@poe-platform/safe-bash 0.1.802 → 0.1.803

package/README.md

@@ -648,11 +648,13 @@ behaviors; unsetting either variable removes its special behavior.
 
 Execution quotas are unlimited by default. Set individual `limits` to opt in;
 supplying one does not enable other quotas. Available quotas are `maxParseUnits`,
-`maxInputBytes`, `maxOutputBytes`, `maxCommands`, `maxFileSystemOperations`,
+`maxInputBytes`, `maxOutputBytes`, `maxPipelineBytes`, `maxCommands`, `maxFileSystemOperations`,
 `maxPathComponents`, `maxPathnameComponents`, `maxRedirects`, `maxPipelineStages`, `maxLoopIterations`,
 `maxSubstitutionDepth`, `maxFunctionDepth`, `maxSourceBytes`, `maxExpansionFields`, `maxExpansionBytes`,
 `maxWallClockMs`, and `maxCpuMs`. The CPU deadline measures elapsed time including
-waits at cooperative checkpoints. `pipeHighWaterMark` defaults to 64 KiB for
+waits at cooperative checkpoints. `maxPipelineBytes` counts bytes written across
+all pipeline edges in one invocation, including nested pipelines; terminal output
+does not consume this quota. `pipeHighWaterMark` defaults to 64 KiB for
 streaming backpressure and does not cap total work. `cloudflareWorkerLimits` is
 an explicit restrictive preset. Background job quotas (`maxJobs`, `maxWaiters`,
 `maxCleanupsPerJob`) are also unlimited unless supplied. `maxFunctionDepth` limits

package/dist/image-ast/index.browser.js

@@ -58800,6 +58800,7 @@ var FastDirectoryEntriesMap = class {
   }
   _rebuild(newCap) {
     this._missKey = "";
+    this._missSlot = -1;
     const newTableLen = newCap * 2;
     const newMask = newTableLen - 1;
     const newTable = newCap <= 16384 ? new Int16Array(newTableLen).fill(-1) : new Int32Array(newTableLen).fill(-1);
@@ -58839,16 +58840,17 @@ var FastDirectoryEntriesMap = class {
     this._next = writeIdx;
   }
   set(k, v) {
-    if (k === this._missKey && this._next < this._keys.length) {
+    const missSlot = k === this._missKey ? this._missSlot : -1;
+    this._missKey = "";
+    this._missSlot = -1;
+    if (missSlot >= 0 && (this._table[missSlot] === -1 || this._table[missSlot] === -2) && this._next < this._keys.length) {
       const entryIdx = this._next++;
-      this._table[this._missSlot] = entryIdx;
+      this._table[missSlot] = entryIdx;
       this._keys[entryIdx] = k;
       this._vals[entryIdx] = v;
       this.size++;
-      this._missKey = "";
       return this;
     }
-    this._missKey = "";
     if (this._next >= this._keys.length) {
       this._rebuild(this.size * 2 <= this._keys.length ? this._keys.length : this._keys.length * 2);
     }
@@ -58880,6 +58882,7 @@ var FastDirectoryEntriesMap = class {
   }
   delete(k) {
     this._missKey = "";
+    this._missSlot = -1;
     if (this.size === 0)
       return false;
     let slot = this._hash(k);
@@ -58906,6 +58909,7 @@ var FastDirectoryEntriesMap = class {
   }
   clear() {
     this._missKey = "";
+    this._missSlot = -1;
     if (this._next > 0) {
       this._table.fill(-1);
       for (let i = 0; i < this._next; i++) {
@@ -59541,6 +59545,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
       if (alloc.isReleased64()) {
         alloc.detachLedger(DUMMY_POOL_LEDGER);
         if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedAllocationPoolLen < SHARED_POOL_CAPACITY) {
+          alloc.data.fill(0);
           sharedAllocationPool[sharedAllocationPoolLen++] = alloc;
         } else if (cache.allocations.length < 128) {
           cache.allocations.push(alloc);
@@ -59548,6 +59553,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
       } else if (alloc.isReleased65536()) {
         alloc.detachLedger(DUMMY_POOL_LEDGER);
         if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedLargeAllocationPoolLen < SHARED_LARGE_POOL_CAPACITY) {
+          alloc.data.fill(0);
           sharedLargeAllocationPool[sharedLargeAllocationPoolLen++] = alloc;
         }
       }
@@ -59564,6 +59570,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
         cache.lastFastDirNode = void 0;
       }
       if (node.entries.size === 0) {
+        node.entries.clear();
         if (sharedDirectoryNodePoolLen < SHARED_DIR_POOL_CAPACITY) {
           sharedDirectoryNodePool[sharedDirectoryNodePoolLen++] = node;
         } else if (cache.directories.length < 32) {
@@ -59588,11 +59595,13 @@ var MemoryFileSystem = class _MemoryFileSystem {
     if (previous.isReleased64()) {
       previous.detachLedger(DUMMY_POOL_LEDGER);
       if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedAllocationPoolLen < SHARED_POOL_CAPACITY) {
+        previous.data.fill(0);
         sharedAllocationPool[sharedAllocationPoolLen++] = previous;
       }
     } else if (previous.isReleased65536()) {
       previous.detachLedger(DUMMY_POOL_LEDGER);
       if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedLargeAllocationPoolLen < SHARED_LARGE_POOL_CAPACITY) {
+        previous.data.fill(0);
         sharedLargeAllocationPool[sharedLargeAllocationPoolLen++] = previous;
       }
     }

package/dist/image-ast/index.js

@@ -58800,6 +58800,7 @@ var FastDirectoryEntriesMap = class {
   }
   _rebuild(newCap) {
     this._missKey = "";
+    this._missSlot = -1;
     const newTableLen = newCap * 2;
     const newMask = newTableLen - 1;
     const newTable = newCap <= 16384 ? new Int16Array(newTableLen).fill(-1) : new Int32Array(newTableLen).fill(-1);
@@ -58839,16 +58840,17 @@ var FastDirectoryEntriesMap = class {
     this._next = writeIdx;
   }
   set(k, v) {
-    if (k === this._missKey && this._next < this._keys.length) {
+    const missSlot = k === this._missKey ? this._missSlot : -1;
+    this._missKey = "";
+    this._missSlot = -1;
+    if (missSlot >= 0 && (this._table[missSlot] === -1 || this._table[missSlot] === -2) && this._next < this._keys.length) {
       const entryIdx = this._next++;
-      this._table[this._missSlot] = entryIdx;
+      this._table[missSlot] = entryIdx;
       this._keys[entryIdx] = k;
       this._vals[entryIdx] = v;
       this.size++;
-      this._missKey = "";
       return this;
     }
-    this._missKey = "";
     if (this._next >= this._keys.length) {
       this._rebuild(this.size * 2 <= this._keys.length ? this._keys.length : this._keys.length * 2);
     }
@@ -58880,6 +58882,7 @@ var FastDirectoryEntriesMap = class {
   }
   delete(k) {
     this._missKey = "";
+    this._missSlot = -1;
     if (this.size === 0)
       return false;
     let slot = this._hash(k);
@@ -58906,6 +58909,7 @@ var FastDirectoryEntriesMap = class {
   }
   clear() {
     this._missKey = "";
+    this._missSlot = -1;
     if (this._next > 0) {
       this._table.fill(-1);
       for (let i = 0; i < this._next; i++) {
@@ -59541,6 +59545,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
       if (alloc.isReleased64()) {
         alloc.detachLedger(DUMMY_POOL_LEDGER);
         if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedAllocationPoolLen < SHARED_POOL_CAPACITY) {
+          alloc.data.fill(0);
           sharedAllocationPool[sharedAllocationPoolLen++] = alloc;
         } else if (cache.allocations.length < 128) {
           cache.allocations.push(alloc);
@@ -59548,6 +59553,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
       } else if (alloc.isReleased65536()) {
         alloc.detachLedger(DUMMY_POOL_LEDGER);
         if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedLargeAllocationPoolLen < SHARED_LARGE_POOL_CAPACITY) {
+          alloc.data.fill(0);
           sharedLargeAllocationPool[sharedLargeAllocationPoolLen++] = alloc;
         }
       }
@@ -59564,6 +59570,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
         cache.lastFastDirNode = void 0;
       }
       if (node.entries.size === 0) {
+        node.entries.clear();
         if (sharedDirectoryNodePoolLen < SHARED_DIR_POOL_CAPACITY) {
           sharedDirectoryNodePool[sharedDirectoryNodePoolLen++] = node;
         } else if (cache.directories.length < 32) {
@@ -59588,11 +59595,13 @@ var MemoryFileSystem = class _MemoryFileSystem {
     if (previous.isReleased64()) {
       previous.detachLedger(DUMMY_POOL_LEDGER);
       if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedAllocationPoolLen < SHARED_POOL_CAPACITY) {
+        previous.data.fill(0);
         sharedAllocationPool[sharedAllocationPoolLen++] = previous;
       }
     } else if (previous.isReleased65536()) {
       previous.detachLedger(DUMMY_POOL_LEDGER);
       if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedLargeAllocationPoolLen < SHARED_LARGE_POOL_CAPACITY) {
+        previous.data.fill(0);
         sharedLargeAllocationPool[sharedLargeAllocationPoolLen++] = previous;
       }
     }

package/dist/safe-bash/chunks/{chunk-KDNSPLII.js → chunk-2LSAMQER.js}

@@ -64,6 +64,7 @@ var cloudflareWorkerLimits = Object.freeze({
   maxPathnameComponents: 64,
   maxRedirects: 64,
   maxPipelineStages: 64,
+  maxPipelineBytes: 4 * 1024 * 1024,
   maxLoopIterations: 1e3,
   maxSubstitutionDepth: 16,
   maxFunctionDepth: 16,

package/dist/safe-bash/chunks/{chunk-NZQXYWA3.js → chunk-5OHX7C2V.js}

@@ -11,7 +11,6 @@ init_platform();
 import { validatePath, resolvePath, normalizePath, relativePath, isPathWithin, assertPathWithin, basename, dirname, extname, joinPath, isAbsolutePath, posixPath as posixPath2 } from "@poe-platform/safe-fs/core";
 
 export {
-  validatePath,
   resolvePath,
   normalizePath,
   relativePath,

package/dist/safe-bash/chunks/{chunk-SHEMU2Z7.js → chunk-B7PIL77G.js}

@@ -1,3 +1,6 @@
+import {
+  jobsExtension
+} from "./chunk-A7XEHALN.js";
 import {
   evalSyncYqPrep,
   formatSyncYqYamlLines
@@ -8,9 +11,24 @@ import {
   isIdlePortableTrapInstance
 } from "./chunk-3NDIFSNM.js";
 import {
+  EreLedger,
+  EreProfileLimitError,
+  EreSyntaxError,
+  EreUnsupportedError,
+  compileEre,
+  matchEre,
+  tryCompileEreSync,
+  tryMatchEreSync
+} from "./chunk-6O77NL2S.js";
+import {
+  abortManagedController,
+  addAbortSignalWaiter,
   bindFileOutputBudget,
   clearRgFastRunnerPool,
+  combineManagedSignals,
   createFmtEngine,
+  createManagedControlController,
+  creationUmask,
   defaultEchoExecutors,
   defaultMkdirExecutors,
   defaultPredicateExecutors,
@@ -35,15 +53,27 @@ import {
   executionCommands,
   extractFastPrintfSpecifiers,
   formatPrintf,
+  getRuntimeBackingFileSystem,
+  interruptible,
+  isManagedAbortSignal,
+  isSyncResolved,
   openFileOutput,
   parseFmtArguments,
   printfCommand,
+  registerManagedAbortSignal,
+  removeAbortSignalWaiter,
   tryFastEcho,
   tryFastPredicate,
   tryFastPrintf,
   variablePresence,
   wcDisplayWidth
-} from "./chunk-44ALJ4QG.js";
+} from "./chunk-PNBBUWSM.js";
+import {
+  evalSyncMdq
+} from "./chunk-OV6IHKO6.js";
+import {
+  evalSyncPr
+} from "./chunk-CHYGPFVM.js";
 import {
   evalSyncGetopt
 } from "./chunk-AUSNDQTJ.js";
@@ -53,9 +83,6 @@ import {
 import {
   evalSyncLineEndings
 } from "./chunk-3R3AANOR.js";
-import {
-  evalSyncMdq
-} from "./chunk-OV6IHKO6.js";
 import {
   evalSyncXmllint,
   evalSyncXq
@@ -66,21 +93,11 @@ import {
   writeDiagnostic
 } from "./chunk-PH63PLPZ.js";
 import {
-  evalSyncPr
-} from "./chunk-CHYGPFVM.js";
-import {
-  EreLedger,
-  EreProfileLimitError,
-  EreSyntaxError,
-  EreUnsupportedError,
-  compileEre,
-  matchEre,
-  tryCompileEreSync,
-  tryMatchEreSync
-} from "./chunk-6O77NL2S.js";
-import {
-  jobsExtension
-} from "./chunk-BJA5XNP6.js";
+  bytesToHex,
+  compareUtf8,
+  latin1Bytes,
+  latin1Text
+} from "./chunk-D3ANYGMC.js";
 import {
   concatShellValues,
   shellValueByteLength,
@@ -92,46 +109,6 @@ import {
 import {
   openCommandFile
 } from "./chunk-I5HZ4FGE.js";
-import {
-  CommandRegistry,
-  commandRuntimeIdentity,
-  createCommandArguments,
-  getCommandArguments,
-  validateExitCode
-} from "./chunk-7R5BDCG7.js";
-import {
-  evalSyncTree
-} from "./chunk-55YJASTN.js";
-import {
-  evalSyncFile
-} from "./chunk-4BSJLKNM.js";
-import {
-  evalSyncHtmlToMarkdown
-} from "./chunk-DQP3VHSB.js";
-import {
-  evalSyncDu
-} from "./chunk-GEG3BWGE.js";
-import {
-  abortManagedController,
-  addAbortSignalWaiter,
-  combineManagedSignals,
-  createManagedControlController,
-  creationUmask,
-  evalSyncStat,
-  getRuntimeBackingFileSystem,
-  gnuInformationSync,
-  interruptible,
-  isManagedAbortSignal,
-  isSyncResolved,
-  registerManagedAbortSignal,
-  removeAbortSignalWaiter
-} from "./chunk-VSAJ4OTM.js";
-import {
-  bytesToHex,
-  compareUtf8,
-  latin1Bytes,
-  latin1Text
-} from "./chunk-D3ANYGMC.js";
 import {
   FsError,
   isFsError
@@ -150,7 +127,7 @@ import {
   runYieldCheckpoint,
   scheduleTurn,
   yieldTurn
-} from "./chunk-NZQXYWA3.js";
+} from "./chunk-5OHX7C2V.js";
 import {
   createBytePipe,
   outputFailure,
@@ -159,6 +136,28 @@ import {
   writeBytes,
   writeText
 } from "./chunk-74GHTNJA.js";
+import {
+  CommandRegistry,
+  commandRuntimeIdentity,
+  createCommandArguments,
+  getCommandArguments,
+  validateExitCode
+} from "./chunk-7R5BDCG7.js";
+import {
+  evalSyncTree
+} from "./chunk-55YJASTN.js";
+import {
+  evalSyncFile
+} from "./chunk-4BSJLKNM.js";
+import {
+  evalSyncHtmlToMarkdown
+} from "./chunk-DQP3VHSB.js";
+import {
+  evalSyncDu
+} from "./chunk-GEG3BWGE.js";
+import {
+  evalSyncStat
+} from "./chunk-VBTDHOWC.js";
 import {
   evalSyncTar,
   evalSyncUnzip,
@@ -9428,6 +9427,12 @@ import { createBaseCommand, evalSyncBase32 } from "../../safe-bash-base-encoding
 
 // packages/safe-bash/src/shell/runtime.ts
 import { evalSyncShuf } from "../../safe-bash-command-shuf/index.js";
+
+// packages/safe-bash/src/commands/gnu-information.ts
+init_platform();
+import { gnuInformation, gnuInformationSync } from "../../safe-bash-io-engine/gnu-information.js";
+
+// packages/safe-bash/src/shell/runtime.ts
 import { evalSyncDd } from "../../safe-bash-command-dd/index.js";
 import { evalSyncXan } from "../../safe-bash-command-xan/index.js";
 
@@ -13440,6 +13445,7 @@ var defaultLimits = {
   maxPathnameComponents: Infinity,
   maxRedirects: Infinity,
   maxPipelineStages: Infinity,
+  maxPipelineBytes: Infinity,
   maxLoopIterations: Infinity,
   maxSubstitutionDepth: Infinity,
   maxFunctionDepth: Infinity,
@@ -13760,6 +13766,7 @@ function tickSharedWallClockBudgets() {
   }
 }
 var Budget2 = class {
+  pipelineBytes = 0;
   get fileSystemOperations() {
     return this._fileSystemOperations;
   }
@@ -13794,7 +13801,7 @@ var Budget2 = class {
     if (limits.maxRedirects < 1) this.canRedirect1 = false;
     if (limits.maxSourceBytes < 1073741823) this.maxSourceBytesSmi = limits.maxSourceBytes | 0;
     if (limits.maxPipelineStages < 1073741823) this.maxPipelineStagesSmi = limits.maxPipelineStages | 0;
-    if (limits.pipeHighWaterMark < 65536) this.canSyncPurePipe = false;
+    if (limits.pipeHighWaterMark < 65536 || limits.maxPipelineBytes !== Infinity) this.canSyncPurePipe = false;
     this.signal = signal ? combineManagedSignals2(signal, this.controller.signal) : this.controller.signal;
     if (signal) inheritYieldCheckpoint(signal, this.signal);
     this.parsing = new ParseBudget(limits.maxParseUnits === Infinity ? void 0 : limits.maxParseUnits, this.signal, this, limits.maxSyntaxDepth);
@@ -13933,6 +13940,14 @@ var Budget2 = class {
   set fsOperations(value) {
     this._fileSystemOperations = value;
   }
+  pipelineInput = (bytes) => {
+    if (this.limits.maxPipelineBytes === Infinity) return;
+    this.assertPipelineInput(bytes);
+    this.pipelineBytes += bytes;
+  };
+  assertPipelineInput(bytes) {
+    if (bytes > this.limits.maxPipelineBytes - this.pipelineBytes) this.fail("maxPipelineBytes");
+  }
   reservePipelineStages(count) {
     this.signal.throwIfAborted();
     if (count > this.limits.maxPipelineStages - this._pipelineStages) this.fail("maxPipelineStages");
@@ -14729,6 +14744,7 @@ var BudgetedPipeStageSink = class {
     return Boolean(w.open && pipe && !pipe.failed && !pipe.signal?.aborted && pipe.readerReferences && (!pipe.writes || pipe.writes.size === 0) && (pipe.availableBytes ?? 0) < (pipe.highWaterMark ?? 0));
   }
   writeSync(chunk) {
+    this.budget.assertPipelineInput(chunk.byteLength);
     this.budget.bytes += chunk.byteLength;
     this.writable.write(chunk);
     if (chunk.byteLength && this.written) this.written.add(this.index);
@@ -20690,7 +20706,7 @@ var Runtime = class _Runtime {
     const n = pipeline.commands.length;
     this.budget.enterPipelineStages(n);
     this.budget.commands += n;
-    const pipeOptions = { highWaterMark: this.budget.limits.pipeHighWaterMark, signal: this.signal };
+    const pipeOptions = { highWaterMark: this.budget.limits.pipeHighWaterMark, signal: this.signal, admitWrite: this.budget.pipelineInput };
     const pipes = new Array(n - 1);
     for (let i = 0; i < n - 1; i++) {
       pipes[i] = createBytePipe(pipeOptions);
@@ -28765,7 +28781,8 @@ ${s1}
         }
         for (let index = 1; index < pipeline.commands.length; index++) pipes.push(createBytePipe({
           highWaterMark: this.budget.limits.pipeHighWaterMark,
-          signal: this.signal
+          signal: this.signal,
+          admitWrite: this.budget.pipelineInput
         }));
         for (let index = 0; index < pipeline.commands.length; index++) {
           controllers.push(createManagedControlController2());
@@ -43111,6 +43128,8 @@ unsigned int ${ident}_len = ${view.byteLength};
     return true;
   }
   tryFastPureSubstitution(part, state, rawState, io) {
+    if (!cCollation(rawState.variables.LC_ALL || rawState.variables.LC_COLLATE || rawState.variables.LANG || "C")) return void 0;
+    if (this.budget.limits.maxPipelineBytes !== Infinity) return void 0;
     if (this.budget.limits.maxInputBytes !== Infinity) return void 0;
     const cachedInv = this._syncLoopInvariantSubMap?.get(part);
     if (cachedInv !== void 0 && !cachedInv.dynamic) {

package/dist/safe-bash/chunks/{chunk-WDLGKIHD.js → chunk-EEEWOYEG.js}

@@ -18,9 +18,6 @@ import {
 import {
   openCommandFile
 } from "./chunk-I5HZ4FGE.js";
-import {
-  validateExitCode
-} from "./chunk-7R5BDCG7.js";
 import {
   FsError
 } from "./chunk-VTH3MLDU.js";
@@ -29,11 +26,14 @@ import {
   inheritYieldCheckpoint,
   resolvePath,
   yieldTurn
-} from "./chunk-NZQXYWA3.js";
+} from "./chunk-5OHX7C2V.js";
 import {
   readBytes,
   writeBytes
 } from "./chunk-74GHTNJA.js";
+import {
+  validateExitCode
+} from "./chunk-7R5BDCG7.js";
 import {
   pathOf
 } from "./chunk-E7OYNDGL.js";

package/dist/safe-bash/chunks/{chunk-GETUOD5D.js → chunk-GDYNCWRV.js}

@@ -2,7 +2,7 @@ import {
   composeAgentCommands,
   createAgentCommandPlugin,
   createRegexExecutors
-} from "./chunk-NQCM3TYR.js";
+} from "./chunk-RYFQ3LZG.js";
 import {
   commandRuntimeIdentity
 } from "./chunk-7R5BDCG7.js";

package/dist/safe-bash/chunks/{chunk-RSTHLAF3.js → chunk-JMMEIDPF.js}

@@ -15,7 +15,7 @@ import {
   posixPath,
   resolvePath,
   yieldTurn
-} from "./chunk-NZQXYWA3.js";
+} from "./chunk-5OHX7C2V.js";
 import {
   readBytes,
   toByteSource,