just-bash-nx 2.14.4

package/dist/fs/overlay-fs/overlay-fs.d.ts

@@ -0,0 +1,163 @@
+/**
+ * OverlayFs - Copy-on-write filesystem backed by a real directory
+ *
+ * Reads come from the real filesystem, writes go to an in-memory layer.
+ * Changes don't persist to disk and can't escape the root directory.
+ *
+ * Security: Symlinks are blocked by default (allowSymlinks: false).
+ * All real-FS access goes through resolveRealPath_() / resolveRealPathParent_()
+ * gates which detect symlink traversal via path comparison and return the
+ * canonical path for I/O (closing the TOCTOU gap). New methods must use these
+ * gates — never access the real FS directly.
+ */
+import { type FileContent } from "../encoding.js";
+import type { CpOptions, DirentEntry, FsStat, IFileSystem, MkdirOptions, ReadFileOptions, RmOptions, WriteFileOptions } from "../interface.js";
+export interface OverlayFsOptions {
+    /**
+     * The root directory on the real filesystem.
+     * All paths are relative to this root and cannot escape it.
+     */
+    root: string;
+    /**
+     * The virtual mount point where the root directory appears.
+     * Defaults to "/home/user/project".
+     */
+    mountPoint?: string;
+    /**
+     * If true, all write operations will throw an error.
+     * Useful for truly read-only access to the filesystem.
+     * Defaults to false.
+     */
+    readOnly?: boolean;
+    /**
+     * Maximum file size in bytes that can be read from the real filesystem.
+     * Files larger than this will throw an EFBIG error.
+     * Defaults to 10MB (10485760).
+     */
+    maxFileReadSize?: number;
+    /**
+     * Whether to allow following and creating symlinks on the real filesystem.
+     * When false (default), any real-FS path traversing a symlink is rejected
+     * and symlink() throws EPERM.
+     */
+    allowSymlinks?: boolean;
+}
+export declare class OverlayFs implements IFileSystem {
+    private readonly root;
+    private readonly canonicalRoot;
+    private readonly mountPoint;
+    private readonly readOnly;
+    private readonly maxFileReadSize;
+    private readonly allowSymlinks;
+    private readonly memory;
+    private readonly deleted;
+    constructor(options: OverlayFsOptions);
+    /**
+     * Throws an error if the filesystem is in read-only mode.
+     */
+    private assertWritable;
+    /**
+     * Create directory entries for the mount point path
+     */
+    private createMountPointDirs;
+    /**
+     * Get the mount point for this overlay
+     */
+    getMountPoint(): string;
+    /**
+     * Create a virtual directory in memory (sync, for initialization)
+     */
+    mkdirSync(path: string, _options?: MkdirOptions): void;
+    /**
+     * Create a virtual file in memory (sync, for initialization)
+     */
+    writeFileSync(path: string, content: string | Uint8Array): void;
+    private getDirname;
+    /**
+     * Check if a normalized virtual path is under the mount point.
+     * Returns the relative path within the mount point, or null if not under it.
+     */
+    private getRelativeToMount;
+    /**
+     * Convert a virtual path to a real filesystem path.
+     * Returns null if the path is not under the mount point or would escape the root.
+     */
+    private toRealPath;
+    /**
+     * Resolve a real-FS path to its canonical form and validate it stays
+     * within the sandbox.  Returns the canonical path for I/O, or null if
+     * the path escapes the root or traverses a symlink (when !allowSymlinks).
+     *
+     * Callers MUST use the returned canonical path for subsequent I/O to
+     * close the TOCTOU gap between validation and use.
+     */
+    private resolveRealPath_;
+    /**
+     * Resolve only the parent directory of a real-FS path, then join with
+     * the original basename.  Used by lstat/readlink/existsInOverlay where
+     * the final component may itself be a symlink we want to inspect (not
+     * follow).  Returns the canonical parent + basename for I/O, or null.
+     */
+    private resolveRealPathParent_;
+    private sanitizeError;
+    private ensureParentDirs;
+    /**
+     * Check if a path exists in the overlay (memory + real fs - deleted)
+     */
+    private existsInOverlay;
+    readFile(path: string, options?: ReadFileOptions | BufferEncoding): Promise<string>;
+    readFileBuffer(path: string, seen?: Set<string>): Promise<Uint8Array>;
+    writeFile(path: string, content: FileContent, options?: WriteFileOptions | BufferEncoding): Promise<void>;
+    appendFile(path: string, content: FileContent, options?: WriteFileOptions | BufferEncoding): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    stat(path: string, seen?: Set<string>): Promise<FsStat>;
+    lstat(path: string): Promise<FsStat>;
+    private resolveSymlink;
+    /**
+     * Convert a real-fs symlink target to a virtual target suitable for resolveSymlink.
+     * Handles absolute real-fs paths that point within the root by converting them
+     * to virtual paths relative to the mount point.
+     */
+    private realTargetToVirtual;
+    mkdir(path: string, options?: MkdirOptions): Promise<void>;
+    /**
+     * Core readdir implementation that returns entries with file types.
+     * Both readdir and readdirWithFileTypes use this shared implementation.
+     */
+    private readdirCore;
+    /**
+     * Follow symlinks to resolve the final directory path.
+     * Returns outsideOverlay: true if the symlink points outside the overlay or
+     * the resolved target doesn't exist (security - broken symlinks return []).
+     */
+    private resolveForReaddir;
+    readdir(path: string): Promise<string[]>;
+    readdirWithFileTypes(path: string): Promise<DirentEntry[]>;
+    rm(path: string, options?: RmOptions): Promise<void>;
+    /**
+     * Check (synchronously) whether a path exists on the real filesystem.
+     * Used to decide whether a tombstone is needed after deletion.
+     */
+    private existsOnRealFs;
+    cp(src: string, dest: string, options?: CpOptions): Promise<void>;
+    mv(src: string, dest: string): Promise<void>;
+    resolvePath(base: string, rel: string): string;
+    getAllPaths(): string[];
+    private scanRealFs;
+    chmod(path: string, mode: number): Promise<void>;
+    symlink(target: string, linkPath: string): Promise<void>;
+    link(existingPath: string, newPath: string): Promise<void>;
+    readlink(path: string): Promise<string>;
+    /**
+     * Resolve all symlinks in a path to get the canonical physical path.
+     * This is equivalent to POSIX realpath().
+     */
+    realpath(path: string): Promise<string>;
+    /**
+     * Set access and modification times of a file
+     * @param path - The file path
+     * @param _atime - Access time (ignored, kept for API compatibility)
+     * @param mtime - Modification time
+     */
+    utimes(path: string, _atime: Date, mtime: Date): Promise<void>;
+}

package/dist/fs/path-utils.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Pure path utilities for virtual filesystems.
+ *
+ * No node:fs or node:path dependencies — safe for browser bundles.
+ * Real-FS-backed implementations should import from real-fs-utils.ts
+ * (which re-exports these) to keep a single import source.
+ */
+/** Maximum depth for symlink resolution loops. */
+export declare const MAX_SYMLINK_DEPTH = 40;
+/** Default directory permissions. */
+export declare const DEFAULT_DIR_MODE = 493;
+/** Default file permissions. */
+export declare const DEFAULT_FILE_MODE = 420;
+/** Default symlink permissions. */
+export declare const SYMLINK_MODE = 511;
+/**
+ * Normalize a virtual path: resolve `.` and `..`, ensure it starts with `/`,
+ * strip trailing slashes.  Pure function, no I/O.
+ */
+export declare function normalizePath(path: string): string;
+/**
+ * Validate that a path does not contain null bytes.
+ * Null bytes in paths can be used to truncate filenames or bypass security
+ * filters.
+ */
+export declare function validatePath(path: string, operation: string): void;
+/**
+ * Get the directory name of a normalized virtual path.
+ */
+export declare function dirname(path: string): string;
+/**
+ * Resolve a relative path against a base directory.
+ * If `path` is absolute, it is normalized and returned directly.
+ */
+export declare function resolvePath(base: string, path: string): string;
+/**
+ * Join a parent path with a child name.
+ * Handles the root-path edge case (`"/" + "child"` → `"/child"`).
+ */
+export declare function joinPath(parent: string, child: string): string;
+/**
+ * Resolve a symlink target relative to the symlink's location.
+ * Absolute targets are normalized directly; relative targets are
+ * resolved from the symlink's parent directory.
+ */
+export declare function resolveSymlinkTarget(symlinkPath: string, target: string): string;

package/dist/fs/read-write-fs/index.d.ts

@@ -0,0 +1 @@
+export { ReadWriteFs, type ReadWriteFsOptions } from "./read-write-fs.js";

package/dist/fs/read-write-fs/read-write-fs.d.ts

@@ -0,0 +1,96 @@
+/**
+ * ReadWriteFs - Direct wrapper around the real filesystem
+ *
+ * All operations go directly to the underlying Node.js filesystem.
+ * Paths are relative to the configured root directory.
+ *
+ * Security: Symlinks are blocked by default (allowSymlinks: false).
+ * All real-FS access goes through resolveAndValidate() / validateParent()
+ * gates which detect symlink traversal via path comparison. When symlinks
+ * are allowed, targets are validated and transformed to stay within root.
+ * New methods must use these gates — never access the real FS directly.
+ */
+import { type FileContent } from "../encoding.js";
+import type { CpOptions, DirentEntry, FsStat, IFileSystem, MkdirOptions, ReadFileOptions, RmOptions, WriteFileOptions } from "../interface.js";
+export interface ReadWriteFsOptions {
+    /**
+     * The root directory on the real filesystem.
+     * All paths are relative to this root.
+     */
+    root: string;
+    /**
+     * Maximum file size in bytes that can be read.
+     * Files larger than this will throw an EFBIG error.
+     * Defaults to 10MB (10485760).
+     */
+    maxFileReadSize?: number;
+    /**
+     * Whether to allow following and creating symlinks.
+     * When false (default), any path traversing a symlink is rejected
+     * and symlink() throws EPERM.
+     */
+    allowSymlinks?: boolean;
+}
+export declare class ReadWriteFs implements IFileSystem {
+    private readonly root;
+    private readonly canonicalRoot;
+    private readonly maxFileReadSize;
+    private readonly allowSymlinks;
+    constructor(options: ReadWriteFsOptions);
+    /**
+     * Validate that a resolved real path stays within the sandbox root and
+     * return the canonical (symlink-resolved) path for use in subsequent I/O.
+     * This closes the TOCTOU gap where the original path could be swapped
+     * between validation and use.
+     * Throws EACCES if the path escapes the root.
+     */
+    private resolveAndValidate;
+    /**
+     * Validate the parent directory of a path (for operations like lstat/readlink
+     * that should not follow the final component's symlink).
+     * Returns the canonical parent joined with the original basename.
+     */
+    private validateParent;
+    /**
+     * Convert a virtual path to a real filesystem path.
+     */
+    private toRealPath;
+    readFile(path: string, options?: ReadFileOptions | BufferEncoding): Promise<string>;
+    readFileBuffer(path: string): Promise<Uint8Array>;
+    writeFile(path: string, content: FileContent, options?: WriteFileOptions | BufferEncoding): Promise<void>;
+    appendFile(path: string, content: FileContent, options?: WriteFileOptions | BufferEncoding): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    stat(path: string): Promise<FsStat>;
+    lstat(path: string): Promise<FsStat>;
+    mkdir(path: string, options?: MkdirOptions): Promise<void>;
+    readdir(path: string): Promise<string[]>;
+    readdirWithFileTypes(path: string): Promise<DirentEntry[]>;
+    rm(path: string, options?: RmOptions): Promise<void>;
+    cp(src: string, dest: string, options?: CpOptions): Promise<void>;
+    mv(src: string, dest: string): Promise<void>;
+    resolvePath(base: string, path: string): string;
+    getAllPaths(): string[];
+    private sanitizeError;
+    /**
+     * Recursively scan a directory for symlinks whose targets escape the sandbox.
+     * Returns an array of paths (real OS paths) for any escaping symlinks found.
+     */
+    private findEscapingSymlinks;
+    private scanDir;
+    chmod(path: string, mode: number): Promise<void>;
+    symlink(target: string, linkPath: string): Promise<void>;
+    link(existingPath: string, newPath: string): Promise<void>;
+    readlink(path: string): Promise<string>;
+    /**
+     * Resolve all symlinks in a path to get the canonical physical path.
+     * This is equivalent to POSIX realpath().
+     */
+    realpath(path: string): Promise<string>;
+    /**
+     * Set access and modification times of a file
+     * @param path - The file path
+     * @param atime - Access time
+     * @param mtime - Modification time
+     */
+    utimes(path: string, atime: Date, mtime: Date): Promise<void>;
+}

package/dist/fs/real-fs-utils.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Shared utilities for real-filesystem-backed IFileSystem implementations
+ * (OverlayFs and ReadWriteFs).
+ *
+ * Security-critical path validation logic lives here so both implementations
+ * stay consistent.
+ *
+ * Pure path utilities (normalizePath, validatePath, dirname, resolvePath, etc.)
+ * live in path-utils.ts (no node:fs dependency, browser-safe) and are
+ * re-exported here for convenience.
+ */
+export { normalizePath, validatePath } from "./path-utils.js";
+/**
+ * Check whether `resolved` is equal to, or a child of, `canonicalRoot`.
+ * Uses a boundary-safe prefix check (appends `/`) so that `/data` does not
+ * match `/datastore`.
+ */
+export declare function isPathWithinRoot(resolved: string, canonicalRoot: string): boolean;
+/**
+ * Validate that a real filesystem path stays within the sandbox root after
+ * resolving all OS-level symlinks (including in parent components).
+ *
+ * Uses `realpathSync`; when the path does not exist (`ENOENT`) it walks up
+ * to the nearest existing parent.  Returns `false` for any path that escapes
+ * the sandbox (fail-closed on unexpected errors).
+ */
+export declare function validateRealPath(realPath: string, canonicalRoot: string): boolean;
+/**
+ * Resolve a real filesystem path to its canonical form and verify it stays
+ * within the sandbox root.  Returns the canonical path on success, or `null`
+ * if the path escapes the root (fail-closed on unexpected errors).
+ *
+ * Unlike `validateRealPath` (which returns a boolean), this function returns
+ * the canonical path so callers can use it for subsequent I/O, closing the
+ * TOCTOU gap where the original (unresolved) path could be swapped between
+ * validation and use.
+ */
+export declare function resolveCanonicalPath(realPath: string, canonicalRoot: string): string | null;
+/**
+ * Resolve a real filesystem path to its canonical form, verify it stays
+ * within the sandbox root, AND reject the path if any symlinks were
+ * traversed.
+ *
+ * Detection: compare the relative path from `root` (unresolved) with the
+ * relative path from `canonicalRoot` (resolved).  A mismatch means a
+ * symlink was followed somewhere in the path.
+ *
+ * This piggybacks on the `realpathSync` call inside `resolveCanonicalPath`
+ * — the only extra cost is one string comparison.
+ */
+export declare function resolveCanonicalPathNoSymlinks(realPath: string, root: string, canonicalRoot: string): string | null;
+/**
+ * Validate that a root directory exists and is actually a directory.
+ * Throws with a descriptive message including `fsName` (e.g. "OverlayFs",
+ * "ReadWriteFs") on failure.  Does NOT include the real root path in the
+ * error message to prevent information leakage.
+ */
+export declare function validateRootDirectory(root: string, fsName: string): void;
+export { sanitizeErrorMessage } from "./sanitize-error.js";
+/**
+ * Sanitize a raw OS symlink target so it does not leak real filesystem paths
+ * outside the sandbox.
+ *
+ * - Relative targets are returned as-is (they don't leak real paths).
+ * - Absolute targets that resolve within the canonical root are converted to
+ *   a path relative to the root (the caller decides how to present it).
+ * - Absolute targets outside the root are reduced to `basename` only.
+ *
+ * Returns `{ withinRoot: true, relativePath }` when the target is inside the
+ * sandbox, or `{ withinRoot: false, safeName }` when it is outside.
+ */
+export declare function sanitizeSymlinkTarget(rawTarget: string, canonicalRoot: string): {
+    withinRoot: true;
+    relativePath: string;
+} | {
+    withinRoot: false;
+    safeName: string;
+};
+/**
+ * Sanitize an error thrown during real-FS operations to prevent leaking
+ * real OS paths.  Node.js ErrnoException objects contain a `.path` property
+ * with the real filesystem path — this must never reach the sandbox user.
+ *
+ * Errors whose `.path` is `undefined` are our own errors (constructed with
+ * `new Error(...)`) rather than Node.js ErrnoExceptions.  If their message
+ * contains one of `passthroughPatterns`, they are rethrown as-is (they
+ * already contain safe virtual paths).  All other errors are replaced with
+ * a generic `"CODE: operation 'virtualPath'"` message.
+ */
+export declare function sanitizeFsError(e: unknown, virtualPath: string, operation: string, passthroughPatterns: readonly string[]): never;

package/dist/fs/sanitize-error.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Error message sanitization utility.
+ *
+ * This module has NO Node.js dependencies (no `node:fs`, etc.) so it can
+ * safely be imported in browser bundles.
+ */
+/**
+ * Sanitize an error message to strip common real OS paths and stack traces.
+ *
+ * Preserves virtual paths that don't match the common host prefixes used by
+ * the default runtime.
+ */
+export declare function sanitizeErrorMessage(message: string): string;
+/**
+ * Aggressive sanitizer for host-originated errors such as worker/bootstrap
+ * failures. This also scrubs file:// URLs and additional runtime roots that
+ * are common in hosted environments.
+ */
+export declare function sanitizeHostErrorMessage(message: string): string;

package/dist/index.d.cts

@@ -0,0 +1,27 @@
+export type { CommandNode, PipelineNode, ScriptNode, SimpleCommandNode, StatementNode, WordNode, } from "./ast/types.js";
+export type { BashLogger, BashOptions, ExecOptions, JavaScriptConfig, } from "./Bash.js";
+export { Bash } from "./Bash.js";
+export type { AllCommandName, CommandName, JavaScriptCommandName, NetworkCommandName, PythonCommandName, } from "./commands/registry.js";
+export { getCommandNames, getJavaScriptCommandNames, getNetworkCommandNames, getPythonCommandNames, } from "./commands/registry.js";
+export type { CustomCommand, LazyCommand } from "./custom-commands.js";
+export { defineCommand } from "./custom-commands.js";
+export { InMemoryFs } from "./fs/in-memory-fs/index.js";
+export type { BufferEncoding, CpOptions, DirectoryEntry, FileContent, FileEntry, FileInit, FileSystemFactory, FsEntry, FsStat, InitialFiles, LazyFileEntry, LazyFileProvider, MkdirOptions, RmOptions, SymlinkEntry, } from "./fs/interface.js";
+export { MountableFs, type MountableFsOptions, type MountConfig, } from "./fs/mountable-fs/index.js";
+export { OverlayFs, type OverlayFsOptions } from "./fs/overlay-fs/index.js";
+export { ReadWriteFs, type ReadWriteFsOptions, } from "./fs/read-write-fs/index.js";
+export type { AllowedUrl, AllowedUrlEntry, NetworkConfig, RequestTransform, SecureFetch, } from "./network/index.js";
+export { NetworkAccessDeniedError, RedirectNotAllowedError, TooManyRedirectsError, } from "./network/index.js";
+export { parse } from "./parser/parser.js";
+export type { CommandFinished as SandboxCommandFinished, OutputMessage, SandboxOptions, WriteFilesInput, } from "./sandbox/index.js";
+export { Command as SandboxCommand, Sandbox } from "./sandbox/index.js";
+export type { DefenseInDepthConfig, DefenseInDepthHandle, DefenseInDepthStats, SecurityViolation, SecurityViolationType, } from "./security/index.js";
+export { createConsoleViolationCallback, DefenseInDepthBox, SecurityViolationError, SecurityViolationLogger, } from "./security/index.js";
+export { BashTransformPipeline } from "./transform/pipeline.js";
+export type { CommandCollectorMetadata } from "./transform/plugins/command-collector.js";
+export { CommandCollectorPlugin } from "./transform/plugins/command-collector.js";
+export type { TeeFileInfo, TeePluginMetadata, TeePluginOptions, } from "./transform/plugins/tee-plugin.js";
+export { TeePlugin } from "./transform/plugins/tee-plugin.js";
+export { serialize } from "./transform/serialize.js";
+export type { BashTransformResult, TransformContext, TransformPlugin, TransformResult, } from "./transform/types.js";
+export type { BashExecResult, Command, CommandContext, ExecResult, IFileSystem, } from "./types.js";

package/dist/index.d.ts

@@ -0,0 +1,27 @@
+export type { CommandNode, PipelineNode, ScriptNode, SimpleCommandNode, StatementNode, WordNode, } from "./ast/types.js";
+export type { BashLogger, BashOptions, ExecOptions, JavaScriptConfig, } from "./Bash.js";
+export { Bash } from "./Bash.js";
+export type { AllCommandName, CommandName, JavaScriptCommandName, NetworkCommandName, PythonCommandName, } from "./commands/registry.js";
+export { getCommandNames, getJavaScriptCommandNames, getNetworkCommandNames, getPythonCommandNames, } from "./commands/registry.js";
+export type { CustomCommand, LazyCommand } from "./custom-commands.js";
+export { defineCommand } from "./custom-commands.js";
+export { InMemoryFs } from "./fs/in-memory-fs/index.js";
+export type { BufferEncoding, CpOptions, DirectoryEntry, FileContent, FileEntry, FileInit, FileSystemFactory, FsEntry, FsStat, InitialFiles, LazyFileEntry, LazyFileProvider, MkdirOptions, RmOptions, SymlinkEntry, } from "./fs/interface.js";
+export { MountableFs, type MountableFsOptions, type MountConfig, } from "./fs/mountable-fs/index.js";
+export { OverlayFs, type OverlayFsOptions } from "./fs/overlay-fs/index.js";
+export { ReadWriteFs, type ReadWriteFsOptions, } from "./fs/read-write-fs/index.js";
+export type { AllowedUrl, AllowedUrlEntry, NetworkConfig, RequestTransform, SecureFetch, } from "./network/index.js";
+export { NetworkAccessDeniedError, RedirectNotAllowedError, TooManyRedirectsError, } from "./network/index.js";
+export { parse } from "./parser/parser.js";
+export type { CommandFinished as SandboxCommandFinished, OutputMessage, SandboxOptions, WriteFilesInput, } from "./sandbox/index.js";
+export { Command as SandboxCommand, Sandbox } from "./sandbox/index.js";
+export type { DefenseInDepthConfig, DefenseInDepthHandle, DefenseInDepthStats, SecurityViolation, SecurityViolationType, } from "./security/index.js";
+export { createConsoleViolationCallback, DefenseInDepthBox, SecurityViolationError, SecurityViolationLogger, } from "./security/index.js";
+export { BashTransformPipeline } from "./transform/pipeline.js";
+export type { CommandCollectorMetadata } from "./transform/plugins/command-collector.js";
+export { CommandCollectorPlugin } from "./transform/plugins/command-collector.js";
+export type { TeeFileInfo, TeePluginMetadata, TeePluginOptions, } from "./transform/plugins/tee-plugin.js";
+export { TeePlugin } from "./transform/plugins/tee-plugin.js";
+export { serialize } from "./transform/serialize.js";
+export type { BashTransformResult, TransformContext, TransformPlugin, TransformResult, } from "./transform/types.js";
+export type { BashExecResult, Command, CommandContext, ExecResult, IFileSystem, } from "./types.js";

package/dist/interpreter/alias-expansion.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Alias Expansion
+ *
+ * Handles bash alias expansion for SimpleCommandNodes.
+ *
+ * Alias expansion rules:
+ * 1. Only expands if command name is a literal unquoted word
+ * 2. Alias value is substituted for the command name
+ * 3. If alias value ends with a space, the next word is also checked for alias expansion
+ * 4. Recursive expansion is allowed but limited to prevent infinite loops
+ */
+import type { SimpleCommandNode } from "../ast/types.js";
+/**
+ * Context needed for alias expansion operations
+ */
+export interface AliasExpansionContext {
+    env: Map<string, string>;
+}
+/**
+ * Expand alias in a SimpleCommandNode if applicable.
+ * Returns a new node with the alias expanded, or the original node if no expansion.
+ */
+export declare function expandAlias(ctx: AliasExpansionContext, node: SimpleCommandNode, aliasExpansionStack: Set<string>): SimpleCommandNode;

package/dist/interpreter/arithmetic.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Arithmetic Evaluation
+ *
+ * Evaluates bash arithmetic expressions including:
+ * - Basic operators (+, -, *, /, %)
+ * - Comparison operators (<, <=, >, >=, ==, !=)
+ * - Bitwise operators (&, |, ^, ~, <<, >>)
+ * - Logical operators (&&, ||, !)
+ * - Assignment operators (=, +=, -=, etc.)
+ * - Ternary operator (? :)
+ * - Pre/post increment/decrement (++, --)
+ * - Nested arithmetic: $((expr))
+ * - Command substitution: $(cmd) or `cmd`
+ *
+ * Known limitations:
+ * - Bitwise operations use JavaScript's 32-bit signed integers, not 64-bit.
+ *   This means values like (1 << 31) will be negative (-2147483648) instead
+ *   of the bash 64-bit result (2147483648).
+ * - Dynamic arithmetic expressions (e.g., ${base}#a where base=16) are not
+ *   fully supported - variable expansion happens at parse time, not runtime.
+ */
+import type { ArithExpr } from "../ast/types.js";
+import type { InterpreterContext } from "./types.js";
+export declare function evaluateArithmetic(ctx: InterpreterContext, expr: ArithExpr, isExpansionContext?: boolean): Promise<number>;

package/dist/interpreter/assignment-expansion.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Assignment Expansion Helpers
+ *
+ * Handles expansion of assignment arguments for local/declare/typeset builtins.
+ * - Array assignments: name=(elem1 elem2 ...)
+ * - Scalar assignments: name=value, name+=value, name[index]=value
+ */
+import type { WordNode } from "../ast/types.js";
+import type { InterpreterContext } from "./types.js";
+/**
+ * Check if a Word represents an array assignment (name=(...)) and expand it
+ * while preserving quote structure for elements.
+ * Returns the expanded string like "name=(elem1 elem2 ...)" or null if not an array assignment.
+ */
+export declare function expandLocalArrayAssignment(ctx: InterpreterContext, word: WordNode): Promise<string | null>;
+/**
+ * Check if a Word represents a scalar assignment (name=value, name+=value, or name[index]=value)
+ * and expand it WITHOUT glob expansion on the value part.
+ * Returns the expanded string like "name=expanded_value" or null if not a scalar assignment.
+ *
+ * This is important for bash compatibility: `local var=$x` where x='a b' should
+ * set var to "a b", not try to glob-expand it.
+ */
+export declare function expandScalarAssignmentArg(ctx: InterpreterContext, word: WordNode): Promise<string | null>;

package/dist/interpreter/builtin-dispatch.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Builtin Command Dispatch
+ *
+ * Handles dispatch of built-in shell commands like export, unset, cd, etc.
+ * Separated from interpreter.ts for modularity.
+ */
+import type { ExecResult } from "../types.js";
+import type { InterpreterContext } from "./types.js";
+/**
+ * Type for the function that runs a command recursively
+ */
+export type RunCommandFn = (commandName: string, args: string[], quotedArgs: boolean[], stdin: string, skipFunctions?: boolean, useDefaultPath?: boolean, stdinSourceFd?: number) => Promise<ExecResult>;
+/**
+ * Type for the function that builds exported environment
+ */
+export type BuildExportedEnvFn = () => Record<string, string>;
+/**
+ * Type for the function that executes user scripts
+ */
+export type ExecuteUserScriptFn = (scriptPath: string, args: string[], stdin?: string) => Promise<ExecResult>;
+/**
+ * Dispatch context containing dependencies needed for builtin dispatch
+ */
+export interface BuiltinDispatchContext {
+    ctx: InterpreterContext;
+    runCommand: RunCommandFn;
+    buildExportedEnv: BuildExportedEnvFn;
+    executeUserScript: ExecuteUserScriptFn;
+}
+/**
+ * Dispatch a command to the appropriate builtin handler or external command.
+ * Returns null if the command should be handled by external command resolution.
+ */
+export declare function dispatchBuiltin(dispatchCtx: BuiltinDispatchContext, commandName: string, args: string[], _quotedArgs: boolean[], stdin: string, skipFunctions: boolean, _useDefaultPath: boolean, stdinSourceFd: number): Promise<ExecResult | null>;
+/**
+ * Handle external command resolution and execution.
+ * Called when dispatchBuiltin returns null.
+ */
+export declare function executeExternalCommand(dispatchCtx: BuiltinDispatchContext, commandName: string, args: string[], stdin: string, useDefaultPath: boolean): Promise<ExecResult>;

package/dist/interpreter/builtins/break.d.ts

@@ -0,0 +1,6 @@
+/**
+ * break - Exit from loops builtin
+ */
+import type { ExecResult } from "../../types.js";
+import type { InterpreterContext } from "../types.js";
+export declare function handleBreak(ctx: InterpreterContext, args: string[]): ExecResult;

package/dist/interpreter/builtins/cd.d.ts

@@ -0,0 +1,6 @@
+/**
+ * cd - Change directory builtin
+ */
+import type { ExecResult } from "../../types.js";
+import type { InterpreterContext } from "../types.js";
+export declare function handleCd(ctx: InterpreterContext, args: string[]): Promise<ExecResult>;

package/dist/interpreter/builtins/compgen.d.ts

@@ -0,0 +1,26 @@
+/**
+ * compgen - Generate completion matches
+ *
+ * Usage:
+ *   compgen -v [prefix]         - List variable names (optionally starting with prefix)
+ *   compgen -A variable [prefix] - Same as -v
+ *   compgen -A function [prefix] - List function names
+ *   compgen -e [prefix]          - List exported variable names
+ *   compgen -A builtin [prefix]  - List builtin command names
+ *   compgen -A keyword [prefix]  - List shell keywords (alias: -k)
+ *   compgen -A alias [prefix]    - List alias names
+ *   compgen -A shopt [prefix]    - List shopt options
+ *   compgen -A helptopic [prefix] - List help topics
+ *   compgen -A directory [prefix] - List directory names
+ *   compgen -A file [prefix]      - List file names
+ *   compgen -f [prefix]           - List file names (alias for -A file)
+ *   compgen -A user               - List user names
+ *   compgen -A command [prefix]   - List commands (builtins, functions, aliases, external)
+ *   compgen -W wordlist [prefix]  - Generate from wordlist
+ *   compgen -P prefix             - Prefix to add to completions
+ *   compgen -S suffix             - Suffix to add to completions
+ *   compgen -o option             - Completion option (plusdirs, dirnames, default, etc.)
+ */
+import type { ExecResult } from "../../types.js";
+import type { InterpreterContext } from "../types.js";
+export declare function handleCompgen(ctx: InterpreterContext, args: string[]): Promise<ExecResult>;

package/dist/interpreter/builtins/complete.d.ts

@@ -0,0 +1,17 @@
+/**
+ * complete - Set and display programmable completion specifications
+ *
+ * Usage:
+ *   complete                        - List all completion specs
+ *   complete -p                     - Print all completion specs in reusable format
+ *   complete -p cmd                 - Print completion spec for specific command
+ *   complete -W 'word1 word2' cmd   - Set word list completion for cmd
+ *   complete -F func cmd            - Set function completion for cmd
+ *   complete -r cmd                 - Remove completion spec for cmd
+ *   complete -r                     - Remove all completion specs
+ *   complete -D ...                 - Set default completion (for commands with no specific spec)
+ *   complete -o opt cmd             - Set completion options (nospace, filenames, default, etc.)
+ */
+import type { ExecResult } from "../../types.js";
+import type { InterpreterContext } from "../types.js";
+export declare function handleComplete(ctx: InterpreterContext, args: string[]): ExecResult;