@poe-platform/safe-bash 0.1.802 → 0.1.803

package/dist/safe-bash-command-less/index.js

@@ -52,13 +52,14 @@ function settings(options = {}) {
   }
   return Object.freeze(limits);
 }
-async function readSourceText(source, maxBytes, signal) {
+async function readSourceText(source, maxBytes, signal, admit) {
   const chunks = [];
   let total = 0;
   let quantum = 0;
   let chunksRead = 0;
   for await (const chunk of readBytes(source, signal)) {
     total += chunk.byteLength;
+    admit(chunk.byteLength);
     signal.throwIfAborted();
     quantum += Math.max(1, chunk.byteLength);
     if (quantum >= 16384 || ++chunksRead >= 128) {
@@ -86,6 +87,11 @@ function createPagerCommand(name, options = {}) {
     description: `Non-interactive ${name} pager pass-through`,
     runtimeIdentity: commandRuntimeIdentity,
     async execute(context) {
+      let inputBytes = 0;
+      const admit = (bytes) => {
+        context.signal.throwIfAborted();
+        context.inputBudget?.check(inputBytes += bytes);
+      };
       const maxBytes = Math.min(limits.maxInputBytes, context.limits?.maxInputBytes ?? limits.maxInputBytes);
       context.signal.throwIfAborted();
       const args = getCommandArguments(context).args;
@@ -165,6 +171,7 @@ function createPagerCommand(name, options = {}) {
             await yieldTurn(context.signal);
           }
           total += chunk.byteLength;
+          admit(chunk.byteLength);
           if (total > maxBytes) {
             await writeText(context.stderr, `${name}: input exceeds maximum size of ${maxBytes} bytes
 `);
@@ -179,7 +186,7 @@ function createPagerCommand(name, options = {}) {
         const texts = [];
         let exitCode = 0;
         if (files.length === 0) {
-          texts.push(await readSourceText(context.stdin, maxBytes, context.signal));
+          texts.push(await readSourceText(context.stdin, maxBytes, context.signal, admit));
         } else {
           for (const file of files) {
             if (file === "-") {
@@ -187,16 +194,18 @@ function createPagerCommand(name, options = {}) {
                 let total = 0;
                 for await (const chunk of readBytes(context.stdin, context.signal)) {
                   total += chunk.byteLength;
+                  admit(chunk.byteLength);
                   if (total > maxBytes) throw new PublicDiagnostic(`input exceeds maximum size of ${maxBytes} bytes`);
                   await writeBytes(context.stdout, chunk, context.signal);
                   await yieldTurn(context.signal);
                 }
-              } else texts.push(await readSourceText(context.stdin, maxBytes, context.signal));
+              } else texts.push(await readSourceText(context.stdin, maxBytes, context.signal, admit));
             } else {
               try {
                 const targetPath = pathPosix.resolve(context.cwd, file);
                 const raw = await context.fs.readFile(targetPath, { signal: context.signal });
                 context.signal.throwIfAborted();
+                admit(raw.byteLength);
                 if (raw.byteLength > maxBytes) {
                   await writeText(context.stderr, `${name}: ${file}: input exceeds maximum size
 `);

package/dist/safe-bash-command-mktemp/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Poe Platform
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/safe-bash-command-mktemp/command.d.ts

@@ -0,0 +1,3 @@
+import { type MetadataCommandsOptions } from "../safe-bash-metadata-engine/index.js";
+export declare function evalSyncMktemp(opArgs: readonly string[], env: Readonly<Record<string, string>>, statTypeSync?: (filePath: string) => string | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean, mkdirSync?: (filePath: string) => boolean): string | undefined;
+export declare function createMktempCommand(configuration?: MetadataCommandsOptions): import("../safe-bash-contracts/index.js").CommandDefinition;

package/dist/safe-bash-command-mktemp/command.js

@@ -0,0 +1,9 @@
+import {
+  createMktempCommand,
+  evalSyncMktemp
+} from "../safe-bash/command-chunks/chunk-ZDN7MJE6.js";
+import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+export {
+  createMktempCommand,
+  evalSyncMktemp
+};

package/dist/safe-bash-command-mktemp/index.d.ts

@@ -0,0 +1,6 @@
+import type { VirtualShellPlugin } from "../safe-bash-contracts/index.js";
+import type { MetadataCommandsOptions } from "../safe-bash-metadata-engine/index.js";
+export * from "./command.js";
+export type { MetadataCommandsOptions as MktempCommandsOptions, MetadataLimits as MktempLimits } from "../safe-bash-metadata-engine/index.js";
+export declare function createMktempCommands(options?: MetadataCommandsOptions): import("../safe-bash-contracts/index.js").CommandDefinition[];
+export declare function mktempCommands(options?: MetadataCommandsOptions): VirtualShellPlugin;

package/dist/safe-bash-command-mktemp/index.js

@@ -0,0 +1,25 @@
+import {
+  createMktempCommand,
+  evalSyncMktemp
+} from "../safe-bash/command-chunks/chunk-ZDN7MJE6.js";
+import {
+  init_buffer
+} from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+
+// packages/safe-bash-command-mktemp/src/index.ts
+init_buffer();
+function createMktempCommands(options = {}) {
+  return [createMktempCommand(options)];
+}
+function mktempCommands(options = {}) {
+  const commands = createMktempCommands(options);
+  return { name: "mktemp-commands", setup(host) {
+    for (const command of commands) host.commands.register(command, { replace: options.replace ?? false });
+  } };
+}
+export {
+  createMktempCommand,
+  createMktempCommands,
+  evalSyncMktemp,
+  mktempCommands
+};

package/dist/safe-bash-command-od/index.js

@@ -139,10 +139,12 @@ function output(context, text) {
   return writeBytes(context.stdout, bytes, context.signal);
 }
 var ByteInputBudget = class {
-  constructor(maxInputBytes) {
+  constructor(maxInputBytes, inputBudget) {
     this.maxInputBytes = maxInputBytes;
+    this.inputBudget = inputBudget;
   }
   maxInputBytes;
+  inputBudget;
   #bytes = 0;
   #failure;
   assertOpen(signal) {
@@ -158,13 +160,14 @@ var ByteInputBudget = class {
         throw this.#failure;
       }
       this.#bytes += chunk.byteLength;
+      this.inputBudget?.check(this.#bytes);
       yield chunk;
       this.assertOpen(signal);
     }
   }
 };
 async function* sources(context, operands, maxInputBytes, onFileError) {
-  const budget = new ByteInputBudget(maxInputBytes);
+  const budget = new ByteInputBudget(maxInputBytes, context.inputBudget);
   let usedStdin = false;
   let emptyChunks = 0;
   for (const operand of operands.length ? operands : ["-"]) {
@@ -510,6 +513,7 @@ function defineOdCommand(handler) {
         return await handler(context);
       } catch (error) {
         context.signal.throwIfAborted();
+        if (error instanceof Error && (error.name === "BudgetExceededError" || error.name === "AbortError")) throw error;
         await writeDiagnostic(
           context.stderr,
           `${context.command}: ${publicDiagnosticMessage(error, context.onInternalError)}

package/dist/safe-bash-command-op/index.js

@@ -7,6 +7,7 @@ init_buffer();
 
 // packages/safe-bash-command-op/src/cli.ts
 init_buffer();
+import { isFsError } from "@poe-platform/safe-fs/core";
 import { InputByteBudget } from "../safe-bash-contracts/io.js";
 
 // packages/safe-bash-command-op/src/encoding.ts
@@ -3687,6 +3688,7 @@ function createOpCommand(options = {}) {
         }
         return { exitCode: 0 };
       } catch (error) {
+        if (error instanceof Error && error.name === "BudgetExceededError" || isFsError(error, "EPIPE")) throw error;
         let message = error instanceof Error ? error.message : "operation failed";
         try {
           budget.assertOpen();
@@ -4666,7 +4668,7 @@ function createItemHandlers(backend) {
 
 // packages/safe-bash-command-op/src/index.ts
 import { readBytes } from "../safe-bash-contracts/index.js";
-import { resolvePath } from "@poe-platform/safe-fs/core";
+import { isFsError as isFsError2, resolvePath } from "@poe-platform/safe-fs/core";
 
 // packages/safe-bash-command-op/src/types.ts
 init_buffer();
@@ -4730,27 +4732,44 @@ function createOpCommand2(options = {}) {
       if (!("fs" in context)) return command.execute(context);
       const host = context;
       const { fs, signal, cwd } = context;
+      let inputBytes = 0;
+      const account = (bytes) => {
+        context.inputBudget?.check(inputBytes += bytes.byteLength);
+        return bytes;
+      };
       const invocation = {
         ...host,
         args: context.args,
         env: { ...context.env },
         signal,
-        stdin: readBytes(context.stdin, signal),
+        stdin: (async function* () {
+          for await (const bytes of readBytes(context.stdin, signal)) yield account(bytes);
+        })(),
         stdout: context.stdout,
         stderr: context.stderr,
         ...authentication === void 0 ? {} : { authentication },
         ...pluginScope === void 0 ? {} : { pluginScope },
         ...confirmPluginClear === void 0 ? {} : { confirmPluginClear },
         ...selectPlugin === void 0 ? {} : { selectPlugin },
-        readFile: host.readFile ?? (async (path) => {
+        readFile: async (path) => {
+          if (host.readFile) return account(await host.readFile(path));
           signal.throwIfAborted();
           const resolved = resolvePath(cwd, path);
           const capabilities = fs.capabilitiesFor ? await fs.capabilitiesFor(resolved, { signal }) : fs.capabilities;
           if (capabilities.read !== true) throw new Error("op requires VFS read capability");
-          const bytes = await fs.readFile(resolved, { signal });
+          let bytes;
+          try {
+            bytes = await fs.readFile(resolved, {
+              signal,
+              ...context.inputBudget ? { maxBytes: Math.max(0, context.inputBudget.maxBytes - inputBytes) } : {}
+            });
+          } catch (error) {
+            if (isFsError2(error, "EFBIG") && context.inputBudget) context.inputBudget.check(context.inputBudget.maxBytes + 1);
+            throw error;
+          }
           signal.throwIfAborted();
-          return Uint8Array.from(bytes);
-        }),
+          return Uint8Array.from(account(bytes));
+        },
         writeFile: host.writeFile ?? (async (path, bytes, settings = {}) => {
           signal.throwIfAborted();
           const resolved = resolvePath(cwd, path);

package/dist/safe-bash-command-rg/index.js

@@ -1,6 +1,6 @@
 import {
   createRgCommand
-} from "../safe-bash/command-chunks/chunk-OQKC5ZU2.js";
+} from "../safe-bash/command-chunks/chunk-NKIELG7Y.js";
 import {
   init_buffer
 } from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-command-rg/rg-command.js

@@ -1,7 +1,7 @@
 import {
   clearRgFastRunnerPool,
   createRgCommand
-} from "../safe-bash/command-chunks/chunk-OQKC5ZU2.js";
+} from "../safe-bash/command-chunks/chunk-NKIELG7Y.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   clearRgFastRunnerPool,

package/dist/safe-bash-command-sed/index.js

@@ -1,6 +1,6 @@
 import {
   sedCommand
-} from "../safe-bash/command-chunks/chunk-7U7EXOXX.js";
+} from "../safe-bash/command-chunks/chunk-NASVPT6F.js";
 import "../safe-bash/command-chunks/chunk-CQ5YGOGB.js";
 import {
   init_buffer

package/dist/safe-bash-command-sed/sed.js

@@ -1,6 +1,6 @@
 import {
   sedCommand
-} from "../safe-bash/command-chunks/chunk-7U7EXOXX.js";
+} from "../safe-bash/command-chunks/chunk-NASVPT6F.js";
 import "../safe-bash/command-chunks/chunk-CQ5YGOGB.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {

package/dist/safe-bash-command-sips/index.js

@@ -111,6 +111,7 @@ function writeProperties(bytes, format, properties) {
 
 // packages/safe-bash-command-sips/src/index.ts
 import { yieldTurn, drainCooperativeSteps as drainSteps } from "../safe-bash-contracts/yield.js";
+import { FsError } from "../safe-bash-contracts/errors.js";
 import { InputByteBudget } from "../safe-bash-contracts/io.js";
 import { writeFileOutput } from "../safe-bash-contracts/filesystem-output-budget.js";
 import {
@@ -1114,6 +1115,7 @@ async function executeVfsImageTool(context, runner) {
     const carrier = getCommandArguments(context);
     const argv = [...carrier.args];
     const vfsFiles = /* @__PURE__ */ new Map();
+    let totalInputBytes = 0;
     const normalizedArgv = [...argv];
     for (let i = 0; i < normalizedArgv.length; i++) {
       if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
@@ -1126,7 +1128,8 @@ async function executeVfsImageTool(context, runner) {
             if (st.type === "directory") {
               normalizedArgv[i + 1] = next + "/";
             }
-          } catch {
+          } catch (error) {
+            if (!(error instanceof FsError) || !["ENOENT", "ENOTDIR"].includes(error.code)) throw error;
           }
         }
         continue;
@@ -1134,15 +1137,20 @@ async function executeVfsImageTool(context, runner) {
       if (token.startsWith("-")) continue;
       const bracketMatch = /^(.*)\[(\d+)\]$/.exec(token);
       const fileToken = bracketMatch ? bracketMatch[1] : token;
+      let bytes;
       try {
-        const bytes = await context.fs.readFile(resolvePath(context.cwd, fileToken), {
+        bytes = await context.fs.readFile(resolvePath(context.cwd, fileToken), {
           signal: invocation.signal
         });
-        vfsFiles.set(fileToken, bytes);
-      } catch {
+      } catch (error) {
+        if (!(error instanceof FsError) || !["ENOENT", "ENOTDIR", "EISDIR", "EACCES", "EPERM"].includes(error.code)) throw error;
+        continue;
       }
+      totalInputBytes += bytes.byteLength;
+      context.inputBudget?.check(totalInputBytes);
+      vfsFiles.set(fileToken, bytes);
     }
-    context.inputBudget?.check(0);
+    context.inputBudget?.check(totalInputBytes);
     const existingSnap = new Map(vfsFiles);
     const res = await runner(normalizedArgv, vfsFiles, invocation.signal);
     for (const [key, val] of vfsFiles.entries()) {

package/dist/safe-bash-command-sponge/index.js

@@ -51,13 +51,14 @@ function settings(options = {}) {
   }
   return Object.freeze(limits);
 }
-async function collectSourceBytes(source, maxBytes, signal) {
+async function collectSourceBytes(source, maxBytes, signal, admit) {
   const chunks = [];
   let total = 0;
   let quantum = 0;
   let chunksRead = 0;
   for await (const chunk of readBytes(source, signal)) {
     total += chunk.byteLength;
+    admit(chunk.byteLength);
     signal.throwIfAborted();
     quantum += Math.max(1, chunk.byteLength);
     if (quantum >= 16384 || ++chunksRead >= 128) {
@@ -89,6 +90,11 @@ function createSpongeCommand(options = {}) {
     description: "Soak up all standard input before writing to a file",
     runtimeIdentity: commandRuntimeIdentity,
     async execute(context) {
+      let inputBytes = 0;
+      const admit = (bytes) => {
+        context.signal.throwIfAborted();
+        context.inputBudget?.check(inputBytes += bytes);
+      };
       context.signal.throwIfAborted();
       const args = getCommandArguments(context).args;
       let append = false;
@@ -131,7 +137,7 @@ function createSpongeCommand(options = {}) {
       }
       try {
         const maxBytes = Math.min(limits.maxBufferedBytes, context.limits?.maxInputBytes ?? limits.maxBufferedBytes);
-        const buffered = await collectSourceBytes(context.stdin, maxBytes, context.signal);
+        const buffered = await collectSourceBytes(context.stdin, maxBytes, context.signal, admit);
         if (files.length === 0 || files[0] === "-") {
           await writeBytes(context.stdout, buffered, context.signal);
           return { exitCode: 0 };
@@ -140,7 +146,8 @@ function createSpongeCommand(options = {}) {
         if (append) {
           let existing = new Uint8Array(0);
           try {
-            existing = await context.fs.readFile(targetPath);
+            existing = await context.fs.readFile(targetPath, { signal: context.signal });
+            admit(existing.byteLength);
           } catch (error) {
             context.signal.throwIfAborted();
             if (!(error instanceof FsError) || error.code !== "ENOENT") throw error;

package/dist/safe-bash-command-stat/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Poe Platform
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/safe-bash-command-stat/command.d.ts

@@ -0,0 +1,7 @@
+import { type FileStat } from "../safe-bash-contracts/index.js";
+import { type MetadataCommandsOptions } from "../safe-bash-metadata-engine/index.js";
+export declare function createStatCommand(configuration?: MetadataCommandsOptions): import("../safe-bash-contracts/index.js").CommandDefinition;
+export interface SyncStatInfo extends FileStat {
+    readonly target?: string;
+}
+export declare function evalSyncStat(args: readonly string[], cwd: string, quotingStyle: string | undefined, inspectStat: (absPath: string, follow: boolean) => SyncStatInfo | undefined): string | undefined;

package/dist/safe-bash-command-stat/command.js

@@ -0,0 +1,9 @@
+import {
+  createStatCommand,
+  evalSyncStat
+} from "../safe-bash/command-chunks/chunk-GIRNFXP3.js";
+import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+export {
+  createStatCommand,
+  evalSyncStat
+};

package/dist/safe-bash-command-stat/index.d.ts

@@ -0,0 +1,6 @@
+import type { VirtualShellPlugin } from "../safe-bash-contracts/index.js";
+import type { MetadataCommandsOptions } from "../safe-bash-metadata-engine/index.js";
+export * from "./command.js";
+export type { MetadataCommandsOptions as StatCommandsOptions, MetadataLimits as StatLimits } from "../safe-bash-metadata-engine/index.js";
+export declare function createStatCommands(options?: MetadataCommandsOptions): import("../safe-bash-contracts/index.js").CommandDefinition[];
+export declare function statCommands(options?: MetadataCommandsOptions): VirtualShellPlugin;

package/dist/safe-bash-command-stat/index.js

@@ -0,0 +1,25 @@
+import {
+  createStatCommand,
+  evalSyncStat
+} from "../safe-bash/command-chunks/chunk-GIRNFXP3.js";
+import {
+  init_buffer
+} from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+
+// packages/safe-bash-command-stat/src/index.ts
+init_buffer();
+function createStatCommands(options = {}) {
+  return [createStatCommand(options)];
+}
+function statCommands(options = {}) {
+  const commands = createStatCommands(options);
+  return { name: "stat-commands", setup(host) {
+    for (const command of commands) host.commands.register(command, { replace: options.replace ?? false });
+  } };
+}
+export {
+  createStatCommand,
+  createStatCommands,
+  evalSyncStat,
+  statCommands
+};

package/dist/safe-bash-command-unrtf/index.js

@@ -2136,9 +2136,17 @@ async function executeUnrtf(context, configuration = {}, cli = false) {
     new Budget({ limits, signal, ...profile === void 0 ? {} : { profile } });
     if (format !== "text" && format !== "html" && !(profile === "gnu-0.21.10" && format === "latex") || noremap && profile !== "gnu-0.21.10") throw new UnrtfError("E_PROFILE", "Option requires the GNU personality profile", 0);
     if (file?.includes("\0")) throw new UnrtfError("E_PARSE", "NUL is unavailable in VFS paths", 0);
+    let inputBytes = 0;
+    const admitInput = (bytes) => {
+      signal.throwIfAborted();
+      context.inputBudget?.check(inputBytes += bytes.byteLength);
+    };
     async function* source() {
       if (file === void 0) {
-        yield* readBytes(context.stdin, signal);
+        for await (const bytes of readBytes(context.stdin, signal)) {
+          admitInput(bytes);
+          yield bytes;
+        }
         return;
       }
       const path = file.startsWith("/") ? file : context.cwd + "/" + file;
@@ -2147,12 +2155,14 @@ async function executeUnrtf(context, configuration = {}, cli = false) {
         try {
           if (context.fs.readStream) {
             for await (const bytes of readBytes(context.fs.readStream(candidate, { signal }), signal)) {
+              admitInput(bytes);
               yielded = true;
               yield bytes;
             }
           } else {
             const maxBytes = Math.min(limits.inputBytes, limits.retainedBytes);
             const bytes = await context.fs.readFile(candidate, { signal, ...Number.isFinite(maxBytes) ? { maxBytes } : {} });
+            admitInput(bytes);
             budget.charge("retainedBytes", bytes.length, 0);
             try {
               yield bytes;

package/dist/safe-bash-command-xxd/index.js

@@ -146,10 +146,12 @@ function output(context, text) {
   return writeBytes(context.stdout, bytes, context.signal);
 }
 var ByteInputBudget = class {
-  constructor(maxInputBytes) {
+  constructor(maxInputBytes, inputBudget) {
     this.maxInputBytes = maxInputBytes;
+    this.inputBudget = inputBudget;
   }
   maxInputBytes;
+  inputBudget;
   #bytes = 0;
   #failure;
   assertOpen(signal) {
@@ -165,13 +167,14 @@ var ByteInputBudget = class {
         throw this.#failure;
       }
       this.#bytes += chunk.byteLength;
+      this.inputBudget?.check(this.#bytes);
       yield chunk;
       this.assertOpen(signal);
     }
   }
 };
 async function* sources(context, operands, maxInputBytes) {
-  const budget = new ByteInputBudget(maxInputBytes);
+  const budget = new ByteInputBudget(maxInputBytes, context.inputBudget);
   let usedStdin = false;
   let emptyChunks = 0;
   for (const operand of operands.length ? operands : ["-"]) {
@@ -420,6 +423,7 @@ function defineCommand(name, handler) {
         return await handler(context);
       } catch (error) {
         context.signal.throwIfAborted();
+        if (error instanceof Error && (error.name === "BudgetExceededError" || error.name === "AbortError")) throw error;
         await writeDiagnostic(
           context.stderr,
           `${context.command}: ${publicDiagnosticMessage(error, context.onInternalError)}

package/dist/safe-bash-command-xz/command.d.ts

@@ -1,4 +1,4 @@
-import type { CommandDefinition } from "../safe-bash-contracts/index.js";
+import { type CommandDefinition } from "../safe-bash-contracts/index.js";
 import { type CompressionCommandOptions } from "../safe-bash-compression-engine/stream.js";
 import type { VirtualShellPlugin } from "../safe-bash-contracts/plugin.js";
 export interface XzLimits {

package/dist/safe-bash-command-xz/index.js

@@ -19,6 +19,7 @@ init_buffer();
 // packages/safe-bash-command-xz/src/command.ts
 init_buffer();
 import { PublicDiagnostic } from "../safe-bash-contracts/diagnostics.js";
+import { withInputByteBudget } from "../safe-bash-contracts/index.js";
 import { codeOf, diagnostic, output } from "../safe-bash-compression-engine/internal.js";
 import { UsageError } from "../safe-bash-contracts/diagnostics.js";
 import { runOperand } from "../safe-bash-compression-engine/operand.js";
@@ -29,7 +30,7 @@ function createXzCommand(config = {}, name = "xz") {
   if (maxDecodedBytes !== void 0 && maxDecodedBytes !== Infinity && (!Number.isSafeInteger(maxDecodedBytes) || maxDecodedBytes < 0)) {
     throw new RangeError("maxDecodedBytes must be a nonnegative safe integer or Infinity");
   }
-  return { name, async execute(context) {
+  return { name, execute: withInputByteBudget(async (context) => {
     context.signal.throwIfAborted();
     try {
       const options = parseOptions(name, context.args);
@@ -114,7 +115,7 @@ file	${value.streams}	${value.blocks}	${value.compressed}	${value.uncompressed}
       await diagnostic(context, error);
       return { exitCode: error instanceof UsageError ? 2 : 1 };
     }
-  } };
+  }) };
 }
 function createUnxzCommand(options = {}) {
   return createXzCommand(options, "unxz");

package/dist/safe-bash-command-yq/index.js

@@ -123,6 +123,7 @@ var NativeWork = class {
     this.assertOpen();
     if (bytes > this.limits.maxInputBytes - this.#input) throw new MikeError("yq limit exceeded: maxInputBytes");
     this.#input += bytes;
+    this.context.inputBudget?.check(this.#input);
   }
   node(count = 1) {
     this.assertOpen();

package/dist/safe-bash-command-yq/native-work.js

@@ -84,6 +84,7 @@ export class NativeWork {
         if (bytes > this.limits.maxInputBytes - this.#input)
             throw new MikeError("yq limit exceeded: maxInputBytes");
         this.#input += bytes;
+        this.context.inputBudget?.check(this.#input);
     }
     node(count = 1) {
         this.assertOpen();

package/dist/safe-bash-command-yq/query.js

@@ -161,6 +161,7 @@ var SinkFailure = class {
   reason;
 };
 var InvocationOwner = class {
+  inputBytes = 0;
   #accepting = true;
   #callbacks = [];
   #closePromise;
@@ -397,6 +398,7 @@ async function collectSource(context, owner, session, sourceName, source, vfs, i
     }
     owner.assertOpen(context.signal);
     if (chunk.byteLength === 0) continue;
+    context.inputBudget?.check(owner.inputBytes += chunk.byteLength);
     session.ownedWork.admitInputBytes(chunk.byteLength);
     if (chunk.byteLength > yqCaps.maxInputBytes - size) throw fromJqLimit(new JqLimitError("maxInputBytes"));
     if (inputFormat === "toml" && chunk.byteLength > yqCaps.maxDocumentBytes - size) throw new YqError("limit", "LIMIT_MAX_DOCUMENT_BYTES", 5);
@@ -451,6 +453,7 @@ async function sourceFrames(context, owner, session, sourceName, inputFormat) {
     throw failure;
   }
   owner.assertOpen(context.signal);
+  context.inputBudget?.check(owner.inputBytes += bytes.byteLength);
   session.ownedWork.admitInputBytes(bytes.byteLength);
   if (inputFormat === "toml") {
     if (bytes.byteLength > yqCaps.maxDocumentBytes) throw new YqError("limit", "LIMIT_MAX_DOCUMENT_BYTES", 5);

package/dist/safe-bash-compression-engine/bounded-codec.js

@@ -1,8 +1,8 @@
 import {
   boundedCodec
-} from "../safe-bash/command-chunks/chunk-W5DNF4JH.js";
-import "../safe-bash/command-chunks/chunk-KJIMDLBB.js";
-import "../safe-bash/command-chunks/chunk-5E4WAO4O.js";
+} from "../safe-bash/command-chunks/chunk-LOICUCHG.js";
+import "../safe-bash/command-chunks/chunk-BXCXRYVU.js";
+import "../safe-bash/command-chunks/chunk-JD5QNRNO.js";
 import "../safe-bash/command-chunks/chunk-QE3VAUMI.js";
 import "../safe-bash/command-chunks/chunk-2UQSP2CE.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-compression-engine/codec-loader.js

@@ -1,7 +1,7 @@
 import {
   createCodec
-} from "../safe-bash/command-chunks/chunk-KJIMDLBB.js";
-import "../safe-bash/command-chunks/chunk-5E4WAO4O.js";
+} from "../safe-bash/command-chunks/chunk-BXCXRYVU.js";
+import "../safe-bash/command-chunks/chunk-JD5QNRNO.js";
 import "../safe-bash/command-chunks/chunk-QE3VAUMI.js";
 import "../safe-bash/command-chunks/chunk-2UQSP2CE.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";