@shell-shock/core 0.17.3 → 0.17.5

package/dist/components/exec-builtin.cjs

@@ -41,14 +41,7 @@ function ExecBuiltin(props) {
 			});
 		},
 		get builtinImports() {
-			return (0, defu.default)(rest.builtinImports ?? {}, { env: [
-				"isWindows",
-				"env",
-				{
-					name: "Env",
-					type: true
-				}
-			] });
+			return (0, defu.default)(rest.builtinImports ?? {}, { env: ["isWindows", "env"] });
 		},
 		get children() {
 			return [
@@ -60,32 +53,32 @@ function ExecBuiltin(props) {
 					}],
 					returnType: "NodeJS.ProcessEnv",
 					children: _alloy_js_core.code`const argv = params.argv;
-const shouldSuppressNpmFund = (() => {
-  const cmd = basename(argv[0] ?? "");
-  if (cmd === "npm" || cmd === "npm.cmd" || cmd === "npm.exe") {
-    return true;
-  }
-  if (cmd === "node" || cmd === "node.exe") {
-    const script = argv[1] ?? "";
+          const shouldSuppressNpmFund = (() => {
+            const cmd = basename(argv[0] ?? "");
+            if (cmd === "npm" || cmd === "npm.cmd" || cmd === "npm.exe") {
+              return true;
+            }
+            if (cmd === "node" || cmd === "node.exe") {
+              const script = argv[1] ?? "";
 
-    return script.includes("npm-cli.js");
-  }
-  return false;
-})();
+              return script.includes("npm-cli.js");
+            }
+            return false;
+          })();
 
-const result = Object.fromEntries(
-  Object.entries({
-  ...env,
-  ...(params.env ?? {})
-})
-  .filter(([, value]) => value !== undefined)
-  .map(([key, value]) => [key, String(value)])
-);
-if (shouldSuppressNpmFund) {
-  result.NPM_CONFIG_FUND ??= "false";
-  result.npm_config_fund ??= "false";
-}
-return result; `
+          const result = Object.fromEntries(
+            Object.entries({
+            ...env,
+            ...(params.env ?? {})
+          })
+            .filter(([, value]) => value !== undefined)
+            .map(([key, value]) => [key, String(value)])
+          );
+          if (shouldSuppressNpmFund) {
+            result.NPM_CONFIG_FUND ??= "false";
+            result.npm_config_fund ??= "false";
+          }
+          return result; `
 				}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_core_components_spacing.Spacing, {}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_alloy_js_typescript.FunctionDeclaration, {
@@ -96,11 +89,11 @@ return result; `
 					}],
 					returnType: "boolean",
 					children: _alloy_js_core.code`if (!isWindows) {
-  return false;
-}
-const ext = extname(resolvedCommand).toLowerCase();
+            return false;
+          }
+          const ext = extname(resolvedCommand).toLowerCase();
 
-return ext === ".cmd" || ext === ".bat";`
+          return ext === ".cmd" || ext === ".bat"; `
 				}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_core_components_spacing.Spacing, {}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_alloy_js_typescript.FunctionDeclaration, {
@@ -111,15 +104,15 @@ return ext === ".cmd" || ext === ".bat";`
 					}],
 					returnType: "string",
 					children: _alloy_js_core.code`if (/[&|<>^%\\\\r\\\\n]/.test(arg)) {
-  throw new Error(
-    \`Unsafe Windows cmd.exe argument detected: \${JSON.stringify(arg)}. \` +
-      "Pass an explicit shell-wrapper argv at the call site instead."
-  );
-}
-if (!arg.includes(" ") && !arg.includes('"')) {
-  return arg;
-}
-return \`"\${arg.replace(/"/g, '""')}"\`;`
+          throw new Error(
+            \`Unsafe Windows cmd.exe argument detected: \${JSON.stringify(arg)}. \` +
+              "Pass an explicit shell-wrapper argv at the call site instead."
+          );
+        }
+        if (!arg.includes(" ") && !arg.includes('"')) {
+          return arg;
+        }
+        return \`"\${arg.replace(/"/g, '""')}"\`; `
 				}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_core_components_spacing.Spacing, {}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_alloy_js_typescript.FunctionDeclaration, {
@@ -133,8 +126,8 @@ return \`"\${arg.replace(/"/g, '""')}"\`;`
 					}],
 					returnType: "string",
 					children: _alloy_js_core.code`return [escapeForCmdExe(resolvedCommand), ...args.map(escapeForCmdExe)].join(
-  " "
-);`
+          " "
+        ); `
 				}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_core_components_spacing.Spacing, {}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_alloy_js_typescript.FunctionDeclaration, {
@@ -146,26 +139,26 @@ return \`"\${arg.replace(/"/g, '""')}"\`;`
 					}],
 					returnType: "string[] | null",
 					children: _alloy_js_core.code`if (!isWindows || argv.length === 0) {
-  return null;
-}
-const base = basename(argv[0] ?? "")
-  .toLowerCase()
-  .replace(/\.(?:cmd|exe|bat)$/, "");
-const cliName =
-  base === "npx" ? "npx-cli.js" : base === "npm" ? "npm-cli.js" : null;
-if (!cliName) {
-  return null;
-}
-const nodeDir = dirname(process.execPath);
-const cliPath = join(nodeDir, "node_modules", "npm", "bin", cliName);
-if (!existsSync(cliPath)) {
-  const command = argv[0] ?? "";
-  const ext = extname(command).toLowerCase();
-  const shimmedCommand = ext ? command : \`\${command}.cmd\`;
+            return null;
+          }
+          const base = basename(argv[0] ?? "")
+            .toLowerCase()
+            .replace(/\.(?:cmd|exe|bat)$/, "");
+          const cliName =
+            base === "npx" ? "npx-cli.js" : base === "npm" ? "npm-cli.js" : null;
+          if (!cliName) {
+            return null;
+          }
+          const nodeDir = dirname(process.execPath);
+          const cliPath = join(nodeDir, "node_modules", "npm", "bin", cliName);
+          if (!existsSync(cliPath)) {
+            const command = argv[0] ?? "";
+            const ext = extname(command).toLowerCase();
+            const shimmedCommand = ext ? command : \`\${command}.cmd\`;
 
-  return [shimmedCommand, ...argv.slice(1)];
-}
-return [process.execPath, cliPath, ...argv.slice(1)];`
+            return [shimmedCommand, ...argv.slice(1)];
+          }
+          return [process.execPath, cliPath, ...argv.slice(1)]; `
 				}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_core_components_spacing.Spacing, {}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_alloy_js_typescript.FunctionDeclaration, {
@@ -177,16 +170,16 @@ return [process.execPath, cliPath, ...argv.slice(1)];`
 					}],
 					returnType: "string",
 					children: _alloy_js_core.code`if (!isWindows) {
-  return command;
-}
-const base = basename(command).toLowerCase();
-if (extname(base)) {
-  return command;
-}
-if (["pnpm", "yarn"].includes(base)) {
-  return \`\${command}.cmd\`;
-}
-return command;`
+            return command;
+          }
+          const base = basename(command).toLowerCase();
+          if (extname(base)) {
+            return command;
+          }
+          if (["pnpm", "yarn"].includes(base)) {
+            return \`\${command}.cmd\`;
+          }
+          return command; `
 				}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_core_components_spacing.Spacing, {}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_alloy_js_typescript.FunctionDeclaration, {
@@ -197,12 +190,12 @@ return command;`
 					}],
 					returnType: "[\"pipe\" | \"inherit\" | \"ignore\", \"pipe\", \"pipe\"]",
 					children: _alloy_js_core.code`const stdin = params.hasInput
-  ? "pipe"
-  : params.preferInherit
-    ? "inherit"
-    : "pipe";
+          ? "pipe"
+          : params.preferInherit
+            ? "inherit"
+            : "pipe";
 
-return [stdin, "pipe", "pipe"];`
+        return [stdin, "pipe", "pipe"]; `
 				}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_core_components_spacing.Spacing, {}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_alloy_js_typescript.FunctionDeclaration, {
@@ -213,16 +206,16 @@ return [stdin, "pipe", "pipe"];`
 					}],
 					returnType: "number | null",
 					children: _alloy_js_core.code`return (
-  params.explicitCode ??
-  params.childExitCode ??
-  (params.usesWindowsExitCodeShim &&
-  params.resolvedSignal == null &&
-  !params.timedOut &&
-  !params.noOutputTimedOut &&
-  !params.killIssuedByTimeout
-    ? 0
-    : null)
-);`
+          params.explicitCode ??
+          params.childExitCode ??
+          (params.usesWindowsExitCodeShim &&
+          params.resolvedSignal == null &&
+          !params.timedOut &&
+          !params.noOutputTimedOut &&
+          !params.killIssuedByTimeout
+            ? 0
+            : null)
+        ); `
 				}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_core_components_spacing.Spacing, {}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_alloy_js_typescript.FunctionDeclaration, {
@@ -233,12 +226,12 @@ return [stdin, "pipe", "pipe"];`
 					}],
 					returnType: "boolean",
 					children: _alloy_js_core.code`// SECURITY: never enable \`shell\` for argv-based execution.
-// \`shell\` routes through cmd.exe on Windows, which turns untrusted argv values
-// (like chat prompts passed as CLI args) into command-injection primitives.
-// If you need a shell, use an explicit shell-wrapper argv (e.g. \`cmd.exe /c ...\`)
-// and validate/escape at the call site.
-void params;
-return false;`
+          // \`shell\` routes through cmd.exe on Windows, which turns untrusted argv values
+          // (like chat prompts passed as CLI args) into command-injection primitives.
+          // If you need a shell, use an explicit shell-wrapper argv (e.g. \`cmd.exe /c ...\`)
+          // and validate/escape at the call site.
+          void params;
+          return false; `
 				}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_core_components_spacing.Spacing, {}),
 				(0, _alloy_js_core_jsx_runtime.createComponent)(_powerlines_plugin_alloy_typescript_components_tsdoc.TSDoc, { heading: "The result of a spawn operation." }),

package/dist/components/exec-builtin.mjs

@@ -38,14 +38,7 @@ function ExecBuiltin(props) {
 			});
 		},
 		get builtinImports() {
-			return defu$1(rest.builtinImports ?? {}, { env: [
-				"isWindows",
-				"env",
-				{
-					name: "Env",
-					type: true
-				}
-			] });
+			return defu$1(rest.builtinImports ?? {}, { env: ["isWindows", "env"] });
 		},
 		get children() {
 			return [
@@ -57,32 +50,32 @@ function ExecBuiltin(props) {
 					}],
 					returnType: "NodeJS.ProcessEnv",
 					children: code`const argv = params.argv;
-const shouldSuppressNpmFund = (() => {
-  const cmd = basename(argv[0] ?? "");
-  if (cmd === "npm" || cmd === "npm.cmd" || cmd === "npm.exe") {
-    return true;
-  }
-  if (cmd === "node" || cmd === "node.exe") {
-    const script = argv[1] ?? "";
+          const shouldSuppressNpmFund = (() => {
+            const cmd = basename(argv[0] ?? "");
+            if (cmd === "npm" || cmd === "npm.cmd" || cmd === "npm.exe") {
+              return true;
+            }
+            if (cmd === "node" || cmd === "node.exe") {
+              const script = argv[1] ?? "";
 
-    return script.includes("npm-cli.js");
-  }
-  return false;
-})();
+              return script.includes("npm-cli.js");
+            }
+            return false;
+          })();
 
-const result = Object.fromEntries(
-  Object.entries({
-  ...env,
-  ...(params.env ?? {})
-})
-  .filter(([, value]) => value !== undefined)
-  .map(([key, value]) => [key, String(value)])
-);
-if (shouldSuppressNpmFund) {
-  result.NPM_CONFIG_FUND ??= "false";
-  result.npm_config_fund ??= "false";
-}
-return result; `
+          const result = Object.fromEntries(
+            Object.entries({
+            ...env,
+            ...(params.env ?? {})
+          })
+            .filter(([, value]) => value !== undefined)
+            .map(([key, value]) => [key, String(value)])
+          );
+          if (shouldSuppressNpmFund) {
+            result.NPM_CONFIG_FUND ??= "false";
+            result.npm_config_fund ??= "false";
+          }
+          return result; `
 				}),
 				createComponent(Spacing, {}),
 				createComponent(FunctionDeclaration, {
@@ -93,11 +86,11 @@ return result; `
 					}],
 					returnType: "boolean",
 					children: code`if (!isWindows) {
-  return false;
-}
-const ext = extname(resolvedCommand).toLowerCase();
+            return false;
+          }
+          const ext = extname(resolvedCommand).toLowerCase();
 
-return ext === ".cmd" || ext === ".bat";`
+          return ext === ".cmd" || ext === ".bat"; `
 				}),
 				createComponent(Spacing, {}),
 				createComponent(FunctionDeclaration, {
@@ -108,15 +101,15 @@ return ext === ".cmd" || ext === ".bat";`
 					}],
 					returnType: "string",
 					children: code`if (/[&|<>^%\\\\r\\\\n]/.test(arg)) {
-  throw new Error(
-    \`Unsafe Windows cmd.exe argument detected: \${JSON.stringify(arg)}. \` +
-      "Pass an explicit shell-wrapper argv at the call site instead."
-  );
-}
-if (!arg.includes(" ") && !arg.includes('"')) {
-  return arg;
-}
-return \`"\${arg.replace(/"/g, '""')}"\`;`
+          throw new Error(
+            \`Unsafe Windows cmd.exe argument detected: \${JSON.stringify(arg)}. \` +
+              "Pass an explicit shell-wrapper argv at the call site instead."
+          );
+        }
+        if (!arg.includes(" ") && !arg.includes('"')) {
+          return arg;
+        }
+        return \`"\${arg.replace(/"/g, '""')}"\`; `
 				}),
 				createComponent(Spacing, {}),
 				createComponent(FunctionDeclaration, {
@@ -130,8 +123,8 @@ return \`"\${arg.replace(/"/g, '""')}"\`;`
 					}],
 					returnType: "string",
 					children: code`return [escapeForCmdExe(resolvedCommand), ...args.map(escapeForCmdExe)].join(
-  " "
-);`
+          " "
+        ); `
 				}),
 				createComponent(Spacing, {}),
 				createComponent(FunctionDeclaration, {
@@ -143,26 +136,26 @@ return \`"\${arg.replace(/"/g, '""')}"\`;`
 					}],
 					returnType: "string[] | null",
 					children: code`if (!isWindows || argv.length === 0) {
-  return null;
-}
-const base = basename(argv[0] ?? "")
-  .toLowerCase()
-  .replace(/\.(?:cmd|exe|bat)$/, "");
-const cliName =
-  base === "npx" ? "npx-cli.js" : base === "npm" ? "npm-cli.js" : null;
-if (!cliName) {
-  return null;
-}
-const nodeDir = dirname(process.execPath);
-const cliPath = join(nodeDir, "node_modules", "npm", "bin", cliName);
-if (!existsSync(cliPath)) {
-  const command = argv[0] ?? "";
-  const ext = extname(command).toLowerCase();
-  const shimmedCommand = ext ? command : \`\${command}.cmd\`;
+            return null;
+          }
+          const base = basename(argv[0] ?? "")
+            .toLowerCase()
+            .replace(/\.(?:cmd|exe|bat)$/, "");
+          const cliName =
+            base === "npx" ? "npx-cli.js" : base === "npm" ? "npm-cli.js" : null;
+          if (!cliName) {
+            return null;
+          }
+          const nodeDir = dirname(process.execPath);
+          const cliPath = join(nodeDir, "node_modules", "npm", "bin", cliName);
+          if (!existsSync(cliPath)) {
+            const command = argv[0] ?? "";
+            const ext = extname(command).toLowerCase();
+            const shimmedCommand = ext ? command : \`\${command}.cmd\`;
 
-  return [shimmedCommand, ...argv.slice(1)];
-}
-return [process.execPath, cliPath, ...argv.slice(1)];`
+            return [shimmedCommand, ...argv.slice(1)];
+          }
+          return [process.execPath, cliPath, ...argv.slice(1)]; `
 				}),
 				createComponent(Spacing, {}),
 				createComponent(FunctionDeclaration, {
@@ -174,16 +167,16 @@ return [process.execPath, cliPath, ...argv.slice(1)];`
 					}],
 					returnType: "string",
 					children: code`if (!isWindows) {
-  return command;
-}
-const base = basename(command).toLowerCase();
-if (extname(base)) {
-  return command;
-}
-if (["pnpm", "yarn"].includes(base)) {
-  return \`\${command}.cmd\`;
-}
-return command;`
+            return command;
+          }
+          const base = basename(command).toLowerCase();
+          if (extname(base)) {
+            return command;
+          }
+          if (["pnpm", "yarn"].includes(base)) {
+            return \`\${command}.cmd\`;
+          }
+          return command; `
 				}),
 				createComponent(Spacing, {}),
 				createComponent(FunctionDeclaration, {
@@ -194,12 +187,12 @@ return command;`
 					}],
 					returnType: "[\"pipe\" | \"inherit\" | \"ignore\", \"pipe\", \"pipe\"]",
 					children: code`const stdin = params.hasInput
-  ? "pipe"
-  : params.preferInherit
-    ? "inherit"
-    : "pipe";
+          ? "pipe"
+          : params.preferInherit
+            ? "inherit"
+            : "pipe";
 
-return [stdin, "pipe", "pipe"];`
+        return [stdin, "pipe", "pipe"]; `
 				}),
 				createComponent(Spacing, {}),
 				createComponent(FunctionDeclaration, {
@@ -210,16 +203,16 @@ return [stdin, "pipe", "pipe"];`
 					}],
 					returnType: "number | null",
 					children: code`return (
-  params.explicitCode ??
-  params.childExitCode ??
-  (params.usesWindowsExitCodeShim &&
-  params.resolvedSignal == null &&
-  !params.timedOut &&
-  !params.noOutputTimedOut &&
-  !params.killIssuedByTimeout
-    ? 0
-    : null)
-);`
+          params.explicitCode ??
+          params.childExitCode ??
+          (params.usesWindowsExitCodeShim &&
+          params.resolvedSignal == null &&
+          !params.timedOut &&
+          !params.noOutputTimedOut &&
+          !params.killIssuedByTimeout
+            ? 0
+            : null)
+        ); `
 				}),
 				createComponent(Spacing, {}),
 				createComponent(FunctionDeclaration, {
@@ -230,12 +223,12 @@ return [stdin, "pipe", "pipe"];`
 					}],
 					returnType: "boolean",
 					children: code`// SECURITY: never enable \`shell\` for argv-based execution.
-// \`shell\` routes through cmd.exe on Windows, which turns untrusted argv values
-// (like chat prompts passed as CLI args) into command-injection primitives.
-// If you need a shell, use an explicit shell-wrapper argv (e.g. \`cmd.exe /c ...\`)
-// and validate/escape at the call site.
-void params;
-return false;`
+          // \`shell\` routes through cmd.exe on Windows, which turns untrusted argv values
+          // (like chat prompts passed as CLI args) into command-injection primitives.
+          // If you need a shell, use an explicit shell-wrapper argv (e.g. \`cmd.exe /c ...\`)
+          // and validate/escape at the call site.
+          void params;
+          return false; `
 				}),
 				createComponent(Spacing, {}),
 				createComponent(TSDoc, { heading: "The result of a spawn operation." }),