@poe-platform/safe-bash 0.1.799 → 0.1.801

package/dist/safe-bash/commands/network/types.d.ts

@@ -1,38 +1,2 @@
-import type { HttpTransport } from "../../../safe-bash-contracts/http.js";
-export type { HttpHeaders, HttpRequest, HttpResponse, HttpTransport } from "../../../safe-bash-contracts/http.js";
-export interface NetworkAuthorization {
-    /** Validated HTTP(S) origin with curl request-target spelling; transports must preserve it. */
-    readonly url: string;
-    readonly method: string;
-    readonly redirectFrom?: string;
-    readonly attempt: number;
-    readonly signal: AbortSignal;
-    readonly requirePrivateNetworkDeny?: () => void;
-}
-export type NetworkAuthorizer = (request: NetworkAuthorization) => boolean | Promise<boolean>;
-export interface NetworkLimits {
-    readonly maxUploadBytes: number;
-    readonly maxDownloadBytes: number;
-    readonly maxBufferBytes: number;
-    readonly maxHeaderBytes: number;
-    readonly maxRedirects: number;
-    readonly maxRetries: number;
-    readonly maxUrls: number;
-    readonly maxTimeMs: number;
-    readonly maxTotalTimeMs: number;
-}
-export interface NetworkCommandsOptions {
-    readonly authorize: NetworkAuthorizer;
-    readonly transport?: HttpTransport;
-    /** Portable browser/Worker commands require finite maxUrls and maxBufferBytes. */
-    readonly limits?: Partial<NetworkLimits>;
-    readonly replace?: boolean;
-}
-/** Infinity denotes an omitted quota internally; callers configure finite limits explicitly. */
-export declare const defaultNetworkLimits: Readonly<NetworkLimits>;
-export declare const cloudflareWorkerNetworkLimits: Readonly<NetworkLimits>;
-export declare class CurlError extends Error {
-    readonly exitCode: number;
-    constructor(exitCode: number, message: string);
-}
+export * from "../../../safe-bash-network-engine/types.js";
 //# sourceMappingURL=types.d.ts.map

package/dist/safe-bash/commands/network/types.js

@@ -1,32 +1,2 @@
-/** Infinity denotes an omitted quota internally; callers configure finite limits explicitly. */
-export const defaultNetworkLimits = Object.freeze({
-    maxUploadBytes: Infinity,
-    maxDownloadBytes: Infinity,
-    maxBufferBytes: Infinity,
-    maxHeaderBytes: Infinity,
-    maxRedirects: Infinity,
-    maxRetries: Infinity,
-    maxUrls: Infinity,
-    maxTimeMs: Infinity,
-    maxTotalTimeMs: Infinity,
-});
-export const cloudflareWorkerNetworkLimits = Object.freeze({
-    maxUploadBytes: 4 * 1024 * 1024,
-    maxDownloadBytes: 4 * 1024 * 1024,
-    maxBufferBytes: 1024 * 1024,
-    maxHeaderBytes: 32 * 1024,
-    maxRedirects: 2,
-    maxRetries: 1,
-    maxUrls: 8,
-    maxTimeMs: 10_000,
-    maxTotalTimeMs: 10_000,
-});
-export class CurlError extends Error {
-    exitCode;
-    constructor(exitCode, message) {
-        super(message);
-        this.exitCode = exitCode;
-        this.name = "CurlError";
-    }
-}
+export * from "../../../safe-bash-network-engine/types.js";
 //# sourceMappingURL=types.js.map

package/dist/safe-bash/commands/network/url.d.ts

@@ -1,3 +1,2 @@
-/** Keep curl's request spelling separate from WHATWG host validation. */
-export declare function curlRequestTarget(text: string): string;
+export * from "../../../safe-bash-network-engine/url.js";
 //# sourceMappingURL=url.d.ts.map

package/dist/safe-bash/commands/network/url.js

@@ -1,31 +1,2 @@
-import { CurlError } from "./types.js";
-/** Keep curl's request spelling separate from WHATWG host validation. */
-export function curlRequestTarget(text) {
-    const scheme = text.indexOf("://");
-    if (scheme < 0)
-        throw new CurlError(3, "Malformed URL; explicit HTTP(S) scheme required");
-    let start = scheme + 3;
-    while (start < text.length && !"/?#".includes(text[start])) {
-        if (text[start] === "\\")
-            throw new CurlError(3, "Malformed URL authority");
-        start++;
-    }
-    const fragment = text.indexOf("#", start);
-    const target = text.slice(start, fragment < 0 ? undefined : fragment);
-    const queryIndex = target.indexOf("?");
-    const path = queryIndex < 0 ? target : target.slice(0, queryIndex);
-    const query = queryIndex < 0 ? "" : target.slice(queryIndex);
-    const segments = [];
-    for (const segment of (path || "/").split("/")) {
-        if (segment === "..") {
-            if (segments.length > 1)
-                segments.pop();
-        }
-        else if (segment !== ".")
-            segments.push(segment);
-    }
-    if (path.endsWith("/.") || path.endsWith("/.."))
-        segments.push("");
-    return (segments.join("/") || "/") + query;
-}
+export * from "../../../safe-bash-network-engine/url.js";
 //# sourceMappingURL=url.js.map

package/dist/safe-bash/commands/network/wget.d.ts

@@ -1,4 +1,4 @@
-import { type CommandDefinition } from "../../contracts/index.js";
-import { type NetworkCommandsOptions } from "./types.js";
-export declare function createWgetCommand(options: NetworkCommandsOptions): CommandDefinition;
+import type { NetworkCommandsOptions } from "./types.js";
+export * from "../../../safe-bash-command-wget/wget.js";
+export declare function createWgetCommand(options?: NetworkCommandsOptions): import("../../../safe-bash-contracts/index.js").CommandDefinition;
 //# sourceMappingURL=wget.d.ts.map

package/dist/safe-bash/commands/network/wget.js

@@ -1,334 +1,11 @@
-import { collectNetworkBytes as collectBytes } from "./shared.js";
-import { getCommandArguments } from "../../contracts/index.js";
-import { pathOf } from "../internal.js";
-import { shellValueByteLength, shellValueBytes } from "../../contracts/value.js";
-import { yieldTurn } from "../../contracts/yield.js";
-import { validateRequestHeader } from "./args.js";
-import { createTransferCommand } from "./curl.js";
-import { validateHeaderName } from "#safe-bash-network-platform";
-import { CurlError } from "./types.js";
-async function parseWget(context, limits) {
-    const carrier = getCommandArguments(context);
-    let argumentBytes = 0;
-    for (const value of carrier.values) {
-        if (typeof value === "string" && value.length > limits.maxBufferBytes)
-            throw new CurlError(2, "Arguments exceed host buffer limit");
-        argumentBytes += shellValueByteLength(value);
-        if (argumentBytes > limits.maxBufferBytes)
-            throw new CurlError(2, "Arguments exceed host buffer limit");
-        if (typeof value === "string") {
-            for (let index = 0; index < value.length; index++) {
-                if (index % 1024 === 0)
-                    await yieldTurn(context.signal);
-                const code = value.charCodeAt(index);
-                if (code >= 0xd800 && code <= 0xdbff) {
-                    const next = value.charCodeAt(++index);
-                    if (!(next >= 0xdc00 && next <= 0xdfff))
-                        throw new CurlError(2, "Arguments must be valid UTF-8");
-                }
-                else if (code >= 0xdc00 && code <= 0xdfff)
-                    throw new CurlError(2, "Arguments must be valid UTF-8");
-            }
-            continue;
-        }
-        const bytes = shellValueBytes(value);
-        const decoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
-        for (let offset = 0; offset < bytes.length; offset += 1024) {
-            await yieldTurn(context.signal);
-            try {
-                decoder.decode(bytes.subarray(offset, offset + 1024), { stream: offset + 1024 < bytes.length });
-            }
-            catch (error) {
-                context.signal.throwIfAborted();
-                if (!(error instanceof TypeError) || "code" in error && error.code !== "ERR_ENCODING_INVALID_ENCODED_DATA")
-                    throw error;
-                throw new CurlError(2, "Arguments must be valid UTF-8");
-            }
-        }
-    }
-    const result = {
-        urls: [], data: [], headers: [], include: false, head: false, get: false, location: true,
-        remoteName: true, fail: true, failWithBody: false, silent: false, showError: false,
-        verbose: false, globoff: true, help: false, version: false,
-        retries: Math.min(19, limits.maxRetries), retryDelayMs: 0,
-        maxTimeMs: limits.maxTimeMs, maxRedirects: limits.maxRedirects, maxFileSize: limits.maxDownloadBytes,
-        agent: "virtual-bash-wget/0.0", retryTransport: true, directoryIndex: "index.html",
-        download: { spider: false, resume: false, noClobber: false, contentDisposition: false },
-    };
-    const number = (value, integral) => {
-        let start = 0;
-        let end = value.length;
-        if (!integral) {
-            while (start < end && " \t\n\r\v\f".includes(value[start]))
-                start++;
-            while (end > start && " \t\n\r\v\f".includes(value[end - 1]))
-                end--;
-        }
-        let multiplier = 1;
-        if (!integral) {
-            const units = { s: 1, m: 60, h: 3600, d: 86400 };
-            const unit = units[value[end - 1]];
-            if (unit !== undefined) {
-                multiplier = unit;
-                end--;
-            }
-        }
-        let position = start;
-        if (!integral && (value[position] === "+" || value[position] === "-"))
-            position++;
-        let digits = 0;
-        let dot = false;
-        for (; position < end; position++) {
-            const character = value[position];
-            if (character >= "0" && character <= "9")
-                digits++;
-            else if (!integral && character === "." && !dot)
-                dot = true;
-            else
-                throw new CurlError(2, "Invalid numeric option");
-        }
-        if (!digits)
-            throw new CurlError(2, "Invalid numeric option");
-        const parsed = Number(value.slice(start, end)) * multiplier;
-        if (!Number.isFinite(parsed) || parsed < 0 || parsed > Number.MAX_SAFE_INTEGER)
-            throw new CurlError(2, "Invalid numeric option");
-        return parsed;
-    };
-    const bodies = {};
-    const headers = new Map();
-    let agent;
-    let referer;
-    let ended = false;
-    let inputFile;
-    for (let index = 0; index < context.args.length; index++) {
-        if (index % 128 === 0)
-            await yieldTurn(context.signal);
-        const argument = context.args[index];
-        if (ended || !argument.startsWith("-") || argument === "-") {
-            result.urls.push(argument);
-            continue;
-        }
-        if (argument === "--") {
-            ended = true;
-            continue;
-        }
-        if (!argument.startsWith("--")) {
-            for (let position = 1; position < argument.length; position++) {
-                if (position % 1024 === 0)
-                    await yieldTurn(context.signal);
-                const flag = argument[position];
-                if (flag === "q")
-                    result.silent = true;
-                else if (flag === "c")
-                    result.download.resume = true;
-                else if (flag === "n" && argument[position + 1] === "c") {
-                    result.download.noClobber = true;
-                    position++;
-                }
-                else if (flag === "n" && argument[position + 1] === "v")
-                    position++;
-                else if (flag === "h")
-                    result.help = true;
-                else if (flag === "r")
-                    throw new CurlError(2, "Recursive mirroring is unsupported");
-                else if (["O", "P", "i", "T", "t"].includes(flag)) {
-                    const output = position + 1 < argument.length ? argument.slice(position + 1) : context.args[++index];
-                    if (!output)
-                        throw new CurlError(2, `-${flag} requires a nonempty argument`);
-                    if (flag === "O") {
-                        result.output = output;
-                        result.remoteName = false;
-                    }
-                    else if (flag === "P")
-                        result.outputDirectory = output;
-                    else if (flag === "i")
-                        inputFile = output;
-                    else if (flag === "T") {
-                        const seconds = number(output, false);
-                        result.maxTimeMs = Math.min(seconds === 0 ? Infinity : seconds * 1000, limits.maxTimeMs);
-                    }
-                    else {
-                        const tries = number(output, true);
-                        result.retries = tries === 0 ? limits.maxRetries : Math.min(tries - 1, limits.maxRetries);
-                    }
-                    break;
-                }
-                else
-                    throw new CurlError(2, `Unsupported option: -${flag}`);
-            }
-            continue;
-        }
-        if (argument === "--quiet") {
-            result.silent = true;
-            continue;
-        }
-        if (argument === "--no-verbose")
-            continue;
-        if (argument === "--help") {
-            result.help = true;
-            continue;
-        }
-        if (argument === "--version") {
-            result.version = true;
-            continue;
-        }
-        if (argument === "--spider") {
-            result.download.spider = true;
-            continue;
-        }
-        if (argument === "--continue") {
-            result.download.resume = true;
-            continue;
-        }
-        if (argument === "--no-clobber") {
-            result.download.noClobber = true;
-            continue;
-        }
-        if (argument === "--content-disposition") {
-            result.download.contentDisposition = true;
-            continue;
-        }
-        if (argument === "--recursive")
-            throw new CurlError(2, "Recursive mirroring is unsupported");
-        const equal = argument.indexOf("=");
-        const flag = equal < 0 ? argument : argument.slice(0, equal);
-        let operand;
-        if (["--directory-prefix", "--input-file", "--output-document", "--timeout", "--tries", "--method", "--post-data", "--post-file", "--body-data", "--body-file", "--header", "--user-agent", "--referer"].includes(flag)) {
-            operand = equal < 0 ? context.args[++index] : argument.slice(equal + 1);
-        }
-        else
-            throw new CurlError(2, `Unsupported option: ${argument}`);
-        if (operand === undefined)
-            throw new CurlError(2, `${flag} requires an argument`);
-        if (flag === "--output-document") {
-            if (!operand)
-                throw new CurlError(2, "Output filename must not be empty");
-            result.output = operand;
-            result.remoteName = false;
-        }
-        else if (flag === "--directory-prefix")
-            result.outputDirectory = operand;
-        else if (flag === "--input-file")
-            inputFile = operand;
-        else if (flag === "--timeout") {
-            const seconds = number(operand, false);
-            result.maxTimeMs = Math.min(seconds === 0 ? Infinity : seconds * 1000, limits.maxTimeMs);
-        }
-        else if (flag === "--tries") {
-            const tries = number(operand, true);
-            result.retries = tries === 0 ? limits.maxRetries : Math.min(tries - 1, limits.maxRetries);
-        }
-        else if (flag === "--header") {
-            if (operand === "") {
-                headers.clear();
-                continue;
-            }
-            const colon = operand.indexOf(":");
-            if (colon < 1)
-                throw new CurlError(2, "Invalid HTTP header");
-            const name = operand.slice(0, colon);
-            const value = operand.slice(colon + 1).trim();
-            validateRequestHeader(name, value);
-            headers.set(name.toLowerCase(), [name, value]);
-        }
-        else if (flag === "--user-agent") {
-            validateRequestHeader("User-Agent", operand);
-            agent = operand;
-        }
-        else if (flag === "--referer") {
-            validateRequestHeader("Referer", operand);
-            referer = operand;
-        }
-        else if (flag === "--method") {
-            try {
-                validateHeaderName(operand);
-            }
-            catch {
-                throw new CurlError(2, "Invalid or unsupported HTTP method");
-            }
-            result.method = operand.toUpperCase();
-            if (["CONNECT", "TRACE"].includes(result.method))
-                throw new CurlError(2, "Invalid or unsupported HTTP method");
-        }
-        else {
-            const bodyFlag = flag;
-            if (bodyFlag.endsWith("-file") && !operand)
-                throw new CurlError(2, "Upload filename must not be empty");
-            bodies[bodyFlag] = operand;
-        }
-    }
-    if (agent !== undefined && !headers.has("user-agent"))
-        result.headers.push(["User-Agent", agent === "" ? null : agent]);
-    if (referer !== undefined && !headers.has("referer"))
-        result.headers.push(["Referer", referer]);
-    result.headers.push(...headers.values());
-    const post = bodies["--post-data"] !== undefined || bodies["--post-file"] !== undefined;
-    const customBody = bodies["--body-data"] !== undefined || bodies["--body-file"] !== undefined;
-    if ((post && result.method !== undefined) || (customBody && result.method === undefined) ||
-        (bodies["--post-data"] !== undefined && bodies["--post-file"] !== undefined) ||
-        (bodies["--body-data"] !== undefined && bodies["--body-file"] !== undefined)) {
-        throw new CurlError(2, "Incompatible request body options: use --post-data or --post-file, or --method with --body-data or --body-file");
-    }
-    const data = bodies["--post-data"] ?? bodies["--body-data"];
-    const file = bodies["--post-file"] ?? bodies["--body-file"];
-    if (data !== undefined)
-        result.data.push({ kind: "raw", value: data });
-    // Wget reads '-' as a filename, while curl's binary data mode treats it as stdin.
-    else if (file !== undefined)
-        result.data.push({ kind: "binary", value: `@${file === "-" ? "./-" : file}` });
-    if (!result.help && !result.version) {
-        if (inputFile !== undefined) {
-            let bytes;
-            try {
-                bytes = inputFile === "-" ? await collectBytes(context.stdin, { signal: context.signal, maxBytes: limits.maxBufferBytes }) : await context.fs.readFile(pathOf(context, inputFile), { signal: context.signal, ...(Number.isFinite(limits.maxBufferBytes) ? { maxBytes: limits.maxBufferBytes } : {}) });
-            }
-            catch {
-                context.signal.throwIfAborted();
-                throw new CurlError(26, "Failed reading virtual URL input file");
-            }
-            let text;
-            try {
-                text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-            }
-            catch {
-                throw new CurlError(2, "URL input must be valid UTF-8");
-            }
-            let start = 0;
-            let lines = 0;
-            for (let index = 0; index <= text.length; index++) {
-                if (index % 1024 === 0)
-                    await yieldTurn(context.signal);
-                if (index !== text.length && text[index] !== "\n")
-                    continue;
-                if (index === text.length && start === index)
-                    break;
-                if (++lines > 4096)
-                    throw new CurlError(2, "URL input exceeds 4096-line limit");
-                const url = text.slice(start, index).trim();
-                start = index + 1;
-                if (url)
-                    result.urls.push(url);
-                if (result.urls.length > limits.maxUrls)
-                    throw new CurlError(2, "URL count exceeds host limit");
-            }
-        }
-        if (!result.urls.length)
-            throw new CurlError(2, "An HTTP(S) URL is required");
-        if (result.urls.length > limits.maxUrls)
-            throw new CurlError(2, "URL count exceeds host limit");
-        if (result.download.resume && result.download.noClobber)
-            throw new CurlError(2, "Continue and no-clobber are incompatible");
-        if (result.output === "-" && (result.download.resume || result.download.noClobber))
-            throw new CurlError(2, "Download controls require a file output");
-    }
-    return result;
-}
-export function createWgetCommand(options) {
-    return createTransferCommand(options, {
-        name: "wget", parse: parseWget,
-        help: "Usage: wget [-O FILE|-] [-q|-nv] [-T SECONDS] [-t COUNT] [URL ...]\nDownloads: --spider | -c/--continue | -nc/--no-clobber | -P/--directory-prefix DIR | --content-disposition\nInput: -i/--input-file FILE (VFS URL list; '-' reads stdin)\nRequest headers: --header 'NAME: VALUE' | --user-agent AGENT | --referer URL\nRequest bodies: --post-data DATA | --post-file FILE | --method METHOD [--body-data DATA | --body-file FILE]\nBody files are read from the VFS. Downloads require explicit host authorization. Recursive mirroring is unsupported.\nTimeout (--timeout) is aggregate and host-capped; --tries=0 remains host-capped.\n",
-        version: "virtual-bash wget 0.0 (bounded HTTP HTTPS)\n",
-        status: code => code === 0 ? 0 : [1, 2, 3].includes(code) ? 2 : [23, 26].includes(code) ? 3 : code === 60 ? 5 : code === 22 ? 8 : 4,
-    });
+import { createWgetCommand as createPortableCommand } from "../../../safe-bash-command-wget/index.js";
+import { createDefaultHttpTransport, requiresFiniteUrlLimits } from "#safe-bash-network-platform";
+import { limitsFor } from "./shared.js";
+export * from "../../../safe-bash-command-wget/wget.js";
+export function createWgetCommand(options = {}) {
+    const limits = limitsFor(options.limits);
+    if (requiresFiniteUrlLimits && (!Number.isFinite(limits.maxUrls) || !Number.isFinite(limits.maxBufferBytes)))
+        throw new TypeError("Portable network commands require finite maxUrls and maxBufferBytes limits");
+    return createPortableCommand({ ...options, transport: options.transport ?? createDefaultHttpTransport({ maxHeaderBytes: limits.maxHeaderBytes }) });
 }
 //# sourceMappingURL=wget.js.map

package/dist/safe-bash/commands/node/filesystem.js

@@ -1,4 +1,5 @@
 import { commandLimits } from "../safejs/options.js";
+import { yieldTurn } from "../../../safe-bash-contracts/yield.js";
 import { SafeJsCommandLimitError } from "../safejs/types.js";
 export function nodeReadFile(options, fs, signal, fail, pending) {
     const read = fs.readFile;
@@ -21,11 +22,11 @@ export function nodeReadFile(options, fs, signal, fail, pending) {
         }
         const done = callback;
         const completion = Promise.resolve().then(() => read(path, encoding)).then(async (text) => {
-            await new Promise(resolve => setImmediate(resolve));
+            await yieldTurn(signal);
             signal.throwIfAborted();
             return done(null, text);
         }, async (error) => {
-            await new Promise(resolve => setImmediate(resolve));
+            await yieldTurn(signal);
             signal.throwIfAborted();
             return done(error);
         }).then(() => undefined).catch(fail).finally(() => pending.delete(completion));

package/dist/safe-bash/commands/node/index.browser.js

@@ -2,15 +2,14 @@ import {
   createSafeJsNodeCommand,
   createSafeJsNodeCommands,
   safeJsNodeCommands
-} from "../../chunks/chunk-NX2SQVON.js";
-import "../../chunks/chunk-WVG5SHHQ.js";
-import "../../chunks/chunk-T5KKDMYB.js";
-import "../../chunks/chunk-KTGR4U57.js";
-import "../../chunks/chunk-VYZTG3GV.js";
-import "../../chunks/chunk-PYVEAFJM.js";
-import "../../chunks/chunk-KV7PKOHV.js";
-import "../../chunks/chunk-ENR3HB2B.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-FNDNHAGE.js";
+import "../../chunks/chunk-IVRQ4BXL.js";
+import "../../chunks/chunk-D3ANYGMC.js";
+import "../../chunks/chunk-NZQXYWA3.js";
+import "../../chunks/chunk-74GHTNJA.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createSafeJsNodeCommand as createNodeCommand,
   createSafeJsNodeCommands as createNodeCommands,

package/dist/safe-bash/commands/node/index.d.ts

@@ -8,7 +8,7 @@ export type { NodeBridge, NodeEngineAdapter, NodeEngineInput, NodeEngineResult,
 export type NodeCommandsOptions<Budget = unknown> = NodeCommandOptions<Budget> & {
     readonly replace?: boolean;
 };
-export declare function createNodeCommands<Budget = unknown>(options: NodeCommandsOptions<Budget>): readonly CommandDefinition[];
-export declare function nodeCommands<Budget = unknown>(options: NodeCommandsOptions<Budget>): VirtualShellPlugin;
-export declare function createNodeCommand<Budget = unknown>(options: NodeCommandOptions<Budget>): CommandDefinition;
+export declare function createNodeCommands<Budget = unknown>(options?: NodeCommandsOptions<Budget>): readonly CommandDefinition[];
+export declare function nodeCommands<Budget = unknown>(options?: NodeCommandsOptions<Budget>): VirtualShellPlugin;
+export declare function createNodeCommand<Budget = unknown>(options?: NodeCommandOptions<Budget>): CommandDefinition;
 //# sourceMappingURL=index.d.ts.map

package/dist/safe-bash/commands/node/index.js

@@ -6,11 +6,14 @@ import { NodeHost } from "./host.js";
 import { NodeOwner } from "./lifecycle.js";
 import { buildNodeProgram } from "./program.js";
 import { createSafeJsNodeCommand } from "./safejs.js";
+import { unconfiguredNodeCommand } from "./unconfigured.js";
 import { NODE_PROFILE, NodeProfileError, NodeUsageError, nodeLimits, resolveNodeLimits } from "./types.js";
 import { environment, grants, record, text } from "./values.js";
 export { NODE_PROFILE, NodeProfileError, NodeUsageError, nodeLimits } from "./types.js";
 export { NODE_ENGINE_ABI } from "./worker-types.js";
 function commandConfiguration(options) {
+    if (options === undefined)
+        return { definitions: Object.freeze([unconfiguredNodeCommand]), replace: false };
     const settings = record(options, [], ["provider", "grants", "runtime", "limits", "replace"]);
     if (Object.hasOwn(settings, "replace") && typeof settings.replace !== "boolean")
         throw new TypeError("node replace must be boolean");
@@ -41,6 +44,8 @@ function providerValue(value) {
     return Object.freeze(provider);
 }
 export function createNodeCommand(options) {
+    if (options === undefined)
+        return unconfiguredNodeCommand;
     const selected = record(options, [], ["provider", "grants", "runtime", "limits"]);
     if (Object.hasOwn(selected, "runtime")) {
         const settings = record(selected, ["runtime"], ["limits"]);

package/dist/safe-bash/commands/node/safejs.d.ts

@@ -4,7 +4,7 @@ import type { NodeSafeJsCommandOptions } from "./types.js";
 export type SafeJsNodeCommandsOptions<Budget = unknown> = NodeSafeJsCommandOptions<Budget> & {
     readonly replace?: boolean;
 };
-export declare function createSafeJsNodeCommands<Budget>(options: SafeJsNodeCommandsOptions<Budget>): readonly CommandDefinition[];
-export declare function safeJsNodeCommands<Budget>(options: SafeJsNodeCommandsOptions<Budget>): VirtualShellPlugin;
-export declare function createSafeJsNodeCommand<Budget>(options: NodeSafeJsCommandOptions<Budget>): CommandDefinition;
+export declare function createSafeJsNodeCommands<Budget = unknown>(options?: SafeJsNodeCommandsOptions<Budget>): readonly CommandDefinition[];
+export declare function safeJsNodeCommands<Budget = unknown>(options?: SafeJsNodeCommandsOptions<Budget>): VirtualShellPlugin;
+export declare function createSafeJsNodeCommand<Budget = unknown>(options?: NodeSafeJsCommandOptions<Budget>): CommandDefinition;
 //# sourceMappingURL=safejs.d.ts.map

package/dist/safe-bash/commands/node/safejs.js

@@ -12,7 +12,10 @@ import { createNodePathModule } from "./path.js";
 import { createSafeJsCommands } from "../safejs/runtime.js";
 import { commandLimits } from "../safejs/options.js";
 import { nodeEnvironment } from "./environment.js";
+import { unconfiguredNodeCommand } from "./unconfigured.js";
 export function createSafeJsNodeCommands(options) {
+    if (options === undefined)
+        return Object.freeze([unconfiguredNodeCommand]);
     const settings = record(options, "node options");
     onlyKeys(settings, ["runtime", "limits", "replace"]);
     if (Object.hasOwn(settings, "replace") && typeof settings.replace !== "boolean")
@@ -22,7 +25,7 @@ export function createSafeJsNodeCommands(options) {
 }
 export function safeJsNodeCommands(options) {
     const definitions = createSafeJsNodeCommands(options);
-    const replace = options.replace ?? false;
+    const replace = options?.replace ?? false;
     return { name: "node-commands", setup(host) {
             if (!replace && host.commands.has("node"))
                 throw new Error("Command already registered: node");
@@ -130,6 +133,8 @@ function invocation(args, metadata) {
     return { file: args[index] ?? "-", args: args.slice(index + 1), print: false, help: false, check, preloads, sourceMaps, nodeOptions, envFiles, ...(inputType ? { inputType } : {}) };
 }
 export function createSafeJsNodeCommand(options) {
+    if (options === undefined)
+        return unconfiguredNodeCommand;
     const settings = record(options, "node options");
     onlyKeys(settings, ["runtime", "limits"]);
     if (settings.runtime === undefined || settings.runtime === null)

package/dist/safe-bash/commands/node/types.d.ts

@@ -134,7 +134,7 @@ export interface NodeSafeJsCommandOptions<Budget = unknown> {
     readonly grants?: never;
 }
 export type NodeCommandOptions<Budget = unknown> = NodeProviderCommandOptions | NodeSafeJsCommandOptions<Budget>;
-export type NodeCommandFactory = (options: NodeCommandOptions) => CommandDefinition;
+export type NodeCommandFactory = (options?: NodeCommandOptions) => CommandDefinition;
 export declare class NodeProfileError extends Error {
     readonly resource: string;
     readonly code = "ERR_VNODE_PROFILE";

package/dist/safe-bash/commands/node/types.js

@@ -5,7 +5,7 @@ export function resolveNodeLimits(options = {}) {
     for (const [name, value] of Object.entries(options)) {
         if (name === "sabBytes" || !Object.hasOwn(nodeLimits, name))
             throw new TypeError(`Unknown Node limit: ${name}`);
-        if (!Number.isSafeInteger(value) || value < 0 || ["admissionMs", "oldGenerationMiB", "youngGenerationMiB", "codeMiB", "stackMiB"].includes(name) && value < 1)
+        if (value !== Infinity && (!Number.isSafeInteger(value) || value < 0 || ["admissionMs", "oldGenerationMiB", "youngGenerationMiB", "codeMiB", "stackMiB"].includes(name) && value < 1))
             throw new RangeError(`Invalid Node limit: ${name}`);
     }
     return Object.freeze({ ...nodeLimits, ...options });

package/dist/safe-bash/commands/node/unconfigured.d.ts

@@ -0,0 +1,3 @@
+import type { CommandDefinition } from "../../contracts/command.js";
+export declare const unconfiguredNodeCommand: CommandDefinition;
+//# sourceMappingURL=unconfigured.d.ts.map

package/dist/safe-bash/commands/node/unconfigured.js

@@ -0,0 +1,10 @@
+export const unconfiguredNodeCommand = Object.freeze({
+    name: "node",
+    description: "JavaScript execution requires an explicitly configured runtime",
+    async execute(context) {
+        context.signal.throwIfAborted();
+        await context.stderr.write(new TextEncoder().encode("node: requires an injected runtime or provider\n"));
+        return { exitCode: 2 };
+    },
+});
+//# sourceMappingURL=unconfigured.js.map

package/dist/safe-bash/commands/op/index.browser.js

@@ -19,9 +19,9 @@ import {
   restoreEnvironment,
   selectOpBackendContext,
   selectOpGlobalFlags
-} from "../../chunks/chunk-ZNAFMYIA.js";
-import "../../chunks/chunk-ENR3HB2B.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-UE5KZDEK.js";
+import "../../chunks/chunk-E7OYNDGL.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   captureEnvironment,
   createDocumentHandlers,

package/dist/safe-bash/commands/patch/index.d.ts

@@ -0,0 +1,2 @@
+export * from "../../../safe-bash-command-patch/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/safe-bash/commands/patch/index.js

@@ -0,0 +1,2 @@
+export * from "../../../safe-bash-command-patch/index.js";
+//# sourceMappingURL=index.js.map