@poe-platform/safe-bash 0.1.762 → 0.1.764

package/dist/safe-bash/command-chunks/{chunk-F7MJRXQ2.js → chunk-RDPJGIQF.js}

@@ -1,7 +1,7 @@
 import {
   PdfDocument,
   renderPdfPageToPng
-} from "./chunk-P3Q2QSCA.js";
+} from "./chunk-G3IIEU2N.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";

package/dist/safe-bash/commands/python/index.browser.js

@@ -16,7 +16,7 @@ import {
   pythonCommands,
   pythonDocumentPackages,
   pythonHostFailureCode
-} from "../../chunks/chunk-CRQDMBQA.js";
+} from "../../chunks/chunk-FSH7QRIC.js";
 import {
   PythonFailure,
   inspectPythonCapabilities

package/dist/safe-bash/commands/python/llm-module.js

@@ -7,6 +7,7 @@ import asyncio
 import copy
 import inspect
 import math
+import os
 from dataclasses import dataclass, field, replace
 from typing import Any, AsyncIterator, Callable, Mapping, Optional, Protocol, Sequence, Union
 
@@ -49,7 +50,8 @@ class Attachment:
     def payload(self):
         if not isinstance(self.path, str) or not self.path or "\0" in self.path:
             raise ValueError("Attachment requires an agent filesystem path")
-        result = {"path": self.path}
+        path = self.path if os.path.isabs(self.path) else os.path.join(os.getcwd(), self.path)
+        result = {"path": path}
         if self.mime_type is not None:
             result["mimeType"] = self.mime_type
         return result

package/dist/safe-bash/commands/python/shell-module.js

@@ -4,6 +4,7 @@ from __future__ import annotations
 import asyncio
 import math
 import inspect
+import os
 import subprocess
 from dataclasses import dataclass
 
@@ -59,6 +60,12 @@ def _payload(args, *, shell=False, input=None, cwd=None, env=None, timeout=None,
         elif not isinstance(input, (bytes, bytearray, memoryview)):
             raise TypeError('Binary input must be bytes')
         result['input'] = list(input)
+    # The host retains the original shell context; snapshot the current guest state.
+    if cwd is None:
+        cwd = os.getcwd()
+    elif cwd and not os.path.isabs(cwd):
+        cwd = os.path.join(os.getcwd(), cwd)
+    env = dict(os.environ if env is None else env)
     result.update(cwd=cwd, env=env, timeout=timeout, max_output_bytes=max_output_bytes)
     return result
 

package/dist/safe-bash/core.browser.js

@@ -158,7 +158,7 @@ import {
   sha256,
   sha384,
   sha512
-} from "./chunks/chunk-CRQDMBQA.js";
+} from "./chunks/chunk-FSH7QRIC.js";
 import {
   PythonFailure,
   inspectPythonCapabilities
@@ -85450,6 +85450,7 @@ ${prefix2} line ${offset + line}: \`${source.split("\n")[line - 1] ?? ""}'
     let inc = 1;
     let noRenumber = false;
     let joinBlanks = 1;
+    let hasFileOperand = false;
     const parseSecSpec = (v) => {
       if (v === "a" || v === "t" || v === "n") return { style: v };
       if (v.startsWith("p") && v.length > 1) {
@@ -85542,9 +85543,11 @@ ${prefix2} line ${offset + line}: \`${source.split("\n")[line - 1] ?? ""}'
       } else if (/^-i-?[0-9]{1,9}$/.test(a)) {
         inc = Number(a.slice(2));
       } else if (!a.startsWith("-")) {
-        if (cwd === void 0) return [];
+        if (cwd === void 0) return void 0;
         const fl = this.readSyncMemoryLines(resolvePath(cwd, a));
         if (!fl) return void 0;
+        if (!hasFileOperand) rawLines = [];
+        hasFileOperand = true;
         rawLines = [...rawLines, ...fl];
       } else {
         return void 0;
@@ -87258,11 +87261,11 @@ unsigned int ${ident}_len = ${view.byteLength};
     if (cmdName === "whoami") {
       if (opArgs.length !== 0 || this.tryReadMemoryFileViewSync("/etc/passwd", false) !== void 0) return void 0;
       if (getEnv("ID_EUID") !== void 0 || getEnv("EUID") !== void 0 || getEnv("ID_UID") !== void 0 || getEnv("UID") !== void 0) return void 0;
-      return getEnv("WHOAMI_USER") ?? getEnv("USER") ?? getEnv("LOGNAME") ?? "sandbox";
+      return getEnv("WHOAMI") ?? getEnv("USER") ?? getEnv("LOGNAME") ?? "sandbox";
     }
     if (cmdName === "id") {
       if (this.tryReadMemoryFileViewSync("/etc/passwd", false) !== void 0 || this.tryReadMemoryFileViewSync("/etc/group", false) !== void 0) return void 0;
-      for (const k of ["ID_UID", "UID", "ID_EUID", "EUID", "ID_GID", "GID", "ID_EGID", "EGID", "ID_USER", "USER", "LOGNAME", "ID_GROUP", "ID_GROUPS", "ID_CONTEXT"]) {
+      for (const k of ["ID_UID", "UID", "ID_EUID", "EUID", "ID_GID", "GID", "ID_EGID", "EGID", "ID_USER", "USER", "LOGNAME", "GROUP", "ID_GROUPS", "SELINUX_CONTEXT"]) {
         if (getEnv(k) !== void 0) return void 0;
       }
       if (opArgs.length === 0) return "uid=1000(sandbox) gid=1000(sandbox) groups=1000(sandbox)";
@@ -87275,10 +87278,12 @@ unsigned int ${ident}_len = ${view.byteLength};
     }
     if (cmdName === "hostname") {
       if (this.tryReadMemoryFileViewSync("/etc/hostname", false) !== void 0 || getEnv("HOSTNAME_DOMAIN") !== void 0 || getEnv("HOSTNAME_IP") !== void 0) return void 0;
-      const host2 = getEnv("HOSTNAME") ?? "sandbox";
-      if (opArgs.length === 0 || opArgs.length === 1 && (opArgs[0] === "-f" || opArgs[0] === "--fqdn" || opArgs[0] === "--long")) return host2;
+      const host2 = getEnv("HOSTNAME") || "sandbox";
+      if (opArgs.length === 0) return host2;
+      if (opArgs.length === 1 && (opArgs[0] === "-f" || opArgs[0] === "--fqdn" || opArgs[0] === "--long")) return host2.includes(".") ? host2 : `${host2}.vfs.local`;
       if (opArgs.length === 1 && (opArgs[0] === "-s" || opArgs[0] === "--short")) return host2.split(".")[0];
-      if (opArgs.length === 1 && (opArgs[0] === "-i" || opArgs[0] === "--ip-address" || opArgs[0] === "-I" || opArgs[0] === "--all-ip-addresses")) return "127.0.0.1";
+      if (opArgs.length === 1 && (opArgs[0] === "-i" || opArgs[0] === "--ip-address")) return "127.0.0.1";
+      if (opArgs.length === 1 && (opArgs[0] === "-I" || opArgs[0] === "--all-ip-addresses")) return "127.0.0.1 ";
       return void 0;
     }
     if (cmdName === "nproc") {
@@ -87460,6 +87465,7 @@ unsigned int ${ident}_len = ${view.byteLength};
     if (operands.length > 0) {
       for (const op of operands) tokens.push(op);
     } else {
+      if (rawLines === void 0) return void 0;
       for (const line of rawLines) {
         for (const t of line.split(/[ \t\r\n\f\v]+/)) {
           if (t.length > 0) tokens.push(t);
@@ -87524,6 +87530,7 @@ unsigned int ${ident}_len = ${view.byteLength};
       if (memLines === void 0) return void 0;
       linesToRead = memLines;
     }
+    if (linesToRead === void 0) return void 0;
     const tokens = [];
     for (const line of linesToRead) {
       for (const t of line.split(/[ \t\r\n\f\v]+/)) {
@@ -87604,6 +87611,7 @@ unsigned int ${ident}_len = ${view.byteLength};
       const vars = extractVars(operands[0]);
       return vars.length > 0 ? vars.join("\n") + "\n" : "";
     }
+    if (inStr === void 0) return void 0;
     const allowedVars = operands.length === 1 ? new Set(extractVars(operands[0])) : void 0;
     const raw = stateMonitor(rawState)?.raw ?? rawState;
     const isRestrictedEnv = raw._exported === void 0 && "_exported" in raw;
@@ -88805,7 +88813,18 @@ unsigned int ${ident}_len = ${view.byteLength};
     const list = part.script.lists[0];
     if (list.terminator || list.pipelines.length !== 1) return void 0;
     const pipeline = list.pipelines[0];
-    if (pipeline.negate) return void 0;
+    if (pipeline.negate || customRegisteredRegistries.has(this.commands)) return void 0;
+    for (const command4 of pipeline.commands) {
+      if (command4.kind !== "simple") continue;
+      const name2 = command4.words[0]?.plain;
+      if (!name2) continue;
+      if (name2 === "fmt" && command4 === pipeline.commands[0] && command4.redirects.length === 0 && !io.stdinIsDefault) return void 0;
+      const definition2 = this.getExternalCommand(name2);
+      if (definition2 && customRegisteredCommands.has(definition2.execute)) return void 0;
+      if (name2 === "uname" || name2 === "nproc" || name2 === "hostname" || name2 === "id" || name2 === "whoami") {
+        if (!definition2 || !internal_exports.builtInDirectContextExecutors.has(definition2.execute)) return void 0;
+      }
+    }
     if (pipeline.commands.length >= 2 && pipeline.commands.length <= 5) {
       if (syncPurePipelineSlotInUse || !this.budget.canSyncPurePipe || (0, yield_exports.hasYieldCheckpoint)(this.signal) || rawState.errexit || rawState.nounset || this.budget.commands + pipeline.commands.length > this.budget.limits.maxCommands) {
         return void 0;
@@ -89790,7 +89809,8 @@ unsigned int ${ident}_len = ${view.byteLength};
     if (cmd.kind !== "simple" || cmd.redirects.length > 0 && !hasSingleStdinRedir && !hasSingleHereStringRedir || cmd.words.length === 0) return void 0;
     let w0Plain = cmd.words[0].plain;
     if (!w0Plain || rawState.extensions?.builtins.has(w0Plain)) return void 0;
-    if (w0Plain === "xxd" || w0Plain === "od" || w0Plain === "mktemp" || w0Plain === "chmod") {
+    if (w0Plain === "fmt" && !hasSingleStdinRedir && !hasSingleHereStringRedir && !io.stdinIsDefault) return void 0;
+    if (w0Plain === "xxd" || w0Plain === "od" || w0Plain === "mktemp" || w0Plain === "chmod" || w0Plain === "uname" || w0Plain === "nproc" || w0Plain === "hostname" || w0Plain === "id" || w0Plain === "whoami") {
       const definition2 = this.getExternalCommand(w0Plain);
       if (!definition2 || !internal_exports.builtInDirectContextExecutors.has(definition2.execute)) return void 0;
     }
@@ -90386,7 +90406,7 @@ unsigned int ${ident}_len = ${view.byteLength};
             return false;
           }
         }, (s, d, sym) => this.tryLinkMemoryNodeSync(sym ? s : resolvePath(rawState.cwd, s), resolvePath(rawState.cwd, d), sym)) : (allArgs.includes("--help") || allArgs.includes("--version")) && (0, gnu_information_exports.gnuInformationSync)(w0Plain, allArgs) !== void 0 ? (0, gnu_information_exports.gnuInformationSync)(w0Plain, allArgs) : w0Plain === "mdq" ? evalSyncMdq(inBytes, allArgs, readFile) : w0Plain === "shuf" ? evalSyncShuf(inBytes, allArgs, readFile) : w0Plain === "html-to-markdown" ? (0, html_to_markdown_exports.evalSyncHtmlToMarkdown)(inBytes, allArgs, readFile) : w0Plain === "unrtf" ? evalSyncUnrtf(optInBytes, allArgs, readFile) : w0Plain === "fmt" ? this.evalSyncFmt(inBytes, allArgs, readFile) : w0Plain === "pr" ? evalSyncPr(optInBytes, allArgs, readFile) : w0Plain === "file" ? (0, file_exports.evalSyncFile)(optInBytes, allArgs, readFile, (p) => this.tryStatMemoryNodeTypeSync(resolvePath(rawState.cwd, p), true)) : w0Plain === "diff3" ? evalSyncDiff3(optInBytes, allArgs, readFile) : w0Plain === "cmp" ? evalSyncCmp(optInBytes, allArgs, readFile) : w0Plain === "diff" ? evalSyncDiff(optInBytes, allArgs, readFile) : w0Plain === "xan" ? evalSyncXan(optInBytes, allArgs, readFile) : w0Plain === "less" || w0Plain === "more" ? (0, less_exports.evalSyncLess)(optInBytes, allArgs, readFile) : w0Plain === "rg" ? evalSyncRg(optInBytes, allArgs, readFile) : w0Plain === "md5sum" || w0Plain === "sha1sum" || w0Plain === "sha224sum" || w0Plain === "sha256sum" || w0Plain === "sha384sum" || w0Plain === "sha512sum" || w0Plain === "cksum" ? (() => {
-          const cs = evalSyncChecksum(w0Plain, inBytes, allArgs, readFile);
+          const cs = evalSyncChecksum(w0Plain, optInBytes, allArgs, readFile);
           return cs !== void 0 && !cs.includes("\0") ? cs : void 0;
         })() : w0Plain === "base32" ? (() => {
           const b32 = (0, base_exports.evalSyncBase32)(inBytes, allArgs, readFile);
@@ -90432,11 +90452,11 @@ unsigned int ${ident}_len = ${view.byteLength};
         if (w0Plain === "comm") cjLines = this.evalSyncComm(stdinLines, allArgs, rawState.cwd);
         else if (w0Plain === "join") cjLines = this.evalSyncJoin(stdinLines, allArgs, rawState.cwd);
         else if (w0Plain === "paste") cjLines = this.evalSyncPaste(stdinLines ?? [], allArgs, rawState.cwd);
-        else if (w0Plain === "factor") cjLines = this.evalSyncFactor(stdinLines ?? [], allArgs);
-        else if (w0Plain === "tsort") cjLines = this.evalSyncTsort(stdinLines ?? [], allArgs, rawState.cwd);
+        else if (w0Plain === "factor") cjLines = this.evalSyncFactor(stdinLines, allArgs);
+        else if (w0Plain === "tsort") cjLines = this.evalSyncTsort(stdinLines, allArgs, rawState.cwd);
         else if (w0Plain === "jq") cjLines = this.evalSyncJq(void 0, allArgs, rawState.cwd);
         else if (w0Plain === "envsubst") {
-          const esOut = this.evalSyncEnvsubst("", allArgs, rawState);
+          const esOut = this.evalSyncEnvsubst(void 0, allArgs, rawState);
           if (esOut !== void 0) cjLines = esOut.endsWith("\n") ? esOut.slice(0, -1).split("\n") : esOut ? [esOut] : [];
         } else if (w0Plain === "numfmt") {
           const optArgs = [];

package/dist/safe-bash/shell/runtime.js

@@ -31701,6 +31701,7 @@ export class Runtime {
         let inc = 1;
         let noRenumber = false;
         let joinBlanks = 1;
+        let hasFileOperand = false;
         const parseSecSpec = (v) => {
             if (v === "a" || v === "t" || v === "n")
                 return { style: v };
@@ -31835,10 +31836,13 @@ export class Runtime {
             }
             else if (!a.startsWith("-")) {
                 if (cwd === undefined)
-                    return [];
+                    return undefined;
                 const fl = this.readSyncMemoryLines(resolvePath(cwd, a));
                 if (!fl)
                     return undefined;
+                if (!hasFileOperand)
+                    rawLines = [];
+                hasFileOperand = true;
                 rawLines = [...rawLines, ...fl];
             }
             else {
@@ -33937,12 +33941,12 @@ export class Runtime {
                 return undefined;
             if (getEnv("ID_EUID") !== undefined || getEnv("EUID") !== undefined || getEnv("ID_UID") !== undefined || getEnv("UID") !== undefined)
                 return undefined;
-            return getEnv("WHOAMI_USER") ?? getEnv("USER") ?? getEnv("LOGNAME") ?? "sandbox";
+            return getEnv("WHOAMI") ?? getEnv("USER") ?? getEnv("LOGNAME") ?? "sandbox";
         }
         if (cmdName === "id") {
             if (this.tryReadMemoryFileViewSync("/etc/passwd", false) !== undefined || this.tryReadMemoryFileViewSync("/etc/group", false) !== undefined)
                 return undefined;
-            for (const k of ["ID_UID", "UID", "ID_EUID", "EUID", "ID_GID", "GID", "ID_EGID", "EGID", "ID_USER", "USER", "LOGNAME", "ID_GROUP", "ID_GROUPS", "ID_CONTEXT"]) {
+            for (const k of ["ID_UID", "UID", "ID_EUID", "EUID", "ID_GID", "GID", "ID_EGID", "EGID", "ID_USER", "USER", "LOGNAME", "GROUP", "ID_GROUPS", "SELINUX_CONTEXT"]) {
                 if (getEnv(k) !== undefined)
                     return undefined;
             }
@@ -33960,13 +33964,17 @@ export class Runtime {
         if (cmdName === "hostname") {
             if (this.tryReadMemoryFileViewSync("/etc/hostname", false) !== undefined || getEnv("HOSTNAME_DOMAIN") !== undefined || getEnv("HOSTNAME_IP") !== undefined)
                 return undefined;
-            const host = getEnv("HOSTNAME") ?? "sandbox";
-            if (opArgs.length === 0 || (opArgs.length === 1 && (opArgs[0] === "-f" || opArgs[0] === "--fqdn" || opArgs[0] === "--long")))
+            const host = getEnv("HOSTNAME") || "sandbox";
+            if (opArgs.length === 0)
                 return host;
+            if (opArgs.length === 1 && (opArgs[0] === "-f" || opArgs[0] === "--fqdn" || opArgs[0] === "--long"))
+                return host.includes(".") ? host : `${host}.vfs.local`;
             if (opArgs.length === 1 && (opArgs[0] === "-s" || opArgs[0] === "--short"))
                 return host.split(".")[0];
-            if (opArgs.length === 1 && (opArgs[0] === "-i" || opArgs[0] === "--ip-address" || opArgs[0] === "-I" || opArgs[0] === "--all-ip-addresses"))
+            if (opArgs.length === 1 && (opArgs[0] === "-i" || opArgs[0] === "--ip-address"))
                 return "127.0.0.1";
+            if (opArgs.length === 1 && (opArgs[0] === "-I" || opArgs[0] === "--all-ip-addresses"))
+                return "127.0.0.1 ";
             return undefined;
         }
         if (cmdName === "nproc") {
@@ -34153,6 +34161,8 @@ export class Runtime {
                 tokens.push(op);
         }
         else {
+            if (rawLines === undefined)
+                return undefined;
             for (const line of rawLines) {
                 for (const t of line.split(/[ \t\r\n\f\v]+/)) {
                     if (t.length > 0)
@@ -34226,6 +34236,8 @@ export class Runtime {
                 return undefined;
             linesToRead = memLines;
         }
+        if (linesToRead === undefined)
+            return undefined;
         const tokens = [];
         for (const line of linesToRead) {
             for (const t of line.split(/[ \t\r\n\f\v]+/)) {
@@ -34314,6 +34326,8 @@ export class Runtime {
             const vars = extractVars(operands[0]);
             return vars.length > 0 ? vars.join("\n") + "\n" : "";
         }
+        if (inStr === undefined)
+            return undefined;
         const allowedVars = operands.length === 1 ? new Set(extractVars(operands[0])) : undefined;
         const raw = (stateMonitor(rawState)?.raw ?? rawState);
         const isRestrictedEnv = raw._exported === undefined && "_exported" in raw;
@@ -35866,8 +35880,24 @@ export class Runtime {
         if (list.terminator || list.pipelines.length !== 1)
             return undefined;
         const pipeline = list.pipelines[0];
-        if (pipeline.negate)
+        if (pipeline.negate || customRegisteredRegistries.has(this.commands))
             return undefined;
+        for (const command of pipeline.commands) {
+            if (command.kind !== "simple")
+                continue;
+            const name = command.words[0]?.plain;
+            if (!name)
+                continue;
+            if (name === "fmt" && command === pipeline.commands[0] && command.redirects.length === 0 && !io.stdinIsDefault)
+                return undefined;
+            const definition = this.getExternalCommand(name);
+            if (definition && customRegisteredCommands.has(definition.execute))
+                return undefined;
+            if (name === "uname" || name === "nproc" || name === "hostname" || name === "id" || name === "whoami") {
+                if (!definition || !builtInDirectContextExecutors.has(definition.execute))
+                    return undefined;
+            }
+        }
         // Range-aware tr and Buffer-free 76-col base64 are supported below.
         if (pipeline.commands.length >= 2 && pipeline.commands.length <= 5) {
             if (syncPurePipelineSlotInUse ||
@@ -37493,7 +37523,9 @@ export class Runtime {
         let w0Plain = cmd.words[0].plain;
         if (!w0Plain || rawState.extensions?.builtins.has(w0Plain))
             return undefined;
-        if (w0Plain === "xxd" || w0Plain === "od" || w0Plain === "mktemp" || w0Plain === "chmod") {
+        if (w0Plain === "fmt" && !hasSingleStdinRedir && !hasSingleHereStringRedir && !io.stdinIsDefault)
+            return undefined;
+        if (w0Plain === "xxd" || w0Plain === "od" || w0Plain === "mktemp" || w0Plain === "chmod" || w0Plain === "uname" || w0Plain === "nproc" || w0Plain === "hostname" || w0Plain === "id" || w0Plain === "whoami") {
             const definition = this.getExternalCommand(w0Plain);
             if (!definition || !builtInDirectContextExecutors.has(definition.execute))
                 return undefined;
@@ -38318,7 +38350,7 @@ export class Runtime {
                                                                                                                                                                                                                                                                                                                                         : w0Plain === "rg"
                                                                                                                                                                                                                                                                                                                                             ? evalSyncRg(optInBytes, allArgs, readFile)
                                                                                                                                                                                                                                                                                                                                             : (w0Plain === "md5sum" || w0Plain === "sha1sum" || w0Plain === "sha224sum" || w0Plain === "sha256sum" || w0Plain === "sha384sum" || w0Plain === "sha512sum" || w0Plain === "cksum")
-                                                                                                                                                                                                                                                                                                                                                ? (() => { const cs = evalSyncChecksum(w0Plain, inBytes, allArgs, readFile); return cs !== undefined && !cs.includes("\0") ? cs : undefined; })()
+                                                                                                                                                                                                                                                                                                                                                ? (() => { const cs = evalSyncChecksum(w0Plain, optInBytes, allArgs, readFile); return cs !== undefined && !cs.includes("\0") ? cs : undefined; })()
                                                                                                                                                                                                                                                                                                                                                 : w0Plain === "base32"
                                                                                                                                                                                                                                                                                                                                                     ? (() => { const b32 = evalSyncBase32(inBytes, allArgs, readFile); return b32 !== undefined ? sharedSyncPipeDecoder.decode(b32) : undefined; })()
                                                                                                                                                                                                                                                                                                                                                     : (w0Plain === "xq" || w0Plain === "yq")
@@ -38376,13 +38408,13 @@ export class Runtime {
                 else if (w0Plain === "paste")
                     cjLines = this.evalSyncPaste(stdinLines ?? [], allArgs, rawState.cwd);
                 else if (w0Plain === "factor")
-                    cjLines = this.evalSyncFactor(stdinLines ?? [], allArgs);
+                    cjLines = this.evalSyncFactor(stdinLines, allArgs);
                 else if (w0Plain === "tsort")
-                    cjLines = this.evalSyncTsort(stdinLines ?? [], allArgs, rawState.cwd);
+                    cjLines = this.evalSyncTsort(stdinLines, allArgs, rawState.cwd);
                 else if (w0Plain === "jq")
                     cjLines = this.evalSyncJq(undefined, allArgs, rawState.cwd);
                 else if (w0Plain === "envsubst") {
-                    const esOut = this.evalSyncEnvsubst("", allArgs, rawState);
+                    const esOut = this.evalSyncEnvsubst(undefined, allArgs, rawState);
                     if (esOut !== undefined)
                         cjLines = esOut.endsWith("\n") ? esOut.slice(0, -1).split("\n") : (esOut ? [esOut] : []);
                 }

package/dist/safe-bash-checksum-engine/index.d.ts

@@ -1,5 +1,5 @@
 import { type CommandDefinition } from "../safe-bash-contracts/index.js";
 type Algorithm = "sha512" | "sha384" | "sha256" | "sha224" | "sha1" | "md5" | "crc" | "bsd" | "sysv" | "crc32b" | "sm3" | "blake2b" | "sha3";
 export declare function command(name: string, algorithm: Algorithm, maxInputBytes: number): CommandDefinition;
-export declare function evalSyncChecksum(name: string, inBytes: Uint8Array, opArgs: readonly string[], readFileSync?: (p: string) => Uint8Array | undefined, fileOperandName?: string): string | undefined;
+export declare function evalSyncChecksum(name: string, inBytes: Uint8Array | undefined, opArgs: readonly string[], readFileSync?: (p: string) => Uint8Array | undefined, fileOperandName?: string): string | undefined;
 export {};

package/dist/safe-bash-checksum-engine/index.js

@@ -505,7 +505,7 @@ function digestSync(bytes, algorithm, bits = 512) {
   return { hex: String(~crc >>> 0), length };
 }
 function evalSyncChecksum(name, inBytes, opArgs, readFileSync, fileOperandName) {
-  if (inBytes.byteLength > 16384)
+  if (inBytes && inBytes.byteLength > 16384)
     return void 0;
   const baseAlg = name === "cksum" ? "crc" : name === "md5sum" ? "md5" : name === "sha1sum" ? "sha1" : name === "sha224sum" ? "sha224" : name === "sha256sum" ? "sha256" : name === "sha384sum" ? "sha384" : name === "sha512sum" ? "sha512" : void 0;
   if (!baseAlg)
@@ -520,6 +520,8 @@ function evalSyncChecksum(name, inBytes, opArgs, readFileSync, fileOperandName)
   } catch {
     return void 0;
   }
+  if (fileOperandName !== void 0 && settings.operands.includes("-"))
+    return void 0;
   if (settings.encoding === "raw")
     return void 0;
   let stdinUsed = false;
@@ -530,6 +532,8 @@ function evalSyncChecksum(name, inBytes, opArgs, readFileSync, fileOperandName)
       return void 0;
     }
     if (filename === "-") {
+      if (inBytes === void 0)
+        return void 0;
       if (stdinUsed)
         return new Uint8Array(0);
       stdinUsed = true;