@poe-platform/safe-bash 0.1.787 → 0.1.789

package/dist/safe-bash/opt-in/commands/truncate/sync.d.ts

@@ -0,0 +1 @@
+export declare function evalSyncTruncate(opArgs: readonly string[], readFileSync?: (filePath: string) => Uint8Array | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean): string | undefined;

package/dist/safe-bash/opt-in/commands/truncate/sync.js

@@ -0,0 +1,60 @@
+import { parseArguments, helpText } from "./arguments.js";
+import { syncCommandEvaluators } from "@poe-platform/safe-bash/optional-host";
+export function evalSyncTruncate(opArgs, readFileSync, writeFileSync) {
+    try {
+        const args = parseArguments(opArgs, false);
+        if (args.display === "help")
+            return helpText;
+        if (args.display === "version")
+            return "truncate (safe-bash; GNU coreutils 9.7 semantics)\n";
+        if (!writeFileSync || args.files.length === 0)
+            return undefined;
+        const blockFactor = args.ioBlocks ? 4096n : 1n;
+        let refSize;
+        if (args.reference !== undefined) {
+            const refBytes = readFileSync?.(args.reference);
+            if (!refBytes)
+                return undefined;
+            refSize = BigInt(refBytes.length);
+        }
+        for (const file of args.files) {
+            const existing = readFileSync?.(file);
+            if (!existing && args.noCreate)
+                continue;
+            const curSize = BigInt(existing?.length ?? 0);
+            const base = refSize ?? curSize;
+            const scaledSize = args.size === undefined ? undefined : args.size * blockFactor;
+            let target;
+            if (scaledSize === undefined)
+                target = refSize;
+            else if (args.mode === "absolute")
+                target = scaledSize;
+            else if (args.mode === "relative")
+                target = base + scaledSize;
+            else if (args.mode === "<")
+                target = base < scaledSize ? base : scaledSize;
+            else if (args.mode === ">")
+                target = base > scaledSize ? base : scaledSize;
+            else if (args.mode === "/")
+                target = (base / scaledSize) * scaledSize;
+            else
+                target = ((base + scaledSize - 1n) / scaledSize) * scaledSize;
+            if (target < 0n)
+                target = 0n;
+            if (target > 1048576n)
+                return undefined;
+            const n = Number(target);
+            const out = new Uint8Array(n);
+            if (existing && existing.length > 0) {
+                out.set(existing.subarray(0, Math.min(existing.length, n)));
+            }
+            if (!writeFileSync(file, out))
+                return undefined;
+        }
+        return "";
+    }
+    catch {
+        return undefined;
+    }
+}
+syncCommandEvaluators.evalSyncTruncate = evalSyncTruncate;

package/dist/safe-bash/optional-host.browser.js

@@ -3,12 +3,14 @@ import {
   compareCopyIdentity,
   compareObservedEntries,
   errors_exports,
+  input_budget_exports,
   limits_exports,
   matcher_exports,
   portableTrapExtension,
+  portable_requirements_exports,
   syntax_exports,
   timeout_exports
-} from "./chunks/chunk-Q3E6C3DX.js";
+} from "./chunks/chunk-KHJGUF2W.js";
 import {
   jobsExtension
 } from "./chunks/chunk-2AYZCT5X.js";
@@ -48,11 +50,13 @@ var bytes_exports = {};
 init_platform();
 __reExport(bytes_exports, bytes_star);
 import * as bytes_star from "../safe-bash-query-engine/bytes.js";
+var export_ByteInputBudget = input_budget_exports.ByteInputBudget;
 var export_Decimal = numbers_exports.Decimal;
 var export_EreLedger = limits_exports.EreLedger;
 var export_EreProfileLimitError = errors_exports.EreProfileLimitError;
 var export_EreSyntaxError = errors_exports.EreSyntaxError;
 var export_EreUnsupportedError = errors_exports.EreUnsupportedError;
+var export_UsageError = internal_exports.UsageError;
 var export_YqLedger = accounting_exports.YqLedger;
 var export_builtInDirectContextExecutors = internal_exports.builtInDirectContextExecutors;
 var export_codeOf = internal_exports.codeOf;
@@ -61,6 +65,7 @@ var export_compileEre = syntax_exports.compileEre;
 var export_decodeBase64 = bytes_exports.decodeBase64;
 var export_decoder = internal_exports.decoder;
 var export_encodeBase64 = bytes_exports.encodeBase64;
+var export_inputRequirements = portable_requirements_exports.inputRequirements;
 var export_isDefaultCommandOptions = internal_exports.isDefaultCommandOptions;
 var export_latin1Text = byte_encoding_exports.latin1Text;
 var export_numberText = numbers_exports.numberText;
@@ -76,11 +81,13 @@ var export_utf8ByteLength = bytes_exports.utf8ByteLength;
 var export_utf8Decoder = bytes_exports.utf8Decoder;
 var export_utf8Encoder = bytes_exports.utf8Encoder;
 export {
+  export_ByteInputBudget as ByteInputBudget,
   export_Decimal as Decimal,
   export_EreLedger as EreLedger,
   export_EreProfileLimitError as EreProfileLimitError,
   export_EreSyntaxError as EreSyntaxError,
   export_EreUnsupportedError as EreUnsupportedError,
+  export_UsageError as UsageError,
   export_YqLedger as YqLedger,
   export_builtInDirectContextExecutors as builtInDirectContextExecutors,
   export_codeOf as codeOf,
@@ -91,6 +98,7 @@ export {
   export_decodeBase64 as decodeBase64,
   export_decoder as decoder,
   export_encodeBase64 as encodeBase64,
+  export_inputRequirements as inputRequirements,
   export_isDefaultCommandOptions as isDefaultCommandOptions,
   jobsExtension,
   export_latin1Text as latin1Text,

package/dist/safe-bash/optional-host.d.ts

@@ -1,7 +1,7 @@
 export { signalName } from "./commands/timeout/index.js";
 export { latin1Text } from "./byte-encoding.js";
 export { jobsExtension } from "./shell/extensions/jobs/index.js";
-export { builtInDirectContextExecutors, codeOf, decoder, isDefaultCommandOptions, output, pathOf, registerDefaultExecutor, registerDefaultExecutors, syncCommandEvaluators, } from "./commands/internal.js";
+export { builtInDirectContextExecutors, codeOf, decoder, isDefaultCommandOptions, output, pathOf, registerDefaultExecutor, registerDefaultExecutors, syncCommandEvaluators, UsageError, } from "./commands/internal.js";
 export { portableTrapExtension } from "./shell/trap.js";
 export type { TrapExtensionOptions, TrapSignalHost } from "./shell/trap.js";
 export { compareCopyIdentity, compareObservedEntries } from "./commands/copy-identity.js";
@@ -15,4 +15,6 @@ export { Decimal, numberText } from "./commands/structured/numbers.js";
 export { utf8ByteLength, utf8Encoder, utf8Decoder, encodeBase64, decodeBase64, compareBytes } from "./commands/structured/bytes.js";
 export type { PreparedShellChild, ShellBindingReference, ShellBindingResult, ShellChildPreparation, ShellExecutionCheckpoint, ShellExtension, ShellExtensionBuiltin, ShellExtensionContext, ShellExtensionEvent, ShellExtensionInstance, ShellExtensionOption, ShellExtensionScope, ShellIndexedWriter, ShellInputBorrow, ShellInputObserver, ShellListTerminatorContext, ShellListTerminatorHook, ShellSpecialParameterHook, } from "./shell/extensions.js";
 export type { RawRecord, ReadLine } from "./shell/input.js";
+export { ByteInputBudget } from "./commands/bytes/input-budget.js";
+export { inputRequirements } from "./commands/portable-requirements.js";
 //# sourceMappingURL=optional-host.d.ts.map

package/dist/safe-bash/optional-host.js

@@ -1,7 +1,7 @@
 export { signalName } from "./commands/timeout/index.js";
 export { latin1Text } from "./byte-encoding.js";
 export { jobsExtension } from "./shell/extensions/jobs/index.js";
-export { builtInDirectContextExecutors, codeOf, decoder, isDefaultCommandOptions, output, pathOf, registerDefaultExecutor, registerDefaultExecutors, syncCommandEvaluators, } from "./commands/internal.js";
+export { builtInDirectContextExecutors, codeOf, decoder, isDefaultCommandOptions, output, pathOf, registerDefaultExecutor, registerDefaultExecutors, syncCommandEvaluators, UsageError, } from "./commands/internal.js";
 export { portableTrapExtension } from "./shell/trap.js";
 export { compareCopyIdentity, compareObservedEntries } from "./commands/copy-identity.js";
 export { EreLedger } from "./commands/regex-execution/ere/limits.js";
@@ -12,4 +12,6 @@ export { parseTomlDocument } from "./commands/yq/toml.js";
 export { YqLedger } from "./commands/yq/accounting.js";
 export { Decimal, numberText } from "./commands/structured/numbers.js";
 export { utf8ByteLength, utf8Encoder, utf8Decoder, encodeBase64, decodeBase64, compareBytes } from "./commands/structured/bytes.js";
+export { ByteInputBudget } from "./commands/bytes/input-budget.js";
+export { inputRequirements } from "./commands/portable-requirements.js";
 //# sourceMappingURL=optional-host.js.map

package/dist/safe-bash/shell/runtime.js

@@ -16311,7 +16311,9 @@ export class Runtime {
                         !hasShellFunction(rawState, "getopts") &&
                         !rawState.extensions?.builtins.has("getopts") &&
                         !hasActiveVariableAttributes(rawState)) {
-                        const optstring = condCmd.words[1].plain ?? this.fastValueWord(condCmd.words[1], rawState, io, true, false, false, true, undefined, diagnosticLine);
+                        // Expanded optstrings can change after each body execution. Keep them
+                        // on the normal path, which expands each getopts invocation.
+                        const optstring = condCmd.words[1].plain;
                         const optVar = condCmd.words[2].plain;
                         if (typeof optstring !== "string" ||
                             !optVar ||
@@ -16559,6 +16561,7 @@ export class Runtime {
                                 lastCmd = condCmd;
                                 lastArg = this.fastValueWord(condCmd.words[condCmd.words.length - 1], rawState, io, false, false, false, true);
                             }
+                            rawState.status = condNonZero ? 0 : 1;
                             if (condNonZero !== (command.kind === "while"))
                                 break;
                             ++iterCount;
@@ -18123,8 +18126,9 @@ export class Runtime {
                         : this.evalSyncLoopArithStmt(nl.condArith, rawState, io, touched, nl.condLine);
                     if (nl.condCmd?.kind === "simple") {
                         innerLastCmd = nl.condCmd;
-                        innerLastArg = "]";
+                        innerLastArg = this.fastValueWord(nl.condCmd.words[nl.condCmd.words.length - 1], rawState, io, false, false, false, true);
                     }
+                    rawState.status = condOk ? 0 : 1;
                     if (condOk !== (lc.kind === "while"))
                         break;
                     this.budget.loop();
@@ -18258,11 +18262,11 @@ export class Runtime {
             }
             else if (step.condStmt !== undefined) {
                 const cStatus = this.tryEvalConditionalSync(step.condStmt, rawState, monitor, arrayStore(rawState), io, step.line) ?? 1;
-                rawState.status = cStatus;
                 if (step.cmd.kind === "simple") {
                     lastArg = this.fastValueWord(step.cmd.words[step.cmd.words.length - 1], rawState, io, false, false, false, true);
                     onUpdate({ lastCmd, lastArg });
                 }
+                rawState.status = cStatus;
                 continue;
             }
             else if (step.arithStmt !== undefined) {
@@ -21050,7 +21054,7 @@ export class Runtime {
         }
         const def = this.commands.get(name);
         let fastOut;
-        if (name === "echo" && def && defaultEchoExecutors.has(def.execute) && (args.length === 0 || !args[0].startsWith("-"))) {
+        if (name === "echo" && (options.env ?? context.env).POSIXLY_CORRECT === undefined && def && defaultEchoExecutors.has(def.execute) && (args.length === 0 || !args[0].startsWith("-"))) {
             fastOut = args.join(" ") + "\n";
         }
         else if (name === "printf" && def?.execute === printfCommand.execute && args.length >= 1 && !args[0].startsWith("-"))
@@ -24845,8 +24849,8 @@ export class Runtime {
                             this.signal.throwIfAborted();
                             if (error instanceof ShellLimitError)
                                 throw error;
-                            await this.diagnostic(context, "indexed array: unsupported subscript");
-                            status = 2;
+                            await this.diagnostic(context, `unset: ${name}: bad array subscript`);
+                            status = 1;
                             continue;
                         }
                         if (index === undefined) {

package/dist/safe-bash-checksum-engine/index.d.ts

@@ -1,5 +1,5 @@
 import { type CommandDefinition } from "../safe-bash-contracts/index.js";
 type Algorithm = "sha512" | "sha384" | "sha256" | "sha224" | "sha1" | "md5" | "crc" | "bsd" | "sysv" | "crc32b" | "sm3" | "blake2b" | "sha3";
-export declare function command(name: string, algorithm: Algorithm, maxInputBytes: number): CommandDefinition;
+export declare function command(name: string, algorithm: Algorithm, maxInputBytes: number, maxArgumentBytes?: number): CommandDefinition;
 export declare function evalSyncChecksum(name: string, inBytes: Uint8Array | undefined, opArgs: readonly string[], readFileSync?: (p: string) => Uint8Array | undefined, fileOperandName?: string): string | undefined;
 export {};

package/dist/safe-bash-checksum-engine/index.js

@@ -7,6 +7,7 @@ import {
 
 // packages/safe-bash-checksum-engine/dist/index.js
 init_buffer();
+import { shellValueByteLength } from "../safe-bash-contracts/value.js";
 import { yieldTurn } from "../safe-bash-contracts/yield.js";
 import { blake2b } from "@noble/hashes/blake2.js";
 import { sha3_224, sha3_256, sha3_384, sha3_512 } from "@noble/hashes/sha3.js";
@@ -14,7 +15,7 @@ import { PublicDiagnostic } from "../safe-bash-contracts/diagnostics.js";
 import { md5, sha1 } from "@noble/hashes/legacy.js";
 import { sha224, sha256, sha384, sha512 } from "@noble/hashes/sha2.js";
 import { bytesToHex, hexToBytes } from "@noble/hashes/utils.js";
-import { FsError, readBytes, toByteSource } from "../safe-bash-contracts/index.js";
+import { FsError, getCommandArguments, readBytes, toByteSource } from "../safe-bash-contracts/index.js";
 import { codeOf, define, diagnostic, encoder, options, output, pathOf, UsageError, value } from "../safe-bash-io-engine/internal.js";
 import { ByteInputBudget } from "../safe-bash-byte-input-engine/index.js";
 var blockBytes = 64 * 1024;
@@ -423,14 +424,25 @@ async function verify(context, manifest, algorithm, settings, state) {
   }
   return valid && matched && !failures && !mismatched && (!settings.strict || !malformed);
 }
-function command(name, algorithm, maxInputBytes) {
+function command(name, algorithm, maxInputBytes, maxArgumentBytes = Infinity) {
   return define(name, async (context) => {
+    if (maxArgumentBytes !== Infinity) {
+      const arguments_ = getCommandArguments(context);
+      let argumentBytes = 0;
+      for (let index = 0; index < arguments_.args.length; index++) {
+        const bytes = shellValueByteLength(arguments_.values[index]);
+        if (bytes > maxArgumentBytes - argumentBytes)
+          throw new FsError("EFBIG", { message: "checksum argument limit exceeded" });
+        argumentBytes += bytes;
+      }
+    }
     const selected = name === "cksum" ? parseCksum(context.args) : { algorithm, settings: parse(context.args, algorithm) };
     const selectedAlgorithm = selected.algorithm;
     const settings = selected.settings;
     const state = { stdinUsed: false, budget: new ByteInputBudget(maxInputBytes) };
     let failed = false;
     for (const filename of settings.operands.length ? settings.operands : ["-"]) {
+      await yieldTurn(context.signal);
       context.signal.throwIfAborted();
       if (settings.check) {
         try {

package/dist/safe-bash-command-bzip2/index.js

@@ -10,6 +10,7 @@ import { codeOf, diagnostic, output } from "../safe-bash-compression-engine/inte
 import { runOperand } from "../safe-bash-compression-engine/operand.js";
 import { planOperands, verifyOperandDestinations } from "../safe-bash-compression-engine/files.js";
 import { parseOptions, profiles } from "../safe-bash-compression-engine/options.js";
+import { CompressedDataError } from "../safe-bash-compression-engine/errors.js";
 import { DecodedBudget } from "../safe-bash-compression-engine/stream.js";
 function settings(options = {}) {
   const maxDecodedBytes = options.limits?.maxDecodedBytes ?? options.maxDecodedBytes ?? Infinity;
@@ -95,7 +96,7 @@ No FILE or FILE '-' uses stdin; file output uses private VFS staging.
             context.signal.throwIfAborted();
             if (parsed.quiet < 2)
               await diagnostic(context, error);
-            exitCode = 1;
+            exitCode = Math.max(exitCode, error instanceof CompressedDataError ? 2 : 1);
             if (decodedBudget.exceeded)
               break;
           }

package/dist/safe-bash-command-cmp/index.d.ts

@@ -0,0 +1,10 @@
+import { type CommandDefinition, type VirtualShellPlugin } from "../safe-bash-contracts/index.js";
+import { type CmpCommandsOptions } from "./options.js";
+export type { CmpLimits, CmpCommandsOptions } from "./options.js";
+export declare function evalSyncCmp(inBytes: Uint8Array | undefined, opArgs: readonly string[], readFileSync?: (path: string) => Uint8Array | undefined): string | undefined;
+/** Opt-in GNU comparison-block behavior; producer fragments do not define blocks. */
+export declare const createCmpCommand: (options?: CmpCommandsOptions | undefined) => CommandDefinition;
+/** Existing default-shell behavior, sharing the same retained-input engine. */
+export declare const cmpCommand: (options?: CmpCommandsOptions | undefined) => CommandDefinition;
+export declare function createCmpCommands(options?: CmpCommandsOptions): readonly CommandDefinition[];
+export declare function cmpCommands(options?: CmpCommandsOptions): VirtualShellPlugin;