@poe-platform/safe-bash 0.1.803 → 0.1.804

package/dist/safe-bash-command-pandoc/index.js

@@ -10,6 +10,7 @@ import {
   createPandocCommand,
   createPandocCommands,
   defaultLimits,
+  evalSyncPandoc,
   formatCapabilities,
   inspectCommand,
   inspectFormats,
@@ -21,12 +22,12 @@ import {
   readDocument,
   resolveConversionArgs,
   writeDocument
-} from "../safe-bash/command-chunks/chunk-TGSNCQSR.js";
+} from "../safe-bash/command-chunks/chunk-JT4RYCA6.js";
 import "../safe-bash/command-chunks/chunk-BAXU7B5Z.js";
-import "../safe-bash/command-chunks/chunk-QRRYN2KO.js";
+import "../safe-bash/command-chunks/chunk-BC7BK6R6.js";
 import "../safe-bash/command-chunks/chunk-5LU4UCBR.js";
 import "../safe-bash/command-chunks/chunk-RDV7UCYZ.js";
-import "../safe-bash/command-chunks/chunk-YG4EPFWC.js";
+import "../safe-bash/command-chunks/chunk-M3NINRDU.js";
 import {
   createLuaFilterCapability
 } from "../safe-bash/command-chunks/chunk-3E2OIS2J.js";
@@ -158,6 +159,7 @@ export {
   createPandocCommands,
   createStandalonePandocCommand,
   defaultLimits,
+  evalSyncPandoc,
   formatCapabilities,
   inspectCommand,
   inspectFormats,

package/dist/safe-bash-command-pandoc/sync.d.ts

@@ -0,0 +1 @@
+export declare function evalSyncPandoc(inBytes: Uint8Array | undefined, opArgs: readonly string[], readFileSync?: (filePath: string) => Uint8Array | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean): string | undefined;

package/dist/safe-bash-command-patch/index.js

@@ -1,16 +1,16 @@
 import {
   patchCommand
-} from "../safe-bash/command-chunks/chunk-XIIBTGC5.js";
-import "../safe-bash/command-chunks/chunk-4B7Y7S6E.js";
+} from "../safe-bash/command-chunks/chunk-XPXEQKRW.js";
 import "../safe-bash/command-chunks/chunk-DT7BCTWY.js";
-import "../safe-bash/command-chunks/chunk-67QKREJK.js";
 import "../safe-bash/command-chunks/chunk-BAGCY35S.js";
 import "../safe-bash/command-chunks/chunk-4ZHMW6F5.js";
-import "../safe-bash/command-chunks/chunk-DOKKNRRM.js";
 import "../safe-bash/command-chunks/chunk-V6BEDRMQ.js";
 import {
   evalSyncPatch
 } from "../safe-bash/command-chunks/chunk-FXELCPFX.js";
+import "../safe-bash/command-chunks/chunk-67QKREJK.js";
+import "../safe-bash/command-chunks/chunk-DOKKNRRM.js";
+import "../safe-bash/command-chunks/chunk-4B7Y7S6E.js";
 import {
   init_buffer
 } from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-command-patch/patch.js

@@ -1,13 +1,13 @@
 import {
   patchCommand
-} from "../safe-bash/command-chunks/chunk-XIIBTGC5.js";
-import "../safe-bash/command-chunks/chunk-4B7Y7S6E.js";
+} from "../safe-bash/command-chunks/chunk-XPXEQKRW.js";
 import "../safe-bash/command-chunks/chunk-DT7BCTWY.js";
-import "../safe-bash/command-chunks/chunk-67QKREJK.js";
 import "../safe-bash/command-chunks/chunk-BAGCY35S.js";
 import "../safe-bash/command-chunks/chunk-4ZHMW6F5.js";
-import "../safe-bash/command-chunks/chunk-DOKKNRRM.js";
 import "../safe-bash/command-chunks/chunk-V6BEDRMQ.js";
+import "../safe-bash/command-chunks/chunk-67QKREJK.js";
+import "../safe-bash/command-chunks/chunk-DOKKNRRM.js";
+import "../safe-bash/command-chunks/chunk-4B7Y7S6E.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   patchCommand

package/dist/safe-bash-command-pdfimages/index.js

@@ -330,7 +330,7 @@ async function executePdfimages(context) {
     }
     context.inputBudget?.check(0);
     const existingSnap = new Map(vfsFiles);
-    const res = await runPdfimagesCli(argv, vfsFiles, { onAllocateBytes: chargeBytes, signal: invocation.signal });
+    const res = await runPdfimagesCli(argv, vfsFiles, { signal: invocation.signal });
     if (res.stderr) {
       await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
     }

package/dist/safe-bash-command-pdfinfo/index.js

@@ -1918,8 +1918,36 @@ async function executePopplerFileTool(context, runner) {
         context.inputBudget?.check(accountedBytes);
       }
     };
-    const positionals = extractPopplerFileToolPositionals(argv);
-    if (positionals.length === 0 || positionals[0] === "-") {
+    let informational = false;
+    for (let i = 0; i < argv.length; i++) {
+      const arg = argv[i];
+      if (arg === "--") break;
+      if (POPPLER_FILE_TOOL_VALUE_FLAGS.has(arg)) {
+        i++;
+        continue;
+      }
+      if (["-h", "-help", "--help", "-?", "-v", "--version"].includes(arg)) {
+        informational = true;
+        break;
+      }
+    }
+    const positionals = informational ? [] : extractPopplerFileToolPositionals(argv);
+    if (!informational && runner === runPdfdetachCli) {
+      for (let i = 0; i < argv.length; i++) {
+        const flag = argv[i];
+        if (flag === "--") break;
+        if (!POPPLER_FILE_TOOL_VALUE_FLAGS.has(flag)) continue;
+        const value = argv[++i];
+        if (flag !== "-o" || !value || value.endsWith("/")) continue;
+        try {
+          const stat = await context.fs.stat(resolvePath(context.cwd, value), { signal: invocation.signal });
+          if (stat.type === "directory") argv[i] = `${value}/`;
+        } catch (error) {
+          if (!(error instanceof Error) || !("code" in error) || error.code !== "ENOENT" && error.code !== "ENOTDIR") throw error;
+        }
+      }
+    }
+    if (!informational && (positionals.length === 0 || positionals[0] === "-")) {
       const chunks = [];
       let total = 0;
       for await (const chunk of readBytes(context.stdin, invocation.signal)) {
@@ -1956,19 +1984,16 @@ async function executePopplerFileTool(context, runner) {
       await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
     }
     if (res.stdoutBytes) {
-      chargeBytes(res.stdoutBytes.byteLength);
       const stdout = invocation.child(context.stdout);
       await writeBytes(stdout.output, res.stdoutBytes, invocation.signal);
     } else if (res.stdout) {
       const outBytes = new TextEncoder().encode(res.stdout);
-      chargeBytes(outBytes.byteLength);
       const stdout = invocation.child(context.stdout);
       await writeBytes(stdout.output, outBytes, invocation.signal);
     }
     for (const [key, val] of vfsFiles.entries()) {
       if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (key !== "-" && existingSnap.get(key) !== val) {
-        chargeBytes(val.byteLength);
         const abs = resolvePath(context.cwd, key);
         try {
           await writeFileOutput(context, val, (data) => context.fs.writeFile(abs, data, { signal: invocation.signal }));

package/dist/safe-bash-command-pdftk/index.js

@@ -1677,7 +1677,7 @@ function* runPdftkCliSteps(argv, files, signal) {
       }
     }
   } else if (operation === "background" || operation === "multibackground" || operation === "stamp" || operation === "multistamp") {
-    const overlayPath = opArgs[0];
+    const overlayPath = opArgs[0] ?? "-";
     const overlayBytes = overlayPath ? files.get(overlayPath) : void 0;
     if (!overlayBytes) {
       return { exitCode: 1, stdout: "", stderr: `Error: Unable to open '${overlayPath ?? ""}'
@@ -1818,24 +1818,6 @@ async function executePdftk(context) {
         context.inputBudget?.check(accountedBytes);
       }
     };
-    if (argv.some((t, i) => (t === "-" || t.endsWith("=-")) && argv[i - 1]?.toLowerCase() !== "output")) {
-      const chunks = [];
-      let total = 0;
-      for await (const chunk of readBytes(context.stdin, invocation.signal)) {
-        if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
-        chunks.push(chunk);
-        total += chunk.byteLength;
-        chargeBytes(chunk.byteLength);
-      }
-      const buf = new Uint8Array(total);
-      let off = 0;
-      for (const c of chunks) {
-        if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
-        buf.set(c, off);
-        off += c.byteLength;
-      }
-      vfsFiles.set("-", buf);
-    }
     const inputPaths = [];
     let operandIndex = 0;
     while (operandIndex < argv.length && !PDFTK_OPERATIONS.has(argv[operandIndex].toLowerCase())) {
@@ -1849,7 +1831,8 @@ async function executePdftk(context) {
     }
     const operation = argv[operandIndex++]?.toLowerCase();
     if (["update_info", "update_info_utf8", "fill_form", "background", "multibackground", "stamp", "multistamp"].includes(operation ?? "")) {
-      if (argv[operandIndex]) inputPaths.push(argv[operandIndex]);
+      const operand = argv[operandIndex];
+      inputPaths.push(operand && !PDFTK_OPERATIONS.has(operand.toLowerCase()) ? operand : "-");
     } else if (operation === "attach_files") {
       while (operandIndex < argv.length && !PDFTK_OPERATIONS.has(argv[operandIndex].toLowerCase())) {
         const token = argv[operandIndex++];
@@ -1857,6 +1840,24 @@ async function executePdftk(context) {
         else inputPaths.push(token);
       }
     }
+    if (inputPaths.includes("-")) {
+      const chunks = [];
+      let total = 0;
+      for await (const chunk of readBytes(context.stdin, invocation.signal)) {
+        if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
+        chunks.push(chunk);
+        total += chunk.byteLength;
+        chargeBytes(chunk.byteLength);
+      }
+      const buf = new Uint8Array(total);
+      let off = 0;
+      for (const c of chunks) {
+        if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
+        buf.set(c, off);
+        off += c.byteLength;
+      }
+      vfsFiles.set("-", buf);
+    }
     for (const filePath of new Set(inputPaths)) {
       if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (filePath === "-") continue;
@@ -1874,19 +1875,16 @@ async function executePdftk(context) {
       await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
     }
     if (res.stdoutBytes) {
-      chargeBytes(res.stdoutBytes.byteLength);
       const stdout = invocation.child(context.stdout);
       await writeBytes(stdout.output, res.stdoutBytes, invocation.signal);
     } else if (res.stdout) {
       const outBytes = new TextEncoder().encode(res.stdout);
-      chargeBytes(outBytes.byteLength);
       const stdout = invocation.child(context.stdout);
       await writeBytes(stdout.output, outBytes, invocation.signal);
     }
     for (const [key, val] of vfsFiles.entries()) {
       if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (key !== "-" && existingSnap.get(key) !== val) {
-        chargeBytes(val.byteLength);
         const abs = resolvePath(context.cwd, key);
         try {
           await writeFileOutput(context, val, (data) => context.fs.writeFile(abs, data, { signal: invocation.signal }));

package/dist/safe-bash-command-pdftoppm/index.js

@@ -488,7 +488,7 @@ async function executePdftoppm(context) {
     }
     context.inputBudget?.check(0);
     const existingSnap = new Map(vfsFiles);
-    const res = await runPdftoppmCli(argv, vfsFiles, { onAllocateBytes: chargeBytes, signal: invocation.signal });
+    const res = await runPdftoppmCli(argv, vfsFiles, { signal: invocation.signal });
     if (res.stderr) {
       await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
     }
@@ -884,8 +884,21 @@ function createPdftocairoCommand(options = {}) {
               context2.inputBudget?.check(accountedBytes);
             }
           };
-          const positionals = extractPdftocairoPositionals(argv);
-          if (positionals.length === 0 || positionals[0] === "-") {
+          let informational = false;
+          for (let i = 0; i < argv.length; i++) {
+            const arg = argv[i];
+            if (arg === "--") break;
+            if (CAIRO_VALUE_FLAGS.has(arg)) {
+              i++;
+              continue;
+            }
+            if (["-h", "-help", "--help", "-?", "-v", "--version"].includes(arg)) {
+              informational = true;
+              break;
+            }
+          }
+          const positionals = informational ? [] : extractPdftocairoPositionals(argv);
+          if (!informational && (positionals.length === 0 || positionals[0] === "-")) {
             const chunks = [];
             let total = 0;
             for await (const chunk of readBytes(context2.stdin, invocation.signal)) {
@@ -917,7 +930,7 @@ function createPdftocairoCommand(options = {}) {
           }
           context2.inputBudget?.check(0);
           const existingSnap = new Map(vfsFiles);
-          const res = await runPdftocairoCli(argv, vfsFiles, { onAllocateBytes: chargeBytes, signal: invocation.signal });
+          const res = await runPdftocairoCli(argv, vfsFiles, { signal: invocation.signal });
           if (res.stderr) {
             await writeBytes(context2.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
           }

package/dist/safe-bash-command-pdftotext/index.js

@@ -848,7 +848,6 @@ async function pdftotext(context) {
       return { exitCode: res.exitCode };
     }
     const outBytes = parsed.encoding === "Latin1" ? Uint8Array.from(res.output, (char) => char.charCodeAt(0)) : parsed.encoding === "UCS-2" ? encodeUcs2(res.output) : new TextEncoder().encode(res.output);
-    chargeBytes(outBytes.byteLength);
     if (res.outputPath === "-") {
       const stdout = invocation.child(context.stdout);
       await writeBytes(stdout.output, outBytes, invocation.signal);
@@ -975,6 +974,12 @@ function* runPdftohtmlCliSteps(argv, files, signal) {
   if (!inputPath) {
     return { exitCode: 99, stdout: "", stderr: "Usage: pdftohtml [options] <PDF-file> [<html-file>]\n" };
   }
+  const explicitOut = positionals[1];
+  const stdoutOutput = toStdout || explicitOut === "-" || inputPath === "-" && !explicitOut;
+  const defaultExt = xmlMode ? ".xml" : ".html";
+  const inputStem = inputPath.toLowerCase().endsWith(".pdf") ? inputPath.slice(0, -4) : inputPath;
+  const outPath = explicitOut ? explicitOut.endsWith(".html") || explicitOut.endsWith(".xml") ? explicitOut : `${explicitOut}${defaultExt}` : inputStem + defaultExt;
+  const imageDirectory = outPath.slice(0, outPath.lastIndexOf("/") + 1);
   const pdfBytes = files.get(inputPath);
   if (!pdfBytes) {
     return { exitCode: 1, stdout: "", stderr: `I/O Error: Couldn't open file '${inputPath}'
@@ -1074,8 +1079,8 @@ function* runPdftohtmlCliSteps(argv, files, signal) {
         const img = pageImages[imgIdx];
         const imgBytes = imageFmt === "jpg" ? yield* encodeJpegSteps(img.bitmap) : yield* encodePngSteps(img.bitmap);
         const imgFile = `page${p}_${imgIdx + 1}.${imageFmt}`;
-        if (!dataUrls) {
-          files.set(imgFile, imgBytes);
+        if (!dataUrls && !stdoutOutput) {
+          files.set(imageDirectory + imgFile, imgBytes);
         }
         const mime = imageFmt === "jpg" ? "image/jpeg" : "image/png";
         const src = dataUrls ? `data:${mime};base64,${bytesToBase64(imgBytes)}` : imgFile;
@@ -1158,8 +1163,8 @@ function* runPdftohtmlCliSteps(argv, files, signal) {
         const img = pageImages[imgIdx];
         const imgBytes = imageFmt === "jpg" ? yield* encodeJpegSteps(img.bitmap) : yield* encodePngSteps(img.bitmap);
         const imgFile = `page${p}_${imgIdx + 1}.${imageFmt}`;
-        if (!dataUrls) {
-          files.set(imgFile, imgBytes);
+        if (!dataUrls && !stdoutOutput) {
+          files.set(imageDirectory + imgFile, imgBytes);
         }
         const mime = imageFmt === "jpg" ? "image/jpeg" : "image/png";
         const src = dataUrls ? `data:${mime};base64,${bytesToBase64(imgBytes)}` : imgFile;
@@ -1216,13 +1221,7 @@ function* runPdftohtmlCliSteps(argv, files, signal) {
     outputText = lines.join("\n") + "\n";
   }
   outputText = applyPopplerOutputEncoding(outputText, encoding);
-  const explicitOut = positionals[1];
-  if (toStdout || explicitOut === "-" || inputPath === "-" && !explicitOut) {
-    return { exitCode: 0, stdout: outputText, stderr: "" };
-  }
-  const defaultExt = xmlMode ? ".xml" : ".html";
-  const inputStem = inputPath.toLowerCase().endsWith(".pdf") ? inputPath.slice(0, -4) : inputPath;
-  const outPath = explicitOut ? explicitOut.endsWith(".html") || explicitOut.endsWith(".xml") ? explicitOut : `${explicitOut}${defaultExt}` : inputStem + defaultExt;
+  if (stdoutOutput) return { exitCode: 0, stdout: outputText, stderr: "" };
   files.set(outPath, new TextEncoder().encode(outputText));
   return { exitCode: 0, stdout: "", stderr: "" };
 }
@@ -1304,14 +1303,12 @@ async function pdftohtml(context) {
     }
     if (res.stdout) {
       const outBytes = new TextEncoder().encode(res.stdout);
-      chargeBytes(outBytes.byteLength);
       const stdout = invocation.child(context.stdout);
       await writeBytes(stdout.output, outBytes, invocation.signal);
     }
     for (const [key, val] of vfsFiles.entries()) {
       if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (existingSnap.get(key) !== val) {
-        chargeBytes(val.byteLength);
         const abs = resolvePath(context.cwd, key);
         try {
           await writeFileOutput(context, val, (data) => context.fs.writeFile(abs, data, { signal: invocation.signal }));

package/dist/safe-bash-command-qpdf/index.d.ts

@@ -12,6 +12,7 @@ export interface QpdfCommandOptions {
 export interface QpdfCliResult {
     readonly exitCode: number;
     readonly stdout: string;
+    readonly stdoutBytes?: Uint8Array | undefined;
     readonly stderr: string;
 }
 export declare function parseQpdfPageRange(rangeSpec: string, totalPages: number): number[];

package/dist/safe-bash-command-qpdf/index.js

@@ -4,7 +4,7 @@ import {
 
 // packages/safe-bash-command-qpdf/src/index.ts
 init_buffer();
-import { resolvePath } from "../safe-bash-contracts/path.js";
+import { dirname, resolvePath } from "../safe-bash-contracts/path.js";
 import { yieldTurn } from "../safe-bash-contracts/yield.js";
 import { writeFileOutput } from "../safe-bash-contracts/filesystem-output-budget.js";
 import {
@@ -1247,7 +1247,7 @@ extract for accessibility: ${enc.permissions.copy ? "allowed" : "not allowed"}
     const node = baseDoc.cos.getObject(showObject.objNum);
     if (node?.kind === "stream" && (filteredStreamData || rawStreamData)) {
       const bytes = filteredStreamData ? baseDoc.cos.decodeStream(node) : node.rawBytes;
-      return { exitCode: 0, stdout: bytesToLatin1(bytes), stderr: "" };
+      return { exitCode: 0, stdout: bytesToLatin1(bytes), stdoutBytes: bytes, stderr: "" };
     }
     return { exitCode: 0, stdout: formatCosNodeForDisplay(node) + "\n", stderr: "" };
   }
@@ -1259,7 +1259,7 @@ extract for accessibility: ${enc.permissions.copy ? "allowed" : "not allowed"}
         return { exitCode: 2, stdout: "", stderr: `qpdf: attachment ${showAttachmentKey} not found
 ` };
       }
-      return { exitCode: 0, stdout: bytesToLatin1(found.data), stderr: "" };
+      return { exitCode: 0, stdout: bytesToLatin1(found.data), stdoutBytes: found.data, stderr: "" };
     }
     const outLines = entries.map((e) => `${e.key} -> ${e.filename}`);
     return { exitCode: 0, stdout: outLines.length > 0 ? outLines.join("\n") + "\n" : "", stderr: "" };
@@ -2464,8 +2464,8 @@ async function qpdf(context, options = {}) {
     if (res.stderr) {
       await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
     }
-    if (res.stdout) {
-      const outBytes = new TextEncoder().encode(res.stdout);
+    if (res.stdoutBytes || res.stdout) {
+      const outBytes = res.stdoutBytes ?? new TextEncoder().encode(res.stdout);
       chargeOutput(outBytes.byteLength);
       const stdout = invocation.child(context.stdout);
       await writeBytes(stdout.output, outBytes, invocation.signal);
@@ -2479,7 +2479,10 @@ async function qpdf(context, options = {}) {
         } else {
           const abs = resolvePath(context.cwd, fileKey);
           try {
-            await writeFileOutput(context, fileBytes, (data) => context.fs.writeFile(abs, data, { signal: invocation.signal }));
+            await writeFileOutput(context, fileBytes, async (data) => {
+              await context.fs.mkdir(dirname(abs), { recursive: true });
+              await context.fs.writeFile(abs, data, { signal: invocation.signal });
+            });
           } catch (error) {
             invocation.signal.throwIfAborted();
             if (!(error instanceof Error) || !("code" in error)) throw error;

package/dist/safe-bash-command-rg/index.js

@@ -1,6 +1,6 @@
 import {
   createRgCommand
-} from "../safe-bash/command-chunks/chunk-NKIELG7Y.js";
+} from "../safe-bash/command-chunks/chunk-BAKFZ477.js";
 import {
   init_buffer
 } from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-command-rg/rg-command.js

@@ -1,7 +1,7 @@
 import {
   clearRgFastRunnerPool,
   createRgCommand
-} from "../safe-bash/command-chunks/chunk-NKIELG7Y.js";
+} from "../safe-bash/command-chunks/chunk-BAKFZ477.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   clearRgFastRunnerPool,

package/dist/safe-bash-command-sed/index.js

@@ -1,6 +1,6 @@
 import {
   sedCommand
-} from "../safe-bash/command-chunks/chunk-NASVPT6F.js";
+} from "../safe-bash/command-chunks/chunk-R7C4MGZ5.js";
 import "../safe-bash/command-chunks/chunk-CQ5YGOGB.js";
 import {
   init_buffer

package/dist/safe-bash-command-sed/sed.js

@@ -1,6 +1,6 @@
 import {
   sedCommand
-} from "../safe-bash/command-chunks/chunk-NASVPT6F.js";
+} from "../safe-bash/command-chunks/chunk-R7C4MGZ5.js";
 import "../safe-bash/command-chunks/chunk-CQ5YGOGB.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {

package/dist/safe-bash-command-shuf/input.d.ts

@@ -1,4 +1,4 @@
-import { type ByteSource, type CommandContext, type FileStat } from "../safe-bash-contracts/index.js";
+import { type InputByteBudget, type ByteSource, type CommandContext, type FileStat } from "../safe-bash-contracts/index.js";
 export declare function virtualPath(cwd: string, name: string): string;
 /** Own only acquisition and reads; a capability or pathname query owns no reader. */
 export declare class FileInput {
@@ -18,6 +18,6 @@ export declare class FileInput {
     close(): Promise<void>;
     [Symbol.asyncIterator](): AsyncIterator<Uint8Array>;
 }
-export declare function ownedBytes(source: ByteSource, signal: AbortSignal): AsyncGenerator<Uint8Array> & AsyncDisposable;
+export declare function ownedBytes(source: ByteSource, signal: AbortSignal, budget?: InputByteBudget): AsyncGenerator<Uint8Array> & AsyncDisposable;
 export declare function records(source: ByteSource, delimiter: number, limit: number, signal: AbortSignal): AsyncGenerator<Uint8Array>;
 export declare function readAllRecords(source: ByteSource, delimiter: number, maxBytes: number, maxRecords: number, signal: AbortSignal, lines: Uint8Array[]): Promise<number>;

package/dist/safe-bash-command-shuf/input.js

@@ -107,7 +107,7 @@ export class FileInput {
         return { next: () => this.next(), return: async () => { await this.close(); return { done: true, value: undefined }; } };
     }
 }
-export function ownedBytes(source, signal) {
+export function ownedBytes(source, signal, budget) {
     const iterator = source[Symbol.asyncIterator]();
     const controller = new AbortController();
     const readingSignal = AbortSignal.any([signal, controller.signal]);
@@ -146,6 +146,7 @@ export function ownedBytes(source, signal) {
         let chunks = 0;
         try {
             for await (const chunk of readBytes(tracked, readingSignal)) {
+                budget?.charge(chunk.byteLength);
                 yield chunk;
                 if (++chunks % 1024 === 0)
                     await yieldTurn(readingSignal);

package/dist/safe-bash-command-shuf/shuf.js

@@ -1,4 +1,4 @@
-import { builtInDirectContextExecutors, commandRuntimeIdentity, createBufferedOutput, getCommandArguments, isFsError, writeBytes, } from "../safe-bash-contracts/index.js";
+import { builtInDirectContextExecutors, commandRuntimeIdentity, createBufferedOutput, getCommandArguments, InputByteBudget, isFsError, writeBytes, } from "../safe-bash-contracts/index.js";
 import { openFileOutput } from "./filesystem-output.js";
 import { inheritYieldCheckpoint, yieldTurn } from "../safe-bash-contracts/yield.js";
 import { countMax, Diagnostic, fileQuote, parse, quote, unicodeLocale } from "./args.js";
@@ -25,6 +25,7 @@ export function createShufCommand(options = {}) {
         runtimeIdentity: commandRuntimeIdentity,
         description: "Write a random permutation of input records",
         async execute(context) {
+            const budget = new InputByteBudget(Infinity, context.inputBudget);
             let random;
             let output;
             let source;
@@ -96,7 +97,7 @@ export function createShufCommand(options = {}) {
                                 inputSize = stat.size;
                             input = fileInput;
                         }
-                        inputSource = ownedBytes(input, inputSignal);
+                        inputSource = ownedBytes(input, inputSignal, budget);
                         inputSignal.throwIfAborted();
                         if (closed)
                             throw new Error("shuf input is closed");
@@ -226,6 +227,7 @@ export function createShufCommand(options = {}) {
                 if (output)
                     await output.abort(error);
                 context.signal.throwIfAborted();
+                budget.assertOpen();
                 inputSignal.throwIfAborted();
                 if (isFsError(error) && error.code === "EPIPE" && diagnostic === "write error")
                     return { exitCode: 141 };

package/dist/safe-bash-command-sips/index.js

@@ -1,4 +1,4 @@
-import "../safe-bash/command-chunks/chunk-AJR3AQYA.js";
+import "../safe-bash/command-chunks/chunk-UKX3LZHR.js";
 import {
   computeImageStatsSteps,
   decodeImage,
@@ -11,7 +11,7 @@ import {
   readImageMetadata,
   resizeImageSteps,
   rotateImageSteps
-} from "../safe-bash/command-chunks/chunk-YG4EPFWC.js";
+} from "../safe-bash/command-chunks/chunk-M3NINRDU.js";
 import {
   init_buffer
 } from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";