@poe-platform/safe-bash 0.1.802 → 0.1.804

package/dist/safe-bash/command-chunks/chunk-A7MU7762.js

@@ -0,0 +1,200 @@
+import {
+  init_buffer
+} from "./chunk-HX3SHTCE.js";
+
+// packages/safe-bash-command-chmod/src/command.ts
+init_buffer();
+import { modeChange } from "../../safe-bash-io-engine/commands/mode-change.js";
+import { modeChange as modeChange2 } from "../../safe-bash-io-engine/commands/mode-change.js";
+import { bindConditionalMutation } from "@poe-platform/safe-fs/core";
+import { creationUmask } from "../../safe-bash-contracts/runtime-control.js";
+import { FsError } from "../../safe-bash-contracts/index.js";
+import { codeOf, diagnostic, options, pathOf, requireOperands, syncCommandEvaluators, UsageError, value } from "../../safe-bash-io-engine/internal.js";
+import { gnuInformationSync } from "../../safe-bash-io-engine/gnu-information.js";
+import { MetadataBudget, metadataCommand, permissionString, settings } from "../../safe-bash-metadata-engine/index.js";
+function createChmodCommand(configuration = {}) {
+  const configured = settings(configuration);
+  const configuredUmask = configuration.umask === void 0 ? void 0 : configured.umask;
+  return metadataCommand("chmod", async (context) => {
+    const budget = new MetadataBudget(context, configured.limits);
+    const modeOptions = [];
+    let ended = false, referenceValue = false;
+    const args = context.args.flatMap((argument) => {
+      if (referenceValue) {
+        referenceValue = false;
+        return [argument];
+      }
+      if (argument === "--") ended = true;
+      if (ended) return [argument];
+      if (argument === "--reference") referenceValue = true;
+      if (argument.startsWith("-") && argument.length > 1 && "rwxXstugo01234567".includes(argument[1])) {
+        modeOptions.push(argument);
+        return [];
+      }
+      return [argument];
+    });
+    const parsed = options(args, "Rvcf", { recursive: "R", verbose: "v", changes: "c", silent: "f", quiet: "f", reference: "reference:" });
+    const reference = value(parsed, "reference");
+    if (reference !== void 0 && modeOptions.length) throw new UsageError("cannot combine mode and --reference options");
+    requireOperands(parsed.operands, reference === void 0 && !modeOptions.length ? 2 : 1);
+    const mode = modeOptions.length ? modeOptions.join(",") : reference === void 0 ? parsed.operands.shift() : void 0;
+    const mask = configuredUmask ?? Reflect.get(context.fs, creationUmask);
+    const activeUmask = typeof mask === "number" ? mask : configured.umask;
+    const change = mode === void 0 ? void 0 : modeChange(mode, activeUmask);
+    const paths = parsed.operands;
+    if (context.fs.capabilities.readOnly) throw new FsError("EROFS", { syscall: "chmod" });
+    if (!context.fs.chmod || context.fs.capabilities.permissions === false) throw new FsError("ENOTSUP", { syscall: "chmod" });
+    const referenceMode = reference === void 0 ? void 0 : (await context.fs.stat(pathOf(context, reference), { signal: context.signal })).mode & 4095;
+    let exitCode = 0;
+    const visit = async (path, display, depth, top) => {
+      await budget.step(depth);
+      const link = await context.fs.lstat(path, { signal: context.signal });
+      if (link.type === "symlink" && !top) return;
+      const target = link.type === "symlink" ? await context.fs.realpath(path, { signal: context.signal }) : path;
+      const stat = link.type === "symlink" ? await context.fs.stat(target, { signal: context.signal }) : link;
+      const mode2 = referenceMode ?? change(stat);
+      if (parsed.flags.has("R") && stat.type === "directory" && await context.fs.realpath(target, { signal: context.signal }) === "/") throw new FsError("EBUSY", { syscall: "chmod", path, message: "refusing recursive mode changes at virtual root" });
+      const canonicalTarget = await context.fs.realpath(target, { signal: context.signal });
+      const apply = async () => {
+        context.signal.throwIfAborted();
+        const currentCanonical = await context.fs.realpath(target, { signal: context.signal });
+        if (currentCanonical !== canonicalTarget) throw new FsError("EIO", { syscall: "chmod", path, message: "path changed during permission update" });
+        const fresh = await context.fs.lstat(canonicalTarget, { signal: context.signal });
+        if (fresh.type === "symlink" || fresh.type !== stat.type || stat.ino !== void 0 && fresh.ino !== stat.ino || stat.dev !== void 0 && fresh.dev !== stat.dev) throw new FsError("EIO", { syscall: "chmod", path, message: "path changed during permission update" });
+        const capabilities = await context.fs.capabilitiesFor?.(canonicalTarget, { signal: context.signal, conditionalChmod: true }) ?? context.fs.capabilities;
+        context.signal.throwIfAborted();
+        if (capabilities.conditionalChmod !== true) throw new FsError("ENOTSUP", { syscall: "chmod", path, message: "conditional permission updates are not supported" });
+        const parentPath = canonicalTarget.slice(0, canonicalTarget.lastIndexOf("/")) || "/";
+        const ancestorPaths = ["/"];
+        if (parentPath !== "/") {
+          let prefix = "";
+          for (const part of parentPath.split("/").filter(Boolean)) {
+            prefix += `/${part}`;
+            ancestorPaths.push(prefix);
+          }
+        }
+        const ancestors = await Promise.all(ancestorPaths.map(async (entryPath) => ({
+          path: entryPath,
+          stat: await context.fs.lstat(entryPath, { signal: context.signal })
+        })));
+        const parentStat = ancestors.at(-1).stat;
+        const mutation = { signal: context.signal, parent: parentStat, expected: fresh, ancestors };
+        await bindConditionalMutation(
+          fresh.identityScope,
+          { path: canonicalTarget, parent: parentStat, expected: fresh, ancestors },
+          () => context.fs.chmod(canonicalTarget, mode2, mutation)
+        );
+        if (parsed.flags.has("v") || parsed.flags.has("c") && mode2 !== (stat.mode & 4095)) {
+          await budget.output(`mode of '${display}' ${mode2 === (stat.mode & 4095) ? "retained as" : "changed from " + (stat.mode & 4095).toString(8).padStart(4, "0") + " (" + permissionString(stat.mode, stat.type).slice(1) + ") to"} ${mode2.toString(8).padStart(4, "0")} (${permissionString(mode2, stat.type).slice(1)})
+`);
+        }
+      };
+      const deferred = stat.type === "directory" && parsed.flags.has("R") && (stat.mode & 511 & ~mode2) !== 0;
+      if (!deferred) await apply();
+      if (stat.type === "directory" && parsed.flags.has("R")) {
+        const entries = await context.fs.readdir(target, {
+          signal: context.signal,
+          ...Number.isFinite(budget.remainingEntries) ? { maxEntries: budget.remainingEntries } : {}
+        });
+        if (entries.length > budget.remainingEntries) throw new FsError("EFBIG", { message: "metadata traversal limit exceeded" });
+        for (const entry of entries) {
+          if (!entry.name || entry.name === "." || entry.name === ".." || entry.name.includes("/") || entry.name.includes("\0")) throw new FsError("EIO", { message: "invalid directory entry" });
+          try {
+            await visit(`${target.replace(/\/$/u, "")}/${entry.name}`, `${display.replace(/\/$/u, "")}/${entry.name}`, depth + 1, false);
+          } catch (error) {
+            context.signal.throwIfAborted();
+            if (codeOf(error) === "EFBIG") throw error;
+            exitCode = 1;
+            if (!parsed.flags.has("f")) await diagnostic(context, error);
+          }
+        }
+      }
+      if (deferred) await apply();
+    };
+    for (const operand of paths) {
+      try {
+        await visit(pathOf(context, operand), operand, 0, true);
+      } catch (error) {
+        context.signal.throwIfAborted();
+        if (codeOf(error) === "EFBIG") throw error;
+        exitCode = 1;
+        if (!parsed.flags.has("f")) await diagnostic(context, error);
+      }
+    }
+    return { exitCode };
+  });
+}
+function evalSyncChmod(opArgs, umask, chmodNodeSync) {
+  const gnuInfo = gnuInformationSync("chmod", opArgs);
+  if (gnuInfo !== void 0) return gnuInfo;
+  if (!chmodNodeSync) return void 0;
+  try {
+    const modeOptions = [];
+    let ended = false;
+    let referenceValue = false;
+    const args = [];
+    for (const argument of opArgs) {
+      if (referenceValue) {
+        referenceValue = false;
+        args.push(argument);
+        continue;
+      }
+      if (argument === "--") {
+        ended = true;
+        args.push(argument);
+        continue;
+      }
+      if (!ended && argument === "--reference") {
+        referenceValue = true;
+        args.push(argument);
+        continue;
+      }
+      if (!ended && argument.startsWith("-") && argument.length > 1 && "rwxXstugo01234567".includes(argument[1])) {
+        modeOptions.push(argument);
+        continue;
+      }
+      args.push(argument);
+    }
+    const parsed = options(args, "vcf", { verbose: "v", changes: "c", silent: "f", quiet: "f", reference: "reference:" });
+    const reference = value(parsed, "reference");
+    if (reference !== void 0 && modeOptions.length) return void 0;
+    const minOps = reference !== void 0 || modeOptions.length ? 1 : 2;
+    if (parsed.operands.length < minOps) return void 0;
+    let referenceMode;
+    if (reference !== void 0) {
+      if (!chmodNodeSync(reference, (stat) => {
+        referenceMode = stat.mode & 4095;
+        return stat.mode;
+      }) || referenceMode === void 0) {
+        return void 0;
+      }
+    }
+    const mode = modeOptions.length ? modeOptions.join(",") : reference === void 0 ? parsed.operands.shift() : void 0;
+    const change = mode === void 0 ? void 0 : modeChange(mode, umask);
+    let out = "";
+    for (const op of parsed.operands) {
+      let line = "";
+      const ok = chmodNodeSync(op, (stat) => {
+        const oldMode = stat.mode & 4095;
+        const nextMode = (referenceMode ?? change(stat)) & 4095;
+        if (parsed.flags.has("v") || parsed.flags.has("c") && nextMode !== oldMode) {
+          line = `mode of '${op}' ${nextMode === oldMode ? "retained as" : "changed from " + oldMode.toString(8).padStart(4, "0") + " (" + permissionString(oldMode, stat.type).slice(1) + ") to"} ${nextMode.toString(8).padStart(4, "0")} (${permissionString(nextMode, stat.type).slice(1)})
+`;
+        }
+        return nextMode;
+      });
+      if (!ok) return void 0;
+      out += line;
+    }
+    return out;
+  } catch {
+    return void 0;
+  }
+}
+syncCommandEvaluators.evalSyncChmod = evalSyncChmod;
+
+export {
+  createChmodCommand,
+  evalSyncChmod,
+  modeChange2 as modeChange
+};

package/dist/safe-bash/command-chunks/{chunk-ORYGZYKW.js → chunk-ARZMP2L2.js}

@@ -1,6 +1,6 @@
 import {
   SearchError
-} from "./chunk-VGG2DL5Q.js";
+} from "./chunk-TRR4MYWF.js";
 import {
   init_buffer
 } from "./chunk-HX3SHTCE.js";
@@ -144,7 +144,7 @@ var Limits = class {
   }
   async flush() {
     if (this.outPos > 0 && this.outBuf) {
-      const slice = this.usingSharedBuf ? this.outBuf.slice(0, this.outPos) : this.outBuf.subarray(0, this.outPos);
+      const slice = this.outBuf.slice(0, this.outPos);
       this.outPos = 0;
       try {
         await this.write(slice);
@@ -170,7 +170,7 @@ var Limits = class {
         this.outPos = 0;
         try {
           (this._signal ?? this.context.signal).throwIfAborted();
-          const ok = typeof syncSink.writeRangeSync === "function" ? syncSink.writeRangeSync(this.outBuf, len) : syncSink.writeSync(this.outBuf.subarray(0, len));
+          const ok = typeof syncSink.writeRangeSync === "function" ? syncSink.writeRangeSync(this.outBuf, len) : syncSink.writeSync(this.outBuf.slice(0, len));
           if (ok) {
             this.releaseOutBuf();
             return void 0;

package/dist/safe-bash/command-chunks/{chunk-OQKC5ZU2.js → chunk-BAKFZ477.js}

@@ -6,7 +6,7 @@ import {
 init_buffer();
 import { utf8ByteLength, bytesFrom } from "../../safe-bash-byte-engine/index.js";
 import { tryReadMemoryFileViewSync } from "@poe-platform/safe-fs/core";
-import { assertCommandRequirements, collectBytes } from "../../safe-bash-contracts/index.js";
+import { assertCommandRequirements, collectBytes, createCommandArguments, getCommandArguments } from "../../safe-bash-contracts/index.js";
 import { hasYieldCheckpoint } from "../../safe-bash-contracts/yield.js";
 import { chargeRuntimeFileSystemOperation, getRuntimeBackingFileSystem } from "../../safe-bash-contracts/runtime-control.js";
 import { Matcher } from "../../safe-bash-search-engine/matcher.js";
@@ -31,7 +31,10 @@ var RETURN_FALSE = () => false;
 var RETURN_EXIT_ZERO_CMD = () => ({ exitCode: 0 });
 var RETURN_EXIT_ONE_CMD = () => ({ exitCode: 1 });
 function finishPendingRgFlush(flushRes, found, release) {
-  return flushRes.then(found ? RETURN_EXIT_ZERO_CMD : RETURN_EXIT_ONE_CMD).finally(release);
+  return flushRes.then(found ? RETURN_EXIT_ZERO_CMD : RETURN_EXIT_ONE_CMD, (error) => {
+    if (error instanceof OutputClosed) return RESOLVED_EXIT_ZERO;
+    throw error;
+  }).finally(release);
 }
 function resolveToBoolean(promise, found) {
   return promise.then(found ? RETURN_TRUE : RETURN_FALSE);
@@ -46,16 +49,30 @@ function trySearchFileSync(context, args, limits, matcher, printer, target, file
   if (!hasCanonical || !backing) {
     return void 0;
   }
+  const maxBytes = limits.hasFiniteMaxFileBytes ? limits.maxFileBytes : void 0;
   const fastCharge = context._chargeFastFsOp;
-  if (fastCharge) fastCharge.call(context);
-  else {
+  const admitRead = () => {
     context.signal.throwIfAborted();
-    chargeRuntimeFileSystemOperation(context.fs);
-  }
-  const maxBytes = limits.hasFiniteMaxFileBytes ? limits.maxFileBytes : void 0;
-  const view = target.memoryView ?? tryReadMemoryFileViewSync(backing, target.canonicalPath, maxBytes, context.signal);
+    if (fastCharge) fastCharge.call(context);
+    else chargeRuntimeFileSystemOperation(context.fs);
+  };
+  if (target.memoryView !== void 0) admitRead();
+  const view = target.memoryView ?? tryReadMemoryFileViewSync(backing, target.canonicalPath, maxBytes, context.signal, false, admitRead);
   if (view === void 0) return void 0;
   context.inputBudget?.check(view.byteLength);
+  const speculative = limits.speculative;
+  const resume = () => {
+    if (speculative) return void 0;
+    return searchFile(context, args, limits, matcher, printer, target, context.stdin, filename, view).then((result) => {
+      totals.searches += result.stats.searches;
+      totals.searches_with_match += result.stats.searches_with_match;
+      totals.bytes_searched += result.stats.bytes_searched;
+      totals.bytes_printed += result.stats.bytes_printed;
+      totals.matched_lines += result.stats.matched_lines;
+      totals.matches += result.stats.matches;
+      return result.found;
+    });
+  };
   if (!args.hasInfiniteMaxCount && args.maxCount === 0) {
     totals.searches++;
     return false;
@@ -64,7 +81,7 @@ function trySearchFileSync(context, args, limits, matcher, printer, target, file
   const needAll = args.replacement !== void 0 || args.onlyMatching || args.mode === "matches" || args.stats === true;
   const hasExtYield = hasYieldCheckpoint(context.signal);
   const lit = matcher.literalAsciiBytes;
-  if (lit !== void 0 && !args.invert && args.replacement === void 0 && !args.onlyMatching && args.mode !== "matches" && !args.nullData && !args.crlf && binary === "skip" && args.hasInfiniteMaxCount !== false && !hasExtYield && (view.length <= limits.maxLineBytesSmi || view.length <= limits.maxLineBytes) && view.indexOf(0) === -1) {
+  if (lit !== void 0 && !args.invert && args.replacement === void 0 && !args.onlyMatching && args.mode !== "matches" && !args.nullData && !args.crlf && (binary === "text" || binary === "skip" && view.indexOf(0) === -1) && args.hasInfiniteMaxCount !== false && !hasExtYield && (view.length <= limits.maxLineBytesSmi || view.length <= limits.maxLineBytes)) {
     const firstByte = lit[0];
     const litLen = lit.length;
     let matchedLines2 = 0;
@@ -101,7 +118,7 @@ function trySearchFileSync(context, args, limits, matcher, printer, target, file
         const end = newline < 0 ? view.length : newline;
         bytesSearched2 = newline < 0 ? end : end + 1;
         const pending = limits.tick();
-        if (pending) return pending.then(() => void 0);
+        if (pending) return pending.then(resume);
         let count = 0;
         let pos = start;
         while (pos <= end - litLen) {
@@ -150,7 +167,7 @@ function trySearchFileSync(context, args, limits, matcher, printer, target, file
   sharedReadState.skipped = false;
   const batchSizeFn = Number.isFinite(args.maxCount) || args.quiet || args.mode === "with" || args.mode === "without" ? BATCH_SIZE_1 : BATCH_SIZE_128;
   const syncBatches = trySyncLineBatches(view, limits, sharedReadState, binary, args.nullData, batchSizeFn, needAll, args.crlf);
-  if (syncBatches === void 0) return void 0;
+  if (syncBatches === void 0) return resume();
   const maxCountSmi = Number.isFinite(args.maxCount) ? args.maxCount | 0 : 1073741823;
   let pendingTick;
   let matchedLines = 0;
@@ -161,14 +178,14 @@ function trySearchFileSync(context, args, limits, matcher, printer, target, file
     const batch = syncBatches[bIdx];
     const batchRes = matcher.batchSync(batch);
     if (batchRes instanceof Promise) {
-      return (pendingTick ? Promise.all([pendingTick, batchRes]) : batchRes).then(() => void 0);
+      return (pendingTick ? Promise.all([pendingTick, batchRes]) : batchRes).then(resume);
     }
     for (let index = 0; index < batch.length; index++) {
       const line = batch[index];
       bytesSearched = line.offset + line.rawLength;
       const t = limits.tick();
       if (t !== void 0) {
-        if (hasExtYield) return t.then(() => void 0);
+        if (hasExtYield) return t.then(resume);
         pendingTick ??= t;
       }
       const matches = batchRes[index];
@@ -241,13 +258,13 @@ function relativeMatch(match, offset) {
     ...match.captures ? { captures: new Map([...match.captures].map(([key, span]) => [key, { start: span.start - offset, end: span.end - offset }])) } : {}
   };
 }
-async function searchFile(context, args, limits, matcher, printer, target, stdin, filename) {
+async function searchFile(context, args, limits, matcher, printer, target, stdin, filename, admittedBytes) {
   const totals = stats();
   totals.searches = 1;
   if (!args.hasInfiniteMaxCount && args.maxCount === 0) return { found: false, stats: totals };
   const state = { bytesRead: 0, bytesSearched: 0, binaryOffset: null, skipped: false };
   const binary = args.binary === "text" ? "text" : args.binary === "binary" || target.explicit ? "binary" : "skip";
-  let source = target.path === "-" ? stdin : requiredFileInput(context, searchRequirements, "file", target.path, limits.maxFileBytes);
+  let source = target.path === "-" ? stdin : admittedBytes ?? requiredFileInput(context, searchRequirements, "file", target.path, limits.maxFileBytes);
   let crossLineMatches;
   if (matcher.crossLine) {
     const rawBytes = source instanceof Uint8Array ? source : await collectBytes(source, { maxBytes: limits.maxFileBytes, signal: context.signal });
@@ -539,7 +556,7 @@ var PooledRgFastRunner = class {
   args = new ParsedArguments();
   limits = new Limits(DUMMY_CONTEXT, {});
   matcher = new Matcher(EMPTY_PATTERNS, this.args, DUMMY_SESSION, true, true);
-  walker = new Walker(DUMMY_CONTEXT, this.args, this.limits, DUMMY_REPORT, DUMMY_SESSION);
+  walker;
   printer = new Printer(this.args, this.limits);
   totals = stats();
   context = DUMMY_CONTEXT;
@@ -553,9 +570,11 @@ var PooledRgFastRunner = class {
     this.limits.context = DUMMY_CONTEXT;
     this.limits._signal = void 0;
     this.limits.stopped = void 0;
-    for (let i = 0; i < this.args.patterns.length; i++) this.args.patterns[i] = "";
-    for (let i = 0; i < this.args.paths.length; i++) this.args.paths[i] = "";
-    this.walker.context = DUMMY_CONTEXT;
+    this.args.patterns.length = 0;
+    this.args.paths.length = 0;
+    this.args.reset();
+    this.matcher.resetForRun(EMPTY_PATTERNS, this.args, DUMMY_SESSION, true, true);
+    this.walker = void 0;
     this.context = DUMMY_CONTEXT;
     this.fastReadBacking = void 0;
     this.inUse = false;
@@ -586,6 +605,7 @@ var PooledRgFastRunner = class {
       return false;
     } finally {
       target.memoryView = void 0;
+      target.sourceRef = void 0;
     }
   };
 };
@@ -627,7 +647,7 @@ function tryExecuteRgFastSync(context, executor, options) {
       if (runner.matcher.literalAsciiBytes === void 0) return void 0;
       if (!args.hasInfiniteMaxCount && args.maxCount === 0) return RESOLVED_EXIT_ONE;
     }
-    runner.walker.resetForRun(context, args, limits, DUMMY_REPORT, DUMMY_SESSION);
+    runner.walker = new Walker(context, args, limits, DUMMY_REPORT, DUMMY_SESSION);
     runner.printer.resetForRun(args, limits);
     const totals = runner.totals;
     totals.searches = 0;
@@ -656,6 +676,7 @@ function tryExecuteRgFastSync(context, executor, options) {
     return finishPendingRgFlush(flushRes, runner.found, runner.release);
   } catch (error) {
     if (!committing) return void 0;
+    if (error instanceof OutputClosed) return RESOLVED_EXIT_ZERO;
     throw error;
   } finally {
     if (!pendingFlush) runner.release();
@@ -1024,12 +1045,33 @@ ${totals.bytes_searched} bytes searched
     })();
   });
 }
+async function executeRgWithConfig(context, executor, options, path) {
+  try {
+    if (parse(context.args).noConfig) return await executeRgSlow(context, executor, options);
+    const maximum = options.maxFileBytes ?? Infinity;
+    const bytes = await collectBytes(requiredFileInput(context, searchRequirements, "file", pathFor(context, path), maximum), { maxBytes: maximum, signal: context.signal });
+    const configArgs = new TextDecoder("utf-8", { fatal: true }).decode(bytes).split("\n").map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#"));
+    const original = getCommandArguments(context);
+    const argumentsWithConfig = original.slice(0, 0).concat(createCommandArguments(configArgs), original);
+    const configured = Object.create(context, {
+      args: { value: argumentsWithConfig.args },
+      argumentValues: { value: argumentsWithConfig }
+    });
+    return await executeRgSlow(configured, executor, options);
+  } catch (error) {
+    context.signal.throwIfAborted();
+    await diagnostic(context, error);
+    return { exitCode: 2 };
+  }
+}
 function createRgCommand(executor, options = {}) {
   return {
     name: "rg",
     filesystemRequirements: searchRequirements,
     description: "Search virtual files or stdin with recursive filtering and structured results",
     execute(context) {
+      const config = context.env.RIPGREP_CONFIG_PATH;
+      if (config) return executeRgWithConfig(context, executor, options, config);
       const fastSync = tryExecuteRgFastSync(context, executor, options);
       if (fastSync !== void 0) return fastSync;
       return executeRgSlow(context, executor, options);