@poe-platform/safe-bash 0.1.799 → 0.1.801

package/dist/safe-bash/plugins/composition.d.ts

@@ -72,6 +72,7 @@ export interface AgentCommandsOptions {
     readonly regex?: RegexExecutionOptions;
     readonly regexExecutor?: BoundedRegexProvider;
     readonly maxDirectoryEntries?: number;
+    readonly maxRecursiveDirectoryDepth?: number;
     readonly maxTeeTargets?: number;
     readonly maxTailFollowHandles?: number;
     readonly text?: Omit<TextProgramOptions, "replace">;

package/dist/safe-bash/plugins/composition.js

@@ -58,17 +58,12 @@ import { createLocaleCommands } from "../commands/locale/index.js";
 import { createDfCommands } from "../commands/df/index.js";
 import { createSqlite3Commands } from "../commands/sqlite3/index.js";
 import { createMdqCommand } from "../commands/mdq/index.js";
-let defaultMuscleMemoryLookup;
-function getExtraAgentCommand(name) {
-    defaultMuscleMemoryLookup ??= new Map(createExtraAgentCommands().map(cmd => [cmd.name, cmd]));
-    return defaultMuscleMemoryLookup.get(name);
-}
 function createExtraAgentCommands(options) {
     return [...createBcCommands(options?.bc), ...createSpongeCommands(options?.sponge), ...createOpensslCommands(), ...createSshCommands(), ...createGpgCommands(), ...createFdCommands(options?.fd), ...createLessCommands(options?.less), ...createIdCommands(), ...createWhoamiCommands(), ...createUnameCommands(), ...createHostnameCommands(), ...createNprocCommands(), ...createShufCommands(), ...createYesCommands(), ...createDdCommands(), ...createNumfmtCommands(), ...createEnvsubstCommands(), ...createCalCommands(), ...createPathchkCommands(), ...createGetconfCommands(), ...createLocaleCommands(), ...createDfCommands(), ...createSqlite3Commands(options?.sqlite3)];
 }
 export function commandExecutor(lookup) {
     return async (context) => {
-        const command = lookup(context.command) ?? getExtraAgentCommand(context.command);
+        const command = lookup(context.command);
         if (command)
             return command.execute(context);
         await diagnostic(context, new PublicDiagnostic("command not found"));
@@ -161,7 +156,7 @@ export function composeRawAgentCommands(options, executors, additionalCommands =
     if (!hasCustomFamilyOptions(options)) {
         const defaults = getDefaultStatelessFamilies();
         const aliasesGrep = executors.aliases === executors.grep ? grep[0] : createGrepCommands(executors.aliases, { ergonomicRegex: useErgonomicGrep })[0];
-        commands.push(...createStandardCommandsWithGrep({ execute: options.execute ?? commandExecutor(name => commands.find(command => command.name === name)), ...(options.execution === undefined ? {} : { execution: options.execution }), ...(options.regex === undefined ? {} : { regex: options.regex }), ...(options.maxDirectoryEntries === undefined ? {} : { maxDirectoryEntries: options.maxDirectoryEntries }), ...(options.maxTeeTargets === undefined ? {} : { maxTeeTargets: options.maxTeeTargets }), ...(options.maxTailFollowHandles === undefined ? {} : { maxTailFollowHandles: options.maxTailFollowHandles }) }, grep), ...defaults.beforeAliases, createRgCommand(executors.search, options.search), ...createGrepAliases(aliasesGrep), ...defaults.beforeExpr, createExprCommandWithExecutor(executors.expr, exprLimits === undefined ? {} : { limits: exprLimits }), ...defaults.beforeCsplit, createCsplitCommandWithExecutor(executors.csplit, csplitLimits === undefined ? {} : { limits: csplitLimits }), ...defaults.afterCsplit);
+        commands.push(...createStandardCommandsWithGrep({ execute: options.execute ?? commandExecutor(name => commands.find(command => command.name === name)), ...(options.execution === undefined ? {} : { execution: options.execution }), ...(options.regex === undefined ? {} : { regex: options.regex }), ...(options.maxDirectoryEntries === undefined ? {} : { maxDirectoryEntries: options.maxDirectoryEntries }), ...(options.maxRecursiveDirectoryDepth === undefined ? {} : { maxRecursiveDirectoryDepth: options.maxRecursiveDirectoryDepth }), ...(options.maxTeeTargets === undefined ? {} : { maxTeeTargets: options.maxTeeTargets }), ...(options.maxTailFollowHandles === undefined ? {} : { maxTailFollowHandles: options.maxTailFollowHandles }) }, grep), ...defaults.beforeAliases, createRgCommand(executors.search, options.search), ...createGrepAliases(aliasesGrep), ...defaults.beforeExpr, createExprCommandWithExecutor(executors.expr, exprLimits === undefined ? {} : { limits: exprLimits }), ...defaults.beforeCsplit, createCsplitCommandWithExecutor(executors.csplit, csplitLimits === undefined ? {} : { limits: csplitLimits }), ...defaults.afterCsplit);
         return commands;
     }
     const prOptions = options.pr;
@@ -180,7 +175,7 @@ export function composeRawAgentCommands(options, executors, additionalCommands =
     const xmlLimits = options.xml?.limits;
     commands.push(
     // Explicit muscle-memory registration selects its shuf and numfmt definitions.
-    ...createStandardCommandsWithGrep({ execute: options.execute ?? commandExecutor(name => commands.find(command => command.name === name)), ...(options.execution === undefined ? {} : { execution: options.execution }), ...(options.regex === undefined ? {} : { regex: options.regex }), ...(options.maxDirectoryEntries === undefined ? {} : { maxDirectoryEntries: options.maxDirectoryEntries }), ...(options.maxTeeTargets === undefined ? {} : { maxTeeTargets: options.maxTeeTargets }), ...(options.maxTailFollowHandles === undefined ? {} : { maxTailFollowHandles: options.maxTailFollowHandles }) }, grep).filter(command => !options.muscleMemory || (command.name !== "shuf" && command.name !== "numfmt")), ...createTextProgramCommands({ ...options.text }), ...createStructuredCommands({ ...options.structured }), createRgCommand(executors.search, options.search), ...createByteCommands(options.bytes), ...createDiffPatchCommands({ ...options.diffPatch }), ...createMetadataCommands({ ...options.metadata }), ...createArchiveCommands({ ...options.archive }), ...createTableTextCommands({ ...options.tableText }), ...createStreamInspectionCommands({ ...options.streamInspection }), ...createStreamFormatCommands({ ...options.streamFormat }), ...createSplitCommands({ ...options.split }), ...createTimeEnvCommands({ ...options.timeEnv }), ...createTreeCommands({ ...options.tree }), ...createFileCommands({ ...options.file }), ...createGrepAliases(createGrepCommands(executors.aliases, { ergonomicRegex: useErgonomicGrep })[0]), ...createColumnCommands({ ...options.column }), ...createHtmlToMarkdownCommands({ ...options.htmlToMarkdown }), ...createDuCommands({ ...options.du }), createExprCommandWithExecutor(executors.expr, exprLimits === undefined ? {} : { limits: exprLimits }), ...createWhichCommands(whichLimits === undefined ? {} : { limits: whichLimits }), ...createTimeoutCommands(timeoutOptions === undefined ? undefined : {
+    ...createStandardCommandsWithGrep({ execute: options.execute ?? commandExecutor(name => commands.find(command => command.name === name)), ...(options.execution === undefined ? {} : { execution: options.execution }), ...(options.regex === undefined ? {} : { regex: options.regex }), ...(options.maxDirectoryEntries === undefined ? {} : { maxDirectoryEntries: options.maxDirectoryEntries }), ...(options.maxRecursiveDirectoryDepth === undefined ? {} : { maxRecursiveDirectoryDepth: options.maxRecursiveDirectoryDepth }), ...(options.maxTeeTargets === undefined ? {} : { maxTeeTargets: options.maxTeeTargets }), ...(options.maxTailFollowHandles === undefined ? {} : { maxTailFollowHandles: options.maxTailFollowHandles }) }, grep).filter(command => !options.muscleMemory || (command.name !== "shuf" && command.name !== "numfmt")), ...createTextProgramCommands({ ...options.text }), ...createStructuredCommands({ ...options.structured }), createRgCommand(executors.search, options.search), ...createByteCommands(options.bytes), ...createDiffPatchCommands({ ...options.diffPatch }), ...createMetadataCommands({ ...options.metadata }), ...createArchiveCommands({ ...options.archive }), ...createTableTextCommands({ ...options.tableText }), ...createStreamInspectionCommands({ ...options.streamInspection }), ...createStreamFormatCommands({ ...options.streamFormat }), ...createSplitCommands({ ...options.split }), ...createTimeEnvCommands({ ...options.timeEnv }), ...createTreeCommands({ ...options.tree }), ...createFileCommands({ ...options.file }), ...createGrepAliases(createGrepCommands(executors.aliases, { ergonomicRegex: useErgonomicGrep })[0]), ...createColumnCommands({ ...options.column }), ...createHtmlToMarkdownCommands({ ...options.htmlToMarkdown }), ...createDuCommands({ ...options.du }), createExprCommandWithExecutor(executors.expr, exprLimits === undefined ? {} : { limits: exprLimits }), ...createWhichCommands(whichLimits === undefined ? {} : { limits: whichLimits }), ...createTimeoutCommands(timeoutOptions === undefined ? undefined : {
         ...timeoutOptions,
     }), ...createApplyPatchCommands(applyPatchLimits === undefined ? {} : { limits: applyPatchLimits }), ...createXmlCommands(xmlLimits === undefined ? {} : { limits: xmlLimits }), createCsplitCommandWithExecutor(executors.csplit, csplitLimits === undefined ? {} : { limits: csplitLimits }), ...createPrCommands({ ...(prLimits === undefined ? {} : { limits: prLimits }), ...(prClock === undefined ? {} : { clock: prClock }) }), ...createTsortCommands(tsortLimits === undefined ? {} : { limits: tsortLimits }), ...createFactorCommands(factorLimits === undefined ? {} : { limits: factorLimits }), ...createGetoptCommands(getoptLimits === undefined ? {} : { limits: getoptLimits }), ...createHexdumpCommands({ ...(hexdumpLimits === undefined ? {} : { limits: hexdumpLimits }), ...(hexdumpDialect === undefined ? {} : { dialect: hexdumpDialect }) }), ...createIconvCommands(iconvLimits === undefined ? {} : { limits: iconvLimits }), ...createLineEndingCommands(lineEndingLimits === undefined ? {} : { limits: lineEndingLimits }), ...(options.muscleMemory ? createExtraAgentCommands(options) : options.sqlite3 ? createSqlite3Commands(options.sqlite3) : []), createMdqCommand(options.mdq));
     return commands;

package/dist/safe-bash/plugins/index.browser.js

@@ -1,37 +1,35 @@
 import {
   agentCommands,
   createAgentCommands
-} from "../chunks/chunk-TRVGCN3U.js";
+} from "../chunks/chunk-45PK3NWI.js";
 import {
   baseAgentCommands
-} from "../chunks/chunk-SPYL72GN.js";
-import "../chunks/chunk-M4CFCXHN.js";
-import "../chunks/chunk-T3JTVIEP.js";
-import "../chunks/chunk-MHZ24KEI.js";
-import "../chunks/chunk-AZAJJVFX.js";
-import "../chunks/chunk-U5NUZPCC.js";
-import "../chunks/chunk-3L3T6LYV.js";
-import "../chunks/chunk-H6JW3E4F.js";
-import "../chunks/chunk-S264DZO2.js";
-import "../chunks/chunk-B3DDEDH2.js";
-import "../chunks/chunk-K7IQZE7D.js";
-import "../chunks/chunk-O4ZUCRGN.js";
-import "../chunks/chunk-WVG5SHHQ.js";
-import "../chunks/chunk-T5KKDMYB.js";
-import "../chunks/chunk-F3RV2F72.js";
-import "../chunks/chunk-6HZYFL3H.js";
-import "../chunks/chunk-SOZK5JVX.js";
-import "../chunks/chunk-LLZCZ24K.js";
-import "../chunks/chunk-KTGR4U57.js";
-import "../chunks/chunk-I4OAEOP6.js";
-import "../chunks/chunk-KMH2DF3I.js";
-import "../chunks/chunk-IUTD5FH5.js";
-import "../chunks/chunk-VYZTG3GV.js";
-import "../chunks/chunk-LQHGH25W.js";
-import "../chunks/chunk-PYVEAFJM.js";
-import "../chunks/chunk-KV7PKOHV.js";
-import "../chunks/chunk-ENR3HB2B.js";
-import "../chunks/chunk-YG5WAHK7.js";
+} from "../chunks/chunk-PQRAK7HU.js";
+import "../chunks/chunk-AM5ESLPH.js";
+import "../chunks/chunk-CS4MNM6I.js";
+import "../chunks/chunk-FBUCWVTE.js";
+import "../chunks/chunk-6PAVEFT3.js";
+import "../chunks/chunk-SZH7EJLD.js";
+import "../chunks/chunk-MHMMRCYC.js";
+import "../chunks/chunk-AUSNDQTJ.js";
+import "../chunks/chunk-CTVWDACF.js";
+import "../chunks/chunk-3R3AANOR.js";
+import "../chunks/chunk-OV6IHKO6.js";
+import "../chunks/chunk-XVOSKJE2.js";
+import "../chunks/chunk-C5OWC2TL.js";
+import "../chunks/chunk-IVRQ4BXL.js";
+import "../chunks/chunk-D3ANYGMC.js";
+import "../chunks/chunk-CHYGPFVM.js";
+import "../chunks/chunk-NR3EM4LS.js";
+import "../chunks/chunk-J42RIHHJ.js";
+import "../chunks/chunk-ICFDYV64.js";
+import "../chunks/chunk-VTH3MLDU.js";
+import "../chunks/chunk-NZQXYWA3.js";
+import "../chunks/chunk-74GHTNJA.js";
+import "../chunks/chunk-7R5BDCG7.js";
+import "../chunks/chunk-IWDICZVK.js";
+import "../chunks/chunk-E7OYNDGL.js";
+import "../chunks/chunk-B7TAL7S5.js";
 export {
   agentCommands,
   baseAgentCommands,

package/dist/safe-bash/registry-entry.browser.js

@@ -1,39 +1,37 @@
 import {
   baseAgentCommands
-} from "./chunks/chunk-SPYL72GN.js";
-import "./chunks/chunk-M4CFCXHN.js";
-import "./chunks/chunk-T3JTVIEP.js";
-import "./chunks/chunk-MHZ24KEI.js";
-import "./chunks/chunk-AZAJJVFX.js";
-import "./chunks/chunk-U5NUZPCC.js";
-import "./chunks/chunk-3L3T6LYV.js";
-import "./chunks/chunk-H6JW3E4F.js";
-import "./chunks/chunk-S264DZO2.js";
-import "./chunks/chunk-B3DDEDH2.js";
-import "./chunks/chunk-K7IQZE7D.js";
-import "./chunks/chunk-O4ZUCRGN.js";
-import "./chunks/chunk-WVG5SHHQ.js";
-import "./chunks/chunk-T5KKDMYB.js";
-import "./chunks/chunk-F3RV2F72.js";
-import "./chunks/chunk-KHMGTPD6.js";
+} from "./chunks/chunk-PQRAK7HU.js";
+import "./chunks/chunk-AM5ESLPH.js";
+import "./chunks/chunk-CS4MNM6I.js";
+import "./chunks/chunk-FBUCWVTE.js";
+import "./chunks/chunk-6PAVEFT3.js";
+import "./chunks/chunk-SZH7EJLD.js";
+import "./chunks/chunk-MHMMRCYC.js";
+import "./chunks/chunk-AUSNDQTJ.js";
+import "./chunks/chunk-CTVWDACF.js";
+import "./chunks/chunk-3R3AANOR.js";
+import "./chunks/chunk-OV6IHKO6.js";
+import "./chunks/chunk-XVOSKJE2.js";
+import "./chunks/chunk-C5OWC2TL.js";
+import "./chunks/chunk-IVRQ4BXL.js";
+import "./chunks/chunk-D3ANYGMC.js";
+import "./chunks/chunk-CHYGPFVM.js";
+import "./chunks/chunk-46Z5E5EV.js";
+import "./chunks/chunk-6O77NL2S.js";
 import {
   createBoundedRegexProvider
-} from "./chunks/chunk-6HZYFL3H.js";
-import "./chunks/chunk-SOZK5JVX.js";
-import "./chunks/chunk-LLZCZ24K.js";
-import "./chunks/chunk-KTGR4U57.js";
-import "./chunks/chunk-XB3B7KMM.js";
-import "./chunks/chunk-I4OAEOP6.js";
-import "./chunks/chunk-KMH2DF3I.js";
-import "./chunks/chunk-IUTD5FH5.js";
-import "./chunks/chunk-VYZTG3GV.js";
-import "./chunks/chunk-LQHGH25W.js";
-import "./chunks/chunk-PYVEAFJM.js";
-import "./chunks/chunk-KV7PKOHV.js";
-import "./chunks/chunk-ENR3HB2B.js";
+} from "./chunks/chunk-NR3EM4LS.js";
+import "./chunks/chunk-J42RIHHJ.js";
+import "./chunks/chunk-ICFDYV64.js";
+import "./chunks/chunk-VTH3MLDU.js";
+import "./chunks/chunk-NZQXYWA3.js";
+import "./chunks/chunk-74GHTNJA.js";
+import "./chunks/chunk-7R5BDCG7.js";
+import "./chunks/chunk-IWDICZVK.js";
+import "./chunks/chunk-E7OYNDGL.js";
 import {
   init_platform
-} from "./chunks/chunk-YG5WAHK7.js";
+} from "./chunks/chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/registry-entry.ts
 init_platform();

package/dist/safe-bash/shell/arrays/bindings.d.ts

@@ -86,6 +86,7 @@ export declare class BindingWatch {
 }
 interface NamedBinding {
     binding: IndexedBinding;
+    identity: number;
     readonly name: OwnedText;
     readonly admission: Admission;
 }
@@ -117,17 +118,14 @@ export declare class BindingStore {
         readonly name: OwnedText;
         readonly admission: Admission;
     } | undefined;
-    recycledBindings: Map<string, {
-        binding: IndexedBinding;
-        name: OwnedText;
-        admission: Admission;
-    }>;
+    recycledBindings: Map<string, NamedBinding>;
     releaseRecycled(name: string): void;
     stashRecycled(name: string, tickets: Tickets): void;
     takeRecycled(name: string, associative: boolean, tickets: Tickets): IndexedBinding | undefined;
     publish(name: string, binding: IndexedBinding, tickets: Tickets, prepared?: {
         readonly name: OwnedText;
         readonly admission: Admission;
+        readonly identity?: number | undefined;
     }, restoring?: boolean, owner?: ArrayOwner): Promise<void> | undefined;
     revise(name: string, binding: IndexedBinding, tickets: Tickets): void;
     remove(name: string, tickets: Tickets): Promise<void> | undefined;

package/dist/safe-bash/shell/arrays/bindings.js

@@ -2,7 +2,7 @@ import { bytesToHex } from "../../byte-encoding.js";
 import { Admission, ArrayFailure, ArrayOwner, exactSum } from "./ledger.js";
 import { shellValueByteLength, shellValueBytes, shellValueFromBytes, shellValueRetainedBytes, shellValueText } from "../../contracts/value.js";
 export const controlNames = new Set([
-    "PATH", "PWD", "OLDPWD", "HOME", "CDPATH", "IFS", "OPTIND", "OPTERR", "OPTARG", "REPLY", "LANG", "LC_ALL", "LC_CTYPE",
+    "PATH", "PWD", "OLDPWD", "HOME", "CDPATH", "IFS", "OPTIND", "OPTERR", "OPTARG", "REPLY", "LANG", "LC_ALL", "LC_CTYPE", "RANDOM", "SECONDS", "LINENO",
 ]);
 export class OwnedText {
     shellValue;
@@ -625,6 +625,7 @@ export class BindingStore {
         }
         rec.binding.maximum = -1;
         rec.binding.assigned = false;
+        rec.identity = tickets.generation;
         this.bindings.set(name, rec);
         this.changed(tickets, name);
         return rec.binding;
@@ -633,14 +634,17 @@ export class BindingStore {
         this.releaseRecycled(name);
         const previous = this.bindings.get(name);
         const displaced = previous?.binding;
-        if (previous)
+        if (previous) {
             previous.binding = binding;
+            if (restoring && prepared?.identity !== undefined)
+                previous.identity = prepared.identity;
+        }
         else {
             if (!prepared)
                 throw new Error("Missing indexed-array name admission");
             owner.adopt(prepared.name.admission, restoring);
             owner.adopt(prepared.admission, restoring);
-            const entry = { binding, name: prepared.name, admission: prepared.admission };
+            const entry = { binding, identity: restoring ? prepared.identity ?? tickets.generation : tickets.generation, name: prepared.name, admission: prepared.admission };
             prepared.admission.cleanup = () => {
                 if (this.bindings.get(name) === entry) {
                     this.bindings.delete(name);

package/dist/safe-bash/shell/arrays/state.js

@@ -1,3 +1,4 @@
+import { writeDynamicVariable } from "../dynamic-variables.js";
 import { ArrayFailure, ArrayLedger, ArrayOwner } from "./ledger.js";
 import { BindingStore, IndexedBinding, OwnedText, textToken } from "./bindings.js";
 import { ValueArena, ValueStore } from "../value-state.js";
@@ -493,6 +494,7 @@ export class StateMonitor {
     publishStringVariable(name, value) {
         const tickets = this.mutation(name);
         this.values.publishString(name, value, this.raw.variables);
+        writeDynamicVariable(this.raw, name, value);
         this.finish(tickets, name);
     }
     publish(tickets, name, action) {
@@ -673,6 +675,8 @@ class StateProxyHandler {
         const name = this.named ? String(key) : undefined;
         const tickets = this.monitor.mutation(name);
         const result = Reflect.set(target, key, entry);
+        if (result && this.field === "variables" && typeof key === "string" && typeof entry === "string")
+            writeDynamicVariable(this.monitor.raw, key, entry);
         if (result)
             this.monitor.changedValue(target, this.field, key);
         this.monitor.finish(tickets, name);

package/dist/safe-bash/shell/brace-expansion.js

@@ -75,7 +75,7 @@ export function tryFastExpandBraceRange(word, budget, reserveBytes) {
             continue;
         const c = text.charCodeAt(i);
         if (c === 123 || c === 125 || c === 44 || c === 92 || c === 126 ||
-            c === 42 || c === 63 || c === 91 || c === 32 || c === 9 || c === 10) {
+            c === 40 || c === 42 || c === 63 || c === 91 || c === 32 || c === 9 || c === 10) {
             braceRangeWordCache.set(word, null);
             return undefined;
         }

package/dist/safe-bash/shell/dynamic-variables.d.ts

@@ -0,0 +1,10 @@
+/** Primitive fields keep dynamic bindings independent when shell state is forked. */
+export interface DynamicVariableState {
+    randomSeed?: number;
+    randomDisabled?: boolean;
+    secondsOrigin?: number;
+    secondsDisabled?: boolean;
+}
+export declare function writeDynamicVariable(state: DynamicVariableState, name: string, value: string): void;
+export declare function readDynamicVariable(state: DynamicVariableState, name: string): string | undefined;
+//# sourceMappingURL=dynamic-variables.d.ts.map

package/dist/safe-bash/shell/dynamic-variables.js

@@ -0,0 +1,25 @@
+export function writeDynamicVariable(state, name, value) {
+    if (name !== "RANDOM" && name !== "SECONDS")
+        return;
+    const number = Number.parseInt(value, 10) || 0;
+    if (name === "RANDOM" && !state.randomDisabled) {
+        state.randomSeed = (number >>> 0) % 2147483647 || 1;
+    }
+    else if (name === "SECONDS" && !state.secondsDisabled) {
+        state.secondsOrigin = Date.now() - number * 1000;
+    }
+}
+export function readDynamicVariable(state, name) {
+    if (name === "RANDOM" && !state.randomDisabled) {
+        // Park–Miller's bounded integer state gives repeatable seeded sequences.
+        const seed = ((state.randomSeed ?? 1) * 16807) % 2147483647;
+        state.randomSeed = seed;
+        return String((seed ^ (seed >>> 16)) & 32767);
+    }
+    if (name === "SECONDS" && !state.secondsDisabled) {
+        state.secondsOrigin ??= Date.now();
+        return String(Math.floor((Date.now() - state.secondsOrigin) / 1000));
+    }
+    return undefined;
+}
+//# sourceMappingURL=dynamic-variables.js.map

package/dist/safe-bash/shell/input.js

@@ -871,7 +871,7 @@ class InputCursor {
                 this._budget.fail("maxInputBytes");
             this._produced += chunk.byteLength;
             this._ended = true;
-            return { value: this._boundedReads ? new Uint8Array(chunk) : chunk, done: false };
+            return { value: chunk, done: false };
         }
         if (this._ended || this._closed)
             return { value: undefined, done: true };
@@ -896,7 +896,7 @@ class InputCursor {
                 if (this._boundedReads && result.value.byteLength > this._budget.limits.maxInputBytes - this._produced)
                     this._budget.fail("maxInputBytes");
                 this._produced += result.value.byteLength;
-                const out = { value: this._boundedReads ? new Uint8Array(result.value) : result.value, done: false };
+                const out = { value: result.value, done: false };
                 this._readSettled = true;
                 this._readResult = out;
                 return out;
@@ -962,7 +962,7 @@ class InputCursor {
                 if (this._boundedReads && result.value.byteLength > this._budget.limits.maxInputBytes - this._produced)
                     this._budget.fail("maxInputBytes");
                 this._produced += result.value.byteLength;
-                const out = { value: this._boundedReads ? new Uint8Array(result.value) : result.value, done: false };
+                const out = { value: result.value, done: false };
                 this._readSettled = true;
                 this._readResult = out;
                 return out;
@@ -1181,10 +1181,11 @@ export class ShellInput {
             const result = await this._cursor.take(signal, maxBytes);
             if (result.done)
                 return result;
-            const count = Math.min(maxBytes, result.value.byteLength);
-            const value = new Uint8Array(result.value.subarray(0, count));
-            if (count < result.value.byteLength)
-                this._cursor.remainder = result.value.subarray(count);
+            const bytes = new Uint8Array(result.value);
+            const count = Math.min(maxBytes, bytes.byteLength);
+            const value = new Uint8Array(bytes.subarray(0, count));
+            if (count < bytes.byteLength)
+                this._cursor.remainder = bytes.subarray(count);
             this._cursor.position += count;
             return { done: false, value };
         });
@@ -1210,15 +1211,16 @@ export class ShellInput {
                     const result = await this._cursor.take(signal, maxBytes - length);
                     if (result.done)
                         break;
-                    const count = Math.min(maxBytes - length, result.value.byteLength);
+                    const bytes = new Uint8Array(result.value);
+                    const count = Math.min(maxBytes - length, bytes.byteLength);
                     if (count > this.budget.limits.maxInputBytes - length) {
-                        this._cursor.restore([result.value]);
+                        this._cursor.restore([bytes]);
                         this.budget.fail("maxInputBytes");
                     }
-                    if (count < result.value.byteLength)
-                        this._cursor.remainder = result.value.subarray(count);
+                    if (count < bytes.byteLength)
+                        this._cursor.remainder = bytes.subarray(count);
                     if (count)
-                        chunks.push(result.value.subarray(0, count));
+                        chunks.push(bytes.subarray(0, count));
                     length += count;
                 }
                 signal.throwIfAborted();
@@ -1587,6 +1589,7 @@ export class ShellInput {
         if (this._viewClosed || (this._reads && this._reads.size > 0))
             return undefined;
         const cursor = this._cursor;
+        cursor.admitBoundedRead();
         if (!cursor.remainder && cursor.canTakeRemainderSync()) {
             const ready = cursor.tryTakeReadySync();
             if (ready && !ready.done && ready.value.length > 0) {
@@ -1605,7 +1608,6 @@ export class ShellInput {
                 return undefined;
         }
         this.signal.throwIfAborted();
-        cursor.admitBoundedRead();
         cursor.position += delimIdx + 1;
         cursor.remainder = delimIdx + 1 < rem.length ? rem.subarray(delimIdx + 1) : undefined;
         return latin1Text(rem.subarray(0, delimIdx));
@@ -1617,6 +1619,7 @@ export class ShellInput {
             throw new RangeError("Invalid read count");
         if (!Number.isInteger(delimiter) || delimiter < 0 || delimiter > 255)
             throw new RangeError("Invalid read delimiter");
+        this._cursor.admitBoundedRead();
         const scope = this.budget.values.scope();
         let active = 1;
         let closed = false;
@@ -1675,7 +1678,6 @@ export class ShellInput {
                                 }
                             }
                             if (!hasNul) {
-                                this._cursor.admitBoundedRead();
                                 this._cursor.position += delimIdx + 1;
                                 this._cursor.remainder = delimIdx + 1 < rem.length ? rem.subarray(delimIdx + 1) : undefined;
                                 scope.reserve(delimIdx + 64, 1);

package/dist/safe-bash/shell/parser.js

@@ -601,6 +601,7 @@ class Lexer {
         const unprinted = this.unprintedWords;
         const parts = [];
         let parentheses = 0;
+        let brackets = 0;
         let conditionals = 0;
         let patternParentheses = 0;
         let regexBracket = false;
@@ -683,7 +684,13 @@ class Lexer {
                     break;
             }
             else if (terminator) {
-                if (terminator.includes(current) && (!arithmetic || current !== ":" || parentheses === 0 && conditionals === 0))
+                if (terminator.includes("]") && current === "[") {
+                    if (++brackets > this.budget.maxSyntaxDepth)
+                        this.error(`Subscript syntax nesting exceeds ${this.budget.maxSyntaxDepth}`);
+                }
+                else if (current === "]" && brackets > 0)
+                    brackets--;
+                else if (terminator.includes(current) && (!arithmetic || current !== ":" || parentheses === 0 && conditionals === 0))
                     break;
             }
             else if (!this.braceReplay) {

package/dist/safe-bash/shell/runtime.d.ts

@@ -19,6 +19,7 @@ import type { GetoptsState } from "./getopts.js";
 import type { CancellationAdmissionSnapshot, CancellationBoundary, CancellationReport, CancellationSelection } from "./cancellation.js";
 import type { ArrayAssignment } from "./arrays/syntax.js";
 import { ArrayOwner } from "./arrays/ledger.js";
+import { type DynamicVariableState } from "./dynamic-variables.js";
 import { PathLookup } from "./path-lookup.js";
 type ResolvedShellLimits = Required<Omit<ShellLimits, "commandLimits">> & Pick<ShellLimits, "commandLimits">;
 export declare const defaultLimits: ResolvedShellLimits;
@@ -128,7 +129,7 @@ export declare class Capture implements ByteSink {
     signal: AbortSignal | undefined;
     file?: NonNullable<CommandContext["stdoutFile"]> | undefined;
     constructor(budget?: Budget, signal?: AbortSignal);
-    enableScratchBuffer(isStderr?: boolean): void;
+    enableScratchBuffer(): void;
     get self(): ByteSink;
     get chunks(): Uint8Array[];
     writeSync(chunk: Uint8Array): boolean;
@@ -154,7 +155,7 @@ interface SavedVariable {
     superseded?: boolean;
 }
 declare const valueScope: unique symbol;
-export interface State {
+export interface State extends DynamicVariableState {
     variableAttributes?: Map<string, string>;
     namerefVariables?: Set<string> | undefined;
     umask?: number;
@@ -382,6 +383,7 @@ export declare class Runtime {
     private _syncArithRefs;
     private _syncReadOnlyArithRefs;
     private _activeSyncLoopAssignedVars;
+    private _activeSyncArrayLoopWords;
     private _activeSyncLoopHasFileMutations;
     private _inSyncLoopPreflight;
     private _activeSyncLoopIO;
@@ -451,6 +453,7 @@ export declare class Runtime {
     private applySyncArrayMemberOperator;
     private canSyncArrayMembersWord;
     private tryExpandSyncArrayMembersWord;
+    private syncArraySubscriptWord;
     private tryFastArrayAssignmentSync;
     arrayAssignment(assignment: ArrayAssignment, state: State, io: IO, declaration?: "readonly", origin?: "assignment" | "declaration", associative?: boolean, skipSyncFastPath?: boolean): Promise<void>;
     run(script: Script, state: State, io: IO): Promise<number>;
@@ -510,6 +513,7 @@ export declare class Runtime {
     private trySyncScript;
     private collectSyncLoopAssignedVars;
     private tryAdmitLoopInvariantSubstitution;
+    private admitSyncArrayLoop;
     private isPureSyncValueWord;
     private extractPosixBracketCondExpr;
     private execSyncUnsetStep;
@@ -616,8 +620,6 @@ export declare class Runtime {
     internalDiscovery(name: string, state: State, bypassFunctions?: boolean): Discovery[];
     private tryResolveSyncDiscovery;
     firstInternalDiscovery(name: string, state: State, bypassFunctions?: boolean): Discovery["kind"] | undefined;
-    private getExternalCommand;
-    private hasExternalCommand;
     discoveryBuiltin(context: CommandContext, state: State, io: IO, assignments: Map<string, SavedVariable>, inheritedDefaultPath?: boolean): Promise<number>;
     searchPaths(name: string, state: State, all?: boolean, discovery?: boolean, defaultPath?: boolean): Promise<string[]>;
     processState(context: CommandContext, state: State, io: IO, arg0: ShellValue, args: readonly string[]): State;
@@ -781,6 +783,7 @@ export declare class RootShellState implements State {
     _locals: Map<string, SavedVariable>[] | undefined;
     pipefail: boolean;
     profile: "bash";
+    secondsOrigin: number;
     constructor(cwd: string, variables: Record<string, string>, exported: Set<string> | undefined, extensions: ShellExtensionState | undefined);
     get exported(): Set<string>;
     set exported(value: Set<string>);