@qodalis/cli-files 2.0.0-beta.8 → 2.0.0-rc.1

package/umd/index.global.js

@@ -8,7 +8,11 @@ var files = (() => {
   var __getProtoOf = Object.getPrototypeOf;
   var __hasOwnProp = Object.prototype.hasOwnProperty;
   var __commonJS = (cb, mod) => function __require() {
-    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+    try {
+      return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+    } catch (e) {
+      throw mod = 0, e;
+    }
   };
   var __copyProps = (to, from, except, desc) => {
     if (from && typeof from === "object" || typeof from === "function") {
@@ -27,7 +31,7 @@ var files = (() => {
     mod
   ));
   var require_constants = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/constants.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js"(exports, module2) {
       var SEMVER_SPEC_VERSION = "2.0.0";
       var MAX_LENGTH = 256;
       var MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || /* istanbul ignore next */
@@ -56,26 +60,26 @@ var files = (() => {
     }
   });
   var require_debug = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/debug.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/debug.js"(exports, module2) {
       var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {
       };
       module2.exports = debug;
     }
   });
   var require_re = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/re.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/re.js"(exports, module2) {
       var {
         MAX_SAFE_COMPONENT_LENGTH,
         MAX_SAFE_BUILD_LENGTH,
         MAX_LENGTH
       } = require_constants();
       var debug = require_debug();
-      exports$1 = module2.exports = {};
-      var re = exports$1.re = [];
-      var safeRe = exports$1.safeRe = [];
-      var src = exports$1.src = [];
-      var safeSrc = exports$1.safeSrc = [];
-      var t = exports$1.t = {};
+      exports = module2.exports = {};
+      var re = exports.re = [];
+      var safeRe = exports.safeRe = [];
+      var src = exports.src = [];
+      var safeSrc = exports.safeSrc = [];
+      var t = exports.t = {};
       var R = 0;
       var LETTERDASHNUMBER = "[a-zA-Z0-9-]";
       var safeRegexReplacements = [
@@ -128,18 +132,18 @@ var files = (() => {
       createToken("COERCERTLFULL", src[t.COERCEFULL], true);
       createToken("LONETILDE", "(?:~>?)");
       createToken("TILDETRIM", `(\\s*)${src[t.LONETILDE]}\\s+`, true);
-      exports$1.tildeTrimReplace = "$1~";
+      exports.tildeTrimReplace = "$1~";
       createToken("TILDE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAIN]}$`);
       createToken("TILDELOOSE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAINLOOSE]}$`);
       createToken("LONECARET", "(?:\\^)");
       createToken("CARETTRIM", `(\\s*)${src[t.LONECARET]}\\s+`, true);
-      exports$1.caretTrimReplace = "$1^";
+      exports.caretTrimReplace = "$1^";
       createToken("CARET", `^${src[t.LONECARET]}${src[t.XRANGEPLAIN]}$`);
       createToken("CARETLOOSE", `^${src[t.LONECARET]}${src[t.XRANGEPLAINLOOSE]}$`);
       createToken("COMPARATORLOOSE", `^${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]})$|^$`);
       createToken("COMPARATOR", `^${src[t.GTLT]}\\s*(${src[t.FULLPLAIN]})$|^$`);
       createToken("COMPARATORTRIM", `(\\s*)${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]}|${src[t.XRANGEPLAIN]})`, true);
-      exports$1.comparatorTrimReplace = "$1$2$3";
+      exports.comparatorTrimReplace = "$1$2$3";
       createToken("HYPHENRANGE", `^\\s*(${src[t.XRANGEPLAIN]})\\s+-\\s+(${src[t.XRANGEPLAIN]})\\s*$`);
       createToken("HYPHENRANGELOOSE", `^\\s*(${src[t.XRANGEPLAINLOOSE]})\\s+-\\s+(${src[t.XRANGEPLAINLOOSE]})\\s*$`);
       createToken("STAR", "(<|>)?=?\\s*\\*");
@@ -148,7 +152,7 @@ var files = (() => {
     }
   });
   var require_parse_options = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/parse-options.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/parse-options.js"(exports, module2) {
       var looseOption = Object.freeze({ loose: true });
       var emptyOpts = Object.freeze({});
       var parseOptions = (options) => {
@@ -164,7 +168,7 @@ var files = (() => {
     }
   });
   var require_identifiers = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/identifiers.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/identifiers.js"(exports, module2) {
       var numeric = /^[0-9]+$/;
       var compareIdentifiers = (a, b) => {
         if (typeof a === "number" && typeof b === "number") {
@@ -186,12 +190,24 @@ var files = (() => {
     }
   });
   var require_semver = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/classes/semver.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/semver.js"(exports, module2) {
       var debug = require_debug();
       var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
       var { safeRe: re, t } = require_re();
       var parseOptions = require_parse_options();
       var { compareIdentifiers } = require_identifiers();
+      var isPrereleaseIdentifier = (prerelease, identifier) => {
+        const identifiers = identifier.split(".");
+        if (identifiers.length > prerelease.length) {
+          return false;
+        }
+        for (let i = 0; i < identifiers.length; i++) {
+          if (compareIdentifiers(prerelease[i], identifiers[i]) !== 0) {
+            return false;
+          }
+        }
+        return true;
+      };
       var SemVer = class _SemVer {
         constructor(version, options) {
           options = parseOptions(options);
@@ -438,8 +454,9 @@ var files = (() => {
                 if (identifierBase === false) {
                   prerelease = [identifier];
                 }
-                if (compareIdentifiers(this.prerelease[0], identifier) === 0) {
-                  if (isNaN(this.prerelease[1])) {
+                if (isPrereleaseIdentifier(this.prerelease, identifier)) {
+                  const prereleaseBase = this.prerelease[identifier.split(".").length];
+                  if (isNaN(prereleaseBase)) {
                     this.prerelease = prerelease;
                   }
                 } else {
@@ -462,7 +479,7 @@ var files = (() => {
     }
   });
   var require_parse = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/parse.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js"(exports, module2) {
       var SemVer = require_semver();
       var parse = (version, options, throwErrors = false) => {
         if (version instanceof SemVer) {
@@ -481,7 +498,7 @@ var files = (() => {
     }
   });
   var require_valid = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/valid.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js"(exports, module2) {
       var parse = require_parse();
       var valid2 = (version, options) => {
         const v = parse(version, options);
@@ -491,7 +508,7 @@ var files = (() => {
     }
   });
   var require_clean = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/clean.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/clean.js"(exports, module2) {
       var parse = require_parse();
       var clean = (version, options) => {
         const s = parse(version.trim().replace(/^[=v]+/, ""), options);
@@ -501,7 +518,7 @@ var files = (() => {
     }
   });
   var require_inc = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/inc.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/inc.js"(exports, module2) {
       var SemVer = require_semver();
       var inc = (version, release, options, identifier, identifierBase) => {
         if (typeof options === "string") {
@@ -522,7 +539,7 @@ var files = (() => {
     }
   });
   var require_diff = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/diff.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/diff.js"(exports, module2) {
       var parse = require_parse();
       var diff = (version1, version2) => {
         const v1 = parse(version1, null, true);
@@ -563,28 +580,28 @@ var files = (() => {
     }
   });
   var require_major = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/major.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/major.js"(exports, module2) {
       var SemVer = require_semver();
       var major = (a, loose) => new SemVer(a, loose).major;
       module2.exports = major;
     }
   });
   var require_minor = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/minor.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/minor.js"(exports, module2) {
       var SemVer = require_semver();
       var minor = (a, loose) => new SemVer(a, loose).minor;
       module2.exports = minor;
     }
   });
   var require_patch = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/patch.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/patch.js"(exports, module2) {
       var SemVer = require_semver();
       var patch = (a, loose) => new SemVer(a, loose).patch;
       module2.exports = patch;
     }
   });
   var require_prerelease = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/prerelease.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/prerelease.js"(exports, module2) {
       var parse = require_parse();
       var prerelease = (version, options) => {
         const parsed = parse(version, options);
@@ -594,28 +611,28 @@ var files = (() => {
     }
   });
   var require_compare = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/compare.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare.js"(exports, module2) {
       var SemVer = require_semver();
       var compare2 = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
       module2.exports = compare2;
     }
   });
   var require_rcompare = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/rcompare.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rcompare.js"(exports, module2) {
       var compare2 = require_compare();
       var rcompare = (a, b, loose) => compare2(b, a, loose);
       module2.exports = rcompare;
     }
   });
   var require_compare_loose = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/compare-loose.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-loose.js"(exports, module2) {
       var compare2 = require_compare();
       var compareLoose = (a, b) => compare2(a, b, true);
       module2.exports = compareLoose;
     }
   });
   var require_compare_build = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/compare-build.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-build.js"(exports, module2) {
       var SemVer = require_semver();
       var compareBuild = (a, b, loose) => {
         const versionA = new SemVer(a, loose);
@@ -626,63 +643,63 @@ var files = (() => {
     }
   });
   var require_sort = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/sort.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/sort.js"(exports, module2) {
       var compareBuild = require_compare_build();
-      var sort = (list, loose) => list.sort((a, b) => compareBuild(a, b, loose));
+      var sort = (list2, loose) => list2.sort((a, b) => compareBuild(a, b, loose));
       module2.exports = sort;
     }
   });
   var require_rsort = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/rsort.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rsort.js"(exports, module2) {
       var compareBuild = require_compare_build();
-      var rsort = (list, loose) => list.sort((a, b) => compareBuild(b, a, loose));
+      var rsort = (list2, loose) => list2.sort((a, b) => compareBuild(b, a, loose));
       module2.exports = rsort;
     }
   });
   var require_gt = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/gt.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gt.js"(exports, module2) {
       var compare2 = require_compare();
       var gt = (a, b, loose) => compare2(a, b, loose) > 0;
       module2.exports = gt;
     }
   });
   var require_lt = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/lt.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lt.js"(exports, module2) {
       var compare2 = require_compare();
       var lt = (a, b, loose) => compare2(a, b, loose) < 0;
       module2.exports = lt;
     }
   });
   var require_eq = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/eq.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/eq.js"(exports, module2) {
       var compare2 = require_compare();
       var eq = (a, b, loose) => compare2(a, b, loose) === 0;
       module2.exports = eq;
     }
   });
   var require_neq = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/neq.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/neq.js"(exports, module2) {
       var compare2 = require_compare();
       var neq = (a, b, loose) => compare2(a, b, loose) !== 0;
       module2.exports = neq;
     }
   });
   var require_gte = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/gte.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gte.js"(exports, module2) {
       var compare2 = require_compare();
       var gte2 = (a, b, loose) => compare2(a, b, loose) >= 0;
       module2.exports = gte2;
     }
   });
   var require_lte = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/lte.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lte.js"(exports, module2) {
       var compare2 = require_compare();
       var lte = (a, b, loose) => compare2(a, b, loose) <= 0;
       module2.exports = lte;
     }
   });
   var require_cmp = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/cmp.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/cmp.js"(exports, module2) {
       var eq = require_eq();
       var neq = require_neq();
       var gt = require_gt();
@@ -729,7 +746,7 @@ var files = (() => {
     }
   });
   var require_coerce = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/coerce.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/coerce.js"(exports, module2) {
       var SemVer = require_semver();
       var parse = require_parse();
       var { safeRe: re, t } = require_re();
@@ -771,8 +788,46 @@ var files = (() => {
       module2.exports = coerce2;
     }
   });
+  var require_truncate = __commonJS({
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/truncate.js"(exports, module2) {
+      var parse = require_parse();
+      var constants2 = require_constants();
+      var SemVer = require_semver();
+      var truncate = (version, truncation, options) => {
+        if (!constants2.RELEASE_TYPES.includes(truncation)) {
+          return null;
+        }
+        const clonedVersion = cloneInputVersion(version, options);
+        return clonedVersion && doTruncation(clonedVersion, truncation);
+      };
+      var cloneInputVersion = (version, options) => {
+        const versionStringToParse = version instanceof SemVer ? version.version : version;
+        return parse(versionStringToParse, options);
+      };
+      var doTruncation = (version, truncation) => {
+        if (isPrerelease(truncation)) {
+          return version.version;
+        }
+        version.prerelease = [];
+        switch (truncation) {
+          case "major":
+            version.minor = 0;
+            version.patch = 0;
+            break;
+          case "minor":
+            version.patch = 0;
+            break;
+        }
+        return version.format();
+      };
+      var isPrerelease = (type) => {
+        return type.startsWith("pre");
+      };
+      module2.exports = truncate;
+    }
+  });
   var require_lrucache = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/lrucache.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/lrucache.js"(exports, module2) {
       var LRUCache = class {
         constructor() {
           this.max = 1e3;
@@ -807,7 +862,7 @@ var files = (() => {
     }
   });
   var require_range = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/classes/range.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/range.js"(exports, module2) {
       var SPACE_CHARACTERS = /\s+/g;
       var Range = class _Range {
         constructor(range, options) {
@@ -874,6 +929,7 @@ var files = (() => {
           return this.range;
         }
         parseRange(range) {
+          range = range.replace(BUILDSTRIPRE, "");
           const memoOpts = (this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE);
           const memoKey = memoOpts + ":" + range;
           const cached = cache.get(memoKey);
@@ -956,12 +1012,14 @@ var files = (() => {
       var SemVer = require_semver();
       var {
         safeRe: re,
+        src,
         t,
         comparatorTrimReplace,
         tildeTrimReplace,
         caretTrimReplace
       } = require_re();
       var { FLAG_INCLUDE_PRERELEASE, FLAG_LOOSE } = require_constants();
+      var BUILDSTRIPRE = new RegExp(src[t.BUILD], "g");
       var isNullSet = (c) => c.value === "<0.0.0-0";
       var isAny = (c) => c.value === "";
       var isSatisfiable = (comparators, options) => {
@@ -990,20 +1048,22 @@ var files = (() => {
         return comp;
       };
       var isX = (id) => !id || id.toLowerCase() === "x" || id === "*";
+      var invalidXRangeOrder = (M, m, p) => isX(M) && !isX(m) || isX(m) && p && !isX(p);
       var replaceTildes = (comp, options) => {
         return comp.trim().split(/\s+/).map((c) => replaceTilde(c, options)).join(" ");
       };
       var replaceTilde = (comp, options) => {
         const r = options.loose ? re[t.TILDELOOSE] : re[t.TILDE];
+        const z = options.includePrerelease ? "-0" : "";
         return comp.replace(r, (_, M, m, p, pr) => {
           debug("tilde", comp, _, M, m, p, pr);
           let ret;
           if (isX(M)) {
             ret = "";
           } else if (isX(m)) {
-            ret = `>=${M}.0.0 <${+M + 1}.0.0-0`;
+            ret = `>=${M}.0.0${z} <${+M + 1}.0.0-0`;
           } else if (isX(p)) {
-            ret = `>=${M}.${m}.0 <${M}.${+m + 1}.0-0`;
+            ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
           } else if (pr) {
             debug("replaceTilde pr", pr);
             ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
@@ -1049,9 +1109,9 @@ var files = (() => {
             debug("no pr");
             if (M === "0") {
               if (m === "0") {
-                ret = `>=${M}.${m}.${p}${z} <${M}.${m}.${+p + 1}-0`;
+                ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
               } else {
-                ret = `>=${M}.${m}.${p}${z} <${M}.${+m + 1}.0-0`;
+                ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
               }
             } else {
               ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
@@ -1070,6 +1130,9 @@ var files = (() => {
         const r = options.loose ? re[t.XRANGELOOSE] : re[t.XRANGE];
         return comp.replace(r, (ret, gtlt, M, m, p, pr) => {
           debug("xRange", comp, ret, gtlt, M, m, p, pr);
+          if (invalidXRangeOrder(M, m, p)) {
+            return comp;
+          }
           const xM = isX(M);
           const xm = xM || isX(m);
           const xp = xm || isX(p);
@@ -1181,7 +1244,7 @@ var files = (() => {
     }
   });
   var require_comparator = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/classes/comparator.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/comparator.js"(exports, module2) {
       var ANY = /* @__PURE__ */ Symbol("SemVer ANY");
       var Comparator = class _Comparator {
         static get ANY() {
@@ -1291,7 +1354,7 @@ var files = (() => {
     }
   });
   var require_satisfies = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/satisfies.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/satisfies.js"(exports, module2) {
       var Range = require_range();
       var satisfies2 = (version, range, options) => {
         try {
@@ -1305,14 +1368,14 @@ var files = (() => {
     }
   });
   var require_to_comparators = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/to-comparators.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/to-comparators.js"(exports, module2) {
       var Range = require_range();
       var toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c) => c.value).join(" ").trim().split(" "));
       module2.exports = toComparators;
     }
   });
   var require_max_satisfying = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/max-satisfying.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/max-satisfying.js"(exports, module2) {
       var SemVer = require_semver();
       var Range = require_range();
       var maxSatisfying = (versions, range, options) => {
@@ -1338,7 +1401,7 @@ var files = (() => {
     }
   });
   var require_min_satisfying = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/min-satisfying.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-satisfying.js"(exports, module2) {
       var SemVer = require_semver();
       var Range = require_range();
       var minSatisfying = (versions, range, options) => {
@@ -1364,7 +1427,7 @@ var files = (() => {
     }
   });
   var require_min_version = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/min-version.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-version.js"(exports, module2) {
       var SemVer = require_semver();
       var Range = require_range();
       var gt = require_gt();
@@ -1420,7 +1483,7 @@ var files = (() => {
     }
   });
   var require_valid2 = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/valid.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/valid.js"(exports, module2) {
       var Range = require_range();
       var validRange = (range, options) => {
         try {
@@ -1433,7 +1496,7 @@ var files = (() => {
     }
   });
   var require_outside = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/outside.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/outside.js"(exports, module2) {
       var SemVer = require_semver();
       var Comparator = require_comparator();
       var { ANY } = Comparator;
@@ -1499,21 +1562,21 @@ var files = (() => {
     }
   });
   var require_gtr = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/gtr.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/gtr.js"(exports, module2) {
       var outside = require_outside();
       var gtr = (version, range, options) => outside(version, range, ">", options);
       module2.exports = gtr;
     }
   });
   var require_ltr = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/ltr.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/ltr.js"(exports, module2) {
       var outside = require_outside();
       var ltr = (version, range, options) => outside(version, range, "<", options);
       module2.exports = ltr;
     }
   });
   var require_intersects = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/intersects.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/intersects.js"(exports, module2) {
       var Range = require_range();
       var intersects = (r1, r2, options) => {
         r1 = new Range(r1, options);
@@ -1524,7 +1587,7 @@ var files = (() => {
     }
   });
   var require_simplify = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/simplify.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/simplify.js"(exports, module2) {
       var satisfies2 = require_satisfies();
       var compare2 = require_compare();
       module2.exports = (versions, range, options) => {
@@ -1571,7 +1634,7 @@ var files = (() => {
     }
   });
   var require_subset = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/subset.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/subset.js"(exports, module2) {
       var Range = require_range();
       var Comparator = require_comparator();
       var { ANY } = Comparator;
@@ -1678,7 +1741,7 @@ var files = (() => {
               if (higher === c && higher !== gt) {
                 return false;
               }
-            } else if (gt.operator === ">=" && !satisfies2(gt.semver, String(c), options)) {
+            } else if (gt.operator === ">=" && !c.test(gt.semver)) {
               return false;
             }
           }
@@ -1693,7 +1756,7 @@ var files = (() => {
               if (lower === c && lower !== lt) {
                 return false;
               }
-            } else if (lt.operator === "<=" && !satisfies2(lt.semver, String(c), options)) {
+            } else if (lt.operator === "<=" && !c.test(lt.semver)) {
               return false;
             }
           }
@@ -1730,7 +1793,7 @@ var files = (() => {
     }
   });
   var require_semver2 = __commonJS({
-    "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/index.js"(exports$1, module2) {
+    "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/index.js"(exports, module2) {
       var internalRe = require_re();
       var constants2 = require_constants();
       var SemVer = require_semver();
@@ -1758,6 +1821,7 @@ var files = (() => {
       var lte = require_lte();
       var cmp = require_cmp();
       var coerce2 = require_coerce();
+      var truncate = require_truncate();
       var Comparator = require_comparator();
       var Range = require_range();
       var satisfies2 = require_satisfies();
@@ -1796,6 +1860,7 @@ var files = (() => {
         lte,
         cmp,
         coerce: coerce2,
+        truncate,
         Comparator,
         Range,
         satisfies: satisfies2,
@@ -1833,15 +1898,100 @@ var files = (() => {
     CliForegroundColor2["Reset"] = "\x1B[0m";
     return CliForegroundColor2;
   })(CliForegroundColor || {});
-  var ICliCompletionProvider_TOKEN = "cli-completion-provider";
+  function createCliToken(name) {
+    return name;
+  }
+  var ICliUserSessionService_TOKEN = createCliToken("cli-user-session-service");
+  var ICliUsersStoreService_TOKEN = createCliToken("cli-users-store-service");
+  var ICliGroupsStoreService_TOKEN = createCliToken("cli-groups-store-service");
+  var ICliAuthService_TOKEN = createCliToken("cli-auth-service");
+  var ICliCompletionProvider_TOKEN = createCliToken("cli-completion-provider");
+  var ICliDragDropService_TOKEN = createCliToken("cli-drag-drop-service");
+  var ICliFileTransferService_TOKEN = createCliToken("cli-file-transfer-service");
+  var ICliTranslationService_TOKEN = createCliToken("cli-translation-service");
+  var ICliPermissionService_TOKEN = createCliToken("cli-permission-service");
+  var ICliFilePickerProvider_TOKEN = createCliToken("cli-file-picker-provider");
+  var ICliHttpClient_TOKEN = createCliToken("cli-http-client");
+  var ICliUserEventService_TOKEN = createCliToken("cli-user-event-service");
+  var ICliAuditService_TOKEN = createCliToken("cli-audit-service");
+  var ICliAuthorizationService_TOKEN = createCliToken("cli-authorization-service");
+  var ICliPermissionRegistry_TOKEN = createCliToken("cli-permission-registry");
+  var ICliSessionsService_TOKEN = createCliToken("cli-sessions-service");
+  var ICliKeyValueStore_TOKEN = createCliToken("cli-key-value-store");
+  var ICliServerAuthTokenProvider_TOKEN = createCliToken("cli-server-auth-token-provider");
+  var ICliServerAuthService_TOKEN = createCliToken("cli-server-auth-service");
+  var ICliServerManager_TOKEN = createCliToken("cli-server-manager");
+  function resolveHeaders(provider) {
+    if (!provider) return {};
+    return typeof provider === "function" ? provider() : provider;
+  }
+  var ICliCommandGuard_TOKEN = createCliToken("cli-command-guard");
+  var CliAccessDeniedError = class _CliAccessDeniedError extends Error {
+    constructor(message = "permission denied") {
+      super(message);
+      this.code = "EACCES";
+      this.name = "CliAccessDeniedError";
+      Object.setPrototypeOf(this, _CliAccessDeniedError.prototype);
+    }
+  };
+  function isCliAccessDeniedError(error) {
+    return error instanceof CliAccessDeniedError || !!error && typeof error === "object" && error.name === "CliAccessDeniedError";
+  }
+  var ICliEventBus_TOKEN = createCliToken("cli-event-bus");
   var DefaultLibraryAuthor = {
     name: "Nicolae Lupei",
     email: "nicolae.lupei@qodalis.com"
   };
+  function splitShellWords(text) {
+    const words = [];
+    let current = "";
+    let inWord = false;
+    for (let i = 0; i < text.length; i++) {
+      const ch = text[i];
+      if (ch === "\\" && i + 1 < text.length) {
+        current += text[++i];
+        inWord = true;
+      } else if (ch === "'" && text.indexOf("'", i + 1) !== -1) {
+        const end = text.indexOf("'", i + 1);
+        current += text.slice(i + 1, end);
+        inWord = true;
+        i = end;
+      } else if (ch === '"' && closingDoubleQuote(text, i) !== -1) {
+        const end = closingDoubleQuote(text, i);
+        current += unescapeDoubleQuoted(text.slice(i + 1, end));
+        inWord = true;
+        i = end;
+      } else if (/\s/.test(ch)) {
+        if (inWord) words.push(current);
+        current = "";
+        inWord = false;
+      } else {
+        current += ch;
+        inWord = true;
+      }
+    }
+    if (inWord) words.push(current);
+    return words;
+  }
+  function joinShellWords(text) {
+    return splitShellWords(text).join(" ");
+  }
+  function closingDoubleQuote(text, start) {
+    for (let i = start + 1; i < text.length; i++) {
+      if (text[i] === "\\") i++;
+      else if (text[i] === '"') return i;
+    }
+    return -1;
+  }
+  function unescapeDoubleQuoted(text) {
+    return text.replace(/\\(["\\$`])/g, "$1");
+  }
   var semver = __toESM(require_semver2());
+  var API_VERSION = 2;
+  var VERSIONS_ENDPOINT = "/api/qcli/versions";
   var ServerVersionNegotiator = class {
     static {
-      this.CLIENT_SUPPORTED_VERSIONS = [2];
+      this.CLIENT_SUPPORTED_VERSIONS = [API_VERSION];
     }
     /**
      * Given a server's version info, pick the highest mutually compatible version.
@@ -1858,9 +2008,18 @@ var files = (() => {
      * Returns the negotiated API version and the base path for all subsequent calls,
      * or null if the server is unreachable or incompatible.
      */
-    static async discover(baseUrl) {
+    static async discover(baseUrl, headers, options) {
+      let response;
+      try {
+        const resolved = resolveHeaders(headers);
+        response = await fetch(`${baseUrl}${VERSIONS_ENDPOINT}`, {
+          headers: Object.keys(resolved).length > 0 ? resolved : void 0
+        });
+      } catch (e) {
+        if (options?.rethrowNetworkErrors) throw e;
+        return null;
+      }
       try {
-        const response = await fetch(`${baseUrl}/api/qcli/versions`);
         if (!response.ok) return null;
         const info = await response.json();
         const version = this.negotiate(info);
@@ -1874,6 +2033,60 @@ var files = (() => {
       }
     }
   };
+  function writeColumns(context, rows, formatLeft, formatRight) {
+    const width = Math.max(...rows.map(([left]) => left.length)) + 2;
+    for (const [left, right] of rows) {
+      context.writer.writeln(
+        `  ${formatLeft(left.padEnd(width))}${formatRight(right)}`
+      );
+    }
+  }
+  function writeUsage(context, rows) {
+    const { writer, translator } = context;
+    writer.writeln(`\u{1F4CB} ${translator.t("cli.common.usage", "Usage:")}`);
+    writeColumns(
+      context,
+      rows,
+      (cmd) => writer.wrapInColor(
+        cmd,
+        "\x1B[36m"
+        /* Cyan */
+      ),
+      (text) => text
+    );
+  }
+  function writeExamples(context, rows) {
+    const { writer, translator } = context;
+    writer.writeln(`\u{1F4DD} ${translator.t("cli.common.examples", "Examples:")}`);
+    writeColumns(
+      context,
+      rows,
+      (cmd) => cmd,
+      (comment) => writer.wrapInColor(
+        `# ${comment}`,
+        "\x1B[32m"
+        /* Green */
+      )
+    );
+  }
+  function writeWrapped(context, text, indent = 0) {
+    const cols = context.terminal?.cols ?? 80;
+    const width = Math.max(20, Math.min(cols - 1, 100) - indent);
+    const pad = " ".repeat(indent);
+    let line = "";
+    for (const word of text.split(/\s+/).filter(Boolean)) {
+      if (line && visibleLength2(line) + 1 + visibleLength2(word) > width) {
+        context.writer.writeln(pad + line);
+        line = word;
+      } else {
+        line = line ? `${line} ${word}` : word;
+      }
+    }
+    if (line) context.writer.writeln(pad + line);
+  }
+  function visibleLength2(text) {
+    return text.replace(/\x1b\[[0-9;]*m/g, "").length;
+  }
   var bootCliModule = async (module2) => {
     if (typeof window !== "undefined" && window.__cliModuleRegistry) {
       await window.__cliModuleRegistry.register(module2);
@@ -2692,11 +2905,11 @@ var files = (() => {
   };
 
   // src/lib/version.ts
-  var LIBRARY_VERSION = "2.0.0-beta.8";
-  var API_VERSION = 2;
+  var LIBRARY_VERSION = "2.0.0-rc.1";
+  var API_VERSION2 = 2;
 
   // src/lib/interfaces/i-file-system-service.ts
-  var IFileSystemService_TOKEN = "cli-file-system-service";
+  var IFileSystemService_TOKEN = createCliToken("cli-file-system-service");
 
   // src/lib/services/indexed-db-file-system.service.ts
   var DB_NAME = "qodalis-cli-filesystem";
@@ -2705,6 +2918,7 @@ var files = (() => {
   var CWD_KEY = "cwd";
   var HOME_KEY = "home";
   var DEFAULT_HOME = "/";
+  var ANONYMOUS_OWNERSHIP = { uid: "nobody", gid: "nogroup" };
   function createSeedFileSystem() {
     const now = Date.now();
     return {
@@ -2752,6 +2966,88 @@ var files = (() => {
       this.homePath = DEFAULT_HOME;
       this.currentUid = null;
       this.currentGroups = [];
+      this.systemDepth = 0;
+    }
+    // --- Access control ---
+    setAccessPolicy(policy) {
+      this.accessPolicy = policy;
+    }
+    runAsSystem(fn) {
+      this.systemDepth++;
+      try {
+        return fn();
+      } finally {
+        this.systemDepth--;
+      }
+    }
+    reassignOwner(fromUid, toUid) {
+      const from = fromUid.toLowerCase();
+      if (!from || !toUid) return 0;
+      let changed = 0;
+      const visit = (node) => {
+        if (node.ownership && node.ownership.uid.toLowerCase() === from) {
+          node.ownership = { ...node.ownership, uid: toUid };
+          changed++;
+        }
+        node.children?.forEach(visit);
+      };
+      visit(this.root);
+      return changed;
+    }
+    canTraverse(path) {
+      try {
+        this.assertTraverse(this.resolvePath(path), "stat", path);
+        return true;
+      } catch {
+        return false;
+      }
+    }
+    get enforcing() {
+      return !!this.accessPolicy && this.systemDepth === 0;
+    }
+    deny(op, path, reason = "Permission denied") {
+      throw new CliAccessDeniedError(`${op}: ${path}: ${reason}`);
+    }
+    /** `x` on every existing directory on the way to `resolved` (excluding the target). */
+    assertTraverse(resolved, op, display) {
+      if (!this.enforcing) return;
+      const parts = resolved.split("/").filter(Boolean);
+      let current = this.root;
+      for (let i = 0; i < parts.length; i++) {
+        if (!current || current.type !== "directory") return;
+        if (!this.accessPolicy.canAccess(current, "execute")) this.deny(op, display);
+        current = current.children?.find((c) => c.name === parts[i]);
+      }
+    }
+    assertAccess(node, action, op, display) {
+      if (this.enforcing && !this.accessPolicy.canAccess(node, action)) this.deny(op, display);
+    }
+    /** Recursive delete: every directory inside must allow removing its entries (`w` + `x`, readable). */
+    assertRemovableTree(dir, dirPath, display) {
+      if (!this.enforcing) return;
+      this.assertAccess(dir, "read", "rm", display);
+      this.assertAccess(dir, "execute", "rm", display);
+      if ((dir.children?.length ?? 0) > 0) this.assertAccess(dir, "write", "rm", display);
+      for (const child of dir.children ?? []) {
+        if (child.type === "directory") this.assertRemovableTree(child, `${dirPath}/${child.name}`, display);
+      }
+    }
+    /** Copying reads everything it copies: `r` on every file, `r` + `x` on every directory. */
+    assertReadableTree(node, display) {
+      if (!this.enforcing) return;
+      this.assertAccess(node, "read", "cp", display);
+      if (node.type !== "directory") return;
+      this.assertAccess(node, "execute", "cp", display);
+      for (const child of node.children ?? []) {
+        this.assertReadableTree(child, `${display.replace(/\/+$/, "")}/${child.name}`);
+      }
+    }
+    /** Creating/removing entries needs `w` and `x` on the containing directory. */
+    assertModifyDir(dir, dirPath, op, display) {
+      if (!this.enforcing) return;
+      this.assertTraverse(dirPath, op, display);
+      this.assertAccess(dir, "execute", op, display);
+      this.assertAccess(dir, "write", op, display);
     }
     // --- User context ---
     setCurrentUser(uid, groups) {
@@ -2759,7 +3055,9 @@ var files = (() => {
       this.currentGroups = groups;
     }
     getDefaultOwnership() {
-      if (!this.currentUid) return void 0;
+      if (!this.currentUid) {
+        return this.accessPolicy ? { ...ANONYMOUS_OWNERSHIP } : void 0;
+      }
       return {
         uid: this.currentUid,
         gid: this.currentGroups[0] || "users"
@@ -2778,6 +3076,8 @@ var files = (() => {
       if (node.type !== "directory") {
         throw new Error(`cd: ${path}: Not a directory`);
       }
+      this.assertTraverse(resolved, "cd", path);
+      this.assertAccess(node, "execute", "cd", path);
       this.cwd = resolved;
     }
     getHomePath() {
@@ -2834,6 +3134,8 @@ var files = (() => {
       if (node.type !== "directory") {
         throw new Error(`ls: ${path}: Not a directory`);
       }
+      this.assertTraverse(this.resolvePath(path), "ls", path);
+      this.assertAccess(node, "read", "ls", path);
       return node.children || [];
     }
     readFile(path) {
@@ -2844,6 +3146,8 @@ var files = (() => {
       if (node.type === "directory") {
         throw new Error(`cat: ${path}: Is a directory`);
       }
+      this.assertTraverse(this.resolvePath(path), "cat", path);
+      this.assertAccess(node, "read", "cat", path);
       return node.content ?? "";
     }
     exists(path) {
@@ -2868,6 +3172,10 @@ var files = (() => {
           }
           let child = current.children.find((c) => c.name === part);
           if (!child) {
+            if (this.enforcing) {
+              this.assertAccess(current, "execute", "mkdir", path);
+              this.assertAccess(current, "write", "mkdir", path);
+            }
             const now = Date.now();
             child = {
               name: part,
@@ -2883,6 +3191,8 @@ var files = (() => {
             current.modifiedAt = now;
           } else if (child.type !== "directory") {
             throw new Error(`mkdir: ${part}: Not a directory`);
+          } else {
+            this.assertAccess(child, "execute", "mkdir", path);
           }
           current = child;
         }
@@ -2901,6 +3211,7 @@ var files = (() => {
         if (parent.children?.find((c) => c.name === dirName)) {
           throw new Error(`mkdir: ${path}: File exists`);
         }
+        this.assertModifyDir(parent, parentPath, "mkdir", path);
         const now = Date.now();
         if (!parent.children) {
           parent.children = [];
@@ -2935,6 +3246,12 @@ var files = (() => {
       }
       const existing = parent.children?.find((c) => c.name === fileName);
       const now = Date.now();
+      if (existing) {
+        this.assertTraverse(resolved, "touch", path);
+        this.assertAccess(existing, "write", "touch", path);
+      } else {
+        this.assertModifyDir(parent, parentPath, "touch", path);
+      }
       if (existing) {
         existing.modifiedAt = now;
       } else {
@@ -2961,6 +3278,8 @@ var files = (() => {
         if (node.type === "directory") {
           throw new Error(`write: ${path}: Is a directory`);
         }
+        this.assertTraverse(resolved, "write", path);
+        this.assertAccess(node, "write", "write", path);
         const now = Date.now();
         node.content = append ? (node.content ?? "") + content : content;
         node.size = new Blob([node.content]).size;
@@ -2989,6 +3308,8 @@ var files = (() => {
       if (target.type === "directory" && !recursive) {
         throw new Error(`rm: ${path}: Is a directory`);
       }
+      this.assertModifyDir(parent, parentPath, "rm", path);
+      if (target.type === "directory") this.assertRemovableTree(target, resolved, path);
       parent.children.splice(index, 1);
       parent.modifiedAt = Date.now();
     }
@@ -3003,10 +3324,13 @@ var files = (() => {
           `cp: -r not specified; omitting directory '${src}'`
         );
       }
+      this.assertTraverse(srcResolved, "cp", src);
+      this.assertReadableTree(srcNode, src);
       const destResolved = this.resolvePath(dest);
       const destNode = this.getNode(destResolved);
       if (destNode && destNode.type === "directory") {
-        const clone = this.cloneNode(srcNode);
+        this.assertModifyDir(destNode, destResolved, "cp", dest);
+        const clone = this.ownedByCurrentUser(this.cloneNode(srcNode));
         if (!destNode.children) {
           destNode.children = [];
         }
@@ -3026,7 +3350,8 @@ var files = (() => {
         if (!parent || parent.type !== "directory") {
           throw new Error(`cp: ${parentPath}: No such file or directory`);
         }
-        const clone = this.cloneNode(srcNode);
+        this.assertModifyDir(parent, parentPath, "cp", dest);
+        const clone = this.ownedByCurrentUser(this.cloneNode(srcNode));
         clone.name = newName;
         if (!parent.children) {
           parent.children = [];
@@ -3052,16 +3377,23 @@ var files = (() => {
       }
       const destResolved = this.resolvePath(dest);
       const destNode = this.getNode(destResolved);
+      if (srcNode.type === "directory" && (destResolved === srcResolved || destResolved.startsWith(srcResolved + "/"))) {
+        throw new Error(
+          `mv: cannot move '${src}' to a subdirectory of itself, '${dest}'`
+        );
+      }
       const srcParts = srcResolved.split("/").filter(Boolean);
       const srcParentPath = "/" + srcParts.slice(0, -1).join("/");
       const srcParent = this.getNode(srcParentPath);
       if (!srcParent || !srcParent.children) {
         throw new Error(`mv: ${src}: No such file or directory`);
       }
-      const srcIndex = srcParent.children.findIndex(
-        (c) => c.name === srcNode.name
-      );
+      this.assertModifyDir(srcParent, srcParentPath, "mv", src);
+      if (destResolved === srcResolved || destNode && destNode.type === "directory" && destNode === srcParent) {
+        throw new Error(`mv: '${src}' and '${dest}' are the same file`);
+      }
       if (destNode && destNode.type === "directory") {
+        this.assertModifyDir(destNode, destResolved, "mv", dest);
         if (!destNode.children) {
           destNode.children = [];
         }
@@ -3071,7 +3403,7 @@ var files = (() => {
         if (existingIdx !== -1) {
           destNode.children.splice(existingIdx, 1);
         }
-        srcParent.children.splice(srcIndex, 1);
+        srcParent.children.splice(srcParent.children.indexOf(srcNode), 1);
         destNode.children.push(srcNode);
         destNode.modifiedAt = Date.now();
       } else {
@@ -3084,7 +3416,8 @@ var files = (() => {
             `mv: ${destParentPath}: No such file or directory`
           );
         }
-        srcParent.children.splice(srcIndex, 1);
+        this.assertModifyDir(destParent, destParentPath, "mv", dest);
+        srcParent.children.splice(srcParent.children.indexOf(srcNode), 1);
         srcNode.name = newName;
         if (!destParent.children) {
           destParent.children = [];
@@ -3107,6 +3440,9 @@ var files = (() => {
       if (!node) {
         throw new Error(`chmod: ${path}: No such file or directory`);
       }
+      if (this.enforcing && !this.accessPolicy.canChangeOwnership(node)) {
+        this.deny("chmod", path, "Operation not permitted");
+      }
       node.permissions = permissions;
     }
     chown(path, ownership) {
@@ -3115,6 +3451,9 @@ var files = (() => {
       if (!node) {
         throw new Error(`chown: ${path}: No such file or directory`);
       }
+      if (this.enforcing && !this.accessPolicy.canChangeOwnership(node, ownership)) {
+        this.deny("chown", path, "Operation not permitted");
+      }
       node.ownership = ownership;
     }
     // --- Persistence ---
@@ -3145,8 +3484,10 @@ var files = (() => {
         const tx = db.transaction(STORE_NAME, "readwrite");
         const store = tx.objectStore(STORE_NAME);
         store.put(this.root, ROOT_KEY);
-        store.put(this.cwd, CWD_KEY);
-        store.put(this.homePath, HOME_KEY);
+        if (!this.currentUid) {
+          store.put(this.cwd, CWD_KEY);
+          store.put(this.homePath, HOME_KEY);
+        }
         await new Promise((resolve, reject) => {
           tx.oncomplete = () => resolve();
           tx.onerror = () => reject(tx.error);
@@ -3156,6 +3497,18 @@ var files = (() => {
       }
     }
     // --- Private helpers ---
+    /** A copy belongs to whoever made it (like `cp` without `-p`) */
+    ownedByCurrentUser(node) {
+      const owner = this.getDefaultOwnership();
+      if (owner) {
+        const apply = (n) => {
+          n.ownership = { ...owner };
+          n.children?.forEach(apply);
+        };
+        apply(node);
+      }
+      return node;
+    }
     cloneNode(node) {
       const now = Date.now();
       const clone = {
@@ -3217,7 +3570,26 @@ var files = (() => {
     "find",
     "head",
     "tail",
-    "wc"
+    "wc",
+    "sort",
+    "uniq",
+    "cut",
+    "paste",
+    "tac",
+    "diff",
+    "sed",
+    "awk",
+    "du",
+    "stat",
+    "chmod",
+    "chown",
+    "ln",
+    "tee",
+    "basename",
+    "dirname",
+    "sh",
+    "source",
+    "xargs"
   ]);
   var FilePathCompletionProvider = class {
     constructor(fs) {
@@ -3236,7 +3608,14 @@ var files = (() => {
       if (token.startsWith("-")) {
         return [];
       }
-      return this.completePath(token);
+      const quote = token.startsWith('"') || token.startsWith("'") ? token[0] : "";
+      const partial = quote ? token.slice(1).replace(new RegExp(`${quote}$`), "") : token;
+      const paths = this.completePath(partial);
+      if (!quote && !paths.some((p) => /\s/.test(p))) {
+        return paths;
+      }
+      const q = quote || '"';
+      return paths.map((p) => p.endsWith("/") ? `${q}${p}` : `${q}${p}${q}`);
     }
     completePath(partial) {
       let dirPath;
@@ -3280,6 +3659,11 @@ var files = (() => {
     }
   };
 
+  // src/lib/utils/split-args.ts
+  function splitArgs(raw) {
+    return splitShellWords(raw);
+  }
+
   // src/lib/processors/cli-ls-command-processor.ts
   var CliLsCommandProcessor = class {
     constructor() {
@@ -3303,41 +3687,63 @@ var files = (() => {
           description: "Use long listing format",
           required: false,
           type: "boolean"
+        },
+        {
+          name: "human-readable",
+          aliases: ["h"],
+          description: "With -l, print sizes like 1.5K and 2M",
+          required: false,
+          type: "boolean"
         }
       ];
+      this.humanReadable = false;
     }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const targetPath = command.value || fs.getCurrentDirectory();
+      const paths = splitArgs(command.value || "");
       const showAll = command.args["all"] || command.args["a"];
       const longFormat = command.args["long"] || command.args["l"];
-      try {
-        const entries = fs.listDirectory(targetPath);
-        const filtered = showAll ? entries : entries.filter((e) => !e.name.startsWith("."));
-        if (filtered.length === 0) {
-          return;
-        }
-        filtered.sort((a, b) => {
-          if (a.type !== b.type) {
-            return a.type === "directory" ? -1 : 1;
+      this.humanReadable = !!(command.args["human-readable"] || command.args["h"]);
+      const targets = paths.length > 0 ? paths : [fs.getCurrentDirectory()];
+      const piped = [];
+      targets.forEach((targetPath, index) => {
+        try {
+          const node = fs.getNode(targetPath);
+          const entries = node && node.type !== "directory" ? [{ ...node, name: targetPath }] : fs.listDirectory(targetPath);
+          const filtered = showAll ? entries : entries.filter((e) => !e.name.startsWith("."));
+          if (targets.length > 1) {
+            if (index > 0) context.writer.writeln();
+            context.writer.writeln(`${targetPath}:`);
           }
-          return a.name.localeCompare(b.name);
-        });
-        if (longFormat) {
-          this.writeLongFormat(filtered, context);
-        } else {
-          this.writeShortFormat(filtered, context);
+          if (filtered.length === 0) {
+            return;
+          }
+          filtered.sort((a, b) => {
+            if (a.type !== b.type) {
+              return a.type === "directory" ? -1 : 1;
+            }
+            return a.name.localeCompare(b.name);
+          });
+          if (longFormat) {
+            this.writeLongFormat(filtered, context);
+          } else {
+            this.writeShortFormat(filtered, context);
+            piped.push(...filtered.map((e) => e.name));
+          }
+        } catch (e) {
+          context.writer.writeError(e.message);
         }
-      } catch (e) {
-        context.writer.writeError(e.message);
+      });
+      if (!longFormat && piped.length > 0) {
+        context.process.output(piped.join("\n"));
       }
     }
     writeDescription(context) {
       context.writer.writeln(this.description);
       context.writer.writeln();
-      context.writer.writeln("Usage: ls [path] [--all] [--long]");
+      context.writer.writeln("Usage: ls [path...] [-a|--all] [-l|--long] [-h|--human-readable]");
     }
     writeLongFormat(entries, context) {
       const { writer } = context;
@@ -3346,7 +3752,7 @@ var files = (() => {
         const perms = entry.permissions || (entry.type === "directory" ? "rwxr-xr-x" : "rw-r--r--");
         const owner = entry.ownership?.uid || "-";
         const group = entry.ownership?.gid || "-";
-        const size = entry.type === "file" ? entry.size.toString() : "-";
+        const size = entry.type !== "file" ? "-" : this.humanReadable ? this.formatSize(entry.size) : entry.size.toString();
         const date = new Date(entry.modifiedAt);
         const dateStr = date.toLocaleDateString("en-US", {
           month: "short",
@@ -3360,6 +3766,17 @@ var files = (() => {
         );
       }
     }
+    formatSize(bytes) {
+      const units = ["K", "M", "G", "T"];
+      let size = bytes;
+      let unit = "";
+      for (const next of units) {
+        if (size < 1024) break;
+        size /= 1024;
+        unit = next;
+      }
+      return unit ? `${size < 10 ? size.toFixed(1) : Math.round(size)}${unit}` : String(bytes);
+    }
     writeShortFormat(entries, context) {
       const { writer } = context;
       const names = entries.map(
@@ -3379,11 +3796,30 @@ var files = (() => {
       this.acceptsRawInput = true;
       this.metadata = { icon: "\u{1F4C1}", module: "file management" };
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.cd.help.change_current_directory_without", "Change the current directory. Without a path it goes to your home directory. Paths can be absolute (/...), relative to where you are, or start with ~ for home.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["cd", t.t("cli.cd.help.go_home_directory", "Go to your home directory")],
+        ["cd <dir>", t.t("cli.cd.help.go_directory", "Go into a directory")],
+        ["cd ..", t.t("cli.cd.help.go_up_one_level", "Go up one level")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["cd ~/docs", t.t("cli.cd.help.go_docs_home", "Go to docs in your home")],
+        ["cd ../projects", t.t("cli.cd.help.go_sibling_directory", "Go to a sibling directory")],
+        ["cd /", t.t("cli.cd.help.go_root", "Go to the root")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const target = command.value || "~";
+      const target = splitArgs(command.value || "").join(" ") || "~";
       try {
         fs.setCurrentDirectory(target);
         await fs.persist();
@@ -3402,8 +3838,24 @@ var files = (() => {
       this.version = LIBRARY_VERSION;
       this.metadata = { icon: "\u{1F4C2}", module: "file management" };
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.pwd.help.print_full_path_directory", "Print the full path of the directory you are in. Relative paths in other commands start from here.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["pwd", t.t("cli.pwd.help.show_current_directory", "Show the current directory")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["pwd", t.t("cli.pwd.help.example_home_user", "For example /home/user")],
+        ["cd ~/docs; pwd", t.t("cli.pwd.help.prints_home_user_docs", "Prints /home/user/docs")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
       context.writer.writeln(fs.getCurrentDirectory());
@@ -3430,22 +3882,44 @@ var files = (() => {
         }
       ];
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.mkdir.help.create_new_directory_p", "Create a new directory. With -p, any missing parent directories are created too.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["mkdir <dir...>", t.t("cli.mkdir.help.create_one_more_directories", "Create one or more directories")],
+        ["mkdir -p <path>", t.t("cli.mkdir.help.create_directory_missing_parents", "Create a directory and its missing parents")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["mkdir projects", t.t("cli.mkdir.help.create_projects_current_directory", "Create projects in the current directory")],
+        ["mkdir -p ~/docs/2026/notes", t.t("cli.mkdir.help.create_whole_path_once", "Create the whole path at once")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const path = command.value;
+      const paths = splitArgs(command.value || "");
       const recursive = command.args["parents"] || command.args["p"];
-      if (!path) {
+      if (paths.length === 0) {
         context.writer.writeError("mkdir: missing operand");
         return;
       }
-      try {
-        fs.createDirectory(path, recursive);
-        await fs.persist();
-      } catch (e) {
-        context.writer.writeError(e.message);
+      let changed = false;
+      for (const path of paths) {
+        try {
+          if (recursive && fs.isDirectory(path)) continue;
+          fs.createDirectory(path, recursive);
+          changed = true;
+        } catch (e) {
+          context.writer.writeError(e.message);
+        }
       }
+      if (changed) await fs.persist();
     }
   };
 
@@ -3460,38 +3934,58 @@ var files = (() => {
       this.valueRequired = true;
       this.metadata = { icon: "\u{1F5D1}", module: "file management" };
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.rmdir.help.remove_empty_directory_refuses", "Remove an empty directory. It refuses to remove a directory that still contains files; use rm -r for that.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["rmdir <dir...>", t.t("cli.rmdir.help.remove_empty_directories", "Remove empty directories")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["rmdir empty-folder", t.t("cli.rmdir.help.remove_directory_current_one", "Remove a directory in the current one")],
+        ["rmdir ~/docs/old", t.t("cli.rmdir.help.remove_full_path", "Remove by full path")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const path = command.value;
-      if (!path) {
+      const paths = splitArgs(command.value || "");
+      if (paths.length === 0) {
         context.writer.writeError("rmdir: missing operand");
         return;
       }
-      try {
-        const node = fs.getNode(path);
-        if (!node) {
-          context.writer.writeError(
-            `rmdir: ${path}: No such file or directory`
-          );
-          return;
-        }
-        if (node.type !== "directory") {
-          context.writer.writeError(`rmdir: ${path}: Not a directory`);
-          return;
-        }
-        if (node.children && node.children.length > 0) {
-          context.writer.writeError(
-            `rmdir: ${path}: Directory not empty`
-          );
-          return;
+      let changed = false;
+      for (const path of paths) {
+        try {
+          const node = fs.getNode(path);
+          if (!node) {
+            context.writer.writeError(
+              `rmdir: ${path}: No such file or directory`
+            );
+            continue;
+          }
+          if (node.type !== "directory") {
+            context.writer.writeError(`rmdir: ${path}: Not a directory`);
+            continue;
+          }
+          if (node.children && node.children.length > 0) {
+            context.writer.writeError(
+              `rmdir: ${path}: Directory not empty`
+            );
+            continue;
+          }
+          fs.remove(path, true);
+          changed = true;
+        } catch (e) {
+          context.writer.writeError(e.message);
         }
-        fs.remove(path);
-        await fs.persist();
-      } catch (e) {
-        context.writer.writeError(e.message);
       }
+      if (changed) await fs.persist();
     }
   };
 
@@ -3506,24 +4000,55 @@ var files = (() => {
       this.valueRequired = true;
       this.metadata = { icon: "\u{1F4C4}", module: "file management" };
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.touch.help.create_empty_file_update", "Create an empty file, or update the modified time of a file that already exists. The parent directory must already exist.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["touch <file...>", t.t("cli.touch.help.create_files_refresh_their", "Create the files, or refresh their timestamps")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["touch notes.txt", t.t("cli.touch.help.create_empty_notes_txt", "Create an empty notes.txt")],
+        ["touch ~/docs/todo.md", t.t("cli.touch.help.create_file_docs", "Create a file in ~/docs")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const path = command.value;
-      if (!path) {
+      const paths = splitArgs(command.value || "");
+      if (paths.length === 0) {
         context.writer.writeError("touch: missing file operand");
         return;
       }
-      try {
-        fs.createFile(path);
-        await fs.persist();
-      } catch (e) {
-        context.writer.writeError(e.message);
+      let changed = false;
+      for (const path of paths) {
+        try {
+          fs.createFile(path);
+          changed = true;
+        } catch (e) {
+          context.writer.writeError(e.message);
+        }
       }
+      if (changed) await fs.persist();
     }
   };
 
+  // src/lib/utils/lines.ts
+  function splitLines(content) {
+    if (content === "") return [];
+    const lines = content.split("\n");
+    if (lines[lines.length - 1] === "") lines.pop();
+    return lines;
+  }
+  function pipedText(data) {
+    return typeof data === "string" ? data : JSON.stringify(data);
+  }
+
   // src/lib/processors/cli-cat-command-processor.ts
   var CliCatCommandProcessor = class {
     constructor() {
@@ -3535,22 +4060,58 @@ var files = (() => {
       this.valueRequired = true;
       this.metadata = { icon: "\u{1F4D6}", module: "file management" };
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.cat.help.print_contents_one_more", "Print the contents of one or more files, joined in order, or of piped input. Pipe the output into other commands to search, sort or count it.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["cat <file...>", t.t("cli.cat.help.print_files_one_after", "Print files one after another")],
+        ["cat <file> | <command>", t.t("cli.cat.help.send_file_another_command", "Send a file to another command")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["cat notes.txt", t.t("cli.cat.help.show_whole_file", "Show the whole file")],
+        ["cat app.log | grep error", t.t("cli.cat.help.show_only_lines_error", "Show only lines with error")],
+        ["cat names.txt | sort", t.t("cli.cat.help.print_lines_sorted", "Print the lines sorted")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const path = command.value;
-      if (!path) {
+      const paths = splitArgs(command.value || "");
+      if (paths.length === 0) {
+        if (command.data != null) {
+          context.writer.writeln(pipedText(command.data));
+          return;
+        }
         context.writer.writeError("cat: missing file operand");
         return;
       }
-      try {
-        const content = fs.readFile(path);
-        if (content !== null) {
-          context.writer.writeln(content);
+      let output = "";
+      for (const path of paths) {
+        try {
+          if (fs.isDirectory(path)) {
+            context.writer.writeError(`cat: ${path}: Is a directory`);
+            continue;
+          }
+          const content = fs.readFile(path);
+          if (content === null) {
+            context.writer.writeError(
+              `cat: ${path}: No such file or directory`
+            );
+            continue;
+          }
+          output += content;
+        } catch (e) {
+          context.writer.writeError(e.message);
         }
-      } catch (e) {
-        context.writer.writeError(e.message);
+      }
+      if (output !== "") {
+        context.writer.writeln(output.replace(/\n$/, ""));
       }
     }
   };
@@ -3566,60 +4127,33 @@ var files = (() => {
       this.extendsProcessor = true;
       this.metadata = { icon: "\u{1F4AC}", module: "file management" };
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.echo.help.print_text_terminal_add", "Print text to the terminal. Add > file to save it to a file (replacing it) or >> file to add it to the end.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["echo <text>", t.t("cli.echo.help.print_text", "Print text")],
+        ["echo <text> > <file>", t.t("cli.echo.help.write_text_file", "Write text to a file")],
+        ["echo <text> >> <file>", t.t("cli.echo.help.append_text_file", "Append text to a file")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["echo Hello world", t.t("cli.echo.help.print_greeting", "Print a greeting")],
+        ["echo first line > notes.txt", t.t("cli.echo.help.create_replace_notes_txt", "Create or replace notes.txt")],
+        ["echo another line >> notes.txt", t.t("cli.echo.help.add_line", "Add a line to it")]
+      ]);
+    }
     async processCommand(command, context) {
-      const afterEcho = command.value || "";
-      const hasRedirection = />>?\s*.+$/.test(afterEcho);
-      if (!hasRedirection) {
-        if (this.originalProcessor) {
-          await this.originalProcessor.processCommand(command, context);
-        } else {
-          context.writer.writeln(afterEcho);
-        }
+      if (this.originalProcessor) {
+        await this.originalProcessor.processCommand(command, context);
         return;
       }
-      const fs = context.services.get(
-        IFileSystemService_TOKEN
-      );
-      let text;
-      let filePath;
-      let append = false;
-      const appendMatch = afterEcho.match(/^(.*?)\s*>>\s*(.+)$/);
-      const overwriteMatch = afterEcho.match(/^(.*?)\s*>\s*(.+)$/);
-      if (appendMatch) {
-        text = appendMatch[1].trim();
-        filePath = appendMatch[2].trim();
-        append = true;
-      } else {
-        text = overwriteMatch[1].trim();
-        filePath = overwriteMatch[2].trim();
-      }
-      if (text.startsWith('"') && text.endsWith('"') || text.startsWith("'") && text.endsWith("'")) {
-        text = text.slice(1, -1);
-      }
-      text = text.replace(/\\([\\nrtv0])/g, (_, ch) => {
-        switch (ch) {
-          case "n":
-            return "\n";
-          case "t":
-            return "	";
-          case "r":
-            return "\r";
-          case "v":
-            return "\v";
-          case "0":
-            return "\0";
-          case "\\":
-            return "\\";
-          default:
-            return ch;
-        }
-      });
-      try {
-        fs.writeFile(filePath, text + "\n", append);
-        await fs.persist();
-      } catch (e) {
-        context.writer.writeError(e.message);
-      }
+      const text = joinShellWords(command.value || "");
+      context.writer.writeln(text);
+      context.process.output(text);
     }
   };
 
@@ -3650,35 +4184,58 @@ var files = (() => {
         }
       ];
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.rm.help.delete_file_directories_only", "Delete a file. Directories are only removed with -r, which deletes everything inside them. Deleted files cannot be recovered.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["rm <file...>", t.t("cli.rm.help.delete_one_more_files", "Delete one or more files")],
+        ["rm -r <dir>", t.t("cli.rm.help.delete_directory_contents", "Delete a directory and its contents")],
+        ["rm -f <file>", t.t("cli.rm.help.delete_without_error_if", "Delete without an error if it is missing")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["rm notes.bak", t.t("cli.rm.help.delete_one_file", "Delete one file")],
+        ["rm -r old-project", t.t("cli.rm.help.delete_whole_directory", "Delete a whole directory")],
+        ["rm -f maybe.txt", t.t("cli.rm.help.quiet_if_file_does", "Quiet if the file does not exist")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const path = command.value;
+      const paths = splitArgs(command.value || "");
       const recursive = command.args["recursive"] || command.args["r"] || command.args["R"];
       const force = command.args["force"] || command.args["f"];
-      if (!path) {
-        context.writer.writeError("rm: missing operand");
+      if (paths.length === 0) {
+        if (!force) context.writer.writeError("rm: missing operand");
         return;
       }
-      try {
-        if (!fs.exists(path)) {
-          if (!force) {
-            context.writer.writeError(
-              `rm: ${path}: No such file or directory`
-            );
+      let changed = false;
+      for (const path of paths) {
+        try {
+          if (!fs.exists(path)) {
+            if (!force) {
+              context.writer.writeError(
+                `rm: ${path}: No such file or directory`
+              );
+            }
+            continue;
           }
-          return;
-        }
-        if (fs.isDirectory(path) && !recursive) {
-          context.writer.writeError(`rm: ${path}: Is a directory`);
-          return;
+          if (fs.isDirectory(path) && !recursive) {
+            context.writer.writeError(`rm: ${path}: Is a directory`);
+            continue;
+          }
+          fs.remove(path, recursive);
+          changed = true;
+        } catch (e) {
+          context.writer.writeError(e.message);
         }
-        fs.remove(path, recursive);
-        await fs.persist();
-      } catch (e) {
-        context.writer.writeError(e.message);
       }
+      if (changed) await fs.persist();
     }
   };
 
@@ -3698,11 +4255,37 @@ var files = (() => {
           description: "Copy directories recursively",
           required: false,
           type: "boolean"
+        },
+        {
+          name: "force",
+          aliases: ["f"],
+          description: "Overwrite existing files (always done; accepted for -rf)",
+          required: false,
+          type: "boolean"
         }
       ];
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.cp.help.copy_file_new_path", "Copy a file to a new path, or into an existing directory. Copying a directory needs -r, which copies everything inside it. A file already at the destination is replaced.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["cp <source> <dest>", t.t("cli.cp.help.copy_file_new_name", "Copy a file to a new name")],
+        ["cp <source...> <dir>", t.t("cli.cp.help.copy_files_directory", "Copy files into a directory")],
+        ["cp -r <dir> <dest>", t.t("cli.cp.help.copy_directory_contents", "Copy a directory and its contents")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["cp notes.txt notes.bak", t.t("cli.cp.help.make_backup_copy", "Make a backup copy")],
+        ["cp report.txt ~/docs", t.t("cli.cp.help.copy_docs", "Copy into ~/docs")],
+        ["cp -r project project-copy", t.t("cli.cp.help.duplicate_whole_directory", "Duplicate a whole directory")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
       const recursive = command.args["recursive"] || command.args["r"] || command.args["R"];
@@ -3714,18 +4297,26 @@ var files = (() => {
         );
         return;
       }
-      const src = parts[0];
-      const dest = parts[1];
-      try {
-        fs.copy(src, dest, recursive);
-        await fs.persist();
-      } catch (e) {
-        context.writer.writeError(e.message);
+      const dest = parts[parts.length - 1];
+      const sources = parts.slice(0, -1);
+      if (sources.length > 1 && !fs.isDirectory(dest)) {
+        context.writer.writeError(`cp: target '${dest}' is not a directory`);
+        return;
       }
+      let changed = false;
+      for (const src of sources) {
+        try {
+          fs.copy(src, dest, recursive);
+          changed = true;
+        } catch (e) {
+          context.writer.writeError(e.message);
+        }
+      }
+      if (changed) await fs.persist();
     }
     parseArgs(command) {
       const raw = command.value || "";
-      return raw.split(/\s+/).filter((t) => t && !t.startsWith("--") && !t.startsWith("-"));
+      return splitArgs(raw).filter(Boolean);
     }
   };
 
@@ -3739,8 +4330,26 @@ var files = (() => {
       this.acceptsRawInput = true;
       this.metadata = { icon: "\u{1F4E6}", module: "file management" };
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.mv.help.move_rename_file_directory", "Move or rename a file or directory. If the destination is an existing directory, the source is moved into it; otherwise it is renamed. A file already at the destination is replaced.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["mv <source> <dest>", t.t("cli.mv.help.rename_file_directory", "Rename a file or directory")],
+        ["mv <source...> <dir>", t.t("cli.mv.help.move_them_directory", "Move them into a directory")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["mv draft.txt final.txt", t.t("cli.mv.help.rename_file", "Rename a file")],
+        ["mv final.txt ~/docs", t.t("cli.mv.help.move_docs", "Move it into ~/docs")],
+        ["mv old-dir new-dir", t.t("cli.mv.help.rename_directory", "Rename a directory")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
       const parts = this.parseArgs(command);
@@ -3749,21 +4358,39 @@ var files = (() => {
         context.writer.writeln("Usage: mv <source> <destination>");
         return;
       }
-      const src = parts[0];
-      const dest = parts[1];
-      try {
-        fs.move(src, dest);
-        await fs.persist();
-      } catch (e) {
-        context.writer.writeError(e.message);
+      const dest = parts[parts.length - 1];
+      const sources = parts.slice(0, -1);
+      if (sources.length > 1 && !fs.isDirectory(dest)) {
+        context.writer.writeError(`mv: target '${dest}' is not a directory`);
+        return;
       }
+      let changed = false;
+      for (const src of sources) {
+        try {
+          fs.move(src, dest);
+          changed = true;
+        } catch (e) {
+          context.writer.writeError(e.message);
+        }
+      }
+      if (changed) await fs.persist();
     }
     parseArgs(command) {
       const raw = command.value || "";
-      return raw.split(/\s+/).filter((t) => t && !t.startsWith("--") && !t.startsWith("-"));
+      return splitArgs(raw).filter(Boolean);
     }
   };
 
+  // src/lib/utils/readable-children.ts
+  function readableChildren(fs, path) {
+    try {
+      return fs.listDirectory(path);
+    } catch (e) {
+      if (isCliAccessDeniedError(e)) return null;
+      throw e;
+    }
+  }
+
   // src/lib/processors/cli-tree-command-processor.ts
   var CliTreeCommandProcessor = class {
     constructor() {
@@ -3783,11 +4410,29 @@ var files = (() => {
         }
       ];
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.tree.help.draw_directory_everything_below", "Draw a directory and everything below it as a tree, directories first, followed by a count of directories and files. Defaults to the current directory.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["tree [dir]", t.t("cli.tree.help.show_whole_tree", "Show the whole tree")],
+        ["tree -L <n> [dir]", t.t("cli.tree.help.only_levels_deep", "Only <n> levels deep")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["tree", t.t("cli.tree.help.tree_current_directory", "Tree of the current directory")],
+        ["tree ~/docs", t.t("cli.tree.help.tree_docs", "Tree of ~/docs")],
+        ["tree -L 2", t.t("cli.tree.help.top_two_levels_only", "Top two levels only")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const targetPath = command.value || fs.getCurrentDirectory();
+      const targetPath = splitArgs(command.value || "").join(" ") || fs.getCurrentDirectory();
       const maxDepth = command.args["depth"] ? parseInt(command.args["depth"]) : command.args["L"] ? parseInt(command.args["L"]) : Infinity;
       try {
         const node = fs.getNode(targetPath);
@@ -3811,7 +4456,8 @@ var files = (() => {
           )
         );
         const counts = { dirs: 0, files: 0 };
-        this.printTree(node, "", true, 0, maxDepth, context, counts);
+        this.fs = fs;
+        this.printTree(node, "", true, 0, maxDepth, context, counts, resolvedPath);
         context.writer.writeln();
         context.writer.writeln(
           `${counts.dirs} directories, ${counts.files} files`
@@ -3820,11 +4466,15 @@ var files = (() => {
         context.writer.writeError(e.message);
       }
     }
-    printTree(node, prefix, isRoot, depth, maxDepth, context, counts) {
-      if (!node.children || depth >= maxDepth) {
+    printTree(node, prefix, isRoot, depth, maxDepth, context, counts, path = "/") {
+      if (depth >= maxDepth) {
         return;
       }
-      const children = [...node.children].sort((a, b) => {
+      const visible = this.fs ? readableChildren(this.fs, path) : node.children;
+      if (!visible) {
+        return;
+      }
+      const children = [...visible].sort((a, b) => {
         if (a.type !== b.type) {
           return a.type === "directory" ? -1 : 1;
         }
@@ -3849,7 +4499,8 @@ var files = (() => {
             depth + 1,
             maxDepth,
             context,
-            counts
+            counts,
+            path === "/" ? `/${child.name}` : `${path}/${child.name}`
           );
         } else {
           counts.files++;
@@ -3878,21 +4529,40 @@ var files = (() => {
         }
       ];
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.head.help.print_first_lines_file", "Print the first lines of a file, 10 by default. Works on piped input too. With several files, each one gets a ==> name <== header.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["head <file>", t.t("cli.head.help.first_10_lines", "First 10 lines")],
+        ["head -n <count> <file>", t.t("cli.head.help.first_lines", "First <count> lines")],
+        ["<command> | head", t.t("cli.head.help.first_lines_piped_input", "First lines of piped input")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["head notes.txt", t.t("cli.head.help.show_start_file", "Show the start of a file")],
+        ["head -n 3 a.txt b.txt", t.t("cli.head.help.first_3_lines_each", "First 3 lines of each file")],
+        ["cat app.log | head -n 20", t.t("cli.head.help.first_20_lines_log", "First 20 lines of the log")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const count = parseInt(
-        command.args["lines"] || command.args["n"] || "10",
-        10
-      );
+      const countArg = command.args["lines"] ?? command.args["n"] ?? Object.keys(command.args).find((k) => /^\d+$/.test(k));
+      const parsedCount = parseInt(String(countArg ?? "10"), 10);
+      const count = isNaN(parsedCount) ? 10 : Math.abs(parsedCount);
       const paths = this.parsePaths(command);
       if (paths.length === 0) {
         if (command.data != null) {
-          const content = typeof command.data === "string" ? command.data : JSON.stringify(command.data);
-          const lines = content.split("\n");
+          const lines = splitLines(pipedText(command.data));
           const selected = lines.slice(0, count);
-          context.writer.writeln(selected.join("\n"));
+          if (selected.length > 0) {
+            context.writer.writeln(selected.join("\n"));
+          }
           return;
         }
         context.writer.writeError("head: missing file operand");
@@ -3911,9 +4581,11 @@ var files = (() => {
             if (i > 0) context.writer.writeln();
             context.writer.writeln(`==> ${path} <==`);
           }
-          const lines = content.split("\n");
+          const lines = splitLines(content);
           const selected = lines.slice(0, count);
-          context.writer.writeln(selected.join("\n"));
+          if (selected.length > 0) {
+            context.writer.writeln(selected.join("\n"));
+          }
         } catch (e) {
           context.writer.writeError(`head: ${e.message}`);
         }
@@ -3921,7 +4593,7 @@ var files = (() => {
     }
     parsePaths(command) {
       const raw = command.value || "";
-      return raw.split(/\s+/).filter(Boolean);
+      return splitArgs(raw).filter(Boolean);
     }
   };
 
@@ -3945,21 +4617,40 @@ var files = (() => {
         }
       ];
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.tail.help.print_last_lines_file", "Print the last lines of a file, 10 by default. Works on piped input too. With several files, each one gets a ==> name <== header.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["tail <file>", t.t("cli.tail.help.last_10_lines", "Last 10 lines")],
+        ["tail -n <count> <file>", t.t("cli.tail.help.last_lines", "Last <count> lines")],
+        ["<command> | tail", t.t("cli.tail.help.last_lines_piped_input", "Last lines of piped input")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["tail app.log", t.t("cli.tail.help.show_end_log", "Show the end of a log")],
+        ["tail -n 5 notes.txt", t.t("cli.tail.help.last_5_lines", "Last 5 lines")],
+        ["cat app.log | tail -n 20", t.t("cli.tail.help.last_20_lines_log", "Last 20 lines of the log")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      const count = parseInt(
-        command.args["lines"] || command.args["n"] || "10",
-        10
-      );
+      const countArg = command.args["lines"] ?? command.args["n"] ?? Object.keys(command.args).find((k) => /^\d+$/.test(k));
+      const parsedCount = parseInt(String(countArg ?? "10"), 10);
+      const count = isNaN(parsedCount) ? 10 : Math.abs(parsedCount);
       const paths = this.parsePaths(command);
       if (paths.length === 0) {
         if (command.data != null) {
-          const content = typeof command.data === "string" ? command.data : JSON.stringify(command.data);
-          const lines = content.split("\n");
-          const selected = lines.slice(-count);
-          context.writer.writeln(selected.join("\n"));
+          const lines = splitLines(pipedText(command.data));
+          const selected = count > 0 ? lines.slice(-count) : [];
+          if (selected.length > 0) {
+            context.writer.writeln(selected.join("\n"));
+          }
           return;
         }
         context.writer.writeError("tail: missing file operand");
@@ -3978,9 +4669,11 @@ var files = (() => {
             if (i > 0) context.writer.writeln();
             context.writer.writeln(`==> ${path} <==`);
           }
-          const lines = content.split("\n");
-          const selected = lines.slice(-count);
-          context.writer.writeln(selected.join("\n"));
+          const lines = splitLines(content);
+          const selected = count > 0 ? lines.slice(-count) : [];
+          if (selected.length > 0) {
+            context.writer.writeln(selected.join("\n"));
+          }
         } catch (e) {
           context.writer.writeError(`tail: ${e.message}`);
         }
@@ -3988,7 +4681,7 @@ var files = (() => {
     }
     parsePaths(command) {
       const raw = command.value || "";
-      return raw.split(/\s+/).filter(Boolean);
+      return splitArgs(raw).filter(Boolean);
     }
   };
 
@@ -4026,8 +4719,30 @@ var files = (() => {
         }
       ];
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.wc.help.count_lines_words_characters", "Count lines, words and characters in files or piped input. With several files, a total line is printed at the end.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["wc <file...>", t.t("cli.wc.help.lines_words_characters", "Lines, words and characters")],
+        ["wc -l <file>", t.t("cli.wc.help.only_line_count", "Only the line count")],
+        ["<command> | wc", t.t("cli.wc.help.count_piped_input", "Count piped input")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["wc notes.txt", t.t("cli.wc.help.all_three_counts", "All three counts")],
+        ["wc -l a.txt b.txt", t.t("cli.wc.help.line_counts_total", "Line counts with a total")],
+        [
+          "cat app.log | grep error | wc -l",
+          t.t("cli.wc.help.how_many_lines_mention", "How many lines mention error")
+        ]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
       const showLines = command.args["lines"] || command.args["l"] || false;
@@ -4037,10 +4752,9 @@ var files = (() => {
       const paths = this.parsePaths(command);
       if (paths.length === 0) {
         if (command.data != null) {
-          const content = typeof command.data === "string" ? command.data : JSON.stringify(command.data);
-          const lineCount = content === "" ? 0 : content.split("\n").length;
-          const wordCount = content.trim() === "" ? 0 : content.trim().split(/\s+/).length;
-          const charCount = content.length;
+          let content = pipedText(command.data);
+          if (content !== "" && !content.endsWith("\n")) content += "\n";
+          const { lineCount, wordCount, charCount } = this.count(content);
           const parts = [];
           if (showAll || showLines) parts.push(String(lineCount).padStart(8));
           if (showAll || showWords) parts.push(String(wordCount).padStart(8));
@@ -4061,9 +4775,7 @@ var files = (() => {
             continue;
           }
           const content = fs.readFile(path) ?? "";
-          const lineCount = content === "" ? 0 : content.split("\n").length;
-          const wordCount = content.trim() === "" ? 0 : content.trim().split(/\s+/).length;
-          const charCount = content.length;
+          const { lineCount, wordCount, charCount } = this.count(content);
           totalLines += lineCount;
           totalWords += wordCount;
           totalChars += charCount;
@@ -4086,9 +4798,17 @@ var files = (() => {
         context.writer.writeln(parts.join(""));
       }
     }
+    /** Counts like Unix wc: lines are newline characters. */
+    count(content) {
+      return {
+        lineCount: (content.match(/\n/g) ?? []).length,
+        wordCount: content.trim() === "" ? 0 : content.trim().split(/\s+/).length,
+        charCount: content.length
+      };
+    }
     parsePaths(command) {
       const raw = command.value || "";
-      return raw.split(/\s+/).filter(Boolean);
+      return splitArgs(raw).filter(Boolean);
     }
   };
 
@@ -4104,7 +4824,13 @@ var files = (() => {
       this.parameters = [
         {
           name: "name",
-          description: "Match filename pattern (glob: * and ? supported)",
+          description: "Match filename pattern (glob: * and ? supported), case-sensitive",
+          required: false,
+          type: "string"
+        },
+        {
+          name: "iname",
+          description: "Like --name, but case-insensitive",
           required: false,
           type: "string"
         },
@@ -4116,20 +4842,42 @@ var files = (() => {
         },
         {
           name: "maxdepth",
-          description: "Maximum directory depth to search",
+          description: "Maximum depth: 0 is only the start path, 1 its direct children",
           required: false,
           type: "number"
         }
       ];
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.find.help.list_files_directories_under", "List files and directories under a path (the current directory by default), searching all subdirectories. The start path itself is listed first. Filter by name with a glob pattern (* and ?; --name is case-sensitive, --iname is not) or by type.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["find [path]", t.t("cli.find.help.list_everything_under_path", "List everything under a path")],
+        ["find [path] --name <pattern>", t.t("cli.find.help.match_names_against_glob", "Match names against a glob")],
+        ["find [path] --iname <pattern>", t.t("cli.find.help.same_ignoring_case", "Same, ignoring case")],
+        ["find [path] --type f|d", t.t("cli.find.help.only_files_f_directories", "Only files (f) or directories (d)")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["find ~/docs", t.t("cli.find.help.list_everything_docs", "List everything in ~/docs")],
+        ['find . --name "*.txt"', t.t("cli.find.help.find_all_txt_files", "Find all .txt files")],
+        ["find . --type d --maxdepth 1", t.t("cli.find.help.directories_near_top", "Directories near the top")],
+        ['find . --name "*.tmp" | xargs rm', t.t("cli.find.help.delete_all_tmp_files", "Delete all .tmp files")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
       const searchPath = this.parseSearchPath(command) || fs.getCurrentDirectory();
-      const namePattern = command.args["name"] || null;
       const typeFilter = command.args["type"] || null;
-      const maxDepth = command.args["maxdepth"] ? parseInt(command.args["maxdepth"], 10) : Infinity;
+      const maxDepthArg = command.args["maxdepth"];
+      const parsedDepth = parseInt(String(maxDepthArg ?? ""), 10);
+      const maxDepth = maxDepthArg != null && maxDepthArg !== true && !isNaN(parsedDepth) ? parsedDepth : Infinity;
       try {
         const node = fs.getNode(searchPath);
         if (!node) {
@@ -4138,24 +4886,25 @@ var files = (() => {
           );
           return;
         }
-        if (node.type !== "directory") {
-          context.writer.writeError(
-            `find: '${searchPath}': Not a directory`
-          );
-          return;
-        }
         const resolvedBase = fs.resolvePath(searchPath);
-        const nameRegex = namePattern ? this.globToRegex(namePattern) : null;
+        const nameRegex = this.nameRegex(command);
         const results = [];
-        this.walk(
-          node,
-          resolvedBase,
-          0,
-          maxDepth,
-          nameRegex,
-          typeFilter,
-          results
-        );
+        this.fs = fs;
+        const baseName = resolvedBase.split("/").filter(Boolean).pop() ?? "/";
+        if (this.matches(baseName, node.type, nameRegex, typeFilter)) {
+          results.push(resolvedBase);
+        }
+        if (node.type === "directory" && maxDepth > 0) {
+          this.walk(
+            node,
+            resolvedBase,
+            1,
+            maxDepth,
+            nameRegex,
+            typeFilter,
+            results
+          );
+        }
         for (const r of results) {
           context.writer.writeln(r);
         }
@@ -4163,31 +4912,41 @@ var files = (() => {
         context.writer.writeError(`find: ${e.message}`);
       }
     }
+    /** `--name` matches case-sensitively, `--iname` ignoring case. */
+    nameRegex(command) {
+      const name = command.args["name"];
+      if (name != null && name !== true) {
+        return this.globToRegex(String(name), false);
+      }
+      const iname = command.args["iname"];
+      if (iname != null && iname !== true) {
+        return this.globToRegex(String(iname), true);
+      }
+      return null;
+    }
+    matches(name, type, nameRegex, typeFilter) {
+      if (nameRegex && !nameRegex.test(name)) return false;
+      if (typeFilter === "f" && type !== "file") return false;
+      if (typeFilter === "d" && type !== "directory") return false;
+      return true;
+    }
     parseSearchPath(command) {
       const raw = command.value || "";
-      const tokens = raw.split(/\s+/).filter(Boolean);
+      const tokens = splitArgs(raw).filter(Boolean);
       return tokens.length > 0 ? tokens[0] : null;
     }
-    globToRegex(pattern) {
+    globToRegex(pattern, ignoreCase) {
       const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&");
       const regexStr = escaped.replace(/\*/g, ".*").replace(/\?/g, ".");
-      return new RegExp(`^${regexStr}$`, "i");
+      return new RegExp(`^${regexStr}$`, ignoreCase ? "i" : "");
     }
+    /** Lists the children of `node`, which are at `depth` (1 = direct children). */
     walk(node, currentPath, depth, maxDepth, nameRegex, typeFilter, results) {
-      if (!node.children) return;
-      for (const child of node.children) {
+      const children = this.fs ? readableChildren(this.fs, currentPath) : node.children;
+      if (!children) return;
+      for (const child of children) {
         const childPath = currentPath === "/" ? `/${child.name}` : `${currentPath}/${child.name}`;
-        let matches = true;
-        if (nameRegex && !nameRegex.test(child.name)) {
-          matches = false;
-        }
-        if (typeFilter === "f" && child.type !== "file") {
-          matches = false;
-        }
-        if (typeFilter === "d" && child.type !== "directory") {
-          matches = false;
-        }
-        if (matches) {
+        if (this.matches(child.name, child.type, nameRegex, typeFilter)) {
           results.push(childPath);
         }
         if (child.type === "directory" && depth < maxDepth) {
@@ -4243,6 +5002,13 @@ var files = (() => {
           required: false,
           type: "boolean"
         },
+        {
+          name: "quiet",
+          aliases: ["q"],
+          description: "Print nothing; only the exit status tells whether a line matched",
+          required: false,
+          type: "boolean"
+        },
         {
           name: "files-with-matches",
           aliases: ["l"],
@@ -4256,11 +5022,52 @@ var files = (() => {
           description: "Select non-matching lines",
           required: false,
           type: "boolean"
+        },
+        {
+          name: "word-regexp",
+          aliases: ["w"],
+          description: "Match only whole words",
+          required: false,
+          type: "boolean"
+        },
+        {
+          name: "only-matching",
+          aliases: ["o"],
+          description: "Print only the matched parts, one per line",
+          required: false,
+          type: "boolean"
+        },
+        {
+          name: "extended-regexp",
+          aliases: ["E"],
+          description: "Extended regular expressions (patterns always are)",
+          required: false,
+          type: "boolean"
         }
       ];
     }
+    writeDescription(context) {
+      const t = context.translator;
+      writeWrapped(
+        context,
+        t.t("cli.grep.help.print_lines_match_pattern", "Print the lines that match a pattern. The pattern is a regular expression, matches are highlighted, and the input can be files, directories (with -r) or piped text.")
+      );
+      context.writer.writeln();
+      writeUsage(context, [
+        ["grep <pattern> <file...>", t.t("cli.grep.help.search_one_more_files", "Search one or more files")],
+        ["grep -r <pattern> <dir>", t.t("cli.grep.help.search_every_file_under", "Search every file under a directory")],
+        ["<command> | grep <pattern>", t.t("cli.grep.help.filter_piped_input", "Filter piped input")]
+      ]);
+      context.writer.writeln();
+      writeExamples(context, [
+        ["grep -i error app.log", t.t("cli.grep.help.case_insensitive_search", "Case-insensitive search")],
+        ["grep -r -n TODO src", t.t("cli.grep.help.find_todos_line_numbers", "Find TODOs with line numbers")],
+        ["grep -v ^# config.txt", t.t("cli.grep.help.hide_comment_lines", "Hide comment lines")],
+        ["cat app.log | grep -c ERROR", t.t("cli.grep.help.count_matching_lines", "Count matching lines")]
+      ]);
+    }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
       const ignoreCase = command.args["ignore-case"] || command.args["i"] || false;
@@ -4269,51 +5076,56 @@ var files = (() => {
       const countOnly = command.args["count"] || command.args["c"] || false;
       const filesOnly = command.args["files-with-matches"] || command.args["l"] || false;
       const invert = command.args["invert-match"] || command.args["v"] || false;
+      const wordRegexp = command.args["word-regexp"] || command.args["w"] || false;
+      const onlyMatching = command.args["only-matching"] || command.args["o"] || false;
+      const quiet = command.args["quiet"] || command.args["q"] || false;
       const { pattern, paths } = this.parseArgs(command);
       if (!pattern) {
         context.writer.writeError(
           "grep: missing pattern. Usage: grep [options] <pattern> <file>"
         );
+        context.process.exit(2, { silent: true });
+        return;
+      }
+      let regex;
+      try {
+        const source = wordRegexp ? `(?<!\\w)(?:${pattern})(?!\\w)` : pattern;
+        regex = new RegExp(source, ignoreCase ? "gi" : "g");
+      } catch {
+        context.writer.writeError(`grep: invalid pattern '${pattern}'`);
+        context.process.exit(2, { silent: true });
         return;
       }
       if (paths.length === 0) {
         if (command.data != null) {
-          let regex2;
-          try {
-            regex2 = new RegExp(pattern, ignoreCase ? "gi" : "g");
-          } catch {
-            context.writer.writeError(`grep: invalid pattern '${pattern}'`);
-            return;
-          }
           const content = typeof command.data === "string" ? command.data : JSON.stringify(command.data);
-          this.grepContent(content, null, regex2, {
+          const found2 = this.grepContent(content, null, regex, {
             ignoreCase,
             showLineNum,
             countOnly,
             filesOnly,
-            invert
+            invert,
+            onlyMatching,
+            quiet
           }, context, false);
+          this.exitStatus(context, found2, false);
           return;
         }
         context.writer.writeError(
           "grep: missing file operand. Usage: grep [options] <pattern> <file>"
         );
-        return;
-      }
-      let regex;
-      try {
-        regex = new RegExp(pattern, ignoreCase ? "gi" : "g");
-      } catch {
-        context.writer.writeError(`grep: invalid pattern '${pattern}'`);
+        context.process.exit(2, { silent: true });
         return;
       }
       const filePaths = [];
+      let failed = false;
       for (const p of paths) {
         try {
           if (!fs.exists(p)) {
             context.writer.writeError(
               `grep: ${p}: No such file or directory`
             );
+            failed = true;
             continue;
           }
           if (fs.isDirectory(p)) {
@@ -4321,6 +5133,7 @@ var files = (() => {
               context.writer.writeError(
                 `grep: ${p}: Is a directory`
               );
+              failed = true;
               continue;
             }
             this.collectFiles(fs, fs.resolvePath(p), fs.getNode(p), filePaths);
@@ -4329,26 +5142,40 @@ var files = (() => {
           }
         } catch (e) {
           context.writer.writeError(`grep: ${e.message}`);
+          failed = true;
         }
       }
       const multiFile = filePaths.length > 1;
+      let found = 0;
       for (const filePath of filePaths) {
         try {
           const content = fs.readFile(filePath) ?? "";
-          this.grepContent(content, filePath, regex, {
+          found += this.grepContent(content, filePath, regex, {
             ignoreCase,
             showLineNum,
             countOnly,
             filesOnly,
-            invert
+            invert,
+            onlyMatching,
+            quiet
           }, context, multiFile);
         } catch (e) {
           context.writer.writeError(`grep: ${filePath}: ${e.message}`);
+          failed = true;
         }
       }
+      this.exitStatus(context, found, failed);
+    }
+    /**
+     * As Unix grep: 0 when a line matched, 1 when none did, 2 after an
+     * error (so `if grep -q ...` and `grep x f && ...` work).
+     */
+    exitStatus(context, found, failed) {
+      if (found > 0) return;
+      context.process.exit(failed ? 2 : 1, { silent: true });
     }
     grepContent(content, filePath, regex, options, context, multiFile) {
-      const lines = content.split("\n");
+      const lines = splitLines(content);
       let matchCount = 0;
       const matchingLines = [];
       for (let lineIdx = 0; lineIdx < lines.length; lineIdx++) {
@@ -4361,6 +5188,7 @@ var files = (() => {
           matchingLines.push({ num: lineIdx + 1, text: line });
         }
       }
+      if (options.quiet) return matchCount;
       if (options.filesOnly) {
         if (matchCount > 0 && filePath) {
           context.writer.writeln(filePath);
@@ -4379,6 +5207,18 @@ var files = (() => {
             parts.push(context.writer.wrapInColor(String(m.num), CliForegroundColor.Green));
             parts.push(":");
           }
+          if (options.onlyMatching && !options.invert) {
+            regex.lastIndex = 0;
+            const prefix = parts.join("");
+            for (const match of m.text.match(regex) ?? []) {
+              if (match !== "") {
+                context.writer.writeln(
+                  prefix + context.writer.wrapInColor(match, CliForegroundColor.Red)
+                );
+              }
+            }
+            continue;
+          }
           if (!options.invert) {
             regex.lastIndex = 0;
             const highlighted = m.text.replace(
@@ -4392,10 +5232,11 @@ var files = (() => {
           context.writer.writeln(parts.join(""));
         }
       }
+      return matchCount;
     }
     parseArgs(command) {
       const raw = command.value || "";
-      const tokens = raw.split(/\s+/).filter(Boolean);
+      const tokens = splitArgs(raw).filter(Boolean);
       if (tokens.length === 0) {
         return { pattern: null, paths: [] };
       }
@@ -4408,8 +5249,9 @@ var files = (() => {
       };
     }
     collectFiles(fs, basePath, node, result) {
-      if (!node.children) return;
-      for (const child of node.children) {
+      const children = readableChildren(fs, basePath);
+      if (!children) return;
+      for (const child of children) {
         const childPath = basePath === "/" ? `/${child.name}` : `${basePath}/${child.name}`;
         if (child.type === "file") {
           result.push(childPath);
@@ -4441,17 +5283,14 @@ var files = (() => {
       ];
     }
     async processCommand(command, context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
-      let filePath = (command.value || "").trim();
-      if (!filePath && command.rawCommand) {
-        const raw = command.rawCommand.trim();
-        const firstSpace = raw.indexOf(" ");
-        if (firstSpace > -1) {
-          filePath = raw.slice(firstSpace + 1).trim();
-        }
+      let words = splitArgs(command.value || "");
+      if (words.length === 0 && command.rawCommand) {
+        words = splitArgs(command.rawCommand).slice(1).filter((w) => !w.startsWith("-"));
       }
+      const filePath = words[0] ?? "";
       if (!filePath) {
         context.writer.writeError("sh: missing file operand");
         context.process.exit(1, { silent: true });
@@ -4484,10 +5323,10 @@ var files = (() => {
       await executeScript(content, context);
     }
     writeDescription(context) {
-      const { writer } = context;
-      writer.writeln(this.description);
+      const { writer, translator: t } = context;
+      writer.writeln(t.t("cli.sh.description", this.description));
       writer.writeln();
-      writer.writeln("Usage:");
+      writer.writeln(t.t("cli.common.usage", "Usage:"));
       writer.writeln(
         `  ${writer.wrapInColor("sh <script.sh>", CliForegroundColor.Cyan)}`
       );
@@ -4498,80 +5337,53 @@ var files = (() => {
         `  ${writer.wrapInColor(". <script.sh>", CliForegroundColor.Cyan)}`
       );
       writer.writeln(
-        `  ${writer.wrapInColor("./script.sh", CliForegroundColor.Cyan)}     (requires execute permission)`
+        `  ${writer.wrapInColor("./script.sh", CliForegroundColor.Cyan)}     ${t.t("cli.sh.help.requires_execute", "(requires execute permission)")}`
       );
       writer.writeln();
-      writer.writeln("Script syntax:");
-      writer.writeln("  # Lines starting with # are comments");
-      writer.writeln("  VAR=value          # Variable assignment");
-      writer.writeln("  echo $VAR          # Variable substitution");
-      writer.writeln("  set -e             # Stop on error (default)");
-      writer.writeln("  set +e             # Continue on errors");
+      writer.writeln(t.t("cli.sh.help.script_syntax", "Script syntax:"));
+      writer.writeln(`  # ${t.t("cli.sh.help.comments", "Lines starting with # are comments")}`);
+      writer.writeln(`  cmd1; cmd2         # ${t.t("cli.sh.help.several_commands", "Several commands on one line")}`);
+      writer.writeln(`  VAR=value          # ${t.t("cli.sh.help.assignment", "Variable assignment")}`);
+      writer.writeln(`  echo $VAR          # ${t.t("cli.sh.help.substitution", "Variable substitution")}`);
+      writer.writeln(`  set -e             # ${t.t("cli.sh.help.stop_on_error", "Stop on error (default)")}`);
+      writer.writeln(`  set +e             # ${t.t("cli.sh.help.continue_on_errors", "Continue on errors")}`);
+      writer.writeln(`  exit [n]           # ${t.t("cli.sh.help.exit", "Stop the script with status n")}`);
+      writer.writeln();
+      writer.writeln(t.t("cli.sh.help.control_flow", "Control flow:"));
+      writer.writeln("  if cmd; then ...; elif cmd; then ...; else ...; fi");
+      writer.writeln("  for NAME in a b *.txt; do ...; done");
+      writer.writeln(`  while cmd; do ...; done      ${t.t("cli.sh.help.until", "(until cmd: the opposite)")}`);
+      writer.writeln(`  break / continue [n]         # ${t.t("cli.sh.help.break_continue", "Leave / skip in a loop")}`);
+      writer.writeln(`  ! cmd                        # ${t.t("cli.sh.help.negate", "Negate the exit status")}`);
+      writer.writeln(
+        `  ${t.t("cli.sh.help.conditions", "Conditions are commands:")} ${writer.wrapInColor("[ -f file ]", CliForegroundColor.Cyan)}, ${writer.wrapInColor('test "$A" = b', CliForegroundColor.Cyan)}, ${writer.wrapInColor("true", CliForegroundColor.Cyan)}, ${writer.wrapInColor("grep x file", CliForegroundColor.Cyan)}`
+      );
+      writer.writeln(`  ${t.t("cli.sh.help.conditions_status", "(status 0 = true; see help test). Loops stop after 10000 iterations")}`);
+      writer.writeln(`  ${t.t("cli.sh.help.conditions_loops", "of while/until; Ctrl+C stops the script.")}`);
       writer.writeln();
-      writer.writeln("Example script:");
+      writer.writeln(t.t("cli.sh.help.example_script", "Example script:"));
       writer.writeln(
         writer.wrapInColor(
-          "  #!/bin/sh\n  # Setup script\n  NAME=world\n  echo Hello $NAME\n  mkdir -p /tmp/test\n  echo done > /tmp/test/status.txt",
+          "  #!/bin/sh\n  # Setup script\n  NAME=world\n  echo Hello $NAME\n  mkdir -p /tmp/test\n  for f in a b c; do\n      echo $f > /tmp/test/$f.txt\n  done\n  if [ -f /tmp/test/a.txt ]; then\n      echo done > /tmp/test/status.txt\n  fi",
           CliForegroundColor.Green
         )
       );
     }
   };
+  var SCRIPT_RUNNER_TOKEN = "cli-script-runner";
   async function executeScript(content, context) {
-    const lines = content.split("\n");
-    const variables = {};
-    let stopOnError = true;
-    for (const rawLine of lines) {
-      const line = rawLine.trim();
-      if (!line || line.startsWith("#")) {
-        continue;
-      }
-      if (line === "set -e") {
-        stopOnError = true;
-        continue;
-      }
-      if (line === "set +e") {
-        stopOnError = false;
-        continue;
-      }
-      const assignMatch = line.match(/^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
-      if (assignMatch) {
-        const varName = assignMatch[1];
-        let varValue = assignMatch[2];
-        if (varValue.startsWith('"') && varValue.endsWith('"') || varValue.startsWith("'") && varValue.endsWith("'")) {
-          varValue = varValue.slice(1, -1);
-        }
-        varValue = substituteVariables(varValue, variables);
-        variables[varName] = varValue;
-        continue;
-      }
-      const expanded = substituteVariables(line, variables);
-      await context.executor.executeCommand(expanded, context);
-      const exitCode = context.process.exitCode;
-      if (stopOnError && exitCode !== void 0 && exitCode !== 0) {
-        context.writer.writeError(
-          `sh: script aborted at line: ${line}`
-        );
-        return;
-      }
+    const runner = context.services.get(SCRIPT_RUNNER_TOKEN);
+    if (!runner) {
+      context.writer.writeError("sh: script runner not available (update @qodalis/cli)");
+      context.process.exit(1, { silent: true });
+      return;
     }
-  }
-  function substituteVariables(input, variables) {
-    let result = input.replace(
-      /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g,
-      (_, name) => variables[name] ?? ""
-    );
-    result = result.replace(
-      /\$([A-Za-z_][A-Za-z0-9_]*)/g,
-      (_, name) => variables[name] ?? ""
-    );
-    return result;
+    await runner.run(content, context, { name: "sh" });
   }
 
   // src/cli-entrypoint.ts
-  var fsService = new IndexedDbFileSystemService();
   var module = {
-    apiVersion: API_VERSION,
+    apiVersion: API_VERSION2,
     name: "@qodalis/cli-files",
     processors: [
       new CliLsCommandProcessor(),
@@ -4596,16 +5408,17 @@ var files = (() => {
     services: [
       {
         provide: IFileSystemService_TOKEN,
-        useValue: fsService
+        useClass: IndexedDbFileSystemService
       },
       {
         provide: ICliCompletionProvider_TOKEN,
-        useValue: new FilePathCompletionProvider(fsService),
+        useClass: FilePathCompletionProvider,
+        deps: [IFileSystemService_TOKEN],
         multi: true
       }
     ],
     async onInit(context) {
-      const fs = context.services.get(
+      const fs = context.services.getRequired(
         IFileSystemService_TOKEN
       );
       await fs.initialize();