@poe-platform/safe-bash 0.1.802 → 0.1.804

package/dist/safe-bash/shell/session-state.js

@@ -56,6 +56,10 @@ export function captureShellSessionState(state, exitCode) {
         dotglob: Boolean(state.dotglob),
         globstar: Boolean(state.globstar),
         nullglob: Boolean(state.nullglob),
+        failglob: Boolean(state.failglob),
+        lastpipe: Boolean(state.lastpipe),
+        inherit_errexit: Boolean(state.inherit_errexit),
+        expand_aliases: Boolean(state.expand_aliases),
         nocaseglob: Boolean(state.nocaseglob),
         nocasematch: Boolean(state.nocasematch),
         extglob: Boolean(state.extglob),
@@ -69,6 +73,7 @@ export function captureShellSessionState(state, exitCode) {
         nounset: Boolean(state.nounset),
     };
     const snapshot = {
+        aliases: Object.fromEntries(state.aliases ?? []),
         cwd: state.cwd,
         umask: state.umask ?? 0o022,
         variables,
@@ -91,6 +96,18 @@ export async function restoreShellSessionState(state, snapshot, explicitOptions,
         ? resolvePath("/", explicitOptions.cwd)
         : resolvePath("/", snapshot.cwd || "/");
     state.cwd = resolvedCwd;
+    if (snapshot.aliases) {
+        let bytes = 0;
+        const aliases = new Map();
+        for (const [name, value] of Object.entries(snapshot.aliases)) {
+            budget.signal.throwIfAborted();
+            bytes += shellValueByteLength(name) + shellValueByteLength(value);
+            if (bytes > budget.limits.maxExpansionBytes)
+                budget.fail("maxExpansionBytes");
+            aliases.set(name, value);
+        }
+        state.aliases = aliases;
+    }
     if (typeof snapshot.umask === "number") {
         state.umask = snapshot.umask & 0o777;
     }
@@ -178,6 +195,14 @@ export async function restoreShellSessionState(state, snapshot, explicitOptions,
             state.globstar = opts.globstar;
         if (opts.nullglob !== undefined)
             state.nullglob = opts.nullglob;
+        if (opts.failglob !== undefined)
+            state.failglob = opts.failglob;
+        if (opts.lastpipe !== undefined)
+            state.lastpipe = opts.lastpipe;
+        if (opts.inherit_errexit !== undefined)
+            state.inherit_errexit = opts.inherit_errexit;
+        if (opts.expand_aliases !== undefined)
+            state.expand_aliases = opts.expand_aliases;
         if (opts.nocaseglob !== undefined)
             state.nocaseglob = opts.nocaseglob;
         if (opts.nocasematch !== undefined)

package/dist/safe-bash/shell/shell.js

@@ -1,30 +1,9 @@
-var _a;
-import { MemoryFileSystem } from "../fs/memory/index.js";
-function utf8ByteLength(str) {
-    if (typeof globalThis.Buffer === "function")
-        return globalThis.Buffer.byteLength(str);
-    let bytes = str.length;
-    for (let i = 0; i < str.length; i++) {
-        const code = str.charCodeAt(i);
-        if (code >= 0x80) {
-            if (code <= 0x7ff)
-                bytes += 1;
-            else if (code >= 0xd800 && code <= 0xdbff && i + 1 < str.length && (str.charCodeAt(i + 1) & 0xfc00) === 0xdc00) {
-                bytes += 2;
-                i++;
-            }
-            else {
-                bytes += 2;
-            }
-        }
-    }
-    return bytes;
-}
+import { utf8ByteLength } from "../../safe-bash-byte-engine/index.js";
 import { clearAwkReaderPool } from "../commands/text-programs/awk-reader.js";
 import { clearRgFastRunnerPool } from "../commands/search/rg-command.js";
 import { writeDiagnostic } from "../escaping.js";
 import { createDeviceFileSystem } from "@poe-platform/safe-fs/core";
-import { CommandRegistry, resolvePath, toByteSource } from "../contracts/index.js";
+import { builtInDirectContextExecutors, CommandRegistry, resolvePath, toByteSource } from "../contracts/index.js";
 import { warnIfHostProcessEnv } from "./env-warning.js";
 import { parseShellUnit } from "./parser.js";
 import { defaultPortableTrapExtension } from "./trap.js";
@@ -80,28 +59,24 @@ const EMPTY_EXEC_RESULT = {
     stderrBytes: EMPTY_STDOUT_BYTES,
     exitCode: 0,
 };
-let warmSyncExecJitWarmed = false;
-const parsedSourceCache = new Map();
-let lastSourceCacheKey = "";
-let lastSourceCacheVal;
-function getSourceParseCache(source) {
-    if (source === lastSourceCacheKey && lastSourceCacheVal !== undefined)
-        return lastSourceCacheVal;
-    let entry = parsedSourceCache.get(source);
-    if (!entry) {
-        if (parsedSourceCache.size >= 64) {
-            const oldest = parsedSourceCache.keys().next().value;
-            if (oldest !== undefined)
-                parsedSourceCache.delete(oldest);
-        }
-        entry = { byteLength: utf8ByteLength(source) };
-        parsedSourceCache.set(source, entry);
+function syntaxDiagnostic(source, error) {
+    const line = source.slice(0, error.offset).split("\n").length;
+    if (error.unclosedQuote) {
+        return `shell: -c: line ${error.unclosedQuote.line}: unexpected EOF while looking for matching \`${error.unclosedQuote.quote}'\n`;
     }
-    lastSourceCacheKey = source;
-    lastSourceCacheVal = entry;
-    return entry;
+    if (error.exitCode === 127) {
+        const token = /^[;&|()<>]|^[^\s;&|()<>]+/u.exec(source.slice(error.offset))?.[0] ?? "newline";
+        return `shell: -c: line ${line}: syntax error near unexpected token \`${token}'\nshell: -c: line ${line}: \`${source.split("\n")[line - 1] ?? ""}'\n`;
+    }
+    if (error.offset >= source.length && !/Unterminated|nesting|Unsupported/u.test(error.reason)) {
+        const context = error.incompleteCommand ? ` from \`${error.incompleteCommand.name}' command on line ${error.incompleteCommand.line}` : "";
+        return `shell: -c: line ${source.split("\n").length + Number(!source.endsWith("\n"))}: syntax error: unexpected end of file${context}\n`;
+    }
+    return `shell: ${error.message}\n`;
 }
-function getOrParseUnitFromCache(source, offset, unitLocale, sourceCache, parseState, budget, syntax) {
+function getOrParseUnitFromCache(source, offset, unitLocale, sourceCache, parseState, budget, syntax, aliases) {
+    if (aliases?.size)
+        sourceCache = undefined;
     let cached;
     if (sourceCache !== undefined) {
         if (offset === 0) {
@@ -129,7 +104,7 @@ function getOrParseUnitFromCache(source, offset, unitLocale, sourceCache, parseS
         parseState.lineIndexUnits = budget.parsing.admittedUnits - beforeLineIdx;
     }
     const beforeParse = budget.parsing.admittedUnits;
-    const parsed = parseShellUnit(source, offset, unitLocale, budget.parsing, parseState.lineIndex, undefined, false, syntax);
+    const parsed = parseShellUnit(source, offset, unitLocale, budget.parsing, parseState.lineIndex, undefined, false, syntax, aliases);
     const parseUnits = budget.parsing.admittedUnits - beforeParse;
     const unitsCharged = (offset === 0 ? parseState.lineIndexUnits : 0) + parseUnits;
     if (sourceCache !== undefined && (!parsed.script.warnings || parsed.script.warnings.length === 0)) {
@@ -307,6 +282,7 @@ export class Shell {
     #middleware = [];
     #filesystems = new Map();
     #plugins = [];
+    #processSubstitutionIds = { next: 0 };
     #capabilities = {};
     #options;
     #resolvedLimits;
@@ -323,12 +299,39 @@ export class Shell {
     #singleActiveOwner;
     #active;
     #warmedInvocation;
+    #parsedSourceCache = new Map();
+    #getSourceParseCache(source) {
+        let entry = this.#parsedSourceCache.get(source);
+        if (!entry) {
+            if (this.#parsedSourceCache.size >= 64) {
+                const oldest = this.#parsedSourceCache.keys().next().value;
+                if (oldest !== undefined)
+                    this.#parsedSourceCache.delete(oldest);
+            }
+            entry = { byteLength: utf8ByteLength(source) };
+            this.#parsedSourceCache.set(source, entry);
+        }
+        return entry;
+    }
     constructor(options) {
         if (!options?.fs)
             throw new TypeError("Shell requires an explicit filesystem");
         if (options.deviceView !== undefined && options.deviceView !== "default" && options.deviceView !== "provided")
             throw new TypeError("deviceView must be default or provided");
-        const commands = options.commands ?? new CommandRegistry();
+        const onRegister = (command) => {
+            this.#clearWarmedInvocation();
+            if (!builtInDirectContextExecutors.has(command.execute)) {
+                this.#hasCustomCommands = true;
+                customRegisteredCommands.add(command.execute);
+            }
+        };
+        const commands = options.commands ?? new class extends CommandRegistry {
+            register(command, options) {
+                super.register(command, options);
+                onRegister(command);
+                return this;
+            }
+        }();
         if (!(commands instanceof CommandRegistry))
             throw new TypeError("CommandRegistry requires its matching shell runtime; do not mix source and compiled runtime modules");
         if (options.commands) {
@@ -396,6 +399,7 @@ export class Shell {
     register(command, options) {
         if (this.#disposed)
             throw new Error("Shell is disposed");
+        this.#clearWarmedInvocation();
         this.#hasCustomCommands = true;
         if (command && typeof command.execute === "function")
             customRegisteredCommands.add(command.execute);
@@ -453,6 +457,7 @@ export class Shell {
         void warm.stdin.close();
         warm.budget.close();
         void warm.scope.close();
+        warm.owner.finish({ kind: "return", value: undefined });
         warm.cancellationState.close();
     }
     #isDefaultExecOptions(options, currentScope) {
@@ -480,78 +485,14 @@ export class Shell {
             (!this.#singleActiveScope || this.#singleActiveScope === currentScope) &&
             !this.#active);
     }
-    static #enginePrewarmed = false;
-    async #prewarmIsolatedSandbox() {
-        if (_a.#enginePrewarmed)
-            return;
-        _a.#enginePrewarmed = true;
-        await this.#ready;
-        if (!this.commands.get("rg") || !this.commands.get("jq") || !this.commands.get("awk")) {
-            _a.#enginePrewarmed = false;
-            return;
-        }
-        try {
-            const enc = new TextEncoder();
-            const dBytes = enc.encode(Array.from({ length: 120 }, (_, i) => `${i % 3 === 0 ? "alpha" : i % 3 === 1 ? "beta" : "gamma"}:val_${(i * 17) % 97}:${i}\n`).join(""));
-            const jBytes = enc.encode(Array.from({ length: 60 }, (_, i) => `{"id":${i},"active":${i % 2 === 0},"score":${(i * 7) % 100},"tag":"t_${i % 10}"}\n`).join(""));
-            const sandboxFs = new MemoryFileSystem();
-            await sandboxFs.writeFile("/data.txt", dBytes);
-            await sandboxFs.writeFile("/items.jsonl", jBytes);
-            for (let d = 0; d < 2; d++) {
-                await sandboxFs.mkdir(`/src/pkg_${d}`, { recursive: true });
-                for (let f = 0; f < 2; f++) {
-                    await sandboxFs.writeFile(`/src/pkg_${d}/mod_${f}.ts`, enc.encode(Array.from({ length: 20 }, (_, l) => `export const v_${d}_${f}_${l} = "${(d + f + l) % 11 === 0 ? "NEEDLE_TOKEN" : "normal"}_${l}";\n`).join("")));
-                }
-            }
-            const fsScript = [
-                "mkdir -p /work/a /work/b",
-                ...Array.from({ length: 12 }, (_, i) => `echo "item_${i}" > /work/a/f_${i}.txt`),
-                ...Array.from({ length: 12 }, (_, i) => `echo "item_${i}" >> /work/b/f_${i}.txt`),
-                "rm -rf /work/b",
-                "find /work/a -name 'f_1*.txt' | wc -l",
-            ].join("\n");
-            const scripts = [
-                "grep '^alpha' /data.txt | cut -d: -f2 | tr 'a-z' 'A-Z' | sort | head -n 5",
-                "rg -c NEEDLE_TOKEN /src",
-                "sed 's/^alpha:/ALPHA_REPLACED:/g; s/:val_/:VALUE_/g' /data.txt > /out.txt",
-                "awk -F: '/^alpha/ { sum += $3; cnt++ } END { print cnt, sum }' /data.txt",
-                "jq -c 'select(.active) | {id, score}' /items.jsonl > /filtered.jsonl",
-                fsScript,
-                "acc=0; i=0; for i in {1..80}; do acc=$((acc + i)); done; echo $acc",
-                "declare -a arr=(); declare -A map=(); fn() { local x=\"$1\"; case \"$x\" in *0) return 0;; *) return 1;; esac; }; for ((i=0; i<40; i++)); do s=\"p_m_${i}_s_e\"; a=\"${s#p_}\"; b=\"${a%_e}\"; c=\"${b//_/}\"; arr+=(\"e_$i\"); map[\"k_$i\"]=$((i + ${#c})); if [[ \"$s\" =~ ^p_m_([0-9]+)_s_e$ ]]; then fn \"${BASH_REMATCH[1]}\"; fi; done",
-            ];
-            const sandboxShell = new _a({ fs: sandboxFs });
-            for (const plugin of this.#plugins) {
-                sandboxShell.use(plugin);
-            }
-            for (const s of scripts) {
-                const isFs = s === fsScript;
-                const isSed = s.startsWith("sed ");
-                const isJq = s.startsWith("jq ");
-                for (let i = 0; i < 4; i++) {
-                    if (isFs && i > 0)
-                        await sandboxFs.rm("/work", { recursive: true, force: true });
-                    else if (isSed && i > 0)
-                        await sandboxFs.rm("/out.txt", { force: true });
-                    else if (isJq && i > 0)
-                        await sandboxFs.rm("/filtered.jsonl", { force: true });
-                    await sandboxShell.exec("");
-                    await sandboxShell.exec(s);
-                }
-            }
-            sandboxShell.#clearWarmedInvocation();
-        }
-        catch {
-            // Ignore prewarm errors in restricted environments
-        }
-    }
     exec(source, options = EMPTY_EXEC_OPTIONS) {
         if (!this.#disposed &&
             this.#warmedInvocation &&
             typeof source === "string" &&
+            source.length > 0 &&
             source.length <= 16384 &&
             (options === EMPTY_EXEC_OPTIONS || this.#isDefaultExecOptions(options))) {
-            const sourceCache = getSourceParseCache(source);
+            const sourceCache = this.#getSourceParseCache(source);
             const firstCached = sourceCache?.first0;
             if (firstCached && (!firstCached.unit.script.warnings || firstCached.unit.script.warnings.length === 0)) {
                 return this.#execWarmSyncOrFallback(source, options, sourceCache, firstCached);
@@ -694,7 +635,7 @@ export class Shell {
                             budget.signal.throwIfAborted();
                             const vars = currentState.variables;
                             const nextLocale = (vars.LC_ALL || vars.LC_CTYPE || vars.LANG) ? byteLocale(vars) : false;
-                            if (currentCachedUnit && currentCachedUnit.locale === nextLocale && currentCachedUnit.nextCached !== undefined) {
+                            if (!currentState.expand_aliases && currentCachedUnit && currentCachedUnit.locale === nextLocale && currentCachedUnit.nextCached !== undefined) {
                                 currentCachedUnit = currentCachedUnit.nextCached;
                                 budget.parsing.admit(currentCachedUnit.unitsCharged);
                                 unit = currentCachedUnit.unit;
@@ -702,7 +643,7 @@ export class Shell {
                             else {
                                 parseState ??= { lineIndex: undefined, lineIndexUnits: 0, currentCachedUnit };
                                 parseState.currentCachedUnit = currentCachedUnit;
-                                unit = getOrParseUnitFromCache(source, unit.next, nextLocale, sourceCache, parseState, budget, undefined);
+                                unit = getOrParseUnitFromCache(source, unit.next, nextLocale, sourceCache, parseState, budget, undefined, currentState.expand_aliases ? currentState.aliases : undefined);
                                 currentCachedUnit = parseState.currentCachedUnit;
                             }
                             if (unit.script.warnings) {
@@ -728,7 +669,7 @@ export class Shell {
                 }
                 catch (error) {
                     if (error instanceof ShellSyntaxError) {
-                        await writeDiagnostic(io.stderr, `shell: ${error.message}\n`);
+                        await writeDiagnostic(io.stderr, syntaxDiagnostic(source, error));
                         exitCode = error.exitCode;
                     }
                     else {
@@ -892,18 +833,6 @@ export class Shell {
             throw selection.outcome.reason;
         if (scope.hasFailures)
             throwCleanupFailures(scope.failures);
-        if (!warmSyncExecJitWarmed && source === "" && this.#warmedInvocation) {
-            warmSyncExecJitWarmed = true;
-            await this.#prewarmIsolatedSandbox();
-            for (let w = 0; w < 24; w++) {
-                globalThis.process?.memoryUsage?.();
-                performance.now();
-            }
-            for (let w = 0; w < 16; w++) {
-                await this.exec(":", EMPTY_EXEC_OPTIONS);
-                await this.#execAsync("", EMPTY_EXEC_OPTIONS);
-            }
-        }
         return selection.outcome.value;
     }
     async #execute(source, options, scope, budget, cancellation, cancellationState, owner, admission, warm) {
@@ -964,21 +893,12 @@ export class Shell {
                     ? this.#initialLocale
                     : (!this.#hasInitialEnv ? byteLocale(options.env) : byteLocale({ ...this.#options.env, ...options.env }));
                 const canCacheParse = extensions === EMPTY_CAPTURED_EXTENSIONS && source.length <= 16384;
-                const sourceCache = canCacheParse ? getSourceParseCache(source) : undefined;
+                const sourceCache = canCacheParse ? this.#getSourceParseCache(source) : undefined;
                 let parseState;
                 let currentCachedUnit = sourceCache !== undefined
                     ? (locale ? sourceCache.first1 : sourceCache.first0)
                     : undefined;
                 let unit;
-                if (currentCachedUnit) {
-                    budget.parsing.admit(currentCachedUnit.unitsCharged);
-                    unit = currentCachedUnit.unit;
-                }
-                else {
-                    parseState = { lineIndex: undefined, lineIndexUnits: 0, currentCachedUnit: undefined };
-                    unit = getOrParseUnitFromCache(source, 0, locale, sourceCache, parseState, budget, extensions.syntax);
-                    currentCachedUnit = parseState.currentCachedUnit;
-                }
                 let currentState;
                 if (warm) {
                     currentState = warm.currentState;
@@ -1033,6 +953,7 @@ export class Shell {
                     variables.OPTERR = "1";
                     variables.IFS ??= " \t\n";
                     currentState = new RootShellState(cwd, variables, exported, extensionState(extensions.definitions, undefined, undefined, defaultPortableTrapExtension));
+                    currentState.processSubstitutionIds = this.#processSubstitutionIds;
                     state = currentState;
                     const beforeExecHook = options.hooks?.beforeExec ?? this.#options.hooks?.beforeExec;
                     const restoredSnapshot = options.state ?? (beforeExecHook ? await beforeExecHook({ source, options }) : undefined);
@@ -1060,6 +981,16 @@ export class Shell {
                     // Finalizers run after child scopes and cooperative cleanup, including cancellation.
                     scope.registerFinalizer(runtime.releaseAnchorResources.bind(runtime));
                 }
+                const aliases = currentState.expand_aliases ? currentState.aliases : undefined;
+                if (currentCachedUnit && !aliases?.size) {
+                    budget.parsing.admit(currentCachedUnit.unitsCharged);
+                    unit = currentCachedUnit.unit;
+                }
+                else {
+                    parseState = { lineIndex: undefined, lineIndexUnits: 0, currentCachedUnit: undefined };
+                    unit = getOrParseUnitFromCache(source, 0, byteLocale(currentState.variables), sourceCache, parseState, budget, extensions.syntax, aliases);
+                    currentCachedUnit = parseState.currentCachedUnit;
+                }
                 exitCode = 0;
                 while (true) {
                     if (unit.script.warnings) {
@@ -1081,7 +1012,7 @@ export class Shell {
                     budget.signal.throwIfAborted();
                     const vars = currentState.variables;
                     const nextLocale = (vars.LC_ALL || vars.LC_CTYPE || vars.LANG) ? byteLocale(vars) : false;
-                    if (currentCachedUnit && currentCachedUnit.locale === nextLocale && currentCachedUnit.nextCached !== undefined) {
+                    if (!currentState.expand_aliases && currentCachedUnit && currentCachedUnit.locale === nextLocale && currentCachedUnit.nextCached !== undefined) {
                         currentCachedUnit = currentCachedUnit.nextCached;
                         budget.parsing.admit(currentCachedUnit.unitsCharged);
                         unit = currentCachedUnit.unit;
@@ -1089,7 +1020,7 @@ export class Shell {
                     else {
                         parseState ??= { lineIndex: undefined, lineIndexUnits: 0, currentCachedUnit };
                         parseState.currentCachedUnit = currentCachedUnit;
-                        unit = getOrParseUnitFromCache(source, unit.next, nextLocale, sourceCache, parseState, budget, extensions.syntax);
+                        unit = getOrParseUnitFromCache(source, unit.next, nextLocale, sourceCache, parseState, budget, extensions.syntax, currentState.expand_aliases ? currentState.aliases : undefined);
                         currentCachedUnit = parseState.currentCachedUnit;
                     }
                 }
@@ -1097,20 +1028,7 @@ export class Shell {
             catch (error) {
                 if (!(error instanceof ShellSyntaxError))
                     throw error;
-                const line = source.slice(0, error.offset).split("\n").length;
-                if (error.unclosedQuote) {
-                    await writeDiagnostic(io.stderr, `shell: -c: line ${error.unclosedQuote.line}: unexpected EOF while looking for matching \`${error.unclosedQuote.quote}'\n`);
-                }
-                else if (error.exitCode === 127) {
-                    const token = /^[;&|()<>]|^[^\s;&|()<>]+/u.exec(source.slice(error.offset))?.[0] ?? "newline";
-                    await writeDiagnostic(io.stderr, `shell: -c: line ${line}: syntax error near unexpected token \`${token}'\nshell: -c: line ${line}: \`${source.split("\n")[line - 1] ?? ""}'\n`);
-                }
-                else if (error.offset >= source.length && !/Unterminated|nesting|Unsupported/u.test(error.reason)) {
-                    const context = error.incompleteCommand ? ` from \`${error.incompleteCommand.name}' command on line ${error.incompleteCommand.line}` : "";
-                    await writeDiagnostic(io.stderr, `shell: -c: line ${source.split("\n").length + Number(!source.endsWith("\n"))}: syntax error: unexpected end of file${context}\n`);
-                }
-                else
-                    await writeDiagnostic(io.stderr, `shell: ${error.message}\n`);
+                await writeDiagnostic(io.stderr, syntaxDiagnostic(source, error));
                 exitCode = error.exitCode;
             }
             if (runtime && state && !runtime.tryFinishShellSync(state)) {
@@ -1125,8 +1043,12 @@ export class Shell {
         }
         finally {
             if (source === "" &&
-                !warm &&
                 !failed &&
+                // A retained invocation keeps its parse admissions and clock origins.
+                // Bounded executions must create their own budget and deadline instead.
+                budget.limits.maxParseUnits === Infinity &&
+                budget.limits.maxCpuMs === Infinity &&
+                budget.limits.maxWallClockMs === Infinity &&
                 !this.#warmedInvocation &&
                 !budget.hasExecutionCleanup &&
                 !scope.hasFailures &&
@@ -1231,6 +1153,7 @@ export class Shell {
         if (this.#disposal)
             return this.#disposal;
         this.#disposed = true;
+        this.#parsedSourceCache.clear();
         Runtime.clearStaticPools();
         clearAwkReaderPool();
         clearRgFastRunnerPool();
@@ -1269,5 +1192,4 @@ export class Shell {
         throwCleanupFailures(cleanupFailures);
     }
 }
-_a = Shell;
 //# sourceMappingURL=shell.js.map

package/dist/safe-bash/shell/tilde-expansion.d.ts

@@ -1,5 +1,5 @@
 import type { Budget } from "./runtime.js";
 import type { WordPart } from "./parser.js";
 /** Expand lexical prefixes before parameter expansion, preserving their quoting. */
-export declare function expandTildes(parts: readonly WordPart[], variables: Readonly<Record<string, string>>, budget: Budget, assignmentStart?: number): WordPart[];
+export declare function expandTildes(parts: readonly WordPart[], variables: Readonly<Record<string, string>>, budget: Budget, assignmentStart?: number, colonEndsInitialTilde?: boolean): WordPart[];
 //# sourceMappingURL=tilde-expansion.d.ts.map

package/dist/safe-bash/shell/tilde-expansion.js

@@ -1,5 +1,5 @@
 /** Expand lexical prefixes before parameter expansion, preserving their quoting. */
-export function expandTildes(parts, variables, budget, assignmentStart) {
+export function expandTildes(parts, variables, budget, assignmentStart, colonEndsInitialTilde = false) {
     const result = [];
     for (let index = 0; index < parts.length; index++) {
         const part = parts[index];
@@ -17,7 +17,7 @@ export function expandTildes(parts, variables, budget, assignmentStart) {
             if (!initial && !(assignmentStart !== undefined && offset > 0 && part.value[offset - 1] === ":"))
                 continue;
             let end = offset + 1;
-            while (end < part.value.length && part.value[end] !== "/" && !(assignmentStart !== undefined && part.value[end] === ":")) {
+            while (end < part.value.length && part.value[end] !== "/" && !((assignmentStart !== undefined || (colonEndsInitialTilde && initial)) && part.value[end] === ":")) {
                 if (end % 1024 === 0)
                     budget.cpuCheckpoint();
                 end++;

package/dist/safe-bash/shell/types.d.ts

@@ -55,6 +55,8 @@ export interface ShellLimits {
      * Zero permits only redirect-free commands. Not a global byte or filesystem-call budget. */
     readonly maxRedirects?: number;
     readonly maxPipelineStages?: number;
+    /** Cumulative bytes written between pipeline stages per invocation, including nested pipelines. */
+    readonly maxPipelineBytes?: number;
     readonly maxLoopIterations?: number;
     readonly maxSubstitutionDepth?: number;
     /** Maximum simultaneously active shell functions; zero rejects function calls. Unlimited when omitted. */
@@ -94,6 +96,10 @@ export interface ShellSessionOptionsSnapshot {
     readonly dotglob?: boolean | undefined;
     readonly globstar?: boolean | undefined;
     readonly nullglob?: boolean | undefined;
+    readonly failglob?: boolean | undefined;
+    readonly lastpipe?: boolean | undefined;
+    readonly inherit_errexit?: boolean | undefined;
+    readonly expand_aliases?: boolean | undefined;
     readonly nocaseglob?: boolean | undefined;
     readonly nocasematch?: boolean | undefined;
     readonly extglob?: boolean | undefined;
@@ -107,6 +113,7 @@ export interface ShellSessionOptionsSnapshot {
     readonly nounset?: boolean | undefined;
 }
 export interface ShellSessionState {
+    readonly aliases?: Readonly<Record<string, string>> | undefined;
     readonly cwd: string;
     readonly umask?: number | undefined;
     readonly variables?: Readonly<Record<string, string>> | undefined;

package/dist/safe-bash/shell/value-state.js

@@ -357,7 +357,7 @@ export class ValueStore {
     }
     get(name, text) { return this._values?.get(name)?.value ?? this._strings?.get(name) ?? text; }
     publishString(name, value, rawVariables) {
-        if (this.arena.hasInfiniteBytes) {
+        if (this.arena.hasInfiniteBytes && this.arena.maximumSlots === Infinity) {
             this.arena.assertOpen();
             rawVariables[name] = value;
             this.invalidate(name);

package/dist/safe-bash/shell/worker-limits.js

@@ -45,6 +45,7 @@ export const cloudflareWorkerLimits = Object.freeze({
     maxPathnameComponents: 64,
     maxRedirects: 64,
     maxPipelineStages: 64,
+    maxPipelineBytes: 4 * 1024 * 1024,
     maxLoopIterations: 1_000,
     maxSubstitutionDepth: 16,
     maxFunctionDepth: 16,

package/dist/safe-bash/shell-entry.browser.js

@@ -1,50 +1,49 @@
 import {
   cloudflareWorkerLimits
-} from "./chunks/chunk-KDNSPLII.js";
+} from "./chunks/chunk-CTXNARJH.js";
 import {
   Shell,
   ShellLimitError,
   ShellSyntaxError,
   parseShell
-} from "./chunks/chunk-SHEMU2Z7.js";
-import "./chunks/chunk-TFIBK2GI.js";
-import "./chunks/chunk-3NDIFSNM.js";
-import "./chunks/chunk-44ALJ4QG.js";
-import "./chunks/chunk-MHMMRCYC.js";
-import "./chunks/chunk-AUSNDQTJ.js";
-import "./chunks/chunk-CTVWDACF.js";
-import "./chunks/chunk-3R3AANOR.js";
-import "./chunks/chunk-OV6IHKO6.js";
-import "./chunks/chunk-XVOSKJE2.js";
-import "./chunks/chunk-C5OWC2TL.js";
-import "./chunks/chunk-PH63PLPZ.js";
-import "./chunks/chunk-CHYGPFVM.js";
-import "./chunks/chunk-6O77NL2S.js";
-import "./chunks/chunk-BJA5XNP6.js";
-import "./chunks/chunk-J42RIHHJ.js";
-import "./chunks/chunk-I5HZ4FGE.js";
+} from "./chunks/chunk-W2IYOVHK.js";
+import "./chunks/chunk-YOXUCJER.js";
+import "./chunks/chunk-D5Q7NFWI.js";
+import "./chunks/chunk-AW5KIT6V.js";
+import "./chunks/chunk-IQW34XQT.js";
+import "./chunks/chunk-TCKYOLUE.js";
+import "./chunks/chunk-FOB2FZR4.js";
+import "./chunks/chunk-TC3F4UFF.js";
+import "./chunks/chunk-22SX3F2R.js";
+import "./chunks/chunk-JPSUHHOA.js";
+import "./chunks/chunk-47D7WBJK.js";
+import "./chunks/chunk-UV4X32QU.js";
+import "./chunks/chunk-6SMICPI3.js";
+import "./chunks/chunk-Y7FW6GLT.js";
+import "./chunks/chunk-OQ3AGYCZ.js";
+import "./chunks/chunk-CL2FCTTO.js";
+import "./chunks/chunk-62BOHHJT.js";
+import "./chunks/chunk-DUTAG6ZD.js";
+import "./chunks/chunk-4KTMKD5W.js";
+import "./chunks/chunk-SUJ3NTMH.js";
+import "./chunks/chunk-XQWCQSRN.js";
+import "./chunks/chunk-RHFRJIWQ.js";
+import "./chunks/chunk-KBZ4UB2O.js";
+import "./chunks/chunk-4T53AERN.js";
+import "./chunks/chunk-7O76UFQD.js";
+import "./chunks/chunk-5XIFJVOO.js";
 import {
   CommandRegistry,
   commandRuntimeIdentity,
   createCommandArguments,
   getCommandArguments
-} from "./chunks/chunk-7R5BDCG7.js";
-import "./chunks/chunk-55YJASTN.js";
-import "./chunks/chunk-4BSJLKNM.js";
-import "./chunks/chunk-DQP3VHSB.js";
-import "./chunks/chunk-GEG3BWGE.js";
-import "./chunks/chunk-VSAJ4OTM.js";
-import "./chunks/chunk-D3ANYGMC.js";
-import "./chunks/chunk-VTH3MLDU.js";
-import "./chunks/chunk-NZQXYWA3.js";
-import "./chunks/chunk-74GHTNJA.js";
-import "./chunks/chunk-QGUV42T5.js";
-import "./chunks/chunk-ZVD5IS4V.js";
-import "./chunks/chunk-E7OYNDGL.js";
-import "./chunks/chunk-IWDICZVK.js";
+} from "./chunks/chunk-OHML2BEU.js";
+import "./chunks/chunk-IOHH2GTI.js";
+import "./chunks/chunk-YL3GBUG4.js";
+import "./chunks/chunk-V7QT2RWC.js";
 import {
   init_platform
-} from "./chunks/chunk-B7TAL7S5.js";
+} from "./chunks/chunk-PTAEWLSE.js";
 
 // packages/safe-bash/src/shell-entry.ts
 init_platform();

package/dist/safe-bash/trap.browser.js

@@ -1,11 +1,11 @@
 import {
   portableTrapExtension
-} from "./chunks/chunk-3NDIFSNM.js";
-import "./chunks/chunk-J42RIHHJ.js";
-import "./chunks/chunk-7R5BDCG7.js";
+} from "./chunks/chunk-SUJ3NTMH.js";
+import "./chunks/chunk-XQWCQSRN.js";
+import "./chunks/chunk-OHML2BEU.js";
 import {
   init_platform
-} from "./chunks/chunk-B7TAL7S5.js";
+} from "./chunks/chunk-PTAEWLSE.js";
 
 // packages/safe-bash/src/trap.browser.ts
 init_platform();

package/dist/safe-bash/worker/host.js

@@ -14,7 +14,7 @@ export function createWorkerKillAfterPolicy(registry, configuration, requiresMod
         // These counters/leases belong to the interpreter, not to a separate Shell.
         // Until a shared ledger is available, refuse rather than reset their quota.
         const limits = runtimeContext?.budget.limits ?? configuration.limits;
-        const shared = ["maxCommands", "maxLoopIterations", "maxSourceBytes", "maxParseUnits", "maxExpansionBytes", "maxExpansionFields", "maxPipelineStages", "maxSubstitutionDepth", "maxFunctionDepth", "maxCpuMs"];
+        const shared = ["maxCommands", "maxLoopIterations", "maxSourceBytes", "maxParseUnits", "maxExpansionBytes", "maxExpansionFields", "maxPipelineStages", "maxPipelineBytes", "maxSubstitutionDepth", "maxFunctionDepth", "maxCpuMs"];
         if (shared.some(key => limits?.[key] !== undefined && limits[key] !== Infinity)) {
             await writeBytes(context.stderr, new TextEncoder().encode("timeout: worker escalation cannot preserve finite shared interpreter quotas\n"), context.signal);
             return { exitCode: 125 };

package/dist/safe-bash/yq-browser/index.js

@@ -1,6 +1,6 @@
 import {
   init_platform
-} from "../chunks/chunk-B7TAL7S5.js";
+} from "../chunks/chunk-PTAEWLSE.js";
 
 // packages/safe-bash/src/yq.browser.ts
 init_platform();

package/dist/safe-bash-calendar-engine/time-env/calendar.d.ts

@@ -24,6 +24,6 @@ export declare class TimeZone {
     constructor(input: string, numericOffset?: boolean);
     fields(instant: bigint): ZonedFields;
     private observedFields;
-    instant(fields: CalendarFields, fraction?: bigint): bigint;
+    instant(fields: CalendarFields, fraction?: bigint, disambiguation?: "reject" | "compatible"): bigint;
 }
 export declare function parseDate(text: string, zone: TimeZone, now: () => bigint): bigint;

package/dist/safe-bash-calendar-engine/time-env/calendar.js

@@ -8,7 +8,7 @@ import {
   parseDate,
   utcMilliseconds,
   weekdayNames
-} from "../../safe-bash/command-chunks/chunk-PXEIT2O4.js";
+} from "../../safe-bash/command-chunks/chunk-6UR7V3ET.js";
 import "../../safe-bash/command-chunks/chunk-YFLHEANE.js";
 import "../../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {