@poe-platform/safe-bash 0.1.800 → 0.1.801

package/dist/safe-bash/command-chunks/{chunk-STC3LEWJ.js → chunk-ZYXH3B66.js}

@@ -67,7 +67,8 @@ function parseUrl(text, redirect = false) {
 function requestHeaders(args, contentType, user, scoped, maxBytes, previous) {
   const json = args.data[0]?.kind === "json";
   if (json) contentType = "application/json";
-  const defaults = [["Accept", json ? "application/json" : "*/*"], ["User-Agent", args.agent ?? "virtual-bash-curl/0.0"]];
+  const defaults = [["Accept", json ? "application/json" : "*/*"]];
+  if (args.agent !== "") defaults.push(["User-Agent", args.agent ?? "virtual-bash-curl/0.0"]);
   if (contentType !== void 0) defaults.push(["Content-Type", contentType]);
   if (args.compressed) defaults.push(["Accept-Encoding", "gzip, deflate"]);
   const referer = args.autoReferer && previous !== void 0 ? previous : args.referer;
@@ -372,10 +373,12 @@ async function transfer(context, args, input, limits, transport, authorize, star
         values.method = method;
         let denyPrivateNetworks = false;
         let allowed;
+        const headers = requestHeaders(resumeOffset ? { ...args, range: `${resumeOffset}-` } : args, currentBody?.contentType, args.user ?? parsed.user, credentialsInScope, limits.maxHeaderBytes, previous);
         try {
           allowed = await withSignal(() => authorize({
             url: currentUrl,
             method,
+            headers,
             attempt,
             signal,
             requirePrivateNetworkDeny() {
@@ -393,7 +396,6 @@ async function transfer(context, args, input, limits, transport, authorize, star
         if (policy.denyPrivateNetworks && transport.supportsPrivateNetworkDeny !== true) {
           throw new CurlError(7, "Transport cannot enforce private network policy");
         }
-        const headers = requestHeaders(resumeOffset ? { ...args, range: `${resumeOffset}-` } : args, currentBody?.contentType, args.user ?? parsed.user, credentialsInScope, limits.maxHeaderBytes, previous);
         if (args.verbose) await writeBytes(context.stderr, encode(`> ${method} ${current.origin}
 ${headers.map(([name]) => `> ${name}: [redacted]
 `).join("")}`), signal);
@@ -545,7 +547,7 @@ ${headers.map(([name]) => `> ${name}: [redacted]
               }
               if (!final.contentDecoded && length && /^\d+$/.test(length) && downloaded !== Number(length)) throw new CurlError(18, "Partial HTTP response body");
             })();
-            const decoded = args.compressed && !args.raw && !final.contentDecoded && encoding ? decodeContent(encoded, encoding, bodySignal, args.maxFileSize) : encoded;
+            const decoded = args.compressed && !args.raw && !final.contentDecoded && encoding ? decodeContent(encoded, encoding, bodySignal, args.maxFileSize, limits.maxEncodingLayers) : encoded;
             let outputBytes = 0;
             try {
               for await (const chunk of decoded) {

package/dist/safe-bash/commands/bytes/compression/index.js

@@ -1,3 +1,4 @@
+import { withInputByteBudget } from "../../../../safe-bash-contracts/index.js";
 import { createGzipCommands } from "../../../../safe-bash-command-gzip/index.js";
 import { gzip as pakoGzip, ungzip as pakoUngzip } from "pako";
 import bz2Factory from "../../../../safe-bash-compression-engine/native/bz2.js";
@@ -22,7 +23,7 @@ export function createCompressionCommands(config = {}) {
     if (maxDecodedBytes !== undefined && maxDecodedBytes !== Infinity && (!Number.isSafeInteger(maxDecodedBytes) || maxDecodedBytes < 0)) {
         throw new RangeError("maxDecodedBytes must be a nonnegative safe integer or Infinity");
     }
-    const commands = profiles.flatMap(profile => profile.format === "gzip" ? createGzipCommands(config) : profile.format === "bzip2" ? createBzip2Commands(config) : profile.names.map((name) => define(name, async (context) => {
+    const commands = profiles.flatMap(profile => profile.format === "gzip" ? createGzipCommands(config) : profile.format === "bzip2" ? createBzip2Commands(config) : profile.names.map((name) => define(name, withInputByteBudget(async (context) => {
         const options = parseOptions(name, context.args);
         if (options.help) {
             await output(context, `Usage: ${name} [OPTION]... [FILE]...\n-c, --stdout, --to-stdout\n-d, --decompress, --uncompress\n-k, --keep\n-f, --force\n-t, --test\n${options.format === "zstd" ? "-1..-9, --best\nHigher levels and --fast[=NUM] are unsupported by the bounded codec.\n" : "-1..-9, --fast, --best\n"}${options.format === "zstd" ? "-q, --quiet (repeat to suppress errors)\n" : ""}${options.format === "gzip" ? "-q, --quiet (suppress warnings)\n-r, --recursive (traverse directories without following symlinks)\n-n, --no-name (always enabled)\n" : `Default compression level: ${options.level}.\n`}-h, --help\nNo FILE or FILE '-' uses stdin; file output uses private VFS staging.\n`);
@@ -80,7 +81,7 @@ export function createCompressionCommands(config = {}) {
             }
         }
         return { exitCode };
-    })));
+    }))));
     const xzCmds = createXzCommands(config);
     if (maxDecodedBytes === undefined || maxDecodedBytes === Infinity) {
         for (const c of [...commands, ...xzCmds])

package/dist/safe-bash/commands/copy-preserve.d.ts

@@ -2,6 +2,7 @@ import { type CommandContext, type FileStat } from "../contracts/index.js";
 import type { copyOptions } from "./copy-backup.js";
 export type CopyAttribute = "mode" | "ownership" | "timestamps" | "links";
 export type CopyOptions = ReturnType<typeof copyOptions> & {
+    readonly maxRecursiveDirectoryDepth?: number;
     readonly confirmOverwrite?: (operand: string) => Promise<boolean>;
 };
 export declare function admitCopyPreservation(context: CommandContext, preserve: ReadonlySet<CopyAttribute>, source: FileStat, target: string, existing?: FileStat): Promise<void>;

package/dist/safe-bash/commands/csplit/index.browser.js

@@ -3,8 +3,8 @@ import {
   createCsplitCommands,
   csplitCommands,
   evalSyncCsplit
-} from "../../chunks/chunk-QU3BVQ53.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-UTBUUFDM.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createCsplitCommand,
   createCsplitCommands,

package/dist/safe-bash/commands/docx/index.browser.js

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/docx/index.ts
 init_platform();

package/dist/safe-bash/commands/execution.js

@@ -166,8 +166,8 @@ export function executionCommands(execute, configuration = {}) {
             let lastDelimMode;
             const longOptions = { "arg-file": "a", "max-lines": "L", null: "0", "no-run-if-empty": "r", "max-args": "n", "max-chars": "s", replace: "I", delimiter: "d", verbose: "t", "max-procs": "P", exit: "x", eof: "E", "process-slot-var": "process-slot-var:" };
             const parsed = options(argumentValues.args, shortOptions, longOptions, true, index => { operandIndices.push(index); }, (key, index, offset) => { if (key === "I")
-                replacementOrigin = { index, offset }; }, key => {
-                if (key === "I" || key === "L" || key === "n")
+                replacementOrigin = { index, offset }; }, (key, optionValue) => {
+                if (key === "I" || key === "L" || key === "n" && !(batching === "I" && integer(optionValue, 1) === 1))
                     batching = key;
                 if (key === "0" || key === "d")
                     lastDelimMode = key;
@@ -189,7 +189,7 @@ export function executionCommands(execute, configuration = {}) {
             const argumentFile = value(parsed, "a");
             const childInput = argumentFile === undefined ? emptyInput() : context.stdin;
             const childInputIsDefault = argumentFile === undefined ? true : context.stdinIsDefault;
-            const maxArgs = replacement === undefined ? integer(batching === "n" ? value(parsed, "n") : (maxLines === undefined ? "5000" : String(Number.MAX_SAFE_INTEGER)), 1) : 1;
+            const maxArgs = replacement !== undefined ? 1 : batching === "n" ? integer(value(parsed, "n"), 1) : Infinity;
             const size = value(parsed, "s");
             const maxBytes = size === undefined || size === "Infinity" ? Infinity : integer(size, 1);
             let delimiter = parsed.flags.has("0") ? "\0" : undefined;
@@ -703,9 +703,11 @@ export function evalSyncXargs(inBytes, opArgs, readFileSync) {
                 const v = a.slice(11);
                 if (!/^[1-9][0-9]*$/.test(v))
                     return undefined;
-                maxArgs = Number(v);
-                replaceStr = undefined;
-                maxLines = undefined;
+                if (replaceStr === undefined || Number(v) !== 1) {
+                    maxArgs = Number(v);
+                    replaceStr = undefined;
+                    maxLines = undefined;
+                }
                 i++;
                 continue;
             }
@@ -733,9 +735,11 @@ export function evalSyncXargs(inBytes, opArgs, readFileSync) {
                 const v = a.startsWith("-n") && a.length > 2 ? a.slice(2) : opArgs[++i];
                 if (!v || !/^[1-9][0-9]*$/.test(v))
                     return undefined;
-                maxArgs = Number(v);
-                replaceStr = undefined;
-                maxLines = undefined;
+                if (replaceStr === undefined || Number(v) !== 1) {
+                    maxArgs = Number(v);
+                    replaceStr = undefined;
+                    maxLines = undefined;
+                }
                 i++;
                 continue;
             }
@@ -796,9 +800,11 @@ export function evalSyncXargs(inBytes, opArgs, readFileSync) {
                             ok = false;
                             break;
                         }
-                        maxArgs = Number(v);
-                        replaceStr = undefined;
-                        maxLines = undefined;
+                        if (replaceStr === undefined || Number(v) !== 1) {
+                            maxArgs = Number(v);
+                            replaceStr = undefined;
+                            maxLines = undefined;
+                        }
                         break;
                     }
                     else if (ch === "L") {
@@ -1120,7 +1126,7 @@ export function evalSyncXargs(inBytes, opArgs, readFileSync) {
                 runEcho(batch);
         }
         else {
-            const limit = maxArgs ?? 5000;
+            const limit = maxArgs ?? Infinity;
             for (let k = 0; k < tokens.length; k += limit) {
                 runEcho(tokens.slice(k, k + limit));
             }

package/dist/safe-bash/commands/factor/index.browser.js

@@ -2,8 +2,8 @@ import {
   createFactorCommand,
   createFactorCommands,
   factorCommands
-} from "../../chunks/chunk-MHZ24KEI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-AM5ESLPH.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createFactorCommand,
   createFactorCommands,

package/dist/safe-bash/commands/filesystem.d.ts

@@ -1,7 +1,7 @@
 import { type CommandDefinition, type CommandHandler } from "../contracts/index.js";
 export declare const defaultMkdirExecutors: WeakSet<CommandHandler>;
 export declare const defaultRmExecutors: WeakSet<CommandHandler>;
-export declare function filesystemCommands(maxDirectoryEntries?: number): CommandDefinition[];
+export declare function filesystemCommands(maxDirectoryEntries?: number, maxRecursiveDirectoryDepth?: number): CommandDefinition[];
 export interface SyncFsStatNode {
     readonly type: "file" | "directory" | "symlink";
     readonly size: number;

package/dist/safe-bash/commands/filesystem.js

@@ -27,7 +27,6 @@ import { backupCopyTarget, copyOptions, matchBackupMode, normalizeBackupSuffix }
 import { admitCopyPreservation, preserveCopyMetadata } from "./copy-preserve.js";
 // Operand directories start at depth zero; files inside the last admitted
 // directory do not consume another directory-recursion level.
-const MAX_RECURSIVE_DIRECTORY_DEPTH = 1024;
 const MKDIR_LONG_OPTIONS = Object.freeze({ parents: "p", mode: "m", verbose: "v" });
 const TOUCH_LONG_OPTIONS = Object.freeze({ "no-create": "c", "no-dereference": "h", reference: "r", date: "d", time: "time:" });
 const MV_LONG_OPTIONS = Object.freeze({
@@ -312,8 +311,8 @@ async function copy(context, source, target, settings, readDirectory, top = true
         if (targetStat && targetStat.type !== "directory")
             throw new FsError("ENOTDIR", { path: target });
         context.signal.throwIfAborted();
-        if (ancestors.size > MAX_RECURSIVE_DIRECTORY_DEPTH) {
-            throw new FsError("ELOOP", { path: source, message: `cp directory depth limit exceeded (${MAX_RECURSIVE_DIRECTORY_DEPTH})` });
+        if (ancestors.size > (settings.maxRecursiveDirectoryDepth ?? Infinity)) {
+            throw new FsError("ELOOP", { path: source, message: `cp directory depth limit exceeded (${settings.maxRecursiveDirectoryDepth})` });
         }
         await admitFilesystemModes(context, "cp", [attributesOnly ? "attributes-recursive" : "recursive"], [target]);
         const capabilities = await context.fs.capabilitiesFor?.(target, { signal: context.signal }) ?? context.fs.capabilities;
@@ -511,7 +510,10 @@ function modeText(stat) {
 }
 export const defaultMkdirExecutors = new WeakSet();
 export const defaultRmExecutors = new WeakSet();
-export function filesystemCommands(maxDirectoryEntries) {
+export function filesystemCommands(maxDirectoryEntries, maxRecursiveDirectoryDepth = Infinity) {
+    if (maxRecursiveDirectoryDepth !== Infinity && (!Number.isSafeInteger(maxRecursiveDirectoryDepth) || maxRecursiveDirectoryDepth < 0)) {
+        throw new RangeError("maxRecursiveDirectoryDepth must be a nonnegative safe integer or Infinity");
+    }
     const readDirectory = createDirectoryReader(maxDirectoryEntries);
     const commands = [
         define("mkdir", context => {
@@ -702,7 +704,7 @@ export function filesystemCommands(maxDirectoryEntries) {
         }),
         createTouchCommand(),
         define("cp", async (context) => {
-            const parsed = copyOptions(context);
+            const parsed = { ...copyOptions(context), maxRecursiveDirectoryDepth };
             if ((parsed.values.get("t")?.length ?? 0) > 1)
                 throw new UsageError("multiple target directories specified");
             const destination = await destinations(context, parsed.operands, value(parsed, "t"), parsed.flags.has("T"));
@@ -1044,9 +1046,11 @@ export function filesystemCommands(maxDirectoryEntries) {
                 if (!parsed.flags.has("f"))
                     requireOperands(parsed.operands);
                 const recursive = parsed.flags.has("r") || parsed.flags.has("R");
+                const recursiveTraversal = recursive && (interactive === "always" || maxRecursiveDirectoryDepth !== Infinity);
                 const backingMem = getRuntimeBackingFileSystem(context.fs);
                 const caps = context.fs.capabilities;
                 const fastStockMemory = interactive === "never" &&
+                    !recursiveTraversal &&
                     backingMem !== undefined &&
                     backingMem.capabilitiesFor === undefined &&
                     backingMem.symlinkCount === 0 &&
@@ -1132,14 +1136,14 @@ export function filesystemCommands(maxDirectoryEntries) {
                         }
                         if (stat.type === "directory" && !recursive && !parsed.flags.has("d"))
                             throw new FsError("EISDIR", { path });
-                        if (interactive === "always") {
+                        if (interactive === "always" || recursiveTraversal) {
                             const display = escapeText(operand, "display");
                             if (stat.type === "directory" && recursive) {
-                                if (depth > MAX_RECURSIVE_DIRECTORY_DEPTH)
+                                if (depth > maxRecursiveDirectoryDepth)
                                     throw new FsError("ELOOP", { path });
                                 const entries = await readDirectory(context, path, true);
                                 if (entries.length) {
-                                    if (!await confirm(`descend into directory '${display}'`))
+                                    if (interactive === "always" && !await confirm(`descend into directory '${display}'`))
                                         return false;
                                     let removed = true;
                                     for (const entry of entries)
@@ -1150,10 +1154,10 @@ export function filesystemCommands(maxDirectoryEntries) {
                                 }
                             }
                             const type = stat.type === "file" ? stat.size === 0 ? "regular empty file" : "regular file" : stat.type === "symlink" ? "symbolic link" : "directory";
-                            if (!await confirm(`remove ${type} '${display}'`))
+                            if (interactive === "always" && !await confirm(`remove ${type} '${display}'`))
                                 return false;
                         }
-                        if (stat.type === "directory" && (!recursive || interactive === "always")) {
+                        if (stat.type === "directory" && (!recursive || recursiveTraversal)) {
                             try {
                                 await removeEmptyDirectory(context, path, readDirectory);
                             }
@@ -1633,8 +1637,8 @@ export function filesystemCommands(maxDirectoryEntries) {
                 if (ancestors.has(physical))
                     throw new FsError("ELOOP", { path });
                 context.signal.throwIfAborted();
-                if (ancestors.size > MAX_RECURSIVE_DIRECTORY_DEPTH) {
-                    throw new FsError("ELOOP", { path, message: `ls directory depth limit exceeded (${MAX_RECURSIVE_DIRECTORY_DEPTH})` });
+                if (ancestors.size > maxRecursiveDirectoryDepth) {
+                    throw new FsError("ELOOP", { path, message: `ls directory depth limit exceeded (${maxRecursiveDirectoryDepth})` });
                 }
                 ancestors.add(physical);
                 try {
@@ -1712,7 +1716,7 @@ export function filesystemCommands(maxDirectoryEntries) {
     for (const command of commands) {
         if (command.name === "mkdir")
             defaultMkdirExecutors.add(command.execute);
-        else if (command.name === "rm")
+        else if (command.name === "rm" && maxRecursiveDirectoryDepth === Infinity)
             defaultRmExecutors.add(command.execute);
     }
     return commands;

package/dist/safe-bash/commands/getopt/index.browser.js

@@ -3,8 +3,8 @@ import {
   createGetoptCommands,
   evalSyncGetopt,
   getoptCommands
-} from "../../chunks/chunk-3L3T6LYV.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-AUSNDQTJ.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createGetoptCommand,
   createGetoptCommands,

package/dist/safe-bash/commands/hexdump/index.browser.js

@@ -3,8 +3,8 @@ import {
   createHexdumpCommand,
   createHexdumpCommands,
   hexdumpCommands
-} from "../../chunks/chunk-M4CFCXHN.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-CS4MNM6I.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createHdCommand,
   createHexdumpCommand,

package/dist/safe-bash/commands/htmlq/index.d.ts

@@ -1,6 +1,6 @@
 import { HtmlError, detachHtmlNode, htmlText, htmlq, htmlqBaseline, htmlqBytes, inclusiveHtmlDescendants, parseHtml, parseHtmlSync, parseHtmlqArguments, selectHtml, serializeHtml, serializeHtmlBytes } from "../../../safe-bash-command-htmlq/index.js";
 export { selectHtml, parseHtmlqArguments, htmlqBytes, htmlq, parseHtml, parseHtmlSync, inclusiveHtmlDescendants, serializeHtml, serializeHtmlBytes, htmlText, detachHtmlNode, HtmlError, htmlqBaseline, };
-export type { HtmlqArguments, HtmlqCommandOptions, HtmlqCommandsOptions, HtmlqRunOptions, HtmlqResult, HtmlAccounting, HtmlOptions, HtmlLimits, HtmlNode, HtmlNamespace, HtmlAttribute, HtmlErrorCode, } from "../../../safe-bash-command-htmlq/index.js";
+export type { HtmlqArguments, HtmlqCommandOptions, HtmlqCommandsOptions, HtmlqLimits, HtmlqRunOptions, HtmlqResult, HtmlAccounting, HtmlOptions, HtmlLimits, HtmlNode, HtmlNamespace, HtmlAttribute, HtmlErrorCode, } from "../../../safe-bash-command-htmlq/index.js";
 export { createHtmlqCommand, createHtmlqCommands, htmlqCommand, htmlqCommands } from "../../../safe-bash-command-htmlq/index.js";
 export declare function evalSyncHtmlq(inBytes: Uint8Array | undefined, opArgs: readonly string[], readFileSync?: (filePath: string) => Uint8Array | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean): string | undefined;
 //# sourceMappingURL=index.d.ts.map

package/dist/safe-bash/commands/iconv/index.browser.js

@@ -3,8 +3,8 @@ import {
   createIconvCommands,
   evalSyncIconv,
   iconvCommands
-} from "../../chunks/chunk-H6JW3E4F.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-CTVWDACF.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createIconvCommand,
   createIconvCommands,

package/dist/safe-bash/commands/line-endings/index.browser.js

@@ -6,8 +6,8 @@ import {
   dos2unixCommands,
   dos2unixCommands2,
   evalSyncLineEndings
-} from "../../chunks/chunk-4SEW2Q6H.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-3R3AANOR.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createDos2unixCommand,
   createDos2unixCommands,

package/dist/safe-bash/commands/llm/index.browser.js

@@ -22,8 +22,8 @@ import {
   templateYaml,
   validateLlmTemplateParameters,
   validateModelOptions
-} from "../../chunks/chunk-TFGRKY43.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-OQRVVGR6.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createElevenLabsProvider,
   createLlmCommand,

package/dist/safe-bash/commands/llm/providers/index.browser.js

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "../../../chunks/chunk-YG5WAHK7.js";
+} from "../../../chunks/chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/llm/providers/index.ts
 init_platform();

package/dist/safe-bash/commands/mdq/index.browser.js

@@ -7,9 +7,9 @@ import {
   mdqCommand,
   mdqCommands,
   parseMdqArguments
-} from "../../chunks/chunk-PPYM75Z3.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-OV6IHKO6.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   MdqError,
   createMdqCommand,

package/dist/safe-bash/commands/media/index.browser.js

@@ -3,7 +3,7 @@ import {
   __commonJS,
   __toESM,
   init_platform
-} from "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-B7TAL7S5.js";
 
 // node_modules/xmlchars/xml/1.0/ed5.js
 var require_ed5 = __commonJS({

package/dist/safe-bash/commands/network/curl.d.ts

@@ -1,4 +1,4 @@
 import type { NetworkCommandsOptions } from "./types.js";
 export * from "../../../safe-bash-command-curl/curl.js";
-export declare function createCurlCommand(options: NetworkCommandsOptions): import("../../../safe-bash-contracts/index.js").CommandDefinition;
+export declare function createCurlCommand(options?: NetworkCommandsOptions): import("../../../safe-bash-contracts/index.js").CommandDefinition;
 //# sourceMappingURL=curl.d.ts.map

package/dist/safe-bash/commands/network/curl.js

@@ -2,9 +2,7 @@ import { createCurlCommand as createPortableCommand } from "../../../safe-bash-c
 import { createDefaultHttpTransport, requiresFiniteUrlLimits } from "#safe-bash-network-platform";
 import { limitsFor } from "./shared.js";
 export * from "../../../safe-bash-command-curl/curl.js";
-export function createCurlCommand(options) {
-    if (typeof options?.authorize !== "function")
-        throw new TypeError("curl requires an explicit network authorizer");
+export function createCurlCommand(options = {}) {
     const limits = limitsFor(options.limits);
     if (requiresFiniteUrlLimits && (!Number.isFinite(limits.maxUrls) || !Number.isFinite(limits.maxBufferBytes)))
         throw new TypeError("Portable network commands require finite maxUrls and maxBufferBytes limits");

package/dist/safe-bash/commands/network/index.browser.js

@@ -12,10 +12,10 @@ import {
   evalSyncCurl,
   evalSyncWget,
   networkCommands
-} from "../../chunks/chunk-K2VCOJ2B.js";
-import "../../chunks/chunk-KV7PKOHV.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-K6VCD7IY.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   CurlError,
   cloudflareWorkerNetworkLimits,

package/dist/safe-bash/commands/network/platform-portable.d.ts

@@ -1,6 +1,2 @@
-export declare const requiresFiniteUrlLimits = true;
-export declare function createDefaultHttpTransport(): never;
-export declare function randomBytes(length: number): Uint8Array;
-export declare function validateHeaderName(name: string): void;
-export declare function validateHeaderValue(_name: string, value: string): void;
+export * from "../../../safe-bash-network-engine/platform-portable.js";
 //# sourceMappingURL=platform-portable.d.ts.map

package/dist/safe-bash/commands/network/platform-portable.js

@@ -1,27 +1,2 @@
-export const requiresFiniteUrlLimits = true;
-export function createDefaultHttpTransport() {
-    throw new TypeError("Portable network commands require an explicit HTTP transport; inject createFetchTransport() or a host transport");
-}
-export function randomBytes(length) {
-    const bytes = new Uint8Array(length);
-    globalThis.crypto.getRandomValues(bytes);
-    return bytes;
-}
-export function validateHeaderName(name) {
-    if (!name.length)
-        throw new TypeError("Invalid HTTP header name");
-    for (const character of name) {
-        const code = character.charCodeAt(0);
-        if (!(code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122 || "!#$%&'*+-.^_`|~".includes(character))) {
-            throw new TypeError("Invalid HTTP header name");
-        }
-    }
-}
-export function validateHeaderValue(_name, value) {
-    for (const character of value) {
-        const code = character.charCodeAt(0);
-        if (code !== 9 && (code < 32 || code === 127 || code > 255))
-            throw new TypeError("Invalid HTTP header value");
-    }
-}
+export * from "../../../safe-bash-network-engine/platform-portable.js";
 //# sourceMappingURL=platform-portable.js.map

package/dist/safe-bash/commands/network/public.d.ts

@@ -6,8 +6,8 @@ export { createFetchTransport, type FetchTransportOptions } from "./fetch-transp
 export { createOriginAuthorizer, type OriginAllowlist, type OriginAuthorizerOptions } from "./authorizer.js";
 export { createCurlCommand } from "./curl.js";
 export { createWgetCommand } from "./wget.js";
-export declare function createNetworkCommands(options: NetworkCommandsOptions): readonly CommandDefinition[];
-export declare function networkCommands(options: NetworkCommandsOptions): VirtualShellPlugin;
+export declare function createNetworkCommands(options?: NetworkCommandsOptions): readonly CommandDefinition[];
+export declare function networkCommands(options?: NetworkCommandsOptions): VirtualShellPlugin;
 export declare const createCurlCommands: typeof createNetworkCommands;
 export declare const curlCommands: typeof networkCommands;
 export declare function evalSyncCurl(opArgs: readonly string[]): string | undefined;

package/dist/safe-bash/commands/network/public.js

@@ -7,10 +7,10 @@ export { createFetchTransport } from "./fetch-transport.js";
 export { createOriginAuthorizer } from "./authorizer.js";
 export { createCurlCommand } from "./curl.js";
 export { createWgetCommand } from "./wget.js";
-export function createNetworkCommands(options) {
+export function createNetworkCommands(options = {}) {
     return [createCurlCommand(options), createWgetCommand(options)];
 }
-export function networkCommands(options) {
+export function networkCommands(options = {}) {
     const definitions = createNetworkCommands(options);
     return {
         name: "network-commands",

package/dist/safe-bash/commands/network/transport.js

@@ -102,12 +102,12 @@ export function createNodeHttpTransport(options = {}) {
                 request = (url.protocol === "https:" ? httpsRequest : httpRequest)(url, {
                     method: input.method,
                     path: curlRequestTarget(input.url),
-                    headers: pinned && headers.host?.length === 1 ? { ...headers, host: headers.host[0] } : headers,
+                    headers: headers.host?.length === 1 ? { ...headers, host: headers.host[0] } : headers,
                     signal, maxHeaderSize: Number.isFinite(maxHeaderSize) ? maxHeaderSize : Number.MAX_SAFE_INTEGER, agent: false,
                     ...(requestCa === undefined ? {} : { ca: requestCa }),
                     ...(input.ca === undefined ? {} : { rejectUnauthorized: true }),
                     ...pinned,
-                    ...(pinned && url.protocol === "https:" ? {
+                    ...(url.protocol === "https:" ? {
                         servername: isIP(hostname) ? "" : hostname,
                         rejectUnauthorized: true,
                         checkServerIdentity: (_servername, certificate) => checkServerIdentity(hostname, certificate),

package/dist/safe-bash/commands/network/wget.d.ts

@@ -1,4 +1,4 @@
 import type { NetworkCommandsOptions } from "./types.js";
 export * from "../../../safe-bash-command-wget/wget.js";
-export declare function createWgetCommand(options: NetworkCommandsOptions): import("../../../safe-bash-contracts/index.js").CommandDefinition;
+export declare function createWgetCommand(options?: NetworkCommandsOptions): import("../../../safe-bash-contracts/index.js").CommandDefinition;
 //# sourceMappingURL=wget.d.ts.map

package/dist/safe-bash/commands/network/wget.js

@@ -2,9 +2,7 @@ import { createWgetCommand as createPortableCommand } from "../../../safe-bash-c
 import { createDefaultHttpTransport, requiresFiniteUrlLimits } from "#safe-bash-network-platform";
 import { limitsFor } from "./shared.js";
 export * from "../../../safe-bash-command-wget/wget.js";
-export function createWgetCommand(options) {
-    if (typeof options?.authorize !== "function")
-        throw new TypeError("wget requires an explicit network authorizer");
+export function createWgetCommand(options = {}) {
     const limits = limitsFor(options.limits);
     if (requiresFiniteUrlLimits && (!Number.isFinite(limits.maxUrls) || !Number.isFinite(limits.maxBufferBytes)))
         throw new TypeError("Portable network commands require finite maxUrls and maxBufferBytes limits");

package/dist/safe-bash/commands/node/filesystem.js

@@ -1,4 +1,5 @@
 import { commandLimits } from "../safejs/options.js";
+import { yieldTurn } from "../../../safe-bash-contracts/yield.js";
 import { SafeJsCommandLimitError } from "../safejs/types.js";
 export function nodeReadFile(options, fs, signal, fail, pending) {
     const read = fs.readFile;
@@ -21,11 +22,11 @@ export function nodeReadFile(options, fs, signal, fail, pending) {
         }
         const done = callback;
         const completion = Promise.resolve().then(() => read(path, encoding)).then(async (text) => {
-            await new Promise(resolve => setImmediate(resolve));
+            await yieldTurn(signal);
             signal.throwIfAborted();
             return done(null, text);
         }, async (error) => {
-            await new Promise(resolve => setImmediate(resolve));
+            await yieldTurn(signal);
             signal.throwIfAborted();
             return done(error);
         }).then(() => undefined).catch(fail).finally(() => pending.delete(completion));

package/dist/safe-bash/commands/node/index.browser.js

@@ -2,14 +2,14 @@ import {
   createSafeJsNodeCommand,
   createSafeJsNodeCommands,
   safeJsNodeCommands
-} from "../../chunks/chunk-RKKRJ54E.js";
-import "../../chunks/chunk-TYD7EVUJ.js";
-import "../../chunks/chunk-BHJE5LPZ.js";
-import "../../chunks/chunk-VYZTG3GV.js";
-import "../../chunks/chunk-PYVEAFJM.js";
-import "../../chunks/chunk-KV7PKOHV.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-FNDNHAGE.js";
+import "../../chunks/chunk-IVRQ4BXL.js";
+import "../../chunks/chunk-D3ANYGMC.js";
+import "../../chunks/chunk-NZQXYWA3.js";
+import "../../chunks/chunk-74GHTNJA.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createSafeJsNodeCommand as createNodeCommand,
   createSafeJsNodeCommands as createNodeCommands,

package/dist/safe-bash/commands/node/types.js

@@ -5,7 +5,7 @@ export function resolveNodeLimits(options = {}) {
     for (const [name, value] of Object.entries(options)) {
         if (name === "sabBytes" || !Object.hasOwn(nodeLimits, name))
             throw new TypeError(`Unknown Node limit: ${name}`);
-        if (!Number.isSafeInteger(value) || value < 0 || ["admissionMs", "oldGenerationMiB", "youngGenerationMiB", "codeMiB", "stackMiB"].includes(name) && value < 1)
+        if (value !== Infinity && (!Number.isSafeInteger(value) || value < 0 || ["admissionMs", "oldGenerationMiB", "youngGenerationMiB", "codeMiB", "stackMiB"].includes(name) && value < 1))
             throw new RangeError(`Invalid Node limit: ${name}`);
     }
     return Object.freeze({ ...nodeLimits, ...options });

package/dist/safe-bash/commands/op/index.browser.js

@@ -19,9 +19,9 @@ import {
   restoreEnvironment,
   selectOpBackendContext,
   selectOpGlobalFlags
-} from "../../chunks/chunk-I7L3G3NX.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-UE5KZDEK.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   captureEnvironment,
   createDocumentHandlers,

package/dist/safe-bash/commands/pr/index.browser.js

@@ -3,8 +3,8 @@ import {
   createPrCommands,
   evalSyncPr,
   prCommands
-} from "../../chunks/chunk-F3RV2F72.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-CHYGPFVM.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createPrCommand,
   createPrCommands,