dsh-win-multi-bash 0.1.0

package/lib/vendor/helpers.js

@@ -0,0 +1,111 @@
+/**
+ * Internal sandbox-result classification helpers.
+ *
+ * @module @deepseek-ai/dsh-bash-sandbox/helpers
+ */
+import { accessSync, constants, statSync } from 'node:fs';
+/** Node-local spawn codes proven to identify executable resolution or permission failure. */
+const EXECUTABLE_SPAWN_CODES = new Set(['EACCES', 'ENOENT']);
+/** Whether the caller-owned spawn cwd can be entered. */
+function isUsableWorkdir(path) {
+    try {
+        if (!statSync(path).isDirectory())
+            return false;
+        accessSync(path, constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Attribute only Node ENOENT/EACCES failures whose error path equals argv[0]
+ * after independently ruling out the caller-owned cwd. A supplied error path
+ * must exactly identify the runner; without one, the syscall must. With a
+ * usable cwd, these codes describe resolution or execute permission for that
+ * argv[0] or its shebang interpreter.
+ * The workdir is checked at classification time, not atomically with spawn;
+ * concurrent path replacement may change attribution but cannot permit an
+ * unconfined execution.
+ * @param error - the original spawn rejection.
+ * @param runnerProgram - provider argv[0], the executable that establishes confinement.
+ * @param workdir - the caller-owned spawn cwd, checked independently for usability.
+ * @returns whether the rejection has executable-specific runner evidence.
+ */
+export function isRunnerSpawnFailure(error, runnerProgram, workdir) {
+    if (runnerProgram === undefined || !isUsableWorkdir(workdir))
+        return false;
+    if (typeof error !== 'object' || error === null)
+        return false;
+    const { code, path, syscall } = error;
+    if (typeof code !== 'string' || !EXECUTABLE_SPAWN_CODES.has(code))
+        return false;
+    if (typeof syscall !== 'string')
+        return false;
+    const exactSyscall = `spawn ${runnerProgram}`;
+    if (path === undefined)
+        return syscall === exactSyscall;
+    if (typeof path !== 'string' || path.length === 0 || path !== runnerProgram)
+        return false;
+    return syscall === 'spawn' || syscall === exactSyscall;
+}
+/**
+ * Classify a failed run against the selected backend's denial dialect.
+ * @param result - settled foreground run.
+ * @param signatures - case-insensitive denial substrings from the active wrap.
+ * @returns whether the failed run matches that denial dialect.
+ */
+export function classifyDenial(result, signatures) {
+    return matchesSignature(result.exitCode, result.stderr.text, signatures);
+}
+/**
+ * Classify one settled process against the selected backend's structured
+ * runner-failure rules. Each rule requires a nonzero exit, its optional
+ * exit-code gate, and a fatal signature on one stderr line after exact
+ * informational lines are excluded. A rule may set `anchored: true` to match
+ * the signature only at the line start (bwrap's own diagnostics always begin
+ * with its prefix; a wrapped command echoing the same text mid-line is then
+ * not misread as a runner failure).
+ * @param exitCode - process exit code; null means signal termination.
+ * @param stderr - collected stderr text, left unchanged.
+ * @param rules - structured runner-failure rules from the active wrap.
+ * @returns the first matching fatal line, or undefined when evidence is insufficient.
+ */
+export function classifyRunnerFailure(exitCode, stderr, rules) {
+    if (exitCode === null || exitCode === 0)
+        return undefined;
+    const lines = stderr.split(/\r?\n/);
+    for (const rule of rules) {
+        if (rule.allowedExitCodes !== undefined && !rule.allowedExitCodes.includes(exitCode))
+            continue;
+        const informationalLines = new Set((rule.informationalLines ?? []).map(line => line.toLowerCase()));
+        // An empty or whitespace-only substring is not meaningful runner evidence.
+        // Ignore it while keeping any valid signatures beside it active.
+        const fatalSignatures = rule.fatalSignatures
+            .filter(signature => signature.trim().length > 0)
+            .map(signature => signature.toLowerCase());
+        const anchored = rule.anchored === true;
+        for (const line of lines) {
+            const lowered = line.toLowerCase();
+            if (informationalLines.has(lowered))
+                continue;
+            if (fatalSignatures.some(signature => anchored ? lowered.startsWith(signature) : lowered.includes(signature)))
+                return { detail: line };
+        }
+    }
+    return undefined;
+}
+/**
+ * Match a non-zero exit against case-insensitive stderr signatures.
+ * @param exitCode - process exit code; null means signal termination.
+ * @param stderr - collected stderr text.
+ * @param signatures - substrings identifying the selected backend's dialect.
+ * @returns whether this is a non-zero exit whose stderr matches a signature.
+ */
+export function matchesSignature(exitCode, stderr, signatures) {
+    if (exitCode === null || exitCode === 0)
+        return false;
+    const lowered = stderr.toLowerCase();
+    return signatures.some(signature => lowered.includes(signature.toLowerCase()));
+}
+//# sourceMappingURL=helpers.js.map

package/package.json

@@ -0,0 +1,95 @@
+{
+  "name": "dsh-win-multi-bash",
+  "version": "0.1.0",
+  "author": "Dinosaur_MC",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Dinosaur-MC/dsh-win-multi-bash.git"
+  },
+  "description": "Windows multi-bash plugin for dsh: git_bash / wsl_bash model tools plus a shell-select executor routing the single ctx.shell seat across Git Bash, WSL and pwsh (pwsh stays the default).",
+  "keywords": [
+    "dsh-plugin",
+    "windows",
+    "bash",
+    "git-bash",
+    "wsl",
+    "shell-select"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./shell-select": "./lib/shell-select/index.js",
+    "./tool-git-bash": "./lib/tool-bash/types/git-bash.js",
+    "./tool-wsl-bash": "./lib/tool-bash/types/wsl-bash.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/**/*.js",
+    "cordis.patch.yml",
+    "README.md",
+    "README.zh.md",
+    "README.i18n.yaml",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES"
+  ],
+  "scripts": {
+    "test": "powershell -NoProfile -ExecutionPolicy Bypass -File smoke/run.ps1"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": ">=4.0.1",
+    "@deepseek-ai/dsh-bash-local": ">=0.1.0-rc.7",
+    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.7",
+    "@deepseek-ai/dsh-pwsh-local": ">=0.1.0-rc.7",
+    "@deepseek-ai/dsh-pwsh-sandbox": ">=0.1.0-rc.7",
+    "@deepseek-ai/dsh-sandbox": ">=0.1.0-rc.7",
+    "@deepseek-ai/dsh-settings": ">=0.1.0-rc.7",
+    "@deepseek-ai/dsh-shell": ">=0.1.0-rc.7",
+    "@deepseek-ai/dsh-tools": ">=0.1.0-rc.7",
+    "@deepseek-ai/schemastery": ">=3.18.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-bash-local": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-pwsh-local": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-pwsh-sandbox": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sandbox": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-shell": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    },
+    "@deepseek-ai/schemastery": {
+      "optional": true
+    }
+  }
+}