@poe-platform/safe-bash 0.1.800 → 0.1.802

package/dist/safe-bash/command-chunks/{chunk-QNIMV57G.js → chunk-XNLFHHOC.js}

@@ -1,6 +1,6 @@
 import {
   AwkArray
-} from "./chunk-V6MSPQLA.js";
+} from "./chunk-6BNTBWIK.js";
 import {
   quoteAwk
 } from "./chunk-EQ4HV54N.js";

package/dist/safe-bash/command-chunks/{chunk-XAFSZDY2.js → chunk-XS72HTMA.js}

@@ -245,6 +245,17 @@ function input(context, name = "-") {
     }
     return readBytes(context.stdin, context.signal);
   }
+  const budget = context.inputBudget;
+  if (budget && Number.isFinite(budget.maxBytes)) {
+    return (async function* () {
+      let total = 0;
+      for await (const bytes of inputFileSlow(context, name)) {
+        total += bytes.byteLength;
+        budget.check(total);
+        yield bytes;
+      }
+    })();
+  }
   const backing = getRuntimeBackingFileSystem(context.fs);
   if (!context.signal.aborted && backing !== void 0 && backing.capabilitiesFor === void 0 && context.fs.readStream && context.fs.capabilities.streamingRead !== false && context.fs.capabilities.read !== false && Object.getPrototypeOf(backing)?.constructor?.name === "MemoryFileSystem" && !Object.prototype.hasOwnProperty.call(backing, "readStream")) {
     const resolvedPath = pathOf(context, name);

package/dist/safe-bash/command-chunks/{chunk-KYSPGS33.js → chunk-YIQACGEW.js}

@@ -27,6 +27,8 @@ function createOriginAuthorizer(allowlist = "*", options = {}) {
   }
   return (request) => {
     const url = new URL(request.url);
+    const hostHeaders = request.headers?.filter(([name]) => name.toLowerCase() === "host") ?? [];
+    if (hostHeaders.length > 1 || hostHeaders.some(([, value]) => value.toLowerCase() !== url.host.toLowerCase())) return false;
     const hostname = url.hostname.toLowerCase().replace(/\.$/u, "");
     if (denyPrivateNetworks) {
       request.requirePrivateNetworkDeny?.();

package/dist/safe-bash/command-chunks/{chunk-NAY27PXB.js → chunk-YOFC45RK.js}

@@ -5,7 +5,7 @@ import {
   outputFailure,
   removeManagedAbortWaiter,
   writeBytes
-} from "./chunk-J5SN3PZ3.js";
+} from "./chunk-VXSLJH7G.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";

package/dist/safe-bash/command-chunks/{chunk-T5H5UJQ3.js → chunk-YVNGTIJO.js}

@@ -1,6 +1,6 @@
 import {
   ProgramError
-} from "./chunk-HLGKIZ25.js";
+} from "./chunk-X54L3DBL.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";

package/dist/safe-bash/command-chunks/{chunk-QI7LGHJJ.js → chunk-Z45N42QC.js}

@@ -51,6 +51,11 @@ function inferDelimiter(path) {
 var shortOptions = { B: "byte-offset", S: "start-condition", E: "end-condition", H: "human-readable", c: "check-alignment", a: "approx", p: "parallel", t: "threads", h: "help", o: "output", d: "delimiter", n: "no-headers", j: "just-names", s: "start", e: "end", l: "len", i: "index", I: "indices", L: "last" };
 var switches = /* @__PURE__ */ new Set(["help", "no-headers", "just-names", "csv", "human-readable", "check-alignment", "approx", "parallel", "raw", "evaluate", "evaluate-file"]);
 var extraShort = {
+  dedup: { s: "select", l: "keep-last", S: "sorted" },
+  enum: { c: "column-name", S: "start" },
+  from: { f: "format" },
+  cat: { p: "pad" },
+  split: { S: "size", O: "out-dir", f: "filename", c: "chunks" },
   head: { l: "limit" },
   tail: { l: "limit" },
   sort: { s: "select", N: "numeric", R: "reverse", u: "uniq" },
@@ -61,9 +66,18 @@ var extraShort = {
   freq: { s: "select", l: "limit", A: "all", N: "no-extra" },
   join: { i: "ignore-case" }
 };
-for (const name of ["numeric", "reverse", "uniq", "exact", "ignore-case", "invert-match", "every-column", "all", "no-extra", "inner", "left", "right", "full", "semi", "anti", "cross", "nulls"]) switches.add(name);
+for (const name of ["keep-last", "sorted", "keep-duplicates", "pad", "sort-keys", "single-object", "omit", "numeric", "reverse", "uniq", "exact", "ignore-case", "invert-match", "every-column", "all", "no-extra", "inner", "left", "right", "full", "semi", "anti", "cross", "nulls"]) switches.add(name);
 var common = ["help", "output", "delimiter"];
 var allowed = {
+  dedup: /* @__PURE__ */ new Set([...common, "no-headers", "select", "keep-last", "sorted", "keep-duplicates"]),
+  enum: /* @__PURE__ */ new Set([...common, "no-headers", "column-name", "start"]),
+  transpose: new Set(common),
+  agg: /* @__PURE__ */ new Set([...common, "no-headers"]),
+  groupby: /* @__PURE__ */ new Set([...common, "no-headers"]),
+  to: /* @__PURE__ */ new Set([...common, "no-headers", "nulls", "omit"]),
+  from: /* @__PURE__ */ new Set([...common, "format", "sort-keys", "single-object", "column-name"]),
+  cat: /* @__PURE__ */ new Set([...common, "no-headers", "pad"]),
+  split: /* @__PURE__ */ new Set(["help", "delimiter", "no-headers", "size", "out-dir", "filename", "chunks"]),
   head: /* @__PURE__ */ new Set([...common, "no-headers", "limit"]),
   tail: /* @__PURE__ */ new Set([...common, "no-headers", "limit"]),
   sort: /* @__PURE__ */ new Set([...common, "no-headers", "select", "numeric", "reverse", "uniq"]),
@@ -149,7 +163,8 @@ async function parseArguments(args, cwd, budget) {
   if (values.has("evaluate") && values.has("evaluate-file")) throw new XanError("conflicting expression modes");
   let rightSelection;
   let operand;
-  if (["search", "filter", "rename"].includes(command)) {
+  if (command === "groupby") rightSelection = operands.shift();
+  if (["search", "filter", "rename", "agg", "groupby", "to", "cat"].includes(command)) {
     operand = operands.shift();
     if (operand === void 0 && !help) throw new XanError(`${command} requires an argument`);
   }
@@ -168,16 +183,16 @@ async function parseArguments(args, cwd, budget) {
   }
   if (values.has("limit")) await unsigned(values.get("limit"), "--limit", budget);
   if (selection === void 0 && !help) throw new UsageError("Usage:\n    xan select [options] [--] <selection> [<input>]\n    xan select --help\n\nInvalid subcommand or arguments! Use the -h/--help flag for more information.");
-  if (command !== "headers" && command !== "join" && operands.length > 1) throw new XanError("too many input files");
+  if (command !== "headers" && command !== "join" && command !== "cat" && operands.length > 1) throw new XanError("too many input files");
   if (operands.filter((path2) => path2 === "-").length > 1) throw new XanError("stdin may appear only once");
   if (!operands.length) operands.push("-");
   budget.bound("maxInputFiles", operands.length);
-  const path = (value) => {
+  const path = (value, input = false) => {
     if (!value || value.includes("\0")) throw new XanError("invalid path");
-    if (/\.(gz|zst|cdx|ndjson|jsonl|vcf|gtf|gff2|sam|bed)$/u.test(value)) throw new XanError(`unsupported in bounded CSV profile: format ${value}`);
+    if (input && command !== "from" && /\.(gz|zst|cdx|ndjson|jsonl|vcf|gtf|gff2|sam|bed)$/u.test(value)) throw new XanError(`unsupported in bounded CSV profile: format ${value}`);
     return value === "-" ? value : resolvePath(cwd, value);
   };
-  for (const operand2 of operands) path(operand2);
+  for (const operand2 of operands) path(operand2, true);
   const output = values.get("output");
   if (output !== void 0) path(output);
   let delimiter;

package/dist/safe-bash/command-chunks/{chunk-67IQF5GC.js → chunk-ZYHTWNAE.js}

@@ -3,21 +3,21 @@ import {
 } from "./chunk-PTT3I223.js";
 import {
   splitRegex
-} from "./chunk-3DT2YOGW.js";
+} from "./chunk-VSRGNQCP.js";
 import {
   matchRegex,
   scanRegex,
   substituteRegex
-} from "./chunk-BKCNF5U3.js";
+} from "./chunk-KQLD3AED.js";
 import {
   formatValue
-} from "./chunk-53P53XFM.js";
+} from "./chunk-BPE5INLI.js";
 import {
   indices
-} from "./chunk-2QHG43WJ.js";
+} from "./chunk-4BB2SWJ5.js";
 import {
   capture
-} from "./chunk-GI4CJED2.js";
+} from "./chunk-CQTRW45K.js";
 import {
   fromDateIso8601,
   gmtime,
@@ -28,7 +28,7 @@ import {
 } from "./chunk-GMIHJYDG.js";
 import {
   delpaths
-} from "./chunk-TYCGMRLM.js";
+} from "./chunk-OYYV7ZAF.js";
 import {
   binary,
   compare,
@@ -42,7 +42,7 @@ import {
   sortedKeys,
   stableSort,
   type
-} from "./chunk-UMDIOL3O.js";
+} from "./chunk-KXU3IRUO.js";
 import {
   splitString
 } from "./chunk-HMOZ6XVJ.js";
@@ -51,7 +51,7 @@ import {
   measureValue,
   parseJson,
   stringify
-} from "./chunk-YGC6OS5O.js";
+} from "./chunk-WECIOOQB.js";
 import {
   JqError,
   JqHalt,
@@ -1810,7 +1810,21 @@ var Interpreter = class _Interpreter {
     }
     if (name === "split") {
       for await (const separator of this.run(args[0], input)) {
-        yield await splitString(input, separator, budget);
+        if (!args[1]) {
+          yield await splitString(input, separator, budget);
+          continue;
+        }
+        for await (const flags of this.run(args[1], input)) {
+          const parts = [];
+          let bytes = 2;
+          for await (const part of splitRegex(input, separator, budget, flags)) {
+            budget.collection(parts.length + 1);
+            bytes += budget.value(part) + (parts.length ? 1 : 0);
+            if (bytes > budget.limits.maxValueBytes) throw new JqLimitError("maxValueBytes");
+            parts.push(part);
+          }
+          yield parts;
+        }
       }
       return;
     }

package/dist/safe-bash/command-chunks/{chunk-STC3LEWJ.js → chunk-ZYXH3B66.js}

@@ -67,7 +67,8 @@ function parseUrl(text, redirect = false) {
 function requestHeaders(args, contentType, user, scoped, maxBytes, previous) {
   const json = args.data[0]?.kind === "json";
   if (json) contentType = "application/json";
-  const defaults = [["Accept", json ? "application/json" : "*/*"], ["User-Agent", args.agent ?? "virtual-bash-curl/0.0"]];
+  const defaults = [["Accept", json ? "application/json" : "*/*"]];
+  if (args.agent !== "") defaults.push(["User-Agent", args.agent ?? "virtual-bash-curl/0.0"]);
   if (contentType !== void 0) defaults.push(["Content-Type", contentType]);
   if (args.compressed) defaults.push(["Accept-Encoding", "gzip, deflate"]);
   const referer = args.autoReferer && previous !== void 0 ? previous : args.referer;
@@ -372,10 +373,12 @@ async function transfer(context, args, input, limits, transport, authorize, star
         values.method = method;
         let denyPrivateNetworks = false;
         let allowed;
+        const headers = requestHeaders(resumeOffset ? { ...args, range: `${resumeOffset}-` } : args, currentBody?.contentType, args.user ?? parsed.user, credentialsInScope, limits.maxHeaderBytes, previous);
         try {
           allowed = await withSignal(() => authorize({
             url: currentUrl,
             method,
+            headers,
             attempt,
             signal,
             requirePrivateNetworkDeny() {
@@ -393,7 +396,6 @@ async function transfer(context, args, input, limits, transport, authorize, star
         if (policy.denyPrivateNetworks && transport.supportsPrivateNetworkDeny !== true) {
           throw new CurlError(7, "Transport cannot enforce private network policy");
         }
-        const headers = requestHeaders(resumeOffset ? { ...args, range: `${resumeOffset}-` } : args, currentBody?.contentType, args.user ?? parsed.user, credentialsInScope, limits.maxHeaderBytes, previous);
         if (args.verbose) await writeBytes(context.stderr, encode(`> ${method} ${current.origin}
 ${headers.map(([name]) => `> ${name}: [redacted]
 `).join("")}`), signal);
@@ -545,7 +547,7 @@ ${headers.map(([name]) => `> ${name}: [redacted]
               }
               if (!final.contentDecoded && length && /^\d+$/.test(length) && downloaded !== Number(length)) throw new CurlError(18, "Partial HTTP response body");
             })();
-            const decoded = args.compressed && !args.raw && !final.contentDecoded && encoding ? decodeContent(encoded, encoding, bodySignal, args.maxFileSize) : encoded;
+            const decoded = args.compressed && !args.raw && !final.contentDecoded && encoding ? decodeContent(encoded, encoding, bodySignal, args.maxFileSize, limits.maxEncodingLayers) : encoded;
             let outputBytes = 0;
             try {
               for await (const chunk of decoded) {

package/dist/safe-bash/commands/apply-patch/index.browser.js

@@ -0,0 +1,14 @@
+import {
+  applyPatchCommands,
+  createApplyPatchCommand,
+  createApplyPatchCommands,
+  evalSyncApplyPatch
+} from "../../chunks/chunk-XAQMU6OY.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
+export {
+  applyPatchCommands,
+  createApplyPatchCommand,
+  createApplyPatchCommands,
+  evalSyncApplyPatch
+};

package/dist/safe-bash/commands/archive/index.browser.js

@@ -0,0 +1,36 @@
+import {
+  DEFAULT_ARCHIVE_LIMITS,
+  archiveCommands,
+  createArchiveCommands,
+  createTarCommand,
+  createTarCommands,
+  createUnzipCommand,
+  createUnzipCommands,
+  createZipCommand,
+  createZipCommands,
+  evalSyncTar,
+  evalSyncUnzip,
+  evalSyncZip,
+  tarCommands,
+  unzipCommands,
+  zipCommands
+} from "../../chunks/chunk-QGUV42T5.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
+export {
+  DEFAULT_ARCHIVE_LIMITS,
+  archiveCommands,
+  createArchiveCommands,
+  createTarCommand,
+  createTarCommands,
+  createUnzipCommand,
+  createUnzipCommands,
+  createZipCommand,
+  createZipCommands,
+  evalSyncTar,
+  evalSyncUnzip,
+  evalSyncZip,
+  tarCommands,
+  unzipCommands,
+  zipCommands
+};

package/dist/safe-bash/commands/bytes/compression/index.js

@@ -1,3 +1,4 @@
+import { withInputByteBudget } from "../../../../safe-bash-contracts/index.js";
 import { createGzipCommands } from "../../../../safe-bash-command-gzip/index.js";
 import { gzip as pakoGzip, ungzip as pakoUngzip } from "pako";
 import bz2Factory from "../../../../safe-bash-compression-engine/native/bz2.js";
@@ -22,7 +23,7 @@ export function createCompressionCommands(config = {}) {
     if (maxDecodedBytes !== undefined && maxDecodedBytes !== Infinity && (!Number.isSafeInteger(maxDecodedBytes) || maxDecodedBytes < 0)) {
         throw new RangeError("maxDecodedBytes must be a nonnegative safe integer or Infinity");
     }
-    const commands = profiles.flatMap(profile => profile.format === "gzip" ? createGzipCommands(config) : profile.format === "bzip2" ? createBzip2Commands(config) : profile.names.map((name) => define(name, async (context) => {
+    const commands = profiles.flatMap(profile => profile.format === "gzip" ? createGzipCommands(config) : profile.format === "bzip2" ? createBzip2Commands(config) : profile.names.map((name) => define(name, withInputByteBudget(async (context) => {
         const options = parseOptions(name, context.args);
         if (options.help) {
             await output(context, `Usage: ${name} [OPTION]... [FILE]...\n-c, --stdout, --to-stdout\n-d, --decompress, --uncompress\n-k, --keep\n-f, --force\n-t, --test\n${options.format === "zstd" ? "-1..-9, --best\nHigher levels and --fast[=NUM] are unsupported by the bounded codec.\n" : "-1..-9, --fast, --best\n"}${options.format === "zstd" ? "-q, --quiet (repeat to suppress errors)\n" : ""}${options.format === "gzip" ? "-q, --quiet (suppress warnings)\n-r, --recursive (traverse directories without following symlinks)\n-n, --no-name (always enabled)\n" : `Default compression level: ${options.level}.\n`}-h, --help\nNo FILE or FILE '-' uses stdin; file output uses private VFS staging.\n`);
@@ -80,7 +81,7 @@ export function createCompressionCommands(config = {}) {
             }
         }
         return { exitCode };
-    })));
+    }))));
     const xzCmds = createXzCommands(config);
     if (maxDecodedBytes === undefined || maxDecodedBytes === Infinity) {
         for (const c of [...commands, ...xzCmds])

package/dist/safe-bash/commands/column/index.browser.js

@@ -0,0 +1,12 @@
+import {
+  columnCommands,
+  createColumnCommand,
+  createColumnCommands
+} from "../../chunks/chunk-3HQU4OJO.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
+export {
+  columnCommands,
+  createColumnCommand,
+  createColumnCommands
+};

package/dist/safe-bash/commands/copy-preserve.d.ts

@@ -2,6 +2,7 @@ import { type CommandContext, type FileStat } from "../contracts/index.js";
 import type { copyOptions } from "./copy-backup.js";
 export type CopyAttribute = "mode" | "ownership" | "timestamps" | "links";
 export type CopyOptions = ReturnType<typeof copyOptions> & {
+    readonly maxRecursiveDirectoryDepth?: number;
     readonly confirmOverwrite?: (operand: string) => Promise<boolean>;
 };
 export declare function admitCopyPreservation(context: CommandContext, preserve: ReadonlySet<CopyAttribute>, source: FileStat, target: string, existing?: FileStat): Promise<void>;

package/dist/safe-bash/commands/csplit/index.browser.js

@@ -3,8 +3,8 @@ import {
   createCsplitCommands,
   csplitCommands,
   evalSyncCsplit
-} from "../../chunks/chunk-QU3BVQ53.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-UTBUUFDM.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createCsplitCommand,
   createCsplitCommands,

package/dist/safe-bash/commands/docx/index.browser.js

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-B7TAL7S5.js";
 
 // packages/safe-bash/src/commands/docx/index.ts
 init_platform();

package/dist/safe-bash/commands/du/index.browser.js

@@ -0,0 +1,14 @@
+import {
+  createDuCommand,
+  createDuCommands,
+  duCommands,
+  evalSyncDu
+} from "../../chunks/chunk-GEG3BWGE.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
+export {
+  createDuCommand,
+  createDuCommands,
+  duCommands,
+  evalSyncDu
+};

package/dist/safe-bash/commands/execution.js

@@ -166,8 +166,8 @@ export function executionCommands(execute, configuration = {}) {
             let lastDelimMode;
             const longOptions = { "arg-file": "a", "max-lines": "L", null: "0", "no-run-if-empty": "r", "max-args": "n", "max-chars": "s", replace: "I", delimiter: "d", verbose: "t", "max-procs": "P", exit: "x", eof: "E", "process-slot-var": "process-slot-var:" };
             const parsed = options(argumentValues.args, shortOptions, longOptions, true, index => { operandIndices.push(index); }, (key, index, offset) => { if (key === "I")
-                replacementOrigin = { index, offset }; }, key => {
-                if (key === "I" || key === "L" || key === "n")
+                replacementOrigin = { index, offset }; }, (key, optionValue) => {
+                if (key === "I" || key === "L" || key === "n" && !(batching === "I" && integer(optionValue, 1) === 1))
                     batching = key;
                 if (key === "0" || key === "d")
                     lastDelimMode = key;
@@ -189,7 +189,7 @@ export function executionCommands(execute, configuration = {}) {
             const argumentFile = value(parsed, "a");
             const childInput = argumentFile === undefined ? emptyInput() : context.stdin;
             const childInputIsDefault = argumentFile === undefined ? true : context.stdinIsDefault;
-            const maxArgs = replacement === undefined ? integer(batching === "n" ? value(parsed, "n") : (maxLines === undefined ? "5000" : String(Number.MAX_SAFE_INTEGER)), 1) : 1;
+            const maxArgs = replacement !== undefined ? 1 : batching === "n" ? integer(value(parsed, "n"), 1) : Infinity;
             const size = value(parsed, "s");
             const maxBytes = size === undefined || size === "Infinity" ? Infinity : integer(size, 1);
             let delimiter = parsed.flags.has("0") ? "\0" : undefined;
@@ -703,9 +703,11 @@ export function evalSyncXargs(inBytes, opArgs, readFileSync) {
                 const v = a.slice(11);
                 if (!/^[1-9][0-9]*$/.test(v))
                     return undefined;
-                maxArgs = Number(v);
-                replaceStr = undefined;
-                maxLines = undefined;
+                if (replaceStr === undefined || Number(v) !== 1) {
+                    maxArgs = Number(v);
+                    replaceStr = undefined;
+                    maxLines = undefined;
+                }
                 i++;
                 continue;
             }
@@ -733,9 +735,11 @@ export function evalSyncXargs(inBytes, opArgs, readFileSync) {
                 const v = a.startsWith("-n") && a.length > 2 ? a.slice(2) : opArgs[++i];
                 if (!v || !/^[1-9][0-9]*$/.test(v))
                     return undefined;
-                maxArgs = Number(v);
-                replaceStr = undefined;
-                maxLines = undefined;
+                if (replaceStr === undefined || Number(v) !== 1) {
+                    maxArgs = Number(v);
+                    replaceStr = undefined;
+                    maxLines = undefined;
+                }
                 i++;
                 continue;
             }
@@ -796,9 +800,11 @@ export function evalSyncXargs(inBytes, opArgs, readFileSync) {
                             ok = false;
                             break;
                         }
-                        maxArgs = Number(v);
-                        replaceStr = undefined;
-                        maxLines = undefined;
+                        if (replaceStr === undefined || Number(v) !== 1) {
+                            maxArgs = Number(v);
+                            replaceStr = undefined;
+                            maxLines = undefined;
+                        }
                         break;
                     }
                     else if (ch === "L") {
@@ -1120,7 +1126,7 @@ export function evalSyncXargs(inBytes, opArgs, readFileSync) {
                 runEcho(batch);
         }
         else {
-            const limit = maxArgs ?? 5000;
+            const limit = maxArgs ?? Infinity;
             for (let k = 0; k < tokens.length; k += limit) {
                 runEcho(tokens.slice(k, k + limit));
             }

package/dist/safe-bash/commands/expr/index.browser.js

@@ -0,0 +1,12 @@
+import {
+  createExprCommand,
+  createExprCommands,
+  exprCommands
+} from "../../chunks/chunk-HZ7BWKQ3.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
+export {
+  createExprCommand,
+  createExprCommands,
+  exprCommands
+};

package/dist/safe-bash/commands/factor/index.browser.js

@@ -2,8 +2,8 @@ import {
   createFactorCommand,
   createFactorCommands,
   factorCommands
-} from "../../chunks/chunk-MHZ24KEI.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-AM5ESLPH.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createFactorCommand,
   createFactorCommands,

package/dist/safe-bash/commands/file/index.browser.js

@@ -0,0 +1,14 @@
+import {
+  createFileCommand,
+  createFileCommands,
+  evalSyncFile,
+  fileCommands
+} from "../../chunks/chunk-4BSJLKNM.js";
+import "../../chunks/chunk-IWDICZVK.js";
+import "../../chunks/chunk-B7TAL7S5.js";
+export {
+  createFileCommand,
+  createFileCommands,
+  evalSyncFile,
+  fileCommands
+};

package/dist/safe-bash/commands/filesystem.d.ts

@@ -1,7 +1,7 @@
 import { type CommandDefinition, type CommandHandler } from "../contracts/index.js";
 export declare const defaultMkdirExecutors: WeakSet<CommandHandler>;
 export declare const defaultRmExecutors: WeakSet<CommandHandler>;
-export declare function filesystemCommands(maxDirectoryEntries?: number): CommandDefinition[];
+export declare function filesystemCommands(maxDirectoryEntries?: number, maxRecursiveDirectoryDepth?: number): CommandDefinition[];
 export interface SyncFsStatNode {
     readonly type: "file" | "directory" | "symlink";
     readonly size: number;

package/dist/safe-bash/commands/filesystem.js

@@ -27,7 +27,6 @@ import { backupCopyTarget, copyOptions, matchBackupMode, normalizeBackupSuffix }
 import { admitCopyPreservation, preserveCopyMetadata } from "./copy-preserve.js";
 // Operand directories start at depth zero; files inside the last admitted
 // directory do not consume another directory-recursion level.
-const MAX_RECURSIVE_DIRECTORY_DEPTH = 1024;
 const MKDIR_LONG_OPTIONS = Object.freeze({ parents: "p", mode: "m", verbose: "v" });
 const TOUCH_LONG_OPTIONS = Object.freeze({ "no-create": "c", "no-dereference": "h", reference: "r", date: "d", time: "time:" });
 const MV_LONG_OPTIONS = Object.freeze({
@@ -312,8 +311,8 @@ async function copy(context, source, target, settings, readDirectory, top = true
         if (targetStat && targetStat.type !== "directory")
             throw new FsError("ENOTDIR", { path: target });
         context.signal.throwIfAborted();
-        if (ancestors.size > MAX_RECURSIVE_DIRECTORY_DEPTH) {
-            throw new FsError("ELOOP", { path: source, message: `cp directory depth limit exceeded (${MAX_RECURSIVE_DIRECTORY_DEPTH})` });
+        if (ancestors.size > (settings.maxRecursiveDirectoryDepth ?? Infinity)) {
+            throw new FsError("ELOOP", { path: source, message: `cp directory depth limit exceeded (${settings.maxRecursiveDirectoryDepth})` });
         }
         await admitFilesystemModes(context, "cp", [attributesOnly ? "attributes-recursive" : "recursive"], [target]);
         const capabilities = await context.fs.capabilitiesFor?.(target, { signal: context.signal }) ?? context.fs.capabilities;
@@ -511,7 +510,10 @@ function modeText(stat) {
 }
 export const defaultMkdirExecutors = new WeakSet();
 export const defaultRmExecutors = new WeakSet();
-export function filesystemCommands(maxDirectoryEntries) {
+export function filesystemCommands(maxDirectoryEntries, maxRecursiveDirectoryDepth = Infinity) {
+    if (maxRecursiveDirectoryDepth !== Infinity && (!Number.isSafeInteger(maxRecursiveDirectoryDepth) || maxRecursiveDirectoryDepth < 0)) {
+        throw new RangeError("maxRecursiveDirectoryDepth must be a nonnegative safe integer or Infinity");
+    }
     const readDirectory = createDirectoryReader(maxDirectoryEntries);
     const commands = [
         define("mkdir", context => {
@@ -575,10 +577,17 @@ export function filesystemCommands(maxDirectoryEntries) {
                         if (admitted) {
                             const effectiveMode = backingMem.capabilities.permissions !== false ? 0o777 & ~umask : undefined;
                             let allCreated = true;
+                            ended = false;
                             for (let i = 0; i < rawArgs.length; i++) {
                                 const a = rawArgs[i];
-                                if (a === "--" || a === "-p" || a === "--parents")
-                                    continue;
+                                if (!ended) {
+                                    if (a === "--") {
+                                        ended = true;
+                                        continue;
+                                    }
+                                    if (a === "-p" || a === "--parents")
+                                        continue;
+                                }
                                 if (!backingMem.tryMkdirFastSync(pathOf(context, a), recursive, effectiveMode)) {
                                     allCreated = false;
                                     break;
@@ -702,7 +711,7 @@ export function filesystemCommands(maxDirectoryEntries) {
         }),
         createTouchCommand(),
         define("cp", async (context) => {
-            const parsed = copyOptions(context);
+            const parsed = { ...copyOptions(context), maxRecursiveDirectoryDepth };
             if ((parsed.values.get("t")?.length ?? 0) > 1)
                 throw new UsageError("multiple target directories specified");
             const destination = await destinations(context, parsed.operands, value(parsed, "t"), parsed.flags.has("T"));
@@ -1044,9 +1053,11 @@ export function filesystemCommands(maxDirectoryEntries) {
                 if (!parsed.flags.has("f"))
                     requireOperands(parsed.operands);
                 const recursive = parsed.flags.has("r") || parsed.flags.has("R");
+                const recursiveTraversal = recursive && (interactive === "always" || maxRecursiveDirectoryDepth !== Infinity);
                 const backingMem = getRuntimeBackingFileSystem(context.fs);
                 const caps = context.fs.capabilities;
                 const fastStockMemory = interactive === "never" &&
+                    !recursiveTraversal &&
                     backingMem !== undefined &&
                     backingMem.capabilitiesFor === undefined &&
                     backingMem.symlinkCount === 0 &&
@@ -1132,14 +1143,14 @@ export function filesystemCommands(maxDirectoryEntries) {
                         }
                         if (stat.type === "directory" && !recursive && !parsed.flags.has("d"))
                             throw new FsError("EISDIR", { path });
-                        if (interactive === "always") {
+                        if (interactive === "always" || recursiveTraversal) {
                             const display = escapeText(operand, "display");
                             if (stat.type === "directory" && recursive) {
-                                if (depth > MAX_RECURSIVE_DIRECTORY_DEPTH)
+                                if (depth > maxRecursiveDirectoryDepth)
                                     throw new FsError("ELOOP", { path });
                                 const entries = await readDirectory(context, path, true);
                                 if (entries.length) {
-                                    if (!await confirm(`descend into directory '${display}'`))
+                                    if (interactive === "always" && !await confirm(`descend into directory '${display}'`))
                                         return false;
                                     let removed = true;
                                     for (const entry of entries)
@@ -1150,10 +1161,10 @@ export function filesystemCommands(maxDirectoryEntries) {
                                 }
                             }
                             const type = stat.type === "file" ? stat.size === 0 ? "regular empty file" : "regular file" : stat.type === "symlink" ? "symbolic link" : "directory";
-                            if (!await confirm(`remove ${type} '${display}'`))
+                            if (interactive === "always" && !await confirm(`remove ${type} '${display}'`))
                                 return false;
                         }
-                        if (stat.type === "directory" && (!recursive || interactive === "always")) {
+                        if (stat.type === "directory" && (!recursive || recursiveTraversal)) {
                             try {
                                 await removeEmptyDirectory(context, path, readDirectory);
                             }
@@ -1633,8 +1644,8 @@ export function filesystemCommands(maxDirectoryEntries) {
                 if (ancestors.has(physical))
                     throw new FsError("ELOOP", { path });
                 context.signal.throwIfAborted();
-                if (ancestors.size > MAX_RECURSIVE_DIRECTORY_DEPTH) {
-                    throw new FsError("ELOOP", { path, message: `ls directory depth limit exceeded (${MAX_RECURSIVE_DIRECTORY_DEPTH})` });
+                if (ancestors.size > maxRecursiveDirectoryDepth) {
+                    throw new FsError("ELOOP", { path, message: `ls directory depth limit exceeded (${maxRecursiveDirectoryDepth})` });
                 }
                 ancestors.add(physical);
                 try {
@@ -1712,7 +1723,7 @@ export function filesystemCommands(maxDirectoryEntries) {
     for (const command of commands) {
         if (command.name === "mkdir")
             defaultMkdirExecutors.add(command.execute);
-        else if (command.name === "rm")
+        else if (command.name === "rm" && maxRecursiveDirectoryDepth === Infinity)
             defaultRmExecutors.add(command.execute);
     }
     return commands;

package/dist/safe-bash/commands/getopt/index.browser.js

@@ -3,8 +3,8 @@ import {
   createGetoptCommands,
   evalSyncGetopt,
   getoptCommands
-} from "../../chunks/chunk-3L3T6LYV.js";
-import "../../chunks/chunk-YG5WAHK7.js";
+} from "../../chunks/chunk-AUSNDQTJ.js";
+import "../../chunks/chunk-B7TAL7S5.js";
 export {
   createGetoptCommand,
   createGetoptCommands,