@poe-platform/safe-bash 0.1.506 → 0.1.508

package/dist/safe-bash/commands/xml/limits.js

@@ -0,0 +1,55 @@
+import { yieldTurn } from "../../contracts/yield.js";
+export const defaultXmlQueryLimits = Object.freeze({
+    maxInputBytes: 8 * 1024 * 1024, maxOutputBytes: 8 * 1024 * 1024,
+    maxSourceBytes: 64 * 1024, maxDepth: 64, maxNodes: 100_000,
+    maxAttributes: 10_000, maxAttributesPerElement: 128,
+    maxNamespaces: 256, maxSteps: 1_000_000, maxResults: 100_000,
+});
+export class XmlQueryError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+    }
+}
+export class XmlQueryLimitError extends XmlQueryError {
+    constructor(name) { super(`${name} limit exceeded`, 5); }
+}
+export function resolveXmlQueryLimits(options = {}) {
+    const limits = { ...defaultXmlQueryLimits, ...options };
+    for (const [name, value] of Object.entries(limits)) {
+        if (!Object.hasOwn(defaultXmlQueryLimits, name) || !Number.isSafeInteger(value) || value < 1) {
+            throw new RangeError(`${name} must be a positive safe integer XML limit`);
+        }
+    }
+    if (limits.maxDepth > 256)
+        throw new RangeError("maxDepth must be <=256");
+    return Object.freeze(limits);
+}
+export class XmlBudget {
+    limits;
+    signal;
+    steps = 0;
+    checkpoint = 0;
+    outputBytes = 0;
+    constructor(limits, signal) {
+        this.limits = limits;
+        this.signal = signal;
+    }
+    async tick(work = 1) {
+        this.signal.throwIfAborted();
+        this.steps += work;
+        if (this.steps > this.limits.maxSteps)
+            throw new XmlQueryLimitError("maxSteps");
+        this.checkpoint += work;
+        if (this.checkpoint >= 1024) {
+            this.checkpoint = 0;
+            await yieldTurn(this.signal);
+        }
+    }
+    results(size) {
+        if (size > this.limits.maxResults)
+            throw new XmlQueryLimitError("maxResults");
+    }
+}
+//# sourceMappingURL=limits.js.map

package/dist/safe-bash/commands/xml/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../../src/commands/xml/limits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAkBrD,MAAM,CAAC,MAAM,qBAAqB,GAA6B,MAAM,CAAC,MAAM,CAAC;IAC3E,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC/D,cAAc,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO;IAC1D,aAAa,EAAE,MAAM,EAAE,uBAAuB,EAAE,GAAG;IACnD,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO;CAC7D,CAAC,CAAC;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACA;IAAtC,YAAY,OAAe,EAAW,MAAc;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAAjC,WAAM,GAAN,MAAM,CAAQ;IAAoB,CAAC;CAC1E;AACD,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IACnD,YAAY,IAA0B,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;CAChF;AACD,MAAM,UAAU,qBAAqB,CAAC,UAAmC,EAAE;IACzE,MAAM,MAAM,GAAG,EAAE,GAAG,qBAAqB,EAAE,GAAG,OAAO,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,GAAG,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AACD,MAAM,OAAO,SAAS;IAIC;IAAiC;IAH9C,KAAK,GAAG,CAAC,CAAC;IACV,UAAU,GAAG,CAAC,CAAC;IACvB,WAAW,GAAG,CAAC,CAAC;IAChB,YAAqB,MAAsB,EAAW,MAAmB;QAApD,WAAM,GAAN,MAAM,CAAgB;QAAW,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAChF,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACpB,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAY;QAClB,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,MAAM,IAAI,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/safe-bash/commands/xml/query.d.ts

@@ -0,0 +1,21 @@
+import { XmlBudget } from "./limits.js";
+export type Predicate = {
+    kind: "position";
+    value: number;
+} | {
+    kind: "attribute";
+    name: string;
+    value: string;
+};
+export interface QueryStep {
+    readonly descendant: boolean;
+    readonly kind: "element" | "attribute" | "text";
+    readonly name: string;
+    readonly predicates: readonly Predicate[];
+}
+export interface Query {
+    readonly scalar: "string" | "count" | "boolean" | undefined;
+    readonly steps: readonly QueryStep[];
+}
+export declare function parseQuery(source: string, budget: XmlBudget): Promise<Query>;
+//# sourceMappingURL=query.d.ts.map

package/dist/safe-bash/commands/xml/query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/commands/xml/query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAqC,MAAM,aAAa,CAAC;AAE3E,MAAM,MAAM,SAAS,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AACjH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAC;CAC3C;AACD,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;CACtC;AAID,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAwElF"}

package/dist/safe-bash/commands/xml/query.js

@@ -0,0 +1,111 @@
+import { XmlBudget, XmlQueryError, XmlQueryLimitError } from "./limits.js";
+const nameStart = (character) => character >= "a" && character <= "z" || character >= "A" && character <= "Z" || character === "_";
+const namePart = (character) => nameStart(character) || character >= "0" && character <= "9" || character === "-" || character === ".";
+export async function parseQuery(source, budget) {
+    if (source.length > budget.limits.maxSourceBytes || Buffer.byteLength(source) > budget.limits.maxSourceBytes)
+        throw new XmlQueryLimitError("maxSourceBytes");
+    // Admit every character before token operations; the grammar itself has no recursion.
+    for (let offset = 0; offset < source.length; offset += 256)
+        await budget.tick(Math.min(256, source.length - offset));
+    let at = 0;
+    const fail = () => { throw new XmlQueryError(`unsupported XPath syntax at offset ${at}`, 10); };
+    const space = () => { while (source[at] === " " || source[at] === "\t" || source[at] === "\r" || source[at] === "\n")
+        at++; };
+    const expect = (value) => { space(); if (!source.startsWith(value, at))
+        fail(); at += value.length; };
+    const name = () => {
+        space();
+        const start = at;
+        if (!nameStart(source[at] ?? ""))
+            fail();
+        while (namePart(source[at] ?? ""))
+            at++;
+        if (source[at] === ":")
+            fail();
+        return source.slice(start, at);
+    };
+    space();
+    let scalar;
+    if (source[at] !== "/") {
+        const value = name();
+        if (value !== "string" && value !== "count" && value !== "boolean")
+            fail();
+        scalar = value;
+        expect("(");
+    }
+    const steps = [];
+    space();
+    while (source[at] === "/") {
+        at++;
+        const descendant = source[at] === "/";
+        if (descendant)
+            at++;
+        space();
+        let kind = "element";
+        if (source[at] === "@") {
+            kind = "attribute";
+            at++;
+        }
+        let selected;
+        if (source[at] === "*") {
+            selected = "*";
+            at++;
+        }
+        else {
+            selected = name();
+            space();
+            if (source[at] === "(") {
+                if (selected !== "text" || kind !== "element")
+                    fail();
+                expect("(");
+                expect(")");
+                kind = "text";
+            }
+        }
+        const predicates = [];
+        space();
+        while (source[at] === "[") {
+            at++;
+            space();
+            if (source[at] === "@") {
+                at++;
+                const attribute = name();
+                expect("=");
+                space();
+                const quote = source[at++];
+                if (quote !== "'" && quote !== '"')
+                    fail();
+                const start = at;
+                while (at < source.length && source[at] !== quote)
+                    at++;
+                if (at === source.length)
+                    fail();
+                predicates.push({ kind: "attribute", name: attribute, value: source.slice(start, at++) });
+            }
+            else {
+                const start = at;
+                while ((source[at] ?? "") >= "0" && (source[at] ?? "") <= "9")
+                    at++;
+                const value = Number(source.slice(start, at));
+                if (start === at || !Number.isSafeInteger(value) || value < 1)
+                    fail();
+                predicates.push({ kind: "position", value });
+            }
+            expect("]");
+            space();
+        }
+        steps.push({ descendant, kind, name: selected, predicates });
+        if (kind !== "element" && source[at] === "/")
+            fail();
+        await budget.tick();
+    }
+    if (!steps.length)
+        fail();
+    if (scalar !== undefined)
+        expect(")");
+    space();
+    if (at !== source.length)
+        fail();
+    return { scalar, steps };
+}
+//# sourceMappingURL=query.js.map

package/dist/safe-bash/commands/xml/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../../src/commands/xml/query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAa3E,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAW,EAAE,CAAC,SAAS,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,IAAI,SAAS,KAAK,GAAG,CAAC;AACpJ,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAW,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,CAAC;AAExJ,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,MAAiB;IAChE,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc;QAAE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC7J,sFAAsF;IACtF,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG;QAAE,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IACrH,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,MAAM,IAAI,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,aAAa,CAAC,sCAAsC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,GAAS,EAAE,GAAG,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI;QAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QAAE,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpH,MAAM,IAAI,GAAG,GAAW,EAAE;QACxB,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAAE,EAAE,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG;YAAE,IAAI,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,KAAK,EAAE,CAAC;IACR,IAAI,MAAuB,CAAC;IAC5B,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,EAAE,CAAC;QAC3E,MAAM,GAAG,KAAwB,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,EAAE,CAAC;IACR,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;QAC1B,EAAE,EAAE,CAAC;QACL,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC;QACtC,IAAI,UAAU;YAAE,EAAE,EAAE,CAAC;QACrB,KAAK,EAAE,CAAC;QACR,IAAI,IAAI,GAAsB,SAAS,CAAC;QACxC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,IAAI,GAAG,WAAW,CAAC;YAAC,EAAE,EAAE,CAAC;QAAC,CAAC;QACrD,IAAI,QAAgB,CAAC;QACrB,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,GAAG,CAAC;YAAC,EAAE,EAAE,CAAC;QAAC,CAAC;aAC5C,CAAC;YACJ,QAAQ,GAAG,IAAI,EAAE,CAAC;YAClB,KAAK,EAAE,CAAC;YACR,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;gBACvB,IAAI,QAAQ,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,EAAE,CAAC;gBACtD,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAC,IAAI,GAAG,MAAM,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,KAAK,EAAE,CAAC;QACR,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1B,EAAE,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YACd,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;gBACvB,EAAE,EAAE,CAAC;gBAAC,MAAM,SAAS,GAAG,IAAI,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAC,KAAK,EAAE,CAAC;gBACrD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;oBAAE,IAAI,EAAE,CAAC;gBAC3C,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK;oBAAE,EAAE,EAAE,CAAC;gBACxD,IAAI,EAAE,KAAK,MAAM,CAAC,MAAM;oBAAE,IAAI,EAAE,CAAC;gBACjC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5F,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG;oBAAE,EAAE,EAAE,CAAC;gBACpE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC9C,IAAI,KAAK,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;oBAAE,IAAI,EAAE,CAAC;gBACtE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG;YAAE,IAAI,EAAE,CAAC;QACrD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,IAAI,EAAE,CAAC;IAC1B,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,KAAK,MAAM,CAAC,MAAM;QAAE,IAAI,EAAE,CAAC;IACjC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}