@poe-platform/safe-bash 0.1.800 → 0.1.801

package/dist/safe-bash/commands/python/host-capabilities.js

@@ -22,6 +22,7 @@ export function createPythonHostBridge(capabilities, options) {
     const pending = new Set();
     const streams = new Map();
     const jobs = new Map();
+    const activeCalls = new Set();
     const cleanupFailures = [];
     const jobWork = new Set();
     let nextJob = 1;
@@ -93,16 +94,17 @@ export function createPythonHostBridge(capabilities, options) {
         const stream = streams.get(handle);
         if (!stream)
             throw new Error('Unknown Python host stream');
-        streams.delete(handle);
-        if (cancel)
-            stream.controller.abort(new Error('Python host stream released'));
-        try {
-            await stream.iterator.return?.();
-        }
-        catch (error) {
-            cleanupFailures.push(error);
-            throw error;
+        if (!stream.closing) {
+            stream.closing = Promise.resolve().then(async () => {
+                if (cancel)
+                    stream.controller.abort(new Error('Python host stream released'));
+                await stream.iterator.return?.();
+                // Retained iterators consume admission until cleanup succeeds, including
+                // when a host ignores cancellation or its cleanup fails.
+                streams.delete(handle);
+            }).catch(error => { cleanupFailures.push(error); throw error; });
         }
+        await stream.closing;
     };
     const pull = async (handle) => {
         const stream = streams.get(handle);
@@ -140,6 +142,7 @@ export function createPythonHostBridge(capabilities, options) {
         const payload = data(incoming);
         if (!payload || Array.isArray(payload) || typeof payload !== 'object' || payload.version !== 1)
             throw new TypeError('Unsupported Python host protocol');
+        let reservation;
         const operation = Promise.resolve().then(async () => {
             assertLive();
             if (payload.operation === 'poll' || payload.operation === 'cancel') {
@@ -151,23 +154,29 @@ export function createPythonHostBridge(capabilities, options) {
                     throw new Error('Unknown Python host job');
                 if (payload.operation === 'cancel') {
                     jobs.delete(handle);
+                    if (job.settled)
+                        activeCalls.delete(job.reservation);
                     job.controller.abort(new Error('Python guest cancelled host operation'));
                     return null;
                 }
                 if (job.result === undefined && !job.failed)
                     return { done: false };
                 jobs.delete(handle);
+                if (job.settled)
+                    activeCalls.delete(job.reservation);
                 return job.failed ? { done: true, error: 'Python host operation failed', errorCode: job.failed } : { done: true, value: job.result };
             }
-            if (Math.max(jobWork.size, jobs.size) >= maxConcurrentCalls)
+            if (activeCalls.size >= maxConcurrentCalls)
                 throw new Error('Python host call concurrency limit exceeded');
+            reservation = {};
+            activeCalls.add(reservation);
             if (payload.operation === 'begin' || payload.operation === 'begin-next') {
                 let work;
                 let child;
                 let reservedStream;
                 if (payload.operation === 'begin-next') {
                     const stream = typeof payload.handle === 'number' ? streams.get(payload.handle) : undefined;
-                    if (!stream || stream.busy)
+                    if (!stream || stream.busy || stream.closing)
                         throw new Error('Unknown or busy Python host stream');
                     reservedStream = stream;
                     stream.busy = true;
@@ -182,8 +191,10 @@ export function createPythonHostBridge(capabilities, options) {
                     work = childSignal => capability.call(payload.value ?? null, { signal: childSignal });
                 }
                 const handle = nextJob++;
-                const job = { controller: child };
+                const job = { controller: child, reservation, settled: false };
                 jobs.set(handle, job);
+                // Transfer admission to the job until both host work and guest ownership end.
+                reservation = undefined;
                 const task = Promise.resolve().then(() => {
                     const childSignal = AbortSignal.any([signal, child.signal]);
                     childSignal.throwIfAborted();
@@ -193,6 +204,9 @@ export function createPythonHostBridge(capabilities, options) {
                     child.signal.throwIfAborted();
                     job.result = data(value);
                 }).catch(error => { job.failed = pythonHostFailureCode(error); }).finally(() => {
+                    job.settled = true;
+                    if (!jobs.has(handle))
+                        activeCalls.delete(job.reservation);
                     if (reservedStream)
                         reservedStream.busy = false;
                     jobWork.delete(task);
@@ -207,8 +221,8 @@ export function createPythonHostBridge(capabilities, options) {
                 const stream = streams.get(handle);
                 if (!stream)
                     throw new Error('Unknown Python host stream');
-                if (stream.busy)
-                    throw new Error('Python host stream already pulling');
+                if (stream.busy || stream.closing)
+                    throw new Error('Python host stream already pulling or closing');
                 if (payload.operation === 'release') {
                     await release(handle);
                     return null;
@@ -248,6 +262,8 @@ export function createPythonHostBridge(capabilities, options) {
         }
         finally {
             pending.delete(operation);
+            if (reservation)
+                activeCalls.delete(reservation);
         }
     };
     const close = () => {
@@ -260,6 +276,7 @@ export function createPythonHostBridge(capabilities, options) {
                 job.controller.abort(controller.signal.reason);
             await Promise.allSettled([...pending, ...jobWork]);
             jobs.clear();
+            activeCalls.clear();
             const results = await Promise.allSettled([...streams.keys()].map(handle => release(handle)));
             registry.clear();
             for (const result of results)

package/dist/safe-bash/commands/python/index.browser.js

@@ -16,20 +16,20 @@ import {
   pythonCommands,
   pythonDocumentPackages,
   pythonHostFailureCode
-} from "../../chunks/chunk-JTLSUJ7V.js";
-import "../../chunks/chunk-KCVSVD65.js";
-import "../../chunks/chunk-JJSTTIEZ.js";
-import "../../chunks/chunk-46UISJCK.js";
-import "../../chunks/chunk-VYZTG3GV.js";
-import "../../chunks/chunk-PYVEAFJM.js";
-import "../../chunks/chunk-LQHGH25W.js";
+} from "../../chunks/chunk-VQDD3G76.js";
+import "../../chunks/chunk-I5HZ4FGE.js";
+import "../../chunks/chunk-ICFDYV64.js";
+import "../../chunks/chunk-VTH3MLDU.js";
+import "../../chunks/chunk-NZQXYWA3.js";
+import "../../chunks/chunk-74GHTNJA.js";
+import "../../chunks/chunk-7R5BDCG7.js";
 import {
   PythonFailure,
   inspectPythonCapabilities
-} from "../../chunks/chunk-63FXVDGF.js";
-import "../../chunks/chunk-KV7PKOHV.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-LVOBFF4D.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   PythonFailure,
   PythonPackageConflictError,

package/dist/safe-bash/commands/python/manifest.d.ts

@@ -18,6 +18,7 @@ export declare class PythonPackageConflictError extends Error {
 export declare function createPythonPackageManifestStore(options?: {
     readonly maxBytes?: number;
     readonly maxEntries?: number;
+    readonly maxScopeLength?: number;
 }): PythonPackageManifestStore & {
     dispose(): void;
 };

package/dist/safe-bash/commands/python/manifest.js

@@ -9,14 +9,15 @@ export class PythonPackageConflictError extends Error {
 export function createPythonPackageManifestStore(options = {}) {
     const maxBytes = options.maxBytes ?? Infinity;
     const maxEntries = options.maxEntries ?? Infinity;
-    for (const [name, value] of Object.entries({ maxBytes, maxEntries })) {
+    const maxScopeLength = options.maxScopeLength ?? Infinity;
+    for (const [name, value] of Object.entries({ maxBytes, maxEntries, maxScopeLength })) {
         if (value !== Infinity && (!Number.isSafeInteger(value) || value < 1)) {
             throw new RangeError(`Python manifest ${name} must be a positive safe integer or Infinity`);
         }
     }
     const manifests = new Map();
     let retainedBytes = 0;
-    let revision = 0;
+    let revision = 0n;
     let disposed = false;
     const check = (scope, signal) => {
         signal.throwIfAborted();
@@ -24,6 +25,8 @@ export function createPythonPackageManifestStore(options = {}) {
             throw new Error('Python manifest store is disposed');
         if (typeof scope !== 'string' || !scope)
             throw new TypeError('Invalid Python manifest scope');
+        if (scope.length > maxScopeLength)
+            throw new RangeError('Python manifest scope budget exhausted');
     };
     return {
         async get(scope, { signal }) {
@@ -39,7 +42,7 @@ export function createPythonPackageManifestStore(options = {}) {
             if (!(bytes instanceof Uint8Array))
                 throw new TypeError('Python manifest must contain bytes');
             const nextBytes = retainedBytes - (current?.bytes.length ?? 0) + bytes.length;
-            if (nextBytes > maxBytes || (!current && manifests.size >= maxEntries) || revision >= Number.MAX_SAFE_INTEGER) {
+            if (nextBytes > maxBytes || (!current && manifests.size >= maxEntries)) {
                 throw new RangeError('Python manifest store budget exhausted');
             }
             manifests.set(scope, { revision: String(++revision), bytes: Uint8Array.from(bytes) });

package/dist/safe-bash/commands/python/shell-capability.d.ts

@@ -5,6 +5,7 @@ export declare function pythonShellDispatchActive(scope: object | undefined): bo
 export declare function createPythonShellCapability(context: CommandContext, options?: {
     readonly maxInputBytes?: number;
     readonly maxOutputBytes?: number;
+    readonly maxBufferedOutputBytes?: number;
     readonly maxConcurrentCalls?: number;
     readonly maxStreamChunkBytes?: number;
 }): PythonHostCapability;

package/dist/safe-bash/commands/python/shell-capability.js

@@ -8,8 +8,9 @@ export function createPythonShellCapability(context, options = {}) {
         throw new TypeError('Python shell capability requires a parent shell invocation');
     const maxInputBytes = options.maxInputBytes ?? Infinity;
     const maxOutputBytes = options.maxOutputBytes ?? Infinity;
+    const maxBufferedOutputBytes = options.maxBufferedOutputBytes ?? Infinity;
     const maxConcurrentCalls = options.maxConcurrentCalls ?? Infinity;
-    for (const limit of [maxInputBytes, maxOutputBytes, maxConcurrentCalls])
+    for (const limit of [maxInputBytes, maxOutputBytes, maxBufferedOutputBytes, maxConcurrentCalls])
         if (limit !== Infinity && (!Number.isSafeInteger(limit) || limit < 1))
             throw new RangeError('Invalid Python shell limit');
     const chunkBytes = options.maxStreamChunkBytes ?? 16384;
@@ -28,7 +29,7 @@ export function createPythonShellCapability(context, options = {}) {
         const requestedOutput = request.maxOutputBytes;
         if (requestedOutput !== undefined && (typeof requestedOutput !== 'number' || requestedOutput !== Infinity && (!Number.isSafeInteger(requestedOutput) || requestedOutput < 0)))
             throw new RangeError('Invalid Python shell output limit');
-        const outputLimit = Math.min(maxOutputBytes, typeof requestedOutput === 'number' ? requestedOutput : maxOutputBytes);
+        const outputLimit = Math.min(maxOutputBytes, publish ? Infinity : maxBufferedOutputBytes, typeof requestedOutput === 'number' ? requestedOutput : Infinity);
         const timeoutMs = request.timeoutMs;
         if (timeoutMs !== undefined && (typeof timeoutMs !== 'number' || !Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2147483647))
             throw new RangeError('Invalid Python shell timeout');

package/dist/safe-bash/commands/python/worker.browser.js

@@ -8,11 +8,11 @@ import {
   pythonRuntimeRelocation,
   pythonStatProjection,
   pythonTreeCleanup
-} from "../../chunks/chunk-63FXVDGF.js";
-import "../../chunks/chunk-KV7PKOHV.js";
+} from "../../chunks/chunk-LVOBFF4D.js";
+import "../../chunks/chunk-IWDICZVK.js";
 import {
   init_platform
-} from "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/python/worker.ts
 init_platform();

package/dist/safe-bash/commands/regex-execution/public.browser.js

@@ -1,6 +1,6 @@
 import {
   RegexExecutionError
-} from "../../chunks/chunk-KHMGTPD6.js";
+} from "../../chunks/chunk-46Z5E5EV.js";
 import {
   EreLedger,
   EreProfileLimitError,
@@ -9,13 +9,13 @@ import {
   EreUsageUnknownError,
   compileEre,
   matchEre
-} from "../../chunks/chunk-XB3B7KMM.js";
+} from "../../chunks/chunk-6O77NL2S.js";
 import {
   RegexExecutor,
   RegexSession,
   createBoundedRegexProvider
-} from "../../chunks/chunk-6HZYFL3H.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-NR3EM4LS.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   EreLedger,
   EreProfileLimitError,

package/dist/safe-bash/commands/safejs/runtime.js

@@ -210,13 +210,22 @@ export function createSafeJsCommands(options, dialect) {
                                 }
                             },
                         });
-                        const result = record(await withSignal(signal, () => runtime.run(prepared?.source ?? source, {
-                            ...(parsed.nodeOptions?.length ? { nodeOptions: parsed.nodeOptions } : {}),
-                            budget, filename, modules, signal, ...(prepared ? { bindings: prepared.bindings,
-                                ...(prepared.sourceLocation ? { sourceLocation: prepared.sourceLocation } : {}),
-                                ...(prepared.importSpecifiers ? { importSpecifiers: prepared.importSpecifiers } : {}) } : {}),
-                            sink: { log: (...args) => output.console(args, false), error: (...args) => output.console(args, true) },
-                        })), "SafeJS run result");
+                        let rawResult;
+                        try {
+                            rawResult = await withSignal(signal, () => runtime.run(prepared?.source ?? source, {
+                                ...(parsed.nodeOptions?.length ? { nodeOptions: parsed.nodeOptions } : {}),
+                                budget, filename, modules, signal, ...(prepared ? { bindings: prepared.bindings,
+                                    ...(prepared.sourceLocation ? { sourceLocation: prepared.sourceLocation } : {}),
+                                    ...(prepared.importSpecifiers ? { importSpecifiers: prepared.importSpecifiers } : {}) } : {}),
+                                sink: { log: (...args) => output.console(args, false), error: (...args) => output.console(args, true) },
+                            }));
+                        }
+                        catch (error) {
+                            if (error instanceof SafeJsCommandLimitError || statusField(error, "code") === "budgetExceeded" || signal.aborted)
+                                throw error;
+                            throw new GuestDiagnostic(errorInfo(error));
+                        }
+                        const result = record(rawResult, "SafeJS run result");
                         signal.throwIfAborted();
                         if (result.ok !== true && result.ok !== false)
                             throw new TypeError("Invalid SafeJS run result.ok");

package/dist/safe-bash/commands/standard.d.ts

@@ -12,6 +12,7 @@ export interface StandardCommandsOptions {
     readonly regex?: RegexExecutionOptions;
     readonly regexExecutor?: BoundedRegexProvider;
     readonly maxDirectoryEntries?: number;
+    readonly maxRecursiveDirectoryDepth?: number;
     readonly maxTeeTargets?: number;
     readonly maxTailFollowHandles?: number;
 }

package/dist/safe-bash/commands/standard.js

@@ -24,6 +24,7 @@ export function createStandardCommandsWithGrep(options, grep) {
         return { exitCode: 127 };
     }));
     if (options.maxDirectoryEntries === undefined &&
+        options.maxRecursiveDirectoryDepth === undefined &&
         options.maxTeeTargets === undefined &&
         options.maxTailFollowHandles === undefined &&
         options.predicateIdentity === undefined) {
@@ -45,7 +46,7 @@ export function createStandardCommandsWithGrep(options, grep) {
             builtInDirectContextExecutors.add(commands[i].execute);
         return commands;
     }
-    commands.push(...basicCommands(), ...filesystemCommands(options.maxDirectoryEntries), ...streamCommands(options.maxTeeTargets, options.maxTailFollowHandles), ...textCommands(), ...grep, ...predicateCommands(options.predicateIdentity), ...executionCommands(execute, options.execution), ...findCommands(execute, options.maxDirectoryEntries));
+    commands.push(...basicCommands(), ...filesystemCommands(options.maxDirectoryEntries, options.maxRecursiveDirectoryDepth), ...streamCommands(options.maxTeeTargets, options.maxTailFollowHandles), ...textCommands(), ...grep, ...predicateCommands(options.predicateIdentity), ...executionCommands(execute, options.execution), ...findCommands(execute, options.maxDirectoryEntries));
     commands.push(cmpCommand(), fmtCommand(), shufCommand(), numfmtCommand());
     for (let i = 0; i < commands.length; i++)
         builtInDirectContextExecutors.add(commands[i].execute);

package/dist/safe-bash/commands/streams.js

@@ -1,4 +1,3 @@
-import { encodeBytes, equalBytes } from "../byte-encoding.js";
 import { hasYieldCheckpoint } from "../contracts/yield.js";
 const SMALL_WC_COUNT_LINES = Array.from({ length: 129 }, (_, i) => `${i}\n`);
 const SINGLE_STDIN_OPERAND = ["-"];
@@ -17,9 +16,6 @@ function isSyncResolved(promise) {
     return Boolean(promise && typeof promise === "object" && promise[syncResolved]);
 }
 let sharedTrOutBuffer = new Uint8Array(64 * 1024);
-const cachedTrOutBuffer = new Uint8Array(32768);
-let lastTrInBuf;
-let lastTrMapping;
 let sharedTrOutInUse = false;
 const trConfigCache = new Map();
 let lastTrArg0;
@@ -1034,26 +1030,8 @@ export function streamCommands(maxTeeTargets = Infinity, maxTailFollowHandles =
                         const useShared = chunk.length <= sharedTrOutBuffer.length;
                         const buf = useShared ? sharedTrOutBuffer : new Uint8Array(chunk.length);
                         if (!deleting && !squeezing) {
-                            if (useShared &&
-                                chunk.length >= 256 &&
-                                lastTrInBuf !== undefined &&
-                                chunk.length === lastTrInBuf.byteLength &&
-                                mapping === lastTrMapping &&
-                                equalBytes(lastTrInBuf, chunk)) {
-                                const p = outputRange(context, cachedTrOutBuffer, chunk.length);
-                                if (!isSyncResolved(p)) {
-                                    released = true;
-                                    return executeTrAfterPending(p, context, iter, deleting, squeezing, mapping, removed, squeezed, previous, true);
-                                }
-                                continue;
-                            }
                             for (let index = 0; index < chunk.length; index++)
                                 buf[index] = mapping[chunk[index]];
-                            if (useShared && chunk.length >= 256 && chunk.length <= 32768) {
-                                lastTrInBuf = encodeBytes(chunk);
-                                lastTrMapping = mapping;
-                                cachedTrOutBuffer.set(buf.subarray(0, chunk.length));
-                            }
                             const p = useShared ? outputRange(context, buf, chunk.length) : output(context, buf);
                             if (!isSyncResolved(p)) {
                                 released = true;
@@ -1086,8 +1064,10 @@ export function streamCommands(maxTeeTargets = Infinity, maxTailFollowHandles =
                     return rejectTrOutput(iter, err);
                 }
                 finally {
-                    if (!released)
+                    if (!released) {
+                        sharedTrOutBuffer.fill(0);
                         sharedTrOutInUse = false;
+                    }
                 }
             }
             return executeTrAsync(context, iter, deleting, squeezing, mapping, removed, squeezed, previous, false);
@@ -1149,8 +1129,10 @@ async function executeTrAsync(context, iter, deleting, squeezing, mapping, remov
         throw error;
     }
     finally {
-        if (ownsShared)
+        if (ownsShared) {
+            sharedTrOutBuffer.fill(0);
             sharedTrOutInUse = false;
+        }
         if (!done) {
             if (typeof iter.syncReturn === "function")
                 iter.syncReturn();