@poe-platform/safe-bash 0.1.745 → 0.1.747

package/dist/safe-bash/shell/sync-jq-expression.d.ts

@@ -0,0 +1,6 @@
+/** Scan only the grammar boundaries needed by the synchronous jq subset. */
+export declare function splitSyncJqExpression(expression: string, separator: string): {
+    parts: string[];
+    wrapped: boolean;
+} | undefined;
+//# sourceMappingURL=sync-jq-expression.d.ts.map

package/dist/safe-bash/shell/sync-jq-expression.js

@@ -0,0 +1,46 @@
+/** Scan only the grammar boundaries needed by the synchronous jq subset. */
+export function splitSyncJqExpression(expression, separator) {
+    const parts = [];
+    const stack = [];
+    let quoted = false;
+    let escaped = false;
+    let start = 0;
+    let wrapped = expression.startsWith("(");
+    for (let i = 0; i < expression.length; i++) {
+        const ch = expression[i];
+        if (quoted) {
+            if (escaped)
+                escaped = false;
+            else if (ch === "\\")
+                escaped = true;
+            else if (ch === '"')
+                quoted = false;
+            continue;
+        }
+        if (ch === '"') {
+            quoted = true;
+            continue;
+        }
+        if (ch === "(" || ch === "[" || ch === "{") {
+            stack.push(ch === "(" ? ")" : ch === "[" ? "]" : "}");
+            continue;
+        }
+        if (ch === ")" || ch === "]" || ch === "}") {
+            if (stack.pop() !== ch)
+                return undefined;
+            if (stack.length === 0 && i !== expression.length - 1)
+                wrapped = false;
+            continue;
+        }
+        if (stack.length === 0 && expression.startsWith(separator, i)) {
+            parts.push(expression.slice(start, i).trim());
+            i += separator.length - 1;
+            start = i + 1;
+        }
+    }
+    if (quoted || stack.length > 0)
+        return undefined;
+    parts.push(expression.slice(start).trim());
+    return { parts, wrapped };
+}
+//# sourceMappingURL=sync-jq-expression.js.map

package/dist/safe-bash-command-cal/index.js

@@ -4,6 +4,7 @@ import {
 
 // packages/safe-bash-command-cal/dist/index.js
 init_buffer();
+import { yieldTurn } from "../safe-bash-contracts/yield.js";
 import { commandRuntimeIdentity, writeText } from "../safe-bash-contracts/index.js";
 function settings(options = {}) {
   const limits = {
@@ -235,6 +236,7 @@ function createCalCommand(options = {}) {
     name: "cal",
     runtimeIdentity: commandRuntimeIdentity,
     async execute(context) {
+      context.signal.throwIfAborted();
       const rawArgs = context.args;
       let totalArgBytes = 0;
       for (const a of rawArgs) {
@@ -315,16 +317,24 @@ function createCalCommand(options = {}) {
         } else if (arg === "-n" || arg === "--months") {
           const val = rawArgs[++i];
           const n = Number(val);
-          if (!val || !Number.isInteger(n) || n < 1 || n > lim.maxMonths) {
+          if (!val || !Number.isSafeInteger(n) || n < 1 || n > lim.maxMonths) {
             await writeText(context.stderr, `cal: invalid month count '${val ?? ""}'
 `);
             return { exitCode: 1 };
           }
           spanMonths = n;
-        } else if (arg === "-A") {
-          afterMonths = Math.max(0, Number(rawArgs[++i] ?? 0));
-        } else if (arg === "-B") {
-          beforeMonths = Math.max(0, Number(rawArgs[++i] ?? 0));
+        } else if (arg === "-A" || arg === "-B") {
+          const val = rawArgs[++i];
+          const count2 = Number(val);
+          if (!val || !Number.isSafeInteger(count2) || count2 < 0) {
+            await writeText(context.stderr, `cal: invalid month count '${val ?? ""}'
+`);
+            return { exitCode: 1 };
+          }
+          if (arg === "-A")
+            afterMonths = count2;
+          else
+            beforeMonths = count2;
         } else if (arg.startsWith("-") && arg.length > 1) {
           for (let j = 1; j < arg.length; j++) {
             const ch = arg[j];
@@ -426,24 +436,31 @@ function createCalCommand(options = {}) {
         await writeText(context.stderr, "cal: too many arguments\n");
         return { exitCode: 1 };
       }
+      const count = wholeYear ? 12 : spanMonths;
+      if (!Number.isSafeInteger(count) || count > lim.maxMonths) {
+        await writeText(context.stderr, "cal: month count exceeds size limit\n");
+        return { exitCode: 1 };
+      }
       const gridWidth = julian ? 27 : 20;
       const perRow = julian ? 2 : 3;
       if (verticalLayout) {
-        const count = wholeYear ? 12 : spanMonths;
         const offset = wholeYear ? 0 : beforeMonths || (spanAround ? Math.floor((spanMonths - 1) / 2) : 0);
         const first = year * 12 + (wholeYear ? 0 : month - 1) - offset;
-        const grids2 = Array.from({ length: count }, (_, index) => {
+        const grids2 = [];
+        for (let index = 0; index < count; index++) {
+          await yieldTurn(context.signal);
           const total = first + index;
-          return renderVerticalNcalMonth(Math.floor(total / 12), total % 12 + 1, {
+          grids2.push(renderVerticalNcalMonth(Math.floor(total / 12), (total % 12 + 12) % 12 + 1, {
             mondayFirst,
             julian,
             includeYearInHeader: !wholeYear,
             showWeeks
-          });
-        });
+          }));
+        }
         const verticalPerRow = wholeYear ? julian ? 3 : 4 : perRow;
         const lines2 = wholeYear ? [centerText(String(year), (julian ? 26 : 22) * verticalPerRow)] : [];
         for (let start = 0; start < grids2.length; start += verticalPerRow) {
+          await yieldTurn(context.signal);
           const group = grids2.slice(start, start + verticalPerRow);
           for (let line = 0; line < group[0].length; line++) {
             lines2.push(group.map((grid, index) => {
@@ -461,6 +478,7 @@ function createCalCommand(options = {}) {
       if (wholeYear) {
         const lines2 = [`${" ".repeat(28)}${year}`];
         for (let startM = 1; startM <= 12; startM += perRow) {
+          await yieldTurn(context.signal);
           const rowMonths = [];
           for (let k = 0; k < perRow && startM + k <= 12; k++) {
             rowMonths.push(renderMonthGrid(year, startM + k, { mondayFirst, julian, includeYearInHeader: false }));
@@ -482,12 +500,12 @@ function createCalCommand(options = {}) {
       if (beforeMonths > 0) {
         const totalMonths = startYear * 12 + (startMonth - 1) - beforeMonths;
         startYear = Math.floor(totalMonths / 12);
-        startMonth = totalMonths % 12 + 1;
+        startMonth = (totalMonths % 12 + 12) % 12 + 1;
       } else if (spanAround && spanMonths > 1) {
         const offset = Math.floor((spanMonths - 1) / 2);
         const totalMonths = startYear * 12 + (startMonth - 1) - offset;
         startYear = Math.floor(totalMonths / 12);
-        startMonth = totalMonths % 12 + 1;
+        startMonth = (totalMonths % 12 + 12) % 12 + 1;
       }
       if (spanMonths === 1) {
         const g = renderMonthGrid(startYear, startMonth, { mondayFirst, julian, includeYearInHeader: true });
@@ -504,6 +522,7 @@ function createCalCommand(options = {}) {
       let curY = startYear;
       let curM = startMonth;
       for (let idx = 0; idx < spanMonths; idx++) {
+        await yieldTurn(context.signal);
         grids.push(renderMonthGrid(curY, curM, { mondayFirst, julian, includeYearInHeader: true }));
         curM++;
         if (curM > 12) {
@@ -513,6 +532,7 @@ function createCalCommand(options = {}) {
       }
       const lines = [];
       for (let r = 0; r < grids.length; r += perRow) {
+        await yieldTurn(context.signal);
         const slice = grids.slice(r, r + perRow);
         lines.push(slice.map((g) => g.header.padEnd(gridWidth, " ")).join("  ") + "  ");
         lines.push(slice.map((g) => g.dayHeader.padEnd(gridWidth, " ")).join("  ") + "  ");

package/dist/safe-bash-command-hostname/index.js

@@ -4,6 +4,7 @@ import {
 
 // packages/safe-bash-command-hostname/dist/index.js
 init_buffer();
+import { isFsError } from "../safe-bash-contracts/errors.js";
 import { writeFileOutput } from "../safe-bash-contracts/filesystem-output-budget.js";
 import { commandRuntimeIdentity, writeText } from "../safe-bash-contracts/index.js";
 function settings(options = {}) {
@@ -39,8 +40,9 @@ Packaged by Safe-Bash (Sandbox VFS-ish/GNU runtime)
 async function readHostnameFile(context, filePath, maxBytes) {
   const resolved = filePath.startsWith("/") ? filePath : context.cwd.endsWith("/") ? context.cwd + filePath : context.cwd + "/" + filePath;
   const bytes = await context.fs.readFile(resolved, { signal: context.signal });
+  context.signal.throwIfAborted();
   if (bytes.byteLength > maxBytes) {
-    throw new Error("hostname file exceeds size limit");
+    throw new RangeError("hostname file exceeds size limit");
   }
   const text = new TextDecoder().decode(bytes);
   for (const line of text.split(/\r?\n/)) {
@@ -52,7 +54,7 @@ async function readHostnameFile(context, filePath, maxBytes) {
 }
 function createHostnameCommand(options = {}) {
   const limits = settings(options);
-  let sessionHostname = options.hostname;
+  const sessionHostnames = /* @__PURE__ */ new WeakMap();
   return {
     name: "hostname",
     description: "Show or set the Sandbox VFS-ish/GNU hostname",
@@ -196,7 +198,10 @@ function createHostnameCommand(options = {}) {
         if (fileSource !== void 0) {
           try {
             newHost = await readHostnameFile(context, fileSource, limits.maxFileBytes);
-          } catch {
+          } catch (error) {
+            context.signal.throwIfAborted();
+            if (!isFsError(error, "ENOENT") && !(error instanceof RangeError))
+              throw error;
             await writeText(context.stderr, `hostname: cannot open file '${fileSource}'
 `);
             return { exitCode: 1 };
@@ -207,21 +212,31 @@ function createHostnameCommand(options = {}) {
           await writeText(context.stderr, "hostname: you must be root to change the host name\n");
           return { exitCode: 1 };
         }
-        sessionHostname = newHost;
         try {
           await context.fs.mkdir("/etc", { recursive: true, signal: context.signal });
           await writeFileOutput(context, new TextEncoder().encode(`${newHost}
 `), (data) => context.fs.writeFile("/etc/hostname", data, { signal: context.signal }));
-        } catch {
+        } catch (error) {
+          context.signal.throwIfAborted();
+          if (!isFsError(error, "EROFS") && !isFsError(error, "EACCES") && !isFsError(error, "EPERM"))
+            throw error;
         }
+        sessionHostnames.set(context.fs, newHost);
         return { exitCode: 0 };
       }
       let vfsHost = "";
       try {
         vfsHost = await readHostnameFile(context, "/etc/hostname", limits.maxFileBytes);
-      } catch {
+      } catch (error) {
+        context.signal.throwIfAborted();
+        if (error instanceof RangeError) {
+          await writeText(context.stderr, "hostname: hostname file exceeds size limit\n");
+          return { exitCode: 1 };
+        }
+        if (!isFsError(error, "ENOENT"))
+          throw error;
       }
-      const rawHost = context.env.HOSTNAME || vfsHost || sessionHostname || "sandbox";
+      const rawHost = context.env.HOSTNAME || vfsHost || sessionHostnames.get(context.fs) || options.hostname || "sandbox";
       const dotIdx = rawHost.indexOf(".");
       const shortName = dotIdx >= 0 ? rawHost.slice(0, dotIdx) : rawHost;
       const domainName = dotIdx >= 0 ? rawHost.slice(dotIdx + 1) : options.domain ?? "vfs.local";

package/dist/safe-bash-command-id/index.js

@@ -4,6 +4,7 @@ import {
 
 // packages/safe-bash-command-id/dist/index.js
 init_buffer();
+import { isFsError } from "../safe-bash-contracts/errors.js";
 import { commandRuntimeIdentity, writeText } from "../safe-bash-contracts/index.js";
 function settings(options = {}) {
   const limits = {
@@ -50,17 +51,25 @@ async function loadVfsAccounts(context, maxBytes) {
   let groupText = "";
   try {
     const bytes = await context.fs.readFile("/etc/passwd", { signal: context.signal });
-    if (bytes.byteLength <= maxBytes) {
-      passwdText = new TextDecoder().decode(bytes);
-    }
-  } catch {
+    context.signal.throwIfAborted();
+    if (bytes.byteLength > maxBytes)
+      throw new RangeError("/etc/passwd exceeds size limit");
+    passwdText = new TextDecoder().decode(bytes);
+  } catch (error) {
+    context.signal.throwIfAborted();
+    if (!isFsError(error, "ENOENT"))
+      throw error;
   }
   try {
     const bytes = await context.fs.readFile("/etc/group", { signal: context.signal });
-    if (bytes.byteLength <= maxBytes) {
-      groupText = new TextDecoder().decode(bytes);
-    }
-  } catch {
+    context.signal.throwIfAborted();
+    if (bytes.byteLength > maxBytes)
+      throw new RangeError("/etc/group exceeds size limit");
+    groupText = new TextDecoder().decode(bytes);
+  } catch (error) {
+    context.signal.throwIfAborted();
+    if (!isFsError(error, "ENOENT"))
+      throw error;
   }
   if (!passwdText)
     return result;
@@ -336,7 +345,17 @@ function createIdCommand(options = {}) {
         await writeText(context.stderr, "id: cannot print security context when user specified\n");
         return { exitCode: 1 };
       }
-      const vfsAccounts = await loadVfsAccounts(context, limits.maxPasswdBytes);
+      let vfsAccounts;
+      try {
+        vfsAccounts = await loadVfsAccounts(context, limits.maxPasswdBytes);
+      } catch (error) {
+        context.signal.throwIfAborted();
+        if (!(error instanceof RangeError))
+          throw error;
+        await writeText(context.stderr, `id: ${error.message}
+`);
+        return { exitCode: 1 };
+      }
       const { current, directory } = buildBuiltinAccounts(context, options);
       const allAccounts = [...vfsAccounts, ...directory];
       const targets = [];

package/dist/safe-bash-command-pandoc/command.js

@@ -2,7 +2,7 @@ import {
   createPandocCommand,
   createPandocCommands,
   pandocCommands
-} from "../safe-bash/command-chunks/chunk-DRCPJVZF.js";
+} from "../safe-bash/command-chunks/chunk-44N2IRVP.js";
 import "../safe-bash/command-chunks/chunk-FWMW5MJL.js";
 import "../safe-bash/command-chunks/chunk-4NGJ2RDB.js";
 import "../safe-bash/command-chunks/chunk-K7JT2KAU.js";

package/dist/safe-bash-command-pandoc/index.js

@@ -20,7 +20,7 @@ import {
   readDocument,
   resolveConversionArgs,
   writeDocument
-} from "../safe-bash/command-chunks/chunk-DRCPJVZF.js";
+} from "../safe-bash/command-chunks/chunk-44N2IRVP.js";
 import "../safe-bash/command-chunks/chunk-FWMW5MJL.js";
 import {
   createLuaFilterCapability

package/dist/safe-bash-command-ssconvert/command.d.ts

@@ -1,9 +1,9 @@
 import { type ResourceIOOptions } from "./io/index.js";
-import type { EngineConfig } from "./contracts.js";
+import type { EngineConfig, EngineOptions } from "./contracts.js";
 import { type CommandDefinition, type VirtualShellPlugin } from "../safe-bash-contracts/index.js";
 export interface SsconvertCommandsOptions extends Omit<EngineConfig, "filesystem" | "codecs" | "environment"> {
     readonly codecs?: EngineConfig["codecs"];
-    readonly environment?: EngineConfig["environment"];
+    readonly environment?: EngineOptions["environment"];
     readonly io?: Pick<ResourceIOOptions, "descriptors" | "adapters" | "transport">;
     readonly replace?: boolean;
     readonly profile?: import("./cli.js").CommandProfile;

package/dist/safe-bash-command-ssconvert/contracts.d.ts

@@ -175,6 +175,10 @@ export interface EngineConfig {
         }, context: CapabilityContext): Promise<Workbook | undefined>;
     };
 }
+/** Public construction options; omitted environment fields use portable defaults. */
+export interface EngineOptions extends Partial<Omit<EngineConfig, "environment">> {
+    readonly environment?: Partial<Environment>;
+}
 export type Input = {
     readonly kind: "stream";
     readonly source: ByteSource;

package/dist/safe-bash-command-ssconvert/engine.d.ts

@@ -1,5 +1,5 @@
-import { type EngineConfig, type Engine, type RuntimeLimits } from "./contracts.js";
+import { type EngineOptions, type Engine, type RuntimeLimits } from "./contracts.js";
 export declare const defaultSsconvertLimits: Readonly<RuntimeLimits>;
 /** No host work occurs until an operation supplies cancellation and explicit I/O. */
-export declare function createEngine(supplied: EngineConfig): Engine;
+export declare function createEngine(supplied?: EngineOptions): Engine;
 //# sourceMappingURL=engine.d.ts.map