@poe-platform/safe-bash 0.1.802 → 0.1.804

package/dist/safe-bash/commands/metadata/chmod.d.ts

@@ -1,8 +1,2 @@
-export { modeChange } from "../../../safe-bash-io-engine/commands/mode-change.js";
-import { type MetadataCommandsOptions } from "./internal.js";
-export declare function createChmodCommand(configuration?: MetadataCommandsOptions): import("../../../safe-bash-contracts/command.js").CommandDefinition;
-export declare function evalSyncChmod(opArgs: readonly string[], umask: number, chmodNodeSync?: (filePath: string, change: (stat: {
-    type: "file" | "directory" | "symlink";
-    mode: number;
-}) => number) => boolean): string | undefined;
+export * from "../../../safe-bash-command-chmod/command.js";
 //# sourceMappingURL=chmod.d.ts.map

package/dist/safe-bash/commands/metadata/chmod.js

@@ -1,205 +1,2 @@
-import { modeChange } from "../../../safe-bash-io-engine/commands/mode-change.js";
-export { modeChange } from "../../../safe-bash-io-engine/commands/mode-change.js";
-import { bindConditionalMutation } from "@poe-platform/safe-fs/core";
-import { creationUmask } from "../../fs/creation-mask.js";
-import { FsError } from "../../contracts/index.js";
-import { codeOf, diagnostic, options, pathOf, requireOperands, syncCommandEvaluators, UsageError, value } from "../internal.js";
-import { gnuInformationSync } from "../gnu-information.js";
-import { MetadataBudget, metadataCommand, permissionString, settings } from "./internal.js";
-export function createChmodCommand(configuration = {}) {
-    const configured = settings(configuration);
-    const configuredUmask = configuration.umask === undefined ? undefined : configured.umask;
-    return metadataCommand("chmod", async (context) => {
-        const budget = new MetadataBudget(context, configured.limits);
-        const modeOptions = [];
-        let ended = false, referenceValue = false;
-        const args = context.args.flatMap(argument => {
-            if (referenceValue) {
-                referenceValue = false;
-                return [argument];
-            }
-            if (argument === "--")
-                ended = true;
-            if (ended)
-                return [argument];
-            if (argument === "--reference")
-                referenceValue = true;
-            if (argument.startsWith("-") && argument.length > 1 && "rwxXstugo01234567".includes(argument[1])) {
-                modeOptions.push(argument);
-                return [];
-            }
-            return [argument];
-        });
-        const parsed = options(args, "Rvcf", { recursive: "R", verbose: "v", changes: "c", silent: "f", quiet: "f", reference: "reference:" });
-        const reference = value(parsed, "reference");
-        if (reference !== undefined && modeOptions.length)
-            throw new UsageError("cannot combine mode and --reference options");
-        requireOperands(parsed.operands, reference === undefined && !modeOptions.length ? 2 : 1);
-        const mode = modeOptions.length ? modeOptions.join(",") : reference === undefined ? parsed.operands.shift() : undefined;
-        const mask = configuredUmask ?? Reflect.get(context.fs, creationUmask);
-        const activeUmask = typeof mask === "number" ? mask : configured.umask;
-        const change = mode === undefined ? undefined : modeChange(mode, activeUmask);
-        const paths = parsed.operands;
-        if (context.fs.capabilities.readOnly)
-            throw new FsError("EROFS", { syscall: "chmod" });
-        if (!context.fs.chmod || context.fs.capabilities.permissions === false)
-            throw new FsError("ENOTSUP", { syscall: "chmod" });
-        const referenceMode = reference === undefined ? undefined : (await context.fs.stat(pathOf(context, reference), { signal: context.signal })).mode & 0o7777;
-        let exitCode = 0;
-        const visit = async (path, display, depth, top) => {
-            await budget.step(depth);
-            const link = await context.fs.lstat(path, { signal: context.signal });
-            if (link.type === "symlink" && !top)
-                return;
-            const target = link.type === "symlink" ? await context.fs.realpath(path, { signal: context.signal }) : path;
-            const stat = link.type === "symlink" ? await context.fs.stat(target, { signal: context.signal }) : link;
-            const mode = referenceMode ?? change(stat);
-            if (parsed.flags.has("R") && stat.type === "directory" && await context.fs.realpath(target, { signal: context.signal }) === "/")
-                throw new FsError("EBUSY", { syscall: "chmod", path, message: "refusing recursive mode changes at virtual root" });
-            const canonicalTarget = await context.fs.realpath(target, { signal: context.signal });
-            const apply = async () => {
-                context.signal.throwIfAborted();
-                const currentCanonical = await context.fs.realpath(target, { signal: context.signal });
-                if (currentCanonical !== canonicalTarget)
-                    throw new FsError("EIO", { syscall: "chmod", path, message: "path changed during permission update" });
-                const fresh = await context.fs.lstat(canonicalTarget, { signal: context.signal });
-                if (fresh.type === "symlink" || fresh.type !== stat.type || stat.ino !== undefined && fresh.ino !== stat.ino || stat.dev !== undefined && fresh.dev !== stat.dev)
-                    throw new FsError("EIO", { syscall: "chmod", path, message: "path changed during permission update" });
-                const capabilities = await context.fs.capabilitiesFor?.(canonicalTarget, { signal: context.signal, conditionalChmod: true }) ?? context.fs.capabilities;
-                context.signal.throwIfAborted();
-                if (capabilities.conditionalChmod !== true)
-                    throw new FsError("ENOTSUP", { syscall: "chmod", path, message: "conditional permission updates are not supported" });
-                const parentPath = canonicalTarget.slice(0, canonicalTarget.lastIndexOf("/")) || "/";
-                const ancestorPaths = ["/"];
-                if (parentPath !== "/") {
-                    let prefix = "";
-                    for (const part of parentPath.split("/").filter(Boolean)) {
-                        prefix += `/${part}`;
-                        ancestorPaths.push(prefix);
-                    }
-                }
-                const ancestors = await Promise.all(ancestorPaths.map(async (entryPath) => ({
-                    path: entryPath,
-                    stat: await context.fs.lstat(entryPath, { signal: context.signal }),
-                })));
-                const parentStat = ancestors.at(-1).stat;
-                const mutation = { signal: context.signal, parent: parentStat, expected: fresh, ancestors };
-                await bindConditionalMutation(fresh.identityScope, { path: canonicalTarget, parent: parentStat, expected: fresh, ancestors }, () => context.fs.chmod(canonicalTarget, mode, mutation));
-                if (parsed.flags.has("v") || parsed.flags.has("c") && mode !== (stat.mode & 0o7777)) {
-                    await budget.output(`mode of '${display}' ${mode === (stat.mode & 0o7777) ? "retained as" : "changed from " + (stat.mode & 0o7777).toString(8).padStart(4, "0") + " (" + permissionString(stat.mode, stat.type).slice(1) + ") to"} ${mode.toString(8).padStart(4, "0")} (${permissionString(mode, stat.type).slice(1)})\n`);
-                }
-            };
-            const deferred = stat.type === "directory" && parsed.flags.has("R") && (stat.mode & 0o777 & ~mode) !== 0;
-            if (!deferred)
-                await apply();
-            if (stat.type === "directory" && parsed.flags.has("R")) {
-                const entries = await context.fs.readdir(target, { signal: context.signal,
-                    ...(Number.isFinite(budget.remainingEntries) ? { maxEntries: budget.remainingEntries } : {}) });
-                if (entries.length > budget.remainingEntries)
-                    throw new FsError("EFBIG", { message: "metadata traversal limit exceeded" });
-                for (const entry of entries) {
-                    if (!entry.name || entry.name === "." || entry.name === ".." || entry.name.includes("/") || entry.name.includes("\0"))
-                        throw new FsError("EIO", { message: "invalid directory entry" });
-                    try {
-                        await visit(`${target.replace(/\/$/u, "")}/${entry.name}`, `${display.replace(/\/$/u, "")}/${entry.name}`, depth + 1, false);
-                    }
-                    catch (error) {
-                        context.signal.throwIfAborted();
-                        if (codeOf(error) === "EFBIG")
-                            throw error;
-                        exitCode = 1;
-                        if (!parsed.flags.has("f"))
-                            await diagnostic(context, error);
-                    }
-                }
-            }
-            if (deferred)
-                await apply();
-        };
-        for (const operand of paths) {
-            try {
-                await visit(pathOf(context, operand), operand, 0, true);
-            }
-            catch (error) {
-                context.signal.throwIfAborted();
-                if (codeOf(error) === "EFBIG")
-                    throw error;
-                exitCode = 1;
-                if (!parsed.flags.has("f"))
-                    await diagnostic(context, error);
-            }
-        }
-        return { exitCode };
-    });
-}
-export function evalSyncChmod(opArgs, umask, chmodNodeSync) {
-    const gnuInfo = gnuInformationSync("chmod", opArgs);
-    if (gnuInfo !== undefined)
-        return gnuInfo;
-    if (!chmodNodeSync)
-        return undefined;
-    try {
-        const modeOptions = [];
-        let ended = false;
-        let referenceValue = false;
-        const args = [];
-        for (const argument of opArgs) {
-            if (referenceValue) {
-                referenceValue = false;
-                args.push(argument);
-                continue;
-            }
-            if (argument === "--") {
-                ended = true;
-                args.push(argument);
-                continue;
-            }
-            if (!ended && argument === "--reference") {
-                referenceValue = true;
-                args.push(argument);
-                continue;
-            }
-            if (!ended && argument.startsWith("-") && argument.length > 1 && "rwxXstugo01234567".includes(argument[1])) {
-                modeOptions.push(argument);
-                continue;
-            }
-            args.push(argument);
-        }
-        const parsed = options(args, "vcf", { verbose: "v", changes: "c", silent: "f", quiet: "f", reference: "reference:" });
-        const reference = value(parsed, "reference");
-        if (reference !== undefined && modeOptions.length)
-            return undefined;
-        const minOps = reference !== undefined || modeOptions.length ? 1 : 2;
-        if (parsed.operands.length < minOps)
-            return undefined;
-        let referenceMode;
-        if (reference !== undefined) {
-            if (!chmodNodeSync(reference, stat => { referenceMode = stat.mode & 0o7777; return stat.mode; }) || referenceMode === undefined) {
-                return undefined;
-            }
-        }
-        const mode = modeOptions.length ? modeOptions.join(",") : reference === undefined ? parsed.operands.shift() : undefined;
-        const change = mode === undefined ? undefined : modeChange(mode, umask);
-        let out = "";
-        for (const op of parsed.operands) {
-            let line = "";
-            const ok = chmodNodeSync(op, stat => {
-                const oldMode = stat.mode & 0o7777;
-                const nextMode = (referenceMode ?? change(stat)) & 0o7777;
-                if (parsed.flags.has("v") || (parsed.flags.has("c") && nextMode !== oldMode)) {
-                    line = `mode of '${op}' ${nextMode === oldMode ? "retained as" : "changed from " + oldMode.toString(8).padStart(4, "0") + " (" + permissionString(oldMode, stat.type).slice(1) + ") to"} ${nextMode.toString(8).padStart(4, "0")} (${permissionString(nextMode, stat.type).slice(1)})\n`;
-                }
-                return nextMode;
-            });
-            if (!ok)
-                return undefined;
-            out += line;
-        }
-        return out;
-    }
-    catch {
-        return undefined;
-    }
-}
-syncCommandEvaluators.evalSyncChmod = evalSyncChmod;
+export * from "../../../safe-bash-command-chmod/command.js";
 //# sourceMappingURL=chmod.js.map

package/dist/safe-bash/commands/metadata/index.browser.js

@@ -4,14 +4,9 @@ import {
   evalSyncStat,
   evalSyncTruncate,
   metadataCommands
-} from "../../chunks/chunk-VSAJ4OTM.js";
-import "../../chunks/chunk-D3ANYGMC.js";
-import "../../chunks/chunk-VTH3MLDU.js";
-import "../../chunks/chunk-NZQXYWA3.js";
-import "../../chunks/chunk-74GHTNJA.js";
-import "../../chunks/chunk-E7OYNDGL.js";
-import "../../chunks/chunk-IWDICZVK.js";
-import "../../chunks/chunk-B7TAL7S5.js";
+} from "../../chunks/chunk-IOHH2GTI.js";
+import "../../chunks/chunk-V7QT2RWC.js";
+import "../../chunks/chunk-PTAEWLSE.js";
 export {
   createMetadataCommands,
   evalSyncMktemp,

package/dist/safe-bash/commands/metadata/index.d.ts

@@ -1,4 +1,3 @@
-import "../../portable-buffer.js";
 import type { CommandDefinition, VirtualShellPlugin } from "../../contracts/index.js";
 import { type MetadataCommandsOptions } from "./internal.js";
 export type { MetadataCommandsOptions, MetadataLimits } from "./internal.js";

package/dist/safe-bash/commands/metadata/index.js

@@ -1,5 +1,5 @@
-import "../../portable-buffer.js";
 import { registerDefaultExecutors } from "../internal.js";
+import { createInstallCommand } from "../../../safe-bash-command-install/index.js";
 import { createChmodCommand } from "./chmod.js";
 import { createStatCommand } from "./stat.js";
 import { createMktempCommand } from "./mktemp.js";
@@ -7,7 +7,7 @@ import { truncateCommand } from "../truncate.js";
 import { settings } from "./internal.js";
 export function createMetadataCommands(options = {}) {
     settings(options);
-    return registerDefaultExecutors([createChmodCommand(options), createStatCommand(options), createMktempCommand(options), truncateCommand(options)], options);
+    return registerDefaultExecutors([createChmodCommand(options), createStatCommand(options), createMktempCommand(options), truncateCommand(options), createInstallCommand()], options);
 }
 export function metadataCommands(options = {}) {
     const commands = createMetadataCommands(options);

package/dist/safe-bash/commands/metadata/internal.d.ts

@@ -1,31 +1,2 @@
-import { type CommandContext, type CommandDefinition, type CommandHandler, type FileType } from "../../contracts/index.js";
-export interface MetadataLimits {
-    readonly maxEntries: number;
-    readonly maxDepth: number;
-    readonly maxOutputBytes: number;
-    readonly maxArgumentBytes: number;
-    readonly maxAttempts: number;
-    readonly maxArguments?: number;
-}
-export interface MetadataCommandsOptions {
-    readonly replace?: boolean;
-    readonly umask?: number;
-    readonly limits?: Partial<MetadataLimits>;
-}
-export declare function settings(options?: MetadataCommandsOptions): {
-    limits: MetadataLimits;
-    umask: number;
-};
-export declare class MetadataBudget {
-    readonly context: CommandContext;
-    readonly limits: MetadataLimits;
-    private entries;
-    private outputBytes;
-    get remainingEntries(): number;
-    constructor(context: CommandContext, limits: MetadataLimits);
-    step(depth?: number): Promise<void>;
-    output(text: string | Uint8Array): Promise<void>;
-}
-export declare function metadataCommand(name: string, handler: CommandHandler): CommandDefinition;
-export declare function permissionString(mode: number, type: FileType): string;
+export * from "../../../safe-bash-metadata-engine/index.js";
 //# sourceMappingURL=internal.d.ts.map

package/dist/safe-bash/commands/metadata/internal.js

@@ -1,77 +1,2 @@
-import { byteLength } from "../../byte-encoding.js";
-import { yieldTurn } from "../../contracts/yield.js";
-import { FsError, writeBytes } from "../../contracts/index.js";
-import { diagnostic } from "../internal.js";
-import { gnuInformation } from "../gnu-information.js";
-export function settings(options = {}) {
-    const limits = { maxEntries: Infinity, maxDepth: Infinity, maxOutputBytes: Infinity, maxArgumentBytes: Infinity, maxAttempts: Infinity, maxArguments: Infinity, ...options.limits };
-    for (const [key, value] of Object.entries(limits)) {
-        if (value !== Infinity && (!Number.isSafeInteger(value) || value < (key === "maxDepth" ? 0 : 1)))
-            throw new RangeError(`Invalid metadata limit: ${key}`);
-    }
-    const umask = options.umask ?? 0o022;
-    if (!Number.isInteger(umask) || umask < 0 || umask > 0o777)
-        throw new RangeError("Invalid metadata umask");
-    return { limits, umask };
-}
-export class MetadataBudget {
-    context;
-    limits;
-    entries = 0;
-    outputBytes = 0;
-    get remainingEntries() { return this.limits.maxEntries - this.entries; }
-    constructor(context, limits) {
-        this.context = context;
-        this.limits = limits;
-        if (context.args.reduce((size, argument) => size + byteLength(argument), 0) > limits.maxArgumentBytes)
-            throw new FsError("EFBIG", { message: "metadata argument limit exceeded" });
-    }
-    async step(depth = 0) {
-        this.context.signal.throwIfAborted();
-        if (++this.entries > this.limits.maxEntries || depth > this.limits.maxDepth)
-            throw new FsError("EFBIG", { message: "metadata traversal limit exceeded" });
-        if (this.entries % 128 === 0)
-            await yieldTurn();
-        this.context.signal.throwIfAborted();
-    }
-    async output(text) {
-        const bytes = typeof text === "string" ? new TextEncoder().encode(text) : text;
-        if (bytes.byteLength > this.limits.maxOutputBytes - this.outputBytes)
-            throw new FsError("EFBIG", { message: "metadata output limit exceeded" });
-        this.outputBytes += bytes.byteLength;
-        await writeBytes(this.context.stdout, bytes, this.context.signal);
-    }
-}
-export function metadataCommand(name, handler) {
-    return { name, async execute(context) {
-            context.signal.throwIfAborted();
-            try {
-                const infoPromise = gnuInformation(name, context);
-                if (infoPromise) {
-                    const info = await infoPromise;
-                    if (info)
-                        return info;
-                }
-                return await handler(context);
-            }
-            catch (error) {
-                context.signal.throwIfAborted();
-                await diagnostic(context, error);
-                return { exitCode: 1 };
-            }
-        } };
-}
-export function permissionString(mode, type) {
-    let text = type === "directory" ? "d" : type === "symlink" ? "l" : type === "character" ? "c" : "-";
-    for (const [read, write, execute, special, lower, upper] of [
-        [0o400, 0o200, 0o100, 0o4000, "s", "S"],
-        [0o040, 0o020, 0o010, 0o2000, "s", "S"],
-        [0o004, 0o002, 0o001, 0o1000, "t", "T"],
-    ]) {
-        text += mode & read ? "r" : "-";
-        text += mode & write ? "w" : "-";
-        text += mode & special ? (mode & execute ? lower : upper) : mode & execute ? "x" : "-";
-    }
-    return text;
-}
+export * from "../../../safe-bash-metadata-engine/index.js";
 //# sourceMappingURL=internal.js.map

package/dist/safe-bash/commands/metadata/mktemp.d.ts

@@ -1,4 +1,2 @@
-import { type MetadataCommandsOptions } from "./internal.js";
-export declare function evalSyncMktemp(opArgs: readonly string[], env: Readonly<Record<string, string>>, statTypeSync?: (filePath: string) => string | undefined, writeFileSync?: (filePath: string, bytes: Uint8Array) => boolean, mkdirSync?: (filePath: string) => boolean): string | undefined;
-export declare function createMktempCommand(configuration?: MetadataCommandsOptions): import("../../../safe-bash-contracts/command.js").CommandDefinition;
+export * from "../../../safe-bash-command-mktemp/command.js";
 //# sourceMappingURL=mktemp.d.ts.map

package/dist/safe-bash/commands/metadata/mktemp.js

@@ -1,203 +1,2 @@
-const mktempEncoder = new TextEncoder();
-import { creationUmask } from "../../fs/creation-mask.js";
-import { randomInteger } from "../portable-random.js";
-import { FsError, validatePath } from "../../contracts/index.js";
-import { codeOf, diagnostic, pathOf, syncCommandEvaluators, UsageError } from "../internal.js";
-import { gnuInformationSync } from "../gnu-information.js";
-import { MetadataBudget, metadataCommand, settings } from "./internal.js";
-function parse(args) {
-    let directory = false;
-    let dryRun = false;
-    let quiet = false;
-    let useTmpdir = false;
-    let deprecatedTmpdir = false;
-    let tmpdir;
-    let suffix;
-    let literal = false;
-    const operands = [];
-    for (let index = 0; index < args.length; index++) {
-        const argument = args[index];
-        if (literal || argument === "-" || !argument.startsWith("-"))
-            operands.push(argument);
-        else if (argument === "--")
-            literal = true;
-        else if (argument === "--directory")
-            directory = true;
-        else if (argument === "--dry-run")
-            dryRun = true;
-        else if (argument === "--quiet")
-            quiet = true;
-        else if (argument === "--tmpdir" || argument.startsWith("--tmpdir=")) {
-            useTmpdir = true;
-            tmpdir = argument.includes("=") ? argument.slice(argument.indexOf("=") + 1) : "";
-        }
-        else if (argument === "--suffix" || argument.startsWith("--suffix=")) {
-            suffix = argument.includes("=") ? argument.slice(argument.indexOf("=") + 1) : args[++index];
-            if (suffix === undefined)
-                throw new UsageError("--suffix requires an argument");
-        }
-        else if (!argument.startsWith("--")) {
-            for (let offset = 1; offset < argument.length; offset++) {
-                const option = argument[offset];
-                if (option === "d")
-                    directory = true;
-                else if (option === "u")
-                    dryRun = true;
-                else if (option === "q")
-                    quiet = true;
-                else if (option === "t") {
-                    useTmpdir = true;
-                    deprecatedTmpdir = true;
-                }
-                else if (option === "p") {
-                    tmpdir = argument.slice(offset + 1) || args[++index];
-                    if (tmpdir === undefined)
-                        throw new UsageError("-p requires an argument");
-                    useTmpdir = true;
-                    break;
-                }
-                else
-                    throw new UsageError(`unrecognized option '${argument}'`);
-            }
-        }
-        else
-            throw new UsageError(`unrecognized option '${argument}'`);
-    }
-    if (operands.length > 1)
-        throw new UsageError("too many templates");
-    const template = operands[0] ?? "tmp.XXXXXXXXXX";
-    if (operands.length === 0)
-        useTmpdir = true;
-    validatePath(template);
-    if (deprecatedTmpdir && template.includes("/"))
-        throw new UsageError("template contains directory separator");
-    validatePath(suffix ?? "");
-    if (suffix?.includes("/") || suffix !== undefined && !template.endsWith("X"))
-        throw new UsageError("suffix requires a template ending in X and cannot contain '/'");
-    const name = template.slice(template.lastIndexOf("/") + 1);
-    if (name.length + (suffix?.length ?? 0) > 255 || mktempEncoder.encode(name).byteLength + mktempEncoder.encode(suffix ?? "").byteLength > 255)
-        throw new FsError("ENAMETOOLONG", { path: template });
-    const end = name.lastIndexOf("X") + 1;
-    let start = end;
-    while (start > 0 && name[start - 1] === "X")
-        start--;
-    if (end - start < 3)
-        throw new UsageError("template must contain at least three consecutive X characters in its last component");
-    if (useTmpdir && template.startsWith("/"))
-        throw new UsageError("template must be relative with --tmpdir/-p");
-    const tail = suffix ?? name.slice(end);
-    return { directory, dryRun, quiet, useTmpdir, deprecatedTmpdir, tmpdir, template, prefix: template.slice(0, template.length - name.length + start), count: end - start, tail };
-}
-const alphabet = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
-function sampleTemplateChars(count) {
-    let out = "";
-    for (let index = 0; index < count; index++)
-        out += alphabet[randomInteger(alphabet.length)];
-    return out;
-}
-export function evalSyncMktemp(opArgs, env, statTypeSync, writeFileSync, mkdirSync) {
-    const gnuInfo = gnuInformationSync("mktemp", opArgs);
-    if (gnuInfo !== undefined)
-        return gnuInfo;
-    try {
-        const parsed = parse(opArgs);
-        const parent = (parsed.deprecatedTmpdir && env.TMPDIR) || parsed.tmpdir || env.TMPDIR || "/tmp";
-        validatePath(parent);
-        if (!statTypeSync)
-            return undefined;
-        if (parsed.useTmpdir && !parsed.dryRun && statTypeSync(parent || ".") !== "directory")
-            return undefined;
-        for (let attempt = 0; attempt < 32; attempt++) {
-            const random = sampleTemplateChars(parsed.count);
-            const generated = `${parsed.prefix}${random}${parsed.tail}`;
-            const display = parsed.useTmpdir ? `${parent.replace(/\/+$/u, "")}/${generated}` : generated;
-            const st = statTypeSync(display);
-            if (st !== "missing")
-                continue;
-            if (!parsed.dryRun) {
-                if (parsed.directory) {
-                    if (!mkdirSync || !mkdirSync(display))
-                        return undefined;
-                }
-                else {
-                    if (!writeFileSync || !writeFileSync(display, new Uint8Array(0)))
-                        return undefined;
-                }
-            }
-            return `${display}\n`;
-        }
-        return undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-syncCommandEvaluators.evalSyncMktemp = evalSyncMktemp;
-export function createMktempCommand(configuration = {}) {
-    const configured = settings(configuration);
-    const configuredUmask = configuration.umask === undefined ? undefined : configured.umask;
-    return metadataCommand("mktemp", async (context) => {
-        const budget = new MetadataBudget(context, configured.limits);
-        const parsed = parse(context.args);
-        const parent = (parsed.deprecatedTmpdir && context.env.TMPDIR) || parsed.tmpdir || context.env.TMPDIR || "/tmp";
-        validatePath(parent);
-        try {
-            if (!parsed.dryRun) {
-                if (context.fs.capabilities.readOnly)
-                    throw new FsError("EROFS", { syscall: "mktemp" });
-            }
-            for (let attempt = 0; attempt < configured.limits.maxAttempts; attempt++) {
-                await budget.step();
-                const random = sampleTemplateChars(parsed.count);
-                const generated = `${parsed.prefix}${random}${parsed.tail}`;
-                const display = parsed.useTmpdir ? `${parent.replace(/\/+$/u, "")}/${generated}` : generated;
-                const path = pathOf(context, display);
-                if (mktempEncoder.encode(display).byteLength + 1 > configured.limits.maxOutputBytes)
-                    throw new FsError("EFBIG", { message: "temporary pathname output exceeds limit" });
-                if (parsed.dryRun) {
-                    try {
-                        await context.fs.lstat(path, { signal: context.signal });
-                        continue;
-                    }
-                    catch (error) {
-                        context.signal.throwIfAborted();
-                        if (codeOf(error) !== "ENOENT")
-                            throw error;
-                    }
-                }
-                else {
-                    const capabilities = await context.fs.capabilitiesFor?.(path, { signal: context.signal }) ?? context.fs.capabilities;
-                    if (capabilities.readOnly === true)
-                        throw new FsError("EROFS", { syscall: "mktemp" });
-                    if (capabilities.permissions !== true)
-                        throw new FsError("ENOTSUP", { syscall: "mktemp", message: "private temporary creation requires declared permission support" });
-                    try {
-                        const mask = configuredUmask ?? Reflect.get(context.fs, creationUmask);
-                        const activeUmask = typeof mask === "number" ? mask : configured.umask;
-                        const mode = (parsed.directory ? 0o700 : 0o600) & ~activeUmask;
-                        if (parsed.directory)
-                            await context.fs.mkdir(path, { mode, recursive: false, signal: context.signal });
-                        else
-                            await context.fs.writeFile(path, new Uint8Array(), { mode, flag: "wx", signal: context.signal });
-                    }
-                    catch (error) {
-                        context.signal.throwIfAborted();
-                        if (codeOf(error) !== "EEXIST")
-                            throw error;
-                        continue;
-                    }
-                }
-                await budget.output(`${display}\n`);
-                return { exitCode: 0 };
-            }
-            throw new FsError("EEXIST", { syscall: "mktemp", message: "temporary name collision limit exceeded" });
-        }
-        catch (error) {
-            context.signal.throwIfAborted();
-            if (!parsed.quiet)
-                await diagnostic(context, error);
-            return { exitCode: 1 };
-        }
-    });
-}
+export * from "../../../safe-bash-command-mktemp/command.js";
 //# sourceMappingURL=mktemp.js.map

package/dist/safe-bash/commands/metadata/stat.d.ts

@@ -1,8 +1,2 @@
-import { type FileStat } from "../../contracts/index.js";
-import { type MetadataCommandsOptions } from "./internal.js";
-export declare function createStatCommand(configuration?: MetadataCommandsOptions): import("../../../safe-bash-contracts/command.js").CommandDefinition;
-export interface SyncStatInfo extends FileStat {
-    readonly target?: string;
-}
-export declare function evalSyncStat(args: readonly string[], cwd: string, quotingStyle: string | undefined, inspectStat: (absPath: string, follow: boolean) => SyncStatInfo | undefined): string | undefined;
+export * from "../../../safe-bash-command-stat/command.js";
 //# sourceMappingURL=stat.d.ts.map