@poe-platform/safe-bash 0.1.825 → 0.1.827

package/dist/safe-bash-command-python/executor.d.ts

@@ -33,6 +33,8 @@ export interface PythonCommandsOptions {
     readonly packageProfile?: 'documents';
     readonly provisioning?: PythonPackageOptions;
     readonly environment?: PythonPackageEnvironment;
+    /** Built-in runtimes read host metadata on demand; inline supports older custom executors. */
+    readonly packageRecordTransport?: 'host' | 'inline';
     /** Host UI lifecycle; never written to guest stdout/stderr. */
     readonly onProgress?: (event: PythonInitializationProgress) => void;
     readonly onDiagnostic?: PythonDiagnosticObserver;
@@ -84,8 +86,9 @@ export { createPythonBuildDependencies, type PythonBuildDependenciesRequest } fr
 export { createPythonSourceSnapshot, type PythonSourceSnapshot } from './source-snapshot.js';
 export { createPythonBuildBackend, type PythonBuildHookRequest, type PythonSourceRequirementRequest, type PythonEditableRequirementRequest, type PythonSourceRequirement, type PythonLegacyBuildRequest, type PythonLegacyRequirementsRequest, type PythonBuildHookContext, type PythonBuildSystemRequest, type PythonBuildSystemDetails, type PythonBuildRequirementsRequest, type PythonBuildRequirementsStatus } from './build-backend.js';
 export type { PythonPackageInstallOptions, PythonPackageOptions, PythonPackageCache, PythonPackageProgress, PythonPackageStart, PythonPackageContext, PythonPackageEnvironment, PythonPackagePrepareContext } from './provisioning.js';
-export { PythonPackageConflictError, createPythonPackageManifestStore } from './manifest.js';
-export type { PythonPackageManifest, PythonPackageManifestStore } from './manifest.js';
+export { PythonPackageConflictError, createPythonPackageManifestStore, createPythonPackageStreamingManifestStore } from './manifest.js';
+export { createPythonPackageFileManifestStore } from './manifest-file.js';
+export type { PythonPackageManifest, PythonPackageManifestStore, PythonPackageStreamingManifestStore } from './manifest.js';
 export { createPythonPackageCache } from './cache.js';
 export { createPythonExecutorPool } from './executor-pool.js';
 export type { PythonExecutorPool, PythonExecutorPoolOptions } from './executor-pool.js';

package/dist/safe-bash-command-python/executor.js

@@ -14,27 +14,30 @@ import {
   installPythonLlmPackages,
   pythonExecutorCommands,
   pythonLlmPackages
-} from "../safe-bash/command-chunks/chunk-LFTGMUAV.js";
+} from "../safe-bash/command-chunks/chunk-HQIZR6EU.js";
 import {
   PythonPackageConflictError,
   createPythonPackageCache,
   createPythonPackageEnvironment,
+  createPythonPackageFileManifestStore,
   createPythonPackageManifestStore,
+  createPythonPackageStreamingManifestStore,
   publishPythonBuildWheel,
   pythonDocumentPackages
-} from "../safe-bash/command-chunks/chunk-RZOHZGEZ.js";
+} from "../safe-bash/command-chunks/chunk-JADJ4BMN.js";
 import {
   createPythonShellCapability
 } from "../safe-bash/command-chunks/chunk-NHAG4DWL.js";
-import "../safe-bash/command-chunks/chunk-NXCJNPL3.js";
 import {
   createPythonJspiAssets
 } from "../safe-bash/command-chunks/chunk-IOZTDDNT.js";
 import {
   createPythonJspiExecutor
-} from "../safe-bash/command-chunks/chunk-XSZNL3GV.js";
+} from "../safe-bash/command-chunks/chunk-UJPWPRVB.js";
 import "../safe-bash/command-chunks/chunk-FXWKMNX2.js";
-import "../safe-bash/command-chunks/chunk-WY6THI6J.js";
+import "../safe-bash/command-chunks/chunk-L54KVUSY.js";
+import "../safe-bash/command-chunks/chunk-HS2L7I4N.js";
+import "../safe-bash/command-chunks/chunk-UCE77LYV.js";
 import {
   createPythonJspiNativeCall,
   createPythonJspiStatResult,
@@ -60,7 +63,7 @@ import {
 import {
   createPythonHostBridge,
   pythonHostFailureCode
-} from "../safe-bash/command-chunks/chunk-EPYJSPOY.js";
+} from "../safe-bash/command-chunks/chunk-3QCW4VQF.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   PythonFailure,
@@ -85,7 +88,9 @@ export {
   createPythonLlmToolLoader,
   createPythonPackageCache,
   createPythonPackageEnvironment,
+  createPythonPackageFileManifestStore,
   createPythonPackageManifestStore,
+  createPythonPackageStreamingManifestStore,
   createPythonShellCapability,
   createPythonSourcePackageEnvironment,
   createPythonSourceSnapshot,

package/dist/safe-bash-command-python/host-capabilities.js

@@ -1,7 +1,7 @@
 import {
   createPythonHostBridge,
   pythonHostFailureCode
-} from "../safe-bash/command-chunks/chunk-EPYJSPOY.js";
+} from "../safe-bash/command-chunks/chunk-3QCW4VQF.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createPythonHostBridge,

package/dist/safe-bash-command-python/index.js

@@ -14,27 +14,30 @@ import {
   installPythonLlmPackages,
   pythonExecutorCommands,
   pythonLlmPackages
-} from "../safe-bash/command-chunks/chunk-LFTGMUAV.js";
+} from "../safe-bash/command-chunks/chunk-HQIZR6EU.js";
 import {
   PythonPackageConflictError,
   createPythonPackageCache,
   createPythonPackageEnvironment,
+  createPythonPackageFileManifestStore,
   createPythonPackageManifestStore,
+  createPythonPackageStreamingManifestStore,
   publishPythonBuildWheel,
   pythonDocumentPackages
-} from "../safe-bash/command-chunks/chunk-RZOHZGEZ.js";
+} from "../safe-bash/command-chunks/chunk-JADJ4BMN.js";
 import {
   createPythonShellCapability
 } from "../safe-bash/command-chunks/chunk-NHAG4DWL.js";
-import "../safe-bash/command-chunks/chunk-NXCJNPL3.js";
 import {
   createPythonJspiAssets
 } from "../safe-bash/command-chunks/chunk-IOZTDDNT.js";
 import {
   createPythonJspiExecutor
-} from "../safe-bash/command-chunks/chunk-XSZNL3GV.js";
+} from "../safe-bash/command-chunks/chunk-UJPWPRVB.js";
 import "../safe-bash/command-chunks/chunk-FXWKMNX2.js";
-import "../safe-bash/command-chunks/chunk-WY6THI6J.js";
+import "../safe-bash/command-chunks/chunk-L54KVUSY.js";
+import "../safe-bash/command-chunks/chunk-HS2L7I4N.js";
+import "../safe-bash/command-chunks/chunk-UCE77LYV.js";
 import {
   createPythonJspiNativeCall,
   createPythonJspiStatResult,
@@ -60,7 +63,7 @@ import {
 import {
   createPythonHostBridge,
   pythonHostFailureCode
-} from "../safe-bash/command-chunks/chunk-EPYJSPOY.js";
+} from "../safe-bash/command-chunks/chunk-3QCW4VQF.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-command-python/src/default-runtime.ts
@@ -455,7 +458,9 @@ export {
   createPythonLlmToolLoader,
   createPythonPackageCache,
   createPythonPackageEnvironment,
+  createPythonPackageFileManifestStore,
   createPythonPackageManifestStore,
+  createPythonPackageStreamingManifestStore,
   createPythonShellCapability,
   createPythonSourcePackageEnvironment,
   createPythonSourceSnapshot,

package/dist/safe-bash-command-python/jspi.js

@@ -1,13 +1,15 @@
 import {
   createPythonJspiExecutor
-} from "../safe-bash/command-chunks/chunk-XSZNL3GV.js";
+} from "../safe-bash/command-chunks/chunk-UJPWPRVB.js";
 import "../safe-bash/command-chunks/chunk-FXWKMNX2.js";
-import "../safe-bash/command-chunks/chunk-WY6THI6J.js";
+import "../safe-bash/command-chunks/chunk-L54KVUSY.js";
+import "../safe-bash/command-chunks/chunk-HS2L7I4N.js";
+import "../safe-bash/command-chunks/chunk-UCE77LYV.js";
 import "../safe-bash/command-chunks/chunk-P56KGNW7.js";
 import "../safe-bash/command-chunks/chunk-NK3FRG5O.js";
 import "../safe-bash/command-chunks/chunk-XNJGNDFW.js";
 import "../safe-bash/command-chunks/chunk-TO6UNFEF.js";
-import "../safe-bash/command-chunks/chunk-EPYJSPOY.js";
+import "../safe-bash/command-chunks/chunk-3QCW4VQF.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createPythonJspiExecutor

package/dist/safe-bash-command-python/manifest-file.d.ts

@@ -0,0 +1,44 @@
+import { type FileSystem } from "../safe-bash-contracts/index.js";
+/** Persistent caller-owned manifests with native conditional publication.
+ * filename selects a single existing manifest file; omit it for scope-keyed files.
+ * Publication and structured decoding stream; compatibility get returns owned bytes. */
+export declare function createPythonPackageFileManifestStore({ fs, directory, maxCacheBytes, filename }: {
+    readonly fs: FileSystem;
+    readonly directory: string;
+    readonly maxCacheBytes?: number;
+    readonly filename?: string;
+}): {
+    openSnapshot(scope: string, options: {
+        signal: AbortSignal;
+        maxBytes: number;
+    }): Promise<{
+        revision: string;
+        installed: readonly string[];
+        version: 0 | 1 | 2 | 3;
+        recordCount: number;
+        readRecord: (ordinal: number, offset: number) => Promise<string>;
+        readField?: (ordinal: number, field: number, offset: number) => Promise<string>;
+        close: () => Promise<void>;
+    } | undefined>;
+    getSnapshot(scope: string, options: {
+        signal: AbortSignal;
+        maxBytes: number;
+    }): Promise<{
+        revision: string;
+        value: unknown;
+    } | undefined>;
+    get(scope: string, options: {
+        readonly signal: AbortSignal;
+    }): Promise<import("./manifest.js").PythonPackageManifest | undefined>;
+    compareAndSet(scope: string, revision: string | undefined, bytes: Uint8Array, options: {
+        readonly signal: AbortSignal;
+    }): Promise<boolean>;
+    compareAndSetSource?(scope: string, revision: string | undefined, source: AsyncIterable<Uint8Array>, options: {
+        readonly signal: AbortSignal;
+        readonly maxBytes: number;
+    }): Promise<boolean>;
+    compareAndSetSnapshot?(scope: string, revision: string | undefined, snapshot: import("./manifest.js").PythonInstalledSnapshot | readonly string[], options: {
+        readonly signal: AbortSignal;
+        readonly maxBytes: number;
+    }): Promise<boolean>;
+};

package/dist/safe-bash-command-python/manifest.d.ts

@@ -19,14 +19,59 @@ export interface PythonPackageManifest {
     readonly revision: string;
     readonly bytes: Uint8Array;
 }
+/** Validated host snapshot whose metadata stays in caller backing storage. */
+export interface PythonPackageRecordSnapshot {
+    readonly revision: string;
+    readonly installed: readonly string[];
+    readonly version: 0 | 1 | 2 | 3;
+    readonly recordCount: number;
+    readRecord(ordinal: number, offset: number): Promise<string>;
+    /** Optional bounded JSON field transport; fields are numbered 0 through 5. */
+    readField?(ordinal: number, field: number, offset: number): Promise<string>;
+    close(): Promise<void>;
+}
 export interface PythonPackageManifestStore {
+    openSnapshot?(scope: string, options: {
+        readonly signal: AbortSignal;
+        readonly maxBytes: number;
+    }): Promise<PythonPackageRecordSnapshot | undefined>;
     get(scope: string, options: {
         readonly signal: AbortSignal;
     }): Promise<PythonPackageManifest | undefined>;
+    /** Optional incremental decoding; the returned value is validated by the environment.
+     * Enforce maxBytes on original input and retire all read handles before returning. */
+    getSnapshot?(scope: string, options: {
+        readonly signal: AbortSignal;
+        readonly maxBytes: number;
+    }): Promise<{
+        readonly revision: string;
+        readonly value: unknown;
+    } | undefined>;
     compareAndSet(scope: string, revision: string | undefined, bytes: Uint8Array, options: {
         readonly signal: AbortSignal;
     }): Promise<boolean>;
+    /** Atomic publication from an already validated byte source. */
+    compareAndSetSource?(scope: string, revision: string | undefined, source: AsyncIterable<Uint8Array>, options: {
+        readonly signal: AbortSignal;
+        readonly maxBytes: number;
+    }): Promise<boolean>;
+    /** Optional structured publication, avoiding the environment's byte buffer.
+     * The store must enforce maxBytes on the serialized representation. */
+    compareAndSetSnapshot?(scope: string, revision: string | undefined, snapshot: PythonInstalledSnapshot | readonly string[], options: {
+        readonly signal: AbortSignal;
+        readonly maxBytes: number;
+    }): Promise<boolean>;
+}
+export interface PythonPackageStreamingManifestStore {
+    get: PythonPackageManifestStore['get'];
+    /** Consume privately, then atomically compare and publish. Source errors must
+     * leave the prior snapshot unchanged. A stale revision may return false early. */
+    compareAndSet(scope: string, revision: string | undefined, source: AsyncIterable<Uint8Array>, options: {
+        readonly signal: AbortSignal;
+    }): Promise<boolean>;
 }
+/** Adapt an atomic streaming store without assembling encoded manifest bytes. */
+export declare function createPythonPackageStreamingManifestStore(store: PythonPackageStreamingManifestStore): PythonPackageManifestStore;
 export declare class PythonPackageConflictError extends Error {
     readonly code = "EPACKAGECONFLICT";
     readonly retryable = true;

package/dist/safe-bash-command-python/provisioning.d.ts

@@ -10,6 +10,18 @@ export interface PythonPackageProgress {
     readonly totalBytes?: number;
 }
 export interface PythonPackageInstallOptions {
+    /** Primary Simple API package index. Defaults to PyPI. */
+    readonly indexUrl?: string;
+    /** Additional indexes searched alongside the primary index. */
+    readonly extraIndexUrls?: readonly string[];
+    /** Disable index lookup; direct wheel sources remain available. */
+    readonly noIndex?: boolean;
+    /** Install requested packages without resolving their runtime dependencies. */
+    readonly noDeps?: boolean;
+    /** Limit selected versions without installing unrequested packages. */
+    readonly constraints?: readonly string[];
+    /** Local constraint files; nested -r entries remain requirements. */
+    readonly constraintFiles?: readonly string[];
     /** Local source trees whose installed imports remain linked to caller storage. */
     readonly editable?: readonly string[];
     /** Include prerelease and development candidates during dependency resolution. */
@@ -43,7 +55,8 @@ export interface PythonPackageOptions extends PythonPackageInstallOptions {
     readonly maxCacheBytes?: number;
     readonly onProgress?: (event: PythonPackageProgress) => void;
 }
-export interface PythonPackageStart extends Omit<PythonPackageInstallOptions, 'noCache' | 'editable'> {
+export interface PythonPackageStart extends Omit<PythonPackageInstallOptions, 'noCache' | 'editable' | 'constraintFiles' | 'indexUrl' | 'extraIndexUrls' | 'noIndex'> {
+    readonly indexUrls?: readonly string[];
     readonly session: string;
     /** Load installer tooling even when no application requirements are installed. */
     readonly bootstrap?: boolean;
@@ -55,6 +68,10 @@ export interface PythonPackageStart extends Omit<PythonPackageInstallOptions, 'n
     readonly legacy?: boolean;
     /** Installed metadata used only by uninstall; application startup still restores code. */
     readonly records?: readonly PythonPackageRecord[] | undefined;
+    /** Host-owned records are read through package-record-read; -1 means absent. */
+    readonly recordCount?: number;
+    /** The default native executor may publish a caller-owned manifest file. */
+    readonly streamManifest?: boolean;
     /** Prior installation; only legacy manifests resolve dependencies during restore. */
     readonly restore?: readonly string[];
     /** New or host-configured requirements whose dependency closure is resolved. */
@@ -71,6 +88,8 @@ export interface PythonPackageContext {
     readonly signal: AbortSignal;
 }
 export interface PythonPackagePrepareContext extends PythonPackageContext, PythonPackageInstallOptions, Partial<Pick<import("../safe-bash-contracts/index.js").CommandContext, 'env' | 'stdout' | 'stderr' | 'registerCleanup' | 'args'>> {
+    /** Keep metadata in the host session instead of copying it into startup. */
+    readonly recordTransport?: 'host' | 'inline';
     readonly uninstall?: PythonPackageStart['uninstall'];
     readonly requirements?: readonly string[];
     readonly requirementFiles?: readonly string[];

package/dist/safe-bash-command-python/provisioning.js

@@ -1,8 +1,9 @@
 import {
   createPythonPackageEnvironment,
   pythonDocumentPackages
-} from "../safe-bash/command-chunks/chunk-RZOHZGEZ.js";
-import "../safe-bash/command-chunks/chunk-NXCJNPL3.js";
+} from "../safe-bash/command-chunks/chunk-JADJ4BMN.js";
+import "../safe-bash/command-chunks/chunk-HS2L7I4N.js";
+import "../safe-bash/command-chunks/chunk-UCE77LYV.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createPythonPackageEnvironment,

package/dist/safe-bash-command-python/reply.js

@@ -3,15 +3,14 @@ import { FsError } from "../safe-bash-contracts/errors.js";
 export function encodePythonReply(value, maxBytes) {
     let used = 0;
     const ancestors = new Set();
-    const reserve = (bytes) => {
-        used += bytes;
-        if (used > maxBytes)
+    const checkSize = (bytes, remaining = maxBytes - used) => {
+        if (bytes > remaining)
             throw new FsError('EFBIG', { syscall: 'python reply' });
     };
+    const reserve = (bytes) => { checkSize(bytes); used += bytes; };
     const string = (text) => {
         // Every UTF-16 code unit needs at least one output byte, even before quoting.
-        if (text.length + 2 > maxBytes - used)
-            throw new FsError('EFBIG', { syscall: 'python reply' });
+        checkSize(text.length + 2);
         reserve(2);
         for (let index = 0; index < text.length; index++) {
             const code = text.charCodeAt(index);
@@ -33,8 +32,7 @@ export function encodePythonReply(value, maxBytes) {
         return text;
     };
     const own = (input, depth) => {
-        if (depth > 64)
-            throw new FsError('EFBIG', { syscall: 'python reply' });
+        checkSize(depth, 64);
         if (input === null || input === undefined) {
             reserve(4);
             return null;
@@ -57,8 +55,7 @@ export function encodePythonReply(value, maxBytes) {
         try {
             if (input instanceof Uint8Array || Array.isArray(input)) {
                 // Each slot contributes at least one value byte and one separator.
-                if (input.length > maxBytes - used)
-                    throw new FsError('EFBIG', { syscall: 'python reply' });
+                checkSize(input.length);
                 reserve(2);
                 const output = [];
                 for (let index = 0; index < input.length; index++) {
@@ -78,8 +75,7 @@ export function encodePythonReply(value, maxBytes) {
             for (const key in input) {
                 if (!Object.hasOwn(input, key))
                     continue;
-                if (++visited > maxBytes)
-                    throw new FsError('EFBIG', { syscall: 'python reply' });
+                checkSize(++visited, maxBytes);
                 const descriptor = Object.getOwnPropertyDescriptor(input, key);
                 if (!('value' in descriptor))
                     throw new TypeError('Accessor Python reply');

package/dist/safe-bash-command-python/source-archive.js

@@ -3,10 +3,10 @@ import {
   extractPythonSourceZipFile,
   pythonSourceZipSize,
   splitPythonSourcePath
-} from "../safe-bash/command-chunks/chunk-LKAFLJ5L.js";
+} from "../safe-bash/command-chunks/chunk-RWQKX44L.js";
 import {
   openPythonPackageFile
-} from "../safe-bash/command-chunks/chunk-NXCJNPL3.js";
+} from "../safe-bash/command-chunks/chunk-UCE77LYV.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 
 // packages/safe-bash-command-python/src/source-archive.ts

package/dist/safe-bash-command-python/source-zip.js

@@ -1,7 +1,7 @@
 import {
   extractPythonSourceZip
-} from "../safe-bash/command-chunks/chunk-LKAFLJ5L.js";
-import "../safe-bash/command-chunks/chunk-NXCJNPL3.js";
+} from "../safe-bash/command-chunks/chunk-RWQKX44L.js";
+import "../safe-bash/command-chunks/chunk-UCE77LYV.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   extractPythonSourceZip

package/dist/safe-bash-command-python/worker.js

@@ -1,14 +1,11 @@
 import {
   installPythonPackages,
+  loadPythonRuntimePrograms,
   parsePythonInvocation,
-  pythonDirectoryEntries,
-  pythonExecution,
-  pythonHardLinks,
-  pythonImportMetadata,
-  pythonRuntimeRelocation,
-  pythonStatProjection,
-  pythonTreeCleanup
-} from "../safe-bash/command-chunks/chunk-WY6THI6J.js";
+  pythonExecution
+} from "../safe-bash/command-chunks/chunk-L54KVUSY.js";
+import "../safe-bash/command-chunks/chunk-HS2L7I4N.js";
+import "../safe-bash/command-chunks/chunk-UCE77LYV.js";
 import {
   PythonFailure
 } from "../safe-bash/command-chunks/chunk-TO6UNFEF.js";
@@ -139,25 +136,13 @@ async function runPythonWorker(options) {
       return previous;
     });
     if (runtime.version !== "314.0.6") throw new PythonFailure("runtime-abi", { cause: new Error("Python worker requires Pyodide 314.0.6") });
-    if (start.packages) await installPythonPackages(runtime, start.packages, startupRequest, start.maxTransferBytes);
-    const unavailablePackage = () => {
-      throw new Error("Python package transport is only available during installation");
-    };
-    const publicRuntime = runtime;
-    if ("loadPackage" in publicRuntime) publicRuntime.loadPackage = unavailablePackage;
-    if (publicRuntime._api?.packageManager) publicRuntime._api.packageManager.downloadPackage = unavailablePackage;
-    if (start.installOnly) {
-      if (!start.packages?.uninstall) startupWrite("stdout", "Successfully installed requested Python packages");
-      postMessage({ type: "exit", exitCode: 0 });
-      return;
-    }
     category = "runtime-abi";
     const errno = JSON.parse(runtime.runPython("__import__('json').dumps({k:v for k,v in vars(__import__('errno')).items() if k.startswith('E') and isinstance(v,int)})"));
     const request = createPythonWorkerRequest(start.shared, postMessage, (code) => new runtime.FS.ErrnoError(errno[code] ?? errno.EIO));
     const libraries = runtime._module?.LDSO?.loadedLibsByName;
     if (!libraries) throw new Error("Python runtime native loader ABI unavailable");
     if (typeof runtime._module._Py_FinalizeEx !== "function") throw new Error("Python runtime finalization ABI unavailable");
-    runtime.runPython("import sys, zipimport, importlib.machinery, json, os, runpy, traceback");
+    runtime.runPython("import sys, zipimport, importlib.machinery, json, os, runpy, traceback, site, sysconfig, pyodide._package_loader");
     runtime.setStdin({ read(buffer) {
       const bytes = request("stdin", Math.min(buffer.length, start.maxTransferBytes));
       if (!Array.isArray(bytes) || bytes.length > buffer.length) throw new runtime.FS.ErrnoError(errno.EIO);
@@ -197,6 +182,7 @@ async function runPythonWorker(options) {
       if (name.startsWith("/lib/")) libraries[start.runtimeMount + name] = library;
     }
     runtime.globals.set("_safe_runtime_mount", start.runtimeMount);
+    const { pythonRuntimeRelocation, pythonImportMetadata, pythonDirectoryEntries, pythonStatProjection, pythonHardLinks, pythonTreeCleanup, pythonMetadataDiscovery } = await loadPythonRuntimePrograms();
     runtime.runPython(pythonRuntimeRelocation);
     runtime.globals.set("_safe_import_stat", (path) => {
       try {
@@ -237,6 +223,14 @@ async function runPythonWorker(options) {
         return JSON.stringify({ errno: error.errno ?? errno.EIO });
       }
     });
+    runtime.globals.set("_safe_directory_cursor", (operation, value) => {
+      try {
+        if (!["directoryOpen", "directoryNext", "close"].includes(operation)) throw new runtime.FS.ErrnoError(errno.EINVAL);
+        return JSON.stringify({ value: request(operation, value) });
+      } catch (error) {
+        return JSON.stringify({ errno: error.errno ?? errno.EIO });
+      }
+    });
     runtime.runPython(pythonStatProjection);
     runtime.globals.set("_safe_hard_link", (source, destination, follow) => {
       try {
@@ -267,6 +261,25 @@ async function runPythonWorker(options) {
     });
     runtime.runPython(pythonTreeCleanup);
     runtime.globals.set("_safe_invocation_json", JSON.stringify(start.invocation));
+    category = "startup";
+    if (start.packages) {
+      runtime.globals.set("_safe_metadata_root", () => request("package-root", start.packages.session));
+      runtime.runPython(pythonMetadataDiscovery);
+      const installationRoot = start.packages.requirements.length || start.packages.uninstall || start.packages.bootstrap ? request("package-root", start.packages.session) : void 0;
+      await installPythonPackages(runtime, start.packages, request, start.maxTransferBytes, installationRoot);
+    }
+    const unavailablePackage = () => {
+      throw new Error("Python package transport is only available during installation");
+    };
+    const publicRuntime = runtime;
+    if ("loadPackage" in publicRuntime) publicRuntime.loadPackage = unavailablePackage;
+    if (publicRuntime._api?.packageManager) publicRuntime._api.packageManager.downloadPackage = unavailablePackage;
+    if (start.installOnly) {
+      if (!start.packages?.uninstall) startupWrite("stdout", "Successfully installed requested Python packages");
+      const finalized2 = runtime._module._Py_FinalizeEx();
+      postMessage({ type: "exit", exitCode: finalized2 < 0 ? 120 : 0 });
+      return;
+    }
     postMessage({ type: "ready" });
     category = "runtime";
     const exitCode = runtime.runPython(pythonExecution);

package/dist/safe-bash-command-sqlite3/engine.d.ts

@@ -152,6 +152,10 @@ export type ExprNode = {
             desc: boolean;
             nulls?: "FIRST" | "LAST" | undefined | undefined;
         }[];
+        frameBounds?: {
+            start: number;
+            end: number;
+        } | undefined;
     } | undefined;
 } | {
     kind: "subquery";