeAt(0);
-    if (!(code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122 || "!#$%&'*+-.^_`|~".includes(character))) {
-      throw new TypeError("Invalid HTTP header name");
-    }
-  }
-}
-function validateHeaderValue(_name, value) {
-  for (const character of value) {
-    const code = character.charCodeAt(0);
-    if (code !== 9 && (code < 32 || code === 127 || code > 255)) throw new TypeError("Invalid HTTP header value");
-  }
-}
-
-// packages/safe-bash/src/commands/network/args.ts
-var values = {
-  C: "continue-at",
-  X: "request",
-  d: "data",
-  H: "header",
-  u: "user",
-  A: "user-agent",
-  e: "referer",
-  o: "output",
-  D: "dump-header",
-  w: "write-out",
-  T: "upload-file",
-  m: "max-time",
-  F: "form",
-  r: "range"
-};
-var flags = {
-  L: "location",
-  I: "head",
-  i: "include",
-  f: "fail",
-  s: "silent",
-  S: "show-error",
-  G: "get",
-  O: "remote-name",
-  v: "verbose",
-  q: "disable",
-  N: "no-buffer",
-  g: "globoff",
-  h: "help",
-  V: "version"
-};
-var longValues = /* @__PURE__ */ new Set([
-  ...Object.values(values),
-  "data-ascii",
-  "data-raw",
-  "data-binary",
-  "data-urlencode",
-  "url-query",
-  "json",
-  "form-string",
-  "url",
-  "oauth2-bearer",
-  "max-redirs",
-  "max-filesize",
-  "retry",
-  "retry-delay",
-  "connect-timeout",
-  "output-dir",
-  "cacert",
-  "etag-save",
-  "etag-compare"
-]);
-var booleans = {
-  location: "location",
-  head: "head",
-  include: "include",
-  "show-headers": "include",
-  get: "get",
-  "remote-name": "remoteName",
-  fail: "fail",
-  "fail-with-body": "failWithBody",
-  silent: "silent",
-  "show-error": "showError",
-  verbose: "verbose",
-  globoff: "globoff",
-  compressed: "compressed",
-  raw: "raw",
-  "ignore-content-length": "ignoreContentLength"
-};
-function number(value, integral = false) {
-  if (!(integral ? /^\d+$/ : /^\d+(?:\.\d+)?$/).test(value)) throw new CurlError(2, "Invalid numeric option");
-  const parsed = Number(value);
-  if (!Number.isFinite(parsed) || parsed < 0 || parsed > Number.MAX_SAFE_INTEGER) throw new CurlError(2, "Invalid numeric option");
-  return parsed;
-}
-function timeoutSeconds(value) {
-  const invalid = () => {
-    throw new CurlError(2, "Invalid numeric option");
-  };
-  let index = 0;
-  while (index < value.length && " 	\n\r\v\f".includes(value[index])) index++;
-  const negative = value[index] === "-";
-  if (negative || value[index] === "+") index++;
-  const hexadecimal = value.slice(index, index + 2).toLowerCase() === "0x";
-  if (hexadecimal) index += 2;
-  const digits = hexadecimal ? "0123456789abcdef" : "0123456789";
-  const radix = hexadecimal ? 16 : 10;
-  let mantissa = 0;
-  let digitCount = 0;
-  let fractionDigits = 0;
-  let point = false;
-  for (; index < value.length; index++) {
-    const character = value[index].toLowerCase();
-    const digit = digits.indexOf(character);
-    if (digit >= 0) {
-      mantissa = mantissa * radix + digit;
-      digitCount++;
-      if (point) fractionDigits++;
-    } else if (character === "." && !point) point = true;
-    else break;
-  }
-  if (!digitCount) invalid();
-  let exponent = 0;
-  if (value[index]?.toLowerCase() === (hexadecimal ? "p" : "e")) {
-    index++;
-    const exponentNegative = value[index] === "-";
-    if (exponentNegative || value[index] === "+") index++;
-    const start = index;
-    while (index < value.length && "0123456789".includes(value[index])) index++;
-    if (index === start) invalid();
-    exponent = Number(value.slice(start, index)) * (exponentNegative ? -1 : 1);
-  }
-  if (index !== value.length) invalid();
-  const parsed = hexadecimal ? (negative ? -1 : 1) * mantissa * 2 ** (exponent - fractionDigits * 4) : Number(value);
-  if (!Number.isFinite(parsed) || parsed < 0 || parsed > Number.MAX_SAFE_INTEGER) invalid();
-  return parsed;
-}
-function validateRequestHeader(name, value) {
-  try {
-    validateHeaderName(name);
-    validateHeaderValue(name, value);
-  } catch {
-    throw new CurlError(2, "Invalid HTTP header");
-  }
-  if (["host", "content-length", "transfer-encoding", "connection", "proxy-authorization", "upgrade", "expect"].includes(name.toLowerCase())) {
-    throw new CurlError(2, "Transport-controlled HTTP header is not supported");
-  }
-}
-function addHeader(result, raw) {
-  const colon = raw.indexOf(":");
-  const semicolon = colon < 0 && raw.endsWith(";");
-  if (colon < 1 && !semicolon) throw new CurlError(2, "Invalid HTTP header");
-  const name = semicolon ? raw.slice(0, -1) : raw.slice(0, colon);
-  const value = semicolon ? "" : raw.slice(colon + 1).trim();
-  validateRequestHeader(name, value);
-  result.headers.push([name, value === "" && !semicolon ? null : value]);
-}
-function parseArguments(args, limits) {
-  const result = {
-    urls: [],
-    data: [],
-    headers: [],
-    include: false,
-    head: false,
-    get: false,
-    location: false,
-    remoteName: false,
-    fail: false,
-    failWithBody: false,
-    silent: false,
-    showError: false,
-    verbose: false,
-    globoff: false,
-    help: false,
-    version: false,
-    retries: 0,
-    retryDelayMs: 0,
-    maxTimeMs: limits.maxTimeMs,
-    maxRedirects: limits.maxRedirects,
-    maxFileSize: limits.maxDownloadBytes
-  };
-  const apply = (option, value) => {
-    const positive = option.startsWith("no-") ? option.slice(3) : option;
-    const property = Object.hasOwn(booleans, positive) ? booleans[positive] : void 0;
-    if (property) {
-      Object.assign(result, { [property]: !option.startsWith("no-") });
-      if (property === "remoteName") {
-        (result.outputs ??= []).push({ remoteName: result.remoteName });
-        if (result.remoteName) delete result.output;
-      }
-      return;
-    }
-    switch (option) {
-      case "continue-at": {
-        if (value === "-") result.continueAt = "auto";
-        else {
-          if (!value || [...value].some((character) => !"0123456789".includes(character)) || !Number.isSafeInteger(Number(value))) {
-            throw new CurlError(2, "Invalid resume offset");
-          }
-          result.continueAt = Number(value);
-        }
-        break;
-      }
-      case "etag-save":
-        result.etagSave = value;
-        break;
-      case "etag-compare":
-        result.etagCompare = value;
-        break;
-      case "cacert":
-        result.caFile = value;
-        break;
-      case "http1.0":
-        result.httpVersion = "1.0";
-        break;
-      case "http1.1":
-        result.httpVersion = "1.1";
-        break;
-      case "url-query":
-        (result.query ??= []).push({ kind: value.startsWith("+") ? "raw" : "urlencode", value: value.startsWith("+") ? value.slice(1) : value });
-        break;
-      case "request":
-        if (!value || !/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(value) || ["CONNECT", "TRACE"].includes(value.toUpperCase())) {
-          throw new CurlError(2, "Invalid or unsupported HTTP method");
-        }
-        result.method = value;
-        break;
-      case "header":
-        addHeader(result, value);
-        break;
-      case "range":
-        try {
-          validateHeaderValue("Range", value);
-        } catch {
-          throw new CurlError(2, "Invalid byte range");
-        }
-        result.range = value;
-        break;
-      case "user-agent":
-        addHeader(result, `User-Agent: ${value}`);
-        break;
-      case "referer": {
-        validateRequestHeader("Referer", value);
-        const auto = value.indexOf(";auto");
-        result.autoReferer = auto >= 0;
-        result.referer = auto >= 0 ? value.slice(0, auto) : value;
-        break;
-      }
-      case "user":
-        if (!value.includes(":")) throw new CurlError(2, "Basic authentication requires user:password; prompting is unsupported");
-        result.user = value;
-        break;
-      case "oauth2-bearer":
-        result.bearer = value;
-        break;
-      case "data":
-      case "data-ascii":
-        result.data.push({ kind: "data", value });
-        break;
-      case "data-raw":
-        result.data.push({ kind: "raw", value });
-        break;
-      case "data-binary":
-        result.data.push({ kind: "binary", value });
-        break;
-      case "data-urlencode":
-        result.data.push({ kind: "urlencode", value });
-        break;
-      case "json":
-      case "form":
-      case "form-string":
-        result.data.push({ kind: option, value });
-        break;
-      case "output":
-        result.output = value;
-        result.remoteName = false;
-        (result.outputs ??= []).push({ output: value, remoteName: false });
-        break;
-      case "output-dir":
-        result.outputDirectory = value;
-        break;
-      case "dump-header":
-        result.dumpHeader = value;
-        break;
-      case "write-out":
-        result.writeOut = value;
-        break;
-      case "upload-file":
-        result.upload = value;
-        break;
-      case "url":
-        result.urls.push(value);
-        break;
-      case "max-time": {
-        const milliseconds = timeoutSeconds(value) * 1e3;
-        result.maxTimeMs = Math.min(milliseconds === 0 ? Infinity : milliseconds, limits.maxTimeMs);
-        break;
-      }
-      case "connect-timeout": {
-        const milliseconds = timeoutSeconds(value) * 1e3;
-        if (milliseconds === 0) delete result.connectTimeoutMs;
-        else result.connectTimeoutMs = Math.min(milliseconds, limits.maxTimeMs);
-        break;
-      }
-      case "max-filesize":
-        result.maxFileSize = Math.min(number(value, true), limits.maxDownloadBytes);
-        break;
-      case "max-redirs":
-        result.maxRedirects = Math.min(number(value, true), limits.maxRedirects);
-        break;
-      case "retry":
-        result.retries = Math.min(number(value, true), limits.maxRetries);
-        break;
-      case "retry-delay":
-        result.retryDelayMs = Math.min(number(value) * 1e3, limits.maxTimeMs);
-        break;
-      case "help":
-        result.help = true;
-        break;
-      case "version":
-        result.version = true;
-        break;
-      case "disable":
-      case "no-buffer":
-      case "no-progress-meter":
-      case "basic":
-        break;
-      default:
-        throw new CurlError(2, "Unsupported curl option");
-    }
-  };
-  let ended = false;
-  for (let index = 0; index < args.length; index++) {
-    const argument = args[index];
-    if (ended || !argument.startsWith("-") || argument === "-") {
-      result.urls.push(argument);
-      continue;
-    }
-    if (argument === "--") {
-      ended = true;
-      continue;
-    }
-    if (argument.startsWith("--")) {
-      const equals = argument.indexOf("=");
-      const name = argument.slice(2, equals < 0 ? void 0 : equals);
-      let value = equals < 0 ? void 0 : argument.slice(equals + 1);
-      if (longValues.has(name)) {
-        value ??= args[++index];
-        if (value === void 0) throw new CurlError(2, "Option requires an argument");
-      } else if (value !== void 0) throw new CurlError(2, "Unexpected option argument");
-      apply(name, value);
-    } else {
-      for (let offset = 1; offset < argument.length; offset++) {
-        const name = argument[offset];
-        if (values[name]) {
-          const value = argument.slice(offset + 1) || args[++index];
-          if (value === void 0) throw new CurlError(2, "Option requires an argument");
-          apply(values[name], value);
-          break;
-        }
-        if (!flags[name]) throw new CurlError(2, "Unsupported curl option");
-        apply(flags[name]);
-      }
-    }
-  }
-  if (!result.help && !result.version && !result.urls.length) throw new CurlError(2, "No URL specified");
-  if (result.urls.length > limits.maxUrls) throw new CurlError(2, "URL count exceeds host limit");
-  if (result.fail && result.failWithBody) throw new CurlError(2, "--fail and --fail-with-body are mutually exclusive");
-  const form = result.data.some((part) => part.kind === "form" || part.kind === "form-string");
-  if (result.upload !== void 0 && result.data.length || form && result.data.some((part) => !part.kind.startsWith("form")) || result.get && (form || result.upload !== void 0) || result.head && (result.upload !== void 0 || result.data.length > 0) && !result.get) {
-    throw new CurlError(2, "Incompatible request body options");
-  }
-  if (result.data.some((part) => part.kind === "json") && result.data.some((part) => part.kind !== "json")) {
-    throw new CurlError(2, "Mixing JSON and other data modes is unsupported");
-  }
-  return result;
-}
-
-// packages/safe-bash/src/commands/network/curl.ts
-init_platform();
-
-// packages/safe-bash/src/commands/network/aggregate.ts
-init_platform();
-function createDeadlineOutput(context, destination, remaining) {
-  const lifetime = new AbortController();
-  const signal = AbortSignal.any([context.signal, lifetime.signal]);
-  const operation = createOutputOperation({ ...context, signal }, destination);
-  if (operation.signal.aborted) return operation;
-  const cancel = scheduleNetworkDeadline(remaining, () => lifetime.abort(new CurlError(28, "Operation timed out")));
-  operation.registerCleanup(cancel);
-  return operation;
-}
-async function deadlineDiagnostic(context, error, remaining) {
-  const operation = createDeadlineOutput(context, context.stderr, remaining);
-  try {
-    await diagnostic({ ...context, stderr: operation.output, signal: operation.signal }, error);
-  } finally {
-    await operation.close();
-  }
-}
-
-// packages/safe-bash/src/commands/network/url.ts
-init_platform();
-function curlRequestTarget(text) {
-  const scheme = text.indexOf("://");
-  if (scheme < 0) throw new CurlError(3, "Malformed URL; explicit HTTP(S) scheme required");
-  let start = scheme + 3;
-  while (start < text.length && !"/?#".includes(text[start])) {
-    if (text[start] === "\\") throw new CurlError(3, "Malformed URL authority");
-    start++;
-  }
-  const fragment = text.indexOf("#", start);
-  const target = text.slice(start, fragment < 0 ? void 0 : fragment);
-  const queryIndex = target.indexOf("?");
-  const path = queryIndex < 0 ? target : target.slice(0, queryIndex);
-  const query = queryIndex < 0 ? "" : target.slice(queryIndex);
-  const segments = [];
-  for (const segment of (path || "/").split("/")) {
-    if (segment === "..") {
-      if (segments.length > 1) segments.pop();
-    } else if (segment !== ".") segments.push(segment);
-  }
-  if (path.endsWith("/.") || path.endsWith("/..")) segments.push("");
-  return (segments.join("/") || "/") + query;
-}
-
-// packages/safe-bash/src/commands/network/glob.ts
-init_platform();
-function decimal(text) {
-  if (!text || ![...text].every((char) => char >= "0" && char <= "9")) throw new CurlError(3, "Malformed URL range");
-  const value = Number(text);
-  if (!Number.isSafeInteger(value)) throw new CurlError(3, "Malformed URL range");
-  return value;
-}
-function range(text, maximum, admit) {
-  const parts = text.split(":");
-  if (parts.length > 2) throw new CurlError(3, "Malformed URL range");
-  const ends = parts[0].split("-");
-  if (ends.length !== 2) throw new CurlError(3, "Malformed URL range");
-  const [left, right] = ends;
-  const character = left.length === 1 && right.length === 1 && (left >= "a" && right <= "z" && right >= "a" || left >= "A" && right <= "Z" && right >= "A");
-  const start = character ? left.charCodeAt(0) : decimal(left);
-  const end = character ? right.charCodeAt(0) : decimal(right);
-  const step = parts[1] === void 0 ? 1 : decimal(parts[1]);
-  if (start > end || step === 0 || step > end - start + 1) throw new CurlError(3, "Malformed URL range");
-  const count = Math.floor((end - start) / step) + 1;
-  if (count > maximum) throw new CurlError(2, "URL count exceeds host limit");
-  const width = !character && left.startsWith("0") ? left.length : 0;
-  admit(count, count * Math.max(width, character ? 1 : String(end).length));
-  return Array.from({ length: count }, (_, index) => character ? String.fromCharCode(start + index * step) : String(start + index * step).padStart(width, "0"));
-}
-function expandUrls(urls, globoff, limits) {
-  const result = [];
-  let bytes = 0;
-  let work = 0;
-  const charge = (size) => {
-    work += size;
-    if (work > limits.maxBufferBytes) throw new CurlError(2, "URL expansion work exceeds host limit");
-  };
-  for (const input of urls) {
-    let expanded = [{ url: "", captures: [] }];
-    const append = (suffix) => {
-      const retained = expanded.reduce((total, item) => total + byteLength(item.url) + byteLength(suffix) + item.captures.reduce((size, value) => size + byteLength(value), 0), bytes);
-      if (retained > limits.maxBufferBytes) throw new CurlError(2, "Expanded URLs exceed host buffer limit");
-      charge(retained - bytes);
-      expanded = expanded.map((item) => ({ ...item, url: item.url + suffix }));
-    };
-    for (let index = 0; index < input.length; ) {
-      const char = input[index];
-      if (globoff) {
-        append(input.slice(index));
-        break;
-      }
-      if (char === "\\" && "{}[]".includes(input[index + 1] ?? " ")) {
-        append(input[index + 1]);
-        index += 2;
-        continue;
-      }
-      if (char !== "{" && char !== "[") {
-        if (char === "}" || char === "]") throw new CurlError(3, "Unmatched URL glob delimiter");
-        let end = index + 1;
-        while (end < input.length && !"{}[]\\".includes(input[end])) end++;
-        append(input.slice(index, end));
-        index = end;
-        continue;
-      }
-      const close = input.indexOf(char === "{" ? "}" : "]", index + 1);
-      if (close < 0) throw new CurlError(3, "Unmatched URL glob delimiter");
-      const content = input.slice(index + 1, close);
-      if (char === "{" && content === "") throw new CurlError(3, "Malformed URL glob");
-      if (char === "[" && content.includes(":") && input.slice(0, index).endsWith("//")) {
-        append(input.slice(index, close + 1));
-        index = close + 1;
-        continue;
-      }
-      if ([...content].some((value) => "{}[]".includes(value))) throw new CurlError(3, "Nested URL globs are unsupported");
-      const maximum = Math.floor((limits.maxUrls - result.length) / expanded.length);
-      const admit = (count, valueBytes) => {
-        const prefixBytes = expanded.reduce((total, item) => total + byteLength(item.url) + item.captures.reduce((size, capture) => size + byteLength(capture), 0), 0);
-        const retained = count * prefixBytes + expanded.length * valueBytes * 2;
-        if (retained + bytes > limits.maxBufferBytes) throw new CurlError(2, "Expanded URLs exceed host buffer limit");
-        charge(retained);
-      };
-      const values2 = char === "{" ? content.split(",") : range(content, maximum, admit);
-      if (values2.length > maximum) throw new CurlError(2, "URL count exceeds host limit");
-      if (char === "{") admit(values2.length, values2.reduce((total, value) => total + byteLength(value), 0));
-      const next = [];
-      for (const item of expanded) for (const value of values2) {
-        next.push({ url: item.url + value, captures: [...item.captures, value] });
-      }
-      expanded = next;
-      index = close + 1;
-    }
-    for (const item of expanded) {
-      bytes += byteLength(item.url) + item.captures.reduce((total, value) => total + byteLength(value), 0);
-      if (bytes > limits.maxBufferBytes) throw new CurlError(2, "Expanded URLs exceed host buffer limit");
-      if (result.length >= limits.maxUrls) throw new CurlError(2, "URL count exceeds host limit");
-      result.push(item);
-    }
-  }
-  return result;
-}
-function globFilename(template, captures) {
-  let output = "";
-  for (let index = 0; index < template.length; ) {
-    if (template[index] !== "#") {
-      output += template[index++];
-      continue;
-    }
-    let end = index + 1;
-    while (end < template.length && template[end] >= "0" && template[end] <= "9") end++;
-    const number2 = Number(template.slice(index + 1, end));
-    const capture = captures[number2 - 1];
-    output += capture === void 0 ? template.slice(index, end) : capture;
-    index = end;
-  }
-  return output;
-}
-
-// packages/safe-bash/src/commands/network/input.ts
-init_platform();
-function whitespace(character) {
-  return " 	\r\n\v\f".includes(character);
-}
-function configArguments(text) {
-  const args = [];
-  for (const line of text.split("\n")) {
-    let offset = 0;
-    while (offset < line.length && whitespace(line[offset])) offset++;
-    if (offset === line.length || line[offset] === "#") continue;
-    const start = offset;
-    const dashed = line[offset] === "-";
-    while (offset < line.length && !whitespace(line[offset]) && (dashed || !"=:".includes(line[offset]))) offset++;
-    const option = line.slice(start, offset);
-    args.push(dashed ? option : `--${option}`);
-    while (offset < line.length && whitespace(line[offset])) offset++;
-    if (!dashed && "=:".includes(line[offset] ?? "\0")) offset++;
-    while (offset < line.length && whitespace(line[offset])) offset++;
-    if (offset === line.length) continue;
-    let value = "";
-    if (line[offset] === '"') {
-      offset++;
-      let closed = false;
-      while (offset < line.length) {
-        let character = line[offset++];
-        if (character === '"') {
-          closed = true;
-          break;
-        }
-        if (character === "\\" && offset < line.length) {
-          character = line[offset++];
-          character = { n: "\n", r: "\r", t: "	", v: "\v" }[character] ?? character;
-        }
-        value += character;
-      }
-      if (!closed) throw new CurlError(2, "Unterminated config string");
-      if (line.slice(offset).trim()) throw new CurlError(2, "Unexpected config string suffix");
-    } else value = line.slice(offset).trimEnd();
-    args.push(value);
-  }
-  return args;
-}
-function variableName(name) {
-  return name.length > 0 && [...name].every((character) => "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_".includes(character));
-}
-async function parseCurlInput(context, limits) {
-  const variables = /* @__PURE__ */ new Map();
-  const output = [];
-  let inputBytes = 0;
-  let outputBytes = 0;
-  let optionCount = 0;
-  const admit = (value) => {
-    inputBytes += byteLength(value);
-    if (inputBytes > limits.maxBufferBytes) throw new CurlError(2, "Curl input exceeds host buffer limit");
-    return value;
-  };
-  const append = (value) => {
-    outputBytes += byteLength(value);
-    if (outputBytes > limits.maxBufferBytes) throw new CurlError(2, "Expanded arguments exceed host buffer limit");
-    output.push(value);
-  };
-  const read = async (file) => {
-    try {
-      const maxBytes = limits.maxBufferBytes - inputBytes;
-      const bytes = file === "-" ? await collectNetworkBytes(context.stdin, { signal: context.signal, maxBytes }) : await withSignal(() => context.fs.readFile(pathOf(context, file), { signal: context.signal, ...Number.isFinite(maxBytes) ? { maxBytes } : {} }), context.signal);
-      context.signal.throwIfAborted();
-      inputBytes += bytes.length;
-      if (inputBytes > limits.maxBufferBytes) throw new CurlError(2, "Curl input exceeds host buffer limit");
-      return encodeBytes(bytes);
-    } catch (error) {
-      context.signal.throwIfAborted();
-      if (error instanceof CurlError) throw error;
-      throw new CurlError(26, "Failed to read virtual curl input");
-    }
-  };
-  const expand = (value) => {
-    let result = "";
-    let size = 0;
-    let offset = 0;
-    const appendPiece = (piece) => {
-      size += byteLength(piece);
-      if (size > limits.maxBufferBytes) throw new CurlError(2, "Variable expansion exceeds host buffer limit");
-      result += piece;
-    };
-    while (offset < value.length) {
-      const start = value.indexOf("{{", offset);
-      if (start < 0) {
-        appendPiece(value.slice(offset));
-        break;
-      }
-      appendPiece(value.slice(offset, start));
-      const end = value.indexOf("}}", start + 2);
-      if (end < 0) {
-        appendPiece(value.slice(start));
-        break;
-      }
-      const [name, ...functions] = value.slice(start + 2, end).split(":");
-      if (!variableName(name)) throw new CurlError(2, "Invalid expansion variable");
-      let bytes = variables.get(name) ?? new Uint8Array(0);
-      for (const functionName of functions) {
-        const requireSpace = (length) => {
-          if (length > limits.maxBufferBytes) throw new CurlError(2, "Variable transformation exceeds host buffer limit");
-        };
-        switch (functionName) {
-          case "trim": {
-            let start2 = 0, end2 = bytes.length;
-            while (start2 < end2 && whitespace(String.fromCharCode(bytes[start2]))) start2++;
-            while (end2 > start2 && whitespace(String.fromCharCode(bytes[end2 - 1]))) end2--;
-            bytes = bytes.subarray(start2, end2);
-            break;
-          }
-          case "json": {
-            requireSpace(bytes.length * 6);
-            bytes = encodeBytes(JSON.stringify(new TextDecoder("utf-8", { fatal: true }).decode(bytes)).slice(1, -1));
-            break;
-          }
-          case "url": {
-            requireSpace(bytes.length * 3);
-            let encoded = "";
-            for (const byte of bytes) {
-              const character = String.fromCharCode(byte);
-              encoded += "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~".includes(character) ? character : `%${byte.toString(16).toUpperCase().padStart(2, "0")}`;
-            }
-            bytes = encodeBytes(encoded);
-            break;
-          }
-          case "b64":
-            requireSpace(Math.ceil(bytes.length / 3) * 4);
-            bytes = encodeBytes(decodeBytes(bytes, "base64"));
-            break;
-          default:
-            throw new CurlError(2, "Unsupported variable expansion function");
-        }
-      }
-      let replacement;
-      try {
-        replacement = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-      } catch {
-        throw new CurlError(2, "Binary variable requires url or b64 expansion");
-      }
-      if (replacement.includes("\0")) throw new CurlError(2, "Variable expansion contains NUL");
-      appendPiece(replacement);
-      offset = end + 2;
-    }
-    return result;
-  };
-  const define = async (value) => {
-    const fromEnv = value.startsWith("%");
-    const spec = fromEnv ? value.slice(1) : value;
-    let delimiter = spec.indexOf("=");
-    const at = spec.indexOf("@");
-    if (delimiter < 0 || at >= 0 && at < delimiter) delimiter = at;
-    const name = delimiter < 0 ? spec : spec.slice(0, delimiter);
-    if (!variableName(name)) throw new CurlError(2, "Invalid variable name");
-    let content = fromEnv && context.env[name] !== void 0 ? encodeBytes(admit(context.env[name])) : void 0;
-    if (content === void 0) {
-      if (delimiter < 0) {
-        if (fromEnv) throw new CurlError(2, "Required environment variable is unset");
-        content = new Uint8Array(0);
-      } else content = spec[delimiter] === "@" ? await read(spec.slice(delimiter + 1)) : encodeBytes(admit(spec.slice(delimiter + 1)));
-    }
-    variables.set(name, content);
-  };
-  let ended = false;
-  const visit = async (args, depth) => {
-    if (depth > 16) throw new CurlError(2, "Config nesting exceeds host limit");
-    for (let index = 0; index < args.length; index++) {
-      context.signal.throwIfAborted();
-      if (++optionCount > limits.maxBufferBytes) throw new CurlError(2, "Curl option count exceeds host limit");
-      const argument = args[index];
-      if (ended || argument === "-" || !argument.startsWith("-")) {
-        append(argument);
-        continue;
-      }
-      if (argument === "--") {
-        ended = true;
-        append(argument);
-        continue;
-      }
-      const apply = async (name, attached) => {
-        const expanded = name.startsWith("expand-");
-        const base = expanded ? name.slice(7) : name;
-        const takesValue = longValues.has(base) || base === "config" || base === "variable";
-        if (expanded && !longValues.has(base)) throw new CurlError(2, "Unsupported expand option");
-        if (!takesValue) {
-          if (attached !== void 0) throw new CurlError(2, "Unexpected option argument");
-          append(`--${name}`);
-          return;
-        }
-        const value = attached ?? args[++index];
-        if (value === void 0) throw new CurlError(2, "Option requires an argument");
-        const resolved = expanded ? expand(value) : value;
-        if (base === "config") await visit(configArguments(decodeBytes(await read(resolved), "utf8")), depth + 1);
-        else if (base === "variable") await define(resolved);
-        else if (base === "header" && resolved.startsWith("@")) {
-          const text = decodeBytes(await read(resolved.slice(1)), "utf8");
-          for (const raw of text.split("\n")) {
-            context.signal.throwIfAborted();
-            const line = raw.endsWith("\r") ? raw.slice(0, -1) : raw;
-            if (!line || line.startsWith("#")) continue;
-            append("--header");
-            append(line);
-          }
-        } else {
-          append(`--${base}`);
-          append(resolved);
-        }
-      };
-      if (argument.startsWith("--")) {
-        const equals = argument.indexOf("=");
-        await apply(argument.slice(2, equals < 0 ? void 0 : equals), equals < 0 ? void 0 : argument.slice(equals + 1));
-      } else {
-        for (let offset = 1; offset < argument.length; offset++) {
-          const short = argument[offset];
-          const name = short === "K" ? "config" : values[short];
-          if (name) {
-            await apply(name, argument.slice(offset + 1) || void 0);
-            break;
-          }
-          if (!flags[short]) throw new CurlError(2, "Unsupported curl option");
-          await apply(flags[short]);
-        }
-      }
-    }
-  };
-  await visit(context.args, 0);
-  return parseArguments(output, limits);
-}
-
-// packages/safe-bash/src/commands/network/body.ts
-init_platform();
-
-// packages/safe-bash/src/commands/network/form-headers.ts
-init_platform();
-function validatePartHeader(header2) {
-  const colon = header2.indexOf(":");
-  if (colon <= 0) throw new CurlError(2, "Invalid multipart part header");
-  for (const character of header2.slice(0, colon)) {
-    const code = character.charCodeAt(0);
-    if (!(code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122 || "!#$%&'*+-.^_`|~".includes(character)))
-      throw new CurlError(2, "Invalid multipart part header");
-  }
-  for (const character of header2) {
-    const code = character.charCodeAt(0);
-    if (code < 32 && code !== 9 || code === 127)
-      throw new CurlError(2, "Invalid multipart part header");
-  }
-  return header2;
-}
-function filePartHeaders(bytes) {
-  const headers = [];
-  for (let line of decodeBytes(encodeBytes(bytes), "utf8").split("\n")) {
-    if (line.endsWith("\r")) line = line.slice(0, -1);
-    if (!line || line.startsWith("#")) continue;
-    if ((line.startsWith(" ") || line.startsWith("	")) && headers.length) {
-      headers[headers.length - 1] += " " + line.trim();
-      validatePartHeader(headers[headers.length - 1]);
-    } else headers.push(validatePartHeader(line));
-  }
-  return headers;
-}
-
-// packages/safe-bash/src/commands/network/form-content-type.ts
-init_platform();
-function token(character) {
-  if (character === void 0) return false;
-  const code = character.charCodeAt(0);
-  return code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122 || "!#$%&'*+-.^_`|~".includes(character);
-}
-function formContentType(input, start, fileList = false) {
-  let end = start;
-  const invalid = () => {
-    throw new CurlError(2, "Invalid multipart content type");
-  };
-  const readToken = () => {
-    const begin = end;
-    while (token(input[end])) end++;
-    if (end === begin) invalid();
-  };
-  const whitespace2 = () => {
-    while (input[end] === " " || input[end] === "	") end++;
-  };
-  readToken();
-  if (input[end++] !== "/") invalid();
-  readToken();
-  whitespace2();
-  while (end < input.length) {
-    if (fileList && input[end] === ",") break;
-    if (input[end] !== ";") invalid();
-    const separator = end++;
-    whitespace2();
-    if (["type=", "filename=", "encoder=", "headers="].some((attribute) => input.startsWith(attribute, end))) {
-      return { value: input.slice(start, separator), end: separator };
-    }
-    readToken();
-    whitespace2();
-    if (input[end++] !== "=") invalid();
-    whitespace2();
-    if (input[end] === '"') {
-      end++;
-      let closed = false;
-      while (end < input.length) {
-        const character = input[end++];
-        if (character === '"') {
-          closed = true;
-          break;
-        }
-        const literal = character === "\\" ? input[end++] : character;
-        if (literal === void 0 || literal.charCodeAt(0) < 32 || literal.charCodeAt(0) === 127) invalid();
-      }
-      if (!closed) invalid();
-    } else readToken();
-    whitespace2();
-  }
-  return { value: input.slice(start, end), end };
-}
-
-// packages/safe-bash/src/commands/network/body.ts
-function multipartBoundary() {
-  let boundary = "virtual-bash-";
-  for (const byte of randomBytes(18)) boundary += byte.toString(16).padStart(2, "0");
-  return boundary;
-}
-function percent(bytes) {
-  let output = "";
-  for (const byte of bytes) output += byte >= 65 && byte <= 90 || byte >= 97 && byte <= 122 || byte >= 48 && byte <= 57 || [45, 46, 95, 126].includes(byte) ? String.fromCharCode(byte) : byte === 32 ? "+" : `%${byte.toString(16).toUpperCase().padStart(2, "0")}`;
-  return encode(output);
-}
-function dataPart(argument) {
-  const value = argument.value;
-  if (argument.kind === "urlencode") {
-    const equals = value.indexOf("=");
-    if (equals >= 0) return [{ bytes: encode(equals ? `${value.slice(0, equals)}=` : "") }, { bytes: encode(value.slice(equals + 1)), urlencode: true }];
-    const at = value.indexOf("@");
-    if (at >= 0) return [{ prefix: encode(at ? `${value.slice(0, at)}=` : ""), file: value.slice(at + 1), urlencode: true }];
-    return [{ bytes: encode(value), urlencode: true }];
-  }
-  if (argument.kind !== "raw" && value.startsWith("@")) return [{ file: value.slice(1), strip: argument.kind === "data" }];
-  return [{ bytes: encode(value) }];
-}
-function quoted(value) {
-  if (/[\r\n\0]/.test(value)) throw new CurlError(2, "Invalid multipart field metadata");
-  return value.replace(/["\\]/g, "\\$&");
-}
-function formWord(input, start, file) {
-  const delimiter = (character) => character === ";" || file && character === ",";
-  if (input[start] === '"') {
-    let value = "";
-    for (let index = start + 1; index < input.length; index++) {
-      const character = input[index];
-      if (character === '"') {
-        let end2 = index + 1;
-        while (end2 < input.length && !delimiter(input[end2])) end2++;
-        return { value, end: end2 };
-      }
-      if (character === "\\" && (input[index + 1] === "\\" || input[index + 1] === '"')) {
-        value += input[++index];
-      } else value += character;
-    }
-  }
-  let end = start;
-  while (end < input.length && !delimiter(input[end])) end++;
-  return { value: input.slice(start, end), end };
-}
-var multipartContentTypes = /* @__PURE__ */ new Map([
-  ["gif", "image/gif"],
-  ["jpg", "image/jpeg"],
-  ["jpeg", "image/jpeg"],
-  ["png", "image/png"],
-  ["svg", "image/svg+xml"],
-  ["txt", "text/plain"],
-  ["html", "text/html"],
-  ["htm", "text/html"],
-  ["pdf", "application/pdf"],
-  ["xml", "application/xml"]
-]);
-function filenameContentType(filename) {
-  const basename = posixPath.basename(filename);
-  const dot = basename.lastIndexOf(".");
-  return dot < 0 ? void 0 : multipartContentTypes.get(basename.slice(dot + 1).toLowerCase());
-}
-function multipart(argument, boundary) {
-  const equals = argument.value.indexOf("=");
-  if (equals < 0) throw new CurlError(2, "Multipart form requires name=value");
-  const name = quoted(argument.value.slice(0, equals));
-  const input = argument.value.slice(equals + 1);
-  const upload = argument.kind === "form" && input.startsWith("@");
-  const isFile = argument.kind === "form" && (upload || input.startsWith("<"));
-  const entries = [];
-  let start = isFile ? 1 : 0;
-  do {
-    const word = argument.kind === "form" ? formWord(input, start, isFile) : { value: input, end: input.length };
-    const entry = { value: word.value };
-    if (isFile) {
-      if (!word.value) throw new CurlError(2, "Empty multipart file operand");
-      entry.file = word.value;
-      if (upload) entry.filename = posixPath.basename(word.value);
-    }
-    let end = word.end;
-    while (end < input.length && input[end] !== ",") {
-      const attributeStart = end + 1;
-      if (input.startsWith("type=", attributeStart)) {
-        const attribute = formContentType(input, attributeStart + 5, upload);
-        entry.type = attribute.value;
-        end = attribute.end;
-      } else if (input.startsWith("filename=", attributeStart)) {
-        const attribute = formWord(input, attributeStart + 9, upload);
-        entry.filename = attribute.value;
-        end = attribute.end;
-      } else if (input.startsWith("headers=", attributeStart)) {
-        const file = input[attributeStart + 8] === "@";
-        const attribute = formWord(input, attributeStart + 8 + (file ? 1 : 0), upload);
-        if (!attribute.value) throw new CurlError(2, "Empty multipart header operand");
-        (entry.headers ??= []).push({ value: file ? attribute.value : validatePartHeader(attribute.value), file });
-        end = attribute.end;
-      } else if (input.startsWith("encoder=", attributeStart)) {
-        const attribute = formWord(input, attributeStart + 8, upload);
-        entry.encoder = attribute.value.toLowerCase();
-        end = attribute.end;
-        if (!["binary", "8bit", "7bit", "base64", "quoted-printable"].includes(entry.encoder))
-          throw new CurlError(2, "Unsupported multipart transfer encoder");
-      } else throw new CurlError(2, "Unsupported multipart form attribute");
-    }
-    entries.push(entry);
-    if (end === input.length) break;
-    if (!upload) throw new CurlError(2, "Unsupported multipart file list");
-    start = end + 1;
-  } while (start <= input.length);
-  const mixed = entries.length > 1;
-  const childBoundary = mixed ? multipartBoundary() : boundary;
-  const disposition = `form-data${name ? `; name="${name}"` : ""}`;
-  const parts = [];
-  if (mixed) parts.push({ bytes: encode(`--${boundary}\r
-Content-Disposition: ${disposition}\r
-Content-Type: multipart/mixed; boundary=${childBoundary}\r
-\r
-`) });
-  for (const entry of entries) {
-    let preamble = `--${childBoundary}\r
-Content-Disposition: ${mixed ? "attachment" : disposition}`;
-    if (entry.filename !== void 0) preamble += `; filename="${quoted(entry.filename)}"`;
-    preamble += "\r\n";
-    if (entry.type || entry.filename !== void 0) {
-      const inferred = entry.filename === void 0 ? void 0 : filenameContentType(entry.filename) ?? (entry.file === void 0 ? void 0 : filenameContentType(entry.file));
-      preamble += `Content-Type: ${entry.type ?? inferred ?? "application/octet-stream"}\r
-`;
-    }
-    if (entry.encoder) preamble += `Content-Transfer-Encoding: ${entry.encoder}\r
-`;
-    const encoding = entry.encoder === void 0 ? {} : { encoder: entry.encoder };
-    parts.push({ bytes: encode(preamble), headers: entry.headers ?? [] }, entry.file !== void 0 ? { file: entry.file, ...encoding } : { bytes: encode(entry.value), ...encoding }, { bytes: encode("\r\n") });
-  }
-  if (mixed) parts.push({ bytes: encode(`--${childBoundary}--\r
-\r
-`) });
-  return parts;
-}
-async function* transfer(source, encoder, signal) {
-  if (!encoder || encoder === "binary" || encoder === "8bit") {
-    yield* source;
-    return;
-  }
-  let pending = [];
-  let column = 0;
-  let output = "";
-  const quotedByte = (byte, next, after) => {
-    if (byte === 13 && next === 10) {
-      output += "\r\n";
-      column = 0;
-      return 2;
-    }
-    const trailing = next === void 0 || next === 13 && after === 10;
-    const literal = byte >= 33 && byte <= 126 && byte !== 61 || (byte === 32 || byte === 9) && !trailing;
-    const token2 = literal ? String.fromCharCode(byte) : `=${byte.toString(16).toUpperCase().padStart(2, "0")}`;
-    if (column + token2.length > 75) {
-      output += "=\r\n";
-      column = 0;
-    }
-    output += token2;
-    column += token2.length;
-    return 1;
-  };
-  for await (const raw of source) {
-    for (let offset = 0; offset < raw.length; offset += 16 * 1024) {
-      signal.throwIfAborted();
-      const chunk = raw.subarray(offset, offset + 16 * 1024);
-      if (encoder === "7bit") {
-        if (chunk.some((byte) => byte > 127)) throw new CurlError(26, "Non-ASCII byte in 7bit multipart data");
-        yield chunk;
-        continue;
-      }
-      pending.push(...chunk);
-      let consumed = 0;
-      if (encoder === "base64") {
-        while (pending.length - consumed >= 57) {
-          if (column) output += "\r\n";
-          output += decodeBytes(encodeBytes(pending.slice(consumed, consumed + 57)), "base64");
-          consumed += 57;
-          column = 76;
-        }
-      } else {
-        while (pending.length - consumed >= 3)
-          consumed += quotedByte(pending[consumed], pending[consumed + 1], pending[consumed + 2]);
-      }
-      pending = pending.slice(consumed);
-      if (output) {
-        yield encode(output);
-        output = "";
-      }
-      await yieldTurn(signal);
-    }
-  }
-  signal.throwIfAborted();
-  if (encoder === "base64" && pending.length) {
-    if (column) output += "\r\n";
-    output += decodeBytes(encodeBytes(pending), "base64");
-  } else if (encoder === "quoted-printable") {
-    for (let i = 0; i < pending.length; )
-      i += quotedByte(pending[i], pending[i + 1], pending[i + 2]);
-  }
-  if (output) yield encode(output);
-}
-function createBody(context, args, limits) {
-  if (!args.data.length && args.upload === void 0) return void 0;
-  const parts = [];
-  let contentType;
-  const form = args.data.some((part) => part.kind.startsWith("form"));
-  if (form) {
-    const boundary = multipartBoundary();
-    contentType = `multipart/form-data; boundary=${boundary}`;
-    for (const argument of args.data) parts.push(...multipart(argument, boundary));
-    parts.push({ bytes: encode(`--${boundary}--\r
-`) });
-  } else if (args.upload !== void 0) parts.push({ file: args.upload });
-  else {
-    const json = args.data[0]?.kind === "json";
-    contentType = json ? "application/json" : "application/x-www-form-urlencoded";
-    args.data.forEach((argument, index) => {
-      if (index && !json) parts.push({ bytes: encode("&"), separator: true });
-      parts.push(...dataPart(argument));
-    });
-  }
-  const hasStdin = parts.some((part) => part.file === "-");
-  let opened = false;
-  let replayComplete = false;
-  let replayable = true;
-  let cachedBytes = 0;
-  let cache = [];
-  let stdinUsed = false;
-  const source = async function* (part, signal) {
-    if (part.bytes !== void 0) {
-      if (!part.headers) {
-        yield part.bytes;
-        return;
-      }
-      const headers = [];
-      let headerBytes = 0;
-      for (const header2 of part.headers) {
-        signal.throwIfAborted();
-        if (header2.file) {
-          const bytes = await collectNetworkBytes(source({ file: header2.value }, signal), {
-            signal,
-            maxBytes: Math.min(limits.maxBufferBytes, limits.maxUploadBytes) - headerBytes
-          });
-          headerBytes += bytes.length;
-          headers.push(...filePartHeaders(bytes));
-        } else {
-          headerBytes += encode(header2.value).length;
-          if (headerBytes > Math.min(limits.maxBufferBytes, limits.maxUploadBytes))
-            throw new CurlError(63, "Multipart headers exceed host byte limit");
-          headers.push(header2.value);
-        }
-      }
-      const overridden = new Set(headers.map((header2) => header2.slice(0, header2.indexOf(":")).toLowerCase()));
-      const defaults = decodeBytes(encodeBytes(part.bytes), "utf8").split("\r\n");
-      const preamble = defaults.filter((line, index) => index === 0 || line && !overridden.has(line.slice(0, line.indexOf(":")).toLowerCase()));
-      yield encode([...preamble, ...headers, "", ""].join("\r\n"));
-      return;
-    }
-    if (part.file === "-") {
-      if (!stdinUsed) {
-        stdinUsed = true;
-        yield* readBytes(context.stdin, signal);
-      }
-      return;
-    }
-    try {
-      const path = pathOf(context, part.file);
-      const capabilities = await context.fs.capabilitiesFor?.(path, { signal }) ?? context.fs.capabilities;
-      signal.throwIfAborted();
-      if (context.fs.readStream && capabilities.streamingRead !== false) yield* readBytes(context.fs.readStream(path, { signal }), signal);
-      else yield await context.fs.readFile(path, { signal, ...Number.isFinite(Math.min(limits.maxBufferBytes, limits.maxUploadBytes)) ? { maxBytes: Math.min(limits.maxBufferBytes, limits.maxUploadBytes) } : {} });
-    } catch (error) {
-      signal.throwIfAborted();
-      if (error instanceof CurlError) throw error;
-      throw new CurlError(26, "Failed to read virtual upload file");
-    }
-  };
-  return {
-    ...contentType === void 0 ? {} : { contentType },
-    open(signal) {
-      return (async function* () {
-        if (hasStdin && opened) {
-          if (!replayComplete || !replayable) throw new CurlError(65, "Cannot replay stdin upload within the host buffer limit");
-          for (const chunk of cache) {
-            signal.throwIfAborted();
-            yield chunk.slice();
-          }
-          return;
-        }
-        opened = true;
-        let count = 0;
-        let chunks = 0;
-        for (const part of parts) {
-          if (part.separator && count === 0) continue;
-          let prefix = part.prefix;
-          for await (const raw of transfer(source(part, signal), part.encoder, signal)) {
-            if (++chunks % 256 === 0) await yieldTurn(signal);
-            for (let offset = 0; offset < raw.length; offset += 16 * 1024) {
-              signal.throwIfAborted();
-              let chunk = raw.subarray(offset, offset + 16 * 1024);
-              if (part.strip) chunk = chunk.filter((byte) => byte !== 0 && byte !== 10 && byte !== 13);
-              if (part.urlencode) chunk = percent(chunk);
-              count += chunk.length + (prefix?.length ?? 0);
-              if (count > limits.maxUploadBytes) throw new CurlError(63, "Upload exceeds host byte limit");
-              if (prefix?.length) {
-                const prefixed = new Uint8Array(prefix.length + chunk.length);
-                prefixed.set(prefix);
-                prefixed.set(chunk, prefix.length);
-                chunk = prefixed;
-                prefix = void 0;
-              }
-              if (hasStdin && replayable) {
-                cachedBytes += chunk.length;
-                if (cachedBytes > limits.maxBufferBytes) {
-                  replayable = false;
-                  cache = [];
-                } else cache.push(new Uint8Array(chunk));
-              }
-              if (chunk.length) yield chunk;
-            }
-          }
-        }
-        replayComplete = true;
-      })();
-    }
-  };
-}
-async function queryData(body, signal, limits) {
-  try {
-    return decodeBytes(encodeBytes(await collectNetworkBytes(body.open(signal), { signal, maxBytes: limits.maxBufferBytes })), "utf8");
-  } catch (error) {
-    signal.throwIfAborted();
-    if (error instanceof CurlError) throw error;
-    throw new CurlError(63, "Query data exceeds host buffer limit");
-  }
-}
-
-// packages/safe-bash/src/commands/network/decode.ts
-init_platform();
-var maxEncodingLayers = 4;
-async function* decodeContent(source, encoding, signal, maxBytes) {
-  let layers = 1;
-  for (const character of encoding) {
-    if (character === "," && ++layers > maxEncodingLayers) throw new CurlError(61, "Too many content encoding layers");
-  }
-  const formats = encoding.split(",").map((value) => value.trim().toLowerCase()).filter((value) => value !== "identity");
-  if (formats.some((value) => value !== "gzip" && value !== "deflate")) throw new CurlError(61, "Unsupported content encoding");
-  if (!formats.length) {
-    yield* source;
-    return;
-  }
-  const iterator = readBytes(source, signal)[Symbol.asyncIterator]();
-  let inputError;
-  let inputFailed = false;
-  let stream = new ReadableStream({
-    async pull(controller) {
-      try {
-        const next = await iterator.next();
-        if (next.done) controller.close();
-        else controller.enqueue(new Uint8Array(next.value));
-      } catch (error) {
-        inputFailed = true;
-        inputError = error;
-        controller.error(error);
-      }
-    },
-    async cancel() {
-      await iterator.return?.(void 0);
-    }
-  }, { highWaterMark: 0 });
-  let budgetError;
-  for (const format of formats.reverse()) {
-    let decodedBytes = 0;
-    stream = stream.pipeThrough(new DecompressionStream(format)).pipeThrough(new TransformStream({
-      transform(chunk, controller) {
-        signal.throwIfAborted();
-        decodedBytes += chunk.byteLength;
-        if (decodedBytes > maxBytes) {
-          budgetError = new CurlError(63, "Decoded response exceeds download byte limit");
-          throw budgetError;
-        }
-        controller.enqueue(chunk);
-      }
-    }));
-  }
-  const reader = stream.getReader();
-  try {
-    while (true) {
-      const next = await withSignal(() => reader.read(), signal);
-      if (next.done) return;
-      yield next.value;
-    }
-  } catch {
-    signal.throwIfAborted();
-    if (inputFailed) throw inputError;
-    if (budgetError) throw budgetError;
-    throw new CurlError(61, "Invalid compressed response body");
-  } finally {
-    await reader.cancel().catch(() => void 0);
-    await iterator.return(void 0).catch(() => void 0);
-    reader.releaseLock();
-  }
-}
-
-// packages/safe-bash/src/commands/network/output.ts
-init_platform();
-function responseHeaders(response, maxBytes) {
-  if (!Number.isInteger(response.status) || response.status < 100 || response.status > 599 || /[\r\n]/.test(response.statusText)) {
-    throw new CurlError(56, "Invalid HTTP response status");
-  }
-  const version = response.httpVersion ?? "1.1";
-  if (!/^\d(?:\.\d)?$/.test(version)) throw new CurlError(56, "Invalid HTTP response version");
-  let text = `HTTP/${version} ${response.status} ${response.statusText}\r
-`;
-  for (const [name, value] of response.headers) {
-    if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name) || /[\r\n\0]/.test(value)) throw new CurlError(56, "Invalid HTTP response header");
-    text += `${name}: ${value}\r
-`;
-    if (byteLength(text, "latin1") > maxBytes) throw new CurlError(63, "Response headers exceed host byte limit");
-  }
-  return new Uint8Array(encodeBytes(`${text}\r
-`, "latin1"));
-}
-async function writeOutput(context, path, source, signal, append = false, preserveEmpty = false) {
-  if (path === void 0 || path === "-") {
-    try {
-      for await (const chunk of readBytes(source, signal)) {
-        try {
-          await writeBytes(context.stdout, chunk, signal);
-        } catch {
-          signal.throwIfAborted();
-          throw new CurlError(23, "Failed writing output");
-        }
-      }
-    } catch (error) {
-      await context.stdout[outputFailure]?.(error);
-      throw error;
-    }
-    return;
-  }
-  try {
-    let target = preserveEmpty ? void 0 : await openFileOutput({ ...context, signal, outputBudget: "independent" }, pathOf(context, path), append ? "a" : "w");
-    try {
-      for await (const chunk of readBytes(source, target?.signal ?? signal)) {
-        if (preserveEmpty && chunk.length === 0) continue;
-        target ??= await openFileOutput({ ...context, signal, outputBudget: "independent" }, pathOf(context, path), append ? "a" : "w");
-        await target.sink.write(chunk);
-      }
-      await target?.finish();
-    } catch (error) {
-      await target?.abort(error);
-      throw error;
-    }
-  } catch (error) {
-    signal.throwIfAborted();
-    if (error instanceof CurlError) throw error;
-    throw new CurlError(23, error instanceof FsError ? `Failed writing virtual output file: ${error.message}` : "Failed writing virtual output file");
-  }
-}
-async function dumpHeaders(context, path, bytes, append, signal) {
-  try {
-    if (path === "-") await writeBytes(context.stdout, bytes, signal);
-    else {
-      const target = await openFileOutput({ ...context, signal, outputBudget: "independent" }, pathOf(context, path), append ? "a" : "w");
-      try {
-        await target.sink.write(bytes);
-        await target.finish();
-      } catch (error) {
-        await target.abort(error);
-        throw error;
-      }
-    }
-  } catch {
-    signal.throwIfAborted();
-    throw new CurlError(23, "Failed writing response headers");
-  }
-}
-function writeOutFormat(format, values2, maxBytes) {
-  let result = "";
-  let bytes = 0;
-  const sizes = /* @__PURE__ */ new Map();
-  const append = (text) => {
-    let size = sizes.get(text);
-    if (size === void 0) {
-      size = byteLength(text);
-      sizes.set(text, size);
-    }
-    if (size > maxBytes - bytes) throw new CurlError(63, "Write-out exceeds host buffer limit");
-    bytes += size;
-    result += text;
-  };
-  for (let index = 0; index < format.length; index++) {
-    const character = format[index];
-    if (character === "\\") {
-      const next = format[++index];
-      append(next === "n" ? "\n" : next === "r" ? "\r" : next === "t" ? "	" : next === void 0 ? "\\" : `\\${next}`);
-    } else if (character === "%" && format[index + 1] === "%") {
-      append("%");
-      index++;
-    } else if (character === "%" && format[index + 1] === "{") {
-      const end = format.indexOf("}", index + 2);
-      if (end < 0) throw new CurlError(2, "Invalid write-out format");
-      const name = format.slice(index + 2, end);
-      if (!Object.hasOwn(values2, name)) throw new CurlError(2, "Unsupported write-out variable");
-      append(values2[name]);
-      index = end;
-    } else {
-      const start = index;
-      while (index + 1 < format.length && format[index + 1] !== "%" && format[index + 1] !== "\\") index++;
-      append(format.slice(start, index + 1));
-    }
-  }
-  return encode(result);
-}
-
-// packages/safe-bash/src/commands/network/curl.ts
-var retryStatuses = /* @__PURE__ */ new Set([408, 429, 500, 502, 503, 504]);
-var redirectStatuses = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
-var writeOutDefaults = Object.freeze({
-  http_code: "000",
-  response_code: "000",
-  url_effective: "",
-  redirect_url: "",
-  content_type: "",
-  size_download: "0",
-  size_upload: "0",
-  num_redirects: "0",
-  num_retries: "0",
-  time_total: "0.000000",
-  exitcode: "0",
-  errormsg: "",
-  filename_effective: "",
-  method: "GET",
-  http_version: ""
-});
-function parseUrl(text, redirect = false) {
-  if (/[\s\x00-\x1f\x7f]/.test(text)) throw new CurlError(3, "Malformed URL");
-  let url;
-  try {
-    url = new URL(text);
-  } catch {
-    throw new CurlError(3, "Malformed URL; explicit HTTP(S) scheme required");
-  }
-  if (!["http:", "https:"].includes(url.protocol)) throw new CurlError(1, "Only HTTP and HTTPS are supported");
-  if (!url.hostname) throw new CurlError(3, "Malformed URL");
-  let user;
-  if (url.username || url.password) {
-    if (redirect) throw new CurlError(3, "Redirect URLs may not supply credentials");
-    try {
-      user = `${decodeURIComponent(url.username)}:${decodeURIComponent(url.password)}`;
-    } catch {
-      throw new CurlError(3, "Malformed URL credentials");
-    }
-    url.username = "";
-    url.password = "";
-  }
-  url.hash = "";
-  return { url, ...user === void 0 ? {} : { user } };
-}
-function requestHeaders(args, contentType, user, scoped, maxBytes, previous) {
-  const json = args.data[0]?.kind === "json";
-  if (json) contentType = "application/json";
-  const defaults = [["Accept", json ? "application/json" : "*/*"], ["User-Agent", args.agent ?? "virtual-bash-curl/0.0"]];
-  if (contentType !== void 0) defaults.push(["Content-Type", contentType]);
-  if (args.compressed) defaults.push(["Accept-Encoding", "gzip, deflate"]);
-  const referer = args.autoReferer && previous !== void 0 ? previous : args.referer;
-  if (referer) {
-    validateRequestHeader("Referer", referer);
-    defaults.push(["Referer", referer]);
-  }
-  if (scoped && args.etag !== void 0) defaults.push(["If-None-Match", args.etag]);
-  if (args.range !== void 0) defaults.push(["Range", `bytes=${args.range}`]);
-  if (scoped && user !== void 0) defaults.push(["Authorization", `Basic ${decodeBytes(encodeBytes(user), "base64")}`]);
-  if (scoped && args.bearer !== void 0) {
-    if (/[\r\n\0]/.test(args.bearer)) throw new CurlError(2, "Invalid bearer token");
-    defaults.push(["Authorization", `Bearer ${args.bearer}`]);
-  }
-  const custom = scoped ? args.headers : [];
-  const names = new Set(custom.map(([name]) => name.toLowerCase()));
-  const result = [
-    ...defaults.filter(([name]) => !names.has(name.toLowerCase())),
-    ...custom.filter((entry) => entry[1] !== null)
-  ];
-  if (result.reduce((size, [name, value]) => size + byteLength(name + value) + 4, 0) > maxBytes) {
-    throw new CurlError(63, "Request headers exceed host byte limit");
-  }
-  return result;
-}
-async function stop(response, signal) {
-  if (!response) return;
-  const cleanup = Promise.resolve().then(() => response.dispose());
-  void cleanup.catch(() => {
-  });
-  if (!signal.aborted) await withSignal(() => cleanup, signal).catch(() => {
-  });
-}
-function pipeClosed(error) {
-  return error instanceof Error && "code" in error && error.code === "EPIPE";
-}
-function remoteFilename(url) {
-  if (url.pathname === "/") return "curl_response";
-  const name = posixPath.basename(url.pathname);
-  if (!name || name === "/" || name === "." || name === "..") throw new CurlError(23, "URL has no safe remote filename");
-  return name;
-}
-async function existingSize(context, output, signal) {
-  try {
-    return (await context.fs.stat(pathOf(context, output), { signal })).size;
-  } catch (error) {
-    signal.throwIfAborted();
-    if (error instanceof FsError && error.code === "ENOENT") return void 0;
-    throw new CurlError(23, "Failed inspecting virtual output file");
-  }
-}
-function createCurlCommand(options) {
-  return createTransferCommand(options, {
-    name: "curl",
-    help: "Usage: curl [HTTP(S) URL] [-X METHOD] [-H HEADER] [-d DATA] [-L] [-o VFSFILE]\nExplicit host authorization is required. See network/README.md for supported flags and limits.\n",
-    version: "virtual-bash curl 0.0 (HTTP HTTPS; Node streaming transport)\n",
-    parse: parseCurlInput,
-    status: (code) => code
-  });
-}
-function createTransferCommand(options, profile) {
-  if (typeof options?.authorize !== "function") throw new TypeError(`${profile.name} requires an explicit network authorizer`);
-  const limits = limitsFor(options.limits);
-  if (requiresFiniteUrlLimits && (!Number.isFinite(limits.maxUrls) || !Number.isFinite(limits.maxBufferBytes))) {
-    throw new TypeError("Portable network commands require finite maxUrls and maxBufferBytes limits");
-  }
-  const transport = options.transport ?? createDefaultHttpTransport({ maxHeaderBytes: limits.maxHeaderBytes });
-  if (typeof transport !== "function") throw new TypeError("Invalid HTTP transport");
-  const authorize = options.authorize;
-  const executions = /* @__PURE__ */ new WeakMap();
-  const def = {
-    name: profile.name,
-    async execute(context) {
-      context.signal.throwIfAborted();
-      const scope = context.executionScope ?? {};
-      let started = executions.get(scope) ?? performance.now();
-      const parsing = new AbortController();
-      const parsingSignal = AbortSignal.any([context.signal, parsing.signal]);
-      inheritYieldCheckpoint(context.signal, parsingSignal);
-      const cancelParsingDeadline = scheduleNetworkDeadline(
-        limits.maxTotalTimeMs - (performance.now() - started),
-        () => parsing.abort(new CurlError(28, "Operation timed out"))
-      );
-      let args;
-      let expanded;
-      try {
-        if (context.args.reduce((size, value) => size + byteLength(value), 0) > limits.maxBufferBytes) throw new CurlError(2, "Arguments exceed host buffer limit");
-        args = await withSignal(() => profile.parse({ ...context, signal: parsingSignal }, limits), parsingSignal);
-        parsingSignal.throwIfAborted();
-        if (performance.now() - started >= limits.maxTotalTimeMs) throw new CurlError(28, "Operation timed out");
-        if (args.help || args.version) {
-          await writeBytes(context.stdout, encode(args.version ? profile.version : profile.help), context.signal);
-          return { exitCode: 0 };
-        }
-        if (args.connectTimeoutMs !== void 0 && transport.supportsConnectTimeout !== true) {
-          throw new CurlError(2, "Transport cannot enforce connection timeout");
-        }
-        if (args.caFile !== void 0 && transport.supportsRequestCa !== true) {
-          throw new CurlError(2, "Transport cannot enforce request CA trust");
-        }
-        if (args.httpVersion !== void 0 && !transport.supportedHttpVersions?.includes(args.httpVersion)) {
-          throw new CurlError(2, "Transport cannot enforce requested HTTP version");
-        }
-        if (args.ignoreContentLength && transport.supportsIgnoreContentLength !== true) {
-          throw new CurlError(2, "Transport cannot enforce ignored Content-Length");
-        }
-        expanded = expandUrls(args.urls, args.globoff, limits);
-        for (const item of expanded) parseUrl(item.url);
-        if (!args.download) {
-          expanded = args.urls.flatMap((url, index) => expandUrls([url], args.globoff, limits).map((item) => ({ ...item, destination: args.outputs?.[index] ?? { remoteName: false } })));
-        }
-      } catch (error) {
-        context.signal.throwIfAborted();
-        const failure = error instanceof CurlError ? error : new CurlError(2, `Invalid ${profile.name} arguments`);
-        const reported = new CurlError(profile.status(failure.exitCode), failure.message);
-        if (failure.exitCode === 28) {
-          try {
-            await deadlineDiagnostic(context, reported, 0);
-          } catch (error2) {
-            context.signal.throwIfAborted();
-            if (!(error2 instanceof CurlError)) throw error2;
-          }
-        } else await diagnostic(context, reported);
-        return { exitCode: profile.status(failure.exitCode) };
-      } finally {
-        cancelParsingDeadline();
-      }
-      started = Math.min(started, executions.get(scope) ?? started);
-      executions.set(scope, started);
-      let exitCode = 0;
-      const headerState = { dumped: false };
-      for (const item of expanded) {
-        context.signal.throwIfAborted();
-        if (performance.now() - started >= limits.maxTotalTimeMs) {
-          const failure = new CurlError(28, "Operation timed out");
-          if (!args.silent || args.showError) {
-            try {
-              await deadlineDiagnostic(context, failure, 0);
-            } catch (error) {
-              context.signal.throwIfAborted();
-              if (!(error instanceof CurlError)) throw error;
-            }
-          }
-          return { exitCode: profile.status(failure.exitCode) };
-        }
-        const transferArgs = { ...args };
-        if (item.destination) {
-          delete transferArgs.output;
-          transferArgs.remoteName = item.destination.remoteName;
-          if (item.destination.output !== void 0) transferArgs.output = item.destination.output;
-        }
-        if (transferArgs.output !== void 0) transferArgs.output = globFilename(transferArgs.output, item.captures);
-        const code = await transfer2(context, transferArgs, item.url, limits, transport, authorize, started, profile.status, headerState);
-        exitCode = args.download ? code || exitCode : code;
-      }
-      return { exitCode };
-    }
-  };
-  builtInDirectContextExecutors.add(def.execute);
-  return def;
-}
-async function transfer2(context, args, input, limits, transport, authorize, started, status, headerState) {
-  const start = performance.now();
-  const remaining = () => Math.min(args.maxTimeMs - (performance.now() - start), limits.maxTotalTimeMs - (performance.now() - started));
-  const hasFileOutput = args.etagSave !== void 0 && args.etagSave !== "-" || args.remoteName || args.output !== void 0 && args.output !== "-" || args.dumpHeader !== void 0 && args.dumpHeader !== "-";
-  const operation = createDeadlineOutput(context, hasFileOutput ? { write: (chunk) => context.stdout.write(chunk) } : context.stdout, remaining());
-  const signal = operation.signal;
-  const borrowed = context.stdout.ownedOutput ? { [Symbol.asyncIterator]() {
-    const iterator = context.stdin[Symbol.asyncIterator]();
-    return { next: () => iterator.next() };
-  } } : context.stdin;
-  let response;
-  let failure;
-  const values2 = { ...writeOutDefaults };
-  let format = args.writeOut;
-  let formatReady = false;
-  let dumped = false;
-  let downloaded = 0;
-  let uploaded = 0;
-  let included = [];
-  let closedOutput = false;
-  const publish = async (bytes) => {
-    const writing = createDeadlineOutput(context, context.stdout, remaining());
-    try {
-      await writeBytes(writing.output, bytes, writing.signal);
-    } catch (error) {
-      context.signal.throwIfAborted();
-      if (!pipeClosed(error)) throw error;
-      closedOutput = true;
-    } finally {
-      await writing.close();
-    }
-  };
-  try {
-    if (args.etagCompare !== void 0) {
-      let bytes;
-      try {
-        bytes = await withSignal(() => context.fs.readFile(pathOf(context, args.etagCompare), { signal, ...Number.isFinite(limits.maxBufferBytes) ? { maxBytes: limits.maxBufferBytes } : {} }), signal);
-      } catch (error) {
-        signal.throwIfAborted();
-        if (!(error instanceof FsError && error.code === "ENOENT")) throw new CurlError(26, "Failed reading virtual ETag file");
-        bytes = new Uint8Array();
-      }
-      if (bytes.length > limits.maxBufferBytes) throw new CurlError(63, "ETag file exceeds host buffer limit");
-      const text = decodeBytes(encodeBytes(bytes), "latin1");
-      args.etag = text.split("\r").join("").split("\n").join("") || '""';
-      validateRequestHeader("If-None-Match", args.etag);
-    }
-    let ca;
-    if (args.caFile !== void 0) {
-      try {
-        const bytes = await withSignal(() => context.fs.readFile(pathOf(context, args.caFile), { signal, ...Number.isFinite(limits.maxBufferBytes) ? { maxBytes: limits.maxBufferBytes } : {} }), signal);
-        signal.throwIfAborted();
-        if (bytes.length > limits.maxBufferBytes) throw new CurlError(77, "CA certificate exceeds host buffer limit");
-        ca = new Uint8Array(bytes);
-      } catch {
-        signal.throwIfAborted();
-        throw new CurlError(77, "Failed reading virtual CA certificate file");
-      }
-    }
-    if (format?.startsWith("@")) {
-      try {
-        const bytes = format === "@-" ? await collectNetworkBytes(borrowed, { signal, maxBytes: limits.maxBufferBytes }) : await withSignal(() => context.fs.readFile(pathOf(context, format.slice(1)), { signal, ...Number.isFinite(limits.maxBufferBytes) ? { maxBytes: limits.maxBufferBytes } : {} }), signal);
-        format = decodeBytes(encodeBytes(bytes), "utf8");
-      } catch {
-        signal.throwIfAborted();
-        throw new CurlError(26, "Failed reading write-out format");
-      }
-    }
-    if (format !== void 0) {
-      writeOutFormat(format, values2, limits.maxBufferBytes);
-      formatReady = true;
-    }
-    const parsed = parseUrl(input);
-    const initial = parsed.url;
-    const rawTarget = curlRequestTarget(input);
-    let initialTarget = rawTarget;
-    const initialSearch = initial.search;
-    if (args.query?.length) {
-      const queryArgs = { ...args, data: args.query };
-      delete queryArgs.upload;
-      const queryBody = createBody({ ...context, stdin: borrowed }, queryArgs, limits);
-      const encoded = await queryData(queryBody, signal, limits);
-      let query = "";
-      for (let index = 0; index < encoded.length; index++) {
-        const character = encoded[index];
-        if (character.charCodeAt(0) < 33 || character.charCodeAt(0) > 126) throw new CurlError(3, "Query data must be URL encoded");
-        if (character === "%" && index + 2 < encoded.length && "0123456789abcdefABCDEF".includes(encoded[index + 1]) && "0123456789abcdefABCDEF".includes(encoded[index + 2])) {
-          query += encoded.slice(index, index + 3).toLowerCase();
-          index += 2;
-        } else query += character;
-      }
-      initial.search += `${initial.search ? "&" : "?"}${query}`;
-    }
-    let body = createBody({ ...context, stdin: borrowed }, args, limits);
-    if (args.get && body) {
-      const query = await queryData(body, signal, limits);
-      if (/[^\x21-\x7e]/.test(query)) throw new CurlError(3, "GET data must be URL encoded");
-      initial.search += `${initial.search ? "&" : "?"}${query.replace(/%[0-9a-f]{2}/gi, (escape) => escape.toLowerCase())}`;
-      body = void 0;
-    }
-    if (initial.search !== initialSearch) initialTarget += initial.search.slice(initialSearch.length);
-    let output = args.remoteName ? args.directoryIndex && initial.pathname.endsWith("/") ? args.directoryIndex : remoteFilename(initial) : args.output;
-    if (args.outputDirectory !== void 0 && output !== void 0 && output !== "-" && (!args.download || args.remoteName)) {
-      output = `${args.outputDirectory}/${output}`;
-    }
-    values2.filename_effective = output && output !== "-" ? output : "";
-    let resumeOffset = 0;
-    if (args.continueAt !== void 0) {
-      resumeOffset = args.continueAt === "auto" ? output && output !== "-" ? await existingSize(context, output, signal) ?? 0 : 0 : args.continueAt;
-    }
-    if (args.download && !args.download.spider && output && output !== "-") {
-      if (args.download.noClobber && !args.download.contentDisposition && await existingSize(context, output, signal) !== void 0) return 0;
-      if (args.download.resume) resumeOffset = await existingSize(context, output, signal) ?? 0;
-    }
-    if (output && output !== "-" && args.dumpHeader && args.dumpHeader !== "-" && normalizePath(pathOf(context, output)) === normalizePath(pathOf(context, args.dumpHeader))) {
-      throw new CurlError(23, "Body and header output files must differ");
-    }
-    const initialRequestMethod = args.head || args.download?.spider ? "HEAD" : args.get ? "GET" : args.upload !== void 0 ? "PUT" : body ? "POST" : "GET";
-    const initialMethod = args.method ?? initialRequestMethod;
-    requestHeaders(args, body?.contentType, args.user ?? parsed.user, true, limits.maxHeaderBytes);
-    attempts: for (let attempt = 0; attempt <= args.retries; attempt++) {
-      if (attempt && args.download?.resume && output && output !== "-") resumeOffset = await existingSize(context, output, signal) ?? 0;
-      values2.num_retries = String(attempt);
-      downloaded = 0;
-      uploaded = 0;
-      failure = void 0;
-      let current = new URL(initial);
-      let currentUrl = current.origin + initialTarget;
-      let method = initialMethod;
-      let requestMethod = initialRequestMethod;
-      let currentBody = body;
-      let credentialsInScope = true;
-      let previous;
-      let redirects = 0;
-      included = [];
-      let headerBytes = 0;
-      while (true) {
-        signal.throwIfAborted();
-        if (remaining() <= 0) throw new CurlError(28, "Operation timed out");
-        values2.url_effective = currentUrl;
-        values2.method = method;
-        let denyPrivateNetworks = false;
-        let allowed;
-        try {
-          allowed = await withSignal(() => authorize({
-            url: currentUrl,
-            method,
-            attempt,
-            signal,
-            requirePrivateNetworkDeny() {
-              denyPrivateNetworks = true;
-            },
-            ...previous === void 0 ? {} : { redirectFrom: previous }
-          }), signal);
-        } catch {
-          signal.throwIfAborted();
-          throw new CurlError(7, "Network authorization failed");
-        }
-        if (remaining() <= 0) throw new CurlError(28, "Operation timed out");
-        if (allowed !== true) throw new CurlError(7, "Network access denied by host policy");
-        const policy = denyPrivateNetworks ? { denyPrivateNetworks: true } : {};
-        if (policy.denyPrivateNetworks && transport.supportsPrivateNetworkDeny !== true) {
-          throw new CurlError(7, "Transport cannot enforce private network policy");
-        }
-        const headers = requestHeaders(resumeOffset ? { ...args, range: `${resumeOffset}-` } : args, currentBody?.contentType, args.user ?? parsed.user, credentialsInScope, limits.maxHeaderBytes, previous);
-        if (args.verbose) await writeBytes(context.stderr, encode(`> ${method} ${current.origin}
-${headers.map(([name]) => `> ${name}: [redacted]
-`).join("")}`), signal);
-        const upload = currentBody && (async function* () {
-          for await (const chunk of currentBody.open(signal)) {
-            uploaded += chunk.length;
-            yield chunk;
-          }
-        })();
-        try {
-          response = await operation.acquire(async () => {
-            const acquired = await transport({
-              url: currentUrl,
-              method,
-              headers,
-              signal,
-              responseBodyMode: args.download && method === "HEAD" || args.head || args.download?.spider ? "omit" : args.fail ? "omit-on-http-error" : "read",
-              ...args.httpVersion === void 0 ? {} : { httpVersion: args.httpVersion },
-              ...args.ignoreContentLength ? { ignoreContentLength: true } : {},
-              registerCleanup: operation.registerCleanup,
-              ...policy,
-              ...upload ? { body: upload } : {},
-              ...ca === void 0 ? {} : { ca },
-              ...args.connectTimeoutMs === void 0 ? {} : { connectTimeoutMs: args.connectTimeoutMs }
-            });
-            let cleanup;
-            return { ...acquired, dispose() {
-              cleanup ??= Promise.resolve().then(() => acquired.dispose());
-              return cleanup;
-            } };
-          }, (result) => result.dispose());
-        } catch (error) {
-          signal.throwIfAborted();
-          const code = error && typeof error === "object" && "code" in error ? error.code : void 0;
-          if (args.retryTransport && (code === "ECONNRESET" || code === "ETIMEDOUT" || code === "EPIPE") && attempt < args.retries) {
-            await delay(args.retryDelayMs || Math.min(1e3 * 2 ** attempt, 6e5), signal);
-            continue attempts;
-          }
-          throw error;
-        }
-        const block = responseHeaders(response, limits.maxHeaderBytes);
-        headerBytes += block.length;
-        if (headerBytes > limits.maxHeaderBytes) throw new CurlError(63, "Combined response headers exceed host byte limit");
-        values2.http_code = values2.response_code = String(response.status).padStart(3, "0");
-        values2.content_type = header(response.headers, "content-type") ?? "";
-        values2.http_version = response.httpVersion ?? "1.1";
-        if (args.verbose) await writeBytes(context.stderr, encode(`< HTTP ${response.status}
-`), signal);
-        if (args.dumpHeader !== void 0) {
-          if (args.dumpHeader === "-") await publish(block);
-          else {
-            await dumpHeaders(context, args.dumpHeader, block, dumped || headerState.dumped, signal);
-            headerState.dumped = true;
-          }
-          dumped = true;
-        }
-        if (args.etagSave !== void 0) {
-          const tag = header(response.headers, "etag");
-          const bytes = tag === void 0 ? new Uint8Array() : new Uint8Array(encodeBytes(`${tag}
-`, "latin1"));
-          if (args.etagSave === "-") await publish(bytes);
-          else await writeOutput(context, args.etagSave, toByteSource(bytes), signal);
-        }
-        if (args.head || args.include) included.push(block);
-        const location = header(response.headers, "location");
-        if (redirectStatuses.has(response.status) && location !== void 0) {
-          let target;
-          let targetUrl;
-          try {
-            const base = currentUrl.split("?")[0];
-            const colon = location.indexOf(":");
-            const boundary = [...location].findIndex((character) => "/?#".includes(character));
-            const resolved = colon >= 0 && (boundary < 0 || colon < boundary) ? location : location.startsWith("//") ? current.protocol + location : location.startsWith("/") ? current.origin + location : location.startsWith("?") ? base + location : location.startsWith("#") || location === "" ? currentUrl + location : base.slice(0, base.lastIndexOf("/") + 1) + location;
-            target = parseUrl(resolved, true).url;
-            targetUrl = target.origin + curlRequestTarget(resolved);
-          } catch (error) {
-            if (error instanceof CurlError) throw error;
-            throw new CurlError(3, "Malformed redirect URL");
-          }
-          values2.redirect_url = targetUrl;
-          if (args.location) {
-            if (redirects++ >= args.maxRedirects) throw new CurlError(47, "Maximum redirects exceeded");
-            if (current.protocol === "https:" && target.protocol === "http:") throw new CurlError(1, "HTTPS-to-HTTP redirects are disabled");
-            if (target.origin !== current.origin) credentialsInScope = false;
-            if (response.status === 303 && method !== "HEAD" || [301, 302].includes(response.status) && requestMethod === "POST") {
-              currentBody = void 0;
-              requestMethod = "GET";
-              if (args.method === void 0) method = "GET";
-            }
-            previous = currentUrl;
-            current = target;
-            currentUrl = targetUrl;
-            values2.num_redirects = String(redirects);
-            await stop(response, signal);
-            response = void 0;
-            continue;
-          }
-        }
-        break;
-      }
-      if (!response) throw new CurlError(56, "No HTTP response");
-      if (args.download?.contentDisposition && args.remoteName) {
-        const disposition = header(response.headers, "content-disposition");
-        const parameter = disposition?.split(";").map((part) => part.trim()).find((part) => part.slice(0, part.indexOf("=")).toLowerCase() === "filename");
-        if (parameter) {
-          let filename = parameter.slice(parameter.indexOf("=") + 1).trim();
-          if (filename.startsWith('"') && filename.endsWith('"')) filename = filename.slice(1, -1);
-          filename = posixPath.basename(filename.split("\\").join("/"));
-          if (filename && filename !== "." && filename !== ".." && !filename.includes("\0")) output = args.outputDirectory === void 0 ? filename : `${args.outputDirectory}/${filename}`;
-        }
-      }
-      if (args.download?.noClobber && output && output !== "-" && await existingSize(context, output, signal) !== void 0) return 0;
-      let append = false;
-      if (resumeOffset && response.status === 206) {
-        const range2 = header(response.headers, "content-range") ?? "";
-        if (!range2.startsWith(`bytes ${resumeOffset}-`)) throw new CurlError(args.continueAt === void 0 ? 56 : 33, "Invalid resume Content-Range");
-        append = true;
-      }
-      if (resumeOffset && response.status === 416) {
-        if (header(response.headers, "content-range") === `bytes */${resumeOffset}`) return 0;
-      }
-      if (resumeOffset && args.continueAt !== void 0 && !append) throw new CurlError(33, "Server does not support resuming this transfer");
-      if (response.status >= 400 && (args.fail || args.failWithBody)) failure = new CurlError(22, `HTTP response status ${response.status}`);
-      const suppressBody = response.status === 304 || args.fail && failure !== void 0;
-      const readBody = !(args.download && method === "HEAD") && !args.head && !suppressBody;
-      let published = 0;
-      if (!args.download?.spider && (!suppressBody || included.length)) {
-        if (args.download && output && output !== "-") await context.fs.mkdir(posixPath.dirname(pathOf(context, output)), { recursive: true, signal });
-        const length = args.ignoreContentLength ? void 0 : header(response.headers, "content-length");
-        if (readBody && length && /^\d+$/.test(length) && Number(length) > args.maxFileSize) throw new CurlError(63, "Response exceeds download byte limit");
-        const final = response;
-        const encoding = header(final.headers, "content-encoding");
-        const writing = output === void 0 || output === "-" ? createOutputOperation({ ...context, signal }, context.stdout) : void 0;
-        const bodySignal = writing?.signal ?? signal;
-        const source = (async function* () {
-          for (const bytes of included) {
-            published += bytes.length;
-            yield bytes;
-          }
-          if (readBody) {
-            if (args.raw && final.contentDecoded && encoding) throw new CurlError(61, "Transport cannot preserve encoded response bytes");
-            if (args.raw && header(final.headers, "transfer-encoding")) throw new CurlError(61, "Raw transfer encoding is unsupported by this transport");
-            let chunks = 0;
-            const encoded = (async function* () {
-              for await (const chunk of readBytes(final.body, bodySignal)) {
-                downloaded += chunk.length;
-                if (downloaded > args.maxFileSize) throw new CurlError(63, "Response exceeds download byte limit");
-                yield chunk;
-              }
-              if (!final.contentDecoded && length && /^\d+$/.test(length) && downloaded !== Number(length)) throw new CurlError(18, "Partial HTTP response body");
-            })();
-            const decoded = args.compressed && !args.raw && !final.contentDecoded && encoding ? decodeContent(encoded, encoding, bodySignal, args.maxFileSize) : encoded;
-            let outputBytes = 0;
-            try {
-              for await (const chunk of decoded) {
-                if (++chunks % 256 === 0) {
-                  await yieldTurn(context.signal);
-                  bodySignal.throwIfAborted();
-                }
-                outputBytes += chunk.length;
-                if (outputBytes > args.maxFileSize) throw new CurlError(63, "Decoded response exceeds download byte limit");
-                published += chunk.length;
-                yield chunk;
-              }
-            } catch (error) {
-              bodySignal.throwIfAborted();
-              if (!(error instanceof CurlError) && !final.contentDecoded && length && /^\d+$/.test(length) && downloaded < Number(length)) throw new CurlError(18, "Partial HTTP response body");
-              throw networkError(error);
-            }
-          }
-        })();
-        try {
-          await writeOutput(writing ? { ...context, stdout: writing.output } : context, output, source, bodySignal, append, args.failWithBody && failure !== void 0);
-        } catch (error) {
-          context.signal.throwIfAborted();
-          if (!pipeClosed(error)) throw error;
-          closedOutput = true;
-        } finally {
-          await writing?.close();
-        }
-      }
-      if (retryStatuses.has(response.status) && attempt < args.retries) {
-        if (failure && (!args.silent || args.showError)) await deadlineDiagnostic(context, new CurlError(status(failure.exitCode), failure.message), remaining());
-        const after = header(response.headers, "retry-after");
-        let wait = args.retryDelayMs || Math.min(1e3 * 2 ** attempt, 6e5);
-        if (after !== void 0) {
-          const parsed2 = /^\d+$/.test(after) ? Number(after) * 1e3 : Date.parse(after) - Date.now();
-          if (Number.isFinite(parsed2)) wait = Math.max(wait, parsed2);
-        }
-        await stop(response, signal);
-        response = void 0;
-        if (published && output !== void 0 && output !== "-" && !args.download?.resume) await writeOutput(context, output, toByteSource(""), signal);
-        await delay(Math.min(wait, limits.maxTimeMs), signal);
-        continue;
-      }
-      break;
-    }
-  } catch (error) {
-    if (context.signal.aborted) throw context.signal.reason;
-    if (pipeClosed(error)) closedOutput = true;
-    else if (!hasFileOutput && context.stdout.ownedOutput?.consumerClosed.aborted) failure = new CurlError(23, "Failed writing output");
-    else failure = signal.aborted && signal.reason instanceof CurlError ? signal.reason : networkError(error);
-  } finally {
-    try {
-      await operation.close();
-    } finally {
-      context.signal.throwIfAborted();
-    }
-  }
-  values2.size_download = String(downloaded);
-  values2.size_upload = String(uploaded);
-  values2.time_total = ((performance.now() - start) / 1e3).toFixed(6);
-  values2.exitcode = String(failure?.exitCode ?? 0);
-  values2.errormsg = failure?.message ?? "";
-  if (format !== void 0 && formatReady) {
-    try {
-      await publish(writeOutFormat(format, values2, limits.maxBufferBytes));
-    } catch (error) {
-      context.signal.throwIfAborted();
-      failure = error instanceof CurlError ? error : new CurlError(23, "Failed writing write-out result");
-    }
-  }
-  if (failure && (!args.silent || args.showError)) {
-    try {
-      await deadlineDiagnostic(context, new CurlError(status(failure.exitCode), failure.message), remaining());
-    } catch (error) {
-      context.signal.throwIfAborted();
-      if (!(error instanceof CurlError)) throw error;
-      failure = error;
-    }
-  }
-  return failure ? status(failure.exitCode) : closedOutput ? 141 : 0;
-}
-
-// packages/safe-bash/src/commands/network/wget.ts
-async function parseWget(context, limits) {
-  const carrier = getCommandArguments(context);
-  let argumentBytes = 0;
-  for (const value of carrier.values) {
-    if (typeof value === "string" && value.length > limits.maxBufferBytes) throw new CurlError(2, "Arguments exceed host buffer limit");
-    argumentBytes += shellValueByteLength(value);
-    if (argumentBytes > limits.maxBufferBytes) throw new CurlError(2, "Arguments exceed host buffer limit");
-    if (typeof value === "string") {
-      for (let index = 0; index < value.length; index++) {
-        if (index % 1024 === 0) await yieldTurn(context.signal);
-        const code = value.charCodeAt(index);
-        if (code >= 55296 && code <= 56319) {
-          const next = value.charCodeAt(++index);
-          if (!(next >= 56320 && next <= 57343)) throw new CurlError(2, "Arguments must be valid UTF-8");
-        } else if (code >= 56320 && code <= 57343) throw new CurlError(2, "Arguments must be valid UTF-8");
-      }
-      continue;
-    }
-    const bytes = shellValueBytes(value);
-    const decoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
-    for (let offset = 0; offset < bytes.length; offset += 1024) {
-      await yieldTurn(context.signal);
-      try {
-        decoder.decode(bytes.subarray(offset, offset + 1024), { stream: offset + 1024 < bytes.length });
-      } catch (error) {
-        context.signal.throwIfAborted();
-        if (!(error instanceof TypeError) || "code" in error && error.code !== "ERR_ENCODING_INVALID_ENCODED_DATA") throw error;
-        throw new CurlError(2, "Arguments must be valid UTF-8");
-      }
-    }
-  }
-  const result = {
-    urls: [],
-    data: [],
-    headers: [],
-    include: false,
-    head: false,
-    get: false,
-    location: true,
-    remoteName: true,
-    fail: true,
-    failWithBody: false,
-    silent: false,
-    showError: false,
-    verbose: false,
-    globoff: true,
-    help: false,
-    version: false,
-    retries: Math.min(19, limits.maxRetries),
-    retryDelayMs: 0,
-    maxTimeMs: limits.maxTimeMs,
-    maxRedirects: limits.maxRedirects,
-    maxFileSize: limits.maxDownloadBytes,
-    agent: "virtual-bash-wget/0.0",
-    retryTransport: true,
-    directoryIndex: "index.html",
-    download: { spider: false, resume: false, noClobber: false, contentDisposition: false }
-  };
-  const number2 = (value, integral) => {
-    let start = 0;
-    let end = value.length;
-    if (!integral) {
-      while (start < end && " 	\n\r\v\f".includes(value[start])) start++;
-      while (end > start && " 	\n\r\v\f".includes(value[end - 1])) end--;
-    }
-    let multiplier = 1;
-    if (!integral) {
-      const units = { s: 1, m: 60, h: 3600, d: 86400 };
-      const unit = units[value[end - 1]];
-      if (unit !== void 0) {
-        multiplier = unit;
-        end--;
-      }
-    }
-    let position = start;
-    if (!integral && (value[position] === "+" || value[position] === "-")) position++;
-    let digits = 0;
-    let dot = false;
-    for (; position < end; position++) {
-      const character = value[position];
-      if (character >= "0" && character <= "9") digits++;
-      else if (!integral && character === "." && !dot) dot = true;
-      else throw new CurlError(2, "Invalid numeric option");
-    }
-    if (!digits) throw new CurlError(2, "Invalid numeric option");
-    const parsed = Number(value.slice(start, end)) * multiplier;
-    if (!Number.isFinite(parsed) || parsed < 0 || parsed > Number.MAX_SAFE_INTEGER) throw new CurlError(2, "Invalid numeric option");
-    return parsed;
-  };
-  const bodies = {};
-  const headers = /* @__PURE__ */ new Map();
-  let agent;
-  let referer;
-  let ended = false;
-  let inputFile;
-  for (let index = 0; index < context.args.length; index++) {
-    if (index % 128 === 0) await yieldTurn(context.signal);
-    const argument = context.args[index];
-    if (ended || !argument.startsWith("-") || argument === "-") {
-      result.urls.push(argument);
-      continue;
-    }
-    if (argument === "--") {
-      ended = true;
-      continue;
-    }
-    if (!argument.startsWith("--")) {
-      for (let position = 1; position < argument.length; position++) {
-        if (position % 1024 === 0) await yieldTurn(context.signal);
-        const flag2 = argument[position];
-        if (flag2 === "q") result.silent = true;
-        else if (flag2 === "c") result.download.resume = true;
-        else if (flag2 === "n" && argument[position + 1] === "c") {
-          result.download.noClobber = true;
-          position++;
-        } else if (flag2 === "n" && argument[position + 1] === "v") position++;
-        else if (flag2 === "h") result.help = true;
-        else if (flag2 === "r") throw new CurlError(2, "Recursive mirroring is unsupported");
-        else if (["O", "P", "i", "T", "t"].includes(flag2)) {
-          const output = position + 1 < argument.length ? argument.slice(position + 1) : context.args[++index];
-          if (!output) throw new CurlError(2, `-${flag2} requires a nonempty argument`);
-          if (flag2 === "O") {
-            result.output = output;
-            result.remoteName = false;
-          } else if (flag2 === "P") result.outputDirectory = output;
-          else if (flag2 === "i") inputFile = output;
-          else if (flag2 === "T") {
-            const seconds = number2(output, false);
-            result.maxTimeMs = Math.min(seconds === 0 ? Infinity : seconds * 1e3, limits.maxTimeMs);
-          } else {
-            const tries = number2(output, true);
-            result.retries = tries === 0 ? limits.maxRetries : Math.min(tries - 1, limits.maxRetries);
-          }
-          break;
-        } else throw new CurlError(2, `Unsupported option: -${flag2}`);
-      }
-      continue;
-    }
-    if (argument === "--quiet") {
-      result.silent = true;
-      continue;
-    }
-    if (argument === "--no-verbose") continue;
-    if (argument === "--help") {
-      result.help = true;
-      continue;
-    }
-    if (argument === "--version") {
-      result.version = true;
-      continue;
-    }
-    if (argument === "--spider") {
-      result.download.spider = true;
-      continue;
-    }
-    if (argument === "--continue") {
-      result.download.resume = true;
-      continue;
-    }
-    if (argument === "--no-clobber") {
-      result.download.noClobber = true;
-      continue;
-    }
-    if (argument === "--content-disposition") {
-      result.download.contentDisposition = true;
-      continue;
-    }
-    if (argument === "--recursive") throw new CurlError(2, "Recursive mirroring is unsupported");
-    const equal = argument.indexOf("=");
-    const flag = equal < 0 ? argument : argument.slice(0, equal);
-    let operand;
-    if (["--directory-prefix", "--input-file", "--output-document", "--timeout", "--tries", "--method", "--post-data", "--post-file", "--body-data", "--body-file", "--header", "--user-agent", "--referer"].includes(flag)) {
-      operand = equal < 0 ? context.args[++index] : argument.slice(equal + 1);
-    } else throw new CurlError(2, `Unsupported option: ${argument}`);
-    if (operand === void 0) throw new CurlError(2, `${flag} requires an argument`);
-    if (flag === "--output-document") {
-      if (!operand) throw new CurlError(2, "Output filename must not be empty");
-      result.output = operand;
-      result.remoteName = false;
-    } else if (flag === "--directory-prefix") result.outputDirectory = operand;
-    else if (flag === "--input-file") inputFile = operand;
-    else if (flag === "--timeout") {
-      const seconds = number2(operand, false);
-      result.maxTimeMs = Math.min(seconds === 0 ? Infinity : seconds * 1e3, limits.maxTimeMs);
-    } else if (flag === "--tries") {
-      const tries = number2(operand, true);
-      result.retries = tries === 0 ? limits.maxRetries : Math.min(tries - 1, limits.maxRetries);
-    } else if (flag === "--header") {
-      if (operand === "") {
-        headers.clear();
-        continue;
-      }
-      const colon = operand.indexOf(":");
-      if (colon < 1) throw new CurlError(2, "Invalid HTTP header");
-      const name = operand.slice(0, colon);
-      const value = operand.slice(colon + 1).trim();
-      validateRequestHeader(name, value);
-      headers.set(name.toLowerCase(), [name, value]);
-    } else if (flag === "--user-agent") {
-      validateRequestHeader("User-Agent", operand);
-      agent = operand;
-    } else if (flag === "--referer") {
-      validateRequestHeader("Referer", operand);
-      referer = operand;
-    } else if (flag === "--method") {
-      try {
-        validateHeaderName(operand);
-      } catch {
-        throw new CurlError(2, "Invalid or unsupported HTTP method");
-      }
-      result.method = operand.toUpperCase();
-      if (["CONNECT", "TRACE"].includes(result.method)) throw new CurlError(2, "Invalid or unsupported HTTP method");
-    } else {
-      const bodyFlag = flag;
-      if (bodyFlag.endsWith("-file") && !operand) throw new CurlError(2, "Upload filename must not be empty");
-      bodies[bodyFlag] = operand;
-    }
-  }
-  if (agent !== void 0 && !headers.has("user-agent")) result.headers.push(["User-Agent", agent === "" ? null : agent]);
-  if (referer !== void 0 && !headers.has("referer")) result.headers.push(["Referer", referer]);
-  result.headers.push(...headers.values());
-  const post = bodies["--post-data"] !== void 0 || bodies["--post-file"] !== void 0;
-  const customBody = bodies["--body-data"] !== void 0 || bodies["--body-file"] !== void 0;
-  if (post && result.method !== void 0 || customBody && result.method === void 0 || bodies["--post-data"] !== void 0 && bodies["--post-file"] !== void 0 || bodies["--body-data"] !== void 0 && bodies["--body-file"] !== void 0) {
-    throw new CurlError(2, "Incompatible request body options: use --post-data or --post-file, or --method with --body-data or --body-file");
-  }
-  const data = bodies["--post-data"] ?? bodies["--body-data"];
-  const file = bodies["--post-file"] ?? bodies["--body-file"];
-  if (data !== void 0) result.data.push({ kind: "raw", value: data });
-  else if (file !== void 0) result.data.push({ kind: "binary", value: `@${file === "-" ? "./-" : file}` });
-  if (!result.help && !result.version) {
-    if (inputFile !== void 0) {
-      let bytes;
-      try {
-        bytes = inputFile === "-" ? await collectNetworkBytes(context.stdin, { signal: context.signal, maxBytes: limits.maxBufferBytes }) : await context.fs.readFile(pathOf(context, inputFile), { signal: context.signal, ...Number.isFinite(limits.maxBufferBytes) ? { maxBytes: limits.maxBufferBytes } : {} });
-      } catch {
-        context.signal.throwIfAborted();
-        throw new CurlError(26, "Failed reading virtual URL input file");
-      }
-      let text;
-      try {
-        text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-      } catch {
-        throw new CurlError(2, "URL input must be valid UTF-8");
-      }
-      let start = 0;
-      let lines = 0;
-      for (let index = 0; index <= text.length; index++) {
-        if (index % 1024 === 0) await yieldTurn(context.signal);
-        if (index !== text.length && text[index] !== "\n") continue;
-        if (index === text.length && start === index) break;
-        if (++lines > 4096) throw new CurlError(2, "URL input exceeds 4096-line limit");
-        const url = text.slice(start, index).trim();
-        start = index + 1;
-        if (url) result.urls.push(url);
-        if (result.urls.length > limits.maxUrls) throw new CurlError(2, "URL count exceeds host limit");
-      }
-    }
-    if (!result.urls.length) throw new CurlError(2, "An HTTP(S) URL is required");
-    if (result.urls.length > limits.maxUrls) throw new CurlError(2, "URL count exceeds host limit");
-    if (result.download.resume && result.download.noClobber) throw new CurlError(2, "Continue and no-clobber are incompatible");
-    if (result.output === "-" && (result.download.resume || result.download.noClobber)) throw new CurlError(2, "Download controls require a file output");
-  }
-  return result;
-}
-function createWgetCommand(options) {
-  return createTransferCommand(options, {
-    name: "wget",
-    parse: parseWget,
-    help: "Usage: wget [-O FILE|-] [-q|-nv] [-T SECONDS] [-t COUNT] [URL ...]\nDownloads: --spider | -c/--continue | -nc/--no-clobber | -P/--directory-prefix DIR | --content-disposition\nInput: -i/--input-file FILE (VFS URL list; '-' reads stdin)\nRequest headers: --header 'NAME: VALUE' | --user-agent AGENT | --referer URL\nRequest bodies: --post-data DATA | --post-file FILE | --method METHOD [--body-data DATA | --body-file FILE]\nBody files are read from the VFS. Downloads require explicit host authorization. Recursive mirroring is unsupported.\nTimeout (--timeout) is aggregate and host-capped; --tries=0 remains host-capped.\n",
-    version: "virtual-bash wget 0.0 (bounded HTTP HTTPS)\n",
-    status: (code) => code === 0 ? 0 : [1, 2, 3].includes(code) ? 2 : [23, 26].includes(code) ? 3 : code === 60 ? 5 : code === 22 ? 8 : 4
-  });
-}
-
-// packages/safe-bash/src/commands/network/fetch-transport.ts
-init_platform();
-function requestBody(source, signal) {
-  if (!source) return void 0;
-  const iterator = source[Symbol.asyncIterator]();
-  return new ReadableStream({
-    async pull(controller) {
-      try {
-        signal.throwIfAborted();
-        const next = await iterator.next();
-        if (next.done) controller.close();
-        else controller.enqueue(next.value);
-      } catch (error) {
-        controller.error(error);
-      }
-    },
-    async cancel(reason) {
-      await iterator.return?.(reason);
-    }
-  });
-}
-function createFetchTransport(options = {}) {
-  const fetchRequest = options.fetch ?? globalThis.fetch;
-  if (typeof fetchRequest !== "function") throw new TypeError("Fetch is unavailable");
-  return async (input) => {
-    input.signal.throwIfAborted();
-    if (input.ca !== void 0) throw new CurlError(2, "Fetch transport cannot enforce request CA trust");
-    if (input.httpVersion !== void 0) throw new CurlError(2, "Transport cannot enforce requested HTTP version");
-    if (input.ignoreContentLength) throw new CurlError(2, "Transport cannot enforce ignored Content-Length");
-    const url = new URL(input.url);
-    if (url.protocol !== "http:" && url.protocol !== "https:") throw new CurlError(1, "Unsupported protocol");
-    if (input.denyPrivateNetworks === true) throw new CurlError(7, "Fetch transport cannot enforce private-network denial");
-    if (curlRequestTarget(input.url) !== url.pathname + url.search) {
-      throw new CurlError(2, "Fetch transport cannot preserve the literal request target");
-    }
-    const stopped = new AbortController();
-    const signal = AbortSignal.any([input.signal, stopped.signal]);
-    const body = requestBody(input.body, signal);
-    const headers = new Headers();
-    for (const [name, value] of input.headers) headers.append(name, value);
-    const request = new Request(url, {
-      method: input.method,
-      headers,
-      body,
-      credentials: "omit",
-      redirect: "manual",
-      signal,
-      ...body ? { duplex: "half" } : {}
-    });
-    let response;
-    const dispose = async () => {
-      stopped.abort();
-      if (response?.body) await response.body.cancel().catch(() => void 0);
-    };
-    input.registerCleanup?.(dispose);
-    response = await fetchRequest(request);
-    const reader = response.body?.getReader();
-    const responseBody = reader ? (async function* () {
-      try {
-        while (true) {
-          input.signal.throwIfAborted();
-          const next = await reader.read();
-          if (next.done) return;
-          yield next.value;
-        }
-      } finally {
-        reader.releaseLock();
-      }
-    })() : (async function* () {
-    })();
-    return {
-      status: response.status,
-      statusText: response.statusText,
-      headers: [...response.headers.entries()],
-      body: responseBody,
-      contentDecoded: options.contentDecoded ?? true,
-      dispose
-    };
-  };
-}
-
-// packages/safe-bash/src/commands/network/authorizer.ts
-init_platform();
-
-// packages/safe-bash/src/commands/network/private-address.ts
-init_platform();
-function privateIPv4(first, second) {
-  return first === 10 || first === 127 || first === 0 || first === 169 && second === 254 || first === 192 && second === 168 || first === 172 && second >= 16 && second <= 31 || first === 100 && second >= 64 && second <= 127 || first === 198 && second >= 18 && second <= 19 || first >= 224;
-}
-function privateHostname(input) {
-  const hostname = input.toLowerCase().replace(/\.$/u, "").replace(/^\[|\]$/gu, "");
-  if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname === "::1") return true;
-  if (hostname.includes(":")) {
-    const [prefix, suffix] = hostname.split("::");
-    const leading = prefix ? prefix.split(":") : [];
-    const trailing = suffix ? suffix.split(":") : [];
-    const hextets = new Array(8).fill(0);
-    for (let index = 0; index < leading.length; index++) hextets[index] = Number.parseInt(leading[index], 16);
-    for (let index = 0; index < trailing.length; index++) hextets[8 - trailing.length + index] = Number.parseInt(trailing[index], 16);
-    if (hextets.every((value) => value === 0)) return true;
-    const mappedIPv4 = hextets.slice(0, 5).every((value) => value === 0) && hextets[5] === 65535;
-    const translatedIPv4 = hextets.slice(0, 4).every((value) => value === 0) && hextets[4] === 65535 && hextets[5] === 0;
-    const nat64IPv4 = hextets[0] === 100 && hextets[1] === 65435 && hextets.slice(2, 6).every((value) => value === 0);
-    const compatibleIPv4 = hextets.slice(0, 6).every((value) => value === 0);
-    if (mappedIPv4 || translatedIPv4 || nat64IPv4 || compatibleIPv4) {
-      return privateIPv4(hextets[6] >>> 8, hextets[6] & 255);
-    }
-    if (hextets[0] === 8194) return privateIPv4(hextets[1] >>> 8, hextets[1] & 255);
-    return (hextets[0] & 65024) === 64512 || (hextets[0] & 65472) === 65152 || (hextets[0] & 65472) === 65216 || (hextets[0] & 65280) === 65280 || hextets[0] === 100 && hextets[1] === 65435 && hextets[2] === 1;
-  }
-  const parts = hostname.split(".");
-  if (parts.length !== 4 || parts.some((part) => !part || Array.from(part).some((character) => character < "0" || character > "9"))) return false;
-  const octets = parts.map(Number);
-  if (octets.some((value) => value < 0 || value > 255)) return false;
-  const [first, second] = octets;
-  return privateIPv4(first, second);
-}
-
-// packages/safe-bash/src/commands/network/authorizer.ts
-function createOriginAuthorizer(allowlist = "*", options = {}) {
-  const denyPrivateNetworks = options.denyPrivateNetworks === true;
-  const origins = /* @__PURE__ */ new Set();
-  const hosts = /* @__PURE__ */ new Set();
-  for (const entry of allowlist === "*" ? [] : allowlist) {
-    const value = entry.trim();
-    if (!value) throw new TypeError("Origin allowlist entries must not be empty");
-    if (value.includes("://")) {
-      const url = new URL(value);
-      if (url.pathname !== "/" || url.search || url.hash || url.username || url.password) {
-        throw new TypeError(`Origin allowlist entry must be an origin: ${entry}`);
-      }
-      origins.add(url.origin);
-    } else {
-      if (value.includes("/") || value.includes("@")) throw new TypeError(`Invalid hostname allowlist entry: ${entry}`);
-      hosts.add(value.toLowerCase().replace(/\.$/u, ""));
-    }
-  }
-  return (request) => {
-    const url = new URL(request.url);
-    const hostname = url.hostname.toLowerCase().replace(/\.$/u, "");
-    if (denyPrivateNetworks) {
-      request.requirePrivateNetworkDeny?.();
-      if (privateHostname(hostname)) return false;
-    }
-    return allowlist === "*" || origins.has(url.origin) || hosts.has(hostname);
-  };
-}
-
-// packages/safe-bash/src/commands/network/public.ts
-function createNetworkCommands(options) {
-  return [createCurlCommand(options), createWgetCommand(options)];
-}
-function networkCommands(options) {
-  const definitions = createNetworkCommands(options);
-  return {
-    name: "network-commands",
-    setup(host) {
-      if (!options.replace) {
-        for (const definition of definitions) if (host.commands.has(definition.name)) throw new Error(`Command already registered: ${definition.name}`);
-      }
-      for (const definition of definitions) host.commands.register(definition, { replace: options.replace ?? false });
-    }
-  };
-}
-var createCurlCommands = createNetworkCommands;
-var curlCommands = networkCommands;
-var CURL_HELP = "Usage: curl [HTTP(S) URL] [-X METHOD] [-H HEADER] [-d DATA] [-L] [-o VFSFILE]\nExplicit host authorization is required. See network/README.md for supported flags and limits.\n";
-var CURL_VERSION = "virtual-bash curl 0.0 (HTTP HTTPS; Node streaming transport)\n";
-var WGET_HELP = "Usage: wget [-O FILE|-] [-q|-nv] [-T SECONDS] [-t COUNT] [URL ...]\nDownloads: --spider | -c/--continue | -nc/--no-clobber | -P/--directory-prefix DIR | --content-disposition\nInput: -i/--input-file FILE (VFS URL list; '-' reads stdin)\nRequest headers: --header 'NAME: VALUE' | --user-agent AGENT | --referer URL\nRequest bodies: --post-data DATA | --post-file FILE | --method METHOD [--body-data DATA | --body-file FILE]\nBody files are read from the VFS. Downloads require explicit host authorization. Recursive mirroring is unsupported.\nTimeout (--timeout) is aggregate and host-capped; --tries=0 remains host-capped.\n";
-var WGET_VERSION = "virtual-bash wget 0.0 (bounded HTTP HTTPS)\n";
-function evalSyncCurl(opArgs) {
-  if (opArgs.length === 1) {
-    if (opArgs[0] === "-V" || opArgs[0] === "--version") return CURL_VERSION;
-    if (opArgs[0] === "-h" || opArgs[0] === "--help") return CURL_HELP;
-  }
-  return void 0;
-}
-function evalSyncWget(opArgs) {
-  if (opArgs.length === 1) {
-    if (opArgs[0] === "-V" || opArgs[0] === "--version") return WGET_VERSION;
-    if (opArgs[0] === "-h" || opArgs[0] === "--help") return WGET_HELP;
-  }
-  return void 0;
-}
-syncCommandEvaluators.evalSyncCurl = evalSyncCurl;
-syncCommandEvaluators.evalSyncWget = evalSyncWget;
-
-export {
-  defaultNetworkLimits,
-  cloudflareWorkerNetworkLimits,
-  CurlError,
-  createCurlCommand,
-  createWgetCommand,
-  createFetchTransport,
-  createOriginAuthorizer,
-  createNetworkCommands,
-  networkCommands,
-  createCurlCommands,
-  curlCommands,
-  evalSyncCurl,
-  evalSyncWget
-};