@poe-platform/safe-bash 0.1.818 → 0.1.819

package/dist/safe-bash-command-mcp/index.js

@@ -16799,10 +16799,7 @@ async function callCommandTool(server, params, options) {
   if (options.onToolStart === void 0 && options.onToolProgress === void 0)
     return withRemoteMcpClient(server, options, (client) => client.callTool(params, { signal: options.signal }));
   const controller = new AbortController();
-  const signals = [options.signal, controller.signal];
-  if (options.requestTimeoutMs !== void 0 && options.requestTimeoutMs !== Infinity)
-    signals.push(AbortSignal.timeout(options.requestTimeoutMs));
-  const signal = AbortSignal.any(signals);
+  const signal = AbortSignal.any([options.signal, controller.signal]);
   const invocation = Object.freeze({
     invocationId: Array.from(crypto.getRandomValues(new Uint32Array(4)), (word) => word.toString(16).padStart(8, "0")).join(""),
     serverName: server.name,
@@ -16812,11 +16809,14 @@ async function callCommandTool(server, params, options) {
   let events = 0;
   const observe = async (callback) => {
     signal.throwIfAborted();
+    const deadline = options.requestTimeoutMs === void 0 || options.requestTimeoutMs === Infinity ? void 0 : setTimeout(() => controller.abort(new DOMException("MCP tool lifecycle callback timed out", "TimeoutError")), options.requestTimeoutMs);
     try {
       await interruptible(Promise.resolve(callback()), signal);
     } catch {
       if (!signal.aborted) controller.abort(new Error("MCP tool lifecycle callback failed"));
       signal.throwIfAborted();
+    } finally {
+      clearTimeout(deadline);
     }
     signal.throwIfAborted();
   };
@@ -18504,6 +18504,9 @@ async function compareEntries(filesystem, path6, peer, peerPath, options = {}) {
   return compareResolvedEntries(own, other, options);
 }
 
+// ../safe-fs/dist/fs/devices/plain-path.js
+var plainDevicePathResolvers = /* @__PURE__ */ new WeakMap();
+
 // ../safe-fs/dist/fs/path-namespace.js
 var pathNamespace = /* @__PURE__ */ Symbol.for("@poe-code/safe-fs/path-namespace/v1");
 var captureNamespace = /* @__PURE__ */ Symbol.for("@poe-code/safe-fs/capture-path-namespace/v1");
@@ -18709,6 +18712,11 @@ async function resolveDevicePath(filesystem, path6, options, followFinal = true,
     const fast = tryResolveMemoryDevicePath(filesystem, path6, resizeCreate);
     if (fast !== void 0)
       return fast;
+    if (followFinal && resizeCreate === void 0 && traversal === void 0 && isCleanAbsolutePath(path6) && path6 !== "/" && path6 !== "/dev" && !path6.startsWith("/dev/")) {
+      const resolved2 = await plainDevicePathResolvers.get(filesystem)?.(path6, options);
+      if (resolved2 !== void 0)
+        return resolved2;
+    }
   }
   const namespace = capturePathNamespace(filesystem, options);
   if (resizeCreate !== void 0)
@@ -19270,7 +19278,7 @@ function ownedMutationCapabilities(filesystem, capabilities = filesystem.capabil
     (unavailable ??= {}).synchronousStagingResolution = false;
   if (capabilities.synchronousFollowedStagingResolution === true && (capabilities.synchronousStagingResolution !== true || unavailable?.synchronousStagingResolution === false))
     (unavailable ??= {}).synchronousFollowedStagingResolution = false;
-  if (capabilities.guardedStagingPublication === true && (capabilities.atomicFileStaging !== true || unavailable?.atomicFileStaging === false))
+  if (capabilities.guardedStagingPublication === true && ((capabilities.atomicFileStaging !== true || unavailable?.atomicFileStaging === false) && capabilities.trustedOwnedStaging !== true))
     (unavailable ??= {}).guardedStagingPublication = false;
   if (capabilities.atomicDirectoryMetadata === true && (capabilities.readOnly === true || typeof filesystem.prepareDirectory !== "function"))
     (unavailable ??= {}).atomicDirectoryMetadata = false;
@@ -19284,8 +19292,11 @@ function ownedMutationCapabilities(filesystem, capabilities = filesystem.capabil
         }
       }
     }
-    if (missing)
+    if (missing) {
       (unavailable ??= {}).trustedOwnedStaging = false;
+      unavailable.trustedStagingAncestry = false;
+      unavailable.guardedStagingPublication = false;
+    }
   }
   return unavailable ? { ...capabilities, ...unavailable } : capabilities;
 }
@@ -19295,7 +19306,7 @@ async function requireOwnedMutation(filesystem, path6, capability, options, crea
     const query = create ? { ...options, create: true } : options;
     const capabilities = ownedMutationCapabilities(filesystem, await filesystem.capabilitiesFor?.(path6, capability === "atomicStagingAncestry" ? { ...query, stagingAncestry: true } : query) ?? filesystem.capabilities);
     options.signal?.throwIfAborted();
-    if (capabilities[capability] !== true && !(capabilities.trustedOwnedStaging === true && ["atomicFileStaging", "atomicFileMutation", "atomicDirectoryMetadata"].includes(capability)))
+    if (capabilities[capability] !== true && !(capability === "atomicStagingAncestry" && capabilities.trustedStagingAncestry === true && capabilities.trustedOwnedStaging === true) && !(capabilities.trustedOwnedStaging === true && ["atomicFileStaging", "atomicFileMutation", "atomicDirectoryMetadata"].includes(capability)))
       throw new FsError("ENOTSUP", { path: path6, syscall: capability });
   } catch (error) {
     options.signal?.throwIfAborted();
@@ -20291,6 +20302,13 @@ var DeviceFileSystem = class {
       throw new FsError("ENOTSUP", { path: path6 });
     await this.#filesystem.symlink(target, path6, options);
   }
+  async confineTrustedExtraction(roots, options = {}) {
+    options.signal?.throwIfAborted();
+    const operation = this.#filesystem.confineTrustedExtraction ?? this.#filesystem.confineExtraction;
+    if (!operation)
+      throw new FsError("ENOTSUP", { syscall: "confineTrustedExtraction" });
+    return operation.call(this.#filesystem, roots, options);
+  }
   async confineExtraction(roots, options = {}) {
     options.signal?.throwIfAborted();
     if (!this.#filesystem.confineExtraction)
@@ -21412,6 +21430,7 @@ var MemoryFileSystem = class _MemoryFileSystem {
   }
   async confineExtraction(roots, options = {}) {
     options.signal?.throwIfAborted();
+    const commitGuard = options.commitGuard;
     const retained = /* @__PURE__ */ new Map();
     for (const root of roots) {
       this.validatePath(root, "confineExtraction");
@@ -21431,6 +21450,8 @@ var MemoryFileSystem = class _MemoryFileSystem {
     const allowed = /* @__PURE__ */ new Set(["mkdir", "rm", "rmdir", "rename", "symlink", "link", "chmod", "utimes", "writeFile", "appendFile", "writeStream", "writeFileConditional", "removeFileConditional", "removeEntryConditional", "prepareDirectory", "createStagedFile", "publishStagedFile", "removeStagedFile"]);
     const reads = /* @__PURE__ */ new Set(["access", "capabilitiesFor", "compareEntry", "lstat", "stat", "readFile", "readStream", "readdir", "readlink", "realpath"]);
     const check = (path6, followFinal) => {
+      if (commitGuard)
+        runStagingGuard(commitGuard);
       if (!roots.some((root) => root === "/" || path6 === root || path6.startsWith(`${root}/`)))
         this.fail("EPERM", "confineExtraction", path6);
       const components2 = path6.split("/").filter(Boolean);

package/dist/safe-bash-command-mdq/index.js

@@ -314,7 +314,11 @@ async function parseDocument(source, budget) {
     const b = stack.pop();
     if (b.kind === "footnote") {
       noteLabels.add(normalizeLabel(b.label, budget));
-      if (!pendingNotes.has(b.label)) pendingNotes.set(b.label, b.blocks);
+      if (pendingNotes.has(b.label)) throw new MdqError(`Markdown parse error:
+found multiple definitions for link/image/footnote: ${b.label}
+
+`);
+      pendingNotes.set(b.label, b.blocks);
     }
     if ("blocks" in b) stack.push(...[...b.blocks].reverse());
     if (b.kind === "list") for (const item of [...b.items].reverse()) stack.push(...[...item.blocks].reverse());
@@ -613,7 +617,10 @@ function parseQuery(query, budget) {
       s.matcher = string("|");
     }
     skip();
-    if (at < query.length && query[at] !== "|") invalid();
+    if (at < query.length && query[at] !== "|") {
+      if (s.kind === "code") queryError(query, at, "expected end of input");
+      invalid();
+    }
     result.push(s);
   }
   return result;
@@ -894,7 +901,7 @@ async function select(doc, selectors, budget) {
         continue;
       }
       const children = [...n.children];
-      for (const i of n.inline) {
+      for (const i of n.kind === "section" ? [] : n.inline) {
         if (n.kind !== "inline") children.push(node("inline", { inline: [i] }));
         else {
           children.push(...i.children.map((c) => node("inline", { inline: [c] })));

package/dist/safe-bash-command-node/commands/node/quickjs.js

@@ -1,2 +1,2 @@
 // packages/safe-bash-command-node/src/commands/node/quickjs.ts
-export * from "../../index.js";
+export { "createNodeCommand", "createNodeCommands", "nodeCommands" } from "../../index.js";

package/dist/safe-bash-command-pandoc/command.js

@@ -1,23 +1,23 @@
 import {
-  LB,
-  NB,
-  dh
-} from "../safe-bash/command-chunks/chunk-N5J3IZZK.js";
+  lO,
+  oO,
+  op
+} from "../safe-bash/command-chunks/chunk-DQVOBGI2.js";
 import "../safe-bash/command-chunks/chunk-7QRIAJEQ.js";
-import "../safe-bash/command-chunks/chunk-KM2SMMXZ.js";
+import "../safe-bash/command-chunks/chunk-VJQ5OWS5.js";
 import "../safe-bash/command-chunks/chunk-IOEUZ4EA.js";
 import "../safe-bash/command-chunks/chunk-E6SK3OU2.js";
 import "../safe-bash/command-chunks/chunk-Z2T7E4ID.js";
 import "../safe-bash/command-chunks/chunk-MO4CWGBR.js";
-import "../safe-bash/command-chunks/chunk-EAGIJ4VW.js";
+import "../safe-bash/command-chunks/chunk-IC5XC4TO.js";
 import "../safe-bash/command-chunks/chunk-NUGQQDGE.js";
 import "../safe-bash/command-chunks/chunk-5NKZJEUI.js";
 import "../safe-bash/command-chunks/chunk-QIFS4QHZ.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
-  dh as createPandocCommand,
-  NB as createPandocCommands,
-  LB as pandocCommands
+  op as createPandocCommand,
+  oO as createPandocCommands,
+  lO as pandocCommands
 };
 /*!
 MIT License

package/dist/safe-bash-command-pandoc/index.js

@@ -1,32 +1,32 @@
 import {
-  Au,
-  Be,
-  Ed,
-  Fu,
-  LB,
-  Ml,
-  NB,
-  Wa,
-  YA,
-  ah,
-  dh,
-  eB,
-  en,
-  fl,
-  fr,
-  hr,
-  iB,
-  jl,
-  mn,
-  qA,
-  rh,
-  sh,
-  tB,
-  ul,
-  zT
-} from "../safe-bash/command-chunks/chunk-N5J3IZZK.js";
+  $l,
+  Ar,
+  BI,
+  Bh,
+  CN,
+  En,
+  Fe,
+  IN,
+  Ir,
+  Kf,
+  Ll,
+  Lu,
+  PN,
+  XT,
+  as,
+  ep,
+  hc,
+  ip,
+  lO,
+  nA,
+  oO,
+  op,
+  pc,
+  tp,
+  un
+} from "../safe-bash/command-chunks/chunk-DQVOBGI2.js";
 import "../safe-bash/command-chunks/chunk-7QRIAJEQ.js";
-import "../safe-bash/command-chunks/chunk-KM2SMMXZ.js";
+import "../safe-bash/command-chunks/chunk-VJQ5OWS5.js";
 import "../safe-bash/command-chunks/chunk-IOEUZ4EA.js";
 import "../safe-bash/command-chunks/chunk-E6SK3OU2.js";
 import {
@@ -35,7 +35,7 @@ import {
 import "../safe-bash/command-chunks/chunk-MO4CWGBR.js";
 import {
   _r
-} from "../safe-bash/command-chunks/chunk-EAGIJ4VW.js";
+} from "../safe-bash/command-chunks/chunk-IC5XC4TO.js";
 import "../safe-bash/command-chunks/chunk-NUGQQDGE.js";
 import {
   e,
@@ -53,7 +53,7 @@ function K(u = {}) {
     e2.signal.throwIfAborted();
     let a = new TextEncoder(), f, C;
     try {
-      let o = ul(e2.args, i);
+      let o = $l(e2.args, i);
       if (o !== void 0) f = a.encode(o);
       else {
         let s = e2.fs ? { ...e2.cwd === void 0 ? {} : { cwd: e2.cwd }, stdin: e2.stdin, ...e2.createOutput ? { createOutput: e2.createOutput.bind(e2) } : {}, ...e2.fs.readStream ? { readStream: async function* (t2, r, n) {
@@ -64,7 +64,7 @@ function K(u = {}) {
             if (typeof m != "object" || m === null || !("code" in m) || m.code !== "ENOTSUP" && m.code !== "EOPNOTSUPP") throw m;
           }
           yield await s.readFile(t2, r, n);
-        } } : {}, readFile: (t2, r, n) => e2.fs.readFile(O(e2.cwd ?? "/", t2), { signal: r, ...n === void 0 || n === 1 / 0 ? {} : { maxBytes: n } }), writeFile: (t2, r, n) => e2.fs.writeFile(O(e2.cwd ?? "/", t2), r, { signal: n }) } : e2, { options: S, operands: R, destination: d, limits: P } = await rh(e2.args, s, e2.signal, i), A = (R ?? [{ chunks: e2.stdin }]).map((t2) => ({ ...t2, ...t2.base === void 0 && e2.cwd !== void 0 ? { base: e2.cwd } : {} })), F = { ...i, limits: P, signal: e2.signal, ...e2.fs === void 0 ? {} : { resourceFiles: e2.fs, resources: { resolve: async (t2, r, n) => e2.fs.readFile(`${r ?? e2.cwd ?? "/"}/${t2}`, { ...n === void 0 ? {} : { signal: n } }) } }, ...e2.cwd === void 0 ? {} : { resourceCwd: e2.cwd } }, p, v = d !== void 0 && s.createOutput ? { async write(t2, r) {
+        } } : {}, readFile: (t2, r, n) => e2.fs.readFile(O(e2.cwd ?? "/", t2), { signal: r, ...n === void 0 || n === 1 / 0 ? {} : { maxBytes: n } }), writeFile: (t2, r, n) => e2.fs.writeFile(O(e2.cwd ?? "/", t2), r, { signal: n }) } : e2, { options: S, operands: R, destination: d, limits: P } = await ip(e2.args, s, e2.signal, i), A = (R ?? [{ chunks: e2.stdin }]).map((t2) => ({ ...t2, ...t2.base === void 0 && e2.cwd !== void 0 ? { base: e2.cwd } : {} })), F = { ...i, limits: P, signal: e2.signal, ...e2.fs === void 0 ? {} : { resourceFiles: e2.fs, resources: { resolve: async (t2, r, n) => e2.fs.readFile(`${r ?? e2.cwd ?? "/"}/${t2}`, { ...n === void 0 ? {} : { signal: n } }) } }, ...e2.cwd === void 0 ? {} : { resourceCwd: e2.cwd } }, p, v = d !== void 0 && s.createOutput ? { async write(t2, r) {
           p ??= s.createOutput(d, r ?? e2.signal), (r ?? e2.signal).throwIfAborted(), await p.write(t2, r);
         }, async close(t2) {
           p ??= s.createOutput(d, t2 ?? e2.signal), (t2 ?? e2.signal).throwIfAborted(), await p.close(t2);
@@ -78,7 +78,7 @@ function K(u = {}) {
           }
         }, async close() {
         }, async abort() {
-        } }, c = d === void 0 || s.createOutput ? await ah(A, S, { ...F, output: v }) : await Ml(A, S, { ...F, output: { publish: async (t2, r) => s.writeFile(d, t2, r) } });
+        } }, c = d === void 0 || s.createOutput ? await tp(A, S, { ...F, output: v }) : await hc(A, S, { ...F, output: { publish: async (t2, r) => s.writeFile(d, t2, r) } });
         for (let t2 of c.diagnostics) await e2.stderr.write(a.encode(`${t2.code}: ${t2.location ? `${t2.location}: ` : ""}${t2.message}
 `)), e2.signal.throwIfAborted();
         if (c.kind === "output") return { exitCode: 0 };
@@ -99,7 +99,7 @@ function Z(u = {}) {
     i.signal.throwIfAborted();
     let e2;
     try {
-      e2 = fr(i.args, u);
+      e2 = Ar(i.args, u);
     } catch (a) {
       if (!(a instanceof t)) throw a;
       return await i.stderr.write(new TextEncoder().encode(`${a.code}: ${a.message}
@@ -108,39 +108,39 @@ function Z(u = {}) {
     return await i.stdout.write(new TextEncoder().encode(e2)), i.signal.throwIfAborted(), { exitCode: 0 };
   } };
 }
-var export_assertNever = en.assertNever;
+var export_assertNever = un.assertNever;
 export {
   e as AstError,
-  mn as ExecutionContext,
+  En as ExecutionContext,
   t as PandocError,
   export_assertNever as assertNever,
-  Ml as convert,
-  iB as convertSync,
-  ah as convertToOutput,
-  fl as coreFormats,
+  hc as convert,
+  CN as convertSync,
+  tp as convertToOutput,
+  Ll as coreFormats,
   yr as createCiteprocFilterCapability,
-  YA as createExecutionContext,
-  jl as createFileOutput,
+  BI as createExecutionContext,
+  pc as createFileOutput,
   Z as createFormatInspectionCommand,
-  Be as createFormatRegistry,
-  Fu as createJsonFilterCapability,
+  Fe as createFormatRegistry,
+  Bh as createJsonFilterCapability,
   _r as createLuaFilterCapability,
-  dh as createPandocCommand,
-  NB as createPandocCommands,
+  op as createPandocCommand,
+  oO as createPandocCommands,
   K as createStandalonePandocCommand,
-  Wa as defaultLimits,
-  sh as evalSyncPandoc,
-  zT as formatCapabilities,
-  ul as inspectCommand,
-  fr as inspectFormats,
-  qA as normalizeDocument,
-  Au as normalizeDocumentCooperatively,
-  LB as pandocCommands,
-  hr as parseConversionArgs,
-  Ed as pdfReader,
-  tB as readDocument,
-  rh as resolveConversionArgs,
-  eB as writeDocument
+  as as defaultLimits,
+  ep as evalSyncPandoc,
+  XT as formatCapabilities,
+  $l as inspectCommand,
+  Ar as inspectFormats,
+  nA as normalizeDocument,
+  Lu as normalizeDocumentCooperatively,
+  lO as pandocCommands,
+  Ir as parseConversionArgs,
+  Kf as pdfReader,
+  PN as readDocument,
+  ip as resolveConversionArgs,
+  IN as writeDocument
 };
 /*!
 MIT License

package/dist/safe-bash-command-pandoc/lua-filters.js

@@ -1,6 +1,6 @@
 import {
   _r
-} from "../safe-bash/command-chunks/chunk-EAGIJ4VW.js";
+} from "../safe-bash/command-chunks/chunk-IC5XC4TO.js";
 import "../safe-bash/command-chunks/chunk-NUGQQDGE.js";
 import "../safe-bash/command-chunks/chunk-5NKZJEUI.js";
 import "../safe-bash/command-chunks/chunk-QIFS4QHZ.js";

package/dist/safe-bash-command-patch/index.js

@@ -1,17 +1,17 @@
 import {
   patchCommand
-} from "../safe-bash/command-chunks/chunk-2FEMMALH.js";
+} from "../safe-bash/command-chunks/chunk-SLD5A7IL.js";
 import "../safe-bash/command-chunks/chunk-6GCK2KSL.js";
+import "../safe-bash/command-chunks/chunk-2C4QMQQD.js";
 import "../safe-bash/command-chunks/chunk-OQNX2OOS.js";
 import "../safe-bash/command-chunks/chunk-5XUWGUGN.js";
-import "../safe-bash/command-chunks/chunk-CFMJXJS5.js";
+import "../safe-bash/command-chunks/chunk-AJEQUVDN.js";
+import "../safe-bash/command-chunks/chunk-RTUDDAAY.js";
 import "../safe-bash/command-chunks/chunk-KASXIRKD.js";
+import "../safe-bash/command-chunks/chunk-KHUT7BB5.js";
 import {
   evalSyncPatch
 } from "../safe-bash/command-chunks/chunk-KSY3QHLY.js";
-import "../safe-bash/command-chunks/chunk-2C4QMQQD.js";
-import "../safe-bash/command-chunks/chunk-AJEQUVDN.js";
-import "../safe-bash/command-chunks/chunk-KHUT7BB5.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-command-patch/src/index.ts

package/dist/safe-bash-command-patch/patch-publication.js

@@ -1,6 +1,6 @@
 import {
   PatchPublication
-} from "../safe-bash/command-chunks/chunk-CFMJXJS5.js";
+} from "../safe-bash/command-chunks/chunk-RTUDDAAY.js";
 import "../safe-bash/command-chunks/chunk-KASXIRKD.js";
 import "../safe-bash/command-chunks/chunk-KHUT7BB5.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";

package/dist/safe-bash-command-patch/patch.js

@@ -1,13 +1,13 @@
 import {
   patchCommand
-} from "../safe-bash/command-chunks/chunk-2FEMMALH.js";
+} from "../safe-bash/command-chunks/chunk-SLD5A7IL.js";
 import "../safe-bash/command-chunks/chunk-6GCK2KSL.js";
+import "../safe-bash/command-chunks/chunk-2C4QMQQD.js";
 import "../safe-bash/command-chunks/chunk-OQNX2OOS.js";
 import "../safe-bash/command-chunks/chunk-5XUWGUGN.js";
-import "../safe-bash/command-chunks/chunk-CFMJXJS5.js";
-import "../safe-bash/command-chunks/chunk-KASXIRKD.js";
-import "../safe-bash/command-chunks/chunk-2C4QMQQD.js";
 import "../safe-bash/command-chunks/chunk-AJEQUVDN.js";
+import "../safe-bash/command-chunks/chunk-RTUDDAAY.js";
+import "../safe-bash/command-chunks/chunk-KASXIRKD.js";
 import "../safe-bash/command-chunks/chunk-KHUT7BB5.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {

package/dist/safe-bash-command-pdfinfo/index.js

@@ -124,8 +124,8 @@ import { createOutputOperation } from "../safe-bash-contracts/output.js";
 import { PdfFileSource as PdfFileSource2, PdfRetainedDocument, PdfStagedOutputs, PdfDocument, dictGet, decodePdfString, parseContentStream } from "../pdf-ast/index.js";
 import { createPdfuniteCommand } from "../safe-bash-command-pdfunite/index.js";
 import { createPdfseparateCommand } from "../safe-bash-command-pdfseparate/index.js";
-export * from "../safe-bash-command-pdfunite/index.js";
-export * from "../safe-bash-command-pdfseparate/index.js";
+export { "createPdfuniteCommand", "createPdfuniteCommands", "pdfuniteCommand", "pdfuniteCommands", "runPdfuniteCli" } from "../safe-bash-command-pdfunite/index.js";
+export { "createPdfseparateCommand", "createPdfseparateCommands", "pdfseparateCommand", "pdfseparateCommands", "runPdfseparateCli" } from "../safe-bash-command-pdfseparate/index.js";
 var SUPPORTED_ENCODINGS = /* @__PURE__ */ new Set([
   "ASCII7",
   "Latin1",