@poe-platform/safe-bash 0.1.0

package/dist/safe-bash/commands/network/body.js

@@ -0,0 +1,188 @@
+import { randomBytes } from "node:crypto";
+import { posix } from "node:path";
+import { setImmediate } from "node:timers/promises";
+import { collectBytes, readBytes } from "../../contracts/index.js";
+import { pathOf } from "../internal.js";
+import { encode } from "./shared.js";
+import { CurlError } from "./types.js";
+function percent(bytes) {
+    let output = "";
+    for (const byte of bytes)
+        output += (byte >= 65 && byte <= 90) || (byte >= 97 && byte <= 122) ||
+            (byte >= 48 && byte <= 57) || [45, 46, 95, 126].includes(byte)
+            ? String.fromCharCode(byte) : byte === 32 ? "+" : `%${byte.toString(16).toUpperCase().padStart(2, "0")}`;
+    return encode(output);
+}
+function dataPart(argument) {
+    const value = argument.value;
+    if (argument.kind === "urlencode") {
+        const equals = value.indexOf("=");
+        if (equals >= 0)
+            return [{ bytes: encode(equals ? `${value.slice(0, equals)}=` : "") }, { bytes: encode(value.slice(equals + 1)), urlencode: true }];
+        const at = value.indexOf("@");
+        if (at >= 0)
+            return [{ bytes: encode(at ? `${value.slice(0, at)}=` : "") }, { file: value.slice(at + 1), urlencode: true }];
+        return [{ bytes: encode(value), urlencode: true }];
+    }
+    if (argument.kind !== "raw" && value.startsWith("@"))
+        return [{ file: value.slice(1), strip: argument.kind === "data" }];
+    return [{ bytes: encode(value) }];
+}
+function quoted(value) {
+    if (/[\r\n\0]/.test(value))
+        throw new CurlError(2, "Invalid multipart field metadata");
+    return value.replace(/["\\]/g, "\\$&");
+}
+function multipart(argument, boundary) {
+    const equals = argument.value.indexOf("=");
+    if (equals < 1)
+        throw new CurlError(2, "Multipart form requires name=value");
+    const name = quoted(argument.value.slice(0, equals));
+    let value = argument.value.slice(equals + 1);
+    let type;
+    let filename;
+    if (argument.kind === "form") {
+        const fields = value.split(";");
+        value = fields.shift();
+        for (const field of fields) {
+            if (field.startsWith("type="))
+                type = field.slice(5);
+            else if (field.startsWith("filename="))
+                filename = field.slice(9);
+            else
+                throw new CurlError(2, "Unsupported multipart form attribute");
+        }
+    }
+    const isFile = argument.kind === "form" && /^[<@]/.test(value);
+    if (isFile && (value.slice(1).includes(",") || !value.slice(1)))
+        throw new CurlError(2, "Unsupported multipart file list");
+    if (isFile && value.startsWith("@"))
+        filename ??= posix.basename(value.slice(1));
+    if (type !== undefined && !/^[\w!#$&^_.+-]+\/[\w!#$&^_.+-]+$/.test(type))
+        throw new CurlError(2, "Invalid multipart content type");
+    let preamble = `--${boundary}\r\nContent-Disposition: form-data; name="${name}"`;
+    if (filename !== undefined)
+        preamble += `; filename="${quoted(filename)}"`;
+    preamble += "\r\n";
+    if (type || filename !== undefined)
+        preamble += `Content-Type: ${type ?? "application/octet-stream"}\r\n`;
+    preamble += "\r\n";
+    return [{ bytes: encode(preamble) }, isFile ? { file: value.slice(1) } : { bytes: encode(value) }, { bytes: encode("\r\n") }];
+}
+export function createBody(context, args, limits) {
+    if (!args.data.length && args.upload === undefined)
+        return undefined;
+    const parts = [];
+    let contentType;
+    const form = args.data.some(part => part.kind.startsWith("form"));
+    if (form) {
+        const boundary = `virtual-bash-${randomBytes(18).toString("hex")}`;
+        contentType = `multipart/form-data; boundary=${boundary}`;
+        for (const argument of args.data)
+            parts.push(...multipart(argument, boundary));
+        parts.push({ bytes: encode(`--${boundary}--\r\n`) });
+    }
+    else if (args.upload !== undefined)
+        parts.push({ file: args.upload });
+    else {
+        const json = args.data[0]?.kind === "json";
+        contentType = json ? "application/json" : "application/x-www-form-urlencoded";
+        args.data.forEach((argument, index) => {
+            if (index && !json)
+                parts.push({ bytes: encode("&") });
+            parts.push(...dataPart(argument));
+        });
+    }
+    const hasStdin = parts.some(part => part.file === "-");
+    let opened = false;
+    let replayComplete = false;
+    let replayable = true;
+    let cachedBytes = 0;
+    let cache = [];
+    let stdinUsed = false;
+    const source = async function* (part, signal) {
+        if (part.bytes !== undefined) {
+            yield part.bytes;
+            return;
+        }
+        if (part.file === "-") {
+            if (!stdinUsed) {
+                stdinUsed = true;
+                yield* readBytes(context.stdin, signal);
+            }
+            return;
+        }
+        try {
+            const path = pathOf(context, part.file);
+            if (context.fs.readStream)
+                yield* readBytes(context.fs.readStream(path, { signal }), signal);
+            else
+                yield await context.fs.readFile(path, { signal, maxBytes: Math.min(limits.maxBufferBytes, limits.maxUploadBytes) });
+        }
+        catch (error) {
+            signal.throwIfAborted();
+            if (error instanceof CurlError)
+                throw error;
+            throw new CurlError(26, "Failed to read virtual upload file");
+        }
+    };
+    return {
+        ...(contentType === undefined ? {} : { contentType }),
+        open(signal) {
+            return (async function* () {
+                if (hasStdin && opened) {
+                    if (!replayComplete || !replayable)
+                        throw new CurlError(65, "Cannot replay stdin upload within the host buffer limit");
+                    for (const chunk of cache) {
+                        signal.throwIfAborted();
+                        yield chunk.slice();
+                    }
+                    return;
+                }
+                opened = true;
+                let count = 0;
+                let chunks = 0;
+                for (const part of parts)
+                    for await (const raw of source(part, signal)) {
+                        if (++chunks % 256 === 0)
+                            await setImmediate(undefined, { signal });
+                        for (let offset = 0; offset < raw.length; offset += 16 * 1024) {
+                            signal.throwIfAborted();
+                            let chunk = raw.subarray(offset, offset + 16 * 1024);
+                            if (part.strip)
+                                chunk = chunk.filter(byte => byte !== 0 && byte !== 10 && byte !== 13);
+                            if (part.urlencode)
+                                chunk = percent(chunk);
+                            count += chunk.length;
+                            if (count > limits.maxUploadBytes)
+                                throw new CurlError(63, "Upload exceeds host byte limit");
+                            if (hasStdin && replayable) {
+                                cachedBytes += chunk.length;
+                                if (cachedBytes > limits.maxBufferBytes) {
+                                    replayable = false;
+                                    cache = [];
+                                }
+                                else
+                                    cache.push(new Uint8Array(chunk));
+                            }
+                            if (chunk.length)
+                                yield chunk;
+                        }
+                    }
+                replayComplete = true;
+            })();
+        },
+    };
+}
+export async function queryData(body, signal, limits) {
+    try {
+        return Buffer.from(await collectBytes(body.open(signal), { signal, maxBytes: limits.maxBufferBytes })).toString("utf8");
+    }
+    catch (error) {
+        signal.throwIfAborted();
+        if (error instanceof CurlError)
+            throw error;
+        throw new CurlError(63, "Query data exceeds host buffer limit");
+    }
+}
+//# sourceMappingURL=body.js.map

package/dist/safe-bash/commands/network/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../../src/commands/network/body.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAwC,MAAM,0BAA0B,CAAC;AACzG,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAsB,MAAM,YAAY,CAAC;AAc3D,SAAS,OAAO,CAAC,KAAiB;IAChC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC;YAC3F,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3G,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,QAAsB;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrJ,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5H,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IACzH,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,QAAsB,EAAE,QAAgB;IACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,CAAC,EAAE,oCAAoC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,IAAI,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAA4B,CAAC;IACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAG,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;iBAChD,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;;gBAC7D,MAAM,IAAI,SAAS,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,CAAC,EAAE,iCAAiC,CAAC,CAAC;IAC3H,IAAI,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACnI,IAAI,QAAQ,GAAG,KAAK,QAAQ,6CAA6C,IAAI,GAAG,CAAC;IACjF,IAAI,QAAQ,KAAK,SAAS;QAAE,QAAQ,IAAI,eAAe,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3E,QAAQ,IAAI,MAAM,CAAC;IACnB,IAAI,IAAI,IAAI,QAAQ,KAAK,SAAS;QAAE,QAAQ,IAAI,iBAAiB,IAAI,IAAI,0BAA0B,MAAM,CAAC;IAC1G,QAAQ,IAAI,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAChI,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAuB,EAAE,IAAmB,EAAE,MAAqB;IAC5F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrE,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,WAA+B,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,gBAAgB,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,WAAW,GAAG,iCAAiC,QAAQ,EAAE,CAAC;QAC1D,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,QAAQ,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;SACnE,CAAC;QACJ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC;QAC3C,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mCAAmC,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YACpC,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IACvD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,KAAK,GAAiB,EAAE,CAAC;IAC7B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,MAAM,GAAG,KAAK,SAAS,CAAC,EAAE,IAAU,EAAE,MAAmB;QAC7D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAK,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,EAAE,CAAC,UAAU;gBAAE,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;;gBACxF,MAAM,MAAM,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC3H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,SAAS;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM;YACT,OAAO,CAAC,KAAK,SAAS,CAAC;gBACrB,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;oBACvB,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU;wBAAE,MAAM,IAAI,SAAS,CAAC,EAAE,EAAE,yDAAyD,CAAC,CAAC;oBACvH,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,cAAc,EAAE,CAAC;wBAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAC5E,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,KAAK,MAAM,IAAI,IAAI,KAAK;oBAAE,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;wBACvE,IAAI,EAAE,MAAM,GAAG,GAAG,KAAK,CAAC;4BAAE,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;wBACpE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;4BAC9D,MAAM,CAAC,cAAc,EAAE,CAAC;4BACxB,IAAI,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;4BACrD,IAAI,IAAI,CAAC,KAAK;gCAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;4BACvF,IAAI,IAAI,CAAC,SAAS;gCAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;4BAC3C,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;4BACtB,IAAI,KAAK,GAAG,MAAM,CAAC,cAAc;gCAAE,MAAM,IAAI,SAAS,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAC;4BAC7F,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;gCAC3B,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;gCAC5B,IAAI,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;oCAAC,UAAU,GAAG,KAAK,CAAC;oCAAC,KAAK,GAAG,EAAE,CAAC;gCAAC,CAAC;;oCACvE,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;4BACzC,CAAC;4BACD,IAAI,KAAK,CAAC,MAAM;gCAAE,MAAM,KAAK,CAAC;wBAChC,CAAC;oBACH,CAAC;gBACD,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAiB,EAAE,MAAmB,EAAE,MAAqB;IAC3F,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAChI,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,SAAS;YAAE,MAAM,KAAK,CAAC;QAC5C,MAAM,IAAI,SAAS,CAAC,EAAE,EAAE,sCAAsC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/safe-bash/commands/network/curl.d.ts

@@ -0,0 +1,4 @@
+import { type CommandDefinition } from "../../contracts/index.js";
+import { type NetworkCommandsOptions } from "./types.js";
+export declare function createCurlCommand(options: NetworkCommandsOptions): CommandDefinition;
+//# sourceMappingURL=curl.d.ts.map

package/dist/safe-bash/commands/network/curl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curl.d.ts","sourceRoot":"","sources":["../../../src/commands/network/curl.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkH,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAOlL,OAAO,EAAkD,KAAK,sBAAsB,EAAsB,MAAM,YAAY,CAAC;AA+D7H,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,sBAAsB,GAAG,iBAAiB,CAkCpF"}

package/dist/safe-bash/commands/network/curl.js

@@ -0,0 +1,404 @@
+import { posix } from "node:path";
+import { setImmediate } from "node:timers/promises";
+import { collectBytes, createOutputOperation, readBytes, toByteSource, writeBytes } from "../../contracts/index.js";
+import { pathOf } from "../internal.js";
+import { parseArguments } from "./args.js";
+import { createBody, queryData } from "./body.js";
+import { dumpHeaders, responseHeaders, writeOutput, writeOutFormat } from "./output.js";
+import { delay, diagnostic, encode, header, limitsFor, networkError, withSignal } from "./shared.js";
+import { createNodeHttpTransport } from "./transport.js";
+import { CurlError } from "./types.js";
+const retryStatuses = new Set([408, 429, 500, 502, 503, 504]);
+const redirectStatuses = new Set([301, 302, 303, 307, 308]);
+const writeOutDefaults = Object.freeze({
+    http_code: "000", response_code: "000", url_effective: "", redirect_url: "", content_type: "",
+    size_download: "0", size_upload: "0", num_redirects: "0", num_retries: "0", time_total: "0.000000",
+    exitcode: "0", errormsg: "", filename_effective: "", method: "GET", http_version: "",
+});
+function parseUrl(text, globoff, redirect = false) {
+    if (/[\s\x00-\x1f\x7f]/.test(text))
+        throw new CurlError(3, "Malformed URL");
+    let url;
+    try {
+        url = new URL(text);
+    }
+    catch {
+        throw new CurlError(3, "Malformed URL; explicit HTTP(S) scheme required");
+    }
+    if (!["http:", "https:"].includes(url.protocol))
+        throw new CurlError(1, "Only HTTP and HTTPS are supported");
+    if (!url.hostname)
+        throw new CurlError(3, "Malformed URL");
+    if (!globoff && /[{}\[\]]/.test(url.pathname + url.search))
+        throw new CurlError(2, "URL glob expansion is unsupported; use --globoff for a literal URL");
+    let user;
+    if (url.username || url.password) {
+        if (redirect)
+            throw new CurlError(3, "Redirect URLs may not supply credentials");
+        try {
+            user = `${decodeURIComponent(url.username)}:${decodeURIComponent(url.password)}`;
+        }
+        catch {
+            throw new CurlError(3, "Malformed URL credentials");
+        }
+        url.username = "";
+        url.password = "";
+    }
+    url.hash = "";
+    return { url, ...(user === undefined ? {} : { user }) };
+}
+function requestHeaders(args, contentType, user, scoped, maxBytes) {
+    const defaults = [["Accept", args.data[0]?.kind === "json" ? "application/json" : "*/*"], ["User-Agent", "virtual-bash-curl/0.0"]];
+    if (contentType !== undefined)
+        defaults.push(["Content-Type", contentType]);
+    if (scoped && user !== undefined)
+        defaults.push(["Authorization", `Basic ${Buffer.from(user).toString("base64")}`]);
+    if (scoped && args.bearer !== undefined) {
+        if (/[\r\n\0]/.test(args.bearer))
+            throw new CurlError(2, "Invalid bearer token");
+        defaults.push(["Authorization", `Bearer ${args.bearer}`]);
+    }
+    const custom = scoped ? args.headers : [];
+    const names = new Set(custom.map(([name]) => name.toLowerCase()));
+    const result = [...defaults.filter(([name]) => !names.has(name.toLowerCase())),
+        ...custom.filter((entry) => entry[1] !== null)];
+    if (result.reduce((size, [name, value]) => size + Buffer.byteLength(name + value) + 4, 0) > maxBytes) {
+        throw new CurlError(63, "Request headers exceed host byte limit");
+    }
+    return result;
+}
+async function stop(response, signal) {
+    if (!response)
+        return;
+    const cleanup = Promise.resolve().then(() => response.dispose());
+    void cleanup.catch(() => { });
+    if (!signal.aborted)
+        await withSignal(() => cleanup, signal).catch(() => { });
+}
+function pipeClosed(error) {
+    return error instanceof Error && "code" in error && error.code === "EPIPE";
+}
+function remoteFilename(url) {
+    const name = posix.basename(url.pathname);
+    if (!name || name === "/" || name === "." || name === "..")
+        throw new CurlError(23, "URL has no safe remote filename");
+    return name;
+}
+export function createCurlCommand(options) {
+    if (typeof options?.authorize !== "function")
+        throw new TypeError("curl requires an explicit network authorizer");
+    const limits = limitsFor(options.limits);
+    const transport = options.transport ?? createNodeHttpTransport({ maxHeaderBytes: limits.maxHeaderBytes });
+    if (typeof transport !== "function")
+        throw new TypeError("Invalid HTTP transport");
+    const authorize = options.authorize;
+    return {
+        name: "curl",
+        async execute(context) {
+            context.signal.throwIfAborted();
+            let args;
+            try {
+                if (context.args.reduce((size, value) => size + Buffer.byteLength(value), 0) > limits.maxBufferBytes)
+                    throw new CurlError(2, "Arguments exceed host buffer limit");
+                args = parseArguments(context.args, limits);
+                if (args.help || args.version) {
+                    await writeBytes(context.stdout, encode(args.version ? "virtual-bash curl 0.0 (HTTP HTTPS; Node streaming transport)\n" :
+                        "Usage: curl [HTTP(S) URL] [-X METHOD] [-H HEADER] [-d DATA] [-L] [-o VFSFILE]\nExplicit host authorization is required. See network/README.md for supported flags and limits.\n"), context.signal);
+                    return { exitCode: 0 };
+                }
+                for (const url of args.urls)
+                    parseUrl(url, args.globoff);
+                if (args.urls.length > 1 && (args.output !== undefined || args.remoteName || args.dumpHeader !== undefined)) {
+                    throw new CurlError(2, "Multiple URLs with file/header outputs are unsupported");
+                }
+            }
+            catch (error) {
+                context.signal.throwIfAborted();
+                const failure = error instanceof CurlError ? error : new CurlError(2, "Invalid curl arguments");
+                await diagnostic(context, failure);
+                return { exitCode: failure.exitCode };
+            }
+            let exitCode = 0;
+            for (const url of args.urls)
+                exitCode = await transfer(context, args, url, limits, transport, authorize);
+            return { exitCode };
+        },
+    };
+}
+async function transfer(context, args, input, limits, transport, authorize) {
+    const lifetime = new AbortController();
+    let timeout;
+    const transferSignal = AbortSignal.any([context.signal, lifetime.signal]);
+    const hasFileOutput = args.remoteName || args.output !== undefined && args.output !== "-" || args.dumpHeader !== undefined && args.dumpHeader !== "-";
+    const operation = createOutputOperation({ ...context, signal: transferSignal }, hasFileOutput ? { write: chunk => context.stdout.write(chunk) } : context.stdout);
+    const signal = operation.signal;
+    const borrowed = context.stdout.ownedOutput ? { [Symbol.asyncIterator]() {
+            const iterator = context.stdin[Symbol.asyncIterator]();
+            return { next: () => iterator.next() };
+        } } : context.stdin;
+    const start = performance.now();
+    let response;
+    let failure;
+    const values = { ...writeOutDefaults };
+    let format = args.writeOut;
+    let formatReady = false;
+    let dumped = false;
+    let downloaded = 0;
+    let uploaded = 0;
+    let included = [];
+    let closedOutput = false;
+    const publish = async (bytes) => {
+        const writing = createOutputOperation(context, context.stdout);
+        try {
+            await writeBytes(writing.output, bytes, writing.signal);
+        }
+        catch (error) {
+            context.signal.throwIfAborted();
+            if (!pipeClosed(error))
+                throw error;
+            closedOutput = true;
+        }
+        finally {
+            await writing.close();
+        }
+    };
+    try {
+        operation.registerCleanup(() => { clearTimeout(timeout); });
+        timeout = setTimeout(() => lifetime.abort(new CurlError(28, "Operation timed out")), args.maxTimeMs);
+        if (format?.startsWith("@")) {
+            try {
+                const bytes = format === "@-"
+                    ? await collectBytes(borrowed, { signal, maxBytes: limits.maxBufferBytes })
+                    : await withSignal(() => context.fs.readFile(pathOf(context, format.slice(1)), { signal, maxBytes: limits.maxBufferBytes }), signal);
+                format = Buffer.from(bytes).toString("utf8");
+            }
+            catch {
+                signal.throwIfAborted();
+                throw new CurlError(26, "Failed reading write-out format");
+            }
+        }
+        if (format !== undefined) {
+            writeOutFormat(format, values);
+            formatReady = true;
+        }
+        const parsed = parseUrl(input, args.globoff);
+        const initial = parsed.url;
+        let body = createBody({ ...context, stdin: borrowed }, args, limits);
+        if (args.get && body) {
+            const query = await queryData(body, signal, limits);
+            if (/[^\x21-\x7e]/.test(query))
+                throw new CurlError(3, "GET data must be URL encoded");
+            initial.search += `${initial.search ? "&" : "?"}${query.replace(/%[0-9a-f]{2}/gi, escape => escape.toLowerCase())}`;
+            body = undefined;
+        }
+        const output = args.remoteName ? remoteFilename(initial) : args.output;
+        values.filename_effective = output && output !== "-" ? output : "";
+        if (output && output !== "-" && args.dumpHeader && args.dumpHeader !== "-" &&
+            posix.resolve(pathOf(context, output)) === posix.resolve(pathOf(context, args.dumpHeader))) {
+            throw new CurlError(23, "Body and header output files must differ");
+        }
+        const initialMethod = args.method ?? (args.head ? "HEAD" : args.get ? "GET" : args.upload !== undefined ? "PUT" : body ? "POST" : "GET");
+        requestHeaders(args, body?.contentType, args.user ?? parsed.user, true, limits.maxHeaderBytes);
+        for (let attempt = 0; attempt <= args.retries; attempt++) {
+            values.num_retries = String(attempt);
+            downloaded = 0;
+            failure = undefined;
+            let current = new URL(initial);
+            let method = initialMethod;
+            let currentBody = body;
+            let credentialsInScope = true;
+            let previous;
+            let redirects = 0;
+            included = [];
+            let headerBytes = 0;
+            while (true) {
+                signal.throwIfAborted();
+                values.url_effective = current.href;
+                values.method = method;
+                let allowed;
+                try {
+                    allowed = await withSignal(() => authorize({ url: current.href, method, attempt, signal, ...(previous === undefined ? {} : { redirectFrom: previous }) }), signal);
+                }
+                catch {
+                    signal.throwIfAborted();
+                    throw new CurlError(7, "Network authorization failed");
+                }
+                if (allowed !== true)
+                    throw new CurlError(7, "Network access denied by host policy");
+                const headers = requestHeaders(args, currentBody?.contentType, args.user ?? parsed.user, credentialsInScope, limits.maxHeaderBytes);
+                if (args.verbose)
+                    await writeBytes(context.stderr, encode(`> ${method} ${current.origin}\n${headers.map(([name]) => `> ${name}: [redacted]\n`).join("")}`), signal);
+                const upload = currentBody && (async function* () {
+                    for await (const chunk of currentBody.open(signal)) {
+                        uploaded += chunk.length;
+                        yield chunk;
+                    }
+                })();
+                response = await operation.acquire(async () => {
+                    const acquired = await transport({ url: current.href, method, headers, signal,
+                        registerCleanup: operation.registerCleanup, ...(upload ? { body: upload } : {}) });
+                    let cleanup;
+                    return { ...acquired, dispose() { cleanup ??= Promise.resolve().then(() => acquired.dispose()); return cleanup; } };
+                }, result => result.dispose());
+                const block = responseHeaders(response, limits.maxHeaderBytes);
+                headerBytes += block.length;
+                if (headerBytes > limits.maxHeaderBytes)
+                    throw new CurlError(63, "Combined response headers exceed host byte limit");
+                values.http_code = values.response_code = String(response.status).padStart(3, "0");
+                values.content_type = header(response.headers, "content-type") ?? "";
+                values.http_version = response.httpVersion ?? "1.1";
+                if (args.verbose)
+                    await writeBytes(context.stderr, encode(`< HTTP ${response.status}\n`), signal);
+                if (args.dumpHeader !== undefined) {
+                    if (args.dumpHeader === "-")
+                        await publish(block);
+                    else
+                        await dumpHeaders(context, args.dumpHeader, block, dumped, signal);
+                    dumped = true;
+                }
+                if (args.head || args.include)
+                    included.push(block);
+                const location = header(response.headers, "location");
+                if (redirectStatuses.has(response.status) && location !== undefined) {
+                    let target;
+                    try {
+                        target = parseUrl(new URL(location, current).href, true, true).url;
+                    }
+                    catch (error) {
+                        if (error instanceof CurlError)
+                            throw error;
+                        throw new CurlError(3, "Malformed redirect URL");
+                    }
+                    values.redirect_url = target.href;
+                    if (args.location) {
+                        if (redirects++ >= args.maxRedirects)
+                            throw new CurlError(47, "Maximum redirects exceeded");
+                        if (current.protocol === "https:" && target.protocol === "http:")
+                            throw new CurlError(1, "HTTPS-to-HTTP redirects are disabled");
+                        if (target.origin !== current.origin)
+                            credentialsInScope = false;
+                        if ((response.status === 303 && method !== "HEAD") || ([301, 302].includes(response.status) && method === "POST")) {
+                            currentBody = undefined;
+                            if (args.method === undefined)
+                                method = "GET";
+                        }
+                        previous = current.href;
+                        current = target;
+                        values.num_redirects = String(redirects);
+                        await stop(response, signal);
+                        response = undefined;
+                        continue;
+                    }
+                }
+                break;
+            }
+            if (!response)
+                throw new CurlError(56, "No HTTP response");
+            if (response.status >= 400 && (args.fail || args.failWithBody))
+                failure = new CurlError(22, `HTTP response status ${response.status}`);
+            const suppressBody = args.fail && failure !== undefined;
+            let published = 0;
+            if (!suppressBody || included.length) {
+                const length = header(response.headers, "content-length");
+                if (!args.head && !suppressBody && length && /^\d+$/.test(length) && Number(length) > args.maxFileSize)
+                    throw new CurlError(63, "Response exceeds download byte limit");
+                const final = response;
+                const writing = output === undefined || output === "-" ? createOutputOperation({ ...context, signal }, context.stdout) : undefined;
+                const bodySignal = writing?.signal ?? signal;
+                const source = (async function* () {
+                    for (const bytes of included) {
+                        published += bytes.length;
+                        yield bytes;
+                    }
+                    if (!args.head && !suppressBody) {
+                        let chunks = 0;
+                        try {
+                            for await (const chunk of readBytes(final.body, bodySignal)) {
+                                if (++chunks % 256 === 0)
+                                    await setImmediate(undefined, { signal: bodySignal });
+                                downloaded += chunk.length;
+                                if (downloaded > args.maxFileSize)
+                                    throw new CurlError(63, "Response exceeds download byte limit");
+                                published += chunk.length;
+                                yield chunk;
+                            }
+                            if (length && /^\d+$/.test(length) && downloaded !== Number(length))
+                                throw new CurlError(18, "Partial HTTP response body");
+                        }
+                        catch (error) {
+                            bodySignal.throwIfAborted();
+                            if (!(error instanceof CurlError) && length && /^\d+$/.test(length) && downloaded < Number(length))
+                                throw new CurlError(18, "Partial HTTP response body");
+                            throw networkError(error);
+                        }
+                    }
+                })();
+                try {
+                    await writeOutput(writing ? { ...context, stdout: writing.output } : context, output, source, bodySignal);
+                }
+                catch (error) {
+                    context.signal.throwIfAborted();
+                    if (!pipeClosed(error))
+                        throw error;
+                    closedOutput = true;
+                }
+                finally {
+                    await writing?.close();
+                }
+            }
+            if (retryStatuses.has(response.status) && attempt < args.retries) {
+                if (failure && (!args.silent || args.showError))
+                    await diagnostic(context, failure);
+                const after = header(response.headers, "retry-after");
+                let wait = args.retryDelayMs || Math.min(1000 * 2 ** attempt, 600_000);
+                if (after !== undefined) {
+                    const parsed = /^\d+$/.test(after) ? Number(after) * 1000 : Date.parse(after) - Date.now();
+                    if (Number.isFinite(parsed))
+                        wait = Math.max(wait, parsed);
+                }
+                await stop(response, signal);
+                response = undefined;
+                if (published && output !== undefined && output !== "-")
+                    await writeOutput(context, output, toByteSource(""), signal);
+                await delay(Math.min(wait, limits.maxTimeMs), signal);
+                continue;
+            }
+            break;
+        }
+    }
+    catch (error) {
+        if (context.signal.aborted)
+            throw context.signal.reason;
+        if (pipeClosed(error))
+            closedOutput = true;
+        else
+            failure = signal.aborted && signal.reason instanceof CurlError ? signal.reason : networkError(error);
+    }
+    finally {
+        clearTimeout(timeout);
+        try {
+            await operation.close();
+        }
+        finally {
+            lifetime.abort();
+        }
+    }
+    values.size_download = String(downloaded);
+    values.size_upload = String(uploaded);
+    values.time_total = ((performance.now() - start) / 1000).toFixed(6);
+    values.exitcode = String(failure?.exitCode ?? 0);
+    values.errormsg = failure?.message ?? "";
+    if (format !== undefined && formatReady) {
+        try {
+            await publish(writeOutFormat(format, values));
+        }
+        catch {
+            context.signal.throwIfAborted();
+            failure = new CurlError(23, "Failed writing write-out result");
+        }
+    }
+    if (failure && (!args.silent || args.showError))
+        await diagnostic(context, failure);
+    return failure?.exitCode ?? (closedOutput ? 141 : 0);
+}
+//# sourceMappingURL=curl.js.map