@poe-platform/safe-bash 0.1.803 → 0.1.804

package/dist/safe-bash-command-install/mode.d.ts

@@ -0,0 +1,6 @@
+export interface InstallMode {
+    readonly file: number;
+    readonly directory: number;
+    readonly directoryMask: number;
+}
+export declare function parseMode(text: string | undefined, rawBytes?: Uint8Array): InstallMode;

package/dist/safe-bash-command-install/mode.js

@@ -0,0 +1,71 @@
+import { InstallError, quote } from "./options.js";
+export function parseMode(text, rawBytes) {
+    if (text === undefined)
+        return { file: 0o755, directory: 0o755, directoryMask: 0o7777 };
+    const invalid = () => new InstallError(`invalid mode ${quote(text, true, rawBytes)}`);
+    const numeric = "+-=".includes(text[0] ?? "!") ? text.slice(1) : text;
+    if (numeric && Array.from(numeric).every(character => character >= "0" && character <= "7")) {
+        const bits = Number.parseInt(numeric, 8);
+        if (bits > 0o7777 || !Number.isSafeInteger(bits))
+            throw invalid();
+        const subtract = text[0] === "-";
+        return { file: subtract ? 0 : bits, directory: subtract ? 0 : bits, directoryMask: text[0] === "+" || subtract ? bits : 0o7777 };
+    }
+    let file = 0, directory = 0, directoryMask = 0;
+    for (const clause of text.split(",")) {
+        let offset = 0, who = "";
+        while (offset < clause.length && "ugoa".includes(clause[offset]))
+            who += clause[offset++];
+        const all = !who || who.includes("a");
+        const users = (all || who.includes("u") ? 0o4700 : 0) | (all || who.includes("g") ? 0o2070 : 0) | (all || who.includes("o") ? 0o1007 : 0);
+        if (offset === clause.length)
+            throw invalid();
+        while (offset < clause.length) {
+            const operator = clause[offset++];
+            if (!"+-=".includes(operator))
+                throw invalid();
+            let permissions = "";
+            while (offset < clause.length && !"+-=".includes(clause[offset]))
+                permissions += clause[offset++];
+            const copy = permissions.length === 1 && "ugo".includes(permissions);
+            if (!copy && !Array.from(permissions).every(character => "rwxXst".includes(character)))
+                throw invalid();
+            const bitsFor = (current, isDirectory) => {
+                let bits = 0;
+                if (copy) {
+                    const shift = permissions === "u" ? 6 : permissions === "g" ? 3 : 0;
+                    const value = current >> shift & 7;
+                    bits = value << 6 | value << 3 | value;
+                }
+                else {
+                    if (permissions.includes("r"))
+                        bits |= 0o444;
+                    if (permissions.includes("w"))
+                        bits |= 0o222;
+                    if (permissions.includes("x") || permissions.includes("X") && (isDirectory || (current & 0o111) !== 0))
+                        bits |= 0o111;
+                    if (permissions.includes("s"))
+                        bits |= 0o6000;
+                    if (permissions.includes("t"))
+                        bits |= 0o1000;
+                }
+                return bits & users;
+            };
+            const fileBits = bitsFor(file, false), directoryBits = bitsFor(directory, true);
+            if (operator === "+") {
+                file |= fileBits;
+                directory |= directoryBits;
+            }
+            else if (operator === "-") {
+                file &= ~fileBits;
+                directory &= ~directoryBits;
+            }
+            else {
+                file = file & ~users | fileBits;
+                directory = directory & ~users | directoryBits;
+            }
+            directoryMask |= operator === "=" ? users : directoryBits;
+        }
+    }
+    return { file, directory, directoryMask };
+}

package/dist/safe-bash-command-install/options.d.ts

@@ -0,0 +1,40 @@
+import type { CommandContext } from "../safe-bash-contracts/index.js";
+export interface InstallContextRequest {
+    readonly path: string;
+    readonly source?: string;
+    readonly label?: string;
+    readonly mode: "default" | "preserve" | "explicit";
+}
+export interface InstallModeRequest {
+    readonly path: string;
+    readonly mode: number;
+    readonly kind: "file" | "new-directory" | "existing-directory";
+}
+export interface InstallCommandsOptions {
+    readonly limits?: Partial<InstallLimits>;
+    readonly replace?: boolean;
+    readonly identity?: {
+        readonly uid: number;
+        readonly gid: number;
+    };
+    readonly resolveUser?: (name: string, context: CommandContext) => number | undefined | Promise<number | undefined>;
+    readonly resolveGroup?: (name: string, context: CommandContext) => number | undefined | Promise<number | undefined>;
+    readonly chown?: (path: string, uid: number | undefined, gid: number | undefined, context: CommandContext) => void | Promise<void>;
+    readonly setMode?: (request: InstallModeRequest, context: CommandContext) => void | Promise<void>;
+    readonly strip?: (path: string, program: string, context: CommandContext) => number | Promise<number>;
+    readonly renameExclusive?: (source: string, destination: string, context: CommandContext) => void | Promise<void>;
+    readonly maxFileBytes?: number;
+    readonly securityContext?: {
+        readonly enabled: boolean;
+        readonly apply?: (request: InstallContextRequest, context: CommandContext) => void | Promise<void>;
+        readonly matches?: (source: string, destination: string, context: CommandContext) => boolean | Promise<boolean>;
+    };
+}
+export declare class InstallError extends Error {
+    readonly usage: boolean;
+    constructor(message: string, usage?: boolean);
+}
+export declare function quote(value: string, numeric?: boolean, rawBytes?: Uint8Array): string;
+export interface InstallLimits {
+    readonly maxFileBytes: number;
+}

package/dist/safe-bash-command-install/options.js

@@ -0,0 +1,27 @@
+export class InstallError extends Error {
+    usage;
+    constructor(message, usage = false) {
+        super(message);
+        this.usage = usage;
+    }
+}
+export function quote(value, numeric = false, rawBytes) {
+    const escapes = new Map([[7, "a"], [8, "b"], [9, "t"], [10, "n"], [11, "v"], [12, "f"], [13, "r"]]);
+    const bytes = rawBytes ?? new TextEncoder().encode(value);
+    if (!numeric && bytes.every(byte => byte >= 32 && byte < 127)) {
+        return value.includes("'") && !["\"", "$", "`", "\\"].some(character => value.includes(character))
+            ? `"${value}"` : `'${value.replaceAll("'", "'\\''")}'`;
+    }
+    let result = "'", escaped = false;
+    for (const byte of bytes) {
+        const special = byte < 32 || byte >= 127;
+        if (!numeric && special !== escaped) {
+            result += special ? "'$'" : "''";
+            escaped = special;
+        }
+        result += special ? `\\${escapes.get(byte) ?? byte.toString(8).padStart(3, "0")}`
+            : numeric && (byte === 39 || byte === 92) ? `\\${String.fromCharCode(byte)}`
+                : byte === 39 ? "'\\''" : String.fromCharCode(byte);
+    }
+    return `${result}'`;
+}

package/dist/safe-bash-command-jq/index.js

@@ -1,6 +1,6 @@
 import {
   createJqCommand
-} from "../safe-bash/command-chunks/chunk-ILX2NOLF.js";
+} from "../safe-bash/command-chunks/chunk-WPANOB4A.js";
 import {
   init_buffer
 } from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-command-jq/jq.js

@@ -1,7 +1,7 @@
 import {
   createJqCommand,
   executeJq
-} from "../safe-bash/command-chunks/chunk-ILX2NOLF.js";
+} from "../safe-bash/command-chunks/chunk-WPANOB4A.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   createJqCommand,

package/dist/safe-bash-command-less/index.js

@@ -52,7 +52,7 @@ function settings(options = {}) {
   }
   return Object.freeze(limits);
 }
-async function readSourceText(source, maxBytes, signal, admit) {
+async function readSourceText(source, signal, admit) {
   const chunks = [];
   let total = 0;
   let quantum = 0;
@@ -67,9 +67,6 @@ async function readSourceText(source, maxBytes, signal, admit) {
       chunksRead = 0;
       await yieldTurn(signal);
     }
-    if (total > maxBytes) {
-      throw new PublicDiagnostic(`input exceeds maximum size of ${maxBytes} bytes`);
-    }
     chunks.push(chunk);
   }
   const merged = new Uint8Array(total);
@@ -90,7 +87,9 @@ function createPagerCommand(name, options = {}) {
       let inputBytes = 0;
       const admit = (bytes) => {
         context.signal.throwIfAborted();
-        context.inputBudget?.check(inputBytes += bytes);
+        inputBytes += bytes;
+        context.inputBudget?.check(inputBytes);
+        if (inputBytes > maxBytes) throw new PublicDiagnostic(`input exceeds maximum size of ${maxBytes} bytes`);
       };
       const maxBytes = Math.min(limits.maxInputBytes, context.limits?.maxInputBytes ?? limits.maxInputBytes);
       context.signal.throwIfAborted();
@@ -158,69 +157,46 @@ function createPagerCommand(name, options = {}) {
         }
         files.push(arg);
       }
-      if (!lineNumbers && !squeezeBlank && startLine === 1 && !startSearch && files.length === 0) {
-        let total = 0;
-        let quantum = 0;
-        let chunksRead = 0;
-        for await (const chunk of readBytes(context.stdin, context.signal)) {
-          context.signal.throwIfAborted();
-          quantum += Math.max(1, chunk.byteLength);
-          if (quantum >= 16384 || ++chunksRead >= 128) {
-            quantum = 0;
-            chunksRead = 0;
-            await yieldTurn(context.signal);
-          }
-          total += chunk.byteLength;
-          admit(chunk.byteLength);
-          if (total > maxBytes) {
-            await writeText(context.stderr, `${name}: input exceeds maximum size of ${maxBytes} bytes
-`);
-            return { exitCode: 1 };
-          }
-          await writeBytes(context.stdout, chunk, context.signal);
-        }
-        return { exitCode: 0 };
-      }
+      if (files.length === 0) files.push("-");
       try {
         const passThrough = !lineNumbers && !squeezeBlank && startLine === 1 && !startSearch;
         const texts = [];
         let exitCode = 0;
-        if (files.length === 0) {
-          texts.push(await readSourceText(context.stdin, maxBytes, context.signal, admit));
-        } else {
-          for (const file of files) {
-            if (file === "-") {
-              if (passThrough) {
-                let total = 0;
-                for await (const chunk of readBytes(context.stdin, context.signal)) {
-                  total += chunk.byteLength;
-                  admit(chunk.byteLength);
-                  if (total > maxBytes) throw new PublicDiagnostic(`input exceeds maximum size of ${maxBytes} bytes`);
-                  await writeBytes(context.stdout, chunk, context.signal);
+        for (const file of files) {
+          if (file === "-") {
+            if (passThrough) {
+              let quantum = 0;
+              let chunksRead = 0;
+              for await (const chunk of readBytes(context.stdin, context.signal)) {
+                admit(chunk.byteLength);
+                await writeBytes(context.stdout, chunk, context.signal);
+                quantum += Math.max(1, chunk.byteLength);
+                if (quantum >= 16384 || ++chunksRead >= 128) {
+                  quantum = 0;
+                  chunksRead = 0;
                   await yieldTurn(context.signal);
                 }
-              } else texts.push(await readSourceText(context.stdin, maxBytes, context.signal, admit));
-            } else {
-              try {
-                const targetPath = pathPosix.resolve(context.cwd, file);
-                const raw = await context.fs.readFile(targetPath, { signal: context.signal });
-                context.signal.throwIfAborted();
-                admit(raw.byteLength);
-                if (raw.byteLength > maxBytes) {
-                  await writeText(context.stderr, `${name}: ${file}: input exceeds maximum size
-`);
-                  return { exitCode: 1 };
-                }
-                if (passThrough) await writeBytes(context.stdout, raw, context.signal);
-                else texts.push(new TextDecoder("utf-8", { fatal: false }).decode(raw));
-              } catch (err) {
-                context.signal.throwIfAborted();
-                if (!(err instanceof FsError)) throw err;
-                const msg = err instanceof Error ? err.message : String(err);
-                await writeText(context.stderr, `${name}: ${file}: ${msg}
-`);
-                exitCode = 1;
               }
+            } else texts.push(await readSourceText(context.stdin, context.signal, admit));
+          } else {
+            try {
+              const targetPath = pathPosix.resolve(context.cwd, file);
+              const remaining = maxBytes - inputBytes;
+              const raw = await context.fs.readFile(targetPath, {
+                signal: context.signal,
+                ...Number.isFinite(remaining) ? { maxBytes: remaining } : {}
+              });
+              context.signal.throwIfAborted();
+              admit(raw.byteLength);
+              if (passThrough) await writeBytes(context.stdout, raw, context.signal);
+              else texts.push(new TextDecoder("utf-8", { fatal: false }).decode(raw));
+            } catch (err) {
+              context.signal.throwIfAborted();
+              if (!(err instanceof FsError)) throw err;
+              const msg = err instanceof Error ? err.message : String(err);
+              await writeText(context.stderr, `${name}: ${file}: ${msg}
+`);
+              exitCode = 1;
             }
           }
         }

package/dist/safe-bash-command-llm/command.js

@@ -2,7 +2,7 @@ import {
   createLlmCommand,
   createLlmCommands,
   llmCommands
-} from "../safe-bash/command-chunks/chunk-WH627NJL.js";
+} from "../safe-bash/command-chunks/chunk-4MYP2FX4.js";
 import "../safe-bash/command-chunks/chunk-PFHJSI27.js";
 import "../safe-bash/command-chunks/chunk-56W542VW.js";
 import "../safe-bash/command-chunks/chunk-PHFOL7T3.js";

package/dist/safe-bash-command-llm/elevenlabs.js

@@ -1,9 +1,9 @@
 import {
   createElevenLabsProvider
-} from "../safe-bash/command-chunks/chunk-K2GDEMEU.js";
+} from "../safe-bash/command-chunks/chunk-EFRCFWVR.js";
 import "../safe-bash/command-chunks/chunk-LPZXFCTC.js";
-import "../safe-bash/command-chunks/chunk-2KG2QLJE.js";
 import "../safe-bash/command-chunks/chunk-PHFOL7T3.js";
+import "../safe-bash/command-chunks/chunk-RFWGYT7G.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   createElevenLabsProvider

package/dist/safe-bash-command-llm/index.js

@@ -17,14 +17,14 @@ import {
   resolveLlmSchemaInput,
   selectLlmModelByQuery,
   validateLlmTemplateParameters
-} from "../safe-bash/command-chunks/chunk-WH627NJL.js";
+} from "../safe-bash/command-chunks/chunk-4MYP2FX4.js";
 import {
   createLlmService,
   validateModelOptions
 } from "../safe-bash/command-chunks/chunk-PFHJSI27.js";
 import {
   createElevenLabsProvider
-} from "../safe-bash/command-chunks/chunk-K2GDEMEU.js";
+} from "../safe-bash/command-chunks/chunk-EFRCFWVR.js";
 import "../safe-bash/command-chunks/chunk-LPZXFCTC.js";
 import {
   base64Stream,
@@ -32,12 +32,12 @@ import {
   createOpenAiProvider,
   jsonString,
   jsonValue
-} from "../safe-bash/command-chunks/chunk-YHFXOX6U.js";
+} from "../safe-bash/command-chunks/chunk-GOCFQ6XV.js";
 import "../safe-bash/command-chunks/chunk-56W542VW.js";
 import "../safe-bash/command-chunks/chunk-ENFNMTTP.js";
 import "../safe-bash/command-chunks/chunk-OMH6Z4BN.js";
-import "../safe-bash/command-chunks/chunk-2KG2QLJE.js";
 import "../safe-bash/command-chunks/chunk-PHFOL7T3.js";
+import "../safe-bash/command-chunks/chunk-RFWGYT7G.js";
 import {
   init_buffer
 } from "../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-command-llm/openai.js

@@ -1,12 +1,12 @@
 import {
   chatJson,
   createOpenAiProvider
-} from "../safe-bash/command-chunks/chunk-YHFXOX6U.js";
+} from "../safe-bash/command-chunks/chunk-GOCFQ6XV.js";
 import "../safe-bash/command-chunks/chunk-56W542VW.js";
 import "../safe-bash/command-chunks/chunk-ENFNMTTP.js";
 import "../safe-bash/command-chunks/chunk-OMH6Z4BN.js";
-import "../safe-bash/command-chunks/chunk-2KG2QLJE.js";
 import "../safe-bash/command-chunks/chunk-PHFOL7T3.js";
+import "../safe-bash/command-chunks/chunk-RFWGYT7G.js";
 import "../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   createOpenAiProvider,

package/dist/safe-bash-command-llm/providers/elevenlabs.js

@@ -1,10 +1,10 @@
 import "../../safe-bash/command-chunks/chunk-76F4WURZ.js";
 import {
   createElevenLabsProvider
-} from "../../safe-bash/command-chunks/chunk-K2GDEMEU.js";
+} from "../../safe-bash/command-chunks/chunk-EFRCFWVR.js";
 import "../../safe-bash/command-chunks/chunk-LPZXFCTC.js";
-import "../../safe-bash/command-chunks/chunk-2KG2QLJE.js";
 import "../../safe-bash/command-chunks/chunk-PHFOL7T3.js";
+import "../../safe-bash/command-chunks/chunk-RFWGYT7G.js";
 import "../../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   createElevenLabsProvider

package/dist/safe-bash-command-llm/providers/index.js

@@ -3,7 +3,7 @@ import "../../safe-bash/command-chunks/chunk-KSZLEZI6.js";
 import "../../safe-bash/command-chunks/chunk-EZ7D6DXC.js";
 import {
   createElevenLabsProvider
-} from "../../safe-bash/command-chunks/chunk-K2GDEMEU.js";
+} from "../../safe-bash/command-chunks/chunk-EFRCFWVR.js";
 import "../../safe-bash/command-chunks/chunk-LPZXFCTC.js";
 import {
   base64Stream,
@@ -11,12 +11,12 @@ import {
   createOpenAiProvider,
   jsonString,
   jsonValue
-} from "../../safe-bash/command-chunks/chunk-YHFXOX6U.js";
+} from "../../safe-bash/command-chunks/chunk-GOCFQ6XV.js";
 import "../../safe-bash/command-chunks/chunk-56W542VW.js";
 import "../../safe-bash/command-chunks/chunk-ENFNMTTP.js";
 import "../../safe-bash/command-chunks/chunk-OMH6Z4BN.js";
-import "../../safe-bash/command-chunks/chunk-2KG2QLJE.js";
 import "../../safe-bash/command-chunks/chunk-PHFOL7T3.js";
+import "../../safe-bash/command-chunks/chunk-RFWGYT7G.js";
 import {
   init_buffer
 } from "../../safe-bash/command-chunks/chunk-HX3SHTCE.js";

package/dist/safe-bash-command-llm/providers/openai.js

@@ -2,12 +2,12 @@ import "../../safe-bash/command-chunks/chunk-KSZLEZI6.js";
 import {
   chatJson,
   createOpenAiProvider
-} from "../../safe-bash/command-chunks/chunk-YHFXOX6U.js";
+} from "../../safe-bash/command-chunks/chunk-GOCFQ6XV.js";
 import "../../safe-bash/command-chunks/chunk-56W542VW.js";
 import "../../safe-bash/command-chunks/chunk-ENFNMTTP.js";
 import "../../safe-bash/command-chunks/chunk-OMH6Z4BN.js";
-import "../../safe-bash/command-chunks/chunk-2KG2QLJE.js";
 import "../../safe-bash/command-chunks/chunk-PHFOL7T3.js";
+import "../../safe-bash/command-chunks/chunk-RFWGYT7G.js";
 import "../../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   createOpenAiProvider,

package/dist/safe-bash-command-llm/providers/shared.js

@@ -3,7 +3,7 @@ import {
   jsonBody,
   multipart,
   providerLimits
-} from "../../safe-bash/command-chunks/chunk-2KG2QLJE.js";
+} from "../../safe-bash/command-chunks/chunk-RFWGYT7G.js";
 import "../../safe-bash/command-chunks/chunk-HX3SHTCE.js";
 export {
   credential,