@poe-platform/safe-bash 0.1.425 → 0.1.427

package/dist/safe-bash/browser.js

@@ -4109,6 +4109,7 @@ function filesystemCommands(maxDirectoryEntries) {
 
 // packages/safe-bash/src/commands/predicates.ts
 init_platform();
+var maxExpressionDepth = 256;
 async function metadata(context, path, link = false) {
   assertCommandRequirements(context, predicateRequirements, ["metadata"]);
   try {
@@ -4141,15 +4142,16 @@ function predicateCommands() {
       if (!/^[ \t]*[+-]?[0-9]+[ \t]*$/u.test(text)) throw new UsageError(`integer expression expected: '${text}'`);
       return BigInt(text.trim());
     };
-    const primary = () => {
+    const primary = (depth) => {
       const token = args[offset++];
       if (token === void 0) throw new UsageError("argument expected");
-      if (token === "!" && !binary.has(args[offset] ?? "")) {
-        const inner = primary();
-        return async () => !await inner();
-      }
-      if (token === "(" && !binary.has(args[offset] ?? "")) {
-        const inner = disjunction();
+      if ((token === "!" || token === "(") && !binary.has(args[offset] ?? "")) {
+        if (depth >= maxExpressionDepth) throw new UsageError(`expression nesting exceeds ${maxExpressionDepth}`);
+        if (token === "!") {
+          const inner2 = primary(depth + 1);
+          return async () => !await inner2();
+        }
+        const inner = disjunction(depth + 1);
         if (args[offset++] !== ")") throw new UsageError("missing ')'");
         return inner;
       }
@@ -4214,27 +4216,27 @@ function predicateCommands() {
       }
       return async () => token !== "";
     };
-    const conjunction = () => {
-      let predicate = primary();
+    const conjunction = (depth) => {
+      let predicate = primary(depth);
       while (args[offset] === "-a") {
         offset++;
         const left = predicate;
-        const right = primary();
+        const right = primary(depth);
         predicate = async () => await left() && await right();
       }
       return predicate;
     };
-    const disjunction = () => {
-      let predicate = conjunction();
+    const disjunction = (depth) => {
+      let predicate = conjunction(depth);
       while (args[offset] === "-o") {
         offset++;
         const left = predicate;
-        const right = conjunction();
+        const right = conjunction(depth);
         predicate = async () => await left() || await right();
       }
       return predicate;
     };
-    const evaluate = disjunction();
+    const evaluate = disjunction(0);
     if (offset !== args.length) throw new UsageError(`unexpected argument '${args[offset]}'`);
     return { exitCode: await evaluate() ? 0 : 1 };
   })).map((command2) => ({ ...command2, filesystemRequirements: predicateRequirements }));