@poe-platform/safe-bash 0.1.800 → 0.1.802

package/dist/safe-bash/commands/grep-aliases/index.browser.js

@@ -0,0 +1,14 @@
+import {
+  createEgrepCommand,
+  createFgrepCommand,
+  createGrepAliasCommands,
+  grepAliasCommands
+} from "../../chunks/chunk-RRR7AQ24.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
+export {
+  createGrepAliasCommands,
+  createEgrepCommand as egrepCommand,
+  createFgrepCommand as fgrepCommand,
+  grepAliasCommands
+};

package/dist/safe-bash/commands/hexdump/index.browser.js

@@ -3,8 +3,8 @@ import {
   createHexdumpCommand,
   createHexdumpCommands,
   hexdumpCommands
-} from "../../chunks/chunk-M4CFCXHN.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-CS4MNM6I.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createHdCommand,
   createHexdumpCommand,

package/dist/safe-bash/commands/html-to-markdown/index.browser.js

@@ -0,0 +1,16 @@
+import {
+  createHtmlToMarkdownCommand,
+  createHtmlToMarkdownCommands,
+  evalSyncHtmlToMarkdown,
+  evalSyncShuf,
+  htmlToMarkdownCommands
+} from "../../chunks/chunk-DQP3VHSB.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
+export {
+  createHtmlToMarkdownCommand,
+  createHtmlToMarkdownCommands,
+  evalSyncHtmlToMarkdown,
+  evalSyncShuf,
+  htmlToMarkdownCommands
+};

package/dist/safe-bash/commands/htmlq/index.d.ts

@@ -1,6 +1,6 @@
 import { HtmlError, detachHtmlNode, htmlText, htmlq, htmlqBaseline, htmlqBytes, inclusiveHtmlDescendants, parseHtml, parseHtmlSync, parseHtmlqArguments, selectHtml, serializeHtml, serializeHtmlBytes } from "../../../safe-bash-command-htmlq/index.js";
 export { selectHtml, parseHtmlqArguments, htmlqBytes, htmlq, parseHtml, parseHtmlSync, inclusiveHtmlDescendants, serializeHtml, serializeHtmlBytes, htmlText, detachHtmlNode, HtmlError, htmlqBaseline, };
-export type { HtmlqArguments, HtmlqCommandOptions, HtmlqCommandsOptions, HtmlqRunOptions, HtmlqResult, HtmlAccounting, HtmlOptions, HtmlLimits, HtmlNode, HtmlNamespace, HtmlAttribute, HtmlErrorCode, } from "../../../safe-bash-command-htmlq/index.js";
+export type { HtmlqArguments, HtmlqCommandOptions, HtmlqCommandsOptions, HtmlqLimits, HtmlqRunOptions, HtmlqResult, HtmlAccounting, HtmlOptions, HtmlLimits, HtmlNode, HtmlNamespace, HtmlAttribute, HtmlErrorCode, } from "../../../safe-bash-command-htmlq/index.js";
 export { createHtmlqCommand, createHtmlqCommands, htmlqCommand, htmlqCommands } from "../../../safe-bash-command-htmlq/index.js";
 export declare function evalSyncHtmlq(inBytes: Uint8Array | undefined, opArgs: readonly string[], readFileSync?: (filePath: string) => Uint8Array | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean): string | undefined;
 //# sourceMappingURL=index.d.ts.map

package/dist/safe-bash/commands/iconv/index.browser.js

@@ -3,8 +3,8 @@ import {
   createIconvCommands,
   evalSyncIconv,
   iconvCommands
-} from "../../chunks/chunk-H6JW3E4F.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-CTVWDACF.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createIconvCommand,
   createIconvCommands,

package/dist/safe-bash/commands/line-endings/index.browser.js

@@ -6,8 +6,8 @@ import {
   dos2unixCommands,
   dos2unixCommands2,
   evalSyncLineEndings
-} from "../../chunks/chunk-4SEW2Q6H.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-3R3AANOR.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createDos2unixCommand,
   createDos2unixCommands,

package/dist/safe-bash/commands/llm/index.browser.js

@@ -22,8 +22,8 @@ import {
   templateYaml,
   validateLlmTemplateParameters,
   validateModelOptions
-} from "../../chunks/chunk-TFGRKY43.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-OQRVVGR6.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createElevenLabsProvider,
   createLlmCommand,

package/dist/safe-bash/commands/llm/providers/index.browser.js

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "../../../chunks/chunk-YG5WAHK7.js";
+} from "../../../chunks/chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/llm/providers/index.ts
 init_platform();

package/dist/safe-bash/commands/mdq/index.browser.js

@@ -7,9 +7,9 @@ import {
   mdqCommand,
   mdqCommands,
   parseMdqArguments
-} from "../../chunks/chunk-PPYM75Z3.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-OV6IHKO6.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   MdqError,
   createMdqCommand,

package/dist/safe-bash/commands/media/index.browser.js

@@ -3,7 +3,7 @@ import {
   __commonJS,
   __toESM,
   init_platform
-} from "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-B7TAL7S5.js";
 
 // node_modules/xmlchars/xml/1.0/ed5.js
 var require_ed5 = __commonJS({

package/dist/safe-bash/commands/metadata/index.browser.js

@@ -0,0 +1,21 @@
+import {
+  createMetadataCommands,
+  evalSyncMktemp,
+  evalSyncStat,
+  evalSyncTruncate,
+  metadataCommands
+} from "../../chunks/chunk-VSAJ4OTM.js";
+import "../../chunks/chunk-D3ANYGMC.js";
+import "../../chunks/chunk-VTH3MLDU.js";
+import "../../chunks/chunk-NZQXYWA3.js";
+import "../../chunks/chunk-74GHTNJA.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
+export {
+  createMetadataCommands,
+  evalSyncMktemp,
+  evalSyncStat,
+  evalSyncTruncate,
+  metadataCommands
+};

package/dist/safe-bash/commands/network/curl.d.ts

@@ -1,4 +1,4 @@
 import type { NetworkCommandsOptions } from "./types.js";
 export * from "../../../safe-bash-command-curl/curl.js";
-export declare function createCurlCommand(options: NetworkCommandsOptions): import("../../../safe-bash-contracts/index.js").CommandDefinition;
+export declare function createCurlCommand(options?: NetworkCommandsOptions): import("../../../safe-bash-contracts/index.js").CommandDefinition;
 //# sourceMappingURL=curl.d.ts.map

package/dist/safe-bash/commands/network/curl.js

@@ -2,9 +2,7 @@ import { createCurlCommand as createPortableCommand } from "../../../safe-bash-c
 import { createDefaultHttpTransport, requiresFiniteUrlLimits } from "#safe-bash-network-platform";
 import { limitsFor } from "./shared.js";
 export * from "../../../safe-bash-command-curl/curl.js";
-export function createCurlCommand(options) {
-    if (typeof options?.authorize !== "function")
-        throw new TypeError("curl requires an explicit network authorizer");
+export function createCurlCommand(options = {}) {
     const limits = limitsFor(options.limits);
     if (requiresFiniteUrlLimits && (!Number.isFinite(limits.maxUrls) || !Number.isFinite(limits.maxBufferBytes)))
         throw new TypeError("Portable network commands require finite maxUrls and maxBufferBytes limits");

package/dist/safe-bash/commands/network/index.browser.js

@@ -12,10 +12,10 @@ import {
   evalSyncCurl,
   evalSyncWget,
   networkCommands
-} from "../../chunks/chunk-K2VCOJ2B.js";
-import "../../chunks/chunk-KV7PKOHV.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-K6VCD7IY.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   CurlError,
   cloudflareWorkerNetworkLimits,

package/dist/safe-bash/commands/network/platform-portable.d.ts

@@ -1,6 +1,2 @@
-export declare const requiresFiniteUrlLimits = true;
-export declare function createDefaultHttpTransport(): never;
-export declare function randomBytes(length: number): Uint8Array;
-export declare function validateHeaderName(name: string): void;
-export declare function validateHeaderValue(_name: string, value: string): void;
+export * from "../../../safe-bash-network-engine/platform-portable.js";
 //# sourceMappingURL=platform-portable.d.ts.map

package/dist/safe-bash/commands/network/platform-portable.js

@@ -1,27 +1,2 @@
-export const requiresFiniteUrlLimits = true;
-export function createDefaultHttpTransport() {
-    throw new TypeError("Portable network commands require an explicit HTTP transport; inject createFetchTransport() or a host transport");
-}
-export function randomBytes(length) {
-    const bytes = new Uint8Array(length);
-    globalThis.crypto.getRandomValues(bytes);
-    return bytes;
-}
-export function validateHeaderName(name) {
-    if (!name.length)
-        throw new TypeError("Invalid HTTP header name");
-    for (const character of name) {
-        const code = character.charCodeAt(0);
-        if (!(code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122 || "!#$%&'*+-.^_`|~".includes(character))) {
-            throw new TypeError("Invalid HTTP header name");
-        }
-    }
-}
-export function validateHeaderValue(_name, value) {
-    for (const character of value) {
-        const code = character.charCodeAt(0);
-        if (code !== 9 && (code < 32 || code === 127 || code > 255))
-            throw new TypeError("Invalid HTTP header value");
-    }
-}
+export * from "../../../safe-bash-network-engine/platform-portable.js";
 //# sourceMappingURL=platform-portable.js.map

package/dist/safe-bash/commands/network/public.d.ts

@@ -6,8 +6,8 @@ export { createFetchTransport, type FetchTransportOptions } from "./fetch-transp
 export { createOriginAuthorizer, type OriginAllowlist, type OriginAuthorizerOptions } from "./authorizer.js";
 export { createCurlCommand } from "./curl.js";
 export { createWgetCommand } from "./wget.js";
-export declare function createNetworkCommands(options: NetworkCommandsOptions): readonly CommandDefinition[];
-export declare function networkCommands(options: NetworkCommandsOptions): VirtualShellPlugin;
+export declare function createNetworkCommands(options?: NetworkCommandsOptions): readonly CommandDefinition[];
+export declare function networkCommands(options?: NetworkCommandsOptions): VirtualShellPlugin;
 export declare const createCurlCommands: typeof createNetworkCommands;
 export declare const curlCommands: typeof networkCommands;
 export declare function evalSyncCurl(opArgs: readonly string[]): string | undefined;

package/dist/safe-bash/commands/network/public.js

@@ -7,10 +7,10 @@ export { createFetchTransport } from "./fetch-transport.js";
 export { createOriginAuthorizer } from "./authorizer.js";
 export { createCurlCommand } from "./curl.js";
 export { createWgetCommand } from "./wget.js";
-export function createNetworkCommands(options) {
+export function createNetworkCommands(options = {}) {
     return [createCurlCommand(options), createWgetCommand(options)];
 }
-export function networkCommands(options) {
+export function networkCommands(options = {}) {
     const definitions = createNetworkCommands(options);
     return {
         name: "network-commands",

package/dist/safe-bash/commands/network/transport.js

@@ -102,12 +102,12 @@ export function createNodeHttpTransport(options = {}) {
                 request = (url.protocol === "https:" ? httpsRequest : httpRequest)(url, {
                     method: input.method,
                     path: curlRequestTarget(input.url),
-                    headers: pinned && headers.host?.length === 1 ? { ...headers, host: headers.host[0] } : headers,
+                    headers: headers.host?.length === 1 ? { ...headers, host: headers.host[0] } : headers,
                     signal, maxHeaderSize: Number.isFinite(maxHeaderSize) ? maxHeaderSize : Number.MAX_SAFE_INTEGER, agent: false,
                     ...(requestCa === undefined ? {} : { ca: requestCa }),
                     ...(input.ca === undefined ? {} : { rejectUnauthorized: true }),
                     ...pinned,
-                    ...(pinned && url.protocol === "https:" ? {
+                    ...(url.protocol === "https:" ? {
                         servername: isIP(hostname) ? "" : hostname,
                         rejectUnauthorized: true,
                         checkServerIdentity: (_servername, certificate) => checkServerIdentity(hostname, certificate),

package/dist/safe-bash/commands/network/wget.d.ts

@@ -1,4 +1,4 @@
 import type { NetworkCommandsOptions } from "./types.js";
 export * from "../../../safe-bash-command-wget/wget.js";
-export declare function createWgetCommand(options: NetworkCommandsOptions): import("../../../safe-bash-contracts/index.js").CommandDefinition;
+export declare function createWgetCommand(options?: NetworkCommandsOptions): import("../../../safe-bash-contracts/index.js").CommandDefinition;
 //# sourceMappingURL=wget.d.ts.map

package/dist/safe-bash/commands/network/wget.js

@@ -2,9 +2,7 @@ import { createWgetCommand as createPortableCommand } from "../../../safe-bash-c
 import { createDefaultHttpTransport, requiresFiniteUrlLimits } from "#safe-bash-network-platform";
 import { limitsFor } from "./shared.js";
 export * from "../../../safe-bash-command-wget/wget.js";
-export function createWgetCommand(options) {
-    if (typeof options?.authorize !== "function")
-        throw new TypeError("wget requires an explicit network authorizer");
+export function createWgetCommand(options = {}) {
     const limits = limitsFor(options.limits);
     if (requiresFiniteUrlLimits && (!Number.isFinite(limits.maxUrls) || !Number.isFinite(limits.maxBufferBytes)))
         throw new TypeError("Portable network commands require finite maxUrls and maxBufferBytes limits");

package/dist/safe-bash/commands/node/filesystem.js

@@ -1,4 +1,5 @@
 import { commandLimits } from "../safejs/options.js";
+import { yieldTurn } from "../../../safe-bash-contracts/yield.js";
 import { SafeJsCommandLimitError } from "../safejs/types.js";
 export function nodeReadFile(options, fs, signal, fail, pending) {
     const read = fs.readFile;
@@ -21,11 +22,11 @@ export function nodeReadFile(options, fs, signal, fail, pending) {
         }
         const done = callback;
         const completion = Promise.resolve().then(() => read(path, encoding)).then(async (text) => {
-            await new Promise(resolve => setImmediate(resolve));
+            await yieldTurn(signal);
             signal.throwIfAborted();
             return done(null, text);
         }, async (error) => {
-            await new Promise(resolve => setImmediate(resolve));
+            await yieldTurn(signal);
             signal.throwIfAborted();
             return done(error);
         }).then(() => undefined).catch(fail).finally(() => pending.delete(completion));

package/dist/safe-bash/commands/node/index.browser.js

@@ -2,14 +2,14 @@ import {
   createSafeJsNodeCommand,
   createSafeJsNodeCommands,
   safeJsNodeCommands
-} from "../../chunks/chunk-RKKRJ54E.js";
-import "../../chunks/chunk-TYD7EVUJ.js";
-import "../../chunks/chunk-BHJE5LPZ.js";
-import "../../chunks/chunk-VYZTG3GV.js";
-import "../../chunks/chunk-PYVEAFJM.js";
-import "../../chunks/chunk-KV7PKOHV.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-RSTHLAF3.js";
+import "../../chunks/chunk-PH63PLPZ.js";
+import "../../chunks/chunk-D3ANYGMC.js";
+import "../../chunks/chunk-NZQXYWA3.js";
+import "../../chunks/chunk-74GHTNJA.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createSafeJsNodeCommand as createNodeCommand,
   createSafeJsNodeCommands as createNodeCommands,

package/dist/safe-bash/commands/node/types.js

@@ -5,7 +5,7 @@ export function resolveNodeLimits(options = {}) {
     for (const [name, value] of Object.entries(options)) {
         if (name === "sabBytes" || !Object.hasOwn(nodeLimits, name))
             throw new TypeError(`Unknown Node limit: ${name}`);
-        if (!Number.isSafeInteger(value) || value < 0 || ["admissionMs", "oldGenerationMiB", "youngGenerationMiB", "codeMiB", "stackMiB"].includes(name) && value < 1)
+        if (value !== Infinity && (!Number.isSafeInteger(value) || value < 0 || ["admissionMs", "oldGenerationMiB", "youngGenerationMiB", "codeMiB", "stackMiB"].includes(name) && value < 1))
             throw new RangeError(`Invalid Node limit: ${name}`);
     }
     return Object.freeze({ ...nodeLimits, ...options });

package/dist/safe-bash/commands/op/index.browser.js

@@ -19,9 +19,9 @@ import {
   restoreEnvironment,
   selectOpBackendContext,
   selectOpGlobalFlags
-} from "../../chunks/chunk-I7L3G3NX.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-UE5KZDEK.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   captureEnvironment,
   createDocumentHandlers,

package/dist/safe-bash/commands/pr/index.browser.js

@@ -3,8 +3,8 @@ import {
   createPrCommands,
   evalSyncPr,
   prCommands
-} from "../../chunks/chunk-F3RV2F72.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-CHYGPFVM.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createPrCommand,
   createPrCommands,

package/dist/safe-bash/commands/python/host-capabilities.js

@@ -22,6 +22,7 @@ export function createPythonHostBridge(capabilities, options) {
     const pending = new Set();
     const streams = new Map();
     const jobs = new Map();
+    const activeCalls = new Set();
     const cleanupFailures = [];
     const jobWork = new Set();
     let nextJob = 1;
@@ -93,16 +94,17 @@ export function createPythonHostBridge(capabilities, options) {
         const stream = streams.get(handle);
         if (!stream)
             throw new Error('Unknown Python host stream');
-        streams.delete(handle);
-        if (cancel)
-            stream.controller.abort(new Error('Python host stream released'));
-        try {
-            await stream.iterator.return?.();
-        }
-        catch (error) {
-            cleanupFailures.push(error);
-            throw error;
+        if (!stream.closing) {
+            stream.closing = Promise.resolve().then(async () => {
+                if (cancel)
+                    stream.controller.abort(new Error('Python host stream released'));
+                await stream.iterator.return?.();
+                // Retained iterators consume admission until cleanup succeeds, including
+                // when a host ignores cancellation or its cleanup fails.
+                streams.delete(handle);
+            }).catch(error => { cleanupFailures.push(error); throw error; });
         }
+        await stream.closing;
     };
     const pull = async (handle) => {
         const stream = streams.get(handle);
@@ -140,6 +142,7 @@ export function createPythonHostBridge(capabilities, options) {
         const payload = data(incoming);
         if (!payload || Array.isArray(payload) || typeof payload !== 'object' || payload.version !== 1)
             throw new TypeError('Unsupported Python host protocol');
+        let reservation;
         const operation = Promise.resolve().then(async () => {
             assertLive();
             if (payload.operation === 'poll' || payload.operation === 'cancel') {
@@ -151,23 +154,29 @@ export function createPythonHostBridge(capabilities, options) {
                     throw new Error('Unknown Python host job');
                 if (payload.operation === 'cancel') {
                     jobs.delete(handle);
+                    if (job.settled)
+                        activeCalls.delete(job.reservation);
                     job.controller.abort(new Error('Python guest cancelled host operation'));
                     return null;
                 }
                 if (job.result === undefined && !job.failed)
                     return { done: false };
                 jobs.delete(handle);
+                if (job.settled)
+                    activeCalls.delete(job.reservation);
                 return job.failed ? { done: true, error: 'Python host operation failed', errorCode: job.failed } : { done: true, value: job.result };
             }
-            if (Math.max(jobWork.size, jobs.size) >= maxConcurrentCalls)
+            if (activeCalls.size >= maxConcurrentCalls)
                 throw new Error('Python host call concurrency limit exceeded');
+            reservation = {};
+            activeCalls.add(reservation);
             if (payload.operation === 'begin' || payload.operation === 'begin-next') {
                 let work;
                 let child;
                 let reservedStream;
                 if (payload.operation === 'begin-next') {
                     const stream = typeof payload.handle === 'number' ? streams.get(payload.handle) : undefined;
-                    if (!stream || stream.busy)
+                    if (!stream || stream.busy || stream.closing)
                         throw new Error('Unknown or busy Python host stream');
                     reservedStream = stream;
                     stream.busy = true;
@@ -182,8 +191,10 @@ export function createPythonHostBridge(capabilities, options) {
                     work = childSignal => capability.call(payload.value ?? null, { signal: childSignal });
                 }
                 const handle = nextJob++;
-                const job = { controller: child };
+                const job = { controller: child, reservation, settled: false };
                 jobs.set(handle, job);
+                // Transfer admission to the job until both host work and guest ownership end.
+                reservation = undefined;
                 const task = Promise.resolve().then(() => {
                     const childSignal = AbortSignal.any([signal, child.signal]);
                     childSignal.throwIfAborted();
@@ -193,6 +204,9 @@ export function createPythonHostBridge(capabilities, options) {
                     child.signal.throwIfAborted();
                     job.result = data(value);
                 }).catch(error => { job.failed = pythonHostFailureCode(error); }).finally(() => {
+                    job.settled = true;
+                    if (!jobs.has(handle))
+                        activeCalls.delete(job.reservation);
                     if (reservedStream)
                         reservedStream.busy = false;
                     jobWork.delete(task);
@@ -207,8 +221,8 @@ export function createPythonHostBridge(capabilities, options) {
                 const stream = streams.get(handle);
                 if (!stream)
                     throw new Error('Unknown Python host stream');
-                if (stream.busy)
-                    throw new Error('Python host stream already pulling');
+                if (stream.busy || stream.closing)
+                    throw new Error('Python host stream already pulling or closing');
                 if (payload.operation === 'release') {
                     await release(handle);
                     return null;
@@ -248,6 +262,8 @@ export function createPythonHostBridge(capabilities, options) {
         }
         finally {
             pending.delete(operation);
+            if (reservation)
+                activeCalls.delete(reservation);
         }
     };
     const close = () => {
@@ -260,6 +276,7 @@ export function createPythonHostBridge(capabilities, options) {
                 job.controller.abort(controller.signal.reason);
             await Promise.allSettled([...pending, ...jobWork]);
             jobs.clear();
+            activeCalls.clear();
             const results = await Promise.allSettled([...streams.keys()].map(handle => release(handle)));
             registry.clear();
             for (const result of results)

package/dist/safe-bash/commands/python/index.browser.js

@@ -16,20 +16,20 @@ import {
   pythonCommands,
   pythonDocumentPackages,
   pythonHostFailureCode
-} from "../../chunks/chunk-JTLSUJ7V.js";
-import "../../chunks/chunk-KCVSVD65.js";
-import "../../chunks/chunk-JJSTTIEZ.js";
-import "../../chunks/chunk-46UISJCK.js";
-import "../../chunks/chunk-VYZTG3GV.js";
-import "../../chunks/chunk-PYVEAFJM.js";
-import "../../chunks/chunk-LQHGH25W.js";
+} from "../../chunks/chunk-WDLGKIHD.js";
+import "../../chunks/chunk-HZAMGT5I.js";
 import {
   PythonFailure,
   inspectPythonCapabilities
-} from "../../chunks/chunk-63FXVDGF.js";
-import "../../chunks/chunk-KV7PKOHV.js";
-import "../../chunks/chunk-NLAW7KDI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-LVOBFF4D.js";
+import "../../chunks/chunk-I5HZ4FGE.js";
+import "../../chunks/chunk-7R5BDCG7.js";
+import "../../chunks/chunk-VTH3MLDU.js";
+import "../../chunks/chunk-NZQXYWA3.js";
+import "../../chunks/chunk-74GHTNJA.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   PythonFailure,
   PythonPackageConflictError,

package/dist/safe-bash/commands/python/manifest.d.ts

@@ -18,6 +18,7 @@ export declare class PythonPackageConflictError extends Error {
 export declare function createPythonPackageManifestStore(options?: {
     readonly maxBytes?: number;
     readonly maxEntries?: number;
+    readonly maxScopeLength?: number;
 }): PythonPackageManifestStore & {
     dispose(): void;
 };

package/dist/safe-bash/commands/python/manifest.js

@@ -9,14 +9,15 @@ export class PythonPackageConflictError extends Error {
 export function createPythonPackageManifestStore(options = {}) {
     const maxBytes = options.maxBytes ?? Infinity;
     const maxEntries = options.maxEntries ?? Infinity;
-    for (const [name, value] of Object.entries({ maxBytes, maxEntries })) {
+    const maxScopeLength = options.maxScopeLength ?? Infinity;
+    for (const [name, value] of Object.entries({ maxBytes, maxEntries, maxScopeLength })) {
         if (value !== Infinity && (!Number.isSafeInteger(value) || value < 1)) {
             throw new RangeError(`Python manifest ${name} must be a positive safe integer or Infinity`);
         }
     }
     const manifests = new Map();
     let retainedBytes = 0;
-    let revision = 0;
+    let revision = 0n;
     let disposed = false;
     const check = (scope, signal) => {
         signal.throwIfAborted();
@@ -24,6 +25,8 @@ export function createPythonPackageManifestStore(options = {}) {
             throw new Error('Python manifest store is disposed');
         if (typeof scope !== 'string' || !scope)
             throw new TypeError('Invalid Python manifest scope');
+        if (scope.length > maxScopeLength)
+            throw new RangeError('Python manifest scope budget exhausted');
     };
     return {
         async get(scope, { signal }) {
@@ -39,7 +42,7 @@ export function createPythonPackageManifestStore(options = {}) {
             if (!(bytes instanceof Uint8Array))
                 throw new TypeError('Python manifest must contain bytes');
             const nextBytes = retainedBytes - (current?.bytes.length ?? 0) + bytes.length;
-            if (nextBytes > maxBytes || (!current && manifests.size >= maxEntries) || revision >= Number.MAX_SAFE_INTEGER) {
+            if (nextBytes > maxBytes || (!current && manifests.size >= maxEntries)) {
                 throw new RangeError('Python manifest store budget exhausted');
             }
             manifests.set(scope, { revision: String(++revision), bytes: Uint8Array.from(bytes) });

package/dist/safe-bash/commands/python/shell-capability.d.ts

@@ -5,6 +5,7 @@ export declare function pythonShellDispatchActive(scope: object | undefined): bo
 export declare function createPythonShellCapability(context: CommandContext, options?: {
     readonly maxInputBytes?: number;
     readonly maxOutputBytes?: number;
+    readonly maxBufferedOutputBytes?: number;
     readonly maxConcurrentCalls?: number;
     readonly maxStreamChunkBytes?: number;
 }): PythonHostCapability;

package/dist/safe-bash/commands/python/shell-capability.js

@@ -8,8 +8,9 @@ export function createPythonShellCapability(context, options = {}) {
         throw new TypeError('Python shell capability requires a parent shell invocation');
     const maxInputBytes = options.maxInputBytes ?? Infinity;
     const maxOutputBytes = options.maxOutputBytes ?? Infinity;
+    const maxBufferedOutputBytes = options.maxBufferedOutputBytes ?? Infinity;
     const maxConcurrentCalls = options.maxConcurrentCalls ?? Infinity;
-    for (const limit of [maxInputBytes, maxOutputBytes, maxConcurrentCalls])
+    for (const limit of [maxInputBytes, maxOutputBytes, maxBufferedOutputBytes, maxConcurrentCalls])
         if (limit !== Infinity && (!Number.isSafeInteger(limit) || limit < 1))
             throw new RangeError('Invalid Python shell limit');
     const chunkBytes = options.maxStreamChunkBytes ?? 16384;
@@ -28,7 +29,7 @@ export function createPythonShellCapability(context, options = {}) {
         const requestedOutput = request.maxOutputBytes;
         if (requestedOutput !== undefined && (typeof requestedOutput !== 'number' || requestedOutput !== Infinity && (!Number.isSafeInteger(requestedOutput) || requestedOutput < 0)))
             throw new RangeError('Invalid Python shell output limit');
-        const outputLimit = Math.min(maxOutputBytes, typeof requestedOutput === 'number' ? requestedOutput : maxOutputBytes);
+        const outputLimit = Math.min(maxOutputBytes, publish ? Infinity : maxBufferedOutputBytes, typeof requestedOutput === 'number' ? requestedOutput : Infinity);
         const timeoutMs = request.timeoutMs;
         if (timeoutMs !== undefined && (typeof timeoutMs !== 'number' || !Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2147483647))
             throw new RangeError('Invalid Python shell timeout');

package/dist/safe-bash/commands/python/worker.browser.js

@@ -8,11 +8,11 @@ import {
   pythonRuntimeRelocation,
   pythonStatProjection,
   pythonTreeCleanup
-} from "../../chunks/chunk-63FXVDGF.js";
-import "../../chunks/chunk-KV7PKOHV.js";
+} from "../../chunks/chunk-LVOBFF4D.js";
+import "../../chunks/chunk-IWDICZVK.js";
 import {
   init_platform
-} from "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/python/worker.ts
 init_platform();