@poe-platform/safe-bash 0.1.822 → 0.1.824

package/dist/safe-bash-command-python/source-archive.js

@@ -0,0 +1,136 @@
+import {
+  extractPythonSourceZip,
+  extractPythonSourceZipFile,
+  pythonSourceZipSize,
+  splitPythonSourcePath
+} from "../safe-bash/command-chunks/chunk-LKAFLJ5L.js";
+import {
+  openPythonPackageFile
+} from "../safe-bash/command-chunks/chunk-NXCJNPL3.js";
+import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
+
+// packages/safe-bash-command-python/src/source-archive.ts
+import { resolvePath, dirname } from "../safe-bash-contracts/path.js";
+import { readArchive } from "../safe-bash-command-tar/extract.js";
+import { parseOptions } from "../safe-bash-command-tar/options.js";
+import { autodetected } from "../safe-bash-command-tar/stream.js";
+import { Budget, DEFAULT_ARCHIVE_LIMITS } from "../safe-bash-io-engine/commands/archive/internal.js";
+async function extractPythonSourceArchive(source, directory, maxBytes, context, metadata) {
+  const filename = metadata?.filename ?? source;
+  if (metadata?.contentType === "application/zip" || [".zip", ".whl"].some((suffix) => filename.toLowerCase().endsWith(suffix))) return extractPythonSourceZip(source, directory, maxBytes, context, metadata);
+  const { fs, signal } = context, settings = { signal };
+  if (maxBytes !== Infinity && (!Number.isSafeInteger(maxBytes) || maxBytes < 0)) throw new RangeError("Invalid Python source archive size limit");
+  if (!fs.confineExtraction || !fs.writeStream) throw new Error("Python tar sources require confined streaming writes");
+  const input = await openPythonPackageFile(context, source, maxBytes);
+  if (!input) throw new Error("Python tar sources require retained reads");
+  let failed = false, primary, zipSize;
+  try {
+    zipSize = await pythonSourceZipSize(input);
+    if (zipSize === void 0) {
+      const destination = await fs.confineExtraction([directory], settings);
+      const limits = DEFAULT_ARCHIVE_LIMITS;
+      const command = { ...context, args: ["-tf", "-"], cwd: directory };
+      const options = await parseOptions(command, limits);
+      if (options === "help") throw new Error("Invalid source tar options");
+      const stream = async function* () {
+        for (let offset = 0; offset < input.size; ) {
+          const bytes = await input.read(offset, 65536);
+          offset += bytes.length;
+          yield bytes;
+        }
+      };
+      let prefix, flatten = true, members = 0;
+      await readArchive(command, autodetected(stream(), signal, limits), options, new Budget(command, limits), { async member(entry, reader) {
+        members++;
+        const [part] = splitPythonSourcePath(entry.name);
+        if (!part || prefix !== void 0 && part !== prefix) flatten = false;
+        prefix ??= part;
+        await reader.discard(entry.size);
+      } });
+      const target = (name) => {
+        const path = resolvePath(directory, flatten ? splitPythonSourcePath(name)[1] : name);
+        if (path !== directory && !path.startsWith(directory + "/")) throw new Error("Source tar member escapes the build directory");
+        return path;
+      };
+      const write = async (path, bytes, mode) => {
+        let finished = false;
+        const observed = (async function* () {
+          yield* bytes;
+          finished = true;
+        })();
+        try {
+          await destination.writeStream(path, observed, { flag: "w", mode: 420, signal });
+          if (!finished) throw new Error("Source tar write ended before consuming its member");
+        } finally {
+          await observed.return(void 0);
+        }
+        if (mode & 73) {
+          if (!destination.chmod) throw new Error("Source tar executables require permissions support");
+          await destination.chmod(path, 493, settings);
+        }
+      };
+      const copyLink = async (name, before, path, mode) => {
+        for (let step = 0; step <= members; step++) {
+          let matched;
+          await readArchive(command, autodetected(stream(), signal, limits), options, new Budget(command, limits), { async member(entry, reader, _selected, _root, start) {
+            if (entry.name === name && start < before) matched = { entry, start, body: reader.position };
+            await reader.discard(entry.size);
+          } });
+          if (!matched) throw new Error("Source tar link target was not found");
+          const selected = matched;
+          if (selected.entry.type === "0") {
+            await readArchive(command, autodetected(stream(), signal, limits), options, new Budget(command, limits), { async member(entry, reader) {
+              if (reader.position === selected.body) await write(path, reader.body(entry.size), mode);
+              else await reader.discard(entry.size);
+            } });
+            return;
+          }
+          if (selected.entry.type === "1") {
+            name = selected.entry.linkname;
+            before = selected.start;
+          } else if (selected.entry.type === "2") {
+            name = resolvePath("/", dirname(selected.entry.name), selected.entry.linkname).slice(1);
+            before = Infinity;
+          } else throw new Error("Source tar link target is not a file");
+        }
+        throw new Error("Source tar link cycle");
+      };
+      await readArchive(command, autodetected(stream(), signal, limits), options, new Budget(command, limits), { async member(entry, reader, _selected, _root, start) {
+        const path = target(entry.name);
+        if (entry.type === "5") {
+          await destination.mkdir(path, { recursive: true, mode: 493, signal });
+          return;
+        }
+        await destination.mkdir(dirname(path), { recursive: true, mode: 493, signal });
+        if (entry.type === "2") {
+          const link = resolvePath(dirname(path), entry.linkname);
+          if (link !== directory && !link.startsWith(directory + "/")) throw new Error("Source tar symlink escapes the build directory");
+          if (!destination.symlink) throw new Error("Source tar links require symlink support");
+          await destination.rm(path, { force: true, signal });
+          await destination.symlink(entry.linkname, path, settings);
+          return;
+        }
+        if (entry.type === "1") await copyLink(entry.linkname, start, path, entry.mode);
+        else await write(path, reader.body(entry.size), entry.mode);
+        if (entry.mtime !== void 0) {
+          if (!destination.utimes) throw new Error("Source tar files require timestamp support");
+          await destination.utimes(path, entry.mtime * 1e3, entry.mtime * 1e3, settings);
+        }
+      } });
+    }
+  } catch (error) {
+    primary = error;
+    failed = true;
+  }
+  if (!failed && zipSize !== void 0) return extractPythonSourceZipFile(input, directory, maxBytes, context, zipSize, !filename.endsWith(".whl"));
+  try {
+    await input.close();
+  } catch (error) {
+    if (failed) throw new AggregateError([primary, error], "Python source tar cleanup failed");
+    throw error;
+  }
+  if (failed) throw primary;
+}
+export {
+  extractPythonSourceArchive
+};

package/dist/safe-bash-command-python/source-environment.d.ts

@@ -0,0 +1,12 @@
+import { type PythonPackageOptions } from './provisioning.js';
+import type { extractPythonSourceZip } from './source-zip.js';
+import type { PythonCommandsOptions } from './executor.js';
+export interface PythonSourceBuildOptions {
+    /** Existing caller-owned directory for build staging and durable wheels. */
+    readonly directory: string;
+    /** Optional caller-selected archive implementation; omitted hosts support source directories. */
+    readonly extractArchive?: typeof extractPythonSourceZip;
+    readonly python: Omit<PythonCommandsOptions, 'packages' | 'requirements' | 'packageProfile' | 'provisioning' | 'environment'>;
+}
+/** Package environment that builds local PEP 517 and legacy setup projects before normal installation. */
+export declare function createPythonSourcePackageEnvironment(options: PythonPackageOptions, build: PythonSourceBuildOptions): import("./provisioning.js").PythonPackageEnvironment;

package/dist/safe-bash-command-python/source-snapshot.d.ts

@@ -0,0 +1,8 @@
+import { type CommandContext } from "../safe-bash-contracts/index.js";
+export interface PythonSourceSnapshot {
+    readonly path: string;
+    /** Retires only the owned tree; substituted identities are never removed. */
+    dispose(): Promise<void>;
+}
+/** Copy a build tree into caller storage using pip 21.2.4's directory policy. */
+export declare function createPythonSourceSnapshot(source: string, directory: string, context: CommandContext): Promise<PythonSourceSnapshot>;

package/dist/safe-bash-command-python/source-zip.d.ts

@@ -0,0 +1,8 @@
+import type { CommandContext } from "../safe-bash-contracts/index.js";
+export interface PythonSourceArchiveMetadata {
+    /** Native download filename; metadata only, never a staging path. */
+    readonly filename: string;
+    readonly contentType?: string;
+}
+/** Extract a source ZIP into an owned, confined build directory using pip's flattening policy. */
+export declare function extractPythonSourceZip(source: string, directory: string, maxBytes: number, context: CommandContext, metadata?: PythonSourceArchiveMetadata): Promise<void>;

package/dist/safe-bash-command-python/source-zip.js

@@ -0,0 +1,8 @@
+import {
+  extractPythonSourceZip
+} from "../safe-bash/command-chunks/chunk-LKAFLJ5L.js";
+import "../safe-bash/command-chunks/chunk-NXCJNPL3.js";
+import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
+export {
+  extractPythonSourceZip
+};

package/dist/safe-bash-command-python/worker.js

@@ -1,4 +1,5 @@
 import {
+  installPythonPackages,
   parsePythonInvocation,
   pythonDirectoryEntries,
   pythonExecution,
@@ -7,7 +8,7 @@ import {
   pythonRuntimeRelocation,
   pythonStatProjection,
   pythonTreeCleanup
-} from "../safe-bash/command-chunks/chunk-5EFNQ6FY.js";
+} from "../safe-bash/command-chunks/chunk-3EBQOZET.js";
 import {
   PythonFailure
 } from "../safe-bash/command-chunks/chunk-TO6UNFEF.js";
@@ -15,189 +16,6 @@ import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-command-python/src/worker.ts
 import { mountPythonFileSystem } from "@poe-platform/safe-fs/core";
-
-// packages/safe-bash-command-python/src/provisioning-runtime.ts
-async function installPythonPackages(supplied, start, request, maxTransferBytes) {
-  if (start.requirements.length === 0) return;
-  const runtime = supplied;
-  if (runtime.version !== "314.0.6" || !runtime._api?.packageManager || !runtime._api.lockfile_packages || typeof runtime.loadPackage !== "function" || typeof runtime.runPythonAsync !== "function") throw new Error("Python package installer ABI requires Pyodide 314.0.6");
-  let transportFailure;
-  const fetch = (url, expected) => {
-    try {
-      const opened = request("package-open", start.session, url, expected);
-      try {
-        const bytes = new Uint8Array(opened.size);
-        for (let offset = 0; offset < bytes.length; ) {
-          const chunk = request("package-read", start.session, opened.key, offset, Math.min(maxTransferBytes, 65536, bytes.length - offset));
-          if (!Array.isArray(chunk) || chunk.length === 0 || offset + chunk.length > bytes.length) throw new Error("Invalid Python package chunk");
-          bytes.set(chunk, offset);
-          offset += chunk.length;
-        }
-        return { bytes, headers: opened.headers };
-      } finally {
-        request("package-close", start.session, opened.key);
-      }
-    } catch (error) {
-      transportFailure ??= { error };
-      throw error;
-    }
-  };
-  runtime._api.packageManager.downloadPackage = async (metadata) => {
-    if (metadata.channel === runtime._api.packageManager.defaultChannel) {
-      const pkg = runtime._api.lockfile_packages[metadata.normalizedName];
-      if (!pkg) throw new Error(`Missing matching Pyodide package: ${metadata.normalizedName}`);
-      return fetch(new URL(pkg.file_name, "https://cdn.jsdelivr.net/pyodide/v314.0.6/full/").href, pkg.sha256).bytes;
-    }
-    return fetch(metadata.channel).bytes;
-  };
-  const loadPackages = async (names) => {
-    const errors = [];
-    await runtime.loadPackage(names, { messageCallback() {
-    }, errorCallback(message) {
-      errors.push(message);
-    } });
-    if (errors.length) throw new Error(errors.join("\n"));
-  };
-  const installedGlobals = [];
-  try {
-    await loadPackages(["micropip"]);
-    runtime.globals.set("_safe_package_native", loadPackages);
-    installedGlobals.push("_safe_package_native");
-    runtime.globals.set("_safe_package_bytes", (url, hash) => fetch(url, hash).bytes);
-    installedGlobals.push("_safe_package_bytes");
-    runtime.globals.set("_safe_package_metadata", (url) => {
-      const result = fetch(url);
-      return JSON.stringify({ text: new TextDecoder().decode(result.bytes), headers: Object.fromEntries(result.headers.map(([name, value]) => [name.toLowerCase(), value])) });
-    });
-    installedGlobals.push("_safe_package_metadata");
-    runtime.globals.set("_safe_package_requirements_json", JSON.stringify(start.requirements));
-    installedGlobals.push("_safe_package_requirements_json");
-    await runtime.runPythonAsync(`
-import json as _safe_json
-import micropip as _safe_micropip
-from micropip._compat import compatibility_layer as _safe_compat
-from micropip.package_manager import PackageManager as _SafePackageManager
-from micropip.wheelinfo import WheelInfo as _SafeWheelInfo
-from micropip._utils import check_compatible as _safe_check_compatible
-from micropip._vendored.packaging.src.packaging.requirements import Requirement as _SafeRequirement, InvalidRequirement as _SafeInvalidRequirement
-from micropip._vendored.packaging.src.packaging.utils import canonicalize_name as _safe_name
-
-class _SafePackageCompatibility(_safe_compat):
- @staticmethod
- async def loadPackage(names):
-  return await _safe_package_native(names)
- @staticmethod
- async def fetch_bytes(url, kwargs):
-  return _safe_package_bytes(url).to_bytes()
- @staticmethod
- async def fetch_string_and_headers(url, kwargs):
-  value = _safe_json.loads(_safe_package_metadata(url))
-  return value['text'], value['headers']
-
-# Require index/URL digests before publishing wheel bytes to the host cache.
-# Local wheels are host-trusted inputs and receive a content digest on first read.
-async def _safe_wheel_fetch(self, url, kwargs, compat):
- expected = self.sha256 if url == self.url else None
- if url == self.metadata_url and isinstance(self.core_metadata, dict):
-  expected = self.core_metadata.get('sha256')
- return _safe_package_bytes(url, expected).to_bytes()
-_SafeWheelInfo._fetch_bytes = _safe_wheel_fetch
-_safe_manager = _SafePackageManager(_SafePackageCompatibility)
-_safe_requirements = _safe_json.loads(_safe_package_requirements_json)
-# A persisted base wheel may be visited before a newly requested extra. Micropip
-# skips already locked names, so every occurrence must carry the requested extras.
-_safe_roots = []
-_safe_extras = {}
-for _safe_source in _safe_requirements:
- try:
-  _safe_root = _SafeRequirement(_safe_source)
-  if _safe_root.name.endswith('.whl'):
-   raise _SafeInvalidRequirement(_safe_source)
- except _SafeInvalidRequirement:
-  _safe_wheel = _SafeWheelInfo.from_url(_safe_source)
-  _safe_root = _SafeRequirement(_safe_wheel.name + ' @ ' + _safe_source)
- _safe_roots.append(_safe_root)
- if not _safe_root.marker or _safe_root.marker.evaluate({'extra': ''}):
-  # Named requirements may be skipped when already locked. Validate direct
-  # wheels even then, rather than letting an incompatible URL report success.
-  if _safe_root.url:
-   _safe_direct_wheel = _SafeWheelInfo.from_url(_safe_root.url)
-   _safe_check_compatible(_safe_direct_wheel.filename)
-   # Validate the actual archive and host-checked digest even if micropip's
-   # satisfied-name fast path will skip installing this explicit operand.
-   await _safe_direct_wheel.download({}, _SafePackageCompatibility)
-  _safe_extras.setdefault(_safe_name(_safe_root.name), set()).update(_safe_root.extras)
-for _safe_root in _safe_roots:
- _safe_root.extras.update(_safe_extras.get(_safe_name(_safe_root.name), set()))
-await _safe_manager.install([str(root) for root in _safe_roots], deps=True)
-# Resolve selected extras from distribution metadata, including extras added to
-# an already satisfied transitive dependency. Micropip skips those names early.
-# Keep its installer and conflict policy; do not infer dependencies from imports.
-import importlib.metadata as _safe_metadata
-_safe_previous_pending = None
-while True:
- _safe_distributions = [d for d in _safe_metadata.distributions() if d.metadata['Name']]
- _safe_versions = {_safe_name(d.metadata['Name']): d.version for d in _safe_distributions}
- while True:
-  _safe_changed = False
-  _safe_dependencies = []
-  for _safe_dist in _safe_distributions:
-   _safe_contexts = {''} | _safe_extras.get(_safe_name(_safe_dist.metadata['Name']), set())
-   for _safe_dep in _safe_dist.requires or []:
-    _safe_requirement = _SafeRequirement(_safe_dep)
-    if _safe_requirement.marker and not any(_safe_requirement.marker.evaluate({'extra': extra}) for extra in _safe_contexts):
-     continue
-    # The marker belongs to the requesting distribution's extra context, already
-    # evaluated above; a separate installer transaction must not reinterpret it.
-    _safe_requirement.marker = None
-    _safe_dependencies.append(_safe_requirement)
-    _safe_selected = _safe_extras.setdefault(_safe_name(_safe_requirement.name), set())
-    if not _safe_requirement.extras.issubset(_safe_selected):
-     _safe_selected.update(_safe_requirement.extras)
-     _safe_changed = True
-  if not _safe_changed:
-   break
- _safe_pending = set()
- for _safe_requirement in _safe_dependencies:
-  _safe_version = _safe_versions.get(_safe_name(_safe_requirement.name))
-  if _safe_version is None:
-   _safe_pending.add(str(_safe_requirement))
-  elif not _safe_requirement.specifier.contains(_safe_version, prereleases=True):
-   raise ValueError('Python package dependency conflict: ' + str(_safe_requirement))
- if not _safe_pending:
-  break
- if _safe_pending == _safe_previous_pending:
-  raise ValueError('Python package dependencies remain missing: ' + ', '.join(sorted(_safe_pending)))
- _safe_previous_pending = _safe_pending
- await _safe_manager.install(sorted(_safe_pending), deps=True)
-# Explicit roots also constrain the result: direct URLs can bypass micropip's
-# already-installed version check, including when another root pins that name.
-for _safe_root in _safe_roots:
- if _safe_root.marker and not _safe_root.marker.evaluate({'extra': ''}):
-  continue
- _safe_version = _safe_versions.get(_safe_name(_safe_root.name))
- if _safe_version is None or not _safe_root.specifier.contains(_safe_version, prereleases=True):
-  raise ValueError('Python package version conflict: ' + str(_safe_root))
- if _safe_root.url:
-  _safe_wheel = _SafeWheelInfo.from_url(_safe_root.url)
-  _safe_wheel_pin = _SafeRequirement(_safe_wheel.name + '==' + str(_safe_wheel.version))
-  if _safe_name(_safe_wheel.name) != _safe_name(_safe_root.name) or not _safe_wheel_pin.specifier.contains(_safe_version, prereleases=True):
-   raise ValueError('Python package wheel version conflict: ' + str(_safe_root))
-_safe_installed_json = _safe_json.dumps([name + '==' + version for name, version in sorted(_safe_versions.items())])
-`);
-    const pinned = JSON.parse(runtime.runPython("_safe_installed_json"));
-    request("package-commit", start.session, pinned);
-  } catch (error) {
-    throw transportFailure ? transportFailure.error : error;
-  } finally {
-    runtime._api.packageManager.downloadPackage = async () => {
-      throw new Error("Python package transport is only available during installation");
-    };
-    for (const name of installedGlobals) runtime.globals.delete(name);
-  }
-}
-
-// packages/safe-bash-command-python/src/worker.ts
 function createPythonWorkerRequest(shared, postMessage, error) {
   let control;
   let payload;
@@ -329,7 +147,7 @@ async function runPythonWorker(options) {
     if ("loadPackage" in publicRuntime) publicRuntime.loadPackage = unavailablePackage;
     if (publicRuntime._api?.packageManager) publicRuntime._api.packageManager.downloadPackage = unavailablePackage;
     if (start.installOnly) {
-      startupWrite("stdout", "Successfully installed requested Python packages");
+      if (!start.packages?.uninstall) startupWrite("stdout", "Successfully installed requested Python packages");
       postMessage({ type: "exit", exitCode: 0 });
       return;
     }

package/dist/safe-bash-command-safejs/index.js

@@ -1,16 +1,16 @@
 import {
   createSafeJsCommands
-} from "../safe-bash/command-chunks/chunk-QWHBQBPB.js";
-import "../safe-bash/command-chunks/chunk-YFZ6FPIC.js";
+} from "../safe-bash/command-chunks/chunk-EXDMIGZY.js";
 import "../safe-bash/command-chunks/chunk-K2R7H3KO.js";
+import {
+  defaultSafeJsLimits
+} from "../safe-bash/command-chunks/chunk-B4UWZCQR.js";
 import "../safe-bash/command-chunks/chunk-CZXYWGVO.js";
+import "../safe-bash/command-chunks/chunk-YFZ6FPIC.js";
 import "../safe-bash/command-chunks/chunk-PQOAM5SC.js";
 import {
   SafeJsCommandLimitError
 } from "../safe-bash/command-chunks/chunk-ABH5FMMA.js";
-import {
-  defaultSafeJsLimits
-} from "../safe-bash/command-chunks/chunk-B4UWZCQR.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   SafeJsCommandLimitError,

package/dist/safe-bash-command-safejs/runtime.js

@@ -1,12 +1,12 @@
 import {
   createSafeJsCommands
-} from "../safe-bash/command-chunks/chunk-QWHBQBPB.js";
-import "../safe-bash/command-chunks/chunk-YFZ6FPIC.js";
+} from "../safe-bash/command-chunks/chunk-EXDMIGZY.js";
 import "../safe-bash/command-chunks/chunk-K2R7H3KO.js";
+import "../safe-bash/command-chunks/chunk-B4UWZCQR.js";
 import "../safe-bash/command-chunks/chunk-CZXYWGVO.js";
+import "../safe-bash/command-chunks/chunk-YFZ6FPIC.js";
 import "../safe-bash/command-chunks/chunk-PQOAM5SC.js";
 import "../safe-bash/command-chunks/chunk-ABH5FMMA.js";
-import "../safe-bash/command-chunks/chunk-B4UWZCQR.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createSafeJsCommands

package/dist/safe-bash-command-ssconvert/index.js

@@ -10,7 +10,7 @@ import {
   gt,
   j,
   oe
-} from "../safe-bash/command-chunks/chunk-6PDXNY3T.js";
+} from "../safe-bash/command-chunks/chunk-RF5VEKFU.js";
 import {
   a,
   g,
@@ -32,6 +32,9 @@ import {
 import {
   p as p2
 } from "../safe-bash/command-chunks/chunk-4XWFUW5L.js";
+import {
+  r as r2
+} from "../safe-bash/command-chunks/chunk-RVEDPJRP.js";
 import {
   i as i2,
   o as o4
@@ -47,16 +50,13 @@ import {
   t as t2,
   x
 } from "../safe-bash/command-chunks/chunk-PFOVSF3U.js";
+import {
+  o as o3
+} from "../safe-bash/command-chunks/chunk-PYU5VF5I.js";
 import {
   a as a4,
   t as t4
 } from "../safe-bash/command-chunks/chunk-Y4RGZJIG.js";
-import {
-  r as r2
-} from "../safe-bash/command-chunks/chunk-RVEDPJRP.js";
-import {
-  o as o3
-} from "../safe-bash/command-chunks/chunk-PYU5VF5I.js";
 import {
   A,
   S,
@@ -719,7 +719,7 @@ var le;
 function wr(...u) {
   return le ??= V({ read: readZipArchiveEntries, write: createStoredZipArchive }), le(...u);
 }
-var H = de(async (u) => (await import("../safe-bash/command-chunks/engine-UPLVIV72-IGXUDNO5.js")).createEngine(u), true, wr);
+var H = de(async (u) => (await import("../safe-bash/command-chunks/engine-UPLVIV72-MSSFJLK4.js")).createEngine(u), true, wr);
 var Do = H.createSsconvertCommand;
 var To = H.createSsconvertCommands;
 var Uo = H.ssconvertCommands;

package/dist/safe-bash-compression-engine/bounded-codec.js

@@ -1,7 +1,7 @@
 import {
   boundedCodec
-} from "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
-import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
+} from "../safe-bash/command-chunks/chunk-CMJBRGU2.js";
+import "../safe-bash/command-chunks/chunk-ETFJ4L7F.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-V7IP2PFT.js";

package/dist/safe-bash-compression-engine/codec-loader.js

@@ -1,7 +1,7 @@
 import {
   createCodec,
   loadRawCodecFactory
-} from "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
+} from "../safe-bash/command-chunks/chunk-ETFJ4L7F.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-V7IP2PFT.js";

package/dist/safe-bash-compression-engine/files.js

@@ -4,12 +4,12 @@ import {
   unchangedSource,
   verifyOperandDestinations,
   writeFileOperand
-} from "../safe-bash/command-chunks/chunk-5NC2IQMQ.js";
-import "../safe-bash/command-chunks/chunk-ZRHKXN6W.js";
-import "../safe-bash/command-chunks/chunk-UVM6QG2H.js";
+} from "../safe-bash/command-chunks/chunk-EV7A5FNN.js";
+import "../safe-bash/command-chunks/chunk-7RQGRFHJ.js";
+import "../safe-bash/command-chunks/chunk-4MVQE6CT.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";
-import "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
-import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
+import "../safe-bash/command-chunks/chunk-CMJBRGU2.js";
+import "../safe-bash/command-chunks/chunk-ETFJ4L7F.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-LNWJHOR5.js";

package/dist/safe-bash-compression-engine/index.js

@@ -1,13 +1,13 @@
 import {
   DecodedBudget,
   transform
-} from "../safe-bash/command-chunks/chunk-ZRHKXN6W.js";
-import "../safe-bash/command-chunks/chunk-UVM6QG2H.js";
+} from "../safe-bash/command-chunks/chunk-7RQGRFHJ.js";
+import "../safe-bash/command-chunks/chunk-4MVQE6CT.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";
 import {
   boundedCodec
-} from "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
-import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
+} from "../safe-bash/command-chunks/chunk-CMJBRGU2.js";
+import "../safe-bash/command-chunks/chunk-ETFJ4L7F.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-LNWJHOR5.js";

package/dist/safe-bash-compression-engine/operand.js

@@ -2,14 +2,14 @@ import {
   sourceBytes,
   unchangedSource,
   writeFileOperand
-} from "../safe-bash/command-chunks/chunk-5NC2IQMQ.js";
+} from "../safe-bash/command-chunks/chunk-EV7A5FNN.js";
 import {
   transform
-} from "../safe-bash/command-chunks/chunk-ZRHKXN6W.js";
-import "../safe-bash/command-chunks/chunk-UVM6QG2H.js";
+} from "../safe-bash/command-chunks/chunk-7RQGRFHJ.js";
+import "../safe-bash/command-chunks/chunk-4MVQE6CT.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";
-import "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
-import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
+import "../safe-bash/command-chunks/chunk-CMJBRGU2.js";
+import "../safe-bash/command-chunks/chunk-ETFJ4L7F.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-LNWJHOR5.js";

package/dist/safe-bash-compression-engine/stream.js

@@ -3,11 +3,11 @@ import {
   chunkBytes,
   stagingLimit,
   transform
-} from "../safe-bash/command-chunks/chunk-ZRHKXN6W.js";
-import "../safe-bash/command-chunks/chunk-UVM6QG2H.js";
+} from "../safe-bash/command-chunks/chunk-7RQGRFHJ.js";
+import "../safe-bash/command-chunks/chunk-4MVQE6CT.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";
-import "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
-import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
+import "../safe-bash/command-chunks/chunk-CMJBRGU2.js";
+import "../safe-bash/command-chunks/chunk-ETFJ4L7F.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-LNWJHOR5.js";

package/dist/safe-bash-compression-engine/zstd-decode.js

@@ -1,9 +1,9 @@
 import {
   zstdDecode
-} from "../safe-bash/command-chunks/chunk-UVM6QG2H.js";
+} from "../safe-bash/command-chunks/chunk-4MVQE6CT.js";
 import "../safe-bash/command-chunks/chunk-52DDLGBS.js";
-import "../safe-bash/command-chunks/chunk-RUXY7GN5.js";
-import "../safe-bash/command-chunks/chunk-4Q4R3VZU.js";
+import "../safe-bash/command-chunks/chunk-CMJBRGU2.js";
+import "../safe-bash/command-chunks/chunk-ETFJ4L7F.js";
 import "../safe-bash/command-chunks/chunk-5AQAWIYK.js";
 import "../safe-bash/command-chunks/chunk-5T7WL5CN.js";
 import "../safe-bash/command-chunks/chunk-LNWJHOR5.js";

package/dist/safe-bash-csv-engine/index.js

@@ -1,6 +1,6 @@
 import {
   PythonTextDecoder
-} from "../safe-bash/command-chunks/chunk-4VHCA4KK.js";
+} from "../safe-bash/command-chunks/chunk-AVSINNZ6.js";
 import "../safe-bash/command-chunks/chunk-OLXMWQJ5.js";
 import "../safe-bash/command-chunks/chunk-OOYVZAWL.js";
 import "../safe-bash/command-chunks/chunk-ZERCTWUI.js";

package/dist/safe-bash-csv-engine/python-utf7.d.ts

@@ -0,0 +1,18 @@
+export declare class PythonUtf7EncodingError extends TypeError {
+    constructor();
+}
+/** File-oriented UTF-7 decoding. Completed units can be staged before the shift
+ * ends; callers must discard that staging if decoding or final UTF8 admission fails.
+ * Unlike Python's incremental codec, this never retains an entire shifted segment. */
+export declare class PythonUtf7FileDecoder {
+    private shifted;
+    private haveSextet;
+    private bits;
+    private value;
+    private high;
+    private loneSurrogate;
+    private unit;
+    decode(bytes?: Uint8Array, options?: {
+        stream?: boolean;
+    }): string;
+}

package/dist/safe-bash-csv-engine/text-decoder.d.ts

@@ -1,3 +1,4 @@
+export { PythonUtf7EncodingError } from "./python-utf7.js";
 export { PythonIso2022PendingError } from "./python-iso2022.js";
 export { PythonTextDecodeError } from "./python-codepages.js";
 export declare class PythonTextDecoder {

package/dist/safe-bash-csv-engine/text-decoder.js

@@ -1,7 +1,8 @@
 import {
   PythonIso2022PendingError,
-  PythonTextDecoder
-} from "../safe-bash/command-chunks/chunk-4VHCA4KK.js";
+  PythonTextDecoder,
+  PythonUtf7EncodingError
+} from "../safe-bash/command-chunks/chunk-AVSINNZ6.js";
 import "../safe-bash/command-chunks/chunk-OLXMWQJ5.js";
 import {
   PythonTextDecodeError
@@ -13,5 +14,6 @@ import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   PythonIso2022PendingError,
   PythonTextDecodeError,
-  PythonTextDecoder
+  PythonTextDecoder,
+  PythonUtf7EncodingError
 };