@fnndsc/brasa 0.30.0 → 0.31.0

package/dist/buildinfo.json

@@ -1 +1 @@
-{"hash":"0491d5"}
+{"hash":"30fbc2"}

package/dist/builtins/fs/acl.args.d.ts

@@ -1,69 +1,104 @@
 /**
- * @file Shared `setfacl` / `getfacl` command-line grammar.
+ * @file Shared `setfacl` / `getfacl` / `chmod` command-line grammar.
  *
  * A feed shared with another identity is, in POSIX terms, an access
- * control entry: `setfacl -m u:someone:r <path>`. That is the verb a
- * terminal already knows. "Share X with Y" is a sentence — it belongs to
- * a natural-language assist, not to a shell.
+ * control entry: `setfacl -m u:someone:r <path>`, `setfacl -m g:lab:r`,
+ * and the other entry `setfacl -m o::r` for everyone (a public feed). That
+ * is the verb a terminal already knows. "Share X with Y" is a sentence — it
+ * belongs to a natural-language assist, not to a shell.
  *
  * Dependency-free, as `cat.args.ts` is: the engine graph cannot be loaded
  * under jest, so a grammar inside the builtin is a grammar nothing tests.
  *
  * @module
  */
+/** Which identity an entry names. */
+export type AclKind = 'user' | 'group' | 'other';
 /** One access control entry, as `setfacl -m` spells it. */
 export interface AclEntry {
-    /** Identity the entry names. Only user entries are supported. */
-    username: string;
+    kind: AclKind;
+    /** The user or group; empty for the other entry. */
+    name: string;
     /** Permission letters, in `rwx` order, minus omitted. */
     perms: string;
 }
+/** A grant to withdraw, as `setfacl -x` names it. */
+export interface AclRemoval {
+    kind: 'user' | 'group';
+    name: string;
+}
 /** A parsed `setfacl` invocation. */
 export interface SetfaclArgs {
     /** The entry to add or modify, when `-m` was given. */
     modify: AclEntry | null;
-    /** The identity to strip, when `-x` was given. */
-    remove: string | null;
+    /** The grant to withdraw, when `-x` was given. */
+    remove: AclRemoval | null;
     /** Paths the entry applies to. */
     paths: string[];
     /** What was wrong with the invocation, when something was. */
     error: string | null;
 }
+/** Who can read a feed besides its owner, as `getfacl` shows it. */
+export interface AclView {
+    users: readonly string[];
+    groups: readonly string[];
+    public: boolean;
+}
 /** How `setfacl` is spelled, for help and for errors. */
 export declare const SETFACL_USAGE: string;
 /** How `getfacl` is spelled. */
 export declare const GETFACL_USAGE: string;
+/** How `chmod` is spelled on a feed. */
+export declare const CHMOD_USAGE: string;
 /**
- * Reads an access control entry of the form `u:<user>:<perms>`.
+ * Reads an access control entry: `u:<user>:<perms>`, `g:<group>:<perms>`,
+ * or the other entry `o::<perms>` (also `o:<perms>`); long kinds read too.
  *
  * @param spec - The entry as typed.
- * @returns The entry, or null when it is not a user entry.
+ * @returns The entry, or null when it is none of these.
  */
 export declare function aclEntry_parse(spec: string): AclEntry | null;
+/**
+ * Reads the grant `setfacl -x` withdraws: `u:<user>` or `g:<group>` (a bare
+ * name is a user, as on Linux).
+ *
+ * @param spec - The entry as typed.
+ * @returns The grant, or the refusal's words.
+ */
+export declare function aclRemoval_parse(spec: string): AclRemoval | string;
 /**
  * Reads a `setfacl` invocation.
  *
  * @param args - Raw argument tokens.
- * @returns The requested change and its targets, or the reason it cannot
- *   be read.
+ * @returns The requested change and its targets, or the reason it cannot be read.
  */
 export declare function setfaclArgs_parse(args: string[]): SetfaclArgs;
 /**
- * Resolves a feed id from an id, a `feed_N` name, or a path holding one.
+ * Reads a `chmod` on feeds: `o+r` makes them public, `o-r` private, and
+ * either is the other entry `setfacl` writes.
  *
- * The path form matches `/feeds/feed_<id>/` wherever it appears, so a path
- * under `/SHARED` resolves by the same rule as one under a home folder.
+ * @param args - Raw argument tokens.
+ * @returns The entry and the feeds, or the refusal's words.
+ */
+export declare function chmodArgs_parse(args: string[]): {
+    entry: AclEntry;
+    paths: string[];
+} | string;
+/**
+ * Resolves a feed id from an id, a `feed_N` name, a path through `/feeds/`,
+ * or its projection `/proc/jobs/feed_N`.
  *
  * @param target - What the operator typed.
  * @returns The feed id, or null when nothing in it names a feed.
  */
 export declare function aclTarget_resolve(target: string): number | null;
 /**
- * Renders an access list the way `getfacl` does.
+ * Renders an access list the way `getfacl` does: the owner's entry, one line
+ * per user and per group granted read, then the other entry (public or not).
  *
  * @param path - The path as the operator named it.
  * @param owner - The owning identity, when known.
- * @param usernames - Identities granted access.
+ * @param access - Who can read it.
  * @returns The rendered block, without a trailing newline.
  */
-export declare function acl_render(path: string, owner: string | null, usernames: readonly string[]): string;
+export declare function acl_render(path: string, owner: string | null, access: AclView): string;

package/dist/builtins/fs/acl.args.js

@@ -1,10 +1,11 @@
 /**
- * @file Shared `setfacl` / `getfacl` command-line grammar.
+ * @file Shared `setfacl` / `getfacl` / `chmod` command-line grammar.
  *
  * A feed shared with another identity is, in POSIX terms, an access
- * control entry: `setfacl -m u:someone:r <path>`. That is the verb a
- * terminal already knows. "Share X with Y" is a sentence — it belongs to
- * a natural-language assist, not to a shell.
+ * control entry: `setfacl -m u:someone:r <path>`, `setfacl -m g:lab:r`,
+ * and the other entry `setfacl -m o::r` for everyone (a public feed). That
+ * is the verb a terminal already knows. "Share X with Y" is a sentence — it
+ * belongs to a natural-language assist, not to a shell.
  *
  * Dependency-free, as `cat.args.ts` is: the engine graph cannot be loaded
  * under jest, so a grammar inside the builtin is a grammar nothing tests.
@@ -12,39 +13,62 @@
  * @module
  */
 /** How `setfacl` is spelled, for help and for errors. */
-export const SETFACL_USAGE = 'setfacl: usage: setfacl -m u:<user>:<perms> <path>...';
+export const SETFACL_USAGE = 'setfacl: usage: setfacl -m u:<user>:r|g:<group>:r|o::r|o::- <path>... | setfacl -x u:<user>|g:<group> <path>...';
 /** How `getfacl` is spelled. */
 export const GETFACL_USAGE = 'getfacl: usage: getfacl <path>...';
+/** How `chmod` is spelled on a feed. */
+export const CHMOD_USAGE = 'chmod: usage: chmod o+r|o-r <feed>... (a feed is public or private; nothing else is a mode it has)';
+/** The words for an entry's kind, short and long. */
+const KIND_OF = { u: 'user', user: 'user', g: 'group', group: 'group', o: 'other', other: 'other' };
 /**
- * Reads an access control entry of the form `u:<user>:<perms>`.
+ * Reads an access control entry: `u:<user>:<perms>`, `g:<group>:<perms>`,
+ * or the other entry `o::<perms>` (also `o:<perms>`); long kinds read too.
  *
  * @param spec - The entry as typed.
- * @returns The entry, or null when it is not a user entry.
+ * @returns The entry, or null when it is none of these.
  */
 export function aclEntry_parse(spec) {
     const parts = spec.split(':');
-    // `u:name:perms` and the long `user:name:perms` both read; group and
-    // other entries are not something CUBE models, so they are refused
-    // rather than silently treated as a user.
-    if (parts.length !== 3)
+    const kind = KIND_OF[parts[0] ?? ''];
+    if (kind === undefined)
         return null;
-    const kind = parts[0] ?? '';
-    if (kind !== 'u' && kind !== 'user')
+    if (kind === 'other') {
+        // `o::r` names no one; `o:r` is the same entry spelled shorter.
+        const perms = parts.length === 3 && parts[1] === '' ? (parts[2] ?? '') : parts.length === 2 ? (parts[1] ?? '') : null;
+        return perms !== null && /^[rwx-]*$/.test(perms) ? { kind, name: '', perms } : null;
+    }
+    if (parts.length !== 3)
         return null;
-    const username = parts[1] ?? '';
+    const name = parts[1] ?? '';
     const perms = parts[2] ?? '';
-    if (username === '')
-        return null;
-    if (!/^[rwx-]*$/.test(perms))
+    if (name === '' || !/^[rwx-]*$/.test(perms))
         return null;
-    return { username, perms };
+    return { kind, name, perms };
+}
+/**
+ * Reads the grant `setfacl -x` withdraws: `u:<user>` or `g:<group>` (a bare
+ * name is a user, as on Linux).
+ *
+ * @param spec - The entry as typed.
+ * @returns The grant, or the refusal's words.
+ */
+export function aclRemoval_parse(spec) {
+    const parts = spec.split(':');
+    // `o` or `other` alone names the other entry, never a user called "o".
+    const bareOther = parts.length === 1 && KIND_OF[spec] === 'other';
+    const kind = bareOther ? 'other' : parts.length === 1 ? 'user' : KIND_OF[parts[0] ?? ''];
+    const name = parts.length === 1 ? (parts[0] ?? '') : (parts[1] ?? '');
+    if (kind === 'other')
+        return "setfacl: the other entry cannot be removed; make the feed private with setfacl -m o::- (or chmod o-r)";
+    if (kind === undefined || name === '')
+        return SETFACL_USAGE;
+    return { kind, name };
 }
 /**
  * Reads a `setfacl` invocation.
  *
  * @param args - Raw argument tokens.
- * @returns The requested change and its targets, or the reason it cannot
- *   be read.
+ * @returns The requested change and its targets, or the reason it cannot be read.
  */
 export function setfaclArgs_parse(args) {
     const empty = { modify: null, remove: null, paths: [], error: null };
@@ -59,7 +83,7 @@ export function setfaclArgs_parse(args) {
                 return { ...empty, error: SETFACL_USAGE };
             const entry = aclEntry_parse(spec);
             if (entry === null) {
-                return { ...empty, error: `setfacl: '${spec}' is not a user entry (want u:<user>:<perms>)` };
+                return { ...empty, error: `setfacl: '${spec}' is not an entry (want u:<user>:r, g:<group>:r, o::r or o::-)` };
             }
             modify = entry;
             continue;
@@ -68,10 +92,10 @@ export function setfaclArgs_parse(args) {
             const spec = args[++index];
             if (spec === undefined)
                 return { ...empty, error: SETFACL_USAGE };
-            const named = spec.startsWith('u:') ? spec.slice(2) : spec.startsWith('user:') ? spec.slice(5) : spec;
-            if (named === '')
-                return { ...empty, error: SETFACL_USAGE };
-            remove = named.split(':')[0] ?? named;
+            const removal = aclRemoval_parse(spec);
+            if (typeof removal === 'string')
+                return { ...empty, error: removal };
+            remove = removal;
             continue;
         }
         if (token.startsWith('-')) {
@@ -86,10 +110,25 @@ export function setfaclArgs_parse(args) {
     return { modify, remove, paths, error: null };
 }
 /**
- * Resolves a feed id from an id, a `feed_N` name, or a path holding one.
+ * Reads a `chmod` on feeds: `o+r` makes them public, `o-r` private, and
+ * either is the other entry `setfacl` writes.
  *
- * The path form matches `/feeds/feed_<id>/` wherever it appears, so a path
- * under `/SHARED` resolves by the same rule as one under a home folder.
+ * @param args - Raw argument tokens.
+ * @returns The entry and the feeds, or the refusal's words.
+ */
+export function chmodArgs_parse(args) {
+    const [mode, ...paths] = args;
+    if (mode === undefined || paths.length === 0)
+        return CHMOD_USAGE;
+    if (mode === 'o+r')
+        return { entry: { kind: 'other', name: '', perms: 'r' }, paths };
+    if (mode === 'o-r')
+        return { entry: { kind: 'other', name: '', perms: '-' }, paths };
+    return `chmod: mode '${mode}' is not one a feed has: o+r makes it public, o-r private`;
+}
+/**
+ * Resolves a feed id from an id, a `feed_N` name, a path through `/feeds/`,
+ * or its projection `/proc/jobs/feed_N`.
  *
  * @param target - What the operator typed.
  * @returns The feed id, or null when nothing in it names a feed.
@@ -101,25 +140,29 @@ export function aclTarget_resolve(target) {
     const named = target.match(/^feed_(\d+)$/);
     if (named !== null)
         return Number(named[1]);
-    const inPath = target.match(/\/feeds\/feed_(\d+)(?:\/|$)/);
+    const inPath = target.match(/\/(?:feeds|proc\/jobs)\/feed_(\d+)(?:\/|$)/);
     return inPath !== null ? Number(inPath[1]) : null;
 }
 /**
- * Renders an access list the way `getfacl` does.
+ * Renders an access list the way `getfacl` does: the owner's entry, one line
+ * per user and per group granted read, then the other entry (public or not).
  *
  * @param path - The path as the operator named it.
  * @param owner - The owning identity, when known.
- * @param usernames - Identities granted access.
+ * @param access - Who can read it.
  * @returns The rendered block, without a trailing newline.
  */
-export function acl_render(path, owner, usernames) {
+export function acl_render(path, owner, access) {
     const name = path.replace(/^\//, '');
     const lines = [`# file: ${name}`];
     if (owner !== null)
         lines.push(`# owner: ${owner}`);
     lines.push('user::rw-');
-    for (const username of usernames)
-        lines.push(`user:${username}:r--`);
+    for (const user of access.users)
+        lines.push(`user:${user}:r--`);
+    for (const group of access.groups)
+        lines.push(`group:${group}:r--`);
+    lines.push(access.public ? 'other::r--' : 'other::---');
     return lines.join('\n');
 }
 //# sourceMappingURL=acl.args.js.map

package/dist/builtins/fs/acl.args.js.map

@@ -1 +1 @@
-{"version":3,"file":"acl.args.js","sourceRoot":"","sources":["../../../src/builtins/fs/acl.args.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAsBH,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAW,uDAAuD,CAAC;AAE7F,gCAAgC;AAChC,MAAM,CAAC,MAAM,aAAa,GAAW,mCAAmC,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,qEAAqE;IACrE,mEAAmE;IACnE,0CAA0C;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,IAAI,GAAW,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,QAAQ,GAAW,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAW,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,MAAM,KAAK,GAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAClF,IAAI,MAAM,GAAoB,IAAI,CAAC;IACnC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,IAAI,KAAK,GAAW,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAuB,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YAClE,MAAM,KAAK,GAAoB,cAAc,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,IAAI,+CAA+C,EAAE,CAAC;YAC/F,CAAC;YACD,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAuB,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YAClE,MAAM,KAAK,GAAW,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9G,IAAI,KAAK,KAAK,EAAE;gBAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YAC5D,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,gCAAgC,KAAK,GAAG,EAAE,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,IAAI,GAAW,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,KAAK,GAA4B,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACpE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,GAA4B,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpF,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAoB,EAAE,SAA4B;IACzF,MAAM,IAAI,GAAW,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAa,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"acl.args.js","sourceRoot":"","sources":["../../../src/builtins/fs/acl.args.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAuCH,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAW,iHAAiH,CAAC;AAEvJ,gCAAgC;AAChC,MAAM,CAAC,MAAM,aAAa,GAAW,mCAAmC,CAAC;AAEzE,wCAAwC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAW,oGAAoG,CAAC;AAExI,qDAAqD;AACrD,MAAM,OAAO,GAAsC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAEvI;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAwB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,gEAAgE;QAChE,MAAM,KAAK,GAAkB,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrI,OAAO,KAAK,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,IAAI,GAAW,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAW,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,uEAAuE;IACvE,MAAM,SAAS,GAAY,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC;IAC3E,MAAM,IAAI,GAAwB,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9G,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,uGAAuG,CAAC;IACrI,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC;IAC5D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,MAAM,KAAK,GAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAClF,IAAI,MAAM,GAAoB,IAAI,CAAC;IACnC,IAAI,MAAM,GAAsB,IAAI,CAAC;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,IAAI,KAAK,GAAW,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAuB,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YAClE,MAAM,KAAK,GAAoB,cAAc,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,IAAI,gEAAgE,EAAE,CAAC;YAChH,CAAC;YACD,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAuB,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YAClE,MAAM,OAAO,GAAwB,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YACrE,MAAM,GAAG,OAAO,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,gCAAgC,KAAK,GAAG,EAAE,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IACjE,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC;IACrF,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC;IACrF,OAAO,gBAAgB,IAAI,2DAA2D,CAAC;AACzF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,IAAI,GAAW,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,KAAK,GAA4B,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACpE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,GAA4B,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACnG,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAoB,EAAE,MAAe;IAC5E,MAAM,IAAI,GAAW,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAa,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;IAChE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/builtins/fs/acl.d.ts

@@ -1,12 +1,15 @@
 /**
- * @file `setfacl` and `getfacl` — a feed's access list.
+ * @file `setfacl`, `getfacl` and `chmod` — a feed's access list.
  *
  * Sharing a feed is, in POSIX terms, an access control entry, and a shell
- * already has the verbs for it. `share X with Y` is a sentence; it reads
- * as a natural-language assist and lands nowhere in a terminal.
+ * already has the verbs for it: a user (`u:`), a group (`g:`), and the other
+ * entry (`o::r`, everyone: a public feed). `setfacl -x` withdraws a user's or
+ * a group's grant, and `chmod o±r` is the other entry spelled as a mode.
+ * `share X with Y` is a sentence; it lands nowhere in a terminal.
  *
- * The capability itself lives in the kernel (`feed_share`,
- * `feedShares_list`). This is its shell face.
+ * The capability itself lives in the kernel (cumin `feed_share`,
+ * `feedShare_group`, `feedShare_revoke`, `feedAccess_read`,
+ * `feed_makePublic`, `feed_makePrivate`). This is its shell face.
  *
  * @module
  */
@@ -18,6 +21,14 @@ import { CommandEnvelope } from '@fnndsc/cumin';
  * @returns An envelope naming what was granted.
  */
 export declare function builtin_setfacl(args: string[]): Promise<CommandEnvelope>;
+/**
+ * `chmod o+r` / `o-r` on feeds: the other entry, public or private, as
+ * `setfacl -m o::r` / `o::-` writes it. No other mode is one a feed has.
+ *
+ * @param args - Raw argument tokens.
+ * @returns An envelope naming what changed.
+ */
+export declare function builtin_chmod(args: string[]): Promise<CommandEnvelope>;
 /**
  * Reports a feed's access list, in `getfacl`'s own shape.
  *

package/dist/builtins/fs/acl.js

@@ -1,17 +1,20 @@
 /**
- * @file `setfacl` and `getfacl` — a feed's access list.
+ * @file `setfacl`, `getfacl` and `chmod` — a feed's access list.
  *
  * Sharing a feed is, in POSIX terms, an access control entry, and a shell
- * already has the verbs for it. `share X with Y` is a sentence; it reads
- * as a natural-language assist and lands nowhere in a terminal.
+ * already has the verbs for it: a user (`u:`), a group (`g:`), and the other
+ * entry (`o::r`, everyone: a public feed). `setfacl -x` withdraws a user's or
+ * a group's grant, and `chmod o±r` is the other entry spelled as a mode.
+ * `share X with Y` is a sentence; it lands nowhere in a terminal.
  *
- * The capability itself lives in the kernel (`feed_share`,
- * `feedShares_list`). This is its shell face.
+ * The capability itself lives in the kernel (cumin `feed_share`,
+ * `feedShare_group`, `feedShare_revoke`, `feedAccess_read`,
+ * `feed_makePublic`, `feed_makePrivate`). This is its shell face.
  *
  * @module
  */
-import { envelope_ok, envelope_error, errorStack, feed_share, feedShares_list, } from '@fnndsc/cumin';
-import { aclTarget_resolve, acl_render, setfaclArgs_parse, GETFACL_USAGE, } from './acl.args.js';
+import { envelope_ok, envelope_error, errorStack, feed_share, feedShare_group, feedShare_revoke, feedAccess_read, feed_makePublic, feed_makePrivate, } from '@fnndsc/cumin';
+import { aclTarget_resolve, acl_render, chmodArgs_parse, setfaclArgs_parse, GETFACL_USAGE, } from './acl.args.js';
 /**
  * Adds or modifies an access control entry on a feed.
  *
@@ -30,7 +33,7 @@ export async function builtin_setfacl(args) {
         for (const path of paths) {
             const feedID = aclTarget_resolve(path);
             if (feedID === null) {
-                return envelope_error(`setfacl: '${path}' does not name a feed`);
+                return envelope_error(`setfacl: '${path}' does not name a feed\n`);
             }
             if (!feedIDs.includes(feedID))
                 feedIDs.push(feedID);
@@ -40,38 +43,108 @@ export async function builtin_setfacl(args) {
         const who = (await who_ask(feedIDs)).trim();
         if (who === '') {
             const named = feedIDs.map((id) => `feed_${id}`).join(' ');
-            return envelope_error(`setfacl: nobody named; ${named} shared with no one new`);
+            return envelope_error(`setfacl: nobody named; ${named} shared with no one new\n`);
         }
         parsed = setfaclArgs_parse(['-m', `u:${who}:r`, ...paths]);
     }
     if (parsed.error !== null)
-        return envelope_error(parsed.error);
-    if (parsed.remove !== null) {
-        // Refused by name rather than silently ignored: CUBE models the grant
-        // but mise has no revocation to offer yet, and a shell that appears to
-        // strip an entry it cannot strip is worse than one that says so.
-        return envelope_error('setfacl: -x is not supported yet — mise cannot revoke a feed grant');
-    }
-    const entry = parsed.modify;
-    if (entry === null)
-        return envelope_error(parsed.error ?? 'setfacl: nothing to do');
-    if (!entry.perms.includes('r')) {
-        return envelope_error(`setfacl: '${entry.perms}' grants no read — CUBE shares a feed for reading`);
-    }
-    const granted = [];
+        return envelope_error(`${parsed.error}\n`);
+    const feedIDs = [];
     for (const path of parsed.paths) {
         const feedID = aclTarget_resolve(path);
-        if (feedID === null) {
-            return envelope_error(`setfacl: '${path}' does not name a feed`);
+        if (feedID === null)
+            return envelope_error(`setfacl: '${path}' does not name a feed\n`);
+        feedIDs.push(feedID);
+    }
+    if (parsed.remove !== null)
+        return acl_remove(parsed.remove, feedIDs);
+    if (parsed.modify === null)
+        return envelope_error(`${parsed.error ?? 'setfacl: nothing to do'}\n`);
+    return acl_apply(parsed.modify, feedIDs, 'setfacl');
+}
+/**
+ * Applies one entry to feeds: a user or group granted read, or the other
+ * entry making them public (`r`) or private (no `r`). `setfacl -m` and
+ * `chmod o±r` both land here.
+ *
+ * @param entry - The entry.
+ * @param feedIDs - The feeds.
+ * @param verb - The verb, for its refusals.
+ * @returns An envelope naming what changed.
+ */
+async function acl_apply(entry, feedIDs, verb) {
+    const reads = entry.perms.includes('r');
+    if (entry.kind !== 'other' && !reads) {
+        return envelope_error(`${verb}: '${entry.perms}' grants no read — CUBE shares a feed for reading (setfacl -x withdraws a grant)\n`);
+    }
+    const done = [];
+    for (const feedID of feedIDs) {
+        const outcome = entry.kind === 'user'
+            ? await feed_share(feedID, entry.name)
+            : entry.kind === 'group'
+                ? await feedShare_group(feedID, entry.name)
+                : reads ? await feed_makePublic(feedID) : await feed_makePrivate(feedID);
+        if (!outcome.ok) {
+            const error = errorStack.stack_pop();
+            return envelope_error(`${error?.message ?? `${verb}: could not change the access of feed ${feedID}`}\n`);
         }
-        const outcome = await feed_share(feedID, entry.username);
+        done.push(`feed_${feedID}`);
+    }
+    const said = entry.kind === 'user'
+        ? `${entry.name} granted read on ${done.join(' ')}`
+        : entry.kind === 'group'
+            ? `group ${entry.name} granted read on ${done.join(' ')}`
+            : `${done.join(' ')} ${reads ? 'public' : 'private'}`;
+    return envelope_ok(`${said}\n`, {
+        kind: 'fs.acl',
+        data: { usernames: entry.kind === 'user' ? [entry.name] : [], groups: entry.kind === 'group' ? [entry.name] : [], ...(entry.kind === 'other' ? { public: reads } : {}), targets: done },
+    });
+}
+/**
+ * Withdraws a user's or a group's grant on feeds. A feed that held no such
+ * grant is said, not passed over in silence.
+ *
+ * @param removal - The grant.
+ * @param feedIDs - The feeds.
+ * @returns An envelope naming what was withdrawn.
+ */
+async function acl_remove(removal, feedIDs) {
+    const lines = [];
+    const removed = [];
+    for (const feedID of feedIDs) {
+        const outcome = await feedShare_revoke(feedID, removal.kind, removal.name);
         if (!outcome.ok) {
             const error = errorStack.stack_pop();
-            return envelope_error(error?.message ?? `setfacl: could not grant ${entry.username} access to feed ${feedID}`);
+            return envelope_error(`${error?.message ?? `setfacl: could not withdraw ${removal.kind} ${removal.name} from feed ${feedID}`}\n`);
         }
-        granted.push(`feed_${feedID}`);
+        if (outcome.value)
+            removed.push(`feed_${feedID}`);
+        else
+            lines.push(`setfacl: feed_${feedID}: no entry for ${removal.kind} ${removal.name}`);
+    }
+    if (removed.length > 0)
+        lines.unshift(`${removal.kind} ${removal.name} no longer reads ${removed.join(' ')}`);
+    return envelope_ok(`${lines.join('\n')}\n`, { kind: 'fs.acl.removed', data: { kind: removal.kind, name: removal.name, targets: removed } });
+}
+/**
+ * `chmod o+r` / `o-r` on feeds: the other entry, public or private, as
+ * `setfacl -m o::r` / `o::-` writes it. No other mode is one a feed has.
+ *
+ * @param args - Raw argument tokens.
+ * @returns An envelope naming what changed.
+ */
+export async function builtin_chmod(args) {
+    const parsed = chmodArgs_parse(args);
+    if (typeof parsed === 'string')
+        return envelope_error(`${parsed}\n`);
+    const feedIDs = [];
+    for (const path of parsed.paths) {
+        const feedID = aclTarget_resolve(path);
+        if (feedID === null)
+            return envelope_error(`chmod: '${path}' does not name a feed\n`);
+        feedIDs.push(feedID);
     }
-    return envelope_ok(`${entry.username} granted read on ${granted.join(' ')}`, { kind: 'fs.acl', data: { usernames: [entry.username], targets: granted } });
+    return acl_apply(parsed.entry, feedIDs, 'chmod');
 }
 /**
  * Whether an invocation names paths but no entry to apply to them.
@@ -96,10 +169,9 @@ async function who_ask(feedIDs) {
         ? `feed ${feedIDs[0]}`
         : `${feedIDs.length} feeds (${feedIDs.map((id) => `feed_${id}`).join(', ')})`;
     try {
-        // The irreversibility is said where the grant is made, not discovered
-        // afterwards: mise cannot revoke a feed grant (`setfacl -x` is refused),
-        // so the question that makes one says so before it is answered.
-        return await repl_question(`Share ${named} with which user? (a grant cannot be taken back) `);
+        // A grant is withdrawn by `setfacl -x`, so the question says only what
+        // it asks.
+        return await repl_question(`Share ${named} with which user? `);
     }
     catch {
         return '';
@@ -114,22 +186,22 @@ async function who_ask(feedIDs) {
 export async function builtin_getfacl(args) {
     const paths = args.filter((token) => !token.startsWith('-'));
     if (paths.length === 0)
-        return envelope_error(GETFACL_USAGE);
+        return envelope_error(`${GETFACL_USAGE}\n`);
     const blocks = [];
     const model = [];
     for (const path of paths) {
         const feedID = aclTarget_resolve(path);
         if (feedID === null) {
-            return envelope_error(`getfacl: '${path}' does not name a feed`);
+            return envelope_error(`getfacl: '${path}' does not name a feed\n`);
         }
-        const held = await feedShares_list(feedID);
+        const held = await feedAccess_read(feedID);
         if (!held.ok) {
             const error = errorStack.stack_pop();
-            return envelope_error(error?.message ?? `getfacl: could not read the access list of feed ${feedID}`);
+            return envelope_error(`${error?.message ?? `getfacl: could not read the access list of feed ${feedID}`}\n`);
         }
         blocks.push(acl_render(path, null, held.value));
-        model.push({ path, usernames: held.value });
+        model.push({ path, usernames: held.value.users, groups: held.value.groups, public: held.value.public });
     }
-    return envelope_ok(blocks.join('\n\n'), { kind: 'fs.acl', data: model });
+    return envelope_ok(`${blocks.join('\n\n')}\n`, { kind: 'fs.acl', data: model });
 }
 //# sourceMappingURL=acl.js.map

package/dist/builtins/fs/acl.js.map

@@ -1 +1 @@
-{"version":3,"file":"acl.js","sourceRoot":"","sources":["../../../src/builtins/fs/acl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACY,WAAW,EAAE,cAAc,EAAE,UAAU,EACxD,UAAU,EAAE,eAAe,GAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,EAChD,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc;IAClD,IAAI,MAAM,GAAgB,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAClD,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAa,IAAI,CAAC,MAAM,CAAC,CAAC,KAAa,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAkB,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,cAAc,CAAC,aAAa,IAAI,wBAAwB,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,GAAG,GAAW,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,MAAM,KAAK,GAAW,OAAO,CAAC,GAAG,CAAC,CAAC,EAAU,EAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClF,OAAO,cAAc,CAAC,0BAA0B,KAAK,yBAAyB,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,GAAG,iBAAiB,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE/D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3B,sEAAsE;QACtE,uEAAuE;QACvE,iEAAiE;QACjE,OAAO,cAAc,CAAC,oEAAoE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,IAAI,wBAAwB,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,cAAc,CAAC,aAAa,KAAK,CAAC,KAAK,mDAAmD,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAkB,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,cAAc,CAAC,aAAa,IAAI,wBAAwB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAoB,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,KAAK,GAA6B,UAAU,CAAC,SAAS,EAAE,CAAC;YAC/D,OAAO,cAAc,CAAC,KAAK,EAAE,OAAO,IAAI,4BAA4B,KAAK,CAAC,QAAQ,mBAAmB,MAAM,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,WAAW,CAChB,GAAG,KAAK,CAAC,QAAQ,oBAAoB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAc;IAClC,MAAM,OAAO,GAAY,IAAI,CAAC,IAAI,CAChC,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CACvF,CAAC;IACF,MAAM,KAAK,GAAa,IAAI,CAAC,MAAM,CAAC,CAAC,KAAa,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,OAAO,CAAC,OAAiB;IACtC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACjE,MAAM,KAAK,GAAW,OAAO,CAAC,MAAM,KAAK,CAAC;QACxC,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE;QACtB,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,GAAG,CAAC,CAAC,EAAU,EAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAChG,IAAI,CAAC;QACH,sEAAsE;QACtE,yEAAyE;QACzE,gEAAgE;QAChE,OAAO,MAAM,aAAa,CACxB,SAAS,KAAK,mDAAmD,CAClE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc;IAClD,MAAM,KAAK,GAAa,IAAI,CAAC,MAAM,CAAC,CAAC,KAAa,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACxF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC,aAAa,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAiD,EAAE,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAkB,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,cAAc,CAAC,aAAa,IAAI,wBAAwB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,IAAI,GAAqB,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,KAAK,GAA6B,UAAU,CAAC,SAAS,EAAE,CAAC;YAC/D,OAAO,cAAc,CAAC,KAAK,EAAE,OAAO,IAAI,mDAAmD,MAAM,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3E,CAAC"}
+{"version":3,"file":"acl.js","sourceRoot":"","sources":["../../../src/builtins/fs/acl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACY,WAAW,EAAE,cAAc,EAAE,UAAU,EACxD,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,GAElG,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EACjE,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc;IAClD,IAAI,MAAM,GAAgB,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAClD,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAa,IAAI,CAAC,MAAM,CAAC,CAAC,KAAa,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAkB,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,cAAc,CAAC,aAAa,IAAI,0BAA0B,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,GAAG,GAAW,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,MAAM,KAAK,GAAW,OAAO,CAAC,GAAG,CAAC,CAAC,EAAU,EAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClF,OAAO,cAAc,CAAC,0BAA0B,KAAK,2BAA2B,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,GAAG,iBAAiB,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAkB,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,cAAc,CAAC,aAAa,IAAI,0BAA0B,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,wBAAwB,IAAI,CAAC,CAAC;IACnG,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,SAAS,CAAC,KAAe,EAAE,OAAiB,EAAE,IAAY;IACvE,MAAM,KAAK,GAAY,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QACrC,OAAO,cAAc,CAAC,GAAG,IAAI,MAAM,KAAK,CAAC,KAAK,oFAAoF,CAAC,CAAC;IACtI,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAoB,KAAK,CAAC,IAAI,KAAK,MAAM;YACpD,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;YACtC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;gBACtB,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;gBAC3C,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,KAAK,GAA6B,UAAU,CAAC,SAAS,EAAE,CAAC;YAC/D,OAAO,cAAc,CAAC,GAAG,KAAK,EAAE,OAAO,IAAI,GAAG,IAAI,yCAAyC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,GAAW,KAAK,CAAC,IAAI,KAAK,MAAM;QACxC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,oBAAoB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACnD,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;YACtB,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,oBAAoB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACzD,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC1D,OAAO,WAAW,CAAC,GAAG,IAAI,IAAI,EAAE;QAC9B,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;KACxL,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE,OAAiB;IAC9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAoB,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,KAAK,GAA6B,UAAU,CAAC,SAAS,EAAE,CAAC;YAC/D,OAAO,cAAc,CAAC,GAAG,KAAK,EAAE,OAAO,IAAI,+BAA+B,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,cAAc,MAAM,EAAE,IAAI,CAAC,CAAC;QACpI,CAAC;QACD,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;;YAC7C,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,kBAAkB,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,oBAAoB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9G,OAAO,WAAW,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9I,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IACrE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAkB,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,cAAc,CAAC,WAAW,IAAI,0BAA0B,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAc;IAClC,MAAM,OAAO,GAAY,IAAI,CAAC,IAAI,CAChC,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CACvF,CAAC;IACF,MAAM,KAAK,GAAa,IAAI,CAAC,MAAM,CAAC,CAAC,KAAa,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,OAAO,CAAC,OAAiB;IACtC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACjE,MAAM,KAAK,GAAW,OAAO,CAAC,MAAM,KAAK,CAAC;QACxC,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE;QACtB,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,GAAG,CAAC,CAAC,EAAU,EAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAChG,IAAI,CAAC;QACH,uEAAuE;QACvE,WAAW;QACX,OAAO,MAAM,aAAa,CAAC,SAAS,KAAK,oBAAoB,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc;IAClD,MAAM,KAAK,GAAa,IAAI,CAAC,MAAM,CAAC,CAAC,KAAa,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACxF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC,GAAG,aAAa,IAAI,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAoF,EAAE,CAAC;IAClG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAkB,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,cAAc,CAAC,aAAa,IAAI,0BAA0B,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAuB,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,KAAK,GAA6B,UAAU,CAAC,SAAS,EAAE,CAAC;YAC/D,OAAO,cAAc,CAAC,GAAG,KAAK,EAAE,OAAO,IAAI,mDAAmD,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/builtins/fs/cd.js

@@ -131,6 +131,10 @@ async function cdVirtual_handle(cleanPath, pathArg) {
         if (!target) {
             return envelope_error('', undefined, `${chalk.red(`cd: ${pathArg}: No such file or directory`)}\n`);
         }
+        // A link may point into another projection (a tag's feed_N is a link to
+        // /proc/jobs/feed_N): that target is entered as the projection it is.
+        if (vfsDispatcher.path_isVirtual(target))
+            return cdVirtual_handle(vfsPath_normalize(target), pathArg);
         return cdReal_handle(target, pathArg);
     }
     if (entry && !['dir', 'job', 'vfs'].includes(entry.type)) {