@poe-platform/safe-bash 0.1.821 → 0.1.823

package/dist/safe-bash-command-python/jspi.js

@@ -1,8 +1,8 @@
 import {
   createPythonJspiExecutor
-} from "../safe-bash/command-chunks/chunk-4Q3HP33O.js";
+} from "../safe-bash/command-chunks/chunk-RGKHTSUY.js";
 import "../safe-bash/command-chunks/chunk-FXWKMNX2.js";
-import "../safe-bash/command-chunks/chunk-5EFNQ6FY.js";
+import "../safe-bash/command-chunks/chunk-64HIOP7Q.js";
 import "../safe-bash/command-chunks/chunk-P56KGNW7.js";
 import "../safe-bash/command-chunks/chunk-NK3FRG5O.js";
 import "../safe-bash/command-chunks/chunk-XNJGNDFW.js";

package/dist/safe-bash-command-python/llm-assets-node.js

@@ -91,7 +91,7 @@ export async function readPythonLlmAssets(directory) {
             maxTotalBytes: distribution.expandedBytes, maxBufferedFileBytes: distribution.expandedBytes * 3,
             maxMembers: 10000, maxPathBytes: 1024, maxDepth: 32, maxPaxBytes: 65536,
             maxTextBytes: distribution.expandedBytes };
-        const archive = await readZipArchive(bytes, limits, signal);
+        const archive = await readZipArchive(bytes, limits, signal, { allowUnreferencedData: true });
         for (const native of distribution.nativeModules) {
             const entry = archive.entries.find(entry => entry.name === native.path);
             if (!entry || entry.directory || entry.symlink || entry.size !== native.bytes)

package/dist/safe-bash-command-python/llm-fragment-loader.d.ts

@@ -0,0 +1,6 @@
+import { type LlmFragmentLoader } from "../safe-bash-command-llm/index.js";
+import type { PythonLlmToolLoaderOptions } from './llm-functions-loader.js';
+/** Each explicitly authorized native loader invocation owns its interpreter.
+ * Results are staged one at a time in caller storage and borrowed until next(). */
+export declare function createPythonLlmFragmentLoader(options: PythonLlmToolLoaderOptions, prefix: string): LlmFragmentLoader;
+export declare const pythonLlmFragmentProgram: string;

package/dist/safe-bash-command-python/llm-functions-loader.d.ts

@@ -1,5 +1,9 @@
 import { type LlmToolLoader } from "../safe-bash-command-llm/index.js";
 import { type PythonCommandsOptions } from './executor.js';
+export interface PythonLlmToolLoaderOptions extends PythonCommandsOptions {
+    /** Explicit installed distributions whose tooling hooks the host authorizes. */
+    readonly plugins?: readonly string[];
+}
 /** Reuse one configured interpreter per load, retaining only caller-backed tool
  * payloads. The session must outlive consumption of its borrowed results. */
-export declare function createPythonLlmToolLoader(options: PythonCommandsOptions): LlmToolLoader;
+export declare function createPythonLlmToolLoader(options: PythonLlmToolLoaderOptions): LlmToolLoader;

package/dist/safe-bash-command-python/llm-loader-discovery.d.ts

@@ -0,0 +1,13 @@
+import type { LlmFragmentLoader, LlmLoaderDiscoveryContext, LlmLoaderProvider, LlmTemplateLoader } from "../safe-bash-command-llm/index.js";
+import type { PythonLlmToolLoaderOptions } from './llm-functions-loader.js';
+export interface PythonLlmDiscoveredLoaders {
+    readonly fragmentLoaders: ReadonlyMap<string, LlmFragmentLoader>;
+    readonly templateLoaders: ReadonlyMap<string, LlmTemplateLoader>;
+}
+export type PythonLlmLoaderDiscoveryContext = LlmLoaderDiscoveryContext;
+/** Discover at listing time and resolve prefixes without an extra native hook pass. */
+export declare function createPythonLlmLoaderProvider(options: PythonLlmToolLoaderOptions): LlmLoaderProvider;
+/** Discover native prefixes only from explicitly authorized installed plugins.
+ * Invoke again after changing the environment; no ambient registry is retained. */
+export declare function createPythonLlmLoaderDiscovery(options: PythonLlmToolLoaderOptions): (context: PythonLlmLoaderDiscoveryContext) => Promise<PythonLlmDiscoveredLoaders>;
+export declare const pythonLlmLoaderDiscoveryProgram: string;

package/dist/safe-bash-command-python/llm-package-manager.d.ts

@@ -0,0 +1,7 @@
+import type { LlmPackageManager } from "../safe-bash-command-llm/index.js";
+import { type PythonCommandsOptions, type PythonPackageEnvironment } from './executor.js';
+/** Parse with the pinned LLM CLI, then retire it before mutating the shared
+ * caller-owned package environment in a separate interpreter. */
+export declare function createPythonLlmPackageManager(options: PythonCommandsOptions & {
+    environment: PythonPackageEnvironment;
+}): LlmPackageManager;

package/dist/safe-bash-command-python/llm-template-loader.d.ts

@@ -0,0 +1,6 @@
+import type { LlmTemplateLoader } from "../safe-bash-command-llm/index.js";
+import type { PythonLlmToolLoaderOptions } from './llm-functions-loader.js';
+/** Execute an explicitly authorized native loader within the caller's remaining
+ * template materialization allowance. Native JSON travels in bounded windows. */
+export declare function createPythonLlmTemplateLoader(options: PythonLlmToolLoaderOptions, prefix: string): LlmTemplateLoader;
+export declare const pythonLlmTemplateProgram: string;

package/dist/safe-bash-command-python/manifest.d.ts

@@ -1,3 +1,16 @@
+/** Native distribution metadata and pip-compatible removal listings. */
+export type PythonPackageRecord = readonly [name: string, metadata: string, origin: string, remove: readonly string[], skip: readonly string[]];
+/** Exact installed requirements; newer snapshots can uninstall without wheels. */
+export type PythonInstalledSnapshot = {
+    readonly version: 1;
+    readonly installed: readonly string[];
+} | {
+    readonly version: 2;
+    readonly installed: readonly string[];
+    readonly records: readonly PythonPackageRecord[];
+};
+/** Accept legacy requirements and validated versioned installed snapshots. */
+export declare function readPackageManifest(value: unknown): readonly string[] | undefined;
 export interface PythonPackageManifest {
     readonly revision: string;
     readonly bytes: Uint8Array;

package/dist/safe-bash-command-python/provisioning.d.ts

@@ -1,6 +1,6 @@
 import type { FileSystem } from "../safe-bash-contracts/filesystem.js";
 import type { HttpTransport, NetworkAuthorizer } from "../safe-bash-network-engine/types.js";
-import { type PythonPackageManifestStore } from './manifest.js';
+import { type PythonPackageManifestStore, type PythonPackageRecord } from './manifest.js';
 import { type PythonPackageCache } from './cache.js';
 export type { PythonPackageCache } from './cache.js';
 export interface PythonPackageProgress {
@@ -9,7 +9,19 @@ export interface PythonPackageProgress {
     readonly bytes?: number;
     readonly totalBytes?: number;
 }
-export interface PythonPackageOptions {
+export interface PythonPackageInstallOptions {
+    /** Include prerelease and development candidates during dependency resolution. */
+    readonly pre?: boolean;
+    /** Select the newest eligible requested roots, retaining satisfying dependencies. */
+    readonly upgrade?: boolean;
+    /** Reinstall the requested dependency graph even when installed versions satisfy it. */
+    readonly forceReinstall?: boolean;
+    /** Bypass artifact cache reads and writes; environment snapshots still persist. */
+    readonly noCache?: boolean;
+}
+export interface PythonPackageOptions extends PythonPackageInstallOptions {
+    /** Resolve requested sources before opening an install session; restored pins are unchanged. */
+    readonly prepareRequirements?: (requirements: readonly string[], context: PythonPackagePrepareContext) => Promise<readonly string[]>;
     readonly requirements?: readonly string[];
     readonly requirementFiles?: readonly string[];
     readonly profile?: 'documents';
@@ -29,9 +41,24 @@ export interface PythonPackageOptions {
     readonly maxCacheBytes?: number;
     readonly onProgress?: (event: PythonPackageProgress) => void;
 }
-export interface PythonPackageStart {
+export interface PythonPackageStart extends Omit<PythonPackageInstallOptions, 'noCache'> {
     readonly session: string;
+    /** Load installer tooling even when no application requirements are installed. */
+    readonly bootstrap?: boolean;
+    /** Combined requirements for compatibility with custom executors. */
     readonly requirements: readonly string[];
+    /** Legacy requirements need one dependency-resolution pass before migration. */
+    readonly legacy?: boolean;
+    /** Installed metadata used only by uninstall; application startup still restores code. */
+    readonly records?: readonly PythonPackageRecord[] | undefined;
+    /** Prior installation; only legacy manifests resolve dependencies during restore. */
+    readonly restore?: readonly string[];
+    /** New or host-configured requirements whose dependency closure is resolved. */
+    readonly requested?: readonly string[];
+    readonly uninstall?: {
+        readonly packages: readonly string[];
+        readonly yes: boolean;
+    };
     readonly offline: boolean;
 }
 export interface PythonPackageContext {
@@ -39,7 +66,8 @@ export interface PythonPackageContext {
     readonly cwd: string;
     readonly signal: AbortSignal;
 }
-export interface PythonPackagePrepareContext extends PythonPackageContext {
+export interface PythonPackagePrepareContext extends PythonPackageContext, PythonPackageInstallOptions, Partial<Pick<import("../safe-bash-contracts/index.js").CommandContext, 'env' | 'stdout' | 'stderr' | 'registerCleanup'>> {
+    readonly uninstall?: PythonPackageStart['uninstall'];
     readonly requirements?: readonly string[];
     readonly requirementFiles?: readonly string[];
     readonly offline?: boolean;
@@ -47,7 +75,7 @@ export interface PythonPackagePrepareContext extends PythonPackageContext {
 export interface PythonPackageEnvironment {
     prepare(context: PythonPackagePrepareContext): Promise<PythonPackageStart>;
     dispatch(operation: string, args: unknown[], context: PythonPackageContext): Promise<unknown>;
-    finish(start: PythonPackageStart): void;
+    finish(start: PythonPackageStart): void | Promise<void>;
     dispose(): Promise<void>;
 }
 export declare const pythonDocumentPackages: readonly string[];

package/dist/safe-bash-command-python/provisioning.js

@@ -1,7 +1,7 @@
 import {
   createPythonPackageEnvironment,
   pythonDocumentPackages
-} from "../safe-bash/command-chunks/chunk-R4NPYXQX.js";
+} from "../safe-bash/command-chunks/chunk-WDTWJFPK.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createPythonPackageEnvironment,

package/dist/safe-bash-command-python/source-environment.d.ts

@@ -0,0 +1,9 @@
+import { type PythonPackageOptions } from './provisioning.js';
+import type { PythonCommandsOptions } from './executor.js';
+export interface PythonSourceBuildOptions {
+    /** Existing caller-owned directory for build staging and durable wheels. */
+    readonly directory: string;
+    readonly python: Omit<PythonCommandsOptions, 'packages' | 'requirements' | 'packageProfile' | 'provisioning' | 'environment'>;
+}
+/** Package environment that builds local PEP 517 projects before normal installation. */
+export declare function createPythonSourcePackageEnvironment(options: PythonPackageOptions, build: PythonSourceBuildOptions): import("./provisioning.js").PythonPackageEnvironment;

package/dist/safe-bash-command-python/source-snapshot.d.ts

@@ -0,0 +1,8 @@
+import { type CommandContext } from "../safe-bash-contracts/index.js";
+export interface PythonSourceSnapshot {
+    readonly path: string;
+    /** Retires only the owned tree; substituted identities are never removed. */
+    dispose(): Promise<void>;
+}
+/** Copy a build tree into caller storage using pip 21.2.4's directory policy. */
+export declare function createPythonSourceSnapshot(source: string, directory: string, context: CommandContext): Promise<PythonSourceSnapshot>;

package/dist/safe-bash-command-python/worker.js

@@ -1,4 +1,5 @@
 import {
+  installPythonPackages,
   parsePythonInvocation,
   pythonDirectoryEntries,
   pythonExecution,
@@ -7,7 +8,7 @@ import {
   pythonRuntimeRelocation,
   pythonStatProjection,
   pythonTreeCleanup
-} from "../safe-bash/command-chunks/chunk-5EFNQ6FY.js";
+} from "../safe-bash/command-chunks/chunk-64HIOP7Q.js";
 import {
   PythonFailure
 } from "../safe-bash/command-chunks/chunk-TO6UNFEF.js";
@@ -15,189 +16,6 @@ import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-command-python/src/worker.ts
 import { mountPythonFileSystem } from "@poe-platform/safe-fs/core";
-
-// packages/safe-bash-command-python/src/provisioning-runtime.ts
-async function installPythonPackages(supplied, start, request, maxTransferBytes) {
-  if (start.requirements.length === 0) return;
-  const runtime = supplied;
-  if (runtime.version !== "314.0.6" || !runtime._api?.packageManager || !runtime._api.lockfile_packages || typeof runtime.loadPackage !== "function" || typeof runtime.runPythonAsync !== "function") throw new Error("Python package installer ABI requires Pyodide 314.0.6");
-  let transportFailure;
-  const fetch = (url, expected) => {
-    try {
-      const opened = request("package-open", start.session, url, expected);
-      try {
-        const bytes = new Uint8Array(opened.size);
-        for (let offset = 0; offset < bytes.length; ) {
-          const chunk = request("package-read", start.session, opened.key, offset, Math.min(maxTransferBytes, 65536, bytes.length - offset));
-          if (!Array.isArray(chunk) || chunk.length === 0 || offset + chunk.length > bytes.length) throw new Error("Invalid Python package chunk");
-          bytes.set(chunk, offset);
-          offset += chunk.length;
-        }
-        return { bytes, headers: opened.headers };
-      } finally {
-        request("package-close", start.session, opened.key);
-      }
-    } catch (error) {
-      transportFailure ??= { error };
-      throw error;
-    }
-  };
-  runtime._api.packageManager.downloadPackage = async (metadata) => {
-    if (metadata.channel === runtime._api.packageManager.defaultChannel) {
-      const pkg = runtime._api.lockfile_packages[metadata.normalizedName];
-      if (!pkg) throw new Error(`Missing matching Pyodide package: ${metadata.normalizedName}`);
-      return fetch(new URL(pkg.file_name, "https://cdn.jsdelivr.net/pyodide/v314.0.6/full/").href, pkg.sha256).bytes;
-    }
-    return fetch(metadata.channel).bytes;
-  };
-  const loadPackages = async (names) => {
-    const errors = [];
-    await runtime.loadPackage(names, { messageCallback() {
-    }, errorCallback(message) {
-      errors.push(message);
-    } });
-    if (errors.length) throw new Error(errors.join("\n"));
-  };
-  const installedGlobals = [];
-  try {
-    await loadPackages(["micropip"]);
-    runtime.globals.set("_safe_package_native", loadPackages);
-    installedGlobals.push("_safe_package_native");
-    runtime.globals.set("_safe_package_bytes", (url, hash) => fetch(url, hash).bytes);
-    installedGlobals.push("_safe_package_bytes");
-    runtime.globals.set("_safe_package_metadata", (url) => {
-      const result = fetch(url);
-      return JSON.stringify({ text: new TextDecoder().decode(result.bytes), headers: Object.fromEntries(result.headers.map(([name, value]) => [name.toLowerCase(), value])) });
-    });
-    installedGlobals.push("_safe_package_metadata");
-    runtime.globals.set("_safe_package_requirements_json", JSON.stringify(start.requirements));
-    installedGlobals.push("_safe_package_requirements_json");
-    await runtime.runPythonAsync(`
-import json as _safe_json
-import micropip as _safe_micropip
-from micropip._compat import compatibility_layer as _safe_compat
-from micropip.package_manager import PackageManager as _SafePackageManager
-from micropip.wheelinfo import WheelInfo as _SafeWheelInfo
-from micropip._utils import check_compatible as _safe_check_compatible
-from micropip._vendored.packaging.src.packaging.requirements import Requirement as _SafeRequirement, InvalidRequirement as _SafeInvalidRequirement
-from micropip._vendored.packaging.src.packaging.utils import canonicalize_name as _safe_name
-
-class _SafePackageCompatibility(_safe_compat):
- @staticmethod
- async def loadPackage(names):
-  return await _safe_package_native(names)
- @staticmethod
- async def fetch_bytes(url, kwargs):
-  return _safe_package_bytes(url).to_bytes()
- @staticmethod
- async def fetch_string_and_headers(url, kwargs):
-  value = _safe_json.loads(_safe_package_metadata(url))
-  return value['text'], value['headers']
-
-# Require index/URL digests before publishing wheel bytes to the host cache.
-# Local wheels are host-trusted inputs and receive a content digest on first read.
-async def _safe_wheel_fetch(self, url, kwargs, compat):
- expected = self.sha256 if url == self.url else None
- if url == self.metadata_url and isinstance(self.core_metadata, dict):
-  expected = self.core_metadata.get('sha256')
- return _safe_package_bytes(url, expected).to_bytes()
-_SafeWheelInfo._fetch_bytes = _safe_wheel_fetch
-_safe_manager = _SafePackageManager(_SafePackageCompatibility)
-_safe_requirements = _safe_json.loads(_safe_package_requirements_json)
-# A persisted base wheel may be visited before a newly requested extra. Micropip
-# skips already locked names, so every occurrence must carry the requested extras.
-_safe_roots = []
-_safe_extras = {}
-for _safe_source in _safe_requirements:
- try:
-  _safe_root = _SafeRequirement(_safe_source)
-  if _safe_root.name.endswith('.whl'):
-   raise _SafeInvalidRequirement(_safe_source)
- except _SafeInvalidRequirement:
-  _safe_wheel = _SafeWheelInfo.from_url(_safe_source)
-  _safe_root = _SafeRequirement(_safe_wheel.name + ' @ ' + _safe_source)
- _safe_roots.append(_safe_root)
- if not _safe_root.marker or _safe_root.marker.evaluate({'extra': ''}):
-  # Named requirements may be skipped when already locked. Validate direct
-  # wheels even then, rather than letting an incompatible URL report success.
-  if _safe_root.url:
-   _safe_direct_wheel = _SafeWheelInfo.from_url(_safe_root.url)
-   _safe_check_compatible(_safe_direct_wheel.filename)
-   # Validate the actual archive and host-checked digest even if micropip's
-   # satisfied-name fast path will skip installing this explicit operand.
-   await _safe_direct_wheel.download({}, _SafePackageCompatibility)
-  _safe_extras.setdefault(_safe_name(_safe_root.name), set()).update(_safe_root.extras)
-for _safe_root in _safe_roots:
- _safe_root.extras.update(_safe_extras.get(_safe_name(_safe_root.name), set()))
-await _safe_manager.install([str(root) for root in _safe_roots], deps=True)
-# Resolve selected extras from distribution metadata, including extras added to
-# an already satisfied transitive dependency. Micropip skips those names early.
-# Keep its installer and conflict policy; do not infer dependencies from imports.
-import importlib.metadata as _safe_metadata
-_safe_previous_pending = None
-while True:
- _safe_distributions = [d for d in _safe_metadata.distributions() if d.metadata['Name']]
- _safe_versions = {_safe_name(d.metadata['Name']): d.version for d in _safe_distributions}
- while True:
-  _safe_changed = False
-  _safe_dependencies = []
-  for _safe_dist in _safe_distributions:
-   _safe_contexts = {''} | _safe_extras.get(_safe_name(_safe_dist.metadata['Name']), set())
-   for _safe_dep in _safe_dist.requires or []:
-    _safe_requirement = _SafeRequirement(_safe_dep)
-    if _safe_requirement.marker and not any(_safe_requirement.marker.evaluate({'extra': extra}) for extra in _safe_contexts):
-     continue
-    # The marker belongs to the requesting distribution's extra context, already
-    # evaluated above; a separate installer transaction must not reinterpret it.
-    _safe_requirement.marker = None
-    _safe_dependencies.append(_safe_requirement)
-    _safe_selected = _safe_extras.setdefault(_safe_name(_safe_requirement.name), set())
-    if not _safe_requirement.extras.issubset(_safe_selected):
-     _safe_selected.update(_safe_requirement.extras)
-     _safe_changed = True
-  if not _safe_changed:
-   break
- _safe_pending = set()
- for _safe_requirement in _safe_dependencies:
-  _safe_version = _safe_versions.get(_safe_name(_safe_requirement.name))
-  if _safe_version is None:
-   _safe_pending.add(str(_safe_requirement))
-  elif not _safe_requirement.specifier.contains(_safe_version, prereleases=True):
-   raise ValueError('Python package dependency conflict: ' + str(_safe_requirement))
- if not _safe_pending:
-  break
- if _safe_pending == _safe_previous_pending:
-  raise ValueError('Python package dependencies remain missing: ' + ', '.join(sorted(_safe_pending)))
- _safe_previous_pending = _safe_pending
- await _safe_manager.install(sorted(_safe_pending), deps=True)
-# Explicit roots also constrain the result: direct URLs can bypass micropip's
-# already-installed version check, including when another root pins that name.
-for _safe_root in _safe_roots:
- if _safe_root.marker and not _safe_root.marker.evaluate({'extra': ''}):
-  continue
- _safe_version = _safe_versions.get(_safe_name(_safe_root.name))
- if _safe_version is None or not _safe_root.specifier.contains(_safe_version, prereleases=True):
-  raise ValueError('Python package version conflict: ' + str(_safe_root))
- if _safe_root.url:
-  _safe_wheel = _SafeWheelInfo.from_url(_safe_root.url)
-  _safe_wheel_pin = _SafeRequirement(_safe_wheel.name + '==' + str(_safe_wheel.version))
-  if _safe_name(_safe_wheel.name) != _safe_name(_safe_root.name) or not _safe_wheel_pin.specifier.contains(_safe_version, prereleases=True):
-   raise ValueError('Python package wheel version conflict: ' + str(_safe_root))
-_safe_installed_json = _safe_json.dumps([name + '==' + version for name, version in sorted(_safe_versions.items())])
-`);
-    const pinned = JSON.parse(runtime.runPython("_safe_installed_json"));
-    request("package-commit", start.session, pinned);
-  } catch (error) {
-    throw transportFailure ? transportFailure.error : error;
-  } finally {
-    runtime._api.packageManager.downloadPackage = async () => {
-      throw new Error("Python package transport is only available during installation");
-    };
-    for (const name of installedGlobals) runtime.globals.delete(name);
-  }
-}
-
-// packages/safe-bash-command-python/src/worker.ts
 function createPythonWorkerRequest(shared, postMessage, error) {
   let control;
   let payload;
@@ -329,7 +147,7 @@ async function runPythonWorker(options) {
     if ("loadPackage" in publicRuntime) publicRuntime.loadPackage = unavailablePackage;
     if (publicRuntime._api?.packageManager) publicRuntime._api.packageManager.downloadPackage = unavailablePackage;
     if (start.installOnly) {
-      startupWrite("stdout", "Successfully installed requested Python packages");
+      if (!start.packages?.uninstall) startupWrite("stdout", "Successfully installed requested Python packages");
       postMessage({ type: "exit", exitCode: 0 });
       return;
     }

package/dist/safe-bash-csv-engine/index.js

@@ -1,6 +1,6 @@
 import {
   PythonTextDecoder
-} from "../safe-bash/command-chunks/chunk-GRFJKJFN.js";
+} from "../safe-bash/command-chunks/chunk-AVSINNZ6.js";
 import "../safe-bash/command-chunks/chunk-OLXMWQJ5.js";
 import "../safe-bash/command-chunks/chunk-OOYVZAWL.js";
 import "../safe-bash/command-chunks/chunk-ZERCTWUI.js";

package/dist/safe-bash-csv-engine/python-iso2022.d.ts

@@ -0,0 +1,21 @@
+export declare const pythonIso2022Charsets: Readonly<Record<string, readonly number[]>>;
+export declare class PythonIso2022PendingError extends Error {
+    constructor();
+}
+/** Bounded ISO-2022 designation and shift state, with existing Python mappings. */
+export declare class PythonIso2022Decoder {
+    private readonly encoding;
+    private readonly groups;
+    private shifted;
+    private through;
+    private pending;
+    private readonly maps;
+    constructor(encoding: string);
+    private invalid;
+    private character;
+    private secondary;
+    private escape;
+    decode(bytes?: Uint8Array, options?: {
+        stream?: boolean;
+    }): string;
+}

package/dist/safe-bash-csv-engine/python-utf7.d.ts

@@ -0,0 +1,18 @@
+export declare class PythonUtf7EncodingError extends TypeError {
+    constructor();
+}
+/** File-oriented UTF-7 decoding. Completed units can be staged before the shift
+ * ends; callers must discard that staging if decoding or final UTF8 admission fails.
+ * Unlike Python's incremental codec, this never retains an entire shifted segment. */
+export declare class PythonUtf7FileDecoder {
+    private shifted;
+    private haveSextet;
+    private bits;
+    private value;
+    private high;
+    private loneSurrogate;
+    private unit;
+    decode(bytes?: Uint8Array, options?: {
+        stream?: boolean;
+    }): string;
+}

package/dist/safe-bash-csv-engine/text-decoder.d.ts

@@ -1,3 +1,5 @@
+export { PythonUtf7EncodingError } from "./python-utf7.js";
+export { PythonIso2022PendingError } from "./python-iso2022.js";
 export { PythonTextDecodeError } from "./python-codepages.js";
 export declare class PythonTextDecoder {
     readonly encoding: string;

package/dist/safe-bash-csv-engine/text-decoder.js

@@ -1,6 +1,8 @@
 import {
-  PythonTextDecoder
-} from "../safe-bash/command-chunks/chunk-GRFJKJFN.js";
+  PythonIso2022PendingError,
+  PythonTextDecoder,
+  PythonUtf7EncodingError
+} from "../safe-bash/command-chunks/chunk-AVSINNZ6.js";
 import "../safe-bash/command-chunks/chunk-OLXMWQJ5.js";
 import {
   PythonTextDecodeError
@@ -10,6 +12,8 @@ import "../safe-bash/command-chunks/chunk-WIUEM7HP.js";
 import "../safe-bash/command-chunks/chunk-HNEWGADJ.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
+  PythonIso2022PendingError,
   PythonTextDecodeError,
-  PythonTextDecoder
+  PythonTextDecoder,
+  PythonUtf7EncodingError
 };

package/dist/safe-bash-zip-engine/index.js

@@ -9,7 +9,7 @@ import {
   streamZipArchive,
   updateZipExtras,
   writeZipArchive
-} from "../safe-bash/command-chunks/chunk-ZSHXZ3XG.js";
+} from "../safe-bash/command-chunks/chunk-3EAZRKI4.js";
 import "../safe-bash/command-chunks/chunk-FVQFB7OD.js";
 import "../safe-bash/command-chunks/chunk-3I3PD6VU.js";
 import "../safe-bash/command-chunks/chunk-CFK5CVU7.js";

package/dist/safe-bash-zip-engine/zip/repair.js

@@ -8,7 +8,7 @@ import {
   decodeZipEntry,
   readZipArchive,
   readZipIndexedArchive
-} from "../../safe-bash/command-chunks/chunk-ZSHXZ3XG.js";
+} from "../../safe-bash/command-chunks/chunk-3EAZRKI4.js";
 import {
   ZipRanges,
   joinZipSources,

package/dist/safe-bash-zip-engine/zip/sfx.js

@@ -2,7 +2,7 @@ import {
   decodeZipEntry,
   readZipArchive,
   readZipIndexedArchive
-} from "../../safe-bash/command-chunks/chunk-ZSHXZ3XG.js";
+} from "../../safe-bash/command-chunks/chunk-3EAZRKI4.js";
 import {
   ZipRanges
 } from "../../safe-bash/command-chunks/chunk-FVQFB7OD.js";

package/dist/safe-bash-zip-engine/zip-format.d.ts

@@ -64,10 +64,12 @@ export interface ZipArchive {
     }>) => void;
 }
 export declare function crc32(bytes: Uint8Array, previous?: number): number;
-type ZipReadProfile = Readonly<{
+export type ZipReadProfile = Readonly<{
     grow?: boolean;
     prefix?: boolean;
     disks?: ZipDisks;
+    /** Accept unused local records and gaps, as Python wheel readers do; referenced spans still cannot overlap. */
+    allowUnreferencedData?: boolean;
 }>;
 /** Explicit buffered compatibility API. Commands use readZipIndexedArchive instead. */
 export declare function readZipArchive(input: Uint8Array | ZipReadSource, limits: ArchiveLimits, signal: AbortSignal, profile?: ZipReadProfile): Promise<ZipArchive>;

package/dist/safe-bash-zip-engine/zip-format.js

@@ -9,7 +9,7 @@ import {
   streamZipArchive,
   updateZipExtras,
   writeZipArchive
-} from "../safe-bash/command-chunks/chunk-ZSHXZ3XG.js";
+} from "../safe-bash/command-chunks/chunk-3EAZRKI4.js";
 import "../safe-bash/command-chunks/chunk-FVQFB7OD.js";
 import "../safe-bash/command-chunks/chunk-3I3PD6VU.js";
 import "../safe-bash/command-chunks/chunk-CFK5CVU7.js";

package/dist/safe-playwright-cloudflare/shell-browser-resource.d.ts

@@ -21,7 +21,7 @@ export declare function acquireCloudflareBrowser(options: {
     interrupt(): Promise<void>;
     release: () => Promise<void>;
 }>;
-/** Concurrent cleanup paths share one deletion and the same provider outcome. */
+/** Share in-flight deletion and retain success; settled failures permit retry. */
 export declare function createCloudflareBrowserRelease(options: {
     binding: BrowserWorker;
     sessionId: string;