just-bash 2.11.5 → 2.11.7

package/dist/Bash.d.ts

@@ -11,7 +11,7 @@ import { type CommandName } from "./commands/registry.js";
 import { type CustomCommand } from "./custom-commands.js";
 import type { IFileSystem, InitialFiles } from "./fs/interface.js";
 import { type ExecutionLimits } from "./limits.js";
-import { type NetworkConfig } from "./network/index.js";
+import { type NetworkConfig, type SecureFetch } from "./network/index.js";
 import type { DefenseInDepthConfig } from "./security/types.js";
 import type { BashTransformResult, TransformPlugin } from "./transform/types.js";
 import type { BashExecResult, Command, FeatureCoverageWriter, TraceCallback } from "./types.js";
@@ -48,6 +48,13 @@ export interface BashOptions {
      * @deprecated Use executionLimits.maxLoopIterations instead
      */
     maxLoopIterations?: number;
+    /**
+     * Custom secure fetch function. When provided, used instead of creating one
+     * from NetworkConfig. Enables wrapping the fetch layer with custom logic
+     * (e.g., policy evaluation) while keeping built-in curl unmodified.
+     * Network commands (curl, wget) are registered when either `fetch` or `network` is provided.
+     */
+    fetch?: SecureFetch;
     /**
      * Network configuration for commands like curl.
      * Network access is disabled by default - you must explicitly configure allowed URLs.

package/dist/bin/chunks/chunk-4QM2TCNV.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+function d(t){if(!t)return t;let e=t.replace(/\n\s+at\s.*/g,"");return e=e.replace(/(?:\/(?:Users|home|private|var|opt|Library|System|usr|etc|tmp|nix|snap))\b[^\s'",)}\]:]*/g,"<path>"),e=e.replace(/[A-Z]:\\[^\s'",)}\]:]+/g,"<path>"),e}import*as o from"node:fs";import*as r from"node:path";function y(t){if(!t||t==="/")return"/";let e=t.endsWith("/")&&t!=="/"?t.slice(0,-1):t;e.startsWith("/")||(e=`/${e}`);let n=e.split("/").filter(i=>i&&i!=="."),s=[];for(let i of n)i===".."?s.pop():s.push(i);return`/${s.join("/")}`||"/"}function f(t,e){return t===e||t.startsWith(`${e}/`)}function a(t,e){try{let n=o.realpathSync(t);return f(n,e)?n:null}catch(n){if(n.code==="ENOENT"){let s=r.dirname(t);if(s===t)return null;let i=a(s,e);if(i===null)return null;try{if(o.lstatSync(t).isSymbolicLink()){let l=o.readlinkSync(t),u=r.isAbsolute(l)?l:r.resolve(r.dirname(t),l);if(a(u,e)===null)return null}}catch{}return r.join(i,r.basename(t))}return null}}function v(t,e,n){let s=a(t,n);if(s===null)return null;let i=r.resolve(t),c=i.slice(e.length),l=s.slice(n.length);if(c!==l)return null;try{if(o.lstatSync(i).isSymbolicLink())return null}catch{}return s}function m(t,e){if(!o.existsSync(t))throw new Error(`${e} root does not exist`);if(!o.statSync(t).isDirectory())throw new Error(`${e} root is not a directory`)}function S(t,e){if(t.includes("\0"))throw new Error(`ENOENT: path contains null byte, ${e} '${t}'`)}function x(t,e){if(!r.isAbsolute(t))return{withinRoot:!0,relativePath:t};let n;try{n=o.realpathSync(t)}catch{n=r.resolve(t)}return f(n,e)?{withinRoot:!0,relativePath:n.slice(e.length)||"/"}:{withinRoot:!1,safeName:r.basename(t)}}export{d as a,y as b,f as c,a as d,v as e,m as f,S as g,x as h};