just-bash 2.14.3 → 2.14.5

package/dist/network/dns-pin.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Pin DNS resolution for the actual fetch to the IPs that were validated
+ * by the preflight private-range check, defeating DNS rebinding.
+ *
+ * How it works:
+ * - `dns.lookup` is monkey-patched once globally to consult an
+ *   AsyncLocalStorage store. When called inside a `pinDns(...)` async
+ *   context for the same hostname, it returns the pre-validated address
+ *   without performing any network DNS query.
+ * - Calls outside any pinning context (or for a different hostname)
+ *   are delegated to the original `dns.lookup`.
+ *
+ * Why `dns.lookup` and not `dns.promises.lookup`:
+ * - Node's `net.connect`/`tls.connect` (used by undici under `globalThis.fetch`)
+ *   reads `dns.lookup` at call time and uses the callback form.
+ * - We do not patch the promises form because it's not on the connect path.
+ *
+ * Browser builds: this module is imported transitively from `fetch.ts`
+ * (re-exported via `just-bash/browser`). `node:dns` is aliased to a
+ * stub by the browser build, but `node:async_hooks` cannot be aliased
+ * via a static import. We therefore lazy-load both via `require()`
+ * inside an `IS_BROWSER === false` guard so esbuild can dead-code
+ * eliminate the Node-only path. In the browser the exported `pinDns`
+ * is a passthrough that just runs the callback (the preflight that
+ * would have produced a `PinnedAddress` always throws first because
+ * `node:dns` is unavailable, so the passthrough is unreachable).
+ */
+export interface PinnedAddress {
+    hostname: string;
+    address: string;
+    family: 4 | 6;
+}
+/**
+ * Run `fn` with `dns.lookup` for `pinned.hostname` resolving to
+ * `pinned.address`/`pinned.family`. Resolutions for other hostnames
+ * pass through to the original `dns.lookup`.
+ */
+export declare function pinDns<T>(pinned: PinnedAddress, fn: () => Promise<T>): Promise<T>;
+/**
+ * @internal Exposed for tests to verify the patched dns.lookup behaves
+ * correctly inside and outside a pinning context.
+ */
+export declare function _ensureDnsHookInstalled(): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "just-bash",
-  "version": "2.14.3",
+  "version": "2.14.5",
   "description": "A simulated bash environment with virtual filesystem",
   "repository": {
     "type": "git",
@@ -37,6 +37,7 @@
     "dist/*.d.cts",
     "dist/ast/*.d.ts",
     "dist/commands/**/*.d.ts",
+    "dist/commands/sqlite3/worker.js",
     "dist/fs/**/*.d.ts",
     "dist/interpreter/**/*.d.ts",
     "dist/network/**/*.d.ts",
@@ -75,7 +76,7 @@
   "dependencies": {
     "seek-bzip": "^2.0.0",
     "diff": "^8.0.2",
-    "fast-xml-parser": "5.3.3",
+    "fast-xml-parser": "^5.7.3",
     "file-type": "^21.2.0",
     "ini": "^6.0.0",
     "minimatch": "^10.1.1",
@@ -96,7 +97,7 @@
   "scripts": {
     "build": "rm -rf dist && tsc && pnpm build:lib && pnpm build:lib:cjs && pnpm build:browser && pnpm build:cli && pnpm build:shell && pnpm build:worker && pnpm build:clean && cp dist/index.d.ts dist/index.d.cts && sed '1,/^-->/d' AGENTS.npm.md > dist/AGENTS.md",
     "build:clean": "find dist -name '*.test.js' -delete && find dist -name '*.test.d.ts' -delete",
-    "build:worker": "esbuild src/commands/python3/worker.ts --bundle --platform=node --format=esm --outfile=src/commands/python3/worker.js --external:../../../vendor/cpython-emscripten/* && cp src/commands/python3/worker.js dist/commands/python3/worker.js && mkdir -p dist/bin/chunks && cp src/commands/python3/worker.js dist/bin/chunks/worker.js && mkdir -p dist/bundle/chunks && cp src/commands/python3/worker.js dist/bundle/chunks/worker.js && esbuild src/commands/js-exec/js-exec-worker.ts --bundle --platform=node --format=esm --outfile=src/commands/js-exec/js-exec-worker.js --external:quickjs-emscripten && cp src/commands/js-exec/js-exec-worker.js dist/commands/js-exec/js-exec-worker.js && cp src/commands/js-exec/js-exec-worker.js dist/bin/chunks/js-exec-worker.js && cp src/commands/js-exec/js-exec-worker.js dist/bundle/chunks/js-exec-worker.js",
+    "build:worker": "esbuild src/commands/python3/worker.ts --bundle --platform=node --format=esm --outfile=src/commands/python3/worker.js --external:../../../vendor/cpython-emscripten/* && cp src/commands/python3/worker.js dist/commands/python3/worker.js && mkdir -p dist/bin/chunks && cp src/commands/python3/worker.js dist/bin/chunks/worker.js && mkdir -p dist/bundle/chunks && cp src/commands/python3/worker.js dist/bundle/chunks/worker.js && esbuild src/commands/js-exec/js-exec-worker.ts --bundle --platform=node --format=esm --outfile=src/commands/js-exec/js-exec-worker.js --external:quickjs-emscripten && cp src/commands/js-exec/js-exec-worker.js dist/commands/js-exec/js-exec-worker.js && cp src/commands/js-exec/js-exec-worker.js dist/bin/chunks/js-exec-worker.js && cp src/commands/js-exec/js-exec-worker.js dist/bundle/chunks/js-exec-worker.js && esbuild src/commands/sqlite3/worker.ts --bundle --platform=node --format=esm --outfile=src/commands/sqlite3/worker.js --external:sql.js && mkdir -p dist/commands/sqlite3 && cp src/commands/sqlite3/worker.js dist/commands/sqlite3/worker.js && cp src/commands/sqlite3/worker.js dist/bin/chunks/sqlite3-worker.js && cp src/commands/sqlite3/worker.js dist/bundle/chunks/sqlite3-worker.js",
     "build:lib": "esbuild dist/index.js --bundle --splitting --platform=node --format=esm --minify --outdir=dist/bundle --chunk-names=chunks/[name]-[hash] --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
     "build:lib:cjs": "esbuild dist/index.js --bundle --platform=node --format=cjs --minify --outfile=dist/bundle/index.cjs --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
     "build:browser": "esbuild dist/browser.js --bundle --platform=browser --format=esm --minify --outfile=dist/bundle/browser.js --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:node:zlib --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip --define:__BROWSER__=true --alias:node:dns=./src/shims/browser-unsupported.js",