@eidos.space/just-bash 3.0.2

package/dist/commands/head/head-tail-shared.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Shared utilities for head and tail commands.
+ */
+import type { CommandContext, ExecResult } from "../../types.js";
+export interface HeadTailOptions {
+    lines: number;
+    bytes: number | null;
+    quiet: boolean;
+    verbose: boolean;
+    files: string[];
+    /** tail-specific: start from line N instead of last N lines */
+    fromLine?: boolean;
+}
+export type HeadTailParseResult = {
+    ok: true;
+    options: HeadTailOptions;
+} | {
+    ok: false;
+    error: ExecResult;
+};
+/**
+ * Parse head/tail command arguments.
+ * Both commands share most options, with tail having additional +N syntax.
+ */
+export declare function parseHeadTailArgs(args: string[], cmdName: "head" | "tail"): HeadTailParseResult;
+/**
+ * Process files for head/tail commands.
+ * Handles stdin, multiple files, headers, and error handling.
+ */
+export declare function processHeadTailFiles(ctx: CommandContext, options: HeadTailOptions, cmdName: "head" | "tail", contentProcessor: (content: string) => string): Promise<ExecResult>;
+/**
+ * Get the first N lines or bytes from content.
+ */
+export declare function getHead(content: string, lines: number, bytes: number | null): string;
+/**
+ * Get the last N lines or bytes from content.
+ */
+export declare function getTail(content: string, lines: number, bytes: number | null, fromLine: boolean): string;

package/dist/commands/head/head.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const headCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/help/help.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const helpCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/help.d.ts

@@ -0,0 +1,16 @@
+import type { ExecResult } from "../types.js";
+export interface HelpInfo {
+    name: string;
+    summary: string;
+    usage: string;
+    description?: string | string[];
+    options?: string[];
+    examples?: string[];
+    notes?: string[];
+}
+export declare function showHelp(info: HelpInfo): ExecResult;
+export declare function hasHelpFlag(args: string[]): boolean;
+/**
+ * Returns an error result for an unknown option
+ */
+export declare function unknownOption(cmdName: string, option: string): ExecResult;

package/dist/commands/history/history.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const historyCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/hostname/hostname.d.ts

@@ -0,0 +1,11 @@
+/**
+ * hostname - show or set the system's host name
+ *
+ * Usage: hostname [NAME]
+ *
+ * In sandboxed environment, always returns "localhost".
+ */
+import type { Command } from "../../types.js";
+export declare const hostname: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/html-to-markdown/html-to-markdown.d.ts

@@ -0,0 +1,9 @@
+/**
+ * html-to-markdown - Convert HTML to Markdown using TurndownService
+ *
+ * This is a non-standard command that converts HTML from stdin to Markdown.
+ */
+import type { Command } from "../../types.js";
+export declare const htmlToMarkdownCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/join/join.d.ts

@@ -0,0 +1,12 @@
+/**
+ * join - join lines of two files on a common field
+ *
+ * Usage: join [OPTION]... FILE1 FILE2
+ *
+ * For each pair of input lines with identical join fields, write a line to
+ * standard output. The default join field is the first, delimited by blanks.
+ */
+import type { Command } from "../../types.js";
+export declare const join: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/jq/jq.d.ts

@@ -0,0 +1,9 @@
+/**
+ * jq - Command-line JSON processor
+ *
+ * Full jq implementation with proper parser and evaluator.
+ */
+import type { Command } from "../../types.js";
+export declare const jqCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/js-exec/fetch-polyfill.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Web Fetch API polyfill source for QuickJS.
+ * Exported as a string constant to be evaluated inside the sandbox.
+ * Provides URLSearchParams, URL, Headers, Response, Request, and fetch().
+ */
+export declare const FETCH_POLYFILL_SOURCE = "\n(function() {\n  // --- URLSearchParams ---\n  function URLSearchParams(init) {\n    this._entries = [];\n    if (!init) return;\n    if (typeof init === 'string') {\n      var s = init;\n      if (s.charAt(0) === '?') s = s.slice(1);\n      var pairs = s.split('&');\n      for (var i = 0; i < pairs.length; i++) {\n        var pair = pairs[i];\n        if (pair === '') continue;\n        var eq = pair.indexOf('=');\n        if (eq === -1) {\n          this._entries.push([decodeURIComponent(pair), '']);\n        } else {\n          this._entries.push([\n            decodeURIComponent(pair.slice(0, eq)),\n            decodeURIComponent(pair.slice(eq + 1))\n          ]);\n        }\n      }\n    } else if (typeof init === 'object' && init !== null) {\n      if (init instanceof URLSearchParams) {\n        this._entries = init._entries.slice();\n      } else {\n        var keys = Object.keys(init);\n        for (var i = 0; i < keys.length; i++) {\n          this._entries.push([keys[i], String(init[keys[i]])]);\n        }\n      }\n    }\n  }\n\n  URLSearchParams.prototype.append = function(name, value) {\n    this._entries.push([String(name), String(value)]);\n  };\n\n  URLSearchParams.prototype.delete = function(name) {\n    var n = String(name);\n    this._entries = this._entries.filter(function(e) { return e[0] !== n; });\n  };\n\n  URLSearchParams.prototype.get = function(name) {\n    var n = String(name);\n    for (var i = 0; i < this._entries.length; i++) {\n      if (this._entries[i][0] === n) return this._entries[i][1];\n    }\n    return null;\n  };\n\n  URLSearchParams.prototype.getAll = function(name) {\n    var n = String(name);\n    var result = [];\n    for (var i = 0; i < this._entries.length; i++) {\n      if (this._entries[i][0] === n) result.push(this._entries[i][1]);\n    }\n    return result;\n  };\n\n  URLSearchParams.prototype.has = function(name) {\n    var n = String(name);\n    for (var i = 0; i < this._entries.length; i++) {\n      if (this._entries[i][0] === n) return true;\n    }\n    return false;\n  };\n\n  URLSearchParams.prototype.set = function(name, value) {\n    var n = String(name);\n    var v = String(value);\n    var found = false;\n    var newEntries = [];\n    for (var i = 0; i < this._entries.length; i++) {\n      if (this._entries[i][0] === n) {\n        if (!found) {\n          newEntries.push([n, v]);\n          found = true;\n        }\n      } else {\n        newEntries.push(this._entries[i]);\n      }\n    }\n    if (!found) newEntries.push([n, v]);\n    this._entries = newEntries;\n  };\n\n  URLSearchParams.prototype.sort = function() {\n    this._entries.sort(function(a, b) {\n      if (a[0] < b[0]) return -1;\n      if (a[0] > b[0]) return 1;\n      return 0;\n    });\n  };\n\n  URLSearchParams.prototype.toString = function() {\n    return this._entries.map(function(e) {\n      return encodeURIComponent(e[0]) + '=' + encodeURIComponent(e[1]);\n    }).join('&');\n  };\n\n  URLSearchParams.prototype.forEach = function(callback, thisArg) {\n    for (var i = 0; i < this._entries.length; i++) {\n      callback.call(thisArg, this._entries[i][1], this._entries[i][0], this);\n    }\n  };\n\n  URLSearchParams.prototype.entries = function() {\n    var idx = 0;\n    var entries = this._entries;\n    return {\n      next: function() {\n        if (idx >= entries.length) return { done: true, value: undefined };\n        return { done: false, value: entries[idx++].slice() };\n      },\n      [Symbol.iterator]: function() { return this; }\n    };\n  };\n\n  URLSearchParams.prototype.keys = function() {\n    var idx = 0;\n    var entries = this._entries;\n    return {\n      next: function() {\n        if (idx >= entries.length) return { done: true, value: undefined };\n        return { done: false, value: entries[idx++][0] };\n      },\n      [Symbol.iterator]: function() { return this; }\n    };\n  };\n\n  URLSearchParams.prototype.values = function() {\n    var idx = 0;\n    var entries = this._entries;\n    return {\n      next: function() {\n        if (idx >= entries.length) return { done: true, value: undefined };\n        return { done: false, value: entries[idx++][1] };\n      },\n      [Symbol.iterator]: function() { return this; }\n    };\n  };\n\n  URLSearchParams.prototype[Symbol.iterator] = URLSearchParams.prototype.entries;\n\n  Object.defineProperty(URLSearchParams.prototype, 'size', {\n    get: function() { return this._entries.length; }\n  });\n\n  // --- URL ---\n  var urlRegex = /^([a-zA-Z][a-zA-Z0-9+.-]*):(?:\\/\\/(?:([^:@/?#]*)(?::([^@/?#]*))?@)?([^:/?#]*)(?::([0-9]+))?)?(\\/[^?#]*)?(?:\\?([^#]*))?(?:#(.*))?$/;\n\n  function URL(url, base) {\n    var input = String(url);\n\n    if (base !== undefined) {\n      var baseUrl = (base instanceof URL) ? base : new URL(String(base));\n      // Resolve relative URL against base\n      if (/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(input)) {\n        // Absolute URL - parse as-is\n      } else if (input.charAt(0) === '/' && input.charAt(1) === '/') {\n        // Protocol-relative\n        input = baseUrl.protocol + input;\n      } else if (input.charAt(0) === '/') {\n        // Absolute path\n        input = baseUrl.origin + input;\n      } else if (input.charAt(0) === '?' || input.charAt(0) === '#') {\n        // Query or hash only\n        var basePath = baseUrl.protocol + '//' + baseUrl.host + baseUrl.pathname;\n        if (input.charAt(0) === '#') {\n          input = basePath + baseUrl.search + input;\n        } else {\n          input = basePath + input;\n        }\n      } else {\n        // Relative path\n        var basePath = baseUrl.protocol + '//' + baseUrl.host;\n        var dirPath = baseUrl.pathname;\n        var lastSlash = dirPath.lastIndexOf('/');\n        if (lastSlash >= 0) dirPath = dirPath.slice(0, lastSlash + 1);\n        else dirPath = '/';\n        input = basePath + dirPath + input;\n      }\n    }\n\n    var m = urlRegex.exec(input);\n    if (!m) throw new TypeError(\"Invalid URL: \" + String(url));\n\n    this.protocol = m[1].toLowerCase() + ':';\n    this.username = m[2] ? decodeURIComponent(m[2]) : '';\n    this.password = m[3] ? decodeURIComponent(m[3]) : '';\n    this.hostname = m[4] || '';\n    this.port = m[5] || '';\n    this.pathname = m[6] || '/';\n    this.hash = m[8] ? '#' + m[8] : '';\n\n    // Normalize pathname (resolve . and ..)\n    var parts = this.pathname.split('/');\n    var resolved = [];\n    for (var i = 0; i < parts.length; i++) {\n      if (parts[i] === '..') { if (resolved.length > 1) resolved.pop(); }\n      else if (parts[i] !== '.') resolved.push(parts[i]);\n    }\n    this.pathname = resolved.join('/') || '/';\n\n    // searchParams is live\n    this._searchParamsStr = m[7] || '';\n    this.searchParams = new URLSearchParams(this._searchParamsStr);\n  }\n\n  Object.defineProperty(URL.prototype, 'search', {\n    get: function() {\n      var s = this.searchParams.toString();\n      return s ? '?' + s : '';\n    },\n    set: function(v) {\n      this.searchParams = new URLSearchParams(String(v));\n    }\n  });\n\n  Object.defineProperty(URL.prototype, 'host', {\n    get: function() {\n      return this.port ? this.hostname + ':' + this.port : this.hostname;\n    }\n  });\n\n  Object.defineProperty(URL.prototype, 'origin', {\n    get: function() {\n      return this.protocol + '//' + this.host;\n    }\n  });\n\n  Object.defineProperty(URL.prototype, 'href', {\n    get: function() {\n      var auth = '';\n      if (this.username) {\n        auth = this.username;\n        if (this.password) auth += ':' + this.password;\n        auth += '@';\n      }\n      return this.protocol + '//' + auth + this.host + this.pathname + this.search + this.hash;\n    },\n    set: function(v) {\n      var parsed = new URL(String(v));\n      this.protocol = parsed.protocol;\n      this.username = parsed.username;\n      this.password = parsed.password;\n      this.hostname = parsed.hostname;\n      this.port = parsed.port;\n      this.pathname = parsed.pathname;\n      this.searchParams = parsed.searchParams;\n      this.hash = parsed.hash;\n    }\n  });\n\n  URL.prototype.toString = function() { return this.href; };\n  URL.prototype.toJSON = function() { return this.href; };\n\n  // --- Headers ---\n  function Headers(init) {\n    this._map = {};\n    if (!init) return;\n    if (init instanceof Headers) {\n      var keys = Object.keys(init._map);\n      for (var i = 0; i < keys.length; i++) {\n        this._map[keys[i]] = init._map[keys[i]].slice();\n      }\n    } else if (typeof init === 'object') {\n      var keys = Object.keys(init);\n      for (var i = 0; i < keys.length; i++) {\n        this._map[keys[i].toLowerCase()] = [String(init[keys[i]])];\n      }\n    }\n  }\n\n  Headers.prototype.append = function(name, value) {\n    var key = String(name).toLowerCase();\n    if (!this._map[key]) this._map[key] = [];\n    this._map[key].push(String(value));\n  };\n\n  Headers.prototype.delete = function(name) {\n    delete this._map[String(name).toLowerCase()];\n  };\n\n  Headers.prototype.get = function(name) {\n    var vals = this._map[String(name).toLowerCase()];\n    return vals ? vals.join(', ') : null;\n  };\n\n  Headers.prototype.has = function(name) {\n    return String(name).toLowerCase() in this._map;\n  };\n\n  Headers.prototype.set = function(name, value) {\n    this._map[String(name).toLowerCase()] = [String(value)];\n  };\n\n  Headers.prototype.forEach = function(callback, thisArg) {\n    var keys = Object.keys(this._map).sort();\n    for (var i = 0; i < keys.length; i++) {\n      callback.call(thisArg, this._map[keys[i]].join(', '), keys[i], this);\n    }\n  };\n\n  Headers.prototype.entries = function() {\n    var keys = Object.keys(this._map).sort();\n    var map = this._map;\n    var idx = 0;\n    return {\n      next: function() {\n        if (idx >= keys.length) return { done: true, value: undefined };\n        var k = keys[idx++];\n        return { done: false, value: [k, map[k].join(', ')] };\n      },\n      [Symbol.iterator]: function() { return this; }\n    };\n  };\n\n  Headers.prototype.keys = function() {\n    var keys = Object.keys(this._map).sort();\n    var idx = 0;\n    return {\n      next: function() {\n        if (idx >= keys.length) return { done: true, value: undefined };\n        return { done: false, value: keys[idx++] };\n      },\n      [Symbol.iterator]: function() { return this; }\n    };\n  };\n\n  Headers.prototype.values = function() {\n    var keys = Object.keys(this._map).sort();\n    var map = this._map;\n    var idx = 0;\n    return {\n      next: function() {\n        if (idx >= keys.length) return { done: true, value: undefined };\n        return { done: false, value: map[keys[idx++]].join(', ') };\n      },\n      [Symbol.iterator]: function() { return this; }\n    };\n  };\n\n  Headers.prototype[Symbol.iterator] = Headers.prototype.entries;\n\n  // --- Response ---\n  function Response(body, init) {\n    if (init === undefined) init = {};\n    this.status = init.status !== undefined ? init.status : 200;\n    this.statusText = init.statusText !== undefined ? init.statusText : '';\n    this.headers = init.headers instanceof Headers ? init.headers : new Headers(init.headers);\n    this.body = body !== undefined && body !== null ? String(body) : '';\n    this.ok = this.status >= 200 && this.status <= 299;\n    this.url = '';\n    this.redirected = false;\n    this.type = 'basic';\n    this.bodyUsed = false;\n  }\n\n  Response.prototype.text = function() {\n    this.bodyUsed = true;\n    return Promise.resolve(this.body);\n  };\n\n  Response.prototype.json = function() {\n    this.bodyUsed = true;\n    try {\n      return Promise.resolve(JSON.parse(this.body));\n    } catch (e) {\n      return Promise.reject(e);\n    }\n  };\n\n  Response.prototype.clone = function() {\n    var r = new Response(this.body, {\n      status: this.status,\n      statusText: this.statusText,\n      headers: new Headers(this.headers)\n    });\n    r.url = this.url;\n    r.redirected = this.redirected;\n    r.type = this.type;\n    return r;\n  };\n\n  Response.json = function(data, init) {\n    if (init === undefined) init = {};\n    var headers = init.headers instanceof Headers ? init.headers : new Headers(init.headers);\n    if (!headers.has('content-type')) {\n      headers.set('content-type', 'application/json');\n    }\n    return new Response(JSON.stringify(data), {\n      status: init.status !== undefined ? init.status : 200,\n      statusText: init.statusText || '',\n      headers: headers\n    });\n  };\n\n  Response.error = function() {\n    var r = new Response(null, { status: 0, statusText: '' });\n    r.type = 'error';\n    r.ok = false;\n    return r;\n  };\n\n  Response.redirect = function(url, status) {\n    if (status === undefined) status = 302;\n    var r = new Response(null, {\n      status: status,\n      statusText: '',\n      headers: new Headers({ location: String(url) })\n    });\n    r.redirected = true;\n    return r;\n  };\n\n  // --- Request ---\n  function Request(input, init) {\n    if (init === undefined) init = {};\n    if (input instanceof Request) {\n      this.url = input.url;\n      this.method = input.method;\n      this.headers = new Headers(input.headers);\n      this.body = input.body;\n    } else {\n      this.url = String(input);\n      this.method = 'GET';\n      this.headers = new Headers();\n      this.body = null;\n    }\n    if (init.method !== undefined) this.method = String(init.method).toUpperCase();\n    if (init.headers !== undefined) this.headers = init.headers instanceof Headers ? init.headers : new Headers(init.headers);\n    if (init.body !== undefined) this.body = init.body !== null ? String(init.body) : null;\n  }\n\n  Request.prototype.clone = function() {\n    return new Request(this);\n  };\n\n  // --- Assign to globalThis ---\n  globalThis.URLSearchParams = URLSearchParams;\n  globalThis.URL = URL;\n  globalThis.Headers = Headers;\n  globalThis.Response = Response;\n  globalThis.Request = Request;\n\n  // --- Wrap native fetch ---\n  var _nativeFetch = globalThis[Symbol.for('jb:fetch')];\n  globalThis.fetch = function fetch(input, init) {\n    try {\n      var url, method, headers, body;\n\n      if (input instanceof Request) {\n        url = input.url;\n        method = input.method;\n        headers = {};\n        input.headers.forEach(function(v, k) { headers[k] = v; });\n        body = input.body;\n      } else {\n        url = String(input);\n        method = undefined;\n        headers = undefined;\n        body = undefined;\n      }\n\n      if (init) {\n        if (init.method !== undefined) method = String(init.method).toUpperCase();\n        if (init.headers !== undefined) {\n          var h = init.headers instanceof Headers ? init.headers : new Headers(init.headers);\n          headers = {};\n          h.forEach(function(v, k) { headers[k] = v; });\n        }\n        if (init.body !== undefined) body = init.body !== null ? String(init.body) : undefined;\n      }\n\n      var opts = Object.create(null);\n      if (method) opts.method = method;\n      if (headers) opts.headers = headers;\n      if (body) opts.body = body;\n\n      var raw = _nativeFetch(url, opts);\n\n      var respHeaders = new Headers(raw.headers || {});\n      var response = new Response(raw.body, {\n        status: raw.status,\n        statusText: raw.statusText || '',\n        headers: respHeaders\n      });\n      response.url = raw.url || url;\n\n      return Promise.resolve(response);\n    } catch (e) {\n      return Promise.reject(new TypeError(e.message || 'fetch failed'));\n    }\n  };\n})();\n";

package/dist/commands/js-exec/js-exec-worker.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Worker thread for JavaScript execution via QuickJS.
+ * Keeps QuickJS loaded and handles multiple execution requests.
+ *
+ * Defense-in-depth activates AFTER QuickJS loads (WASM init needs unrestricted JS).
+ * User JavaScript code runs inside the QuickJS sandbox with no access to Node.js globals.
+ *
+ * Build: Bundled to js-exec-worker.js via esbuild (see package.json "build:worker").
+ * Run: npx esbuild src/commands/js-exec/js-exec-worker.ts --bundle --platform=node --format=esm --outfile=src/commands/js-exec/js-exec-worker.js --external:quickjs-emscripten
+ */
+import { type WorkerDefenseStats } from "../../security/index.js";
+export interface JsExecWorkerInput {
+    protocolToken: string;
+    sharedBuffer: SharedArrayBuffer;
+    jsCode: string;
+    cwd: string;
+    env: Record<string, string>;
+    args: string[];
+    scriptPath?: string;
+    bootstrapCode?: string;
+    isModule?: boolean;
+    stripTypes?: boolean;
+    timeoutMs?: number;
+    /** When true, the QuickJS guest gets a `tools` proxy that calls the host's invokeTool hook. */
+    hasInvokeTool?: boolean;
+}
+export interface JsExecWorkerOutput {
+    protocolToken?: string;
+    success: boolean;
+    error?: string;
+    defenseStats?: WorkerDefenseStats;
+}

package/dist/commands/js-exec/js-exec.d.ts

@@ -0,0 +1,11 @@
+/**
+ * js-exec - Execute JavaScript code via QuickJS (WASM)
+ *
+ * Runs JavaScript code in an isolated worker thread with access to the
+ * virtual filesystem, HTTP, and sub-shell execution via SharedArrayBuffer bridge.
+ *
+ * This command is Node.js only (uses worker_threads).
+ */
+import type { Command } from "../../types.js";
+export declare const jsExecCommand: Command;
+export declare const nodeStubCommand: Command;

package/dist/commands/js-exec/module-shims.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Node.js module shims for the QuickJS sandbox.
+ * Each is a JS source string evaluated inside the sandbox IIFE.
+ * They set up globals (e.g. globalThis[Symbol.for('jb:os')]) referenced by both
+ * require() and ESM VIRTUAL_MODULES.
+ */
+/** EventEmitter — pure JS, no dependencies. Must run before stream. */
+export declare const EVENTS_MODULE_SOURCE = "\nvar EventEmitter = (function() {\n  function EE() {\n    this._events = {};\n    this._maxListeners = 10;\n  }\n  EE.prototype.on = function(event, listener) {\n    if (!this._events[event]) this._events[event] = [];\n    this._events[event].push(listener);\n    return this;\n  };\n  EE.prototype.addListener = EE.prototype.on;\n  EE.prototype.once = function(event, listener) {\n    var self = this;\n    function wrapper() {\n      self.removeListener(event, wrapper);\n      listener.apply(this, arguments);\n    }\n    wrapper._original = listener;\n    return this.on(event, wrapper);\n  };\n  EE.prototype.off = function(event, listener) {\n    return this.removeListener(event, listener);\n  };\n  EE.prototype.removeListener = function(event, listener) {\n    var list = this._events[event];\n    if (list) {\n      this._events[event] = list.filter(function(fn) {\n        return fn !== listener && fn._original !== listener;\n      });\n    }\n    return this;\n  };\n  EE.prototype.removeAllListeners = function(event) {\n    if (event) delete this._events[event];\n    else this._events = {};\n    return this;\n  };\n  EE.prototype.emit = function(event) {\n    var list = this._events[event];\n    if (!list || list.length === 0) return false;\n    var args = Array.prototype.slice.call(arguments, 1);\n    var fns = list.slice();\n    for (var i = 0; i < fns.length; i++) fns[i].apply(this, args);\n    return true;\n  };\n  EE.prototype.listeners = function(event) {\n    return (this._events[event] || []).slice();\n  };\n  EE.prototype.listenerCount = function(event) {\n    return (this._events[event] || []).length;\n  };\n  EE.prototype.setMaxListeners = function(n) {\n    this._maxListeners = n;\n    return this;\n  };\n  EE.prototype.eventNames = function() {\n    return Object.keys(this._events);\n  };\n  EE.prototype.prependListener = function(event, listener) {\n    if (!this._events[event]) this._events[event] = [];\n    this._events[event].unshift(listener);\n    return this;\n  };\n  return EE;\n})();\nglobalThis[Symbol.for('jb:events')] = { EventEmitter: EventEmitter };\n";
+/** OS module — hardcoded sandbox values */
+export declare const OS_MODULE_SOURCE = "\nvar _os = {\n  platform: function() { return globalThis.process.platform; },\n  arch: function() { return globalThis.process.arch; },\n  homedir: function() { return '/home/user'; },\n  tmpdir: function() { return '/tmp'; },\n  type: function() { return 'Linux'; },\n  hostname: function() { return 'sandbox'; },\n  EOL: '\\n',\n  cpus: function() { return []; },\n  totalmem: function() { return 0; },\n  freemem: function() { return 0; },\n  endianness: function() { return 'LE'; }\n};\nglobalThis[Symbol.for('jb:os')] = _os;\n";
+/** URL module — wraps globalThis.URL/URLSearchParams from fetch polyfill */
+export declare const URL_MODULE_SOURCE = "\nvar _urlMod = {\n  URL: globalThis.URL,\n  URLSearchParams: globalThis.URLSearchParams,\n  parse: function(urlStr) {\n    try {\n      var u = new URL(urlStr);\n      return {\n        protocol: u.protocol, host: u.host, hostname: u.hostname,\n        port: u.port, pathname: u.pathname, search: u.search,\n        hash: u.hash, href: u.href, path: u.pathname + u.search\n      };\n    } catch(e) {\n      return {\n        protocol: null, host: null, hostname: null, port: null,\n        pathname: urlStr, search: '', hash: '', href: urlStr, path: urlStr\n      };\n    }\n  },\n  format: function(obj) {\n    if (typeof obj === 'string') return obj;\n    if (obj instanceof URL) return obj.href;\n    var auth = obj.auth ? obj.auth + '@' : '';\n    var host = obj.host || ((obj.hostname || '') + (obj.port ? ':' + obj.port : ''));\n    return (obj.protocol ? obj.protocol + '//' : '') + auth + host +\n      (obj.pathname || '/') + (obj.search || '') + (obj.hash || '');\n  }\n};\nglobalThis[Symbol.for('jb:url')] = _urlMod;\n";
+/** Assert module — pure JS */
+export declare const ASSERT_MODULE_SOURCE = "\nvar _deepEqual = function(a, b) {\n  if (a === b) return true;\n  if (a === null || b === null || typeof a !== 'object' || typeof b !== 'object') return false;\n  if (Array.isArray(a) !== Array.isArray(b)) return false;\n  var ka = Object.keys(a), kb = Object.keys(b);\n  if (ka.length !== kb.length) return false;\n  for (var i = 0; i < ka.length; i++) {\n    if (!_deepEqual(a[ka[i]], b[ka[i]])) return false;\n  }\n  return true;\n};\nvar _assert = function(val, msg) {\n  if (!val) throw new Error(msg || 'AssertionError: expected truthy value');\n};\n_assert.ok = _assert;\n_assert.equal = function(a, b, msg) {\n  if (a != b) throw new Error(msg || 'AssertionError: ' + a + ' != ' + b);\n};\n_assert.notEqual = function(a, b, msg) {\n  if (a == b) throw new Error(msg || 'AssertionError: ' + a + ' == ' + b);\n};\n_assert.strictEqual = function(a, b, msg) {\n  if (a !== b) throw new Error(msg || 'AssertionError: ' + a + ' !== ' + b);\n};\n_assert.notStrictEqual = function(a, b, msg) {\n  if (a === b) throw new Error(msg || 'AssertionError: ' + a + ' === ' + b);\n};\n_assert.deepEqual = function(a, b, msg) {\n  if (!_deepEqual(a, b)) throw new Error(msg || 'AssertionError: objects not deep equal');\n};\n_assert.deepStrictEqual = _assert.deepEqual;\n_assert.notDeepEqual = function(a, b, msg) {\n  if (_deepEqual(a, b)) throw new Error(msg || 'AssertionError: objects are deep equal');\n};\n_assert.throws = function(fn, expected, msg) {\n  var threw = false;\n  try { fn(); } catch(e) {\n    threw = true;\n    if (expected instanceof RegExp && !expected.test(e.message))\n      throw new Error(msg || 'AssertionError: error message did not match');\n  }\n  if (!threw) throw new Error(msg || 'AssertionError: function did not throw');\n};\n_assert.doesNotThrow = function(fn, msg) {\n  // @banned-pattern-ignore: sandbox-internal assertion helper; e.message is from user code inside QuickJS, not host details\n  try { fn(); } catch(e) {\n    throw new Error(msg || 'AssertionError: function threw: ' + e.message);\n  }\n};\n_assert.fail = function(msg) {\n  throw new Error(msg || 'AssertionError: assert.fail()');\n};\nglobalThis[Symbol.for('jb:assert')] = _assert;\n";
+/** Util module — format, inspect, promisify, types */
+export declare const UTIL_MODULE_SOURCE = "\nvar _util = {\n  format: function() {\n    var args = Array.prototype.slice.call(arguments);\n    if (args.length === 0) return '';\n    var fmt = args[0];\n    if (typeof fmt !== 'string') {\n      return args.map(function(a) {\n        return typeof a === 'string' ? a : JSON.stringify(a);\n      }).join(' ');\n    }\n    var i = 1;\n    var str = fmt.replace(/%[sdjifoO%]/g, function(m) {\n      if (m === '%%') return '%';\n      if (i >= args.length) return m;\n      var v = args[i++];\n      if (m === '%s') return String(v);\n      if (m === '%d') return Number(v).toString();\n      if (m === '%i') { var n = Number(v); return (isNaN(n) ? 'NaN' : Math.trunc(n)).toString(); }\n      if (m === '%j') return JSON.stringify(v);\n      if (m === '%f') return parseFloat(v).toString();\n      if (m === '%o' || m === '%O') return JSON.stringify(v);\n      return m;\n    });\n    while (i < args.length) {\n      str += ' ' + (typeof args[i] === 'string' ? args[i] : JSON.stringify(args[i]));\n      i++;\n    }\n    return str;\n  },\n  inspect: function(obj, opts) {\n    if (obj === null) return 'null';\n    if (obj === undefined) return 'undefined';\n    if (typeof obj === 'string') return \"'\" + obj + \"'\";\n    if (typeof obj === 'function') return '[Function: ' + (obj.name || 'anonymous') + ']';\n    var seen = [];\n    try {\n      return JSON.stringify(obj, function(key, val) {\n        if (typeof val === 'object' && val !== null) {\n          if (seen.indexOf(val) !== -1) return '[Circular]';\n          seen.push(val);\n        }\n        return val;\n      });\n    } catch(e) { return String(obj); }\n  },\n  promisify: function(fn) {\n    return function() {\n      var args = Array.prototype.slice.call(arguments);\n      return new Promise(function(resolve, reject) {\n        args.push(function(err, val) { if (err) reject(err); else resolve(val); });\n        fn.apply(null, args);\n      });\n    };\n  },\n  types: {\n    isDate: function(v) { return v instanceof Date; },\n    isRegExp: function(v) { return v instanceof RegExp; },\n    isArray: function(v) { return Array.isArray(v); },\n    isMap: function(v) { return typeof Map !== 'undefined' && v instanceof Map; },\n    isSet: function(v) { return typeof Set !== 'undefined' && v instanceof Set; }\n  },\n  inherits: function(ctor, superCtor) {\n    ctor.prototype = Object.create(superCtor.prototype);\n    ctor.prototype.constructor = ctor;\n  }\n};\nglobalThis[Symbol.for('jb:util')] = _util;\n";
+/** Buffer module — wraps Uint8Array, pure-JS UTF-8 (no TextEncoder/TextDecoder) */
+export declare const BUFFER_MODULE_SOURCE = "\nfunction _utf8Encode(str) {\n  var bytes = [];\n  for (var i = 0; i < str.length; i++) {\n    var c = str.charCodeAt(i);\n    if (c < 0x80) {\n      bytes.push(c);\n    } else if (c < 0x800) {\n      bytes.push(0xC0 | (c >> 6), 0x80 | (c & 0x3F));\n    } else if (c >= 0xD800 && c <= 0xDBFF && i + 1 < str.length) {\n      var lo = str.charCodeAt(++i);\n      var cp = ((c - 0xD800) * 0x400) + (lo - 0xDC00) + 0x10000;\n      bytes.push(0xF0 | (cp >> 18), 0x80 | ((cp >> 12) & 0x3F), 0x80 | ((cp >> 6) & 0x3F), 0x80 | (cp & 0x3F));\n    } else {\n      bytes.push(0xE0 | (c >> 12), 0x80 | ((c >> 6) & 0x3F), 0x80 | (c & 0x3F));\n    }\n  }\n  return bytes;\n}\nfunction _utf8Decode(bytes) {\n  var str = '';\n  var i = 0;\n  while (i < bytes.length) {\n    var b = bytes[i];\n    if (b < 0x80) { str += String.fromCharCode(b); i++; }\n    else if ((b & 0xE0) === 0xC0) { str += String.fromCharCode(((b & 0x1F) << 6) | (bytes[i+1] & 0x3F)); i += 2; }\n    else if ((b & 0xF0) === 0xE0) { str += String.fromCharCode(((b & 0x0F) << 12) | ((bytes[i+1] & 0x3F) << 6) | (bytes[i+2] & 0x3F)); i += 3; }\n    else if ((b & 0xF8) === 0xF0) { var cp = ((b & 0x07) << 18) | ((bytes[i+1] & 0x3F) << 12) | ((bytes[i+2] & 0x3F) << 6) | (bytes[i+3] & 0x3F); cp -= 0x10000; str += String.fromCharCode((cp >> 10) + 0xD800, (cp & 0x3FF) + 0xDC00); i += 4; }\n    else { i++; }\n  }\n  return str;\n}\n// _utf8Encode/_utf8Decode are IIFE-local vars, available to all module shims\n\nfunction Buffer(arg) {\n  if (typeof arg === 'number') {\n    this._data = new Uint8Array(arg);\n  } else if (arg instanceof ArrayBuffer) {\n    this._data = new Uint8Array(arg);\n  } else if (arg instanceof Uint8Array) {\n    this._data = new Uint8Array(arg);\n  } else if (Array.isArray(arg)) {\n    this._data = new Uint8Array(arg);\n  } else {\n    this._data = new Uint8Array(0);\n  }\n  this.length = this._data.length;\n}\nBuffer.from = function(data, encoding) {\n  if (typeof data === 'string') {\n    return new Buffer(_utf8Encode(data));\n  }\n  if (data instanceof ArrayBuffer) return new Buffer(data);\n  if (data instanceof Uint8Array) return new Buffer(data);\n  if (Array.isArray(data)) return new Buffer(data);\n  if (data && data._data) return new Buffer(data._data.slice());\n  return new Buffer(0);\n};\nBuffer.alloc = function(size, fill) {\n  var buf = new Buffer(size);\n  if (fill !== undefined) {\n    var fillByte = typeof fill === 'number' ? fill : 0;\n    buf._data.fill(fillByte);\n  }\n  return buf;\n};\nBuffer.allocUnsafe = Buffer.alloc;\nBuffer.isBuffer = function(obj) { return obj instanceof Buffer; };\nBuffer.concat = function(list, totalLength) {\n  if (!totalLength) {\n    totalLength = 0;\n    for (var i = 0; i < list.length; i++) totalLength += list[i].length;\n  }\n  var result = new Uint8Array(totalLength);\n  var offset = 0;\n  for (var i = 0; i < list.length; i++) {\n    result.set(list[i]._data, offset);\n    offset += list[i].length;\n  }\n  return new Buffer(result);\n};\nBuffer.byteLength = function(str) {\n  return _utf8Encode(str).length;\n};\nBuffer.prototype.toString = function(encoding) {\n  return _utf8Decode(this._data);\n};\nBuffer.prototype.toJSON = function() {\n  return { type: 'Buffer', data: Array.from(this._data) };\n};\nBuffer.prototype.slice = function(start, end) {\n  return new Buffer(this._data.slice(start, end));\n};\nBuffer.prototype.copy = function(target, targetStart, sourceStart, sourceEnd) {\n  targetStart = targetStart || 0;\n  sourceStart = sourceStart || 0;\n  sourceEnd = sourceEnd || this.length;\n  var sub = this._data.subarray(sourceStart, sourceEnd);\n  target._data.set(sub, targetStart);\n  return sub.length;\n};\nBuffer.prototype.write = function(str, offset) {\n  var bytes = _utf8Encode(str);\n  offset = offset || 0;\n  this._data.set(bytes, offset);\n  return bytes.length;\n};\nBuffer.prototype.fill = function(val, offset, end) {\n  this._data.fill(typeof val === 'number' ? val : 0, offset, end);\n  return this;\n};\nBuffer.prototype.equals = function(other) {\n  if (this.length !== other.length) return false;\n  for (var i = 0; i < this.length; i++) {\n    if (this._data[i] !== other._data[i]) return false;\n  }\n  return true;\n};\nBuffer.prototype.readUInt8 = function(offset) { return this._data[offset]; };\nBuffer.prototype.writeUInt8 = function(value, offset) { this._data[offset] = value; return offset + 1; };\nglobalThis[Symbol.for('jb:buffer')] = { Buffer: Buffer };\nglobalThis.Buffer = Buffer;\n";
+/** Stream module — minimal stubs based on EventEmitter */
+export declare const STREAM_MODULE_SOURCE = "\nvar _EE = globalThis[Symbol.for('jb:events')].EventEmitter;\n\nfunction Stream() { _EE.call(this); }\nStream.prototype = Object.create(_EE.prototype);\nStream.prototype.constructor = Stream;\nStream.prototype.pipe = function(dest) {\n  this.on('data', function(chunk) { dest.write(chunk); });\n  this.on('end', function() { if (dest.end) dest.end(); });\n  return dest;\n};\n\nfunction Readable(opts) {\n  Stream.call(this);\n  this.readable = true;\n  this._readableState = { ended: false, buffer: [] };\n}\nReadable.prototype = Object.create(Stream.prototype);\nReadable.prototype.constructor = Readable;\nReadable.prototype.read = function() { return null; };\nReadable.prototype.push = function(chunk) {\n  if (chunk === null) { this._readableState.ended = true; this.emit('end'); return false; }\n  this.emit('data', chunk);\n  return true;\n};\nReadable.prototype.destroy = function() { this.emit('close'); return this; };\n\nfunction Writable(opts) {\n  Stream.call(this);\n  this.writable = true;\n  this._writableState = { ended: false };\n}\nWritable.prototype = Object.create(Stream.prototype);\nWritable.prototype.constructor = Writable;\nWritable.prototype.write = function(chunk) { return true; };\nWritable.prototype.end = function(chunk) {\n  if (chunk) this.write(chunk);\n  this._writableState.ended = true;\n  this.emit('finish');\n  return this;\n};\nWritable.prototype.destroy = function() { this.emit('close'); return this; };\n\nfunction Duplex(opts) {\n  Readable.call(this, opts);\n  Writable.call(this, opts);\n}\nDuplex.prototype = Object.create(Readable.prototype);\nvar _wKeys = Object.keys(Writable.prototype);\nfor (var _wi = 0; _wi < _wKeys.length; _wi++) {\n  if (!Duplex.prototype[_wKeys[_wi]]) Duplex.prototype[_wKeys[_wi]] = Writable.prototype[_wKeys[_wi]];\n}\nDuplex.prototype.constructor = Duplex;\n\nfunction Transform(opts) { Duplex.call(this, opts); }\nTransform.prototype = Object.create(Duplex.prototype);\nTransform.prototype.constructor = Transform;\nTransform.prototype._transform = function(chunk, encoding, cb) { if (cb) cb(null, chunk); };\n\nfunction PassThrough(opts) { Transform.call(this, opts); }\nPassThrough.prototype = Object.create(Transform.prototype);\nPassThrough.prototype.constructor = PassThrough;\n\nfunction pipeline() {\n  var streams = Array.prototype.slice.call(arguments);\n  var cb = typeof streams[streams.length - 1] === 'function' ? streams.pop() : null;\n  for (var i = 0; i < streams.length - 1; i++) streams[i].pipe(streams[i + 1]);\n  if (cb) {\n    var last = streams[streams.length - 1];\n    last.on('finish', function() { cb(null); });\n    last.on('error', function(e) { cb(e); });\n  }\n  return streams[streams.length - 1];\n}\n\nglobalThis[Symbol.for('jb:stream')] = {\n  Stream: Stream, Readable: Readable, Writable: Writable,\n  Duplex: Duplex, Transform: Transform, PassThrough: PassThrough,\n  pipeline: pipeline\n};\n";
+/** StringDecoder module — uses _utf8Decode from Buffer shim */
+export declare const STRING_DECODER_MODULE_SOURCE = "\nfunction StringDecoder(encoding) {\n  this.encoding = (encoding || 'utf-8').toLowerCase();\n  if (this.encoding === 'utf8') this.encoding = 'utf-8';\n}\nStringDecoder.prototype.write = function(buf) {\n  if (typeof buf === 'string') return buf;\n  var data = buf instanceof Uint8Array ? buf : (buf && buf._data ? buf._data : new Uint8Array(0));\n  return _utf8Decode(data);\n};\nStringDecoder.prototype.end = function(buf) {\n  if (buf) return this.write(buf);\n  return '';\n};\nglobalThis[Symbol.for('jb:string_decoder')] = { StringDecoder: StringDecoder };\n";
+/** Querystring module — pure JS */
+export declare const QUERYSTRING_MODULE_SOURCE = "\nvar _qs = {\n  parse: function(str, sep, eq) {\n    sep = sep || '&'; eq = eq || '=';\n    var result = Object.create(null);\n    if (!str || typeof str !== 'string') return result;\n    var pairs = str.split(sep);\n    for (var i = 0; i < pairs.length; i++) {\n      var idx = pairs[i].indexOf(eq);\n      var key, val;\n      if (idx >= 0) {\n        key = decodeURIComponent(pairs[i].slice(0, idx).replace(/\\+/g, ' '));\n        val = decodeURIComponent(pairs[i].slice(idx + 1).replace(/\\+/g, ' '));\n      } else {\n        key = decodeURIComponent(pairs[i].replace(/\\+/g, ' '));\n        val = '';\n      }\n      if (result[key] !== undefined) {\n        if (Array.isArray(result[key])) result[key].push(val);\n        else result[key] = [result[key], val];\n      } else {\n        result[key] = val;\n      }\n    }\n    return result;\n  },\n  stringify: function(obj, sep, eq) {\n    sep = sep || '&'; eq = eq || '=';\n    var pairs = [];\n    var keys = Object.keys(obj);\n    for (var i = 0; i < keys.length; i++) {\n      var key = keys[i];\n      var val = obj[key];\n      if (Array.isArray(val)) {\n        for (var j = 0; j < val.length; j++) {\n          pairs.push(encodeURIComponent(key) + eq + encodeURIComponent(val[j]));\n        }\n      } else {\n        pairs.push(encodeURIComponent(key) + eq + encodeURIComponent(val));\n      }\n    }\n    return pairs.join(sep);\n  },\n  escape: function(str) { return encodeURIComponent(str); },\n  unescape: function(str) { return decodeURIComponent(str); }\n};\n_qs.decode = _qs.parse;\n_qs.encode = _qs.stringify;\nglobalThis[Symbol.for('jb:querystring')] = _qs;\n";
+/**
+ * Unsupported Node.js modules — throw clear error at require/import time.
+ * Map of module name to hint message.
+ */
+export declare const UNSUPPORTED_MODULES: Record<string, string>;

package/dist/commands/js-exec/path-polyfill.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Pure-JS POSIX path module source for QuickJS.
+ * Exported as a string constant to be evaluated inside the sandbox.
+ * Wrapped in an IIFE to avoid name conflicts with module-level exports.
+ */
+export declare const PATH_MODULE_SOURCE = "\n(function() {\n  var sep = '/';\n  var delimiter = ':';\n\n  function normalize(p) {\n    if (p === '') return '.';\n    var isAbs = p.charCodeAt(0) === 47;\n    var trailingSlash = p.charCodeAt(p.length - 1) === 47;\n    var parts = p.split('/');\n    var out = [];\n    for (var i = 0; i < parts.length; i++) {\n      var seg = parts[i];\n      if (seg === '' || seg === '.') continue;\n      if (seg === '..') {\n        if (out.length > 0 && out[out.length - 1] !== '..') out.pop();\n        else if (!isAbs) out.push('..');\n      } else {\n        out.push(seg);\n      }\n    }\n    var result = out.join('/');\n    if (isAbs) result = '/' + result;\n    if (trailingSlash && result[result.length - 1] !== '/') result += '/';\n    return result || (isAbs ? '/' : '.');\n  }\n\n  function join() {\n    var joined = '';\n    for (var i = 0; i < arguments.length; i++) {\n      var arg = arguments[i];\n      if (typeof arg !== 'string') throw new TypeError('Path must be a string');\n      if (arg.length > 0) {\n        if (joined.length > 0) joined += '/' + arg;\n        else joined = arg;\n      }\n    }\n    if (joined.length === 0) return '.';\n    return normalize(joined);\n  }\n\n  function resolve() {\n    var resolved = '';\n    var resolvedAbsolute = false;\n    for (var i = arguments.length - 1; i >= -1 && !resolvedAbsolute; i--) {\n      var path = i >= 0 ? arguments[i] : globalThis.process.cwd();\n      if (typeof path !== 'string') throw new TypeError('Path must be a string');\n      if (path.length === 0) continue;\n      if (resolved.length > 0) resolved = path + '/' + resolved;\n      else resolved = path;\n      resolvedAbsolute = path.charCodeAt(0) === 47;\n    }\n    resolved = normalize(resolved);\n    if (resolvedAbsolute) return '/' + resolved.replace(/^\\/+/, '');\n    return resolved.length > 0 ? resolved : '.';\n  }\n\n  function isAbsolute(p) {\n    return typeof p === 'string' && p.length > 0 && p.charCodeAt(0) === 47;\n  }\n\n  function dirname(p) {\n    if (p.length === 0) return '.';\n    var hasRoot = p.charCodeAt(0) === 47;\n    var end = -1;\n    for (var i = p.length - 1; i >= 1; i--) {\n      if (p.charCodeAt(i) === 47) { end = i; break; }\n    }\n    if (end === -1) return hasRoot ? '/' : '.';\n    if (hasRoot && end === 0) return '/';\n    return p.slice(0, end);\n  }\n\n  function basename(p, ext) {\n    var start = 0;\n    for (var i = p.length - 1; i >= 0; i--) {\n      if (p.charCodeAt(i) === 47) { start = i + 1; break; }\n    }\n    var base = p.slice(start);\n    if (ext && base.endsWith(ext)) {\n      base = base.slice(0, base.length - ext.length);\n    }\n    return base;\n  }\n\n  function extname(p) {\n    var startDot = -1;\n    var startPart = 0;\n    for (var i = p.length - 1; i >= 0; i--) {\n      var code = p.charCodeAt(i);\n      if (code === 47) { startPart = i + 1; break; }\n      if (code === 46 && startDot === -1) startDot = i;\n    }\n    if (startDot === -1 || startDot === startPart ||\n        (startDot === startPart + 1 && p.charCodeAt(startPart) === 46)) {\n      return '';\n    }\n    return p.slice(startDot);\n  }\n\n  function relative(from, to) {\n    if (from === to) return '';\n    from = resolve(from);\n    to = resolve(to);\n    if (from === to) return '';\n    var fromParts = from.split('/').filter(Boolean);\n    var toParts = to.split('/').filter(Boolean);\n    var common = 0;\n    var length = Math.min(fromParts.length, toParts.length);\n    for (var i = 0; i < length; i++) {\n      if (fromParts[i] !== toParts[i]) break;\n      common++;\n    }\n    var ups = [];\n    for (var i = common; i < fromParts.length; i++) ups.push('..');\n    return ups.concat(toParts.slice(common)).join('/') || '.';\n  }\n\n  function parse(p) {\n    var root = p.charCodeAt(0) === 47 ? '/' : '';\n    var dir = dirname(p);\n    var base = basename(p);\n    var ext = extname(p);\n    var name = ext ? base.slice(0, base.length - ext.length) : base;\n    return { root: root, dir: dir, base: base, ext: ext, name: name };\n  }\n\n  function format(obj) {\n    var dir = obj.dir || obj.root || '';\n    var base = obj.base || ((obj.name || '') + (obj.ext || ''));\n    if (!dir) return base;\n    if (dir === obj.root) return dir + base;\n    return dir + '/' + base;\n  }\n\n  var posix = { sep: sep, delimiter: delimiter, join: join, resolve: resolve, normalize: normalize, isAbsolute: isAbsolute, dirname: dirname, basename: basename, extname: extname, relative: relative, parse: parse, format: format };\n  posix.posix = posix;\n\n  globalThis[Symbol.for('jb:path')] = posix;\n})();\n";

package/dist/commands/ln/ln.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const lnCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/ls/ls.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const lsCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/md5sum/checksum.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Shared checksum utilities for md5sum, sha1sum, sha256sum
+ * Uses WebCrypto API for SHA algorithms, pure JS for MD5
+ */
+import type { Command } from "../../types.js";
+export type HashAlgorithm = "md5" | "sha1" | "sha256";
+export declare function createChecksumCommand(name: string, algorithm: HashAlgorithm, summary: string): Command;

package/dist/commands/md5sum/md5sum.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const md5sumCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/md5sum/sha1sum.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const sha1sumCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/md5sum/sha256sum.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const sha256sumCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/mkdir/mkdir.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const mkdirCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/mv/mv.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const mvCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/nl/nl.d.ts

@@ -0,0 +1,12 @@
+/**
+ * nl - number lines of files
+ *
+ * Usage: nl [OPTION]... [FILE]...
+ *
+ * Write each FILE to standard output, with line numbers added.
+ * If no FILE is specified, standard input is read.
+ */
+import type { Command } from "../../types.js";
+export declare const nl: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/od/od.d.ts

@@ -0,0 +1,12 @@
+/**
+ * od - dump files in octal and other formats
+ *
+ * Usage: od [OPTION]... [FILE]...
+ *
+ * Write an unambiguous representation, octal bytes by default,
+ * of FILE to standard output.
+ */
+import type { Command } from "../../types.js";
+export declare const od: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/paste/paste.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const pasteCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/printf/escapes.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Shared escape sequence and formatting utilities
+ * Used by printf command and find -printf
+ */
+/**
+ * Apply width and alignment to a string value
+ * Supports: width (right-justify), -width (left-justify), .precision (truncate)
+ * @param value - The string value to format
+ * @param width - The field width (negative for left-justify)
+ * @param precision - Maximum length (-1 for no limit)
+ */
+export declare function applyWidth(value: string, width: number, precision: number): string;
+/**
+ * Parse a width/precision spec from a format directive
+ * Returns: [width, precision, charsConsumed]
+ * width: positive for right-justify, negative for left-justify
+ * precision: -1 if not specified
+ */
+export declare function parseWidthPrecision(format: string, startIndex: number): [number, number, number];
+/**
+ * Process escape sequences in a string
+ * Handles: \n, \t, \r, \\, \a, \b, \f, \v, \e, \0NNN (octal), \xHH (hex),
+ *          \uHHHH (unicode), \UHHHHHHHH (unicode)
+ */
+export declare function processEscapes(str: string): string;

package/dist/commands/printf/printf.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const printfCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/printf/strftime.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Strftime Formatting Functions
+ *
+ * Handles date/time formatting for printf's %(...)T directive.
+ */
+/**
+ * Format a timestamp using strftime-like format string.
+ */
+export declare function formatStrftime(format: string, timestamp: number, tz?: string): string;

package/dist/commands/pwd/pwd.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../types.js";
+export declare const pwdCommand: Command;
+import type { CommandFuzzInfo } from "../fuzz-flags-types.js";
+export declare const flagsForFuzzing: CommandFuzzInfo;

package/dist/commands/python3/python3.d.ts

@@ -0,0 +1,16 @@
+/**
+ * python3 - Execute Python code via CPython Emscripten (Python in WebAssembly)
+ *
+ * Runs Python code in an isolated worker thread with access to the
+ * virtual filesystem via SharedArrayBuffer bridge.
+ *
+ * Security: CPython Emscripten has zero JS bridge code. `import js` fails
+ * with ModuleNotFoundError. No sandbox needed — isolation by construction.
+ *
+ * This command is Node.js only (uses worker_threads).
+ */
+import type { Command } from "../../types.js";
+/** @internal Reset queue state — for tests only */
+export declare function _resetExecutionQueue(): void;
+export declare const python3Command: Command;
+export declare const pythonCommand: Command;

package/dist/commands/python3/worker.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Worker thread for Python execution via CPython Emscripten.
+ * Creates a fresh CPython WASM instance per execution (EXIT_RUNTIME).
+ *
+ * Security model: CPython Emscripten has zero JS bridge code.
+ * `import js` fails with `ModuleNotFoundError` — the module doesn't exist.
+ * `os.system()` is patched to no-op at Emscripten level.
+ * No sandbox code needed — isolation is by construction.
+ *
+ * Defense-in-depth activates BEFORE CPython loads to block dangerous Node.js APIs.
+ */
+import { type WorkerDefenseStats } from "../../security/index.js";
+export interface WorkerInput {
+    protocolToken: string;
+    sharedBuffer: SharedArrayBuffer;
+    pythonCode: string;
+    cwd: string;
+    env: Record<string, string>;
+    args: string[];
+    scriptPath?: string;
+    timeoutMs?: number;
+}
+export interface WorkerOutput {
+    success: boolean;
+    error?: string;
+    /** Defense-in-depth stats if enabled */
+    defenseStats?: WorkerDefenseStats;
+}

package/dist/commands/query-engine/builtins/array-builtins.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Array-related jq builtins
+ *
+ * Handles array manipulation functions like sort, sort_by, group_by, max, min, add, etc.
+ */
+import type { EvalContext } from "../evaluator.js";
+import type { AstNode } from "../parser.js";
+import type { QueryValue } from "../value-operations.js";
+type EvalFn = (value: QueryValue, ast: AstNode, ctx: EvalContext) => QueryValue[];
+type EvalWithPartialFn = (value: QueryValue, ast: AstNode, ctx: EvalContext) => QueryValue[];
+type CompareFn = (a: QueryValue, b: QueryValue) => number;
+type IsTruthyFn = (v: QueryValue) => boolean;
+type ContainsDeepFn = (a: QueryValue, b: QueryValue) => boolean;
+type ExecutionLimitErrorClass = new (message: string, kind: "recursion" | "commands" | "iterations") => Error;
+/**
+ * Handle array builtins that need evaluate function for arguments.
+ * Returns null if the builtin name is not an array builtin handled here.
+ */
+export declare function evalArrayBuiltin(value: QueryValue, name: string, args: AstNode[], ctx: EvalContext, evaluate: EvalFn, evaluateWithPartialResults: EvalWithPartialFn, compareJq: CompareFn, isTruthy: IsTruthyFn, containsDeep: ContainsDeepFn, ExecutionLimitError: ExecutionLimitErrorClass): QueryValue[] | null;
+export {};

package/dist/commands/query-engine/builtins/control-builtins.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Control flow jq builtins
+ *
+ * Handles first, last, nth, range, limit, isempty, isvalid, skip, until, while, repeat.
+ */
+import type { EvalContext } from "../evaluator.js";
+import type { AstNode } from "../parser.js";
+import type { QueryValue } from "../value-operations.js";
+type EvalFn = (value: QueryValue, ast: AstNode, ctx: EvalContext) => QueryValue[];
+type EvalWithPartialFn = (value: QueryValue, ast: AstNode, ctx: EvalContext) => QueryValue[];
+type IsTruthyFn = (v: QueryValue) => boolean;
+type ExecutionLimitErrorClass = new (message: string, kind: "recursion" | "commands" | "iterations") => Error;
+/**
+ * Handle control flow builtins.
+ * Returns null if the builtin name is not a control builtin handled here.
+ */
+export declare function evalControlBuiltin(value: QueryValue, name: string, args: AstNode[], ctx: EvalContext, evaluate: EvalFn, evaluateWithPartialResults: EvalWithPartialFn, isTruthy: IsTruthyFn, ExecutionLimitError: ExecutionLimitErrorClass): QueryValue[] | null;
+export {};

package/dist/commands/query-engine/builtins/date-builtins.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Date/time-related jq builtins
+ *
+ * Handles date and time functions like now, gmtime, mktime, strftime, strptime, etc.
+ */
+import type { EvalContext } from "../evaluator.js";
+import type { AstNode } from "../parser.js";
+import type { QueryValue } from "../value-operations.js";
+type EvalFn = (value: QueryValue, ast: AstNode, ctx: EvalContext) => QueryValue[];
+/**
+ * Handle date builtins that need evaluate function for arguments.
+ * Returns null if the builtin name is not a date builtin handled here.
+ */
+export declare function evalDateBuiltin(value: QueryValue, name: string, args: AstNode[], ctx: EvalContext, evaluate: EvalFn): QueryValue[] | null;
+export {};

package/dist/commands/query-engine/builtins/format-builtins.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Format-related jq builtins (@ prefixed)
+ *
+ * Handles encoding/formatting functions like @base64, @uri, @csv, @json, etc.
+ */
+import type { QueryValue } from "../value-operations.js";
+/**
+ * Handle format builtins (those starting with @).
+ * Returns null if the builtin name is not a format builtin handled here.
+ */
+export declare function evalFormatBuiltin(value: QueryValue, name: string, maxDepth?: number): QueryValue[] | null;

package/dist/commands/query-engine/builtins/index-builtins.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Index-related jq builtins
+ *
+ * Handles index, rindex, and indices functions for finding positions in arrays/strings.
+ */
+import type { EvalContext } from "../evaluator.js";
+import type { AstNode } from "../parser.js";
+import type { QueryValue } from "../value-operations.js";
+type EvalFn = (value: QueryValue, ast: AstNode, ctx: EvalContext) => QueryValue[];
+type DeepEqualFn = (a: QueryValue, b: QueryValue) => boolean;
+/**
+ * Handle index builtins that need evaluate function for arguments.
+ * Returns null if the builtin name is not an index builtin handled here.
+ */
+export declare function evalIndexBuiltin(value: QueryValue, name: string, args: AstNode[], ctx: EvalContext, evaluate: EvalFn, deepEqual: DeepEqualFn): QueryValue[] | null;
+export {};

package/dist/commands/query-engine/builtins/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * jq builtin functions index
+ *
+ * Re-exports all builtin handlers from category-specific modules.
+ */
+export { evalArrayBuiltin } from "./array-builtins.js";
+export { evalControlBuiltin } from "./control-builtins.js";
+export { evalDateBuiltin } from "./date-builtins.js";
+export { evalFormatBuiltin } from "./format-builtins.js";
+export { evalIndexBuiltin } from "./index-builtins.js";
+export { evalMathBuiltin } from "./math-builtins.js";
+export { evalNavigationBuiltin } from "./navigation-builtins.js";
+export { evalObjectBuiltin } from "./object-builtins.js";
+export { evalPathBuiltin } from "./path-builtins.js";
+export { evalSqlBuiltin } from "./sql-builtins.js";
+export { evalStringBuiltin } from "./string-builtins.js";
+export { evalTypeBuiltin } from "./type-builtins.js";

package/dist/commands/query-engine/builtins/math-builtins.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Math-related jq builtins
+ *
+ * Handles mathematical functions like abs, pow, exp, trig functions, etc.
+ */
+import type { EvalContext } from "../evaluator.js";
+import type { AstNode } from "../parser.js";
+import type { QueryValue } from "../value-operations.js";
+type EvalFn = (value: QueryValue, ast: AstNode, ctx: EvalContext) => QueryValue[];
+/**
+ * Handle math builtins that need evaluate function for arguments.
+ * Returns null if the builtin name is not a math builtin handled here.
+ */
+export declare function evalMathBuiltin(value: QueryValue, name: string, args: AstNode[], ctx: EvalContext, evaluate: EvalFn): QueryValue[] | null;
+export {};