@poe-platform/safe-bash 0.1.809 → 0.1.810

package/dist/safe-bash-command-ssconvert/index.js

@@ -10,7 +10,7 @@ import {
   gt,
   j,
   oe
-} from "../safe-bash/command-chunks/chunk-YJJBGN7U.js";
+} from "../safe-bash/command-chunks/chunk-CHR2OD2U.js";
 import {
   a,
   g,
@@ -719,7 +719,7 @@ var le;
 function wr(...u) {
   return le ??= V({ read: readZipArchiveEntries, write: createStoredZipArchive }), le(...u);
 }
-var H = de(async (u) => (await import("../safe-bash/command-chunks/engine-RU4OFLPO-CPLFYD67.js")).createEngine(u), true, wr);
+var H = de(async (u) => (await import("../safe-bash/command-chunks/engine-MEPOXIXT-WZMRHACG.js")).createEngine(u), true, wr);
 var Do = H.createSsconvertCommand;
 var To = H.createSsconvertCommands;
 var Uo = H.ssconvertCommands;

package/dist/safe-bash-command-xmllint/index.js

@@ -6,13 +6,125 @@ import { createXqCommand } from "../safe-bash-command-xq/index.js";
 import { readXmlChunks, readXmlInput } from "../safe-bash-xml-engine/io.js";
 import { parseXmlStream, parseXmlSteps, XmlLimitError } from "@poe-platform/safe-fs/core";
 import {
-  FsError,
+  FsError as FsError2,
   getCommandArguments,
   writeBytes
 } from "../safe-bash-contracts/index.js";
 import { StoredXPath } from "../safe-bash-xml-engine/stored-evaluate.js";
 import { StoredXmlDocument } from "../safe-bash-xml-engine/stored-document.js";
-import { writeFileOutput } from "../safe-bash-contracts/filesystem-output.js";
+
+// packages/safe-bash-command-xmllint/src/file-output.ts
+import { FsError } from "@poe-platform/safe-fs/core";
+import { PagedStorage } from "@poe-platform/safe-fs/storage";
+import { openFileOutput, writeFileOutput } from "../safe-bash-contracts/filesystem-output.js";
+var XmlFileOutput = class {
+  constructor(context, path) {
+    this.context = context;
+    this.path = path;
+    context.registerCleanup?.(() => this.close());
+  }
+  context;
+  path;
+  staging;
+  resolution;
+  storage;
+  start = 0;
+  size = 0;
+  closing;
+  initialized;
+  active;
+  async initialize() {
+    const { fs, signal } = this.context;
+    signal.throwIfAborted();
+    const capabilities = await fs.capabilitiesFor?.(this.path, { signal, stagingResolution: true, followFinalSymlink: true }) ?? fs.capabilities;
+    if (capabilities.synchronousFollowedStagingResolution && capabilities.guardedStagingPublication && capabilities.atomicFileStaging && capabilities.atomicStagedFileMutation && capabilities.atomicStagingAncestry && capabilities.retainedStagingWrite && capabilities.retainedStagingCleanup && fs.prepareStagingResolution && fs.createStagedFile && fs.publishStagedFile) {
+      this.resolution = await fs.prepareStagingResolution(this.path, { signal, followFinalSymlink: true });
+      const target = this.resolution;
+      target.validate();
+      this.staging = await fs.createStagedFile(`${target.ancestors.at(-1).path === "/" ? "" : target.ancestors.at(-1).path}/.xmllint-${crypto.randomUUID()}`, "output", {
+        type: "file",
+        data: new Uint8Array()
+      }, { parent: target.parent, mode: target.destination ? target.destination.mode & 4095 : 438, retainCleanup: true, signal });
+      signal.throwIfAborted();
+      if (!this.staging.writer || !this.staging.cleanup) throw new FsError("ENOTSUP", { path: this.path, message: "XML output requires retained staging handles" });
+    } else {
+      this.storage = new PagedStorage(this.context, 4);
+      this.start = this.storage.allocate(0);
+    }
+  }
+  write(bytes) {
+    if (this.closing) return Promise.reject(new FsError("EBADF", { path: this.path }));
+    const task = (async () => {
+      await (this.initialized ??= this.initialize());
+      this.context.signal.throwIfAborted();
+      for (let offset = 0; offset < bytes.length; offset += 16384) {
+        const part = bytes.subarray(offset, offset + 16384);
+        if (this.staging) await writeFileOutput(this.context, part, (data) => this.staging.writer.write(data, { signal: this.context.signal }));
+        else await this.storage.append(part);
+        this.size += part.length;
+      }
+    })();
+    this.active = task;
+    return task;
+  }
+  finish() {
+    if (this.closing) return Promise.reject(new FsError("EBADF", { path: this.path }));
+    const task = (async () => {
+      await (this.initialized ??= this.initialize());
+      const { fs, signal } = this.context;
+      signal.throwIfAborted();
+      if (this.staging) {
+        const target = this.resolution;
+        const stat = await this.staging.writer.finish({ signal });
+        signal.throwIfAborted();
+        target.validate();
+        await fs.publishStagedFile({ ...this.staging, file: { ...this.staging.file, stat } }, target.path, {
+          parent: target.parent,
+          destination: target.destination,
+          ancestors: target.ancestors,
+          preserveIdentity: target.destination !== null,
+          commitGuard: () => {
+            target.validate();
+            return true;
+          },
+          signal
+        });
+      } else {
+        for (let offset = 0; offset < this.size; offset += 16384)
+          await writeFileOutput(this.context, await this.storage.read(this.start + offset, Math.min(16384, this.size - offset)), async () => {
+          });
+        const output = await openFileOutput({ ...this.context, outputBudget: "independent" }, this.path, "w");
+        try {
+          for (let offset = 0; offset < this.size; offset += 16384)
+            await output.sink.write(await this.storage.read(this.start + offset, Math.min(16384, this.size - offset)));
+          await output.finish();
+        } catch (error) {
+          await output.abort(error).catch(() => {
+          });
+          throw error;
+        }
+      }
+    })();
+    this.active = task;
+    return task;
+  }
+  close() {
+    return this.closing ??= (async () => {
+      await this.active?.catch(() => {
+      });
+      await this.initialized?.catch(() => {
+      });
+      if (this.staging?.cleanup) {
+        try {
+          await this.staging.cleanup.remove();
+        } finally {
+          await this.staging.cleanup.close();
+        }
+      } else if (this.staging) await this.context.fs.removeStagedFile?.(this.staging);
+      await this.storage?.close();
+    })();
+  }
+};
 
 // packages/safe-bash-command-xmllint/src/output.ts
 import { XmlQueryError } from "../safe-bash-xml-engine/limits.js";
@@ -226,6 +338,7 @@ async function argumentsFor(context, budget) {
 async function executeDocument(context, limits, runtime, budget, options, file) {
   let outputFailed = false;
   let stored;
+  let fileOutput;
   let completed = false;
   try {
     const recoveryMessages = /* @__PURE__ */ new Set();
@@ -267,32 +380,16 @@ async function executeDocument(context, limits, runtime, budget, options, file)
       await runtime.writeDiagnostic(context.stderr, `xmllint: ${message} (recovered)
 `, context.signal);
     const root = await prepareDocument(parsedRoot, options.noblanks ?? false, options.encoding, budget, options.nocdata ?? false);
-    const documentOutputStart = budget.outputBytes;
-    const fileChunks = [];
-    const sink = options.output === void 0 || options.query !== void 0 ? context.stdout : {
-      async write(bytes) {
-        fileChunks.push(bytes.slice());
-      }
-    };
+    if (options.output !== void 0 && options.query === void 0 && !options.noout)
+      fileOutput = new XmlFileOutput(context, runtime.pathOf(context, options.output));
     let encodingStarted = false;
     async function finish() {
       await flushWrite();
-      if (options.output !== void 0 && options.query === void 0 && !options.noout) {
-        const bytes = new Uint8Array(budget.outputBytes - documentOutputStart);
-        let offset = 0;
-        for (const chunk of fileChunks) {
-          bytes.set(chunk, offset);
-          offset += chunk.length;
-        }
-        const destination = runtime.pathOf(context, options.output);
+      if (fileOutput) {
         try {
-          await runtime.interruptible(() => writeFileOutput(
-            context,
-            bytes,
-            (data) => context.fs.writeFile(destination, data, { signal: context.signal })
-          ), context.signal);
+          await fileOutput.finish();
         } catch (error) {
-          if (error instanceof FsError) throw new XmlQueryError2(error.message, 6);
+          if (error instanceof FsError2) throw new XmlQueryError2(error.message, 6);
           throw error;
         }
       }
@@ -306,8 +403,10 @@ async function executeDocument(context, limits, runtime, budget, options, file)
         outBatchUsed = 0;
         writesCount++;
         try {
-          await writeBytes(sink, slice, context.signal);
+          if (fileOutput) await fileOutput.write(slice);
+          else await writeBytes(context.stdout, slice, context.signal);
         } catch (error) {
+          if (fileOutput && error instanceof FsError2) throw new XmlQueryError2(error.message, 6);
           outputFailed = true;
           throw error;
         }
@@ -335,8 +434,10 @@ async function executeDocument(context, limits, runtime, budget, options, file)
           await flushWrite();
           writesCount++;
           try {
-            await writeBytes(sink, bytes, context.signal);
+            if (fileOutput) await fileOutput.write(bytes);
+            else await writeBytes(context.stdout, bytes, context.signal);
           } catch (error) {
+            if (fileOutput && error instanceof FsError2) throw new XmlQueryError2(error.message, 6);
             outputFailed = true;
             throw error;
           }
@@ -399,15 +500,21 @@ async function executeDocument(context, limits, runtime, budget, options, file)
   } catch (error) {
     return reportError(context, runtime, error, outputFailed);
   } finally {
-    if (stored) await stored.close().catch((error) => {
-      if (completed) throw error;
-    });
+    try {
+      if (fileOutput) await fileOutput.close().catch((error) => {
+        if (completed) throw error;
+      });
+    } finally {
+      if (stored) await stored.close().catch((error) => {
+        if (completed) throw error;
+      });
+    }
   }
 }
 async function reportError(context, runtime, error, outputFailed = false) {
   context.signal.throwIfAborted();
-  if (outputFailed || error instanceof FsError && error.code === "EPIPE") throw error;
-  const status = error instanceof XmlQueryError2 ? error.status : error instanceof XmlLimitError ? 5 : error instanceof SyntaxError || error instanceof FsError ? 1 : void 0;
+  if (outputFailed || error instanceof FsError2 && error.code === "EPIPE") throw error;
+  const status = error instanceof XmlQueryError2 ? error.status : error instanceof XmlLimitError ? 5 : error instanceof SyntaxError || error instanceof FsError2 ? 1 : void 0;
   if (status === void 0) throw error;
   const message = error instanceof Error ? error.message.slice(0, 1e3) : "XML query failed";
   await runtime.writeDiagnostic(

package/dist/safe-bash-compression-engine/bounded-codec.js

@@ -1,7 +1,7 @@
 import {
   boundedCodec
-} from "../safe-bash/command-chunks/chunk-JW3KIZU6.js";
-import "../safe-bash/command-chunks/chunk-EMMSXKEJ.js";
+} from "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
+import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-V7IP2PFT.js";

package/dist/safe-bash-compression-engine/codec-loader.js

@@ -1,7 +1,7 @@
 import {
   createCodec,
   loadRawCodecFactory
-} from "../safe-bash/command-chunks/chunk-EMMSXKEJ.js";
+} from "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-V7IP2PFT.js";

package/dist/safe-bash-compression-engine/files.js

@@ -4,12 +4,12 @@ import {
   unchangedSource,
   verifyOperandDestinations,
   writeFileOperand
-} from "../safe-bash/command-chunks/chunk-WFDG3N5R.js";
+} from "../safe-bash/command-chunks/chunk-ECDEPKKW.js";
 import "../safe-bash/command-chunks/chunk-JMTQ4BB6.js";
-import "../safe-bash/command-chunks/chunk-NVBUC644.js";
-import "../safe-bash/command-chunks/chunk-KELMIFVV.js";
-import "../safe-bash/command-chunks/chunk-JW3KIZU6.js";
-import "../safe-bash/command-chunks/chunk-EMMSXKEJ.js";
+import "../safe-bash/command-chunks/chunk-HKGNBH7Z.js";
+import "../safe-bash/command-chunks/chunk-TI52LKLL.js";
+import "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
+import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";

package/dist/safe-bash-compression-engine/index.js

@@ -1,12 +1,12 @@
 import {
   DecodedBudget,
   transform
-} from "../safe-bash/command-chunks/chunk-NVBUC644.js";
-import "../safe-bash/command-chunks/chunk-KELMIFVV.js";
+} from "../safe-bash/command-chunks/chunk-HKGNBH7Z.js";
+import "../safe-bash/command-chunks/chunk-TI52LKLL.js";
 import {
   boundedCodec
-} from "../safe-bash/command-chunks/chunk-JW3KIZU6.js";
-import "../safe-bash/command-chunks/chunk-EMMSXKEJ.js";
+} from "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
+import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";

package/dist/safe-bash-compression-engine/operand.js

@@ -2,16 +2,16 @@ import {
   sourceBytes,
   unchangedSource,
   writeFileOperand
-} from "../safe-bash/command-chunks/chunk-WFDG3N5R.js";
+} from "../safe-bash/command-chunks/chunk-ECDEPKKW.js";
 import {
   FileOperation
 } from "../safe-bash/command-chunks/chunk-JMTQ4BB6.js";
 import {
   transform
-} from "../safe-bash/command-chunks/chunk-NVBUC644.js";
-import "../safe-bash/command-chunks/chunk-KELMIFVV.js";
-import "../safe-bash/command-chunks/chunk-JW3KIZU6.js";
-import "../safe-bash/command-chunks/chunk-EMMSXKEJ.js";
+} from "../safe-bash/command-chunks/chunk-HKGNBH7Z.js";
+import "../safe-bash/command-chunks/chunk-TI52LKLL.js";
+import "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
+import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";

package/dist/safe-bash-compression-engine/stream.js

@@ -3,10 +3,10 @@ import {
   chunkBytes,
   stagingLimit,
   transform
-} from "../safe-bash/command-chunks/chunk-NVBUC644.js";
-import "../safe-bash/command-chunks/chunk-KELMIFVV.js";
-import "../safe-bash/command-chunks/chunk-JW3KIZU6.js";
-import "../safe-bash/command-chunks/chunk-EMMSXKEJ.js";
+} from "../safe-bash/command-chunks/chunk-HKGNBH7Z.js";
+import "../safe-bash/command-chunks/chunk-TI52LKLL.js";
+import "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
+import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";

package/dist/safe-bash-compression-engine/zstd-decode.js

@@ -1,8 +1,8 @@
 import {
   zstdDecode
-} from "../safe-bash/command-chunks/chunk-KELMIFVV.js";
-import "../safe-bash/command-chunks/chunk-JW3KIZU6.js";
-import "../safe-bash/command-chunks/chunk-EMMSXKEJ.js";
+} from "../safe-bash/command-chunks/chunk-TI52LKLL.js";
+import "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
+import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";

package/dist/safe-bash-media-engine/imagemagick.d.ts

@@ -10,6 +10,8 @@ export interface ImageMagickDiscoveryContext {
     /** Native IsPathDirectory/stat classification at filename expansion sites.
      * Unknown results remain advisory; existence/accessibility cannot infer this. */
     isDirectory?(path: Uint8Array): Promise<boolean | undefined>;
+    /** Streaming advisory read. Chunks may be borrowed until the next pull. */
+    readStream?(path: Uint8Array): AsyncIterable<Uint8Array>;
     /** Optional advisory content read. Native must read again at execution time. */
     read?(path: Uint8Array): Promise<Uint8Array | undefined>;
 }

package/dist/safe-bash-media-engine/index.js

@@ -7440,6 +7440,144 @@ function createFFmpegShims(binding) {
   ]));
 }
 
+// packages/safe-bash-media-engine/src/imagemagick-lex.ts
+var ImageMagickLexer = class {
+  constructor(kind, bounded = false) {
+    this.kind = kind;
+    this.bounded = bounded;
+  }
+  kind;
+  bounded;
+  tokens = [];
+  incomplete = false;
+  limited = false;
+  tokenBytes = 0;
+  done = false;
+  word = "";
+  quote = "";
+  active = false;
+  column = 0;
+  comment = false;
+  escape = false;
+  cr = false;
+  suffix = false;
+  push(bytes) {
+    for (let index = 0; index < bytes.length && !this.done; index++) {
+      const c = String.fromCharCode(bytes[index]);
+      if (this.kind === "list") {
+        this.list(c);
+        continue;
+      }
+      if (this.cr) {
+        this.cr = false;
+        this.script(c === "\n" ? "\r" : "\n");
+      }
+      if (this.done) break;
+      if (c === "\r") this.cr = true;
+      else this.script(c);
+    }
+  }
+  finish() {
+    if (this.cr && !this.done) this.script("\n");
+    if (!this.done) {
+      if (this.kind === "script" && this.quote) this.incomplete = true;
+      else if (this.active) this.emit();
+    }
+    return { tokens: this.tokens, incomplete: this.incomplete, limited: this.limited };
+  }
+  emit() {
+    this.tokens.push(textBytes(this.word));
+    this.word = "";
+    this.active = false;
+    if (this.bounded && this.tokens.length >= 4096) this.done = this.limited = true;
+  }
+  append(c) {
+    if (this.bounded && this.tokenBytes >= 65536) {
+      this.done = this.limited = true;
+      this.word = "";
+      return;
+    }
+    this.tokenBytes++;
+    this.word += c;
+  }
+  list(c) {
+    if (c === "\0") {
+      if (this.active) this.emit();
+      this.done = true;
+      return;
+    }
+    const whitespace = " 	\r\n\f\v".includes(c);
+    if (this.suffix) {
+      if (whitespace) this.suffix = false;
+      return;
+    }
+    if (!this.active) {
+      if (whitespace) return;
+      this.active = true;
+      if (c === '"' || c === "'") {
+        this.quote = c;
+        return;
+      }
+    } else if (this.quote ? c === this.quote : whitespace) {
+      this.emit();
+      this.suffix = Boolean(this.quote);
+      this.quote = "";
+      return;
+    }
+    this.append(c);
+  }
+  script(c) {
+    const code = c.charCodeAt(0);
+    if (code < 7 || code > 13 && code < 32 && code !== 27) {
+      this.incomplete = true;
+      this.done = true;
+      return;
+    }
+    if (this.comment) {
+      if (c === "\n") {
+        this.comment = false;
+        this.column = 0;
+      }
+      return;
+    }
+    if (this.escape) {
+      this.escape = false;
+      if (c === "\n") {
+        this.column = 0;
+        return;
+      }
+      if (!this.quote || c === '"' || c === "\\") {
+        this.column++;
+        this.append(c);
+        this.active = true;
+        return;
+      }
+      this.append("\\");
+    }
+    if (!this.quote && !this.active && (c === "#" || this.column === 0 && (c === ":" || c === "@"))) {
+      this.comment = true;
+      return;
+    }
+    this.column = c === "\n" ? 0 : this.column + 1;
+    if (c === "\\" && this.quote !== "'") {
+      this.escape = true;
+      return;
+    }
+    if (this.quote) {
+      if (c === this.quote) this.quote = "";
+      else this.append(c);
+    } else if (c === '"' || c === "'") {
+      this.quote = c;
+      this.active = true;
+    } else if (" 	\r\n".includes(c)) {
+      if (this.active) this.emit();
+    } else {
+      this.append(c);
+      this.active = true;
+    }
+  }
+};
+
 // packages/safe-bash-media-engine/src/filename-expression.ts
 function parseFilenameExpression(value, dialect, multipleCounters = true) {
   const input = byteText(value), tokens = [];
@@ -7723,59 +7861,10 @@ function imageMagickPropertyReference(value, cwd) {
 
 // packages/safe-bash-media-engine/src/imagemagick.ts
 function imageMagickScriptTokens(bytes) {
-  const input = byteText(bytes);
-  const tokens = [];
-  let word = "", quote = "", active = false, column = 0;
-  for (let i = 0; i < input.length; i++) {
-    const c = input[i] === "\r" && input[i + 1] !== "\n" ? "\n" : input[i];
-    const code = c.charCodeAt(0);
-    if (code < 7 || code > 13 && code < 32 && code !== 27) return { tokens, incomplete: true };
-    if (!quote && !active && (c === "#" || column === 0 && (c === ":" || c === "@"))) {
-      while (i < input.length && input[i] !== "\n" && !(input[i] === "\r" && input[i + 1] !== "\n")) {
-        const code2 = input.charCodeAt(i);
-        if (code2 < 7 || code2 > 13 && code2 < 32 && code2 !== 27) return { tokens, incomplete: true };
-        i++;
-      }
-      column = 0;
-      continue;
-    }
-    column = c === "\n" ? 0 : column + 1;
-    if (c === "\\" && quote !== "'") {
-      const next = input[i + 1] === "\r" && input[i + 2] !== "\n" ? "\n" : input[i + 1];
-      if (next === void 0) break;
-      const code2 = next.charCodeAt(0);
-      if (code2 < 7 || code2 > 13 && code2 < 32 && code2 !== 27) return { tokens, incomplete: true };
-      if (next === "\n") {
-        i++;
-        column = 0;
-        continue;
-      }
-      if (!quote || next === '"' || next === "\\") {
-        i++;
-        column++;
-        word += next;
-        active = true;
-        continue;
-      }
-    }
-    if (quote) {
-      if (c === quote) quote = "";
-      else word += c;
-    } else if (c === "'" || c === '"') {
-      quote = c;
-      active = true;
-    } else if (" 	\r\n".includes(c)) {
-      if (active) tokens.push(textBytes(word));
-      word = "";
-      active = false;
-    } else {
-      word += c;
-      active = true;
-    }
-  }
-  if (quote) return { tokens, incomplete: true };
-  if (active) tokens.push(textBytes(word));
-  return { tokens, incomplete: false };
+  const lexer = new ImageMagickLexer("script");
+  lexer.push(bytes);
+  const { tokens, incomplete } = lexer.finish();
+  return { tokens, incomplete };
 }
 var noFinalOutput = /* @__PURE__ */ new Set(["identify", "mogrify", "conjure", "animate", "display"]);
 var imageOperands = /* @__PURE__ */ new Set(["-read", "--", "-mask", "-read-mask", "-write-mask", "-clip-mask", "-texture", "-tile", "-affinity", "-remap", "-map"]);
@@ -7813,9 +7902,20 @@ async function discoverImageMagick(tool, args, context = {}) {
   let literalFilenames = false;
   let pedantic = false;
   const visited = /* @__PURE__ */ new Set();
-  const read = async (name) => {
+  const read = async (name, kind) => {
+    const lexer = new ImageMagickLexer(kind, Boolean(context.readStream));
     try {
-      return await context.read?.(textBytes(name));
+      if (context.readStream) {
+        for await (const chunk of context.readStream(textBytes(name))) {
+          lexer.push(chunk);
+          if (lexer.done) break;
+        }
+      } else {
+        const bytes = await context.read?.(textBytes(name));
+        if (!bytes) return void 0;
+        lexer.push(bytes);
+      }
+      return lexer.finish();
     } catch {
       return void 0;
     }
@@ -7865,20 +7965,10 @@ async function discoverImageMagick(tool, args, context = {}) {
       const membersStart = resources.length;
       if (visited.has("list:" + list) || visited.size < 32) {
         visited.add("list:" + list);
-        const bytes = await read(list);
-        if (bytes) {
-          const contents = byteText(bytes).split("\0")[0];
-          const members = [];
-          let offset = 0;
-          while (offset < contents.length) {
-            while (" 	\r\n\f\v".includes(contents[offset] ?? "\0")) offset++;
-            if (offset >= contents.length) break;
-            const quote = ['"', "'"].includes(contents[offset]) ? contents[offset++] : void 0;
-            const start2 = offset;
-            while (offset < contents.length && (quote ? contents[offset] !== quote : !" 	\r\n\f\v".includes(contents[offset]))) offset++;
-            members.push(textBytes(contents.slice(start2, offset)));
-            while (offset < contents.length && !" 	\r\n\f\v".includes(contents[offset])) offset++;
-          }
+        const lexed = await read(list, "list");
+        if (lexed) {
+          if (lexed.limited) defer(index, list, "advisory prediction budget; native expands complete input");
+          const members = lexed.tokens;
           const directories = [];
           for (const member of members) {
             let directory;
@@ -7914,9 +8004,9 @@ async function discoverImageMagick(tool, args, context = {}) {
     if (path === "-" || path.toLowerCase().startsWith("fd:")) return;
     if (visited.has("script:" + path) || visited.size >= 32) return;
     visited.add("script:" + path);
-    const bytes = await read(path);
-    if (!bytes) return;
-    const lexed = imageMagickScriptTokens(bytes);
+    const lexed = await read(path, "script");
+    if (!lexed) return;
+    if (lexed.limited) defer(index, path, "advisory prediction budget; native executes complete script");
     if (lexed.incomplete) defer(index, path, "incomplete script token");
     await scan(lexed.tokens, 0, path, true);
   }

package/dist/safe-bash-network-engine/body.d.ts

@@ -4,6 +4,7 @@ import { type NetworkLimits } from "./types.js";
 export interface RequestBody {
     readonly contentType?: string;
     open(signal: AbortSignal): ByteSource;
+    close(): Promise<void>;
 }
 export declare function createBody(context: CommandContext, args: CurlArguments, limits: NetworkLimits): RequestBody | undefined;
 export declare function queryData(body: RequestBody, signal: AbortSignal, limits: NetworkLimits): Promise<string>;

package/dist/safe-bash-network-engine/body.js

@@ -1,7 +1,7 @@
 import {
   createBody,
   queryData
-} from "../safe-bash/command-chunks/chunk-4557HE3J.js";
+} from "../safe-bash/command-chunks/chunk-PMWW7KSB.js";
 import "../safe-bash/command-chunks/chunk-CYIHFBEH.js";
 import "../safe-bash/command-chunks/chunk-ZGXSETAX.js";
 import "../safe-bash/command-chunks/chunk-YBRXG5S6.js";