@poe-platform/safe-bash 0.1.788 → 0.1.790

package/dist/safe-bash/opt-in/commands/truncate/sync.d.ts

@@ -0,0 +1 @@
+export declare function evalSyncTruncate(opArgs: readonly string[], readFileSync?: (filePath: string) => Uint8Array | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean): string | undefined;

package/dist/safe-bash/opt-in/commands/truncate/sync.js

@@ -0,0 +1,60 @@
+import { parseArguments, helpText } from "./arguments.js";
+import { syncCommandEvaluators } from "@poe-platform/safe-bash/optional-host";
+export function evalSyncTruncate(opArgs, readFileSync, writeFileSync) {
+    try {
+        const args = parseArguments(opArgs, false);
+        if (args.display === "help")
+            return helpText;
+        if (args.display === "version")
+            return "truncate (safe-bash; GNU coreutils 9.7 semantics)\n";
+        if (!writeFileSync || args.files.length === 0)
+            return undefined;
+        const blockFactor = args.ioBlocks ? 4096n : 1n;
+        let refSize;
+        if (args.reference !== undefined) {
+            const refBytes = readFileSync?.(args.reference);
+            if (!refBytes)
+                return undefined;
+            refSize = BigInt(refBytes.length);
+        }
+        for (const file of args.files) {
+            const existing = readFileSync?.(file);
+            if (!existing && args.noCreate)
+                continue;
+            const curSize = BigInt(existing?.length ?? 0);
+            const base = refSize ?? curSize;
+            const scaledSize = args.size === undefined ? undefined : args.size * blockFactor;
+            let target;
+            if (scaledSize === undefined)
+                target = refSize;
+            else if (args.mode === "absolute")
+                target = scaledSize;
+            else if (args.mode === "relative")
+                target = base + scaledSize;
+            else if (args.mode === "<")
+                target = base < scaledSize ? base : scaledSize;
+            else if (args.mode === ">")
+                target = base > scaledSize ? base : scaledSize;
+            else if (args.mode === "/")
+                target = (base / scaledSize) * scaledSize;
+            else
+                target = ((base + scaledSize - 1n) / scaledSize) * scaledSize;
+            if (target < 0n)
+                target = 0n;
+            if (target > 1048576n)
+                return undefined;
+            const n = Number(target);
+            const out = new Uint8Array(n);
+            if (existing && existing.length > 0) {
+                out.set(existing.subarray(0, Math.min(existing.length, n)));
+            }
+            if (!writeFileSync(file, out))
+                return undefined;
+        }
+        return "";
+    }
+    catch {
+        return undefined;
+    }
+}
+syncCommandEvaluators.evalSyncTruncate = evalSyncTruncate;

package/dist/safe-bash/optional-host.browser.js

@@ -1,110 +1,91 @@
 import {
-  byte_encoding_exports,
+  ByteInputBudget,
+  EreLedger,
+  EreProfileLimitError,
+  EreSyntaxError,
+  EreUnsupportedError,
   compareCopyIdentity,
   compareObservedEntries,
-  errors_exports,
-  limits_exports,
-  matcher_exports,
+  compileEre,
+  inputRequirements,
+  latin1Text,
   portableTrapExtension,
-  syntax_exports,
-  timeout_exports
-} from "./chunks/chunk-Q3E6C3DX.js";
+  prepareUtf8EreSubject,
+  signalName
+} from "./chunks/chunk-2TAGYMPK.js";
 import {
   jobsExtension
-} from "./chunks/chunk-2AYZCT5X.js";
-import "./chunks/chunk-BI6JV62X.js";
-import "./chunks/chunk-T3VDYWKZ.js";
+} from "./chunks/chunk-JQ2FAJJT.js";
+import "./chunks/chunk-VCCMROTL.js";
+import "./chunks/chunk-DYEUZE6Z.js";
+import "./chunks/chunk-OSMQCYSP.js";
 import {
-  internal_exports
-} from "./chunks/chunk-GJWUEOT6.js";
+  UsageError,
+  builtInDirectContextExecutors,
+  codeOf,
+  decoder,
+  isDefaultCommandOptions,
+  output,
+  pathOf,
+  registerDefaultExecutor,
+  registerDefaultExecutors,
+  syncCommandEvaluators
+} from "./chunks/chunk-5OST7NOX.js";
 import {
-  __reExport,
   init_platform
-} from "./chunks/chunk-Q45QCA4J.js";
+} from "./chunks/chunk-I3KSESCR.js";
 
 // packages/safe-bash/src/optional-host.ts
 init_platform();
 
 // packages/safe-bash/src/commands/yq/toml.ts
-var toml_exports = {};
 init_platform();
-__reExport(toml_exports, toml_star);
-import * as toml_star from "../safe-bash-command-yq/toml.js";
+import { parseTomlDocument } from "../safe-bash-command-yq/toml.js";
 
 // packages/safe-bash/src/commands/yq/accounting.ts
-var accounting_exports = {};
 init_platform();
-__reExport(accounting_exports, accounting_star);
-import * as accounting_star from "../safe-bash-command-yq/accounting.js";
+import { YqLedger, aliasFailure, copyAlias, estimateAlias, resolveYqLimits, yqCaps } from "../safe-bash-command-yq/accounting.js";
 
 // packages/safe-bash/src/commands/structured/numbers.ts
-var numbers_exports = {};
 init_platform();
-__reExport(numbers_exports, numbers_star);
-import * as numbers_star from "../safe-bash-query-engine/numbers.js";
+import { Decimal, SMALL_DECIMALS, compareNumbers, decimalNumber, isNumber, numberText, numberValue, numericToken } from "../safe-bash-query-engine/numbers.js";
 
 // packages/safe-bash/src/commands/structured/bytes.ts
-var bytes_exports = {};
 init_platform();
-__reExport(bytes_exports, bytes_star);
-import * as bytes_star from "../safe-bash-query-engine/bytes.js";
-var export_Decimal = numbers_exports.Decimal;
-var export_EreLedger = limits_exports.EreLedger;
-var export_EreProfileLimitError = errors_exports.EreProfileLimitError;
-var export_EreSyntaxError = errors_exports.EreSyntaxError;
-var export_EreUnsupportedError = errors_exports.EreUnsupportedError;
-var export_YqLedger = accounting_exports.YqLedger;
-var export_builtInDirectContextExecutors = internal_exports.builtInDirectContextExecutors;
-var export_codeOf = internal_exports.codeOf;
-var export_compareBytes = bytes_exports.compareBytes;
-var export_compileEre = syntax_exports.compileEre;
-var export_decodeBase64 = bytes_exports.decodeBase64;
-var export_decoder = internal_exports.decoder;
-var export_encodeBase64 = bytes_exports.encodeBase64;
-var export_isDefaultCommandOptions = internal_exports.isDefaultCommandOptions;
-var export_latin1Text = byte_encoding_exports.latin1Text;
-var export_numberText = numbers_exports.numberText;
-var export_output = internal_exports.output;
-var export_parseTomlDocument = toml_exports.parseTomlDocument;
-var export_pathOf = internal_exports.pathOf;
-var export_prepareUtf8EreSubject = matcher_exports.prepareUtf8EreSubject;
-var export_registerDefaultExecutor = internal_exports.registerDefaultExecutor;
-var export_registerDefaultExecutors = internal_exports.registerDefaultExecutors;
-var export_signalName = timeout_exports.signalName;
-var export_syncCommandEvaluators = internal_exports.syncCommandEvaluators;
-var export_utf8ByteLength = bytes_exports.utf8ByteLength;
-var export_utf8Decoder = bytes_exports.utf8Decoder;
-var export_utf8Encoder = bytes_exports.utf8Encoder;
+import { compareBytes, decodeBase64, decodeLatin1, encodeBase64, encodeLatin1, utf8ByteLength, utf8Decoder, utf8Encoder } from "../safe-bash-query-engine/bytes.js";
 export {
-  export_Decimal as Decimal,
-  export_EreLedger as EreLedger,
-  export_EreProfileLimitError as EreProfileLimitError,
-  export_EreSyntaxError as EreSyntaxError,
-  export_EreUnsupportedError as EreUnsupportedError,
-  export_YqLedger as YqLedger,
-  export_builtInDirectContextExecutors as builtInDirectContextExecutors,
-  export_codeOf as codeOf,
-  export_compareBytes as compareBytes,
+  ByteInputBudget,
+  Decimal,
+  EreLedger,
+  EreProfileLimitError,
+  EreSyntaxError,
+  EreUnsupportedError,
+  UsageError,
+  YqLedger,
+  builtInDirectContextExecutors,
+  codeOf,
+  compareBytes,
   compareCopyIdentity,
   compareObservedEntries,
-  export_compileEre as compileEre,
-  export_decodeBase64 as decodeBase64,
-  export_decoder as decoder,
-  export_encodeBase64 as encodeBase64,
-  export_isDefaultCommandOptions as isDefaultCommandOptions,
+  compileEre,
+  decodeBase64,
+  decoder,
+  encodeBase64,
+  inputRequirements,
+  isDefaultCommandOptions,
   jobsExtension,
-  export_latin1Text as latin1Text,
-  export_numberText as numberText,
-  export_output as output,
-  export_parseTomlDocument as parseTomlDocument,
-  export_pathOf as pathOf,
+  latin1Text,
+  numberText,
+  output,
+  parseTomlDocument,
+  pathOf,
   portableTrapExtension,
-  export_prepareUtf8EreSubject as prepareUtf8EreSubject,
-  export_registerDefaultExecutor as registerDefaultExecutor,
-  export_registerDefaultExecutors as registerDefaultExecutors,
-  export_signalName as signalName,
-  export_syncCommandEvaluators as syncCommandEvaluators,
-  export_utf8ByteLength as utf8ByteLength,
-  export_utf8Decoder as utf8Decoder,
-  export_utf8Encoder as utf8Encoder
+  prepareUtf8EreSubject,
+  registerDefaultExecutor,
+  registerDefaultExecutors,
+  signalName,
+  syncCommandEvaluators,
+  utf8ByteLength,
+  utf8Decoder,
+  utf8Encoder
 };

package/dist/safe-bash/optional-host.d.ts

@@ -1,7 +1,7 @@
 export { signalName } from "./commands/timeout/index.js";
 export { latin1Text } from "./byte-encoding.js";
 export { jobsExtension } from "./shell/extensions/jobs/index.js";
-export { builtInDirectContextExecutors, codeOf, decoder, isDefaultCommandOptions, output, pathOf, registerDefaultExecutor, registerDefaultExecutors, syncCommandEvaluators, } from "./commands/internal.js";
+export { builtInDirectContextExecutors, codeOf, decoder, isDefaultCommandOptions, output, pathOf, registerDefaultExecutor, registerDefaultExecutors, syncCommandEvaluators, UsageError, } from "./commands/internal.js";
 export { portableTrapExtension } from "./shell/trap.js";
 export type { TrapExtensionOptions, TrapSignalHost } from "./shell/trap.js";
 export { compareCopyIdentity, compareObservedEntries } from "./commands/copy-identity.js";
@@ -15,4 +15,6 @@ export { Decimal, numberText } from "./commands/structured/numbers.js";
 export { utf8ByteLength, utf8Encoder, utf8Decoder, encodeBase64, decodeBase64, compareBytes } from "./commands/structured/bytes.js";
 export type { PreparedShellChild, ShellBindingReference, ShellBindingResult, ShellChildPreparation, ShellExecutionCheckpoint, ShellExtension, ShellExtensionBuiltin, ShellExtensionContext, ShellExtensionEvent, ShellExtensionInstance, ShellExtensionOption, ShellExtensionScope, ShellIndexedWriter, ShellInputBorrow, ShellInputObserver, ShellListTerminatorContext, ShellListTerminatorHook, ShellSpecialParameterHook, } from "./shell/extensions.js";
 export type { RawRecord, ReadLine } from "./shell/input.js";
+export { ByteInputBudget } from "./commands/bytes/input-budget.js";
+export { inputRequirements } from "./commands/portable-requirements.js";
 //# sourceMappingURL=optional-host.d.ts.map

package/dist/safe-bash/optional-host.js

@@ -1,7 +1,7 @@
 export { signalName } from "./commands/timeout/index.js";
 export { latin1Text } from "./byte-encoding.js";
 export { jobsExtension } from "./shell/extensions/jobs/index.js";
-export { builtInDirectContextExecutors, codeOf, decoder, isDefaultCommandOptions, output, pathOf, registerDefaultExecutor, registerDefaultExecutors, syncCommandEvaluators, } from "./commands/internal.js";
+export { builtInDirectContextExecutors, codeOf, decoder, isDefaultCommandOptions, output, pathOf, registerDefaultExecutor, registerDefaultExecutors, syncCommandEvaluators, UsageError, } from "./commands/internal.js";
 export { portableTrapExtension } from "./shell/trap.js";
 export { compareCopyIdentity, compareObservedEntries } from "./commands/copy-identity.js";
 export { EreLedger } from "./commands/regex-execution/ere/limits.js";
@@ -12,4 +12,6 @@ export { parseTomlDocument } from "./commands/yq/toml.js";
 export { YqLedger } from "./commands/yq/accounting.js";
 export { Decimal, numberText } from "./commands/structured/numbers.js";
 export { utf8ByteLength, utf8Encoder, utf8Decoder, encodeBase64, decodeBase64, compareBytes } from "./commands/structured/bytes.js";
+export { ByteInputBudget } from "./commands/bytes/input-budget.js";
+export { inputRequirements } from "./commands/portable-requirements.js";
 //# sourceMappingURL=optional-host.js.map

package/dist/safe-bash/shell/runtime.js

@@ -3057,6 +3057,29 @@ function sameRedirectTargetWord(a, b) {
     }
     return true;
 }
+// Arbitrary writes to arithmetic references need the general evaluator.
+function syncStepsMayWriteName(steps, name) {
+    return steps.some(step => step.name === name || step.arithStmt !== undefined || (step.printfVArgs !== undefined && step.cmd.words[1]?.plain === "-v") ||
+        (step.readHereString && (step.readHereString.varNames.includes(name) || (step.readHereString.isBareReply && name === "REPLY"))) || step.unsetVars?.includes(name) ||
+        step.ifBranches?.some(branch => branch.cond !== undefined || syncStepsMayWriteName(branch.steps, name)) ||
+        (step.elseSteps && syncStepsMayWriteName(step.elseSteps, name)) ||
+        step.caseClauses?.some(clause => syncStepsMayWriteName(clause.steps, name)) ||
+        (step.fnCall && (step.fnCall.locals.some(local => local.name === name) || syncStepsMayWriteName(step.fnCall.steps, name))) ||
+        (step.nestedLoop && (step.nestedLoop.loopCmd.kind !== "for" || step.nestedLoop.loopCmd.name === name || syncStepsMayWriteName(step.nestedLoop.steps, name))));
+}
+function arithmeticReadsOtherName(node, inductionName) {
+    if (!node)
+        return false;
+    if (node.kind === "name")
+        return node.name !== inductionName;
+    if (node.kind === "unary")
+        return arithmeticReadsOtherName(node.operand, inductionName);
+    if (node.kind === "binary")
+        return arithmeticReadsOtherName(node.left, inductionName) || arithmeticReadsOtherName(node.right, inductionName);
+    if (node.kind === "conditional")
+        return arithmeticReadsOtherName(node.condition, inductionName) || arithmeticReadsOtherName(node.yes, inductionName) || arithmeticReadsOtherName(node.no, inductionName);
+    return false;
+}
 const intLoopStepCache = new WeakMap();
 const sharedSyncLoopTouched = new Set();
 const sharedSyncLoopArithNames = new Set();
@@ -3933,7 +3956,9 @@ export class Runtime {
                 !pat.text.includes("[.") &&
                 !pat.text.includes("[=") &&
                 !pat.text.includes("()") &&
+                !pat.text.includes("(?") &&
                 !pat.text.includes("[]") &&
+                !pat.text.includes("[^]") &&
                 !pat.text.includes("][") &&
                 !/\([^)]*[*+?][^)]*\)[*+?]/.test(pat.text)) {
                 try {
@@ -14498,6 +14523,8 @@ export class Runtime {
             const p0 = w.parts[0];
             if (!p0 || !this.isPureSyncValueWord(w, rawState))
                 return false;
+            if (w.parts.some(part => part.kind === "substitution" || (part.kind === "text" && !part.quoted && part.value.includes("~"))))
+                return false;
             if (p0.kind === "text" && !p0.quoted && p0.value.startsWith("~"))
                 return false;
             if (inOptions) {
@@ -14881,6 +14908,7 @@ export class Runtime {
                         const nInd = ne0?.tree?.kind === "binary" && ne0.tree.operator === "=" && ne0.tree.left.kind === "name" ? ne0.tree.left.name : undefined;
                         if (nInd &&
                             ne0 && ne1 && ne2 &&
+                            ![ne0, ne1, ne2].some(expression => arithmeticReadsOtherName(expression.tree, nInd)) &&
                             !ne0.error && !ne0.hasSubscript && isSafeSmiProgram(ne0) &&
                             !ne1.error && !ne1.hasSubscript && isSafeSmiProgram(ne1) &&
                             !ne2.error && !ne2.hasSubscript && isSafeSmiProgram(ne2) &&
@@ -15972,14 +16000,8 @@ export class Runtime {
                         const initial = rawState.variables[refName];
                         if (initial !== undefined && initial !== "" && !/^-?[0-9]+$/.test(initial))
                             return undefined;
-                        for (let b = 0; b < bodyAssignments.length; b++) {
-                            const step = bodyAssignments[b];
-                            if (step.name === refName && !intSteps[b] && (!step.value || !step.value.parts.some(p => p.kind === "arithmetic") || step.value.parts.some(p => p.kind !== "arithmetic" && (p.kind !== "text" || p.value !== "")))) {
-                                const isArrDefaultZero = step.value?.parts.length === 1 && step.value.parts[0].kind === "variable" && getArraySelector(step.value.parts[0])?.kind === "element" && step.value.parts[0].operator === ":-" && step.value.parts[0].alternate?.plain === "0";
-                                if (!isArrDefaultZero)
-                                    return undefined;
-                            }
-                        }
+                        if (syncStepsMayWriteName(bodyAssignments, refName))
+                            return undefined;
                     }
                 }
                 monitor.chargeInternal(syncRestorationCharge, syncRestorationTickets);
@@ -16311,7 +16333,9 @@ export class Runtime {
                         !hasShellFunction(rawState, "getopts") &&
                         !rawState.extensions?.builtins.has("getopts") &&
                         !hasActiveVariableAttributes(rawState)) {
-                        const optstring = condCmd.words[1].plain ?? this.fastValueWord(condCmd.words[1], rawState, io, true, false, false, true, undefined, diagnosticLine);
+                        // Expanded optstrings can change after each body execution. Keep them
+                        // on the normal path, which expands each getopts invocation.
+                        const optstring = condCmd.words[1].plain;
                         const optVar = condCmd.words[2].plain;
                         if (typeof optstring !== "string" ||
                             !optVar ||
@@ -16559,6 +16583,7 @@ export class Runtime {
                                 lastCmd = condCmd;
                                 lastArg = this.fastValueWord(condCmd.words[condCmd.words.length - 1], rawState, io, false, false, false, true);
                             }
+                            rawState.status = condNonZero ? 0 : 1;
                             if (condNonZero !== (command.kind === "while"))
                                 break;
                             ++iterCount;
@@ -18123,8 +18148,9 @@ export class Runtime {
                         : this.evalSyncLoopArithStmt(nl.condArith, rawState, io, touched, nl.condLine);
                     if (nl.condCmd?.kind === "simple") {
                         innerLastCmd = nl.condCmd;
-                        innerLastArg = "]";
+                        innerLastArg = this.fastValueWord(nl.condCmd.words[nl.condCmd.words.length - 1], rawState, io, false, false, false, true);
                     }
+                    rawState.status = condOk ? 0 : 1;
                     if (condOk !== (lc.kind === "while"))
                         break;
                     this.budget.loop();
@@ -18258,11 +18284,11 @@ export class Runtime {
             }
             else if (step.condStmt !== undefined) {
                 const cStatus = this.tryEvalConditionalSync(step.condStmt, rawState, monitor, arrayStore(rawState), io, step.line) ?? 1;
-                rawState.status = cStatus;
                 if (step.cmd.kind === "simple") {
                     lastArg = this.fastValueWord(step.cmd.words[step.cmd.words.length - 1], rawState, io, false, false, false, true);
                     onUpdate({ lastCmd, lastArg });
                 }
+                rawState.status = cStatus;
                 continue;
             }
             else if (step.arithStmt !== undefined) {
@@ -21050,7 +21076,7 @@ export class Runtime {
         }
         const def = this.commands.get(name);
         let fastOut;
-        if (name === "echo" && def && defaultEchoExecutors.has(def.execute) && (args.length === 0 || !args[0].startsWith("-"))) {
+        if (name === "echo" && (options.env ?? context.env).POSIXLY_CORRECT === undefined && def && defaultEchoExecutors.has(def.execute) && (args.length === 0 || !args[0].startsWith("-"))) {
             fastOut = args.join(" ") + "\n";
         }
         else if (name === "printf" && def?.execute === printfCommand.execute && args.length >= 1 && !args[0].startsWith("-"))
@@ -24845,8 +24871,8 @@ export class Runtime {
                             this.signal.throwIfAborted();
                             if (error instanceof ShellLimitError)
                                 throw error;
-                            await this.diagnostic(context, "indexed array: unsupported subscript");
-                            status = 2;
+                            await this.diagnostic(context, `unset: ${name}: bad array subscript`);
+                            status = 1;
                             continue;
                         }
                         if (index === undefined) {
@@ -36845,7 +36871,7 @@ export class Runtime {
                             firstName === "head" || firstName === "tail" || firstName === "wc" || firstName === "cat" || firstName === "date" || firstName === "cal" || firstName === "ncal" || firstName === "getopt" || firstName === "pathchk" || firstName === "printenv" || firstName === "env" || firstName === "mktemp" || firstName === "tee" || firstName === "touch" || firstName === "cp" || firstName === "mv" || firstName === "rmdir" || firstName === "sleep" || firstName === "chmod" || firstName === "patch" || firstName === "mkdir" || firstName === "rm" || firstName === "ln" || ((stageArgs.includes("--help") || stageArgs.includes("--version")) && gnuInformationSync(firstName, stageArgs) !== undefined)) {
                             const rawBytes = prevBuf.subarray(0, prevLen);
                             const readFile = (p) => this.tryReadMemoryFileViewSync(resolvePath(rawState.cwd, p), true, true);
-                            const outStr = ((stageArgs.includes("--help") || stageArgs.includes("--version")) ? gnuInformationSync(firstName, stageArgs) : undefined) ?? (firstName === "envsubst"
+                            const outStr = ((stageArgs.includes("--help") || stageArgs.includes("--version")) ? gnuInformationSync(firstName, stageArgs, false, (rawState.exported.has("POSIXLY_CORRECT") || rawState.allexport) && rawState.variables.POSIXLY_CORRECT !== undefined) : undefined) ?? (firstName === "envsubst"
                                 ? this.evalSyncEnvsubst(inStr, stageArgs, rawState)
                                 : firstName === "fmt"
                                     ? this.evalSyncFmt(rawBytes, stageArgs, readFile)
@@ -37563,7 +37589,7 @@ export class Runtime {
                 return undefined;
         }
         if (cmd.words.length === 2 && cmd.redirects.length === 0 && (cmd.words[1]?.plain === "--help" || cmd.words[1]?.plain === "--version")) {
-            const gnuInfo = gnuInformationSync(w0Plain, [cmd.words[1].plain]);
+            const gnuInfo = gnuInformationSync(w0Plain, [cmd.words[1].plain], false, (rawState.exported.has("POSIXLY_CORRECT") || rawState.allexport) && rawState.variables.POSIXLY_CORRECT !== undefined);
             if (gnuInfo !== undefined) {
                 const extDef = this.getExternalCommand(w0Plain);
                 if (!extDef || !builtInDirectContextExecutors.has(extDef.execute))
@@ -38353,8 +38379,8 @@ export class Runtime {
                                                                                                                                                                                                                                                                                     catch {
                                                                                                                                                                                                                                                                                         return false;
                                                                                                                                                                                                                                                                                     } }, (s, d, sym) => this.tryLinkMemoryNodeSync(sym ? s : resolvePath(rawState.cwd, s), resolvePath(rawState.cwd, d), sym))
-                                                                                                                                                                                                                                                                                    : (allArgs.includes("--help") || allArgs.includes("--version")) && gnuInformationSync(w0Plain, allArgs) !== undefined
-                                                                                                                                                                                                                                                                                        ? gnuInformationSync(w0Plain, allArgs)
+                                                                                                                                                                                                                                                                                    : (allArgs.includes("--help") || allArgs.includes("--version")) && gnuInformationSync(w0Plain, allArgs, false, (rawState.exported.has("POSIXLY_CORRECT") || rawState.allexport) && rawState.variables.POSIXLY_CORRECT !== undefined) !== undefined
+                                                                                                                                                                                                                                                                                        ? gnuInformationSync(w0Plain, allArgs, false, (rawState.exported.has("POSIXLY_CORRECT") || rawState.allexport) && rawState.variables.POSIXLY_CORRECT !== undefined)
                                                                                                                                                                                                                                                                                         : w0Plain === "mdq"
                                                                                                                                                                                                                                                                                             ? evalSyncMdq(inBytes, allArgs, readFile)
                                                                                                                                                                                                                                                                                             : w0Plain === "shuf"

package/dist/safe-bash/yq-browser/index.js

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "../chunks/chunk-Q45QCA4J.js";
+} from "../chunks/chunk-I3KSESCR.js";
 
 // packages/safe-bash/src/yq.browser.ts
 init_platform();

package/dist/safe-bash-checksum-engine/index.d.ts

@@ -1,5 +1,5 @@
 import { type CommandDefinition } from "../safe-bash-contracts/index.js";
 type Algorithm = "sha512" | "sha384" | "sha256" | "sha224" | "sha1" | "md5" | "crc" | "bsd" | "sysv" | "crc32b" | "sm3" | "blake2b" | "sha3";
-export declare function command(name: string, algorithm: Algorithm, maxInputBytes: number): CommandDefinition;
+export declare function command(name: string, algorithm: Algorithm, maxInputBytes: number, maxArgumentBytes?: number): CommandDefinition;
 export declare function evalSyncChecksum(name: string, inBytes: Uint8Array | undefined, opArgs: readonly string[], readFileSync?: (p: string) => Uint8Array | undefined, fileOperandName?: string): string | undefined;
 export {};

package/dist/safe-bash-checksum-engine/index.js

@@ -7,6 +7,7 @@ import {
 
 // packages/safe-bash-checksum-engine/dist/index.js
 init_buffer();
+import { shellValueByteLength } from "../safe-bash-contracts/value.js";
 import { yieldTurn } from "../safe-bash-contracts/yield.js";
 import { blake2b } from "@noble/hashes/blake2.js";
 import { sha3_224, sha3_256, sha3_384, sha3_512 } from "@noble/hashes/sha3.js";
@@ -14,7 +15,7 @@ import { PublicDiagnostic } from "../safe-bash-contracts/diagnostics.js";
 import { md5, sha1 } from "@noble/hashes/legacy.js";
 import { sha224, sha256, sha384, sha512 } from "@noble/hashes/sha2.js";
 import { bytesToHex, hexToBytes } from "@noble/hashes/utils.js";
-import { FsError, readBytes, toByteSource } from "../safe-bash-contracts/index.js";
+import { FsError, getCommandArguments, readBytes, toByteSource } from "../safe-bash-contracts/index.js";
 import { codeOf, define, diagnostic, encoder, options, output, pathOf, UsageError, value } from "../safe-bash-io-engine/internal.js";
 import { ByteInputBudget } from "../safe-bash-byte-input-engine/index.js";
 var blockBytes = 64 * 1024;
@@ -423,14 +424,25 @@ async function verify(context, manifest, algorithm, settings, state) {
   }
   return valid && matched && !failures && !mismatched && (!settings.strict || !malformed);
 }
-function command(name, algorithm, maxInputBytes) {
+function command(name, algorithm, maxInputBytes, maxArgumentBytes = Infinity) {
   return define(name, async (context) => {
+    if (maxArgumentBytes !== Infinity) {
+      const arguments_ = getCommandArguments(context);
+      let argumentBytes = 0;
+      for (let index = 0; index < arguments_.args.length; index++) {
+        const bytes = shellValueByteLength(arguments_.values[index]);
+        if (bytes > maxArgumentBytes - argumentBytes)
+          throw new FsError("EFBIG", { message: "checksum argument limit exceeded" });
+        argumentBytes += bytes;
+      }
+    }
     const selected = name === "cksum" ? parseCksum(context.args) : { algorithm, settings: parse(context.args, algorithm) };
     const selectedAlgorithm = selected.algorithm;
     const settings = selected.settings;
     const state = { stdinUsed: false, budget: new ByteInputBudget(maxInputBytes) };
     let failed = false;
     for (const filename of settings.operands.length ? settings.operands : ["-"]) {
+      await yieldTurn(context.signal);
       context.signal.throwIfAborted();
       if (settings.check) {
         try {

package/dist/safe-bash-command-bzip2/index.js

@@ -10,6 +10,7 @@ import { codeOf, diagnostic, output } from "../safe-bash-compression-engine/inte
 import { runOperand } from "../safe-bash-compression-engine/operand.js";
 import { planOperands, verifyOperandDestinations } from "../safe-bash-compression-engine/files.js";
 import { parseOptions, profiles } from "../safe-bash-compression-engine/options.js";
+import { CompressedDataError } from "../safe-bash-compression-engine/errors.js";
 import { DecodedBudget } from "../safe-bash-compression-engine/stream.js";
 function settings(options = {}) {
   const maxDecodedBytes = options.limits?.maxDecodedBytes ?? options.maxDecodedBytes ?? Infinity;
@@ -95,7 +96,7 @@ No FILE or FILE '-' uses stdin; file output uses private VFS staging.
             context.signal.throwIfAborted();
             if (parsed.quiet < 2)
               await diagnostic(context, error);
-            exitCode = 1;
+            exitCode = Math.max(exitCode, error instanceof CompressedDataError ? 2 : 1);
             if (decodedBudget.exceeded)
               break;
           }

package/dist/safe-bash-command-cmp/index.d.ts

@@ -0,0 +1,10 @@
+import { type CommandDefinition, type VirtualShellPlugin } from "../safe-bash-contracts/index.js";
+import { type CmpCommandsOptions } from "./options.js";
+export type { CmpLimits, CmpCommandsOptions } from "./options.js";
+export declare function evalSyncCmp(inBytes: Uint8Array | undefined, opArgs: readonly string[], readFileSync?: (path: string) => Uint8Array | undefined): string | undefined;
+/** Opt-in GNU comparison-block behavior; producer fragments do not define blocks. */
+export declare const createCmpCommand: (options?: CmpCommandsOptions | undefined) => CommandDefinition;
+/** Existing default-shell behavior, sharing the same retained-input engine. */
+export declare const cmpCommand: (options?: CmpCommandsOptions | undefined) => CommandDefinition;
+export declare function createCmpCommands(options?: CmpCommandsOptions): readonly CommandDefinition[];
+export declare function cmpCommands(options?: CmpCommandsOptions): VirtualShellPlugin;