@poe-platform/safe-bash 0.1.809 → 0.1.811

package/dist/safe-bash-command-ffmpeg/index.js

@@ -20,7 +20,7 @@ import {
   sliceMp4,
   srtAst,
   webvttAst
-} from "../safe-bash/command-chunks/chunk-DCD32BEY.js";
+} from "../safe-bash/command-chunks/chunk-VU3EQF7F.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-command-ffmpeg/src/index.ts

package/dist/safe-bash-command-ffprobe/index.js

@@ -1,7 +1,8 @@
 import {
   createFfprobeCommand
-} from "../safe-bash/command-chunks/chunk-GKYCV6BU.js";
-import "../safe-bash/command-chunks/chunk-DCD32BEY.js";
+} from "../safe-bash/command-chunks/chunk-YSY6R6AS.js";
+import "../safe-bash/command-chunks/chunk-MGBHGZEX.js";
+import "../safe-bash/command-chunks/chunk-VU3EQF7F.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-command-ffprobe/src/index.ts

package/dist/safe-bash-command-ffprobe/media.js

@@ -10,8 +10,9 @@ import {
   loadManifestResources,
   resolvePath,
   rethrowRuntimeError
-} from "../safe-bash/command-chunks/chunk-GKYCV6BU.js";
-import "../safe-bash/command-chunks/chunk-DCD32BEY.js";
+} from "../safe-bash/command-chunks/chunk-YSY6R6AS.js";
+import "../safe-bash/command-chunks/chunk-MGBHGZEX.js";
+import "../safe-bash/command-chunks/chunk-VU3EQF7F.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createFfprobeCommand,

package/dist/safe-bash-command-ffprobe/options.d.ts

@@ -0,0 +1,15 @@
+import type { MediaResourceLimits } from "../mp4-ast/index.js";
+/** Normalize registration limits without evaluating the media engines. */
+export declare function resolveFfprobeLimits(options: MediaResourceLimits | undefined): {
+    maxInputBytes: number | undefined;
+    maxOutputBytes: number | undefined;
+    maxMemoryBytes?: number | undefined;
+    maxFrames?: number | undefined;
+    maxPixelsPerFrame?: number | undefined;
+    maxDurationSeconds?: number | undefined;
+    maxStreams?: number | undefined;
+    maxSamplesPerTrack?: number | undefined;
+    maxConcatInputs?: number | undefined;
+    maxBoxDepth?: number | undefined;
+    maxCpuMs?: number | undefined;
+};

package/dist/safe-bash-command-ffprobe/options.js

@@ -0,0 +1,7 @@
+import {
+  resolveFfprobeLimits
+} from "../safe-bash/command-chunks/chunk-MGBHGZEX.js";
+import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
+export {
+  resolveFfprobeLimits
+};

package/dist/safe-bash-command-html-to-markdown/index.js

@@ -92,7 +92,7 @@ var StoredBuilder = class {
 // packages/safe-bash-command-html-to-markdown/src/stored-destination.ts
 var alpha = (character) => character >= "A" && character <= "Z" || character >= "a" && character <= "z";
 var digit = (character) => character >= "0" && character <= "9";
-async function asciiHost(text, root, budget) {
+async function asciiHost(text, root, budget, validatePunycode = true) {
   const parts = [];
   let count = 0, length = 0, prefix = "", radix = 10, valid = true, decimal = true, value = 0;
   let previous, last;
@@ -120,7 +120,7 @@ async function asciiHost(text, root, budget) {
       continue;
     }
     if (prefix.length < 4) prefix += character.toLowerCase();
-    if (prefix === "xn--") return void 0;
+    if (validatePunycode && prefix === "xn--") return void 0;
     decimal &&= digit(character);
     if (length === 0 && character === "0") radix = 8;
     if (length === 1 && prefix === "0x") radix = 16;
@@ -185,29 +185,83 @@ async function decodeHost(text, root, budget) {
   if (percent || !await flush(true)) return 0;
   return result.finish();
 }
+async function idnaHost(text, root, budget) {
+  const domain = text.builder();
+  let unicode = false;
+  for await (const character of text.characters(root)) {
+    budget.work(character.length);
+    const checkpoint = budget.checkpoint();
+    if (checkpoint) await checkpoint;
+    if (character.codePointAt(0) > 127) {
+      unicode = true;
+      break;
+    }
+  }
+  const suffix = unicode ? "\xE9" : "invalid", mappedSuffix = unicode ? ".xn--9ca" : ".invalid";
+  let label = text.builder(), native = false, prefix = "";
+  const finish = async () => {
+    const value = await label.finish();
+    if (native) {
+      let input = "";
+      for await (const chunk of text.chunks(value)) {
+        budget.work(chunk.length);
+        input += chunk;
+        const checkpoint = budget.checkpoint();
+        if (checkpoint) await checkpoint;
+      }
+      let mapped;
+      try {
+        const hostname2 = new URL(`http://${input}.${suffix}/`).hostname;
+        if (!hostname2.endsWith(mappedSuffix)) return false;
+        mapped = hostname2.slice(0, -mappedSuffix.length);
+      } catch {
+        return false;
+      }
+      await domain.write(mapped);
+    } else await domain.append(value);
+    label = text.builder();
+    native = false;
+    prefix = "";
+    return true;
+  };
+  for await (const character of text.characters(root)) {
+    budget.work(character.length);
+    const checkpoint = budget.checkpoint();
+    if (checkpoint) await checkpoint;
+    const code = character.codePointAt(0);
+    if (code <= 32 || code === 127 || "#%/:<>?@[\\]^|".includes(character)) return 0;
+    if (character === "." || character === "\u3002" || character === "\uFF0E" || character === "\uFF61") {
+      if (!await finish()) return 0;
+      await domain.write(".");
+    } else {
+      if (prefix.length < 4) prefix += character.toLowerCase();
+      native ||= code > 127 || prefix === "xn--";
+      await label.write(character);
+    }
+  }
+  return await finish() ? domain.finish() : 0;
+}
 async function hostname(text, root, budget) {
   if (!root) return false;
   const first = await text.at(root, 0);
-  if (first !== "[") {
-    if (await text.includes(root, "%")) {
-      root = await decodeHost(text, root, budget);
-      if (!root) return false;
-    }
-    const ascii = await asciiHost(text, root, budget);
-    if (ascii !== void 0) return ascii;
-  } else if ((await text.info(root)).length > 47) return false;
-  let host = "";
-  for await (const chunk of text.chunks(root)) {
-    budget.work(chunk.length);
-    host += chunk;
-    const checkpoint = budget.checkpoint();
-    if (checkpoint) await checkpoint;
+  if (first === "[") {
+    if ((await text.info(root)).length > 47) return false;
+    let host = "";
+    for await (const chunk of text.chunks(root)) host += chunk;
+    try {
+      return Boolean(new URL(`http://${host}/`).hostname);
+    } catch {
+      return false;
+    }
   }
-  try {
-    return Boolean(new URL(`http://${host}/`).hostname);
-  } catch {
-    return false;
+  if (await text.includes(root, "%")) {
+    root = await decodeHost(text, root, budget);
+    if (!root) return false;
   }
+  const ascii = await asciiHost(text, root, budget);
+  if (ascii !== void 0) return ascii;
+  const mapped = await idnaHost(text, root, budget);
+  return mapped !== 0 && await asciiHost(text, mapped, budget, false) === true;
 }
 async function authority(text, root, start, budget) {
   let offset = start, first = start, last = start, hostStart = start, began = false;
@@ -789,7 +843,7 @@ var TextStore = class {
   storage;
   cooperate;
   encoder = new TextEncoder();
-  decoder = new TextDecoder();
+  decoder = new TextDecoder("utf-8", { ignoreBOM: true });
   async info(root) {
     if (!root) return empty;
     const bytes = await this.storage.read(root, 48);

package/dist/safe-bash-command-media/index.js

@@ -1,13 +1,13 @@
 import {
   createRemoteMediaCommands
-} from "../safe-bash/command-chunks/chunk-JJQ72P3V.js";
+} from "../safe-bash/command-chunks/chunk-VCML4T5D.js";
 import "../safe-bash/command-chunks/chunk-NLTTN4CJ.js";
 import "../safe-bash/command-chunks/chunk-7WIC7SFR.js";
 import {
   createMediaCommand,
   createMediaCommands,
   mediaCommands
-} from "../safe-bash/command-chunks/chunk-45FI2IPY.js";
+} from "../safe-bash/command-chunks/chunk-WQ6ABTJU.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-command-media/src/index.ts

package/dist/safe-bash-command-media/plugin.js

@@ -2,7 +2,7 @@ import {
   createMediaCommand,
   createMediaCommands,
   mediaCommands
-} from "../safe-bash/command-chunks/chunk-45FI2IPY.js";
+} from "../safe-bash/command-chunks/chunk-WQ6ABTJU.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createMediaCommand,

package/dist/safe-bash-command-media/remote.js

@@ -1,10 +1,10 @@
 import {
   createRemoteMediaCommands,
   mediaFrontendContract
-} from "../safe-bash/command-chunks/chunk-JJQ72P3V.js";
+} from "../safe-bash/command-chunks/chunk-VCML4T5D.js";
 import "../safe-bash/command-chunks/chunk-NLTTN4CJ.js";
 import "../safe-bash/command-chunks/chunk-7WIC7SFR.js";
-import "../safe-bash/command-chunks/chunk-45FI2IPY.js";
+import "../safe-bash/command-chunks/chunk-WQ6ABTJU.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createRemoteMediaCommands,

package/dist/safe-bash-command-pandoc/command.js

@@ -1,22 +1,22 @@
 import {
-  Mh,
   eR,
-  tR
-} from "../safe-bash/command-chunks/chunk-GLVD3JJG.js";
+  iR,
+  jh
+} from "../safe-bash/command-chunks/chunk-KL3OIBKB.js";
 import "../safe-bash/command-chunks/chunk-7QRIAJEQ.js";
 import "../safe-bash/command-chunks/chunk-IOEUZ4EA.js";
 import "../safe-bash/command-chunks/chunk-E6SK3OU2.js";
-import "../safe-bash/command-chunks/chunk-3DTDMEOP.js";
-import "../safe-bash/command-chunks/chunk-LWZVDDJA.js";
+import "../safe-bash/command-chunks/chunk-EAGIJ4VW.js";
+import "../safe-bash/command-chunks/chunk-NUGQQDGE.js";
 import "../safe-bash/command-chunks/chunk-Z2T7E4ID.js";
 import "../safe-bash/command-chunks/chunk-MO4CWGBR.js";
 import "../safe-bash/command-chunks/chunk-5NKZJEUI.js";
 import "../safe-bash/command-chunks/chunk-QIFS4QHZ.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
-  Mh as createPandocCommand,
-  tR as createPandocCommands,
-  eR as pandocCommands
+  jh as createPandocCommand,
+  eR as createPandocCommands,
+  iR as pandocCommands
 };
 /*!
 MIT License

package/dist/safe-bash-command-pandoc/execution.d.ts

@@ -1,4 +1,4 @@
-import type { AdapterContext, ConversionContext, Diagnostic, DiagnosticCode, Limits, Operation } from "./types.js";
+import type { AdapterContext, ConversionContext, Diagnostic, DiagnosticCode, Limits, Operation, ResourceIdentifier } from "./types.js";
 /** Resource budgets are opt-in. No ambient environment settings. */
 export declare const defaultLimits: Limits;
 type Chunks = AsyncIterable<Uint8Array> | Iterable<Uint8Array>;
@@ -42,7 +42,7 @@ export declare class ExecutionContext implements AdapterContext {
     call<T>(callback: () => Promise<T>): Promise<T>;
     consume(chunks: Chunks, accept: (bytes: Uint8Array) => Promise<void>, budgets?: readonly (keyof Limits)[], retain?: boolean): Promise<void>;
     /** Consume a custom resource directly into the caller-owned destination. */
-    consumeResource(id: string, base: string | undefined, accept: (bytes: Uint8Array) => Promise<void>): Promise<number>;
+    consumeResource(id: string | ResourceIdentifier, base: string | undefined, accept: (bytes: Uint8Array) => Promise<void>): Promise<number>;
     acquire(chunks: Chunks, additionalBudget?: keyof Limits): Promise<Uint8Array>;
     decodeUtf8(chunks: Chunks): Promise<string>;
     decodeUtf8To(chunks: Chunks, accept: (text: string) => Promise<void>, budgets?: readonly (keyof Limits)[], retainInput?: boolean): Promise<void>;

package/dist/safe-bash-command-pandoc/index.d.ts

@@ -3,7 +3,7 @@ export { evalSyncPandoc } from "./sync.js";
 export { convert, convertToOutput, convertSync, readDocument, writeDocument, PandocError } from "./engine.js";
 export { createFormatRegistry, coreFormats, formatCapabilities } from "./formats.js";
 export type { FormatCapability, FormatDescriptor, FormatSelection, Direction } from "./formats.js";
-export type { AdapterContext, ConversionContext, ConversionSummary, OutputConversionContext, WorkingStorageOptions, ConversionOptions, FilterRequest, FilterCapability, JsonFilterStreams, MetadataObject, MetadataValue, ConversionResult, Diagnostic, DiagnosticCode, Document, Input, InputSource, StreamingInput, Limits, Node, Operation, OutputCapability, StreamingOutputCapability, ReadOptions, ReaderCapability, Resource, ResourceCapability, StreamingResourceCapability, ResourceFileSystem, SerializedDocument, WriteOptions, PdfOptions, EpubOptions, WriterCapability } from "./types.js";
+export type { AdapterContext, ConversionContext, ConversionSummary, OutputConversionContext, WorkingStorageOptions, ConversionOptions, FilterRequest, FilterCapability, JsonFilterStreams, MetadataObject, MetadataValue, ConversionResult, Diagnostic, DiagnosticCode, Document, Input, InputSource, StreamingInput, Limits, Node, Operation, OutputCapability, StreamingOutputCapability, ReadOptions, ReaderCapability, Resource, ResourceCapability, StreamingResourceCapability, SourceResourceCapability, ResourceIdentifier, ResourceFileSystem, SerializedDocument, WriteOptions, PdfOptions, EpubOptions, WriterCapability } from "./types.js";
 export { createJsonFilterCapability } from "./json-filters.js";
 export type { JsonFilterRuntime, JsonStreamFilterRuntime } from "./json-filters.js";
 export { createLuaFilterCapability } from "./lua-filters.js";

package/dist/safe-bash-command-pandoc/index.js

@@ -1,37 +1,37 @@
 import {
-  $a,
   $h,
   Al,
   El,
-  Gv,
-  Ie,
+  Fh,
+  La,
   Lh,
-  Mh,
-  Nh,
+  Pe,
   Qo,
+  SP,
   TP,
+  Xv,
   Zi,
-  cE,
   dh,
-  dn,
   eR,
-  eh,
-  er,
-  kP,
-  lf,
+  fE,
+  fn,
+  iR,
+  ih,
+  jh,
+  ld,
+  mE,
   nr,
-  pE,
-  tR,
   tl,
+  tr,
   vP
-} from "../safe-bash/command-chunks/chunk-GLVD3JJG.js";
+} from "../safe-bash/command-chunks/chunk-KL3OIBKB.js";
 import "../safe-bash/command-chunks/chunk-7QRIAJEQ.js";
 import "../safe-bash/command-chunks/chunk-IOEUZ4EA.js";
 import "../safe-bash/command-chunks/chunk-E6SK3OU2.js";
 import {
   _r
-} from "../safe-bash/command-chunks/chunk-3DTDMEOP.js";
-import "../safe-bash/command-chunks/chunk-LWZVDDJA.js";
+} from "../safe-bash/command-chunks/chunk-EAGIJ4VW.js";
+import "../safe-bash/command-chunks/chunk-NUGQQDGE.js";
 import {
   yr
 } from "../safe-bash/command-chunks/chunk-Z2T7E4ID.js";
@@ -63,7 +63,7 @@ function K(u = {}) {
             if (typeof m != "object" || m === null || !("code" in m) || m.code !== "ENOTSUP" && m.code !== "EOPNOTSUPP") throw m;
           }
           yield await s.readFile(t2, r, n);
-        } } : {}, readFile: (t2, r, n) => e2.fs.readFile(O(e2.cwd ?? "/", t2), { signal: r, ...n === void 0 || n === 1 / 0 ? {} : { maxBytes: n } }), writeFile: (t2, r, n) => e2.fs.writeFile(O(e2.cwd ?? "/", t2), r, { signal: n }) } : e2, { options: S, operands: P, destination: d, limits: R } = await $h(e2.args, s, e2.signal, i), A = (P ?? [{ chunks: e2.stdin }]).map((t2) => ({ ...t2, ...t2.base === void 0 && e2.cwd !== void 0 ? { base: e2.cwd } : {} })), F = { ...i, limits: R, signal: e2.signal, ...e2.fs === void 0 ? {} : { resourceFiles: e2.fs, resources: { resolve: async (t2, r, n) => e2.fs.readFile(`${r ?? e2.cwd ?? "/"}/${t2}`, { ...n === void 0 ? {} : { signal: n } }) } }, ...e2.cwd === void 0 ? {} : { resourceCwd: e2.cwd } }, p, v = d !== void 0 && s.createOutput ? { async write(t2, r) {
+        } } : {}, readFile: (t2, r, n) => e2.fs.readFile(O(e2.cwd ?? "/", t2), { signal: r, ...n === void 0 || n === 1 / 0 ? {} : { maxBytes: n } }), writeFile: (t2, r, n) => e2.fs.writeFile(O(e2.cwd ?? "/", t2), r, { signal: n }) } : e2, { options: S, operands: R, destination: d, limits: P } = await Fh(e2.args, s, e2.signal, i), A = (R ?? [{ chunks: e2.stdin }]).map((t2) => ({ ...t2, ...t2.base === void 0 && e2.cwd !== void 0 ? { base: e2.cwd } : {} })), F = { ...i, limits: P, signal: e2.signal, ...e2.fs === void 0 ? {} : { resourceFiles: e2.fs, resources: { resolve: async (t2, r, n) => e2.fs.readFile(`${r ?? e2.cwd ?? "/"}/${t2}`, { ...n === void 0 ? {} : { signal: n } }) } }, ...e2.cwd === void 0 ? {} : { resourceCwd: e2.cwd } }, p, v = d !== void 0 && s.createOutput ? { async write(t2, r) {
           p ??= s.createOutput(d, r ?? e2.signal), (r ?? e2.signal).throwIfAborted(), await p.write(t2, r);
         }, async close(t2) {
           p ??= s.createOutput(d, t2 ?? e2.signal), (t2 ?? e2.signal).throwIfAborted(), await p.close(t2);
@@ -77,7 +77,7 @@ function K(u = {}) {
           }
         }, async close() {
         }, async abort() {
-        } }, c = d === void 0 || s.createOutput ? await Nh(A, S, { ...F, output: v }) : await El(A, S, { ...F, output: { publish: async (t2, r) => s.writeFile(d, t2, r) } });
+        } }, c = d === void 0 || s.createOutput ? await Lh(A, S, { ...F, output: v }) : await El(A, S, { ...F, output: { publish: async (t2, r) => s.writeFile(d, t2, r) } });
         for (let t2 of c.diagnostics) await e2.stderr.write(a.encode(`${t2.code}: ${t2.location ? `${t2.location}: ` : ""}${t2.message}
 `)), e2.signal.throwIfAborted();
         if (c.kind === "output") return { exitCode: 0 };
@@ -98,7 +98,7 @@ function Z(u = {}) {
     i.signal.throwIfAborted();
     let e2;
     try {
-      e2 = er(i.args, u);
+      e2 = tr(i.args, u);
     } catch (a) {
       if (!(a instanceof t)) throw a;
       return await i.stderr.write(new TextEncoder().encode(`${a.code}: ${a.message}
@@ -110,36 +110,36 @@ function Z(u = {}) {
 var export_assertNever = Zi.assertNever;
 export {
   e as AstError,
-  dn as ExecutionContext,
+  fn as ExecutionContext,
   t as PandocError,
   export_assertNever as assertNever,
   El as convert,
-  TP as convertSync,
-  Nh as convertToOutput,
+  SP as convertSync,
+  Lh as convertToOutput,
   Qo as coreFormats,
   yr as createCiteprocFilterCapability,
-  pE as createExecutionContext,
+  mE as createExecutionContext,
   Al as createFileOutput,
   Z as createFormatInspectionCommand,
-  Ie as createFormatRegistry,
+  Pe as createFormatRegistry,
   dh as createJsonFilterCapability,
   _r as createLuaFilterCapability,
-  Mh as createPandocCommand,
-  tR as createPandocCommands,
+  jh as createPandocCommand,
+  eR as createPandocCommands,
   K as createStandalonePandocCommand,
-  $a as defaultLimits,
-  Lh as evalSyncPandoc,
-  Gv as formatCapabilities,
+  La as defaultLimits,
+  $h as evalSyncPandoc,
+  Xv as formatCapabilities,
   tl as inspectCommand,
-  er as inspectFormats,
-  cE as normalizeDocument,
-  eh as normalizeDocumentCooperatively,
-  eR as pandocCommands,
+  tr as inspectFormats,
+  fE as normalizeDocument,
+  ih as normalizeDocumentCooperatively,
+  iR as pandocCommands,
   nr as parseConversionArgs,
-  lf as pdfReader,
-  kP as readDocument,
-  $h as resolveConversionArgs,
-  vP as writeDocument
+  ld as pdfReader,
+  vP as readDocument,
+  Fh as resolveConversionArgs,
+  TP as writeDocument
 };
 /*!
 MIT License

package/dist/safe-bash-command-pandoc/lua-filters.js

@@ -1,7 +1,7 @@
 import {
   _r
-} from "../safe-bash/command-chunks/chunk-3DTDMEOP.js";
-import "../safe-bash/command-chunks/chunk-LWZVDDJA.js";
+} from "../safe-bash/command-chunks/chunk-EAGIJ4VW.js";
+import "../safe-bash/command-chunks/chunk-NUGQQDGE.js";
 import "../safe-bash/command-chunks/chunk-5NKZJEUI.js";
 import "../safe-bash/command-chunks/chunk-QIFS4QHZ.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";

package/dist/safe-bash-command-pandoc/types.d.ts

@@ -224,15 +224,30 @@ export interface AdapterContext {
     /** Strictly advancing cursor for pagination and other iterative layouts. */
     progress(id: string, cursor: number): void;
 }
+/** Replayable UTF-16 identifier. Valid until the resolver's byte stream finishes.
+ * Chunks contain at most 4096 code units and may split a surrogate pair. */
+export interface ResourceIdentifier {
+    readonly length: number;
+    chunks(): AsyncIterable<string>;
+}
+/** Custom resolver that accepts a caller-backed identifier without collecting it. */
+export interface SourceResourceCapability {
+    resolveSource(id: ResourceIdentifier, base: string | undefined, signal: AbortSignal | undefined): AsyncIterable<Uint8Array>;
+    resolveStream?: StreamingResourceCapability["resolveStream"];
+    resolve?: ResourceCapability["resolve"];
+}
 /** Custom resource source for retained conversions. Yielded chunks are borrowed
  * until the next pull; conversion awaits storage before advancing the producer. */
 export interface StreamingResourceCapability {
+    resolveSource?: SourceResourceCapability["resolveSource"];
     resolveStream(id: string, base: string | undefined, signal: AbortSignal | undefined): AsyncIterable<Uint8Array>;
     /** Optional convenience resolver for adapters that require complete bytes. */
     resolve?: ResourceCapability["resolve"];
 }
 export interface ResourceCapability {
-    /** Preferred by retained image writers when supplied. */
+    /** Preferred by retained image writers; keeps identifiers in caller storage. */
+    resolveSource?: SourceResourceCapability["resolveSource"];
+    /** Streaming byte fallback when resolveSource is absent. */
     resolveStream?: StreamingResourceCapability["resolveStream"];
     resolve(id: string, base: string | undefined, signal: AbortSignal | undefined): Promise<Uint8Array>;
 }
@@ -281,7 +296,7 @@ export interface ConversionContext {
     readonly resourceCwd?: string;
     readonly reader?: ReaderCapability;
     readonly writer?: WriterCapability;
-    readonly resources?: ResourceCapability | StreamingResourceCapability;
+    readonly resources?: ResourceCapability | StreamingResourceCapability | SourceResourceCapability;
     readonly output?: OutputCapability | StreamingOutputCapability;
     readonly limits?: Partial<Limits>;
     readonly signal?: AbortSignal;

package/dist/safe-bash-command-patch/index.js

@@ -1,7 +1,7 @@
 import {
   patchCommand
-} from "../safe-bash/command-chunks/chunk-6ZFYWT3U.js";
-import "../safe-bash/command-chunks/chunk-S244SWDH.js";
+} from "../safe-bash/command-chunks/chunk-72C3TZ2U.js";
+import "../safe-bash/command-chunks/chunk-WH3TIOTS.js";
 import {
   evalSyncPatch
 } from "../safe-bash/command-chunks/chunk-KSY3QHLY.js";

package/dist/safe-bash-command-patch/patch-publication.d.ts

@@ -1,4 +1,4 @@
-import { type CommandContext, type FileStat } from "../safe-bash-contracts/index.js";
+import { type ByteSource, type CommandContext, type FileStat } from "../safe-bash-contracts/index.js";
 /** Retains admission receipts; trusted host staging requires external tree isolation. */
 export declare class PatchPublication {
     private readonly context;
@@ -10,7 +10,7 @@ export declare class PatchPublication {
     capture(path: string, prune?: readonly string[]): Promise<void>;
     private validate;
     mkdir(path: string): Promise<void>;
-    write(path: string, text: string, destination: FileStat | undefined, mode?: number, mtimeMs?: number): Promise<void>;
+    write(path: string, source: ByteSource | string, destination: FileStat | undefined, mode?: number, mtimeMs?: number): Promise<void>;
     remove(path: string, expected: FileStat): Promise<void>;
     prune(path: string): Promise<void>;
 }

package/dist/safe-bash-command-patch/patch-publication.js

@@ -1,6 +1,6 @@
 import {
   PatchPublication
-} from "../safe-bash/command-chunks/chunk-S244SWDH.js";
+} from "../safe-bash/command-chunks/chunk-WH3TIOTS.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   PatchPublication

package/dist/safe-bash-command-patch/patch.js

@@ -1,7 +1,7 @@
 import {
   patchCommand
-} from "../safe-bash/command-chunks/chunk-6ZFYWT3U.js";
-import "../safe-bash/command-chunks/chunk-S244SWDH.js";
+} from "../safe-bash/command-chunks/chunk-72C3TZ2U.js";
+import "../safe-bash/command-chunks/chunk-WH3TIOTS.js";
 import "../safe-bash/command-chunks/chunk-JKLOBSMP.js";
 import "../safe-bash/command-chunks/chunk-2VLAXKTS.js";
 import "../safe-bash/command-chunks/chunk-MOZD7RUY.js";