buninu 0.4.3 → 0.4.5

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.4.5 - 2026-09-10
+
+0.4.4 is intentionally skipped 不吉利
+
+### Changed
+
+- Sync bunmsh to 0.3.5
+- Sync jsgotty to 1.1.11
+  * Security fix CSWSH 
+- Sync jsmdcui to 0.19.1
+  * Security fix CSWSH for CDP server
+
+## 0.4.3 - 2026-09-05
+
+- Don't check exit status for bunx
+
 ## 0.4.2 - 2026-09-03
 
 ### Changed

package/apps/bunmsh/CHANGELOG.md

@@ -2,6 +2,40 @@
 
 All notable user-visible changes to bunmsh are documented here.
 
+## [0.3.5] - 2026-09-09
+
+Version 0.3.4 was intentionally skipped because the number four is considered
+unlucky in Chinese culture, so this release advances directly from 0.3.3 to
+0.3.5.
+
+### Fixed
+
+- Point the npm `bunmsh` bin at a new package-root `index.js` trampoline,
+  which immediately loads the real `src/main.js` entry point. On affected Bun
+  versions, validating a bin target below the package root goes through
+  `openat2`; Android can reject that syscall with `SIGSYS`, leaving an
+  otherwise successful install without its bin link. Keeping the declared bin
+  target at the package root avoids that path while preserving `src/main.js`
+  as the implementation entry point.
+
+- Make the test suite portable between native Android and PRoot. Redirect
+  tests now create isolated directories below `os.tmpdir()` instead of
+  assuming `/tmp` is writable or empty, terminal assertions compare visible
+  text after `Bun.stripANSI()` instead of requiring one exact repaint
+  sequence, and true terminal behaviour is exercised through `Bun.Terminal`.
+  Negative-DNS curl checks run in parallel and have explicit timeouts because
+  PRoot resolution takes about five seconds while native Android returns
+  immediately.
+
+### Changed
+
+- Split the former `shell.test.js` into `shell1.test.js`, `shell2.test.js`, and
+  `shell3.test.js`, and run test files with `bun test --parallel=4`. This keeps
+  the suite isolated and stable while reducing the measured run from roughly
+  37 to 17 seconds under PRoot and from roughly 23 to 9 seconds on native
+  Android. Test-case-level `--concurrent` is deliberately not used because
+  cwd-changing and PTY tests share process-global state.
+
 ## [0.3.3] - 2026-09-03
 
 ### Fixed

package/apps/bunmsh/index.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env bun
+// This top-level entry exists because Bun's bin-link containment check uses openat2
+// when a package bin target has a parent directory. Android blocks that syscall
+// with SIGSYS on affected Bun versions, so a target such as ./src/main.js is
+// installed without its bin link. A target at the package root avoids that
+// containment path while keeping the real entry point in src/main.js.
+import "./src/main.js";

package/apps/bunmsh/package.json

@@ -1,16 +1,16 @@
 {
   "name": "bunmsh",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "Cross-platform command shell for Bun JavaScript",
   "license": "MIT",
   "type": "module",
   "main": "./src/main.js",
   "bin": {
-    "bunmsh": "./src/main.js"
+    "bunmsh": "./index.js"
   },
   "scripts": {
     "start": "bun ./src/main.js",
-    "test": "bun test",
+    "test": "bun test --parallel=4",
     "genallhelp": "bun ./src/main.js -c 'builtin cat --exclude help/README.md help/*.md' > help/README.md"
   },
   "keywords": [

package/apps/bunmsh/test/curl.test.js

@@ -252,7 +252,7 @@ describe("curl transfers", () => {
     expect(unsupported.status).toBe(1);
     expect(unsupported.stderr)
       .toBe('curl: (1) Protocol "ftp" not supported or disabled in libcurl\n');
-  });
+  }, 10_000);
 });
 
 describe("curl file output", () => {

package/apps/bunmsh/test/reference.test.js

@@ -31,6 +31,18 @@ async function expectLikeSh(source, env, args) {
   expect(actual).toEqual(reference);
 }
 
+async function expectLikeShInTemp(source) {
+  const directory = mkdtempSync(join(tmpdir(), "bunmsh-reference-"));
+  try {
+    await expectLikeSh(source, {
+      ...process.env,
+      BUNMSH_TEST_TMPDIR: directory,
+    });
+  } finally {
+    rmSync(directory, { recursive: true, force: true });
+  }
+}
+
 async function invokeInternal(source, options = {}) {
   const state = createState(options);
   const output = await execute(source, state, { capture: true });
@@ -590,7 +602,7 @@ describe("CLI direct argv forwarding", () => {
 
   test("-cc without a command is a usage error", async () => {
     const output = await invoke([process.execPath, "src/main.js"], "-cc");
-    expect(output).toEqual({
+    expect({ ...output, stderr: Bun.stripANSI(output.stderr) }).toEqual({
       status: 2,
       stdout: "",
       stderr: "bunmsh: -cc requires a command\n",
@@ -614,29 +626,29 @@ describe("concurrent streaming pipelines", () => {
   });
 
   test("matches /bin/sh for streamed stdout overwrite and append redirects", async () => {
-    await expectLikeSh(
-      "out=/tmp/bunmsh-redirect-$$; printf first > \"$out\"; " +
+    await expectLikeShInTemp(
+      "out=$BUNMSH_TEST_TMPDIR/redirect; printf first > \"$out\"; " +
         "printf second >> \"$out\"; cat \"$out\"; rm \"$out\"",
     );
   });
 
   test("matches /bin/sh for a streamed stderr redirect", async () => {
-    await expectLikeSh(
-      "out=/tmp/bunmsh-stderr-$$; sh -c 'printf error >&2' 2> \"$out\"; " +
+    await expectLikeShInTemp(
+      "out=$BUNMSH_TEST_TMPDIR/stderr; sh -c 'printf error >&2' 2> \"$out\"; " +
         "cat \"$out\"; rm \"$out\"",
     );
   });
 
   test("matches /bin/sh when a redirect overrides the pipeline output", async () => {
-    await expectLikeSh(
-      "out=/tmp/bunmsh-override-$$; printf file > \"$out\" | cat; " +
+    await expectLikeShInTemp(
+      "out=$BUNMSH_TEST_TMPDIR/override; printf file > \"$out\" | cat; " +
         "printf :; cat \"$out\"; rm \"$out\"",
     );
   });
 
   test("streams a large redirect without collecting command output", async () => {
-    await expectLikeSh(
-      "out=/tmp/bunmsh-large-$$; head -c 1048576 /dev/zero > \"$out\"; " +
+    await expectLikeShInTemp(
+      "out=$BUNMSH_TEST_TMPDIR/large; head -c 1048576 /dev/zero > \"$out\"; " +
         "wc -c < \"$out\"; rm \"$out\"",
     );
   });
@@ -741,11 +753,13 @@ describe("system curl reference", () => {
     await expectLikeCurl(["-sSf", `${origin}/missing`]);
     await expectLikeCurl(["-s", "--fail-with-body", `${origin}/missing`]);
     await expectLikeCurl(["-s", "http://localhost:1/"]);
-    await expectLikeCurl(["-s", "http://no-such-host-zzz.invalid/"]);
-    await expectLikeCurl(["-sS", "http://no-such-host-zzz.invalid/"]);
+    await Promise.all([
+      expectLikeCurl(["-s", "http://no-such-host-zzz.invalid/"]),
+      expectLikeCurl(["-sS", "http://no-such-host-zzz.invalid/"]),
+    ]);
     await expectLikeCurl(["--bogus", `${origin}/text`]);
     await expectLikeCurl([]);
-  });
+  }, 10_000);
 
   test.skipIf(!systemCurl)("matches redirect following and the method it lands on", async () => {
     await expectLikeCurl(["-s", `${origin}/redirect`]);