@poe-platform/safe-bash 0.1.824 → 0.1.826

package/dist/safe-bash-command-llm/collections.js

@@ -32,7 +32,7 @@ import {
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-command-llm/src/collections.ts
-import { FsError as FsError12 } from "../safe-bash-contracts/index.js";
+import { FsError as FsError13 } from "../safe-bash-contracts/index.js";
 import { transactSqlite, withSqliteStatement as withSqliteStatement8 } from "../safe-bash-sqlite-engine/storage.js";
 
 // packages/safe-bash-command-llm/src/collections-migrations.ts
@@ -615,7 +615,7 @@ async function similarCollection(editor, options) {
 }
 
 // packages/safe-bash-command-llm/src/collections-command.ts
-import { FsError as FsError11 } from "../safe-bash-contracts/index.js";
+import { FsError as FsError12 } from "../safe-bash-contracts/index.js";
 import { pathOf as pathOf3 } from "../safe-bash-contracts/path.js";
 
 // packages/safe-bash-command-llm/src/similar-command.ts
@@ -794,7 +794,7 @@ async function similarCommand(invocation, limits) {
 
 // packages/safe-bash-command-llm/src/embed-multi-command.ts
 import { pathOf as pathOf2 } from "../safe-bash-contracts/path.js";
-import { FsError as FsError10 } from "../safe-bash-contracts/index.js";
+import { FsError as FsError11 } from "../safe-bash-contracts/index.js";
 
 // packages/safe-bash-command-llm/src/import-csv.ts
 import { FsError as FsError6 } from "../safe-bash-contracts/index.js";
@@ -1294,8 +1294,108 @@ async function withEmbeddingFileGlob(options, source, operation) {
   }
 }
 
-// packages/safe-bash-command-llm/src/import-files.ts
+// packages/safe-bash-command-llm/src/import-sql.ts
 import { FsError as FsError9 } from "../safe-bash-contracts/index.js";
+import { withSqliteQueryRecords } from "../safe-bash-sqlite-engine/storage.js";
+async function withSqlEmbeddingEntries(options, operation) {
+  const { signal } = options, encoder = new TextEncoder();
+  return withSqliteQueryRecords(options, async (rows, columns) => {
+    const positions = /* @__PURE__ */ new Map();
+    for (let index = 0; index < columns.length; index++) positions.set(columns[index], index);
+    const selected = [...positions.values()];
+    const id = async (value) => {
+      if (value === null) return "None";
+      if (typeof value === "bigint") return String(value);
+      if (typeof value === "number") return Number.isFinite(value) ? floatText(value) : value > 0 ? "inf" : "-inf";
+      if (value.size > 65536) throw new RangeError("Embedding ID exceeds SQLite control byte limit");
+      if (value.type === "text") {
+        const decoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
+        let text2 = "";
+        for await (const bytes2 of value.bytes) text2 += decoder.decode(bytes2, { stream: true });
+        return text2 + decoder.decode();
+      }
+      const bytes = new Uint8Array(value.size);
+      let offset = 0;
+      for await (const part of value.bytes) {
+        bytes.set(part, offset);
+        offset += part.length;
+      }
+      const quote = bytes.includes(39) && !bytes.includes(34) ? 34 : 39;
+      let text = "b" + String.fromCharCode(quote);
+      for (const byte of bytes) {
+        text += byte === quote || byte === 92 ? "\\" + String.fromCharCode(byte) : byte === 9 ? "\\t" : byte === 10 ? "\\n" : byte === 13 ? "\\r" : byte >= 32 && byte < 127 ? String.fromCharCode(byte) : "\\x" + byte.toString(16).padStart(2, "0");
+        if (text.length > 65536) throw new RangeError("Embedding ID exceeds SQLite control byte limit");
+      }
+      return text + String.fromCharCode(quote);
+    };
+    const entries = async function* () {
+      for await (const row of rows) {
+        const values = selected.map((index) => row[index]);
+        if (!values.length) throw new RangeError("list index out of range");
+        const identifier = (options.prefix ?? "") + await id(values[0]);
+        if (encoder.encode(identifier).length > 65536) throw new RangeError("Embedding ID exceeds SQLite control byte limit");
+        const fields = values.slice(1);
+        for (let index = 0; index < fields.length; index++) {
+          const field = fields[index];
+          if (field === null || field === 0n || field === 0 || typeof field === "object" && field.size === 0) continue;
+          if (typeof field !== "object" || field.type !== "text") throw new TypeError("sequence item " + index + ": expected str instance, " + (typeof field === "bigint" ? "int" : typeof field === "number" ? "float" : "bytes") + " found");
+          const decoder = new TextDecoder("utf-8", { fatal: true });
+          for await (const bytes of field.bytes) decoder.decode(bytes, { stream: true });
+          decoder.decode();
+        }
+        let active = true, consumed = false;
+        try {
+          yield { id: identifier, input: { async dispose() {
+            active = false;
+          }, bytes: { async *[Symbol.asyncIterator]() {
+            const check = () => {
+              signal.throwIfAborted();
+              if (!active) throw new FsError9("EBADF", { message: "SQL row lease is closed" });
+            };
+            check();
+            if (consumed) throw new FsError9("EBADF", { message: "SQL row lease is closed" });
+            consumed = true;
+            const prefix = options.prepend ?? "";
+            for (let offset = 0; offset < prefix.length; ) {
+              check();
+              let end = Math.min(offset + 4096, prefix.length);
+              const last = prefix.charCodeAt(end - 1);
+              if (end < prefix.length && last >= 55296 && last <= 56319) end--;
+              const bytes = encoder.encode(prefix.slice(offset, end));
+              options.admit?.(bytes.length);
+              yield bytes;
+              offset = end;
+            }
+            for (let index = 0; index < fields.length; index++) {
+              check();
+              if (index) {
+                options.admit?.(1);
+                yield Uint8Array.of(32);
+              }
+              const field = fields[index];
+              if (field && typeof field === "object") for await (const bytes of field.bytes) {
+                check();
+                options.admit?.(bytes.length);
+                yield bytes;
+              }
+            }
+          } } } };
+        } finally {
+          active = false;
+        }
+      }
+    };
+    const iterator = entries();
+    try {
+      return await operation({ [Symbol.asyncIterator]: () => iterator });
+    } finally {
+      await iterator.return(void 0);
+    }
+  });
+}
+
+// packages/safe-bash-command-llm/src/import-files.ts
+import { FsError as FsError10 } from "../safe-bash-contracts/index.js";
 import { PythonTextDecoder, PythonTextDecodeError, PythonIso2022PendingError, PythonUtf7EncodingError } from "../safe-bash-csv-engine/text-decoder.js";
 async function withFileEmbeddingEntries(options, files, operation) {
   const { fs, directory, signal } = options, maxBytes = options.maxInputBytes ?? Infinity;
@@ -1374,11 +1474,11 @@ async function withFileEmbeddingEntries(options, files, operation) {
           closed = true;
           await retained.close();
         }, bytes: { async *[Symbol.asyncIterator]() {
-          if (closed || consumed) throw new FsError9("EBADF", { message: "File embedding lease is closed" });
+          if (closed || consumed) throw new FsError10("EBADF", { message: "File embedding lease is closed" });
           consumed = true;
           if (!binary && options.prepend) for (let offset = 0; offset < options.prepend.length; ) {
             signal.throwIfAborted();
-            if (closed) throw new FsError9("EBADF", { message: "File embedding lease is closed" });
+            if (closed) throw new FsError10("EBADF", { message: "File embedding lease is closed" });
             let end = Math.min(offset + 4096, options.prepend.length);
             const last = options.prepend.charCodeAt(end - 1);
             if (end < options.prepend.length && last >= 55296 && last <= 56319) end--;
@@ -1386,7 +1486,7 @@ async function withFileEmbeddingEntries(options, files, operation) {
             offset = end;
           }
           for await (const bytes of retained.replay()) {
-            if (closed) throw new FsError9("EBADF", { message: "File embedding lease is closed" });
+            if (closed) throw new FsError10("EBADF", { message: "File embedding lease is closed" });
             yield bytes;
           }
         } } } };
@@ -1516,7 +1616,7 @@ async function embedMultiCommand(invocation, limits) {
 `);
     return code;
   };
-  const values = {}, operands = [], encodings = [], files = [];
+  const values = {}, operands = [], encodings = [], attachments = [], files = [];
   let store = false, binary = false, ended = false, help3 = false;
   for (let index = 0; index < tokens.length; index++) {
     await step();
@@ -1548,6 +1648,12 @@ async function embedMultiCommand(invocation, limits) {
         binary = true;
         break;
       }
+      if (flag === "--attach") {
+        const alias = (equals < 0 ? void 0 : token.slice(equals + 1)) ?? tokens[++index], path = tokens[++index];
+        if (alias === void 0 || path === void 0) return fail("Option '--attach' requires 2 arguments.");
+        attachments.push({ alias, path: pathOf2(context, path), originalPath: path });
+        break;
+      }
       if (flag === "--files") {
         const directory = (equals < 0 ? void 0 : token.slice(equals + 1)) ?? tokens[++index], pattern = tokens[++index];
         if (directory === void 0 || pattern === void 0) return fail("Option '--files' requires 2 arguments.");
@@ -1555,7 +1661,7 @@ async function embedMultiCommand(invocation, limits) {
         files.push({ originalDirectory: directory, directory: pathOf2(context, directory), pattern, displayDirectory: (directory.startsWith("/") ? "/" : "") + normalized });
         break;
       }
-      const name2 = { "--encoding": "encoding", "--format": "format", "--batch-size": "batchSize", "--prefix": "prefix", "--prepend": "prepend", "-m": "model", "--model": "model", "-d": "database", "--database": "database" }[flag];
+      const name2 = { "--sql": "sql", "--encoding": "encoding", "--format": "format", "--batch-size": "batchSize", "--prefix": "prefix", "--prepend": "prepend", "-m": "model", "--model": "model", "-d": "database", "--database": "database" }[flag];
       if (!name2) return fail(`No such option: ${flag}`);
       const value = (long ? equals < 0 ? void 0 : token.slice(equals + 1) : token.slice(cursor + 1) || void 0) ?? tokens[++index];
       if (value === void 0) return fail(`Option '${flag}' requires an argument.`);
@@ -1565,21 +1671,28 @@ async function embedMultiCommand(invocation, limits) {
     }
   }
   if (help3) {
-    await invocation.write(new TextEncoder().encode(usage2 + "\n  Store embeddings from files or CSV, TSV, JSON or JSONL input. Use - to read stdin.\n\nOptions:\n  --files DIRECTORY GLOB     Files to embed (repeatable)\n  --encoding TEXT             File encoding (repeatable)\n  --binary                    Embed files as binary data\n  --format [json|csv|tsv|nl]  Input format (auto-detected by default)\n  --batch-size INTEGER        Batch size to use when running embeddings\n  --prefix TEXT               Prefix to add to the IDs\n  -m, --model TEXT            Embedding model to use\n  --prepend TEXT              Prepend this string to all content\n  --store                     Store the text itself in the database\n  -d, --database FILE         Path to embeddings database\n  -h, --help                  Show this message and exit.\n"));
+    await invocation.write(new TextEncoder().encode(usage2 + "\n  Store embeddings from files or CSV, TSV, JSON or JSONL input. Use - to read stdin.\n\nOptions:\n  --sql TEXT                  Read input using this SQL query\n  --attach TEXT FILE          Additional databases to attach (repeatable)\n  --files DIRECTORY GLOB     Files to embed (repeatable)\n  --encoding TEXT             File encoding (repeatable)\n  --binary                    Embed files as binary data\n  --format [json|csv|tsv|nl]  Input format (auto-detected by default)\n  --batch-size INTEGER        Batch size to use when running embeddings\n  --prefix TEXT               Prefix to add to the IDs\n  -m, --model TEXT            Embedding model to use\n  --prepend TEXT              Prepend this string to all content\n  --store                     Store the text itself in the database\n  -d, --database FILE         Path to embeddings database\n  -h, --help                  Show this message and exit.\n"));
     return 0;
   }
   if (!operands.length) return fail("Missing argument 'COLLECTION'.");
   if (operands.length > 2) return fail(`Got unexpected extra argument${operands.length === 3 ? "" : "s"} (${operands.slice(2).join(" ")})`);
+  for (const input2 of attachments) {
+    try {
+      if ((await context.fs.stat(input2.path, { signal: context.signal })).type === "directory") return fail(`Invalid value for '--attach': File '${input2.originalPath}' is a directory.`);
+    } catch (error) {
+      if (!(error instanceof FsError11) || error.code !== "ENOENT") throw error;
+    }
+  }
   if (binary && !files.length) return fail("--binary must be used with --files");
   if (binary && encodings.length) return fail("--binary cannot be used with --encoding");
-  if (!operands[1] && !files.length) return fail("Either --sql or input path or --files is required");
-  if (files.length && (operands[1] || values.format)) return fail("Cannot use --files with --sql, input path or --format");
+  if (!operands[1] && !files.length && !values.sql) return fail("Either --sql or input path or --files is required");
+  if (files.length && (operands[1] || values.sql || values.format)) return fail("Cannot use --files with --sql, input path or --format");
   if (operands[1] && operands[1] !== "-") {
     try {
       const stat = await context.fs.stat(pathOf2(context, operands[1]), { signal: context.signal });
       if (stat.type === "directory") return fail(`Invalid value for '[INPUT_PATH]': File '${operands[1]}' is a directory.`);
     } catch (error) {
-      if (error instanceof FsError10 && error.code === "ENOENT") return fail(`Invalid value for '[INPUT_PATH]': File '${operands[1]}' does not exist.`);
+      if (error instanceof FsError11 && error.code === "ENOENT") return fail(`Invalid value for '[INPUT_PATH]': File '${operands[1]}' does not exist.`);
       throw error;
     }
   }
@@ -1591,6 +1704,7 @@ async function embedMultiCommand(invocation, limits) {
   const config = createLlmConfiguration(context, maxConfigurationBytes), database = values.database || context.env.LLM_EMBEDDINGS_DB;
   if (!database) await context.fs.mkdir(config.directory, { recursive: true, signal: context.signal });
   const options = { ...limits, fs: context.fs, path: pathOf2(context, database || config.directory + "/embeddings.db"), signal: context.signal };
+  await prepareSqliteAttachments({ ...options, directory: context.cwd, attachments });
   const name = operands[0];
   let model = "";
   let missingModel = false;
@@ -1658,7 +1772,7 @@ async function embedMultiCommand(invocation, limits) {
           valid = (await context.fs.stat(file.directory, { signal: context.signal })).type === "directory";
         } catch (error) {
           context.signal.throwIfAborted();
-          if (!(error instanceof FsError10) || !["ENOENT", "ENOTDIR"].includes(error.code)) throw error;
+          if (!(error instanceof FsError11) || !["ENOENT", "ENOTDIR"].includes(error.code)) throw error;
         }
         if (!valid) throw new InvalidFileDirectory(file.originalDirectory);
         yield file;
@@ -1674,6 +1788,13 @@ async function embedMultiCommand(invocation, limits) {
     }
     return 0;
   }
+  if (values.sql) {
+    await withSqlEmbeddingEntries({ ...csvOptions, sql: values.sql, attachments, admit: invocation.admit }, async (entries) => {
+      await invocation.write(new TextEncoder().encode("Embedding\n"));
+      await consume(entries);
+    });
+    return 0;
+  }
   if (operands[1] !== "-") {
     const input2 = await acquire();
     try {
@@ -1797,7 +1918,7 @@ Try 'llm collections ${command} -h' for help.
       const stat = await context.fs.stat(path, { signal: context.signal });
       if (stat.type === "directory") return fail(`Invalid value for '-d' / '--database': File '${display}' is a directory.`, 2, true);
     } catch (error) {
-      if (!(error instanceof FsError11 && error.code === "ENOENT")) throw error;
+      if (!(error instanceof FsError12 && error.code === "ENOENT")) throw error;
       return fail(command === "list" ? `No collections table found in ${display}` : "Collection does not exist");
     }
     try {
@@ -1834,13 +1955,14 @@ Try 'llm collections ${command} -h' for help.
     } catch (error) {
       context.signal.throwIfAborted();
       if (error instanceof LlmCollectionDoesNotExist) return fail("Collection does not exist");
-      if (error instanceof FsError11 && error.code === "ENOENT") return fail(command === "list" ? `No collections table found in ${display}` : "Collection does not exist");
+      if (error instanceof FsError12 && error.code === "ENOENT") return fail(command === "list" ? `No collections table found in ${display}` : "Collection does not exist");
       throw error;
     }
   } };
 }
 
 // packages/safe-bash-command-llm/src/collections.ts
+import { prepareSqliteAttachments } from "../safe-bash-sqlite-engine/storage.js";
 var migrations = ["m001_create_tables", "m002_foreign_key", "m003_add_updated", "m004_store_content_hash", "m005_add_content_blob"];
 var schema = [
   "CREATE TABLE [_sqlite_migrations] ([migration_set] TEXT,[name] TEXT,[applied_at] TEXT,PRIMARY KEY ([migration_set],[name]))",
@@ -1855,7 +1977,7 @@ async function initialize(session, signal, now, create) {
     for await (const [name] of query.rows([], ["text"])) tables.push(name);
   });
   if (!tables.length) {
-    if (!create) throw new FsError12("ENOENT", { message: "Embedding collection database does not exist" });
+    if (!create) throw new FsError13("ENOENT", { message: "Embedding collection database does not exist" });
     await session.execute(schema[0].replace("CREATE TABLE", "CREATE TABLE IF NOT EXISTS"));
     for (const statement of schema.slice(1)) await session.execute(statement);
     const timestamp = now().toISOString().replace("T", " ").replace("Z", "000+00:00");
@@ -1877,10 +1999,10 @@ async function withLlmCollections(options, operation) {
   const execute = async (editor) => {
     let active = true, pending, failed = false, failure;
     const run = (action) => {
-      if (!active) return Promise.reject(new FsError12("EBADF", { message: "Collection catalog is closed" }));
+      if (!active) return Promise.reject(new FsError13("EBADF", { message: "Collection catalog is closed" }));
       if (pending) {
         failed = true;
-        failure = new FsError12("EBUSY", { message: "Collection operations must be serialized" });
+        failure = new FsError13("EBUSY", { message: "Collection operations must be serialized" });
         return Promise.reject(failure);
       }
       if (failed) return Promise.reject(failure);
@@ -1994,14 +2116,14 @@ async function withLlmCollections(options, operation) {
             if (settings.maxInputBytes !== Infinity && (!Number.isSafeInteger(settings.maxInputBytes) || settings.maxInputBytes < 0)) throw new RangeError("Invalid embedding input byte limit");
             let borrowed = true;
             const input = { dispose, bytes: { async *[Symbol.asyncIterator]() {
-              if (!borrowed || closing) throw new FsError12("EBADF", { message: "Similarity source lease is closed" });
+              if (!borrowed || closing) throw new FsError13("EBADF", { message: "Similarity source lease is closed" });
               const decoder = settings.binary ? void 0 : new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
               let size = 0;
               for await (const chunk of sourceBytes(settings.input.bytes, signal)) {
                 if (chunk.length > settings.maxInputBytes - size) throw new RangeError("Embedding input byte limit exceeded");
                 size += chunk.length;
                 for (let offset = 0; offset < chunk.length; offset += 16384) {
-                  if (!borrowed || closing) throw new FsError12("EBADF", { message: "Similarity source lease is closed" });
+                  if (!borrowed || closing) throw new FsError13("EBADF", { message: "Similarity source lease is closed" });
                   const bytes = chunk.subarray(offset, offset + 16384);
                   decoder?.decode(bytes, { stream: true });
                   yield bytes;
@@ -2058,10 +2180,12 @@ async function withLlmCollections(options, operation) {
 export {
   LlmCollectionDoesNotExist,
   createLlmCollectionCommands,
+  prepareSqliteAttachments,
   withCsvEmbeddingEntries,
   withEmbeddingFileGlob,
   withFileEmbeddingEntries,
   withJsonEmbeddingEntries,
   withJsonLinesEmbeddingEntries,
-  withLlmCollections
+  withLlmCollections,
+  withSqlEmbeddingEntries
 };

package/dist/safe-bash-command-llm/command.js

@@ -3,7 +3,7 @@ import {
   createLlmCommands,
   llmCommands,
   llmReferenceVersion
-} from "../safe-bash/command-chunks/chunk-PLVFJ6FF.js";
+} from "../safe-bash/command-chunks/chunk-4EA7WI3L.js";
 import "../safe-bash/command-chunks/chunk-EWECMOQ5.js";
 import "../safe-bash/command-chunks/chunk-7ZQVMPSB.js";
 import "../safe-bash/command-chunks/chunk-E5CDHXFA.js";

package/dist/safe-bash-command-llm/import-sql.d.ts

@@ -0,0 +1,9 @@
+import { withSqliteQueryRecords } from "../safe-bash-sqlite-engine/storage.js";
+import type { LlmCollectionBatchEntry } from './collections-batch.js';
+/** SQL rows preserve Python dictionary column ordering. Payloads remain borrowed
+ * caller-backed field streams; only the bounded collection ID is materialized. */
+export declare function withSqlEmbeddingEntries<T>(options: Parameters<typeof withSqliteQueryRecords>[0] & {
+    prefix?: string;
+    prepend?: string;
+    admit?: (bytes: number) => void;
+}, operation: (entries: AsyncIterable<LlmCollectionBatchEntry>) => Promise<T>): Promise<T>;

package/dist/safe-bash-command-llm/index.js

@@ -44,7 +44,7 @@ import {
   serializeLlmTokenUsage,
   streamLlmToolChain,
   validateLlmTemplateParameters
-} from "../safe-bash/command-chunks/chunk-PLVFJ6FF.js";
+} from "../safe-bash/command-chunks/chunk-4EA7WI3L.js";
 import "../safe-bash/command-chunks/chunk-EWECMOQ5.js";
 import {
   createLlmConfiguration

package/dist/safe-bash-command-python/build-wheel.d.ts

@@ -4,5 +4,14 @@ export interface PythonBuiltWheel {
     readonly digest: string;
     readonly size: number;
 }
-/** Publish a build result in caller-owned storage, independently of build cleanup. */
-export declare function publishPythonBuildWheel(source: string, directory: string, maxBytes: number, context: PythonPackageContext): Promise<PythonBuiltWheel>;
+export interface PythonWheelArtifact {
+    readonly key: string;
+    readonly size: number;
+    read(offset: number, length: number): Uint8Array | Promise<Uint8Array>;
+    close?(): Promise<void>;
+}
+/** Consume a retained wheel (or open a build result) and publish caller-owned bytes. */
+export declare function publishPythonBuildWheel(source: string | {
+    filename: string;
+    artifact: PythonWheelArtifact;
+}, directory: string, maxBytes: number, context: PythonPackageContext): Promise<PythonBuiltWheel>;

package/dist/safe-bash-command-python/executor.js

@@ -12,17 +12,17 @@ import {
   createPythonSourcePackageEnvironment,
   createPythonSourceSnapshot,
   installPythonLlmPackages,
-  publishPythonBuildWheel,
   pythonExecutorCommands,
   pythonLlmPackages
-} from "../safe-bash/command-chunks/chunk-NNGWTDVJ.js";
+} from "../safe-bash/command-chunks/chunk-VKTM2SOL.js";
 import {
   PythonPackageConflictError,
   createPythonPackageCache,
   createPythonPackageEnvironment,
   createPythonPackageManifestStore,
+  publishPythonBuildWheel,
   pythonDocumentPackages
-} from "../safe-bash/command-chunks/chunk-IKBTII7C.js";
+} from "../safe-bash/command-chunks/chunk-BKQWFABY.js";
 import {
   createPythonShellCapability
 } from "../safe-bash/command-chunks/chunk-NHAG4DWL.js";
@@ -32,9 +32,9 @@ import {
 } from "../safe-bash/command-chunks/chunk-IOZTDDNT.js";
 import {
   createPythonJspiExecutor
-} from "../safe-bash/command-chunks/chunk-NW3S6T6R.js";
+} from "../safe-bash/command-chunks/chunk-T7RT2BNL.js";
 import "../safe-bash/command-chunks/chunk-FXWKMNX2.js";
-import "../safe-bash/command-chunks/chunk-3EBQOZET.js";
+import "../safe-bash/command-chunks/chunk-DV7TCGJR.js";
 import {
   createPythonJspiNativeCall,
   createPythonJspiStatResult,

package/dist/safe-bash-command-python/index.js

@@ -12,17 +12,17 @@ import {
   createPythonSourcePackageEnvironment,
   createPythonSourceSnapshot,
   installPythonLlmPackages,
-  publishPythonBuildWheel,
   pythonExecutorCommands,
   pythonLlmPackages
-} from "../safe-bash/command-chunks/chunk-NNGWTDVJ.js";
+} from "../safe-bash/command-chunks/chunk-VKTM2SOL.js";
 import {
   PythonPackageConflictError,
   createPythonPackageCache,
   createPythonPackageEnvironment,
   createPythonPackageManifestStore,
+  publishPythonBuildWheel,
   pythonDocumentPackages
-} from "../safe-bash/command-chunks/chunk-IKBTII7C.js";
+} from "../safe-bash/command-chunks/chunk-BKQWFABY.js";
 import {
   createPythonShellCapability
 } from "../safe-bash/command-chunks/chunk-NHAG4DWL.js";
@@ -32,9 +32,9 @@ import {
 } from "../safe-bash/command-chunks/chunk-IOZTDDNT.js";
 import {
   createPythonJspiExecutor
-} from "../safe-bash/command-chunks/chunk-NW3S6T6R.js";
+} from "../safe-bash/command-chunks/chunk-T7RT2BNL.js";
 import "../safe-bash/command-chunks/chunk-FXWKMNX2.js";
-import "../safe-bash/command-chunks/chunk-3EBQOZET.js";
+import "../safe-bash/command-chunks/chunk-DV7TCGJR.js";
 import {
   createPythonJspiNativeCall,
   createPythonJspiStatResult,

package/dist/safe-bash-command-python/jspi.js

@@ -1,8 +1,8 @@
 import {
   createPythonJspiExecutor
-} from "../safe-bash/command-chunks/chunk-NW3S6T6R.js";
+} from "../safe-bash/command-chunks/chunk-T7RT2BNL.js";
 import "../safe-bash/command-chunks/chunk-FXWKMNX2.js";
-import "../safe-bash/command-chunks/chunk-3EBQOZET.js";
+import "../safe-bash/command-chunks/chunk-DV7TCGJR.js";
 import "../safe-bash/command-chunks/chunk-P56KGNW7.js";
 import "../safe-bash/command-chunks/chunk-NK3FRG5O.js";
 import "../safe-bash/command-chunks/chunk-XNJGNDFW.js";

package/dist/safe-bash-command-python/provisioning.d.ts

@@ -33,7 +33,7 @@ export interface PythonPackageOptions extends PythonPackageInstallOptions {
     readonly cache?: PythonPackageCache;
     readonly manifestStore?: PythonPackageManifestStore;
     readonly scope?: string;
-    /** Canonical filesystem directory, scoped to this package environment. */
+    /** Canonical cache directory. Network artifacts otherwise use caller cwd/.python-packages/cache; explicit buffered caches keep their own storage. */
     readonly cacheDirectory?: string;
     readonly maxDownloadBytes?: number;
     readonly maxManifestBytes?: number;

package/dist/safe-bash-command-python/provisioning.js

@@ -1,7 +1,7 @@
 import {
   createPythonPackageEnvironment,
   pythonDocumentPackages
-} from "../safe-bash/command-chunks/chunk-IKBTII7C.js";
+} from "../safe-bash/command-chunks/chunk-BKQWFABY.js";
 import "../safe-bash/command-chunks/chunk-NXCJNPL3.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {

package/dist/safe-bash-command-python/worker.js

@@ -8,7 +8,7 @@ import {
   pythonRuntimeRelocation,
   pythonStatProjection,
   pythonTreeCleanup
-} from "../safe-bash/command-chunks/chunk-3EBQOZET.js";
+} from "../safe-bash/command-chunks/chunk-DV7TCGJR.js";
 import {
   PythonFailure
 } from "../safe-bash/command-chunks/chunk-TO6UNFEF.js";

package/dist/safe-bash-csv-engine/index.js

@@ -1,11 +1,11 @@
 import {
   PythonTextDecoder
-} from "../safe-bash/command-chunks/chunk-AVSINNZ6.js";
-import "../safe-bash/command-chunks/chunk-OLXMWQJ5.js";
-import "../safe-bash/command-chunks/chunk-OOYVZAWL.js";
+} from "../safe-bash/command-chunks/chunk-P66Q5F6K.js";
+import "../safe-bash/command-chunks/chunk-Q2ACHUTY.js";
+import "../safe-bash/command-chunks/chunk-NXZJJM4J.js";
 import "../safe-bash/command-chunks/chunk-ZERCTWUI.js";
-import "../safe-bash/command-chunks/chunk-WIUEM7HP.js";
-import "../safe-bash/command-chunks/chunk-HNEWGADJ.js";
+import "../safe-bash/command-chunks/chunk-TGSNVLFZ.js";
+import "../safe-bash/command-chunks/chunk-RUXOFW5G.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-csv-engine/src/index.ts

package/dist/safe-bash-csv-engine/python-codepages.js

@@ -3,9 +3,9 @@ import {
   dbfCodepages,
   decodePythonSingleByte,
   pythonSingleByteCodepages
-} from "../safe-bash/command-chunks/chunk-OOYVZAWL.js";
+} from "../safe-bash/command-chunks/chunk-NXZJJM4J.js";
 import "../safe-bash/command-chunks/chunk-ZERCTWUI.js";
-import "../safe-bash/command-chunks/chunk-HNEWGADJ.js";
+import "../safe-bash/command-chunks/chunk-RUXOFW5G.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   PythonTextDecodeError,

package/dist/safe-bash-csv-engine/python-file-codepages.js

@@ -1,7 +1,7 @@
 import {
   pythonFileCodepages
-} from "../safe-bash/command-chunks/chunk-WIUEM7HP.js";
-import "../safe-bash/command-chunks/chunk-HNEWGADJ.js";
+} from "../safe-bash/command-chunks/chunk-TGSNVLFZ.js";
+import "../safe-bash/command-chunks/chunk-RUXOFW5G.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   pythonFileCodepages

package/dist/safe-bash-csv-engine/python-utf16.js

@@ -1,10 +1,10 @@
 import {
   PythonTextEncodingError,
   PythonUtf16Decoder
-} from "../safe-bash/command-chunks/chunk-OLXMWQJ5.js";
-import "../safe-bash/command-chunks/chunk-OOYVZAWL.js";
+} from "../safe-bash/command-chunks/chunk-Q2ACHUTY.js";
+import "../safe-bash/command-chunks/chunk-NXZJJM4J.js";
 import "../safe-bash/command-chunks/chunk-ZERCTWUI.js";
-import "../safe-bash/command-chunks/chunk-HNEWGADJ.js";
+import "../safe-bash/command-chunks/chunk-RUXOFW5G.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   PythonTextEncodingError,

package/dist/safe-bash-csv-engine/text-decoder.js

@@ -2,14 +2,14 @@ import {
   PythonIso2022PendingError,
   PythonTextDecoder,
   PythonUtf7EncodingError
-} from "../safe-bash/command-chunks/chunk-AVSINNZ6.js";
-import "../safe-bash/command-chunks/chunk-OLXMWQJ5.js";
+} from "../safe-bash/command-chunks/chunk-P66Q5F6K.js";
+import "../safe-bash/command-chunks/chunk-Q2ACHUTY.js";
 import {
   PythonTextDecodeError
-} from "../safe-bash/command-chunks/chunk-OOYVZAWL.js";
+} from "../safe-bash/command-chunks/chunk-NXZJJM4J.js";
 import "../safe-bash/command-chunks/chunk-ZERCTWUI.js";
-import "../safe-bash/command-chunks/chunk-WIUEM7HP.js";
-import "../safe-bash/command-chunks/chunk-HNEWGADJ.js";
+import "../safe-bash/command-chunks/chunk-TGSNVLFZ.js";
+import "../safe-bash/command-chunks/chunk-RUXOFW5G.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   PythonIso2022PendingError,

package/dist/safe-bash-sqlite-engine/safe-fs.d.ts

@@ -10,7 +10,13 @@ export declare function createSqliteVfs(options: {
     signal: AbortSignal;
     maxOpenFiles: number;
     maxFileBytes: number;
+    /** Caller-visible database names backed only by these owned private files. */
+    filenames?: readonly {
+        path: string;
+        name: string;
+    }[];
 }): {
+    jFullPathname(name: string, out: Uint8Array): number;
     jOpen(name: string | null, id: number, flags: number, out: DataView): Promise<number>;
     jClose(id: number): Promise<number>;
     jRead(id: number, bytes: Uint8Array, position: number | bigint): Promise<number>;

package/dist/safe-bash-sqlite-engine/safe-fs.js

@@ -1,6 +1,6 @@
 import {
   createSqliteVfs
-} from "../safe-bash/command-chunks/chunk-3UDJYSAF.js";
+} from "../safe-bash/command-chunks/chunk-IX3B4HCD.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createSqliteVfs

package/dist/safe-bash-sqlite-engine/sqlite-attachments.d.ts

@@ -0,0 +1,5 @@
+import { type SqliteInputSnapshotsOptions } from './sqlite-input-snapshots.js';
+/** Prepare sqlite-utils attachments in order, before collection migrations.
+ * Missing canonical files are created empty. Existing data is only read through
+ * owned snapshots; aliases and database contents are validated by SQLite. */
+export declare function prepareSqliteAttachments(options: SqliteInputSnapshotsOptions): Promise<void>;

package/dist/safe-bash-sqlite-engine/sqlite-input-snapshots.d.ts

@@ -0,0 +1,20 @@
+import type { FileSystem } from "../safe-bash-contracts/index.js";
+import { createPrivateSqliteStorage } from './sqlite-private.js';
+export interface SqliteInputSnapshotsOptions {
+    fs: FileSystem;
+    path: string;
+    directory: string;
+    signal: AbortSignal;
+    maxFileBytes: number;
+    maxIndexBytes: number;
+    maxOpenFiles: number;
+    attachments?: readonly {
+        alias: string;
+        path: string;
+    }[];
+}
+/** Own immutable copies and their private cleanup for read/query operations. */
+export declare function withSqliteInputSnapshots<T>(options: SqliteInputSnapshotsOptions, operation: (storage: Awaited<ReturnType<typeof createPrivateSqliteStorage>>, inputs: readonly {
+    path: string;
+    alias: string;
+}[]) => Promise<T>): Promise<T>;

package/dist/safe-bash-sqlite-engine/sqlite-query-records.d.ts

@@ -0,0 +1,9 @@
+import { type SqliteInputSnapshotsOptions } from './sqlite-input-snapshots.js';
+import { type SqliteRecordValue } from './sqlite-record.js';
+/** Stage native SELECT results as framed SQLite records in caller storage.
+ * The spool is never attached to the source connection. Native expression
+ * evaluation still owns complete field values; JavaScript transfers are bounded.
+ * Streams are borrowed for the callback lifetime. Canonical inputs stay intact. */
+export declare function withSqliteQueryRecords<T>(options: SqliteInputSnapshotsOptions & {
+    sql: string;
+}, operation: (rows: AsyncIterable<SqliteRecordValue[]>, columns: readonly string[]) => Promise<T>): Promise<T>;