just-bash-nx 3.0.1 → 3.0.3

package/dist/commands/stat/stat.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/strings/strings.binary.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/strings/strings.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/strings/strings.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tac/tac.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tail/tail.binary.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tail/tail.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tar/bzip2-compress.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tar/tar.binary.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tar/tar.bundle.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tar/tar.security.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tar/tar.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tar/tar.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tee/tee.binary.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tee/tee.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tee/tee.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/test/test.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/time/time.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/timeout/timeout.command-name-quoting.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/timeout/timeout.nested-cancellation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/timeout/timeout.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/timeout/timeout.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/touch/touch.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tr/tr.binary.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tr/tr.complement.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tr/tr.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tr/tr.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/tree/tree.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/true/true.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/uniq/uniq.binary.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/uniq/uniq.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/uniq/uniq.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/utf8-across-commands.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/utf8-bytestring.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/wc/wc.binary.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/wc/wc.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/wc/wc.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/which/which.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/worker-bridge/bridge-handler.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/xan/moonblade-parser.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/xan/xan.agg.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan agg command - based on xan's test_agg.rs
+ * Uses real xan CLI syntax with moonblade expressions
+ */
+export {};

package/dist/commands/xan/xan.basic.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan basic commands: count, headers, head, tail, slice, reverse
+ * Uses real xan CLI syntax
+ */
+export {};

package/dist/commands/xan/xan.columns.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan column operations: select, drop, rename
+ * Uses real xan CLI syntax
+ */
+export {};

package/dist/commands/xan/xan.data.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan data utility commands:
+ * transpose, shuffle, fixlengths, split, partition, to, from
+ */
+export {};

package/dist/commands/xan/xan.filter-sort.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan filter and sort commands
+ * Uses real xan CLI syntax with moonblade expressions
+ */
+export {};

package/dist/commands/xan/xan.frequency.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan frequency command - based on xan's test_frequency.rs
+ * Uses real xan CLI syntax
+ */
+export {};

package/dist/commands/xan/xan.groupby.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan groupby command - based on xan's test_groupby.rs
+ * Uses real xan CLI syntax with moonblade expressions
+ */
+export {};

package/dist/commands/xan/xan.map.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan map command - based on xan's test_map.rs
+ * Uses real xan CLI syntax with moonblade expressions
+ */
+export {};

package/dist/commands/xan/xan.multifile.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan multi-file commands: cat, join, merge
+ * These operations work with multiple CSV files
+ */
+export {};

package/dist/commands/xan/xan.prototype-pollution.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/xan/xan.reshape.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan reshape commands: explode, implode, pivot
+ * These operations change the structure of the data (rows/columns)
+ */
+export {};

package/dist/commands/xan/xan.select-advanced.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan select advanced features
+ * Based on xan's test_select.rs
+ */
+export {};

package/dist/commands/xan/xan.transform.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for xan transform command - based on xan's test_transform.rs
+ * Transform modifies existing columns in-place
+ */
+export {};

package/dist/commands/xan/xan.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/xargs/xargs.command-name-quoting.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/xargs/xargs.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/xargs/xargs.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/yq/yq.env.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/yq/yq.fixtures.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Tests for yq command using fixture files
+ *
+ * Tests various input formats (YAML, JSON, XML, INI, CSV) and
+ * format conversion capabilities.
+ *
+ * Each test run writes companion .parsed.json files showing the internal
+ * representation of each format after parsing.
+ */
+export {};

package/dist/commands/yq/yq.format-strings.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/yq/yq.navigation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/yq/yq.prototype-pollution.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/yq/yq.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/yq/yq.utf8-stdin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/yq/yq.yaml-security.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Format parser security tests for yq command.
+ *
+ * Tests that all format parsers (YAML, JSON, XML, INI, CSV, TOML) handle
+ * dangerous constructs safely:
+ * - Billion-laughs / entity expansion
+ * - Code execution tags (!!js/function, !!python/object)
+ * - Prototype pollution via __proto__/constructor keys
+ * - XML entity injection (XXE)
+ */
+export {};

package/dist/custom-commands.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/encoding-pipeline.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/encoding.fs-fallback.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fs/cross-fs-no-symlinks.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Tests for default-deny symlink behavior (allowSymlinks: false).
+ *
+ * Verifies that both OverlayFs and ReadWriteFs correctly block symlink
+ * creation and traversal by default, while still allowing lstat/readlink
+ * on existing symlinks and normal (non-symlink) operations.
+ */
+export {};

package/dist/fs/cross-fs-security.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Cross-filesystem security tests.
+ *
+ * Every attack vector in this file is run against BOTH OverlayFs and
+ * ReadWriteFs.  This ensures the shared real-fs-utils code provides
+ * consistent protection regardless of which filesystem is in use.
+ *
+ * Where the two FSes differ in surface semantics (e.g. OverlayFs is
+ * copy-on-write, ReadWriteFs hits real disk), the test adapts, but the
+ * security invariant is the same.
+ */
+export {};

package/dist/fs/in-memory-fs/in-memory-fs.security.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Security tests for InMemoryFs symlink handling
+ *
+ * InMemoryFs is inherently safe from real-filesystem escape attacks,
+ * but must handle symlink loops, path traversal via symlinks, and
+ * ensure consistent behavior across all operations.
+ */
+export {};

package/dist/fs/in-memory-fs/in-memory-fs.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fs/mountable-fs/mountable-fs.security.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Security tests for MountableFs
+ *
+ * MountableFs routes operations to mounted filesystems.
+ * These tests verify that symlink escape attempts, path traversal,
+ * and cross-mount attacks are properly handled.
+ */
+export {};

package/dist/fs/mountable-fs/mountable-fs.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fs/overlay-fs/overlay-fs.e2e.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * End-to-end tests for BashEnv with OverlayFs
+ *
+ * These tests verify that bash commands work correctly when
+ * operating on an OverlayFs-backed filesystem.
+ */
+export {};

package/dist/fs/overlay-fs/overlay-fs.security.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Security tests for OverlayFs path traversal protection
+ *
+ * These tests attempt to escape the root directory using various
+ * attack techniques. All should fail safely.
+ */
+export {};

package/dist/fs/overlay-fs/overlay-fs.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fs/read-write-fs/read-write-fs.piping.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fs/read-write-fs/read-write-fs.security.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Security tests for ReadWriteFs path traversal protection
+ *
+ * These tests attempt to escape the root directory using various
+ * attack techniques. All should fail safely.
+ *
+ * CRITICAL: Since ReadWriteFs writes directly to the real filesystem,
+ * path traversal vulnerabilities could allow attackers to read/write
+ * arbitrary files on the system.
+ */
+export {};

package/dist/fs/read-write-fs/read-write-fs.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fs/real-fs-utils.sanitize.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fs/real-fs-utils.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Unit tests for shared real-fs-utils.
+ *
+ * These validate security-critical path logic in isolation,
+ * independent of any particular filesystem implementation.
+ */
+export {};

package/dist/fs/sanitize-error.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/arithmetic.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/assoc-array.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/break.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/cd.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/complete.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/compopt.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/continue.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/eval.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/exit.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/export.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/local.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/posix-fatal.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/read.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/return.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/set.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/shift.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/source.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/builtins/unset.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/control-flow.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/expansion/prompt.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/helpers/xtrace.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/pipeline-execution.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/prototype-pollution.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/interpreter/redirections.binary.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/network/allow-list/bypass.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Adversarial tests attempting to bypass allow-list security
+ *
+ * These tests verify that various URL manipulation techniques
+ * cannot be used to access blocked URLs.
+ */
+export {};

package/dist/network/allow-list/dns-rebinding-integration.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * DNS rebinding integration tests with REAL DNS resolution (no mocks).
+ *
+ * These tests verify that the DNS resolution path in checkAllowed()
+ * actually works end-to-end with real dns.lookup calls.
+ * Only fetch is mocked (to avoid real HTTP requests).
+ */
+export {};

package/dist/network/allow-list/dns-rebinding.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * DNS rebinding SSRF protection tests
+ *
+ * Verifies that domains resolving to private/loopback IPs are blocked
+ * when denyPrivateRanges is enabled, preventing DNS rebinding attacks.
+ */
+export {};

package/dist/network/allow-list/e2e.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * E2E tests for allow-list enforcement via bash execution
+ *
+ * These tests verify that the allow-list is correctly enforced when using
+ * curl commands through BashEnv and Sandbox.create.
+ */
+export {};

package/dist/network/allow-list/firewall.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Tests for firewall header transforms (credentials brokering)
+ *
+ * Verifies that header transforms are applied at the fetch boundary,
+ * firewall headers override user headers, and no leakage on redirects.
+ */
+export {};

package/dist/network/allow-list/mock.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests that verify the mock is working correctly and fetch is only
+ * called for allowed URLs
+ */
+export {};

package/dist/network/allow-list/pen-test-pocs.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/network/allow-list/unit.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/network/dns-pin-fetch.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/network/dns-pin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/readme.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * README and AGENTS.md validation tests
+ *
+ * Ensures documentation stays in sync with the actual codebase:
+ * 1. Command list is complete and accurate
+ * 2. TypeScript examples compile correctly
+ * 3. Bash examples execute correctly
+ */
+export {};

package/dist/sandbox/Sandbox.security.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sandbox/Sandbox.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/security-limits.test.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Tests for security limits to prevent resource exhaustion attacks.
+ */
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "just-bash-nx",
-  "version": "3.0.1",
+  "version": "3.0.3",
   "description": "A simulated bash environment with virtual filesystem",
   "repository": {
     "type": "git",
@@ -101,7 +101,7 @@
     "build:lib": "esbuild dist/index.js --bundle --splitting --platform=node --format=esm --minify --outdir=dist/bundle --chunk-names=chunks/[name]-[hash] --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
     "build:lib:cjs": "esbuild dist/index.js --bundle --platform=node --format=cjs --minify --outfile=dist/bundle/index.cjs --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
     "build:browser": "esbuild dist/browser.js --bundle --platform=browser --format=esm --minify --outfile=dist/bundle/browser.js --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:node:zlib --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip --define:__BROWSER__=true --alias:node:dns=./src/shims/browser-unsupported.js",
-    "build:cli": "esbuild dist/cli/just-bash.js --bundle --splitting --platform=node --format=esm --minify --outdir=dist/bin --entry-names=[name] --chunk-names=chunks/[name]-[hash] --banner:js='#!/usr/bin/env node' --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
+    "build:cli": "mkdir -p dist/cli dist/bin && cp src/cli/default-init.sh dist/cli/default-init.sh && cp src/cli/default-init.sh dist/bin/default-init.sh && esbuild dist/cli/just-bash.js --bundle --splitting --platform=node --format=esm --minify --outdir=dist/bin --entry-names=[name] --chunk-names=chunks/[name]-[hash] --banner:js='#!/usr/bin/env node' --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
     "build:shell": "esbuild dist/cli/shell.js --bundle --splitting --platform=node --format=esm --minify --outdir=dist/bin/shell --entry-names=[name] --chunk-names=chunks/[name]-[hash] --banner:js='#!/usr/bin/env node' --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
     "validate": "pnpm lint && pnpm knip && pnpm typecheck && pnpm build && pnpm check:worker-sync && pnpm test:run && pnpm test:wasm && pnpm test:dist",
     "typecheck": "tsc --noEmit",