@poe-platform/safe-bash 0.1.801 → 0.1.803

package/dist/safe-bash-command-bzip2/index.js

@@ -6,7 +6,8 @@ import {
 init_buffer();
 import { PublicDiagnostic, UsageError } from "../safe-bash-contracts/diagnostics.js";
 import {
-  commandRuntimeIdentity
+  commandRuntimeIdentity,
+  withInputByteBudget
 } from "../safe-bash-contracts/index.js";
 import { codeOf, diagnostic, output } from "../safe-bash-compression-engine/internal.js";
 import { runOperand } from "../safe-bash-compression-engine/operand.js";
@@ -35,7 +36,7 @@ function createNamedBzip2Command(name, options = {}) {
     name,
     description: `${name} block-sorting file compressor`,
     runtimeIdentity: commandRuntimeIdentity,
-    async execute(context) {
+    execute: withInputByteBudget(async (context) => {
       context.signal.throwIfAborted();
       try {
         const parsed = parseOptions(name, context.args);
@@ -105,7 +106,7 @@ No FILE or FILE '-' uses stdin; file output uses private VFS staging.
         await diagnostic(context, error);
         return { exitCode: error instanceof UsageError ? 2 : 1 };
       }
-    }
+    })
   };
 }
 function createBzip2Command(options = {}) {

package/dist/safe-bash-command-chmod/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Poe Platform
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/safe-bash-command-chmod/command.d.ts

@@ -0,0 +1,7 @@
+export { modeChange } from "../safe-bash-io-engine/commands/mode-change.js";
+import { type MetadataCommandsOptions } from "../safe-bash-metadata-engine/index.js";
+export declare function createChmodCommand(configuration?: MetadataCommandsOptions): import("../safe-bash-contracts/index.js").CommandDefinition;
+export declare function evalSyncChmod(opArgs: readonly string[], umask: number, chmodNodeSync?: (filePath: string, change: (stat: {
+    type: "file" | "directory" | "symlink";
+    mode: number;
+}) => number) => boolean): string | undefined;

package/dist/safe-bash-command-chmod/command.js

@@ -0,0 +1,11 @@
+import {
+  createChmodCommand,
+  evalSyncChmod,
+  modeChange
+} from "../safe-bash/command-chunks/chunk-A7MU7762.js";
+import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+export {
+  createChmodCommand,
+  evalSyncChmod,
+  modeChange
+};

package/dist/safe-bash-command-chmod/index.d.ts

@@ -0,0 +1,6 @@
+import type { VirtualShellPlugin } from "../safe-bash-contracts/index.js";
+import type { MetadataCommandsOptions } from "../safe-bash-metadata-engine/index.js";
+export * from "./command.js";
+export type { MetadataCommandsOptions as ChmodCommandsOptions, MetadataLimits as ChmodLimits } from "../safe-bash-metadata-engine/index.js";
+export declare function createChmodCommands(options?: MetadataCommandsOptions): import("../safe-bash-contracts/index.js").CommandDefinition[];
+export declare function chmodCommands(options?: MetadataCommandsOptions): VirtualShellPlugin;

package/dist/safe-bash-command-chmod/index.js

@@ -0,0 +1,27 @@
+import {
+  createChmodCommand,
+  evalSyncChmod,
+  modeChange
+} from "../safe-bash/command-chunks/chunk-A7MU7762.js";
+import {
+  init_buffer
+} from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+
+// packages/safe-bash-command-chmod/src/index.ts
+init_buffer();
+function createChmodCommands(options = {}) {
+  return [createChmodCommand(options)];
+}
+function chmodCommands(options = {}) {
+  const commands = createChmodCommands(options);
+  return { name: "chmod-commands", setup(host) {
+    for (const command of commands) host.commands.register(command, { replace: options.replace ?? false });
+  } };
+}
+export {
+  chmodCommands,
+  createChmodCommand,
+  createChmodCommands,
+  evalSyncChmod,
+  modeChange
+};

package/dist/safe-bash-command-exiftool/index.js

@@ -10,7 +10,7 @@ init_buffer();
 import { yieldTurn } from "../safe-bash-contracts/yield.js";
 import { commandRuntimeIdentity, getCommandArguments } from "../safe-bash-contracts/command.js";
 import { FsError as FsError2 } from "../safe-bash-contracts/errors.js";
-import { readBytes as readBytes2, writeBytes } from "../safe-bash-contracts/io.js";
+import { readBytes as readBytes2, writeBytes, withInputByteBudget } from "../safe-bash-contracts/io.js";
 import { createOutputOperation } from "../safe-bash-contracts/output.js";
 import { shellValueByteLength } from "../safe-bash-contracts/value.js";
 
@@ -1779,7 +1779,7 @@ function createExiftoolCommand(options = {}) {
     name: "exiftool",
     runtimeIdentity: commandRuntimeIdentity,
     description: "Inspect and edit admitted PNG, JPEG and PDF metadata through virtual files",
-    async execute(context) {
+    execute: withInputByteBudget(async (context) => {
       const publication = new Publication(context, limits.maxStagingAttempts);
       let stdout, stderr;
       let failed = false, failure;
@@ -1824,7 +1824,7 @@ function createExiftoolCommand(options = {}) {
           invocation = parseArguments(await expandArgfiles(context.args, context, publication, resources), resources.limits);
         } catch (error) {
           context.signal.throwIfAborted();
-          if (error instanceof ResourceLimitError) throw error;
+          if (error instanceof ResourceLimitError || error instanceof Error && error.name === "BudgetExceededError" || error instanceof FsError2 && error.code === "EFBIG") throw error;
           await output("Error: " + (error instanceof Error ? error.message : String(error)) + "\n", true);
           return { exitCode: 1 };
         }
@@ -1948,7 +1948,7 @@ function createExiftoolCommand(options = {}) {
             tags = jpeg ? inspectJpeg(bytes, resources).tags : png ? inspectPng(bytes, resources).tags : isPdf ? inspectPdf(bytes, resources).tags : [];
           } catch (error) {
             context.signal.throwIfAborted();
-            if (error instanceof ResourceLimitError) throw error;
+            if (error instanceof ResourceLimitError || error instanceof Error && error.name === "BudgetExceededError" || error instanceof FsError2 && error.code === "EFBIG") throw error;
             errors++;
             const message = error instanceof FsError2 && error.code === "ENOENT" ? "File not found" : error instanceof Error ? error.message : String(error);
             await output("Error: " + message + " - " + file + "\n", true);
@@ -2053,7 +2053,7 @@ function createExiftoolCommand(options = {}) {
       } finally {
         await cleanup();
       }
-    }
+    })
   });
 }
 var exiftoolCommand = createExiftoolCommand();

package/dist/safe-bash-command-find/find.js

@@ -1,7 +1,7 @@
 import {
   createFindDefinitions,
   evalSyncFind
-} from "../safe-bash/command-chunks/chunk-QKFSRZGQ.js";
+} from "../safe-bash/command-chunks/chunk-GFC2NTDG.js";
 import "../safe-bash/command-chunks/chunk-5ZMZ573Q.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {

package/dist/safe-bash-command-find/index.js

@@ -1,7 +1,7 @@
 import {
   createFindDefinitions,
   evalSyncFind
-} from "../safe-bash/command-chunks/chunk-QKFSRZGQ.js";
+} from "../safe-bash/command-chunks/chunk-GFC2NTDG.js";
 import "../safe-bash/command-chunks/chunk-5ZMZ573Q.js";
 import {
   init_buffer

package/dist/safe-bash-command-fmt/index.js

@@ -2217,12 +2217,14 @@ function pathOf(context, path) {
   return isAbsolutePath(path) ? path : `${context.cwd.endsWith("/") ? context.cwd.slice(0, -1) : context.cwd}/${path}`;
 }
 var InputBudget = class {
-  constructor(maximum, sourceBufferBytes) {
+  constructor(maximum, sourceBufferBytes, inputBudget) {
     this.maximum = maximum;
     this.sourceBufferBytes = sourceBufferBytes;
+    this.inputBudget = inputBudget;
   }
   maximum;
   sourceBufferBytes;
+  inputBudget;
   used = 0;
   get maxReadBytes() {
     return Math.max(0, Math.min(this.sourceBufferBytes, this.maximum - this.used));
@@ -2234,6 +2236,7 @@ var InputBudget = class {
       if (size > this.maximum - this.used) throw new FsError("EFBIG", { message: "byte command input limit exceeded" });
       if (size > this.maxReadBytes) throw new FmtError("LIMIT", "source chunk retention limit exceeded");
       this.used += size;
+      this.inputBudget?.check(this.used);
       if (!size) yield byteSpan(chunk, 0, 0);
       for (let offset = 0; offset < size; offset += 4096) yield byteSpan(chunk, offset, Math.min(4096, size - offset));
     }
@@ -2390,7 +2393,7 @@ async function fmt(context, configuration = {}) {
       const engineBytes = 10120 + settings.prefix.length;
       const batchBytes = limits.retainedBytes >= Math.max(32768, engineBytes + 16384 + 4096) ? 16384 : 0;
       const engineLimit = limits.retainedBytes - batchBytes;
-      const budget = new InputBudget(limits.inputBytes, engineLimit - engineBytes);
+      const budget = new InputBudget(limits.inputBytes, engineLimit - engineBytes, context.inputBudget);
       let work = 0, outputBytes = 0;
       stdout = createOutputOperation({ signal: local.signal }, context.stdout);
       const outputContext = { ...context, stdout: stdout.output };
@@ -2406,6 +2409,7 @@ async function fmt(context, configuration = {}) {
         try {
           await current.open(name, nameBytes);
         } catch (error) {
+          if (error instanceof Error && (error.name === "BudgetExceededError" || error.name === "AbortError")) throw error;
           local.signal.throwIfAborted();
           await diagnostic(context, fileError(error, name, nameBytes, true, context));
           await current.close();
@@ -2439,6 +2443,7 @@ async function fmt(context, configuration = {}) {
                   bytes2 = await current.next();
                   if (bytes2?.length) received = true;
                 } catch (error) {
+                  if (error instanceof Error && (error.name === "BudgetExceededError" || error.name === "AbortError")) throw error;
                   local.signal.throwIfAborted();
                   if (isFsError(error, "EFBIG")) throw new FmtError("LIMIT", "byte command input limit exceeded");
                   readFailed = true;
@@ -2467,6 +2472,7 @@ async function fmt(context, configuration = {}) {
           }
           if (outBatchUsed) await flushOutBatch();
         } catch (error) {
+          if (error instanceof Error && (error.name === "BudgetExceededError" || error.name === "AbortError")) throw error;
           local.signal.throwIfAborted();
           try {
             await flushOutBatch();
@@ -2496,6 +2502,7 @@ async function fmt(context, configuration = {}) {
     } catch (error) {
       failed = true;
       context.signal.throwIfAborted();
+      if (error instanceof Error && (error.name === "BudgetExceededError" || error.name === "AbortError")) throw error;
       if (error instanceof FmtError && error.usage) await writeBytes(context.stderr, Uint8Array.from(`fmt: ${error.message}
 Try 'fmt --help' for more information.
 `, (character) => character.charCodeAt(0)), context.signal);

package/dist/safe-bash-command-gzip/index.js

@@ -16,10 +16,11 @@ function createGzipCommands(config = {}) {
   if (maxDecodedBytes !== void 0 && maxDecodedBytes !== Infinity && (!Number.isSafeInteger(maxDecodedBytes) || maxDecodedBytes < 0)) {
     throw new RangeError("maxDecodedBytes must be a nonnegative safe integer or Infinity");
   }
-  const commands = profiles.filter((profile) => profile.format === "gzip").flatMap((profile) => profile.names.map((name) => define(name, withInputByteBudget(async (context) => {
-    const options = parseOptions(name, context.args);
-    if (options.help) {
-      await output(context, `Usage: ${name} [OPTION]... [FILE]...
+  const commands = profiles.filter((profile) => profile.format === "gzip").flatMap((profile) => profile.names.map((name) => {
+    const command = define(name, async (context) => {
+      const options = parseOptions(name, context.args);
+      if (options.help) {
+        await output(context, `Usage: ${name} [OPTION]... [FILE]...
 -c, --stdout, --to-stdout
 -d, --decompress, --uncompress
 -k, --keep
@@ -29,48 +30,50 @@ ${options.format === "zstd" ? "-1..-9, --best\nHigher levels and --fast[=NUM] ar
 `}-h, --help
 No FILE or FILE '-' uses stdin; file output uses private VFS staging.
 `);
-      return { exitCode: 0 };
-    }
-    let plans;
-    let planningFailed = false;
-    try {
-      if (options.operands.length > 1) {
-        plans = [];
-        for (const name2 of options.operands) {
-          try {
-            plans.push(...await planOperands(context, { ...options, operands: [name2] }));
-          } catch (error) {
-            context.signal.throwIfAborted();
-            if (codeOf(error) === "EROFS") throw error;
-            planningFailed = true;
-            if (options.quiet < 2) await diagnostic(context, error);
-          }
-        }
-        if (plans.length > 1) await verifyOperandDestinations(context, plans);
-      } else plans = await planOperands(context, options);
-    } catch (error) {
-      context.signal.throwIfAborted();
-      if (options.quiet < 2) throw error;
-      return { exitCode: 1 };
-    }
-    const decodedBudget = new DecodedBudget(maxDecodedBytes);
-    let exitCode = planningFailed ? 1 : 0;
-    for (const plan of plans) {
+        return { exitCode: 0 };
+      }
+      let plans;
+      let planningFailed = false;
       try {
-        const warned = await runOperand(context, plan, options, decodedBudget);
-        if (warned) {
-          if (!options.quiet) await diagnostic(context, new PublicDiagnostic(`${plan.source}: decompression OK, trailing garbage ignored`));
-          if (exitCode === 0) exitCode = 2;
-        }
+        if (options.operands.length > 1) {
+          plans = [];
+          for (const name2 of options.operands) {
+            try {
+              plans.push(...await planOperands(context, { ...options, operands: [name2] }));
+            } catch (error) {
+              context.signal.throwIfAborted();
+              if (codeOf(error) === "EROFS") throw error;
+              planningFailed = true;
+              if (options.quiet < 2) await diagnostic(context, error);
+            }
+          }
+          if (plans.length > 1) await verifyOperandDestinations(context, plans);
+        } else plans = await planOperands(context, options);
       } catch (error) {
         context.signal.throwIfAborted();
-        if (options.quiet < 2) await diagnostic(context, error);
-        exitCode = 1;
-        if (decodedBudget.exceeded) break;
+        if (options.quiet < 2) throw error;
+        return { exitCode: 1 };
       }
-    }
-    return { exitCode };
-  }))));
+      const decodedBudget = new DecodedBudget(maxDecodedBytes);
+      let exitCode = planningFailed ? 1 : 0;
+      for (const plan of plans) {
+        try {
+          const warned = await runOperand(context, plan, options, decodedBudget);
+          if (warned) {
+            if (!options.quiet) await diagnostic(context, new PublicDiagnostic(`${plan.source}: decompression OK, trailing garbage ignored`));
+            if (exitCode === 0) exitCode = 2;
+          }
+        } catch (error) {
+          context.signal.throwIfAborted();
+          if (options.quiet < 2) await diagnostic(context, error);
+          exitCode = 1;
+          if (decodedBudget.exceeded) break;
+        }
+      }
+      return { exitCode };
+    });
+    return { ...command, execute: withInputByteBudget(async (context) => command.execute(context)) };
+  }));
   if (maxDecodedBytes === void 0 || maxDecodedBytes === Infinity) {
     for (const c of commands) builtInDirectContextExecutors.add(c.execute);
   }

package/dist/safe-bash-command-imagemagick/index.js

@@ -35,6 +35,7 @@ import {
 
 // packages/safe-bash-command-imagemagick/src/index.ts
 init_buffer();
+import { FsError } from "../safe-bash-contracts/errors.js";
 import { resolvePath } from "../safe-bash-contracts/path.js";
 import { yieldTurn, drainCooperativeSteps as drainSteps } from "../safe-bash-contracts/yield.js";
 import { InputByteBudget } from "../safe-bash-contracts/io.js";
@@ -5089,7 +5090,8 @@ async function executeVfsMagickTool(context, runner, maxInputBytes) {
         bytes = await context.fs.readFile(resolvePath(context.cwd, candidate), {
           signal: invocation.signal
         });
-      } catch {
+      } catch (error) {
+        if (!(error instanceof FsError) || !["ENOENT", "ENOTDIR", "EISDIR", "EACCES", "EPERM"].includes(error.code)) throw error;
         continue;
       }
       chargeInput(bytes.byteLength);

package/dist/safe-bash-command-jq/index.js

@@ -1,6 +1,6 @@
 import {
   createJqCommand
-} from "../safe-bash/command-chunks/chunk-MQFIPHIQ.js";
+} from "../safe-bash/command-chunks/chunk-ILX2NOLF.js";
 import {
   init_buffer
 } from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-command-jq/jq.js

@@ -1,7 +1,7 @@
 import {
   createJqCommand,
   executeJq
-} from "../safe-bash/command-chunks/chunk-MQFIPHIQ.js";
+} from "../safe-bash/command-chunks/chunk-ILX2NOLF.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   createJqCommand,

package/dist/safe-bash-command-less/index.js

@@ -52,13 +52,14 @@ function settings(options = {}) {
   }
   return Object.freeze(limits);
 }
-async function readSourceText(source, maxBytes, signal) {
+async function readSourceText(source, maxBytes, signal, admit) {
   const chunks = [];
   let total = 0;
   let quantum = 0;
   let chunksRead = 0;
   for await (const chunk of readBytes(source, signal)) {
     total += chunk.byteLength;
+    admit(chunk.byteLength);
     signal.throwIfAborted();
     quantum += Math.max(1, chunk.byteLength);
     if (quantum >= 16384 || ++chunksRead >= 128) {
@@ -86,6 +87,11 @@ function createPagerCommand(name, options = {}) {
     description: `Non-interactive ${name} pager pass-through`,
     runtimeIdentity: commandRuntimeIdentity,
     async execute(context) {
+      let inputBytes = 0;
+      const admit = (bytes) => {
+        context.signal.throwIfAborted();
+        context.inputBudget?.check(inputBytes += bytes);
+      };
       const maxBytes = Math.min(limits.maxInputBytes, context.limits?.maxInputBytes ?? limits.maxInputBytes);
       context.signal.throwIfAborted();
       const args = getCommandArguments(context).args;
@@ -165,6 +171,7 @@ function createPagerCommand(name, options = {}) {
             await yieldTurn(context.signal);
           }
           total += chunk.byteLength;
+          admit(chunk.byteLength);
           if (total > maxBytes) {
             await writeText(context.stderr, `${name}: input exceeds maximum size of ${maxBytes} bytes
 `);
@@ -179,7 +186,7 @@ function createPagerCommand(name, options = {}) {
         const texts = [];
         let exitCode = 0;
         if (files.length === 0) {
-          texts.push(await readSourceText(context.stdin, maxBytes, context.signal));
+          texts.push(await readSourceText(context.stdin, maxBytes, context.signal, admit));
         } else {
           for (const file of files) {
             if (file === "-") {
@@ -187,16 +194,18 @@ function createPagerCommand(name, options = {}) {
                 let total = 0;
                 for await (const chunk of readBytes(context.stdin, context.signal)) {
                   total += chunk.byteLength;
+                  admit(chunk.byteLength);
                   if (total > maxBytes) throw new PublicDiagnostic(`input exceeds maximum size of ${maxBytes} bytes`);
                   await writeBytes(context.stdout, chunk, context.signal);
                   await yieldTurn(context.signal);
                 }
-              } else texts.push(await readSourceText(context.stdin, maxBytes, context.signal));
+              } else texts.push(await readSourceText(context.stdin, maxBytes, context.signal, admit));
             } else {
               try {
                 const targetPath = pathPosix.resolve(context.cwd, file);
                 const raw = await context.fs.readFile(targetPath, { signal: context.signal });
                 context.signal.throwIfAborted();
+                admit(raw.byteLength);
                 if (raw.byteLength > maxBytes) {
                   await writeText(context.stderr, `${name}: ${file}: input exceeds maximum size
 `);

package/dist/safe-bash-command-mktemp/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Poe Platform
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/safe-bash-command-mktemp/command.d.ts

@@ -0,0 +1,3 @@
+import { type MetadataCommandsOptions } from "../safe-bash-metadata-engine/index.js";
+export declare function evalSyncMktemp(opArgs: readonly string[], env: Readonly<Record<string, string>>, statTypeSync?: (filePath: string) => string | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean, mkdirSync?: (filePath: string) => boolean): string | undefined;
+export declare function createMktempCommand(configuration?: MetadataCommandsOptions): import("../safe-bash-contracts/index.js").CommandDefinition;

package/dist/safe-bash-command-mktemp/command.js

@@ -0,0 +1,9 @@
+import {
+  createMktempCommand,
+  evalSyncMktemp
+} from "../safe-bash/command-chunks/chunk-ZDN7MJE6.js";
+import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+export {
+  createMktempCommand,
+  evalSyncMktemp
+};

package/dist/safe-bash-command-mktemp/index.d.ts

@@ -0,0 +1,6 @@
+import type { VirtualShellPlugin } from "../safe-bash-contracts/index.js";
+import type { MetadataCommandsOptions } from "../safe-bash-metadata-engine/index.js";
+export * from "./command.js";
+export type { MetadataCommandsOptions as MktempCommandsOptions, MetadataLimits as MktempLimits } from "../safe-bash-metadata-engine/index.js";
+export declare function createMktempCommands(options?: MetadataCommandsOptions): import("../safe-bash-contracts/index.js").CommandDefinition[];
+export declare function mktempCommands(options?: MetadataCommandsOptions): VirtualShellPlugin;

package/dist/safe-bash-command-mktemp/index.js

@@ -0,0 +1,25 @@
+import {
+  createMktempCommand,
+  evalSyncMktemp
+} from "../safe-bash/command-chunks/chunk-ZDN7MJE6.js";
+import {
+  init_buffer
+} from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+
+// packages/safe-bash-command-mktemp/src/index.ts
+init_buffer();
+function createMktempCommands(options = {}) {
+  return [createMktempCommand(options)];
+}
+function mktempCommands(options = {}) {
+  const commands = createMktempCommands(options);
+  return { name: "mktemp-commands", setup(host) {
+    for (const command of commands) host.commands.register(command, { replace: options.replace ?? false });
+  } };
+}
+export {
+  createMktempCommand,
+  createMktempCommands,
+  evalSyncMktemp,
+  mktempCommands
+};

package/dist/safe-bash-command-nl/index.js

@@ -1,6 +1,6 @@
 import {
   createNlWithSettings
-} from "../safe-bash/command-chunks/chunk-EFANWIHL.js";
+} from "../safe-bash/command-chunks/chunk-GY3BWK7K.js";
 import {
   init_buffer
 } from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-command-nl/nl.js

@@ -1,6 +1,6 @@
 import {
   createNlWithSettings
-} from "../safe-bash/command-chunks/chunk-EFANWIHL.js";
+} from "../safe-bash/command-chunks/chunk-GY3BWK7K.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   createNlWithSettings

package/dist/safe-bash-command-od/index.js

@@ -139,10 +139,12 @@ function output(context, text) {
   return writeBytes(context.stdout, bytes, context.signal);
 }
 var ByteInputBudget = class {
-  constructor(maxInputBytes) {
+  constructor(maxInputBytes, inputBudget) {
     this.maxInputBytes = maxInputBytes;
+    this.inputBudget = inputBudget;
   }
   maxInputBytes;
+  inputBudget;
   #bytes = 0;
   #failure;
   assertOpen(signal) {
@@ -158,13 +160,14 @@ var ByteInputBudget = class {
         throw this.#failure;
       }
       this.#bytes += chunk.byteLength;
+      this.inputBudget?.check(this.#bytes);
       yield chunk;
       this.assertOpen(signal);
     }
   }
 };
 async function* sources(context, operands, maxInputBytes, onFileError) {
-  const budget = new ByteInputBudget(maxInputBytes);
+  const budget = new ByteInputBudget(maxInputBytes, context.inputBudget);
   let usedStdin = false;
   let emptyChunks = 0;
   for (const operand of operands.length ? operands : ["-"]) {
@@ -510,6 +513,7 @@ function defineOdCommand(handler) {
         return await handler(context);
       } catch (error) {
         context.signal.throwIfAborted();
+        if (error instanceof Error && (error.name === "BudgetExceededError" || error.name === "AbortError")) throw error;
         await writeDiagnostic(
           context.stderr,
           `${context.command}: ${publicDiagnosticMessage(error, context.onInternalError)}

package/dist/safe-bash-command-op/index.js

@@ -7,6 +7,7 @@ init_buffer();
 
 // packages/safe-bash-command-op/src/cli.ts
 init_buffer();
+import { isFsError } from "@poe-platform/safe-fs/core";
 import { InputByteBudget } from "../safe-bash-contracts/io.js";
 
 // packages/safe-bash-command-op/src/encoding.ts
@@ -3687,6 +3688,7 @@ function createOpCommand(options = {}) {
         }
         return { exitCode: 0 };
       } catch (error) {
+        if (error instanceof Error && error.name === "BudgetExceededError" || isFsError(error, "EPIPE")) throw error;
         let message = error instanceof Error ? error.message : "operation failed";
         try {
           budget.assertOpen();
@@ -4666,7 +4668,7 @@ function createItemHandlers(backend) {
 
 // packages/safe-bash-command-op/src/index.ts
 import { readBytes } from "../safe-bash-contracts/index.js";
-import { resolvePath } from "@poe-platform/safe-fs/core";
+import { isFsError as isFsError2, resolvePath } from "@poe-platform/safe-fs/core";
 
 // packages/safe-bash-command-op/src/types.ts
 init_buffer();
@@ -4730,27 +4732,44 @@ function createOpCommand2(options = {}) {
       if (!("fs" in context)) return command.execute(context);
       const host = context;
       const { fs, signal, cwd } = context;
+      let inputBytes = 0;
+      const account = (bytes) => {
+        context.inputBudget?.check(inputBytes += bytes.byteLength);
+        return bytes;
+      };
       const invocation = {
         ...host,
         args: context.args,
         env: { ...context.env },
         signal,
-        stdin: readBytes(context.stdin, signal),
+        stdin: (async function* () {
+          for await (const bytes of readBytes(context.stdin, signal)) yield account(bytes);
+        })(),
         stdout: context.stdout,
         stderr: context.stderr,
         ...authentication === void 0 ? {} : { authentication },
         ...pluginScope === void 0 ? {} : { pluginScope },
         ...confirmPluginClear === void 0 ? {} : { confirmPluginClear },
         ...selectPlugin === void 0 ? {} : { selectPlugin },
-        readFile: host.readFile ?? (async (path) => {
+        readFile: async (path) => {
+          if (host.readFile) return account(await host.readFile(path));
           signal.throwIfAborted();
           const resolved = resolvePath(cwd, path);
           const capabilities = fs.capabilitiesFor ? await fs.capabilitiesFor(resolved, { signal }) : fs.capabilities;
           if (capabilities.read !== true) throw new Error("op requires VFS read capability");
-          const bytes = await fs.readFile(resolved, { signal });
+          let bytes;
+          try {
+            bytes = await fs.readFile(resolved, {
+              signal,
+              ...context.inputBudget ? { maxBytes: Math.max(0, context.inputBudget.maxBytes - inputBytes) } : {}
+            });
+          } catch (error) {
+            if (isFsError2(error, "EFBIG") && context.inputBudget) context.inputBudget.check(context.inputBudget.maxBytes + 1);
+            throw error;
+          }
           signal.throwIfAborted();
-          return Uint8Array.from(bytes);
-        }),
+          return Uint8Array.from(account(bytes));
+        },
         writeFile: host.writeFile ?? (async (path, bytes, settings = {}) => {
           signal.throwIfAborted();
           const resolved = resolvePath(cwd, path);