@poe-platform/safe-bash 0.1.818 → 0.1.820

package/dist/safe-bash/command-chunks/{chunk-VW67MA53.js → chunk-PAEAEFK3.js}

@@ -1,32 +1,141 @@
 import {
-  imageMetadata
-} from "./chunk-UPXFSGQG.js";
+  imageMetadata,
+  readImageMetadata
+} from "./chunk-ZWGERYLT.js";
 import {
   readShapeGeometry
-} from "./chunk-R2N3E267.js";
+} from "./chunk-YXIJOYT6.js";
 import {
   attr,
   child
-} from "./chunk-A32PUWYE.js";
+} from "./chunk-UDRJKA3P.js";
 import {
   SelectionError,
   readSelectionIndex
-} from "./chunk-3W3HLPCX.js";
+} from "./chunk-SKF6PGA5.js";
 import {
   readPackage
-} from "./chunk-Q65GWGQR.js";
-import {
-  readBinary
-} from "./chunk-FAU2KL6I.js";
+} from "./chunk-KVTZJBLM.js";
 import {
   parseXmlPart
-} from "./chunk-7PYDVQPB.js";
+} from "./chunk-YWP62BAZ.js";
+import {
+  readBinary
+} from "./chunk-S5MBHFLB.js";
 import {
   OfficeError
-} from "./chunk-KM2SMMXZ.js";
+} from "./chunk-VJQ5OWS5.js";
 
 // packages/safe-bash-presentation-engine/src/images.ts
+import { sha1 as sha12 } from "@noble/hashes/legacy.js";
+
+// packages/safe-bash-presentation-engine/src/retained-image-metadata.ts
+import { PagedStorage } from "@poe-platform/safe-fs/storage";
 import { sha1 } from "@noble/hashes/legacy.js";
+async function readRetainedImageMetadata(archive, part, mediaType, settings) {
+  const signal = settings.signal ?? new AbortController().signal;
+  const check = () => {
+    if (signal.aborted) throw new OfficeError("cancelled", "Operation cancelled.", "index");
+  };
+  const invalid = () => new OfficeError("invalid-archive", "Image member length changed.", "index");
+  let pages;
+  let iterator;
+  let failed = false;
+  try {
+    check();
+    const size = await archive.byteLength(part);
+    if (!Number.isSafeInteger(size) || size < 0) throw invalid();
+    check();
+    const seek = mediaType === "image/tiff";
+    if (seek) {
+      const working = settings.workingStorage;
+      pages = new PagedStorage(
+        { fs: working.fs, cwd: working.directory, env: {}, signal },
+        (working.cacheBytes ?? 1024 * 1024) / 16384
+      );
+    }
+    const start = pages?.allocate(size) ?? 0;
+    const window = seek ? new Uint8Array() : new Uint8Array(65536 + 16384);
+    const hash = sha1.create();
+    let position = 0, chunk = new Uint8Array(), cursor = 0, ended = false;
+    iterator = archive.read(part)[Symbol.asyncIterator]();
+    async function nextChunk() {
+      check();
+      const next = await iterator.next();
+      check();
+      if (next.done) {
+        ended = true;
+        return;
+      }
+      if (!(next.value instanceof Uint8Array) || next.value.length > size - position)
+        throw invalid();
+      chunk = next.value;
+      cursor = 0;
+    }
+    async function advance(end) {
+      while (position < end) {
+        check();
+        if (cursor === chunk.length) {
+          await nextChunk();
+          if (ended) throw invalid();
+          if (!chunk.length) continue;
+        }
+        const length = Math.min(end - position, chunk.length - cursor, 16384);
+        const bytes = chunk.subarray(cursor, cursor + length);
+        if (pages) await pages.write(start + position, bytes);
+        else {
+          const at = position % window.length, first = Math.min(length, window.length - at);
+          window.set(bytes.subarray(0, first), at);
+          window.set(bytes.subarray(first), 0);
+        }
+        check();
+        hash.update(bytes);
+        cursor += length;
+        position += length;
+      }
+    }
+    const metadata = await readImageMetadata(
+      {
+        size,
+        async read(offset, length) {
+          await advance(Math.max(position, offset + length));
+          check();
+          if (pages) return pages.read(start + offset, length);
+          if (offset < position - window.length)
+            throw new Error("Image metadata exceeded sequential lookback.");
+          const bytes = new Uint8Array(length), at = offset % window.length;
+          const first = Math.min(length, window.length - at);
+          bytes.set(window.subarray(at, at + first));
+          bytes.set(window.subarray(0, length - first), first);
+          return bytes;
+        }
+      },
+      mediaType,
+      signal
+    );
+    await advance(size);
+    while (!ended) {
+      await nextChunk();
+      if (!ended && chunk.length) throw invalid();
+    }
+    check();
+    return {
+      ...metadata,
+      sha1: Array.from(hash.digest(), (b) => b.toString(16).padStart(2, "0")).join("")
+    };
+  } catch (error) {
+    failed = true;
+    check();
+    if (error instanceof OfficeError) throw error;
+    throw new OfficeError("io-failure", "Image storage operation failed.", "index");
+  } finally {
+    const results = await Promise.allSettled([iterator?.return?.(), pages?.close()]);
+    if (!failed && results.some((result) => result.status === "rejected"))
+      await Promise.reject(new OfficeError("io-failure", "Image storage cleanup failed.", "index"));
+  }
+}
+
+// packages/safe-bash-presentation-engine/src/images.ts
 var p = [
   "http://schemas.openxmlformats.org/presentationml/2006/main",
   "http://purl.oclc.org/ooxml/presentationml/main"
@@ -221,7 +330,7 @@ async function readImages(input, options, context) {
     } else
       media.push({
         parts: [part],
-        sha1: Array.from(sha1(reader.get(part)), (byte) => byte.toString(16).padStart(2, "0")).join(
+        sha1: Array.from(sha12(reader.get(part)), (byte) => byte.toString(16).padStart(2, "0")).join(
           ""
         ),
         contentTypes: [metadata.contentType],
@@ -236,6 +345,7 @@ async function readImages(input, options, context) {
 }
 
 export {
+  readRetainedImageMetadata,
   validateImageSelectionOptions,
   readImages
 };

package/dist/safe-bash/command-chunks/{chunk-5RDS6CNQ.js → chunk-PH722HK2.js}

@@ -10,6 +10,10 @@ import {
 import {
   inlineImageRun
 } from "./chunk-GIQUIF6E.js";
+import {
+  UnsupportedEmbeddedFontMutationError,
+  embeddedFontState
+} from "./chunk-ROE6KD4C.js";
 import {
   Image,
   copyImageForOwner,
@@ -22,14 +26,10 @@ import {
 import {
   createDocumentArchive,
   originalModelDefaults
-} from "./chunk-5GP4A3TD.js";
+} from "./chunk-OLNV5MI6.js";
 import {
   styleAllocationIds
 } from "./chunk-EEJ3YXVO.js";
-import {
-  UnsupportedEmbeddedFontMutationError,
-  embeddedFontState
-} from "./chunk-ROE6KD4C.js";
 import {
   assertLiveCommentExtensionPartPreserved
 } from "./chunk-DZ4ELL34.js";
@@ -400,7 +400,7 @@ var PackageView = class {
     if (input == null) throw new InputTypeError("Expected explicit package input.");
     if (settings.template !== void 0) throw new InputTypeError("A context template conflicts with package input.");
     const admitted = await admitDocumentModel(input, settings);
-    const { ModelStore } = await import("./model-store-IIWQHSEZ.js");
+    const { ModelStore } = await import("./model-store-RGLCVIML.js");
     const store = new ModelStore(admitted.archive, admitted.settings, admitted.archive.mainPart, admitted.source);
     store.package.after_unmarshal();
     return store.package;

package/dist/safe-bash/command-chunks/{chunk-OU4VE5CR.js → chunk-PKH57OIC.js}

@@ -1,3 +1,6 @@
+import {
+  quoteName
+} from "./chunk-PYIG32ZI.js";
 import {
   Exclusions
 } from "./chunk-2GILUQJY.js";
@@ -13,9 +16,6 @@ import {
   parseHeader,
   parsePax
 } from "./chunk-TCXM7BSZ.js";
-import {
-  quoteName
-} from "./chunk-PYIG32ZI.js";
 
 // packages/safe-bash-command-tar/src/extract.ts
 import { compareIdentity } from "@poe-platform/safe-fs/contracts";
@@ -158,7 +158,7 @@ var stagingSerial = 0;
 async function stageEntry(context, path, source, existing, entry, options, budget, preparedAncestors) {
   const { fs, signal } = context;
   const capabilities = await fs.capabilitiesFor?.(path, { signal, create: true, stagingAncestry: true }) ?? fs.capabilities;
-  if (capabilities.atomicFileStaging !== true && capabilities.trustedOwnedStaging !== true || capabilities.atomicStagingAncestry !== true || !fs.createStagedFile || !fs.publishStagedFile || !fs.removeStagedFile) fail("extraction requires atomic staging and ancestry verification");
+  if (capabilities.atomicFileStaging !== true && capabilities.trustedOwnedStaging !== true || capabilities.atomicStagingAncestry !== true && !(capabilities.trustedOwnedStaging === true && capabilities.trustedStagingAncestry === true) || !fs.createStagedFile || !fs.publishStagedFile || !fs.removeStagedFile) fail("extraction requires atomic staging and ancestry verification");
   let ancestors;
   if (preparedAncestors) {
     ancestors = preparedAncestors;
@@ -276,8 +276,10 @@ function verbose(entry, options) {
 }
 async function readArchive(context, source, options, budget, visitor) {
   if (options.mode === "x" && !options.toStdout && !visitor) {
-    if (!context.fs.confineExtraction) fail("filesystem does not support race-safe archive extraction");
-    const fs = await operation(context, () => context.fs.confineExtraction(
+    const confine = context.fs.confineTrustedExtraction ?? context.fs.confineExtraction;
+    if (!confine) fail("filesystem does not support race-safe archive extraction");
+    const fs = await operation(context, () => confine.call(
+      context.fs,
       [...new Set([options.cwd, ...options.operands.map((operand) => operand.cwd)].map((root) => resolvePath(root)))],
       { signal: context.signal }
     ));

package/dist/safe-bash/command-chunks/{chunk-GTOMW4VV.js → chunk-PNOXBL2B.js}

@@ -1,6 +1,6 @@
 import {
   OfficeError
-} from "./chunk-KM2SMMXZ.js";
+} from "./chunk-VJQ5OWS5.js";
 
 // packages/safe-bash-presentation-engine/src/equations-compatibility.ts
 var equationNamespaces = [

package/dist/safe-bash/command-chunks/{chunk-L4XSOULP.js → chunk-PPNPXNM6.js}

@@ -1,6 +1,6 @@
 import {
   SearchError
-} from "./chunk-5VF2EA7Z.js";
+} from "./chunk-U7J3R7HX.js";
 
 // packages/safe-bash-command-rg/src/matcher.ts
 import { RegexExecutionError } from "../../safe-bash-regex-engine/execution/portable.js";
@@ -58,12 +58,38 @@ var Matcher = class {
   session;
   descriptor;
   vm;
+  byteSubjectVm;
   captureVm;
+  emptyPattern = false;
   crossLine;
   literalAsciiBytes;
   resetForRun(patterns, args, session, ergonomic = true, literalOnly = false) {
     this.session = session;
     this.captureVm = void 0;
+    this.byteSubjectVm = void 0;
+    this.emptyPattern = !args.whole && patterns.length === 1 && patterns[0] === "";
+    if (ergonomic && !literalOnly && patterns.length > 0) {
+      let vm;
+      const config = {
+        kind: "rg",
+        fixed: args.fixed,
+        caseMode: args.case,
+        whole: args.whole,
+        word: args.word,
+        nullData: args.nullData,
+        multiline: args.multiline,
+        multilineDotall: args.multilineDotall,
+        captures: args.replacement?.includes("$") ?? false,
+        binaryText: args.binary === "text",
+        forceVm: true
+      };
+      this.byteSubjectVm = () => {
+        if (vm) return vm;
+        const prepared2 = prepareErgonomicRegex(patterns, config);
+        if (prepared2.mode !== "vm") throw new SearchError("byte subject matcher unavailable");
+        return vm = prepared2.vm;
+      };
+    }
     if (patterns.length === 0) {
       this.literalAsciiBytes = void 0;
       this.vm = void 0;
@@ -149,7 +175,17 @@ var Matcher = class {
     return [];
   }
   batchSync(rows) {
-    if (this.vm && rows.length > 0) return this.vm.batchSync(rows);
+    const vm = this.vm ?? (this.byteSubjectVm && rows.some((row) => row.bytes.some((byte) => byte === 0 || byte >= 128)) ? this.byteSubjectVm() : void 0);
+    if (vm && rows.length > 0) {
+      const results = vm.batchSync(rows);
+      if (this.emptyPattern) {
+        for (let index = 0; index < rows.length; index++) {
+          const row = rows[index];
+          if (!row.terminated && results[index].at(-1)?.start === row.bytes.length) results[index].pop();
+        }
+      }
+      return results;
+    }
     trustedInputRows.add(rows);
     try {
       const res = this.session.runSync(this.descriptor, rows);

package/dist/safe-bash/command-chunks/{chunk-UH4CQIU3.js → chunk-PVKSBXHB.js}

@@ -1,8 +1,10 @@
 import {
-  openRetainedPresentationIndex,
+  openRetainedPresentationIndex
+} from "./chunk-LZHFVNEV.js";
+import {
   stageRetainedOutput,
   streamJson
-} from "./chunk-3ZGO24WG.js";
+} from "./chunk-R36PDP3L.js";
 import {
   attr,
   child,
@@ -12,22 +14,22 @@ import {
   nextRel,
   relPart,
   required
-} from "./chunk-A32PUWYE.js";
+} from "./chunk-UDRJKA3P.js";
 import {
   SelectionError
-} from "./chunk-3W3HLPCX.js";
+} from "./chunk-SKF6PGA5.js";
 import {
   openRetainedPresentationValidation
-} from "./chunk-N6VNHC3B.js";
+} from "./chunk-SKDJCMGI.js";
 import {
   dialects
-} from "./chunk-6KJDTKE4.js";
+} from "./chunk-P3LHQOX7.js";
 import {
   parseXmlPart
-} from "./chunk-7PYDVQPB.js";
+} from "./chunk-YWP62BAZ.js";
 import {
   relativePartReference
-} from "./chunk-MOUCMZZP.js";
+} from "./chunk-PZVFNPRC.js";
 import {
   OfficeError,
   RetainedValues,
@@ -36,7 +38,7 @@ import {
   literal,
   openRetainedXmlDocument,
   resolveOfficeResources
-} from "./chunk-KM2SMMXZ.js";
+} from "./chunk-VJQ5OWS5.js";
 
 // packages/safe-bash-presentation-engine/src/notes.ts
 import { SaxesParser } from "saxes";

package/dist/safe-bash/command-chunks/{chunk-6LOAJOWK.js → chunk-PYYAX5FB.js}

@@ -4,35 +4,38 @@ import {
   XyChartData,
   chartTypes,
   toChartData
-} from "./chunk-QNLX3CZH.js";
-import {
-  applyPictureUpdate
-} from "./chunk-JNRX5EFF.js";
+} from "./chunk-2VSNIHIW.js";
 import {
   applyConnectorUpdate,
   createConnectorXml,
   readConnector
-} from "./chunk-4PMMJ45F.js";
+} from "./chunk-DZTT5SLG.js";
+import {
+  applyPictureUpdate
+} from "./chunk-HVLF3Y4B.js";
 import {
   XL_CHART_TYPE
-} from "./chunk-TTTNFKT6.js";
+} from "./chunk-HCZITM4C.js";
+import {
+  Image
+} from "./chunk-ZXIOTUXC.js";
 import {
   PROG_ID
-} from "./chunk-QCIAX6HZ.js";
+} from "./chunk-HUAQZFON.js";
 import {
   applyTableStructure
-} from "./chunk-MRBX4KEP.js";
-import {
-  Image
-} from "./chunk-F2NF6FHV.js";
+} from "./chunk-GAYTDZPP.js";
 import {
   applyTableUpdate,
   createTableXml,
   readTable
-} from "./chunk-IJZUUXLL.js";
+} from "./chunk-JQPDVCBU.js";
 import {
   nodeFor
-} from "./chunk-YW7WU7W2.js";
+} from "./chunk-4HJEZGYN.js";
+import {
+  ShapeIdAllocator
+} from "./chunk-6RE4MZYM.js";
 import {
   FillFormat,
   LineFormat,
@@ -46,24 +49,21 @@ import {
   createShapeXml,
   readShape,
   textLinkCapabilities
-} from "./chunk-NZF56C25.js";
+} from "./chunk-64L57DEI.js";
 import {
   defineEnum
-} from "./chunk-VUJCVXD4.js";
-import {
-  ShapeIdAllocator
-} from "./chunk-BJL7AGA5.js";
+} from "./chunk-3RDEX4AF.js";
 import {
   Length
-} from "./chunk-B6XTAKKQ.js";
+} from "./chunk-GNVAW6NL.js";
 import {
   attr,
   child,
   required
-} from "./chunk-A32PUWYE.js";
+} from "./chunk-UDRJKA3P.js";
 import {
   parseXmlPart
-} from "./chunk-7PYDVQPB.js";
+} from "./chunk-YWP62BAZ.js";
 import {
   IndexError,
   InvalidHandleError,
@@ -71,10 +71,10 @@ import {
   PropertyAccessError,
   TypeError,
   ValueError
-} from "./chunk-G3FK5VVG.js";
+} from "./chunk-HTBUIRTH.js";
 import {
   OfficeError
-} from "./chunk-KM2SMMXZ.js";
+} from "./chunk-VJQ5OWS5.js";
 
 // packages/safe-bash-presentation-engine/src/indexed-collection.ts
 function indexed(target) {

package/dist/safe-bash/command-chunks/{chunk-MOUCMZZP.js → chunk-PZVFNPRC.js}

@@ -1,6 +1,6 @@
 import {
   OfficeError
-} from "./chunk-KM2SMMXZ.js";
+} from "./chunk-VJQ5OWS5.js";
 
 // packages/safe-bash-presentation-engine/src/package-uri.ts
 function unsafeName() {

package/dist/safe-bash/command-chunks/{chunk-37KBCKDF.js → chunk-QCCRQU44.js}

@@ -1,6 +1,6 @@
 import {
   openNotes
-} from "./chunk-45GTHPL5.js";
+} from "./chunk-2V6EUWE3.js";
 import {
   reviewResourceDate
 } from "./chunk-IBT3OWXB.js";
@@ -11,7 +11,7 @@ import {
 import {
   openDocumentLocations,
   resolveDocxSelection
-} from "./chunk-MWVELMXZ.js";
+} from "./chunk-BFOVQUTF.js";
 import {
   commentStoryParts,
   nextCommentId,
@@ -29,23 +29,23 @@ import {
 import {
   findRelationshipPart
 } from "./chunk-UIX3CASN.js";
-import {
-  incomingResourceReferences,
-  measurePackageResourceSerialization
-} from "./chunk-ETN25WCR.js";
-import {
-  validateDocxInvocation
-} from "./chunk-BDGNKRY4.js";
 import {
   assertDocumentEditable,
   publishDocumentArchive
-} from "./chunk-LTWX23FS.js";
+} from "./chunk-QQ7ORF2D.js";
 import {
   writeArchive
 } from "./chunk-NPVOYY2A.js";
+import {
+  incomingResourceReferences,
+  measurePackageResourceSerialization
+} from "./chunk-KD4JUF6R.js";
 import {
   DocumentPackage
 } from "./chunk-5BUL25DF.js";
+import {
+  validateDocxInvocation
+} from "./chunk-BDGNKRY4.js";
 import {
   DocumentXmlEditor,
   UnsupportedEditError,

package/dist/safe-bash/command-chunks/{chunk-C34RLMAC.js → chunk-QEVSG6HQ.js}

@@ -1,16 +1,16 @@
 import {
   assertSettingsXmlReplacement
-} from "./chunk-YKEMSPJZ.js";
+} from "./chunk-UMOQHHSV.js";
 import {
   assertEquationXmlReplacement
-} from "./chunk-K6E56LND.js";
+} from "./chunk-W6L4Z2VX.js";
 import {
   readDocumentBindingOwnership
 } from "./chunk-6IID5HTY.js";
 import {
   assertDiagramGraphReplacement,
   assertDiagramXmlReplacement
-} from "./chunk-X4TWJNW7.js";
+} from "./chunk-CI6KHUFK.js";
 import {
   UnsupportedEmbeddedFontMutationError,
   embeddedFontState
@@ -18,7 +18,7 @@ import {
 import {
   assertDocumentEditable,
   publishDocumentArchive
-} from "./chunk-LTWX23FS.js";
+} from "./chunk-QQ7ORF2D.js";
 import {
   DocumentPackage,
   readDocumentArchive

package/dist/safe-bash/command-chunks/{chunk-YOYK2I4N.js → chunk-QGSY4ZAU.js}

@@ -1,23 +1,23 @@
 import {
   attr,
   invalid
-} from "./chunk-A32PUWYE.js";
+} from "./chunk-UDRJKA3P.js";
 import {
   SelectionError,
   readSelectionIndex
-} from "./chunk-3W3HLPCX.js";
+} from "./chunk-SKF6PGA5.js";
 import {
   readPackage
-} from "./chunk-Q65GWGQR.js";
-import {
-  readBinary
-} from "./chunk-FAU2KL6I.js";
+} from "./chunk-KVTZJBLM.js";
 import {
   parseXmlPart
-} from "./chunk-7PYDVQPB.js";
+} from "./chunk-YWP62BAZ.js";
+import {
+  readBinary
+} from "./chunk-S5MBHFLB.js";
 import {
   OfficeError
-} from "./chunk-KM2SMMXZ.js";
+} from "./chunk-VJQ5OWS5.js";
 
 // packages/safe-bash-presentation-engine/src/animations.ts
 async function readAnimations(input, options, context) {

package/dist/safe-bash/command-chunks/{chunk-4YFTJS5U.js → chunk-QMXOKYMJ.js}

@@ -4,11 +4,11 @@ import {
   partName,
   relativePartReference,
   resolvePartReference
-} from "./chunk-MOUCMZZP.js";
+} from "./chunk-PZVFNPRC.js";
 import {
   OfficeError,
   resolveOfficeResources
-} from "./chunk-KM2SMMXZ.js";
+} from "./chunk-VJQ5OWS5.js";
 
 // packages/safe-bash-presentation-engine/src/relationship-owner.ts
 function relationshipOwner(name) {

package/dist/safe-bash/command-chunks/{chunk-PFUZPAXQ.js → chunk-QPHI7Y7Z.js}

@@ -1,12 +1,12 @@
 import {
   measurePackageResourceSerialization
-} from "./chunk-ETN25WCR.js";
-import {
-  validateDocxInvocation
-} from "./chunk-BDGNKRY4.js";
+} from "./chunk-KD4JUF6R.js";
 import {
   readDocumentArchive
 } from "./chunk-5BUL25DF.js";
+import {
+  validateDocxInvocation
+} from "./chunk-BDGNKRY4.js";
 import {
   MarkupCompatibility,
   documentCompatibilityProfile

package/dist/safe-bash/command-chunks/{chunk-HNY7LZ5P.js → chunk-QWQHLMDX.js}

@@ -1,6 +1,6 @@
 import {
   requireLegacyCommentRemapping
-} from "./chunk-F2JUB7JI.js";
+} from "./chunk-AR65HNNX.js";
 import {
   attr,
   child,
@@ -9,23 +9,23 @@ import {
   loadShared,
   nextRel,
   relPart
-} from "./chunk-A32PUWYE.js";
+} from "./chunk-UDRJKA3P.js";
 import {
   SelectionError,
   decodeSelectionToken
-} from "./chunk-3W3HLPCX.js";
+} from "./chunk-SKF6PGA5.js";
 import {
   parseXmlPart
-} from "./chunk-7PYDVQPB.js";
+} from "./chunk-YWP62BAZ.js";
 import {
   parseContentTypes
-} from "./chunk-XFIDOCYH.js";
+} from "./chunk-6ZHNKHQQ.js";
 import {
   relativePartReference
-} from "./chunk-MOUCMZZP.js";
+} from "./chunk-PZVFNPRC.js";
 import {
   OfficeError
-} from "./chunk-KM2SMMXZ.js";
+} from "./chunk-VJQ5OWS5.js";
 
 // packages/safe-bash-presentation-engine/src/modern-comments.ts
 import { SaxesParser } from "saxes";