@poe-platform/safe-bash 0.1.70 → 0.1.72

package/dist/safe-bash/browser.d.ts

@@ -14,7 +14,8 @@ export { portableSearchCommands, type PortableSearchOptions } from "./commands/s
 export * from "./commands/regex-execution/public.js";
 export interface BrowserCommandsOptions {
     readonly replace?: boolean;
+    readonly maxDirectoryEntries?: number;
 }
-export declare function createBrowserCommands(): readonly CommandDefinition[];
+export declare function createBrowserCommands(options?: BrowserCommandsOptions): readonly CommandDefinition[];
 export declare function browserCommands(options?: BrowserCommandsOptions): VirtualShellPlugin;
 //# sourceMappingURL=browser.d.ts.map

package/dist/safe-bash/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAOlF,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,YAAY,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,YAAY,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACnG,cAAc,sCAAsC,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,IAAI,SAAS,iBAAiB,EAAE,CAKpE;AAED,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,kBAAkB,CAaxF"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAOlF,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,YAAY,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,YAAY,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACnG,cAAc,sCAAsC,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,SAAS,iBAAiB,EAAE,CAKxG;AAED,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,kBAAkB,CAaxF"}

package/dist/safe-bash/browser.js

@@ -3405,7 +3405,34 @@ async function moveAcrossDevices(context, source, target, noClobber, budget) {
   return true;
 }
 
+// packages/safe-bash/src/commands/directory-admission.ts
+init_platform();
+function createDirectoryReader(maxEntries = 1e4) {
+  if (!Number.isSafeInteger(maxEntries) || maxEntries < 0) {
+    throw new RangeError("maxDirectoryEntries must be a nonnegative safe integer");
+  }
+  return async (context, path, ordered = false) => {
+    context.signal.throwIfAborted();
+    const entries = await context.fs.readdir(path, { signal: context.signal, maxEntries });
+    context.signal.throwIfAborted();
+    if (entries.length > maxEntries) {
+      throw new FsError("EFBIG", { syscall: "readdir", path, message: "directory entry limit exceeded" });
+    }
+    await yieldTurn(context.signal);
+    if (ordered) {
+      for (let index = 1; index < entries.length; index++) {
+        if (index % 256 === 0) await yieldTurn(context.signal);
+        if (entries[index - 1].name > entries[index].name) {
+          return entries.slice().sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
+        }
+      }
+    }
+    return entries;
+  };
+}
+
 // packages/safe-bash/src/commands/filesystem.ts
+var MAX_RECURSIVE_DIRECTORY_DEPTH = 1024;
 async function preflightOperands(context, operands, check) {
   for (const operand of operands) {
     try {
@@ -3441,22 +3468,22 @@ function needCapability(context, capability) {
   if (!context.fs.capabilitiesFor && context.fs.capabilities[declaration] === false) throw new FsError("ENOTSUP", { syscall: capability });
   if (!context.fs[capability]) throw new FsError("ENOTSUP", { syscall: capability });
 }
-async function admitEmptyDirectory(context, path) {
+async function admitEmptyDirectory(context, path, readDirectory) {
   try {
     await admitFilesystemModes(context, "rmdir", ["directory"], [path]);
   } catch (error) {
     context.signal.throwIfAborted();
     if (codeOf(error) === "ENOTSUP") {
       const capabilities = await context.fs.capabilitiesFor?.(path, { signal: context.signal }) ?? context.fs.capabilities;
-      if (capabilities.write !== false && capabilities.readdir !== false && (await context.fs.readdir(path, { signal: context.signal })).length) {
+      if (capabilities.write !== false && capabilities.readdir !== false && (await readDirectory(context, path)).length) {
         throw new FsError("ENOTEMPTY", { syscall: "rmdir", path, cause: error });
       }
     }
     throw error;
   }
 }
-async function removeEmptyDirectory(context, path) {
-  await admitEmptyDirectory(context, path);
+async function removeEmptyDirectory(context, path, readDirectory) {
+  await admitEmptyDirectory(context, path, readDirectory);
   context.signal.throwIfAborted();
   if (!context.fs.rmdir) throw new FsError("ENOTSUP", { syscall: "rmdir", path });
   await context.fs.rmdir(path, { signal: context.signal });
@@ -3468,7 +3495,7 @@ async function destinations(context, operands) {
   if (operands.length > 2 && !directory) throw new FsError("ENOTDIR", { path: target });
   return { target, directory, sources: operands.slice(0, -1) };
 }
-async function copy(context, source, target, flags, top = true, ancestors = /* @__PURE__ */ new Set(), preflight = false) {
+async function copy(context, source, target, flags, readDirectory, top = true, ancestors = /* @__PURE__ */ new Set(), preflight = false) {
   context.signal.throwIfAborted();
   const link = await context.fs.lstat(source, { signal: context.signal });
   const preserveLink = link.type === "symlink" && !flags.has("L") && (flags.has("P") || !top);
@@ -3488,11 +3515,19 @@ async function copy(context, source, target, flags, top = true, ancestors = /* @
     if (isPathWithin(physicalSource, physicalTarget)) throw new FsError("EINVAL", { path: target, message: "cannot copy a directory into itself" });
     if (ancestors.has(physicalSource)) throw new FsError("ELOOP", { path: source });
     if (targetStat && targetStat.type !== "directory") throw new FsError("ENOTDIR", { path: target });
+    context.signal.throwIfAborted();
+    if (ancestors.size > MAX_RECURSIVE_DIRECTORY_DEPTH) {
+      throw new FsError("ELOOP", { path: source, message: `cp directory depth limit exceeded (${MAX_RECURSIVE_DIRECTORY_DEPTH})` });
+    }
     await admitFilesystemModes(context, "cp", ["recursive"], [target]);
-    if (!targetStat && !preflight) await context.fs.mkdir(target, { mode: sourceStat.mode & 511, signal: context.signal });
-    const next = new Set(ancestors).add(physicalSource);
-    for (const entry of (await context.fs.readdir(source, { signal: context.signal })).sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0)) {
-      await copy(context, joinPath(source, entry.name), joinPath(target, entry.name), flags, false, next, preflight);
+    ancestors.add(physicalSource);
+    try {
+      if (!targetStat && !preflight) await context.fs.mkdir(target, { mode: sourceStat.mode & 511, signal: context.signal });
+      for (const entry of await readDirectory(context, source, true)) {
+        await copy(context, joinPath(source, entry.name), joinPath(target, entry.name), flags, readDirectory, false, ancestors, preflight);
+      }
+    } finally {
+      ancestors.delete(physicalSource);
     }
   } else if (preserveLink) {
     await admitFilesystemModes(context, "cp", ["symlink"], [target]);
@@ -3548,7 +3583,8 @@ function modeText(stat) {
   if (stat.mode & 512) text = text.slice(0, 9) + (stat.mode & 1 ? "t" : "T");
   return text;
 }
-function filesystemCommands() {
+function filesystemCommands(maxDirectoryEntries) {
+  const readDirectory = createDirectoryReader(maxDirectoryEntries);
   return [
     define("mkdir", async (context) => {
       const parsed = options(context.args, "pm:v", { parents: "p", mode: "m", verbose: "v" });
@@ -3613,6 +3649,7 @@ function filesystemCommands() {
           source,
           destination.directory ? joinPath(destination.target, basename(source)) : destination.target,
           parsed.flags,
+          readDirectory,
           true,
           /* @__PURE__ */ new Set(),
           true
@@ -3620,7 +3657,7 @@ function filesystemCommands() {
       });
       return eachOperand(context, destination.sources, async (operand) => {
         const source = pathOf(context, operand);
-        await copy(context, source, destination.directory ? joinPath(destination.target, basename(source)) : destination.target, parsed.flags);
+        await copy(context, source, destination.directory ? joinPath(destination.target, basename(source)) : destination.target, parsed.flags, readDirectory);
       });
     }),
     define("mv", async (context) => {
@@ -3659,7 +3696,7 @@ function filesystemCommands() {
         const stat = await maybeStat(context, path, false);
         if (!stat) return;
         const mode = stat.type === "directory" ? parsed.flags.has("r") || parsed.flags.has("R") ? "recursive" : "directory" : "file";
-        if (mode === "directory") await admitEmptyDirectory(context, path);
+        if (mode === "directory") await admitEmptyDirectory(context, path, readDirectory);
         else await admitFilesystemModes(context, "rm", [mode], [path]);
       });
       return eachOperand(context, parsed.operands, async (operand) => {
@@ -3674,7 +3711,7 @@ function filesystemCommands() {
         if (stat.type === "directory" && !recursive && !parsed.flags.has("d")) throw new FsError("EISDIR", { path });
         if (stat.type === "directory" && !recursive) {
           try {
-            await removeEmptyDirectory(context, path);
+            await removeEmptyDirectory(context, path, readDirectory);
           } catch (error) {
             context.signal.throwIfAborted();
             if (!parsed.flags.has("f") || codeOf(error) !== "ENOENT") throw error;
@@ -3693,7 +3730,7 @@ function filesystemCommands() {
         let path = pathOf(context, operand);
         const stop = dirname(pathOf(context, operand.split("/").find((part) => part && part !== ".") ?? operand));
         do {
-          await admitEmptyDirectory(context, path);
+          await admitEmptyDirectory(context, path, readDirectory);
           path = dirname(path);
         } while (parsed.flags.has("p") && path !== "/" && path !== stop);
       });
@@ -3702,7 +3739,7 @@ function filesystemCommands() {
         const stop = dirname(pathOf(context, operand.split("/").find((part) => part && part !== ".") ?? operand));
         do {
           if (path === "/") throw new FsError("EBUSY", { path });
-          await removeEmptyDirectory(context, path);
+          await removeEmptyDirectory(context, path, readDirectory);
           if (parsed.flags.has("v")) await output(context, `rmdir: removing directory '${path}'
 `);
           path = dirname(path);
@@ -3828,23 +3865,33 @@ function filesystemCommands() {
         await admitFilesystemModes(context, "ls", ["directory"], [path]);
         const physical = await context.fs.realpath(path, { signal: context.signal });
         if (ancestors.has(physical)) throw new FsError("ELOOP", { path });
-        const next = new Set(ancestors).add(physical);
-        if (header) {
-          await output(context, `${headerWritten ? "\n" : ""}${display}:
-`);
-          headerWritten = true;
+        context.signal.throwIfAborted();
+        if (ancestors.size > MAX_RECURSIVE_DIRECTORY_DEPTH) {
+          throw new FsError("ELOOP", { path, message: `ls directory depth limit exceeded (${MAX_RECURSIVE_DIRECTORY_DEPTH})` });
         }
-        const entries = await context.fs.readdir(path, { signal: context.signal });
-        const names = entries.map((entry) => entry.name).filter((name2) => parsed.flags.has("a") || parsed.flags.has("A") || !name2.startsWith("."));
-        if (parsed.flags.has("a")) names.push(".", "..");
-        names.sort();
-        if (parsed.flags.has("r")) names.reverse();
-        for (const name2 of names) await render(joinPath(path, name2), name2);
-        if (parsed.flags.has("R")) for (const name2 of names) {
-          if (name2 === "." || name2 === "..") continue;
-          const child = joinPath(path, name2);
-          const childStat = await context.fs[parsed.flags.has("L") ? "stat" : "lstat"](child, { signal: context.signal });
-          if (childStat.type === "directory") await list(child, `${display.replace(/\/$/u, "")}/${name2}`, true, next);
+        ancestors.add(physical);
+        try {
+          if (header) {
+            await output(context, `${headerWritten ? "\n" : ""}${display}:
+`);
+            headerWritten = true;
+          }
+          const entries = await readDirectory(context, path, true);
+          const names = entries.map((entry) => entry.name).filter((name2) => parsed.flags.has("a") || parsed.flags.has("A") || !name2.startsWith("."));
+          if (parsed.flags.has("a")) for (const name2 of [".", ".."]) {
+            const index = names.findIndex((entry) => entry > name2);
+            names.splice(index < 0 ? names.length : index, 0, name2);
+          }
+          if (parsed.flags.has("r")) names.reverse();
+          for (const name2 of names) await render(joinPath(path, name2), name2);
+          if (parsed.flags.has("R")) for (const name2 of names) {
+            if (name2 === "." || name2 === "..") continue;
+            const child = joinPath(path, name2);
+            const childStat = await context.fs[parsed.flags.has("L") ? "stat" : "lstat"](child, { signal: context.signal });
+            if (childStat.type === "directory") await list(child, `${display.replace(/\/$/u, "")}/${name2}`, true, ancestors);
+          }
+        } finally {
+          ancestors.delete(physical);
         }
       };
       return eachOperand(context, operands, (operand) => list(pathOf(context, operand), operand, operands.length > 1 || parsed.flags.has("R")));
@@ -18866,10 +18913,10 @@ function createBoundedRegexProvider(input3 = {}) {
 }
 
 // packages/safe-bash/src/browser.ts
-function createBrowserCommands() {
+function createBrowserCommands(options3 = {}) {
   return [
     ...basicCommands(),
-    ...filesystemCommands(),
+    ...filesystemCommands(options3.maxDirectoryEntries),
     ...predicateCommands(),
     ...streamCommands(),
     ...textCommands()
@@ -18879,7 +18926,7 @@ function browserCommands(options3 = {}) {
   return {
     name: "browser-commands",
     setup(host) {
-      const commands = createBrowserCommands();
+      const commands = createBrowserCommands(options3);
       if (!options3.replace) {
         for (const command2 of commands) {
           if (host.commands.has(command2.name)) throw new Error(`Command already registered: ${command2.name}`);