@poe-platform/safe-bash 0.1.802 → 0.1.803

package/dist/safe-bash-compression-engine/files.js

@@ -4,13 +4,13 @@ import {
   unchangedSource,
   verifyOperandDestinations,
   writeFileOperand
-} from "../safe-bash/command-chunks/chunk-WPYIOKE3.js";
-import "../safe-bash/command-chunks/chunk-2JRBIDAD.js";
-import "../safe-bash/command-chunks/chunk-F4TEEZTL.js";
+} from "../safe-bash/command-chunks/chunk-PICVQ6B5.js";
+import "../safe-bash/command-chunks/chunk-V4K2JDYU.js";
+import "../safe-bash/command-chunks/chunk-CQHP3I66.js";
 import "../safe-bash/command-chunks/chunk-Z6UEDK5T.js";
-import "../safe-bash/command-chunks/chunk-W5DNF4JH.js";
-import "../safe-bash/command-chunks/chunk-KJIMDLBB.js";
-import "../safe-bash/command-chunks/chunk-5E4WAO4O.js";
+import "../safe-bash/command-chunks/chunk-LOICUCHG.js";
+import "../safe-bash/command-chunks/chunk-BXCXRYVU.js";
+import "../safe-bash/command-chunks/chunk-JD5QNRNO.js";
 import "../safe-bash/command-chunks/chunk-QE3VAUMI.js";
 import "../safe-bash/command-chunks/chunk-I6YHLFNL.js";
 import "../safe-bash/command-chunks/chunk-2UQSP2CE.js";

package/dist/safe-bash-compression-engine/index.js

@@ -1,14 +1,14 @@
 import {
   DecodedBudget,
   transform
-} from "../safe-bash/command-chunks/chunk-2JRBIDAD.js";
-import "../safe-bash/command-chunks/chunk-F4TEEZTL.js";
+} from "../safe-bash/command-chunks/chunk-V4K2JDYU.js";
+import "../safe-bash/command-chunks/chunk-CQHP3I66.js";
 import "../safe-bash/command-chunks/chunk-Z6UEDK5T.js";
 import {
   boundedCodec
-} from "../safe-bash/command-chunks/chunk-W5DNF4JH.js";
-import "../safe-bash/command-chunks/chunk-KJIMDLBB.js";
-import "../safe-bash/command-chunks/chunk-5E4WAO4O.js";
+} from "../safe-bash/command-chunks/chunk-LOICUCHG.js";
+import "../safe-bash/command-chunks/chunk-BXCXRYVU.js";
+import "../safe-bash/command-chunks/chunk-JD5QNRNO.js";
 import "../safe-bash/command-chunks/chunk-QE3VAUMI.js";
 import "../safe-bash/command-chunks/chunk-I6YHLFNL.js";
 import "../safe-bash/command-chunks/chunk-2UQSP2CE.js";

package/dist/safe-bash-compression-engine/operand.js

@@ -2,15 +2,15 @@ import {
   sourceBytes,
   unchangedSource,
   writeFileOperand
-} from "../safe-bash/command-chunks/chunk-WPYIOKE3.js";
+} from "../safe-bash/command-chunks/chunk-PICVQ6B5.js";
 import {
   transform
-} from "../safe-bash/command-chunks/chunk-2JRBIDAD.js";
-import "../safe-bash/command-chunks/chunk-F4TEEZTL.js";
+} from "../safe-bash/command-chunks/chunk-V4K2JDYU.js";
+import "../safe-bash/command-chunks/chunk-CQHP3I66.js";
 import "../safe-bash/command-chunks/chunk-Z6UEDK5T.js";
-import "../safe-bash/command-chunks/chunk-W5DNF4JH.js";
-import "../safe-bash/command-chunks/chunk-KJIMDLBB.js";
-import "../safe-bash/command-chunks/chunk-5E4WAO4O.js";
+import "../safe-bash/command-chunks/chunk-LOICUCHG.js";
+import "../safe-bash/command-chunks/chunk-BXCXRYVU.js";
+import "../safe-bash/command-chunks/chunk-JD5QNRNO.js";
 import "../safe-bash/command-chunks/chunk-QE3VAUMI.js";
 import "../safe-bash/command-chunks/chunk-I6YHLFNL.js";
 import "../safe-bash/command-chunks/chunk-2UQSP2CE.js";

package/dist/safe-bash-compression-engine/options.js

@@ -3,7 +3,7 @@ import {
   formats,
   parseOptions,
   profiles
-} from "../safe-bash/command-chunks/chunk-5E4WAO4O.js";
+} from "../safe-bash/command-chunks/chunk-JD5QNRNO.js";
 import "../safe-bash/command-chunks/chunk-QE3VAUMI.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {

package/dist/safe-bash-compression-engine/stream.js

@@ -3,12 +3,12 @@ import {
   chunkBytes,
   stagingLimit,
   transform
-} from "../safe-bash/command-chunks/chunk-2JRBIDAD.js";
-import "../safe-bash/command-chunks/chunk-F4TEEZTL.js";
+} from "../safe-bash/command-chunks/chunk-V4K2JDYU.js";
+import "../safe-bash/command-chunks/chunk-CQHP3I66.js";
 import "../safe-bash/command-chunks/chunk-Z6UEDK5T.js";
-import "../safe-bash/command-chunks/chunk-W5DNF4JH.js";
-import "../safe-bash/command-chunks/chunk-KJIMDLBB.js";
-import "../safe-bash/command-chunks/chunk-5E4WAO4O.js";
+import "../safe-bash/command-chunks/chunk-LOICUCHG.js";
+import "../safe-bash/command-chunks/chunk-BXCXRYVU.js";
+import "../safe-bash/command-chunks/chunk-JD5QNRNO.js";
 import "../safe-bash/command-chunks/chunk-QE3VAUMI.js";
 import "../safe-bash/command-chunks/chunk-I6YHLFNL.js";
 import "../safe-bash/command-chunks/chunk-2UQSP2CE.js";

package/dist/safe-bash-compression-engine/zstd-decode.js

@@ -1,10 +1,10 @@
 import {
   zstdDecode
-} from "../safe-bash/command-chunks/chunk-F4TEEZTL.js";
+} from "../safe-bash/command-chunks/chunk-CQHP3I66.js";
 import "../safe-bash/command-chunks/chunk-Z6UEDK5T.js";
-import "../safe-bash/command-chunks/chunk-W5DNF4JH.js";
-import "../safe-bash/command-chunks/chunk-KJIMDLBB.js";
-import "../safe-bash/command-chunks/chunk-5E4WAO4O.js";
+import "../safe-bash/command-chunks/chunk-LOICUCHG.js";
+import "../safe-bash/command-chunks/chunk-BXCXRYVU.js";
+import "../safe-bash/command-chunks/chunk-JD5QNRNO.js";
 import "../safe-bash/command-chunks/chunk-QE3VAUMI.js";
 import "../safe-bash/command-chunks/chunk-I6YHLFNL.js";
 import "../safe-bash/command-chunks/chunk-2UQSP2CE.js";

package/dist/safe-bash-contracts/escaping.js

@@ -4,10 +4,10 @@ import "../safe-bash/command-chunks/chunk-VM6YNUJE.js";
 import "../safe-bash/command-chunks/chunk-UEEPCFWK.js";
 import "../safe-bash/command-chunks/chunk-O5SNTXHH.js";
 import "../safe-bash/command-chunks/chunk-OF4LJSBK.js";
-import "../safe-bash/command-chunks/chunk-YOFC45RK.js";
+import "../safe-bash/command-chunks/chunk-QVOS4YXL.js";
 import {
   writeBytes
-} from "../safe-bash/command-chunks/chunk-VXSLJH7G.js";
+} from "../safe-bash/command-chunks/chunk-6JSIFWYT.js";
 import "../safe-bash/command-chunks/chunk-X475DYQM.js";
 import "../safe-bash/command-chunks/chunk-G5PQV7XW.js";
 import "../safe-bash/command-chunks/chunk-XPT2UGBF.js";

package/dist/safe-bash-contracts/filesystem-output.js

@@ -10,11 +10,11 @@ import {
 } from "../safe-bash/command-chunks/chunk-VM6YNUJE.js";
 import {
   createOutputOperation
-} from "../safe-bash/command-chunks/chunk-YOFC45RK.js";
+} from "../safe-bash/command-chunks/chunk-QVOS4YXL.js";
 import {
   createBytePipe,
   outputFailure
-} from "../safe-bash/command-chunks/chunk-VXSLJH7G.js";
+} from "../safe-bash/command-chunks/chunk-6JSIFWYT.js";
 import {
   FsError
 } from "../safe-bash/command-chunks/chunk-X475DYQM.js";

package/dist/safe-bash-contracts/index.js

@@ -32,7 +32,7 @@ import {
 } from "../safe-bash/command-chunks/chunk-OF4LJSBK.js";
 import {
   createOutputOperation
-} from "../safe-bash/command-chunks/chunk-YOFC45RK.js";
+} from "../safe-bash/command-chunks/chunk-QVOS4YXL.js";
 import {
   InputByteBudget,
   collectBytes,
@@ -47,7 +47,7 @@ import {
   withInputByteBudget,
   writeBytes,
   writeText
-} from "../safe-bash/command-chunks/chunk-VXSLJH7G.js";
+} from "../safe-bash/command-chunks/chunk-6JSIFWYT.js";
 import {
   FsError,
   isErrnoCode,

package/dist/safe-bash-contracts/io.d.ts

@@ -52,6 +52,8 @@ export interface PipeWriteEndpoint extends PipeEndpoint {
 }
 export interface BytePipeOptions {
     readonly highWaterMark?: number;
+    /** Admit each nonempty write before copying or publishing its bytes. */
+    readonly admitWrite?: (byteLength: number) => void;
     /** Maximum pending endpoint observations across both ends; defaults to Infinity. */
     readonly maxObservationWaiters?: number;
     readonly signal?: AbortSignal;

package/dist/safe-bash-contracts/io.js

@@ -11,7 +11,7 @@ import {
   withInputByteBudget,
   writeBytes,
   writeText
-} from "../safe-bash/command-chunks/chunk-VXSLJH7G.js";
+} from "../safe-bash/command-chunks/chunk-6JSIFWYT.js";
 import "../safe-bash/command-chunks/chunk-X475DYQM.js";
 import "../safe-bash/command-chunks/chunk-Y2WBSJG6.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-contracts/output.js

@@ -1,7 +1,7 @@
 import {
   createOutputOperation
-} from "../safe-bash/command-chunks/chunk-YOFC45RK.js";
-import "../safe-bash/command-chunks/chunk-VXSLJH7G.js";
+} from "../safe-bash/command-chunks/chunk-QVOS4YXL.js";
+import "../safe-bash/command-chunks/chunk-6JSIFWYT.js";
 import "../safe-bash/command-chunks/chunk-X475DYQM.js";
 import "../safe-bash/command-chunks/chunk-Y2WBSJG6.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-io-engine/commands/search/requirements.js

@@ -5,7 +5,7 @@ import {
   requiredFileInput,
   searchRequirements,
   sedRequirements
-} from "../../../safe-bash/command-chunks/chunk-FPVUD6TH.js";
+} from "../../../safe-bash/command-chunks/chunk-HDCNKOIX.js";
 import "../../../safe-bash/command-chunks/chunk-XS72HTMA.js";
 import "../../../safe-bash/command-chunks/chunk-PM2PFWPC.js";
 import "../../../safe-bash/command-chunks/chunk-RHKBCQYQ.js";

package/dist/safe-bash-io-engine/commands/text-programs/shared.js

@@ -4,7 +4,7 @@ import {
 } from "../../../safe-bash/command-chunks/chunk-ZMAFOEN7.js";
 import {
   requiredFileInput
-} from "../../../safe-bash/command-chunks/chunk-FPVUD6TH.js";
+} from "../../../safe-bash/command-chunks/chunk-HDCNKOIX.js";
 import {
   RESOLVED_EXIT_ONE,
   RESOLVED_EXIT_ZERO,

package/dist/safe-bash-mcp/index.browser.js

@@ -8535,6 +8535,7 @@ function compileToolArguments(tool, options = {}) {
 // src/commands.ts
 import {
   collectBytes,
+  readBytes,
   commandRuntimeIdentity,
   createOutputOperation,
   getCommandArguments
@@ -8741,7 +8742,15 @@ async function stdinArguments(context, args, signal, maxBytes) {
   const inline = meaningful.length === 1 && meaningful[0] === "--raw=-";
   const separated = meaningful.length === 2 && meaningful[0] === "--raw" && meaningful[1] === "-";
   if (!inline && !separated) return args;
-  const bytes = await collectBytes(context.stdin, { signal, maxBytes });
+  const source = (async function* () {
+    let totalBytes = 0;
+    for await (const chunk of readBytes(context.stdin, signal)) {
+      totalBytes += chunk.byteLength;
+      context.inputBudget?.check(totalBytes);
+      yield chunk;
+    }
+  })();
+  const bytes = await collectBytes(source, { signal, maxBytes });
   let json;
   try {
     json = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
@@ -8830,6 +8839,7 @@ async function createRemoteMcpCommands(servers, options = {}) {
             }
           } catch (error) {
             operation.signal.throwIfAborted();
+            if (typeof error === "object" && error !== null && ("code" in error && error.code === "ERR_BUDGET_EXCEEDED" || "name" in error && error.name === "BudgetExceededError")) throw error;
             await emit(errors, `${JSON.stringify({ error: errorDetails(error) })}
 `, outputLimit);
             return { exitCode: 2 };

package/dist/safe-bash-mcp/index.js

@@ -13801,6 +13801,7 @@ function compileToolArguments(tool, options = {}) {
 // src/commands.ts
 import {
   collectBytes,
+  readBytes,
   commandRuntimeIdentity,
   createOutputOperation,
   getCommandArguments
@@ -14007,7 +14008,15 @@ async function stdinArguments(context, args, signal, maxBytes) {
   const inline = meaningful.length === 1 && meaningful[0] === "--raw=-";
   const separated = meaningful.length === 2 && meaningful[0] === "--raw" && meaningful[1] === "-";
   if (!inline && !separated) return args;
-  const bytes = await collectBytes(context.stdin, { signal, maxBytes });
+  const source = (async function* () {
+    let totalBytes = 0;
+    for await (const chunk of readBytes(context.stdin, signal)) {
+      totalBytes += chunk.byteLength;
+      context.inputBudget?.check(totalBytes);
+      yield chunk;
+    }
+  })();
+  const bytes = await collectBytes(source, { signal, maxBytes });
   let json;
   try {
     json = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
@@ -14096,6 +14105,7 @@ async function createRemoteMcpCommands(servers, options = {}) {
             }
           } catch (error) {
             operation.signal.throwIfAborted();
+            if (typeof error === "object" && error !== null && ("code" in error && error.code === "ERR_BUDGET_EXCEEDED" || "name" in error && error.name === "BudgetExceededError")) throw error;
             await emit(errors, `${JSON.stringify({ error: errorDetails(error) })}
 `, outputLimit);
             return { exitCode: 2 };
@@ -14544,7 +14554,7 @@ async function collectBytes2(source, options) {
     reserved += bytes;
   }
   options.signal?.throwIfAborted();
-  for await (const chunk of readBytes(source, options.signal)) {
+  for await (const chunk of readBytes2(source, options.signal)) {
     reserved -= inputBytes;
     inputBytes = 0;
     if (chunk.byteLength > (options.maxBytes ?? Infinity) - size) {
@@ -14738,7 +14748,7 @@ var ReadBytesGenerator = class {
     });
   }
 };
-function readBytes(source, signal) {
+function readBytes2(source, signal) {
   if (signal !== void 0 && source[readBytesSignal] === signal) {
     return source;
   }
@@ -16133,6 +16143,7 @@ var FastDirectoryEntriesMap = class {
   }
   _rebuild(newCap) {
     this._missKey = "";
+    this._missSlot = -1;
     const newTableLen = newCap * 2;
     const newMask = newTableLen - 1;
     const newTable = newCap <= 16384 ? new Int16Array(newTableLen).fill(-1) : new Int32Array(newTableLen).fill(-1);
@@ -16172,16 +16183,17 @@ var FastDirectoryEntriesMap = class {
     this._next = writeIdx;
   }
   set(k, v) {
-    if (k === this._missKey && this._next < this._keys.length) {
+    const missSlot = k === this._missKey ? this._missSlot : -1;
+    this._missKey = "";
+    this._missSlot = -1;
+    if (missSlot >= 0 && (this._table[missSlot] === -1 || this._table[missSlot] === -2) && this._next < this._keys.length) {
       const entryIdx = this._next++;
-      this._table[this._missSlot] = entryIdx;
+      this._table[missSlot] = entryIdx;
       this._keys[entryIdx] = k;
       this._vals[entryIdx] = v;
       this.size++;
-      this._missKey = "";
       return this;
     }
-    this._missKey = "";
     if (this._next >= this._keys.length) {
       this._rebuild(this.size * 2 <= this._keys.length ? this._keys.length : this._keys.length * 2);
     }
@@ -16213,6 +16225,7 @@ var FastDirectoryEntriesMap = class {
   }
   delete(k) {
     this._missKey = "";
+    this._missSlot = -1;
     if (this.size === 0)
       return false;
     let slot = this._hash(k);
@@ -16239,6 +16252,7 @@ var FastDirectoryEntriesMap = class {
   }
   clear() {
     this._missKey = "";
+    this._missSlot = -1;
     if (this._next > 0) {
       this._table.fill(-1);
       for (let i = 0; i < this._next; i++) {
@@ -16874,6 +16888,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
       if (alloc.isReleased64()) {
         alloc.detachLedger(DUMMY_POOL_LEDGER);
         if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedAllocationPoolLen < SHARED_POOL_CAPACITY) {
+          alloc.data.fill(0);
           sharedAllocationPool[sharedAllocationPoolLen++] = alloc;
         } else if (cache.allocations.length < 128) {
           cache.allocations.push(alloc);
@@ -16881,6 +16896,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
       } else if (alloc.isReleased65536()) {
         alloc.detachLedger(DUMMY_POOL_LEDGER);
         if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedLargeAllocationPoolLen < SHARED_LARGE_POOL_CAPACITY) {
+          alloc.data.fill(0);
           sharedLargeAllocationPool[sharedLargeAllocationPoolLen++] = alloc;
         }
       }
@@ -16897,6 +16913,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
         cache.lastFastDirNode = void 0;
       }
       if (node.entries.size === 0) {
+        node.entries.clear();
         if (sharedDirectoryNodePoolLen < SHARED_DIR_POOL_CAPACITY) {
           sharedDirectoryNodePool[sharedDirectoryNodePoolLen++] = node;
         } else if (cache.directories.length < 32) {
@@ -16921,11 +16938,13 @@ var MemoryFileSystem = class _MemoryFileSystem {
     if (previous.isReleased64()) {
       previous.detachLedger(DUMMY_POOL_LEDGER);
       if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedAllocationPoolLen < SHARED_POOL_CAPACITY) {
+        previous.data.fill(0);
         sharedAllocationPool[sharedAllocationPoolLen++] = previous;
       }
     } else if (previous.isReleased65536()) {
       previous.detachLedger(DUMMY_POOL_LEDGER);
       if (this.ledger.hasInfiniteRetained && this.ledger.hasInfiniteFileBytes && sharedLargeAllocationPoolLen < SHARED_LARGE_POOL_CAPACITY) {
+        previous.data.fill(0);
         sharedLargeAllocationPool[sharedLargeAllocationPoolLen++] = previous;
       }
     }
@@ -19547,7 +19566,7 @@ var ReadOnlyFileSystem = class _ReadOnlyFileSystem {
     if (typeof this.#filesystem.readStream !== "function") {
       throw new FsError("ENOTSUP", { syscall: "readStream", path: path6 });
     }
-    for await (const chunk of readBytes(this.#filesystem.readStream(path6, options), options?.signal)) {
+    for await (const chunk of readBytes2(this.#filesystem.readStream(path6, options), options?.signal)) {
       yield new Uint8Array(chunk);
     }
   }
@@ -21310,7 +21329,7 @@ var WebDavFileSystem = class {
         let size = prefix.byteLength;
         if (prefix.byteLength)
           yield prefix;
-        for await (const chunk of readBytes(source, signal)) {
+        for await (const chunk of readBytes2(source, signal)) {
           size += chunk.byteLength;
           if (size > limit)
             fail("EFBIG", "writeStream", path6, "upload exceeds byte limit");
@@ -22649,7 +22668,7 @@ var S3FileSystem = class {
       upload = (async function* () {
         let count = 0;
         reading = true;
-        for await (const chunk of readBytes(body, signal)) {
+        for await (const chunk of readBytes2(body, signal)) {
           if (chunk.length > expected.ContentLength - count)
             fail2("EIO", "rename", source, "source body exceeds its enumerated length");
           count += chunk.length;
@@ -22830,7 +22849,7 @@ var S3FileSystem = class {
         fail2("EIO", "readStream", path6, "response ETag differs from requested snapshot");
       if (output.ContentLength !== void 0 && output.ContentLength !== expected)
         fail2("EIO", "readStream", path6, "response length differs from requested snapshot");
-      iterator = readBytes(output.Body, signal)[Symbol.asyncIterator]();
+      iterator = readBytes2(output.Body, signal)[Symbol.asyncIterator]();
       while (true) {
         const result = await iterator.next();
         if (result.done)
@@ -22910,7 +22929,7 @@ var S3FileSystem = class {
     let finished = false;
     const body = (async function* () {
       let total = 0;
-      for await (const chunk of readBytes(source, signal)) {
+      for await (const chunk of readBytes2(source, signal)) {
         if (chunk.length > this.maxStreamBytes - total)
           fail2("EFBIG", "writeStream", path6);
         total += chunk.length;
@@ -23300,10 +23319,10 @@ async function authenticateRemoteMcpServer(value, options) {
     binding: snapshotConfigurationBindingOptions(options.binding)
   };
   options.signal?.throwIfAborted();
-  const limits = remoteLimits({ ...options, requestTimeoutMs: options.requestTimeoutMs ?? 12e4 });
-  if (limits.requestTimeoutMs > 2147483647) throw new Error("Authentication requestTimeoutMs must be a positive supported timer interval");
-  const deadline = AbortSignal.timeout(limits.requestTimeoutMs);
-  const signal = options.signal === void 0 ? deadline : AbortSignal.any([options.signal, deadline]);
+  const limits = remoteLimits({ ...options, requestTimeoutMs: options.requestTimeoutMs ?? Infinity });
+  const signals = options.signal === void 0 ? [] : [options.signal];
+  if (limits.requestTimeoutMs !== Infinity) signals.push(AbortSignal.timeout(limits.requestTimeoutMs));
+  const signal = AbortSignal.any(signals);
   const configuration = parseRemoteMcpConfiguration({ version: 1, servers: [value] }, options.binding);
   const browser = options.binding.oauth?.browser === void 0 ? void 0 : { ...options.binding.oauth.browser };
   const opener = browser?.openBrowser;

package/dist/safe-bash-metadata-engine/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Poe Platform
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/safe-bash-metadata-engine/index.d.ts

@@ -0,0 +1,30 @@
+import { type CommandContext, type CommandDefinition, type CommandHandler, type FileType } from "../safe-bash-contracts/index.js";
+export interface MetadataLimits {
+    readonly maxEntries: number;
+    readonly maxDepth: number;
+    readonly maxOutputBytes: number;
+    readonly maxArgumentBytes: number;
+    readonly maxAttempts: number;
+    readonly maxArguments?: number;
+}
+export interface MetadataCommandsOptions {
+    readonly replace?: boolean;
+    readonly umask?: number;
+    readonly limits?: Partial<MetadataLimits>;
+}
+export declare function settings(options?: MetadataCommandsOptions): {
+    limits: MetadataLimits;
+    umask: number;
+};
+export declare class MetadataBudget {
+    readonly context: CommandContext;
+    readonly limits: MetadataLimits;
+    private entries;
+    private outputBytes;
+    get remainingEntries(): number;
+    constructor(context: CommandContext, limits: MetadataLimits);
+    step(depth?: number): Promise<void>;
+    output(text: string | Uint8Array): Promise<void>;
+}
+export declare function metadataCommand(name: string, handler: CommandHandler): CommandDefinition;
+export declare function permissionString(mode: number, type: FileType): string;

package/dist/safe-bash-metadata-engine/index.js

@@ -0,0 +1,82 @@
+import {
+  init_buffer
+} from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+
+// packages/safe-bash-metadata-engine/src/index.ts
+init_buffer();
+import { byteLength } from "../safe-bash-io-engine/byte-encoding.js";
+import { yieldTurn } from "../safe-bash-contracts/yield.js";
+import { FsError, writeBytes } from "../safe-bash-contracts/index.js";
+import { diagnostic } from "../safe-bash-io-engine/internal.js";
+import { gnuInformation } from "../safe-bash-io-engine/gnu-information.js";
+function settings(options = {}) {
+  const limits = { maxEntries: Infinity, maxDepth: Infinity, maxOutputBytes: Infinity, maxArgumentBytes: Infinity, maxAttempts: Infinity, maxArguments: Infinity, ...options.limits };
+  for (const [key, value] of Object.entries(limits)) {
+    if (value !== Infinity && (!Number.isSafeInteger(value) || value < (key === "maxDepth" ? 0 : 1))) throw new RangeError(`Invalid metadata limit: ${key}`);
+  }
+  const umask = options.umask ?? 18;
+  if (!Number.isInteger(umask) || umask < 0 || umask > 511) throw new RangeError("Invalid metadata umask");
+  return { limits, umask };
+}
+var MetadataBudget = class {
+  constructor(context, limits) {
+    this.context = context;
+    this.limits = limits;
+    if (context.args.reduce((size, argument) => size + byteLength(argument), 0) > limits.maxArgumentBytes) throw new FsError("EFBIG", { message: "metadata argument limit exceeded" });
+  }
+  context;
+  limits;
+  entries = 0;
+  outputBytes = 0;
+  get remainingEntries() {
+    return this.limits.maxEntries - this.entries;
+  }
+  async step(depth = 0) {
+    this.context.signal.throwIfAborted();
+    if (++this.entries > this.limits.maxEntries || depth > this.limits.maxDepth) throw new FsError("EFBIG", { message: "metadata traversal limit exceeded" });
+    if (this.entries % 128 === 0) await yieldTurn();
+    this.context.signal.throwIfAborted();
+  }
+  async output(text) {
+    const bytes = typeof text === "string" ? new TextEncoder().encode(text) : text;
+    if (bytes.byteLength > this.limits.maxOutputBytes - this.outputBytes) throw new FsError("EFBIG", { message: "metadata output limit exceeded" });
+    this.outputBytes += bytes.byteLength;
+    await writeBytes(this.context.stdout, bytes, this.context.signal);
+  }
+};
+function metadataCommand(name, handler) {
+  return { name, async execute(context) {
+    context.signal.throwIfAborted();
+    try {
+      const infoPromise = gnuInformation(name, context);
+      if (infoPromise) {
+        const info = await infoPromise;
+        if (info) return info;
+      }
+      return await handler(context);
+    } catch (error) {
+      context.signal.throwIfAborted();
+      await diagnostic(context, error);
+      return { exitCode: 1 };
+    }
+  } };
+}
+function permissionString(mode, type) {
+  let text = type === "directory" ? "d" : type === "symlink" ? "l" : type === "character" ? "c" : "-";
+  for (const [read, write, execute, special, lower, upper] of [
+    [256, 128, 64, 2048, "s", "S"],
+    [32, 16, 8, 1024, "s", "S"],
+    [4, 2, 1, 512, "t", "T"]
+  ]) {
+    text += mode & read ? "r" : "-";
+    text += mode & write ? "w" : "-";
+    text += mode & special ? mode & execute ? lower : upper : mode & execute ? "x" : "-";
+  }
+  return text;
+}
+export {
+  MetadataBudget,
+  metadataCommand,
+  permissionString,
+  settings
+};

package/dist/safe-bash-metadata-engine/random.d.ts

@@ -0,0 +1 @@
+export declare function randomInteger(maximum: number): number;

package/dist/safe-bash-metadata-engine/random.js

@@ -0,0 +1,21 @@
+import {
+  init_buffer
+} from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
+
+// packages/safe-bash-metadata-engine/src/random.ts
+init_buffer();
+function randomInteger(maximum) {
+  const range = 4294967296;
+  if (!Number.isSafeInteger(maximum) || maximum < 1 || maximum > range) {
+    throw new RangeError("Random integer maximum must be an integer from 1 to 2^32");
+  }
+  const limit = Math.floor(range / maximum) * maximum;
+  const sample = new Uint32Array(1);
+  do {
+    globalThis.crypto.getRandomValues(sample);
+  } while (sample[0] >= limit);
+  return sample[0] % maximum;
+}
+export {
+  randomInteger
+};

package/dist/safe-bash-regex-engine/index.js

@@ -6,7 +6,7 @@ import {
   trySubstitutePairSync,
   trySubstitutePairToBufferSync,
   trySubstituteSync
-} from "../safe-bash/command-chunks/chunk-6GWJUQAV.js";
+} from "../safe-bash/command-chunks/chunk-WWIBP2ET.js";
 import "../safe-bash/command-chunks/chunk-VT6MJBEI.js";
 import {
   RustPatternError,

package/dist/safe-bash-regex-engine/text/regex.js

@@ -6,7 +6,7 @@ import {
   trySubstitutePairSync,
   trySubstitutePairToBufferSync,
   trySubstituteSync
-} from "../../safe-bash/command-chunks/chunk-6GWJUQAV.js";
+} from "../../safe-bash/command-chunks/chunk-WWIBP2ET.js";
 import "../../safe-bash/command-chunks/chunk-VT6MJBEI.js";
 import "../../safe-bash/command-chunks/chunk-YVNGTIJO.js";
 import "../../safe-bash/command-chunks/chunk-X54L3DBL.js";

package/dist/safe-bash-search-engine/ergonomic-regex.js

@@ -1,8 +1,8 @@
 import {
   ErgonomicVmMatcher,
   prepareErgonomicRegex
-} from "../safe-bash/command-chunks/chunk-PEF7K3UQ.js";
-import "../safe-bash/command-chunks/chunk-VGG2DL5Q.js";
+} from "../safe-bash/command-chunks/chunk-EARHPPPJ.js";
+import "../safe-bash/command-chunks/chunk-TRR4MYWF.js";
 import "../safe-bash/command-chunks/chunk-AVX5VLX5.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {

package/dist/safe-bash-search-engine/glob.js

@@ -2,8 +2,8 @@ import {
   Glob,
   ignoreRules,
   matchGlobs
-} from "../safe-bash/command-chunks/chunk-I237SNW5.js";
-import "../safe-bash/command-chunks/chunk-VGG2DL5Q.js";
+} from "../safe-bash/command-chunks/chunk-LFJJQQND.js";
+import "../safe-bash/command-chunks/chunk-TRR4MYWF.js";
 import "../safe-bash/command-chunks/chunk-AVX5VLX5.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {