@poe-platform/safe-bash 0.1.799 → 0.1.801

package/dist/safe-bash/chunks/{chunk-NHOXKQNE.js → chunk-A7XEHALN.js}

@@ -2,16 +2,16 @@ import {
   concatShellValues,
   shellValueBytes,
   shellValueFromBytes
-} from "./chunk-I4OAEOP6.js";
-import {
-  commandRuntimeIdentity
-} from "./chunk-LQHGH25W.js";
+} from "./chunk-J42RIHHJ.js";
 import {
   writeText
-} from "./chunk-PYVEAFJM.js";
+} from "./chunk-74GHTNJA.js";
+import {
+  commandRuntimeIdentity
+} from "./chunk-7R5BDCG7.js";
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/shell/extensions/jobs/index.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-MHZ24KEI.js → chunk-AM5ESLPH.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/factor/index.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-3L3T6LYV.js → chunk-AUSNDQTJ.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/getopt/index.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-YG5WAHK7.js → chunk-B7TAL7S5.js}

@@ -38,13 +38,12 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 
 // packages/safe-bash/browser/platform.mjs
 import { posixPath } from "@poe-platform/safe-fs/core";
-var import_buffer, TransformStream, setImmediate;
+var import_buffer, TransformStream;
 var init_platform = __esm({
   "packages/safe-bash/browser/platform.mjs"() {
     "use strict";
     import_buffer = __toESM(require_buffer(), 1);
     TransformStream = globalThis.TransformStream;
-    setImmediate = (callback, ...args) => setTimeout(callback, 0, ...args);
   }
 });
 
@@ -1832,7 +1831,6 @@ export {
   __toESM,
   require_buffer,
   TransformStream,
-  setImmediate,
   init_platform
 };
 /*! Bundled license information:

package/dist/safe-bash/chunks/{chunk-K7IQZE7D.js → chunk-C5OWC2TL.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/xml/index.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-F3RV2F72.js → chunk-CHYGPFVM.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/pr/index.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-M4CFCXHN.js → chunk-CS4MNM6I.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/hexdump/index.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-H6JW3E4F.js → chunk-CTVWDACF.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/iconv/index.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-KTGR4U57.js → chunk-D3ANYGMC.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/byte-encoding.ts
 init_platform();
@@ -18,6 +18,5 @@ export {
   indexOfBytes,
   isByteEncoding,
   latin1Bytes,
-  latin1Text,
-  writeEncodedBytes
+  latin1Text
 };

package/dist/safe-bash/chunks/{chunk-ENR3HB2B.js → chunk-E7OYNDGL.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/internal.ts
 init_platform();
@@ -35,7 +35,6 @@ export {
   pathOf,
   registerDefaultExecutor,
   registerDefaultExecutors,
-  replaceArgument,
   requireOperands,
   syncCommandEvaluators,
   value

package/dist/safe-bash/chunks/{chunk-SOZK5JVX.js → chunk-FBUCWVTE.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/timeout/index.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-NX2SQVON.js → chunk-FNDNHAGE.js}

@@ -1,36 +1,33 @@
 import {
   PublicDiagnostic,
-  publicDiagnosticMessage
-} from "./chunk-WVG5SHHQ.js";
-import {
+  publicDiagnosticMessage,
   writeDiagnostic
-} from "./chunk-T5KKDMYB.js";
+} from "./chunk-IVRQ4BXL.js";
 import {
   byteLength,
   concatBytes,
   decodeBytes,
   encodeBytes,
   isByteEncoding
-} from "./chunk-KTGR4U57.js";
+} from "./chunk-D3ANYGMC.js";
 import {
   dirname,
   posixPath,
   resolvePath,
   yieldTurn
-} from "./chunk-VYZTG3GV.js";
+} from "./chunk-NZQXYWA3.js";
 import {
   readBytes,
   toByteSource,
   writeBytes
-} from "./chunk-PYVEAFJM.js";
+} from "./chunk-74GHTNJA.js";
 import {
   UsageError,
   pathOf
-} from "./chunk-ENR3HB2B.js";
+} from "./chunk-E7OYNDGL.js";
 import {
-  init_platform,
-  setImmediate
-} from "./chunk-YG5WAHK7.js";
+  init_platform
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/node/browser.ts
 init_platform();
@@ -514,6 +511,7 @@ async function nodeSourceLocation(source, filename, cwd, prefix, readSource, sig
 
 // packages/safe-bash/src/commands/node/filesystem.ts
 init_platform();
+import { yieldTurn as yieldTurn2 } from "../../safe-bash-contracts/yield.js";
 function nodeReadFile(options, fs, signal, fail, pending) {
   const read = fs.readFile;
   const limits = commandLimits(options.limits);
@@ -533,12 +531,12 @@ function nodeReadFile(options, fs, signal, fail, pending) {
     const done = callback;
     const completion = Promise.resolve().then(() => read(path, encoding)).then(
       async (text) => {
-        await new Promise((resolve) => setImmediate(resolve));
+        await yieldTurn2(signal);
         signal.throwIfAborted();
         return done(null, text);
       },
       async (error) => {
-        await new Promise((resolve) => setImmediate(resolve));
+        await yieldTurn2(signal);
         signal.throwIfAborted();
         return done(error);
       }
@@ -997,19 +995,26 @@ function createSafeJsCommands(options, dialect) {
             }
           }
         });
-        const result = record(await withSignal(signal, () => runtime.run(prepared?.source ?? source, {
-          ...parsed.nodeOptions?.length ? { nodeOptions: parsed.nodeOptions } : {},
-          budget,
-          filename,
-          modules,
-          signal,
-          ...prepared ? {
-            bindings: prepared.bindings,
-            ...prepared.sourceLocation ? { sourceLocation: prepared.sourceLocation } : {},
-            ...prepared.importSpecifiers ? { importSpecifiers: prepared.importSpecifiers } : {}
-          } : {},
-          sink: { log: (...args) => output.console(args, false), error: (...args) => output.console(args, true) }
-        })), "SafeJS run result");
+        let rawResult;
+        try {
+          rawResult = await withSignal(signal, () => runtime.run(prepared?.source ?? source, {
+            ...parsed.nodeOptions?.length ? { nodeOptions: parsed.nodeOptions } : {},
+            budget,
+            filename,
+            modules,
+            signal,
+            ...prepared ? {
+              bindings: prepared.bindings,
+              ...prepared.sourceLocation ? { sourceLocation: prepared.sourceLocation } : {},
+              ...prepared.importSpecifiers ? { importSpecifiers: prepared.importSpecifiers } : {}
+            } : {},
+            sink: { log: (...args) => output.console(args, false), error: (...args) => output.console(args, true) }
+          }));
+        } catch (error) {
+          if (error instanceof SafeJsCommandLimitError || statusField(error, "code") === "budgetExceeded" || signal.aborted) throw error;
+          throw new GuestDiagnostic(errorInfo(error));
+        }
+        const result = record(rawResult, "SafeJS run result");
         signal.throwIfAborted();
         if (result.ok !== true && result.ok !== false) throw new TypeError("Invalid SafeJS run result.ok");
         if (!result.ok) {
@@ -1104,8 +1109,21 @@ async function nodeEnvironment(files, inherited, cwd, read, signal, remainingByt
   return Object.assign(values, inherited);
 }
 
+// packages/safe-bash/src/commands/node/unconfigured.ts
+init_platform();
+var unconfiguredNodeCommand = Object.freeze({
+  name: "node",
+  description: "JavaScript execution requires an explicitly configured runtime",
+  async execute(context) {
+    context.signal.throwIfAborted();
+    await context.stderr.write(new TextEncoder().encode("node: requires an injected runtime or provider\n"));
+    return { exitCode: 2 };
+  }
+});
+
 // packages/safe-bash/src/commands/node/safejs.ts
 function createSafeJsNodeCommands(options) {
+  if (options === void 0) return Object.freeze([unconfiguredNodeCommand]);
   const settings = record(options, "node options");
   onlyKeys(settings, ["runtime", "limits", "replace"]);
   if (Object.hasOwn(settings, "replace") && typeof settings.replace !== "boolean") throw new TypeError("node replace must be boolean");
@@ -1114,7 +1132,7 @@ function createSafeJsNodeCommands(options) {
 }
 function safeJsNodeCommands(options) {
   const definitions = createSafeJsNodeCommands(options);
-  const replace = options.replace ?? false;
+  const replace = options?.replace ?? false;
   return { name: "node-commands", setup(host) {
     if (!replace && host.commands.has("node")) throw new Error("Command already registered: node");
     for (const definition of definitions) host.commands.register(definition, { replace });
@@ -1208,6 +1226,7 @@ complete -F _node_complete node
   return { file: args[index] ?? "-", args: args.slice(index + 1), print: false, help: false, check, preloads, sourceMaps, nodeOptions, envFiles, ...inputType ? { inputType } : {} };
 }
 function createSafeJsNodeCommand(options) {
+  if (options === void 0) return unconfiguredNodeCommand;
   const settings = record(options, "node options");
   onlyKeys(settings, ["runtime", "limits"]);
   if (settings.runtime === void 0 || settings.runtime === null) throw new TypeError("node requires an injected SafeJS runtime");

package/dist/safe-bash/chunks/{chunk-KCVSVD65.js → chunk-I5HZ4FGE.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/contracts/filesystem-descriptor.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-KMH2DF3I.js → chunk-ICFDYV64.js}

@@ -1,6 +1,10 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
+
+// packages/safe-bash/src/contracts/output.ts
+init_platform();
+import { createOutputOperation } from "../../safe-bash-contracts/output.js";
 
 // node_modules/@noble/hashes/sha2.js
 init_platform();
@@ -738,5 +742,6 @@ export {
   HashMD,
   sha256,
   sha512,
-  sha384
+  sha384,
+  createOutputOperation
 };

package/dist/safe-bash/chunks/{chunk-T5KKDMYB.js → chunk-IVRQ4BXL.js}

@@ -1,12 +1,18 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
+
+// packages/safe-bash/src/diagnostics.ts
+init_platform();
+import { PublicDiagnostic, UsageError, publicDiagnosticMessage } from "../../safe-bash-contracts/diagnostics.js";
 
 // packages/safe-bash/src/escaping.ts
 init_platform();
 import { escapeText, quoteShellOperand, writeDiagnostic } from "../../safe-bash-query-engine/escaping.js";
 
 export {
+  PublicDiagnostic,
+  publicDiagnosticMessage,
   escapeText,
   quoteShellOperand,
   writeDiagnostic

package/dist/safe-bash/chunks/{chunk-KV7PKOHV.js → chunk-IWDICZVK.js}

@@ -2,7 +2,7 @@ import {
   __toESM,
   init_platform,
   require_buffer
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/portable-buffer.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-I4OAEOP6.js → chunk-J42RIHHJ.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/contracts/value.ts
 init_platform();

package/dist/safe-bash/chunks/chunk-K6VCD7IY.js

@@ -0,0 +1,106 @@
+import {
+  syncCommandEvaluators
+} from "./chunk-E7OYNDGL.js";
+import {
+  init_platform
+} from "./chunk-B7TAL7S5.js";
+
+// packages/safe-bash/src/commands/network/public.ts
+init_platform();
+
+// packages/safe-bash/src/commands/network/wget.ts
+init_platform();
+import { createWgetCommand as createPortableCommand } from "../../safe-bash-command-wget/index.js";
+
+// packages/safe-bash/src/commands/network/platform-portable.ts
+init_platform();
+import { createDefaultHttpTransport, randomBytes, requiresFiniteUrlLimits, validateHeaderName, validateHeaderValue } from "../../safe-bash-network-engine/platform-portable.js";
+
+// packages/safe-bash/src/commands/network/shared.ts
+init_platform();
+import { collectNetworkBytes, delay, diagnostic, encode, header, limitsFor, networkError, withSignal } from "../../safe-bash-network-engine/shared.js";
+
+// packages/safe-bash/src/commands/network/wget.ts
+import {} from "../../safe-bash-command-wget/wget.js";
+function createWgetCommand(options = {}) {
+  const limits = limitsFor(options.limits);
+  if (requiresFiniteUrlLimits && (!Number.isFinite(limits.maxUrls) || !Number.isFinite(limits.maxBufferBytes))) throw new TypeError("Portable network commands require finite maxUrls and maxBufferBytes limits");
+  return createPortableCommand({ ...options, transport: options.transport ?? createDefaultHttpTransport({ maxHeaderBytes: limits.maxHeaderBytes }) });
+}
+
+// packages/safe-bash/src/commands/network/curl.ts
+init_platform();
+import { createCurlCommand as createPortableCommand2 } from "../../safe-bash-command-curl/index.js";
+import { createTransferCommand } from "../../safe-bash-command-curl/curl.js";
+function createCurlCommand(options = {}) {
+  const limits = limitsFor(options.limits);
+  if (requiresFiniteUrlLimits && (!Number.isFinite(limits.maxUrls) || !Number.isFinite(limits.maxBufferBytes))) throw new TypeError("Portable network commands require finite maxUrls and maxBufferBytes limits");
+  return createPortableCommand2({ ...options, transport: options.transport ?? createDefaultHttpTransport({ maxHeaderBytes: limits.maxHeaderBytes }) });
+}
+
+// packages/safe-bash/src/commands/network/types.ts
+init_platform();
+import { CurlError, cloudflareWorkerNetworkLimits, defaultNetworkLimits } from "../../safe-bash-network-engine/types.js";
+
+// packages/safe-bash/src/commands/network/fetch-transport.ts
+init_platform();
+import { createFetchTransport } from "../../safe-bash-network-engine/fetch-transport.js";
+
+// packages/safe-bash/src/commands/network/authorizer.ts
+init_platform();
+import { createOriginAuthorizer } from "../../safe-bash-network-engine/authorizer.js";
+
+// packages/safe-bash/src/commands/network/public.ts
+function createNetworkCommands(options = {}) {
+  return [createCurlCommand(options), createWgetCommand(options)];
+}
+function networkCommands(options = {}) {
+  const definitions = createNetworkCommands(options);
+  return {
+    name: "network-commands",
+    setup(host) {
+      if (!options.replace) {
+        for (const definition of definitions) if (host.commands.has(definition.name)) throw new Error(`Command already registered: ${definition.name}`);
+      }
+      for (const definition of definitions) host.commands.register(definition, { replace: options.replace ?? false });
+    }
+  };
+}
+var createCurlCommands = createNetworkCommands;
+var curlCommands = networkCommands;
+var CURL_HELP = "Usage: curl [HTTP(S) URL] [-X METHOD] [-H HEADER] [-d DATA] [-L] [-o VFSFILE]\nExplicit host authorization is required. See network/README.md for supported flags and limits.\n";
+var CURL_VERSION = "virtual-bash curl 0.0 (HTTP HTTPS; Node streaming transport)\n";
+var WGET_HELP = "Usage: wget [-O FILE|-] [-q|-nv] [-T SECONDS] [-t COUNT] [URL ...]\nDownloads: --spider | -c/--continue | -nc/--no-clobber | -P/--directory-prefix DIR | --content-disposition\nInput: -i/--input-file FILE (VFS URL list; '-' reads stdin)\nRequest headers: --header 'NAME: VALUE' | --user-agent AGENT | --referer URL\nRequest bodies: --post-data DATA | --post-file FILE | --method METHOD [--body-data DATA | --body-file FILE]\nBody files are read from the VFS. Downloads require explicit host authorization. Recursive mirroring is unsupported.\nTimeout (--timeout) is aggregate and host-capped; --tries=0 remains host-capped.\n";
+var WGET_VERSION = "virtual-bash wget 0.0 (bounded HTTP HTTPS)\n";
+function evalSyncCurl(opArgs) {
+  if (opArgs.length === 1) {
+    if (opArgs[0] === "-V" || opArgs[0] === "--version") return CURL_VERSION;
+    if (opArgs[0] === "-h" || opArgs[0] === "--help") return CURL_HELP;
+  }
+  return void 0;
+}
+function evalSyncWget(opArgs) {
+  if (opArgs.length === 1) {
+    if (opArgs[0] === "-V" || opArgs[0] === "--version") return WGET_VERSION;
+    if (opArgs[0] === "-h" || opArgs[0] === "--help") return WGET_HELP;
+  }
+  return void 0;
+}
+syncCommandEvaluators.evalSyncCurl = evalSyncCurl;
+syncCommandEvaluators.evalSyncWget = evalSyncWget;
+
+export {
+  createWgetCommand,
+  createCurlCommand,
+  CurlError,
+  cloudflareWorkerNetworkLimits,
+  defaultNetworkLimits,
+  createFetchTransport,
+  createOriginAuthorizer,
+  createNetworkCommands,
+  networkCommands,
+  createCurlCommands,
+  curlCommands,
+  evalSyncCurl,
+  evalSyncWget
+};

package/dist/safe-bash/chunks/{chunk-63FXVDGF.js → chunk-LVOBFF4D.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/python/invocation.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-U5NUZPCC.js → chunk-MHMMRCYC.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // node_modules/pako/dist/pako.mjs
 init_platform();

package/dist/safe-bash/chunks/{chunk-6HZYFL3H.js → chunk-NR3EM4LS.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/regex-execution/portable.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-VYZTG3GV.js → chunk-NZQXYWA3.js}

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/contracts/yield.ts
 init_platform();

package/dist/safe-bash/chunks/{chunk-JSVX4VIA.js → chunk-OQRVVGR6.js}

@@ -1,10 +1,10 @@
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/llm/index.ts
 init_platform();
-import { createElevenLabsProvider, createLlmCommand, createLlmCommands, createLlmConfiguration, createLlmService, createLlmTemplateStore, createOpenAiProvider, encodeLlmBase64, evaluateLlmTemplate, findExtractedRange, getLlmModelAliases, llmCommands, llmTemplateUsesInput, parseLlmSchemaDsl, resolveLlmSchemaInput, selectLlmModelByQuery, serializeLlmJsonString, serializeLlmJsonValue, serializeOpenAiChatRequest, templateYaml, validateLlmTemplateParameters, validateModelOptions } from "../../safe-bash-command-llm/index.js";
+import { createElevenLabsProvider, createLlmCommand, createLlmCommands, createLlmConfiguration, createLlmService, createLlmTemplateStore, createOpenAiProvider, encodeLlmBase64, evaluateLlmTemplate, findExtractedRange, getLlmModelAliases, llmCommands, llmTemplateUsesInput, loadLlmStoredSchema, parseLlmSchemaDsl, resolveLlmSchemaInput, selectLlmModelByQuery, serializeLlmJsonString, serializeLlmJsonValue, serializeOpenAiChatRequest, templateYaml, validateLlmTemplateParameters, validateModelOptions } from "../../safe-bash-command-llm/index.js";
 
 export {
   createElevenLabsProvider,
@@ -20,6 +20,7 @@ export {
   getLlmModelAliases,
   llmCommands,
   llmTemplateUsesInput,
+  loadLlmStoredSchema,
   parseLlmSchemaDsl,
   resolveLlmSchemaInput,
   selectLlmModelByQuery,

package/dist/safe-bash/chunks/{chunk-B3DDEDH2.js → chunk-OV6IHKO6.js}

@@ -1,9 +1,9 @@
 import {
   builtInDirectContextExecutors
-} from "./chunk-ENR3HB2B.js";
+} from "./chunk-E7OYNDGL.js";
 import {
   init_platform
-} from "./chunk-YG5WAHK7.js";
+} from "./chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/mdq/index.ts
 init_platform();