@poe-platform/safe-bash 0.1.803 → 0.1.804

package/dist/safe-bash/command-chunks/{chunk-TZZ4WUKH.js → chunk-FZAWGKSE.js}

@@ -1,7 +1,7 @@
 import {
   addAbortSignalWaiter,
   removeAbortSignalWaiter
-} from "./chunk-Y2WBSJG6.js";
+} from "./chunk-X4QZQI5Q.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";
@@ -12,15 +12,17 @@ var builtInDirectContextExecutors = /* @__PURE__ */ new WeakSet();
 var syncCommandEvaluators = {};
 var creationUmask = /* @__PURE__ */ Symbol("creationUmask");
 var runtimeBackingFileSystems = /* @__PURE__ */ new WeakMap();
-function registerRuntimeBackingFileSystem(wrapper, backing) {
+var runtimeFileSystemCharges = /* @__PURE__ */ new WeakMap();
+function registerRuntimeBackingFileSystem(wrapper, backing, charge) {
   runtimeBackingFileSystems.set(wrapper, backing);
+  if (charge) runtimeFileSystemCharges.set(wrapper, charge);
+  else runtimeFileSystemCharges.delete(wrapper);
 }
 function getRuntimeBackingFileSystem(fs) {
   return runtimeBackingFileSystems.get(fs);
 }
 function chargeRuntimeFileSystemOperation(fs) {
-  const backing = runtimeBackingFileSystems.get(fs) ?? fs;
-  backing._activeRuntimeBudget?.fileSystemOperation();
+  runtimeFileSystemCharges.get(fs)?.();
 }
 var syncResolved = /* @__PURE__ */ Symbol.for("safe-bash.syncResolved");
 var resolvedVoid = Object.defineProperty(Promise.resolve(), syncResolved, { value: true });

package/dist/safe-bash/command-chunks/{chunk-YHFXOX6U.js → chunk-GOCFQ6XV.js}

@@ -11,15 +11,15 @@ import {
   openAiRecord,
   openAiResponse
 } from "./chunk-OMH6Z4BN.js";
+import {
+  acceptsMimeType
+} from "./chunk-PHFOL7T3.js";
 import {
   credential,
   jsonBody,
   multipart,
   providerLimits
-} from "./chunk-2KG2QLJE.js";
-import {
-  acceptsMimeType
-} from "./chunk-PHFOL7T3.js";
+} from "./chunk-RFWGYT7G.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";

package/dist/safe-bash/command-chunks/{chunk-QVOS4YXL.js → chunk-HH5O7DJI.js}

@@ -5,7 +5,7 @@ import {
   outputFailure,
   removeManagedAbortWaiter,
   writeBytes
-} from "./chunk-6JSIFWYT.js";
+} from "./chunk-OJQRSCBP.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";

package/dist/safe-bash/command-chunks/{chunk-3HHCU5YU.js → chunk-HK7F5SDC.js}

@@ -12,6 +12,7 @@ import {
 // packages/safe-bash-network-engine/src/args.ts
 init_buffer();
 var values = {
+  b: "cookie",
   C: "continue-at",
   X: "request",
   d: "data",
@@ -40,6 +41,7 @@ var flags = {
   q: "disable",
   N: "no-buffer",
   g: "globoff",
+  k: "insecure",
   h: "help",
   V: "version"
 };
@@ -58,6 +60,7 @@ var longValues = /* @__PURE__ */ new Set([
   "max-filesize",
   "retry",
   "retry-delay",
+  "retry-max-time",
   "connect-timeout",
   "output-dir",
   "cacert",
@@ -65,6 +68,10 @@ var longValues = /* @__PURE__ */ new Set([
   "etag-compare"
 ]);
 var booleans = {
+  insecure: "insecure",
+  "create-dirs": "createDirs",
+  "retry-all-errors": "retryAllErrors",
+  "retry-connrefused": "retryConnrefused",
   location: "location",
   head: "head",
   include: "include",
@@ -201,6 +208,12 @@ function parseArguments(args, limits) {
       case "etag-compare":
         result.etagCompare = value;
         break;
+      case "cookie":
+        (result.cookies ??= []).push(value);
+        break;
+      case "retry-max-time":
+        result.retryMaxTimeMs = number(value, true) * 1e3 || Infinity;
+        break;
       case "cacert":
         result.caFile = value;
         break;

package/dist/safe-bash/command-chunks/{chunk-JNZ3CVAE.js → chunk-HQBXIZC7.js}

@@ -1,10 +1,10 @@
 import {
   parsePredicate
-} from "./chunk-XJXU3VVH.js";
+} from "./chunk-LWOE65OE.js";
 import {
   XmlQueryError,
   XmlQueryLimitError
-} from "./chunk-NXEQ3ESQ.js";
+} from "./chunk-7QD5YY4F.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";
@@ -51,7 +51,12 @@ async function parseSyntax(source, budget) {
     const start2 = at;
     if (!nameStart(source[at] ?? "")) fail();
     while (namePart(source[at] ?? "")) at++;
-    if (source[at] === ":") fail();
+    if (source[at] === ":") {
+      at++;
+      if (!nameStart(source[at] ?? "")) fail();
+      while (namePart(source[at] ?? "")) at++;
+      if (source[at] === ":") fail();
+    }
     return source.slice(start2, at);
   };
   space();

package/dist/safe-bash/command-chunks/{chunk-V4K2JDYU.js → chunk-I63DBZXZ.js}

@@ -1,12 +1,12 @@
 import {
   zstdDecode
-} from "./chunk-CQHP3I66.js";
+} from "./chunk-BOEOJS2Q.js";
 import {
   gunzipMembers
 } from "./chunk-Z6UEDK5T.js";
 import {
   boundedCodec
-} from "./chunk-LOICUCHG.js";
+} from "./chunk-ZHN3QDCI.js";
 import {
   CodecReader,
   codec

package/dist/safe-bash/command-chunks/{chunk-WNE7FPVR.js → chunk-I64TLTIW.js}

@@ -1,6 +1,6 @@
 import {
   Exclusions
-} from "./chunk-5TBUOBDE.js";
+} from "./chunk-RZMVRT26.js";
 import {
   recordPadding
 } from "./chunk-BNOU5YQS.js";
@@ -114,10 +114,9 @@ async function manifest(context, options, budget) {
           entry.linkname = previous.entry.name;
           entry.size = 0;
         }
-        paths.set(archivePath, { path, stat, entry });
+        paths.set(archivePath, { path, canonical, stat, entry });
         bindings.set(archivePath, { scope: stat.identityScope, key });
       }
-      if (entry.type === "0" && (!context.fs.openReadFile || !hasIdentity(stat))) fail(`cannot safely read source without retained backing identity: ${display(name)}`);
       if (!Number.isSafeInteger(entry.size) || entry.size < 0 || entry.size > budget.limits.maxEntryBytes) fail("entry byte limit exceeded");
       if (entry.size > budget.limits.maxTotalBytes - budget.totalBytes) fail("total payload byte limit exceeded");
       budget.totalBytes += entry.size;
@@ -129,7 +128,7 @@ async function manifest(context, options, budget) {
     const headers = encodeEntry(entry, budget.limits);
     archiveBytes += headers.reduce((size, header) => size + header.length, 0) + Math.ceil(entry.size / 512) * 512;
     if (options.format === "ustar" && headers.length > 1) fail(`metadata requires PAX format: ${display(name)}`);
-    entries.push({ path, stat, entry, ...sourceLink === void 0 ? {} : { sourceLink } });
+    entries.push({ path, canonical, stat, entry, ...sourceLink === void 0 ? {} : { sourceLink } });
     if (stat.type === "directory" && options.recursion) {
       const maxEntries = budget.limits.maxMembers - budget.members;
       const children = await operation(context, () => context.fs.readdir(path, {
@@ -178,6 +177,7 @@ function checkSource(source, current) {
 }
 async function unchanged(context, source) {
   checkSource(source, await operation(context, () => context.fs.lstat(source.path, { signal: context.signal })));
+  if (source.stat.type !== "symlink" && source.canonical !== await operation(context, () => context.fs.realpath(source.path, { signal: context.signal }))) fail(`source changed while archiving: ${display(source.entry.name)}`);
   if (source.stat.type === "symlink") {
     const target = await operation(context, () => context.fs.readlink(source.path, { signal: context.signal }));
     if (target !== source.sourceLink) fail("source symlink changed while archiving");
@@ -195,22 +195,30 @@ async function* createArchive(context, entries, options, budget) {
 `, options.archive === "-");
     if (source.entry.type === "0") {
       let bytes = 0;
-      if (!context.fs.openReadFile || !hasIdentity(source.stat)) fail(`cannot safely read source without retained backing identity: ${display(source.entry.name)}`);
-      const handle = await context.fs.openReadFile(source.path, { signal: context.signal });
-      try {
-        const opened = await operation(context, () => handle.stat({ signal: context.signal }));
-        if (!sameIdentity(source.stat, opened)) fail(`source changed while archiving: ${display(source.entry.name)}`);
-        checkSource(source, opened);
-        while (true) {
-          const chunk = await operation(context, () => handle.read(bytes, budget.limits.chunkSize, { signal: context.signal }));
-          if (!chunk.length) break;
+      const capabilities = await operation(context, () => context.fs.capabilitiesFor?.(source.path, { signal: context.signal }) ?? context.fs.capabilities);
+      if (!context.fs.openReadFile || !hasIdentity(source.stat) || capabilities.retainedRead !== true) {
+        for await (const chunk of readBytes(fileSource(context, source.path, budget.limits), context.signal)) {
           if (chunk.length > source.entry.size - bytes) fail(`source grew while archiving: ${display(source.entry.name)}`);
           bytes += chunk.length;
           yield chunk;
         }
-        checkSource(source, await operation(context, () => handle.stat({ signal: context.signal })));
-      } finally {
-        await handle.close();
+      } else {
+        const handle = await context.fs.openReadFile(source.path, { signal: context.signal });
+        try {
+          const opened = await operation(context, () => handle.stat({ signal: context.signal }));
+          if (!sameIdentity(source.stat, opened)) fail(`source changed while archiving: ${display(source.entry.name)}`);
+          checkSource(source, opened);
+          while (true) {
+            const chunk = await operation(context, () => handle.read(bytes, budget.limits.chunkSize, { signal: context.signal }));
+            if (!chunk.length) break;
+            if (chunk.length > source.entry.size - bytes) fail(`source grew while archiving: ${display(source.entry.name)}`);
+            bytes += chunk.length;
+            yield chunk;
+          }
+          checkSource(source, await operation(context, () => handle.stat({ signal: context.signal })));
+        } finally {
+          await handle.close();
+        }
       }
       if (bytes !== source.entry.size) fail(`source shrank while archiving: ${display(source.entry.name)}`);
       await unchanged(context, source);

package/dist/safe-bash/command-chunks/{chunk-GFC2NTDG.js → chunk-ICANWOXH.js}

@@ -1,7 +1,7 @@
 import {
   FindFormatBudget,
   compileFindFormat
-} from "./chunk-5ZMZ573Q.js";
+} from "./chunk-DSJ3VRL3.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";
@@ -52,7 +52,7 @@ function getCachedFindPattern(pattern, caseInsensitive) {
         else rxSrc += ch;
       }
       rxSrc += "$";
-      const rx = new RegExp(rxSrc, caseInsensitive ? "si" : "s");
+      const rx = new RegExp(rxSrc, caseInsensitive ? "siu" : "su");
       fn = (text) => rx.test(text);
     }
     map.set(pattern, fn);
@@ -164,14 +164,14 @@ function createFindDefinitions(execute, maxDirectoryEntries) {
                       }
                       if (match(k)) {
                         matchCount++;
-                        totalBytes += pLen + k.length + 2;
+                        totalBytes += pLen + escapeText(k, "display").length + 2;
                       }
                     }
                   }
                   if (allFiles) {
                     assertCommandRequirements(context, filesystemCommandRequirements.ls, FIND_DIR_REQUIREMENTS, backing.capabilities);
-                    if (fastBacking !== void 0) context._chargeFastFsOp();
                     if (stdoutPipe.writeLineCountSync(matchCount, totalBytes)) {
+                      if (fastBacking !== void 0) context._chargeFastFsOp();
                       return RESOLVED_EXIT_ZERO;
                     }
                   }
@@ -751,34 +751,10 @@ ${explicitAction ? tree : `AND(${tree}, implicit -print)`}
             const children = await readDirectory(context, path, true);
             for (const child of children) {
               if (quitRequested) return;
-              if (canSkipChildStat && child.type === "file" && childDepth <= 1024) {
-                if (childDepth >= minDepth) {
-                  scratchChildEntry.name = child.name;
-                  scratchChildEntry.depth = childDepth;
-                  scratchChildEntry.root = root;
-                  scratchChildEntry.prune = false;
-                  if (needsDisplay) {
-                    const childDisplay2 = `${parent}/${child.name}`;
-                    scratchChildEntry.display = childDisplay2;
-                    scratchChildEntry.path = pathOf(context, childDisplay2);
-                    scratchChildEntry.relative = relative ? `${relative}/${child.name}` : child.name;
-                  }
-                  const res = evaluate(scratchChildEntry);
-                  const ok = typeof res === "boolean" ? res : await res;
-                  if (ok) {
-                    if (needsDisplay) await appendPrintLine(escapeText(scratchChildEntry.display, "display"));
-                    else {
-                      const pending = appendPrintChild(escapedParent, escapeText(child.name, "display"));
-                      if (pending) await pending;
-                    }
-                  }
-                }
-                continue;
-              }
               next ??= new Set(ancestors).add(physical);
               const childDisplay = `${parent}/${child.name}`;
               const childRel = relative ? `${relative}/${child.name}` : child.name;
-              await visit(childDisplay, childDepth, next, root, childRel, child.name, child.type);
+              await visit(childDisplay, childDepth, next, root, childRel, child.name);
             }
           }
         }

package/dist/safe-bash/command-chunks/{chunk-SQRQW3CT.js → chunk-IJ6LGLXM.js}

@@ -6,7 +6,7 @@ import {
   addAbortSignalWaiter,
   isManagedAbortSignal,
   removeAbortSignalWaiter
-} from "./chunk-Y2WBSJG6.js";
+} from "./chunk-X4QZQI5Q.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";