@qodalis/cli-files 2.0.0-beta.8 → 2.0.0-rc.1

package/public-api.d.mts

@@ -1,5 +1,5 @@
-import * as _qodalis_cli_core from '@qodalis/cli-core';
-import { ICliOwnership, ICliCommandProcessor, CliProcessCommand, ICliExecutionContext, ICliFileTransferService, ICliFileEntry, ICliCompletionProvider, ICliCompletionContext, ICliModule } from '@qodalis/cli-core';
+import { ICliOwnership, CliAccessAction, ICliCommandProcessor, CliProcessCommand, ICliExecutionContext, CliHeadersProvider, ICliFileTransferService, ICliFileEntry, ICliCompletionProvider, ICliCompletionContext, ICliConfigurableModule } from '@qodalis/cli-core';
+import { Subscription } from 'rxjs';
 
 /**
  * Represents a node in the virtual filesystem (file or directory).
@@ -27,7 +27,18 @@ interface IFileNode {
     linkTarget?: string;
 }
 
-declare const IFileSystemService_TOKEN = "cli-file-system-service";
+declare const IFileSystemService_TOKEN: any;
+/**
+ * Decides whether the current principal may act on a node. Set by the files
+ * module from the generic authorization layer (`cliCanAccess`); when no policy
+ * is set (no auth module loaded) every operation is allowed.
+ */
+interface CliFileAccessPolicy {
+    /** rwx check on a file or directory */
+    canAccess(node: IFileNode, action: CliAccessAction): boolean;
+    /** May the principal chmod/chown this node (owner, or `files:chown` / `files:admin`) */
+    canChangeOwnership(node: IFileNode, newOwnership?: ICliOwnership): boolean;
+}
 /**
  * Abstraction for virtual filesystem operations.
  */
@@ -51,6 +62,17 @@ interface IFileSystemService {
     move(src: string, dest: string): void;
     chmod(path: string, permissions: string): void;
     chown(path: string, ownership: ICliOwnership): void;
+    setAccessPolicy?(policy?: CliFileAccessPolicy): void;
+    /** False when the current principal may not reach `path` (needs `x` on every parent) */
+    canTraverse?(path: string): boolean;
+    /** Run `fn` without access checks (system tasks such as creating home directories) */
+    runAsSystem?<T>(fn: () => T): T;
+    /**
+     * System task (no access checks): give every node owned by `fromUid`
+     * (case-insensitive) to `toUid`, e.g. after a user was renamed or deleted.
+     * Returns the number of nodes changed.
+     */
+    reassignOwner?(fromUid: string, toUid: string): number;
     initialize(): Promise<void>;
     persist(): Promise<void>;
 }
@@ -58,7 +80,7 @@ interface IFileSystemService {
 declare class CliLsCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
@@ -75,38 +97,42 @@ declare class CliLsCommandProcessor implements ICliCommandProcessor {
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     writeDescription(context: ICliExecutionContext): void;
     private writeLongFormat;
+    private humanReadable;
+    private formatSize;
     private writeShortFormat;
 }
 
 declare class CliCdCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
 }
 
 declare class CliPwdCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     metadata: {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
 }
 
 declare class CliMkdirCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -121,13 +147,14 @@ declare class CliMkdirCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
 }
 
 declare class CliRmdirCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -135,13 +162,14 @@ declare class CliRmdirCommandProcessor implements ICliCommandProcessor {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
 }
 
 declare class CliTouchCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -149,13 +177,14 @@ declare class CliTouchCommandProcessor implements ICliCommandProcessor {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
 }
 
 declare class CliCatCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -163,13 +192,14 @@ declare class CliCatCommandProcessor implements ICliCommandProcessor {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
 }
 
 declare class CliEchoCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     extendsProcessor: boolean;
@@ -178,13 +208,14 @@ declare class CliEchoCommandProcessor implements ICliCommandProcessor {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
 }
 
 declare class CliRmCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -199,13 +230,14 @@ declare class CliRmCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
 }
 
 declare class CliCpCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
@@ -219,6 +251,7 @@ declare class CliCpCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parseArgs;
 }
@@ -226,13 +259,14 @@ declare class CliCpCommandProcessor implements ICliCommandProcessor {
 declare class CliMvCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parseArgs;
 }
@@ -240,7 +274,7 @@ declare class CliMvCommandProcessor implements ICliCommandProcessor {
 declare class CliTreeCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
@@ -254,14 +288,17 @@ declare class CliTreeCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "number";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
+    /** File system of the running command (listing goes through access checks) */
+    private fs?;
     private printTree;
 }
 
 declare class CliHeadCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -276,6 +313,7 @@ declare class CliHeadCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "number";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parsePaths;
 }
@@ -283,7 +321,7 @@ declare class CliHeadCommandProcessor implements ICliCommandProcessor {
 declare class CliTailCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -298,6 +336,7 @@ declare class CliTailCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "number";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parsePaths;
 }
@@ -305,7 +344,7 @@ declare class CliTailCommandProcessor implements ICliCommandProcessor {
 declare class CliWcCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -320,14 +359,17 @@ declare class CliWcCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
+    /** Counts like Unix wc: lines are newline characters. */
+    private count;
     private parsePaths;
 }
 
 declare class CliFindCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
@@ -345,16 +387,23 @@ declare class CliFindCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "number";
     })[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
+    /** `--name` matches case-sensitively, `--iname` ignoring case. */
+    private nameRegex;
+    private matches;
     private parseSearchPath;
     private globToRegex;
+    /** File system of the running command (listing goes through access checks) */
+    private fs?;
+    /** Lists the children of `node`, which are at `depth` (1 = direct children). */
     private walk;
 }
 
 declare class CliGrepCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
@@ -368,7 +417,13 @@ declare class CliGrepCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
+    /**
+     * As Unix grep: 0 when a line matched, 1 when none did, 2 after an
+     * error (so `if grep -q ...` and `grep x f && ...` work).
+     */
+    private exitStatus;
     private grepContent;
     private parseArgs;
     private collectFiles;
@@ -377,7 +432,7 @@ declare class CliGrepCommandProcessor implements ICliCommandProcessor {
 declare class CliTacCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -385,6 +440,7 @@ declare class CliTacCommandProcessor implements ICliCommandProcessor {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parsePaths;
 }
@@ -392,7 +448,7 @@ declare class CliTacCommandProcessor implements ICliCommandProcessor {
 declare class CliBasenameCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -400,6 +456,7 @@ declare class CliBasenameCommandProcessor implements ICliCommandProcessor {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parseTokens;
 }
@@ -407,7 +464,7 @@ declare class CliBasenameCommandProcessor implements ICliCommandProcessor {
 declare class CliDirnameCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -415,6 +472,7 @@ declare class CliDirnameCommandProcessor implements ICliCommandProcessor {
         icon: string;
         module: string;
     };
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parseTokens;
 }
@@ -422,7 +480,7 @@ declare class CliDirnameCommandProcessor implements ICliCommandProcessor {
 declare class CliSortCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -443,6 +501,7 @@ declare class CliSortCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "string";
     })[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parsePaths;
 }
@@ -450,7 +509,7 @@ declare class CliSortCommandProcessor implements ICliCommandProcessor {
 declare class CliUniqCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -465,6 +524,7 @@ declare class CliUniqCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parsePaths;
 }
@@ -472,7 +532,7 @@ declare class CliUniqCommandProcessor implements ICliCommandProcessor {
 declare class CliCutCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -487,6 +547,7 @@ declare class CliCutCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "string";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parseSpec;
     private resolveIndices;
@@ -496,7 +557,7 @@ declare class CliCutCommandProcessor implements ICliCommandProcessor {
 declare class CliPasteCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -517,14 +578,21 @@ declare class CliPasteCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     })[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
+    /** `-d` list: each character in turn, with \t, \n, \\ and \0 (empty) escapes. */
+    private parseDelimiters;
+    /**
+     * The file operands. The engine drops a lone `-` from the value, so with
+     * piped input they are read from the raw command line to keep it.
+     */
     private parsePaths;
 }
 
 declare class CliTrCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -534,11 +602,14 @@ declare class CliTrCommandProcessor implements ICliCommandProcessor {
     };
     parameters: {
         name: string;
+        aliases: string[];
         description: string;
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
+    private fail;
     private deleteChars;
     private squeezeChars;
     private translateChars;
@@ -547,7 +618,7 @@ declare class CliTrCommandProcessor implements ICliCommandProcessor {
 declare class CliStatCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -556,6 +627,7 @@ declare class CliStatCommandProcessor implements ICliCommandProcessor {
         module: string;
     };
     parameters: never[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parsePaths;
 }
@@ -563,7 +635,7 @@ declare class CliStatCommandProcessor implements ICliCommandProcessor {
 declare class CliChmodCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -577,6 +649,7 @@ declare class CliChmodCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parseArgs;
     private resolvePermissions;
@@ -587,7 +660,7 @@ declare class CliChmodCommandProcessor implements ICliCommandProcessor {
 declare class CliChownCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -601,6 +674,7 @@ declare class CliChownCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parseArgs;
     /** Parse "user:group", "user:", ":group", or "user" */
@@ -611,10 +685,9 @@ declare class CliChownCommandProcessor implements ICliCommandProcessor {
 declare class CliDuCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
-    valueRequired: boolean;
     metadata: {
         icon: string;
         module: string;
@@ -632,8 +705,11 @@ declare class CliDuCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "number";
     })[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parseArgs;
+    /** File system of the running command (listing goes through access checks) */
+    private fs?;
     private collectSizes;
     private formatSize;
 }
@@ -641,7 +717,7 @@ declare class CliDuCommandProcessor implements ICliCommandProcessor {
 declare class CliLnCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -649,12 +725,20 @@ declare class CliLnCommandProcessor implements ICliCommandProcessor {
         icon: string;
         module: string;
     };
-    parameters: {
+    parameters: ({
         name: string;
         description: string;
         required: boolean;
         type: "boolean";
-    }[];
+        aliases?: undefined;
+    } | {
+        name: string;
+        aliases: string[];
+        description: string;
+        required: boolean;
+        type: "boolean";
+    })[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private parseArgs;
 }
@@ -662,7 +746,7 @@ declare class CliLnCommandProcessor implements ICliCommandProcessor {
 declare class CliSedCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
@@ -680,21 +764,41 @@ declare class CliSedCommandProcessor implements ICliCommandProcessor {
         aliases: string[];
         description: string;
         required: boolean;
-        type: "string";
+        type: "array";
     })[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
+    private writeLines;
+    /** Runs the script over the lines and returns the output lines. */
+    private run;
+    /** `&` is the match, `\1`..`\9` the groups, `\n` a newline, `\x` a literal x. */
+    private expandReplacement;
     private parseRawCommand;
     private tokenize;
-    private parseExpression;
+    /** Commands of a script, separated by `;` or newlines. */
+    private parseScript;
+    private parseCommand;
     private parseAddress;
+    /**
+     * Text up to the next unescaped delimiter, escapes kept (an escaped
+     * delimiter becomes the plain character when it has no regex meaning).
+     */
+    private readDelimited;
+    /**
+     * Basic regular expressions use \( \) \{ \} \+ \? \| for groups and
+     * operators. When a pattern uses them (or never in -E mode), they are
+     * turned into the JavaScript form and the bare characters made literal.
+     */
+    private toJsRegex;
     private parseSubstitution;
     private addressMatches;
+    private singleMatches;
 }
 
 declare class CliAwkCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
@@ -708,8 +812,16 @@ declare class CliAwkCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "string";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
+    /**
+     * The program is the first operand, usually quoted. Unquoted, it may span
+     * several words (`awk {print $1} file`): it is then everything before the
+     * trailing operands that are existing files, or the whole value with
+     * piped input.
+     */
     private parseArgs;
+    private bracesBalanced;
     private parseProgram;
     private findMatchingBrace;
     private matchesPattern;
@@ -729,7 +841,7 @@ declare class CliAwkCommandProcessor implements ICliCommandProcessor {
 declare class CliDiffCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -744,6 +856,7 @@ declare class CliDiffCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private linesEqual;
     private computeLCS;
@@ -755,7 +868,7 @@ declare class CliDiffCommandProcessor implements ICliCommandProcessor {
 declare class CliTeeCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -770,15 +883,15 @@ declare class CliTeeCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "boolean";
     }[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
     private getAllPaths;
-    private parseArgs;
 }
 
 declare class CliXargsCommandProcessor implements ICliCommandProcessor {
     command: string;
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     valueRequired: boolean;
@@ -799,28 +912,24 @@ declare class CliXargsCommandProcessor implements ICliCommandProcessor {
         required: boolean;
         type: "number";
     })[];
+    writeDescription(context: ICliExecutionContext): void;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
-    private getAllNonFlagTokens;
     private escapeRegex;
-    private parseArgs;
 }
 
 /**
  * Execute a script file containing CLI commands.
  *
- * Supported syntax inside scripts:
- *   - One command per line (pipes, operators, redirects all work)
- *   - `# comment` lines and blank lines are ignored
- *   - `set -e` (default) — stop on first error
- *   - `set +e` — continue on errors
- *   - `VAR=value` — variable assignment (script-scoped)
- *   - `$VAR` / `${VAR}` — variable substitution
+ * Scripts run through the engine's shell runner (`@qodalis/cli`
+ * `runScript`): commands, `;`, comments, `set -e`/`set +e`, `VAR=value`,
+ * `if`/`elif`/`else`/`fi`, `for`/`while`/`until` loops, `break`/`continue`,
+ * `exit`, and `test`/`[ ]` conditions.
  */
 declare class CliShCommandProcessor implements ICliCommandProcessor {
     command: string;
     aliases: string[];
     description: string;
-    author: _qodalis_cli_core.ICliCommandAuthor;
+    author: any;
     version: string;
     acceptsRawInput: boolean;
     metadata: {
@@ -838,18 +947,38 @@ declare class CliShCommandProcessor implements ICliCommandProcessor {
     writeDescription(context: ICliExecutionContext): void;
 }
 /**
- * Parse and execute script content line by line.
- *
- * Exported so the executor can reuse it for `./script.sh` execution.
+ * Execute script content with the engine's shell runner (control flow,
+ * variables, `set -e`), the same one used for `./script.sh`.
  */
 declare function executeScript(content: string, context: ICliExecutionContext): Promise<void>;
 
+/** Owner of system directories and of legacy nodes created without an owner */
+declare const SYSTEM_OWNERSHIP: ICliOwnership;
+/** Owner of files created while nobody is signed in */
+declare const ANONYMOUS_OWNERSHIP: ICliOwnership;
 declare class IndexedDbFileSystemService implements IFileSystemService {
     private root;
     private cwd;
     private homePath;
     private currentUid;
     private currentGroups;
+    private accessPolicy?;
+    private systemDepth;
+    setAccessPolicy(policy?: CliFileAccessPolicy): void;
+    runAsSystem<T>(fn: () => T): T;
+    reassignOwner(fromUid: string, toUid: string): number;
+    canTraverse(path: string): boolean;
+    private get enforcing();
+    private deny;
+    /** `x` on every existing directory on the way to `resolved` (excluding the target). */
+    private assertTraverse;
+    private assertAccess;
+    /** Recursive delete: every directory inside must allow removing its entries (`w` + `x`, readable). */
+    private assertRemovableTree;
+    /** Copying reads everything it copies: `r` on every file, `r` + `x` on every directory. */
+    private assertReadableTree;
+    /** Creating/removing entries needs `w` and `x` on the containing directory. */
+    private assertModifyDir;
     setCurrentUser(uid: string, groups: string[]): void;
     private getDefaultOwnership;
     getCurrentDirectory(): string;
@@ -872,6 +1001,8 @@ declare class IndexedDbFileSystemService implements IFileSystemService {
     chown(path: string, ownership: ICliOwnership): void;
     initialize(): Promise<void>;
     persist(): Promise<void>;
+    /** A copy belongs to whoever made it (like `cp` without `-p`) */
+    private ownedByCurrentUser;
     private cloneNode;
     private openDb;
     private idbGet;
@@ -883,6 +1014,8 @@ declare class IndexedDbFileSystemService implements IFileSystemService {
 interface ServerFileSystemOptions {
     /** Base URL of the CLI server, e.g. 'http://localhost:8047' */
     baseUrl: string;
+    /** Custom headers sent with every request (e.g. auth tokens) */
+    headers?: CliHeadersProvider;
 }
 /**
  * IFileSystemService implementation that delegates operations to a CLI server's
@@ -901,6 +1034,7 @@ declare class ServerFileSystemService implements IFileSystemService {
     private currentUid;
     private currentGroups;
     private readonly baseUrl;
+    private readonly headersProvider;
     constructor(options: ServerFileSystemOptions);
     setCurrentUser(uid: string, groups: string[]): void;
     private getDefaultOwnership;
@@ -965,6 +1099,35 @@ declare class VirtualFsFileTransferService implements ICliFileTransferService {
     } | null>;
 }
 
+/** Permissions the files module understands. */
+declare const CliFilesPermissions: {
+    /** Bypass all file permission checks */
+    readonly Admin: "files:admin";
+    /** chmod/chown files you do not own */
+    readonly Chown: "files:chown";
+};
+/** Mode for newly created home directories (owner full, group read/traverse) */
+declare const HOME_DIR_PERMISSIONS = "rwxr-x---";
+/**
+ * Access policy built on the generic authorization layer. Allows everything
+ * when no authorization service is registered (no auth module loaded).
+ */
+declare function createFileAccessPolicy(context: ICliExecutionContext): CliFileAccessPolicy;
+/**
+ * Follow the signed-in user (from any auth module that provides
+ * {@link ICliUserSessionService}): ownership for new files, home directory
+ * creation and `~`, and moving to the home directory when the user changes.
+ */
+declare function followUserSession(context: ICliExecutionContext, fs: IFileSystemService): Subscription | undefined;
+/**
+ * Keep file ownership (stored by login name) in step with the accounts of
+ * any auth module that emits {@link ICliUserEventService} events: a rename
+ * moves the user's files to the new name, a deletion gives them to `root`, so
+ * a later account with the same name never inherits them. Runs as a system
+ * task (no rwx checks for the acting user). No-op without such a module.
+ */
+declare function followUserAccounts(context: ICliExecutionContext, fs: IFileSystemService): Subscription | undefined;
+
 /**
  * Provides tab-completion for file and directory names from the virtual filesystem.
  * Priority 50 (checked before command/parameter providers for file-related commands).
@@ -987,9 +1150,15 @@ interface CliFilesModuleConfig {
      */
     showPathInPrompt?: boolean;
 }
-interface ICliFilesModule extends ICliModule {
-    configure(config: CliFilesModuleConfig): ICliModule;
+interface ICliFilesModule extends ICliConfigurableModule<CliFilesModuleConfig> {
+    /** Subscription for drag-and-drop file uploads, cleaned up in onDestroy */
+    _dragDropSubscription?: Subscription;
+    /** Subscription following the signed-in user, cleaned up in onDestroy */
+    _sessionSubscription?: Subscription;
+    /** Subscription following account renames/deletions, cleaned up in onDestroy */
+    _accountsSubscription?: Subscription;
 }
 declare const filesModule: ICliFilesModule;
 
-export { CliAwkCommandProcessor, CliBasenameCommandProcessor, CliCatCommandProcessor, CliCdCommandProcessor, CliChmodCommandProcessor, CliChownCommandProcessor, CliCpCommandProcessor, CliCutCommandProcessor, CliDiffCommandProcessor, CliDirnameCommandProcessor, CliDuCommandProcessor, CliEchoCommandProcessor, type CliFilesModuleConfig, CliFindCommandProcessor, CliGrepCommandProcessor, CliHeadCommandProcessor, CliLnCommandProcessor, CliLsCommandProcessor, CliMkdirCommandProcessor, CliMvCommandProcessor, CliPasteCommandProcessor, CliPwdCommandProcessor, CliRmCommandProcessor, CliRmdirCommandProcessor, CliSedCommandProcessor, CliShCommandProcessor, CliSortCommandProcessor, CliStatCommandProcessor, CliTacCommandProcessor, CliTailCommandProcessor, CliTeeCommandProcessor, CliTouchCommandProcessor, CliTrCommandProcessor, CliTreeCommandProcessor, CliUniqCommandProcessor, CliWcCommandProcessor, CliXargsCommandProcessor, FilePathCompletionProvider, type IFileNode, type IFileSystemService, IFileSystemService_TOKEN, IndexedDbFileSystemService, type ServerFileSystemOptions, ServerFileSystemService, VirtualFsFileTransferService, executeScript, filesModule };
+export { ANONYMOUS_OWNERSHIP, CliAwkCommandProcessor, CliBasenameCommandProcessor, CliCatCommandProcessor, CliCdCommandProcessor, CliChmodCommandProcessor, CliChownCommandProcessor, CliCpCommandProcessor, CliCutCommandProcessor, CliDiffCommandProcessor, CliDirnameCommandProcessor, CliDuCommandProcessor, CliEchoCommandProcessor, CliFilesPermissions, CliFindCommandProcessor, CliGrepCommandProcessor, CliHeadCommandProcessor, CliLnCommandProcessor, CliLsCommandProcessor, CliMkdirCommandProcessor, CliMvCommandProcessor, CliPasteCommandProcessor, CliPwdCommandProcessor, CliRmCommandProcessor, CliRmdirCommandProcessor, CliSedCommandProcessor, CliShCommandProcessor, CliSortCommandProcessor, CliStatCommandProcessor, CliTacCommandProcessor, CliTailCommandProcessor, CliTeeCommandProcessor, CliTouchCommandProcessor, CliTrCommandProcessor, CliTreeCommandProcessor, CliUniqCommandProcessor, CliWcCommandProcessor, CliXargsCommandProcessor, FilePathCompletionProvider, HOME_DIR_PERMISSIONS, IFileSystemService_TOKEN, IndexedDbFileSystemService, SYSTEM_OWNERSHIP, ServerFileSystemService, VirtualFsFileTransferService, createFileAccessPolicy, executeScript, filesModule, followUserAccounts, followUserSession };
+export type { CliFileAccessPolicy, CliFilesModuleConfig, IFileNode, IFileSystemService, ServerFileSystemOptions };