just-bash 2.5.5 → 2.7.0

package/dist/interpreter/helpers/shell-constants.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Shell Constants
+ *
+ * Constants for shell builtins, keywords, and POSIX special builtins.
+ */
+/**
+ * POSIX special built-in commands.
+ * In POSIX mode, these have special behaviors:
+ * - Prefix assignments persist after the command
+ * - Cannot be redefined as functions
+ * - Errors may be fatal
+ */
+export declare const POSIX_SPECIAL_BUILTINS: Set<string>;
+/**
+ * Check if a command name is a POSIX special built-in
+ */
+export declare function isPosixSpecialBuiltin(name: string): boolean;
+/**
+ * Shell keywords (for type, command -v, etc.)
+ */
+export declare const SHELL_KEYWORDS: Set<string>;
+/**
+ * Shell builtins (for type, command -v, builtin, etc.)
+ */
+export declare const SHELL_BUILTINS: Set<string>;

package/dist/interpreter/helpers/shellopts.d.ts

@@ -0,0 +1,28 @@
+/**
+ * SHELLOPTS and BASHOPTS variable helpers.
+ *
+ * SHELLOPTS is a colon-separated list of enabled shell options from `set -o`.
+ * BASHOPTS is a colon-separated list of enabled bash-specific options from `shopt`.
+ */
+import type { InterpreterContext, ShellOptions, ShoptOptions } from "../types.js";
+/**
+ * Build the SHELLOPTS string from current shell options.
+ * Returns a colon-separated list of enabled options (alphabetically sorted).
+ * Includes always-on options like braceexpand, hashall, interactive-comments.
+ */
+export declare function buildShellopts(options: ShellOptions): string;
+/**
+ * Update the SHELLOPTS environment variable to reflect current shell options.
+ * Should be called whenever shell options change (via set -o or shopt -o).
+ */
+export declare function updateShellopts(ctx: InterpreterContext): void;
+/**
+ * Build the BASHOPTS string from current shopt options.
+ * Returns a colon-separated list of enabled options (alphabetically sorted).
+ */
+export declare function buildBashopts(shoptOptions: ShoptOptions): string;
+/**
+ * Update the BASHOPTS environment variable to reflect current shopt options.
+ * Should be called whenever shopt options change.
+ */
+export declare function updateBashopts(ctx: InterpreterContext): void;

package/dist/interpreter/helpers/string-compare.d.ts

@@ -17,6 +17,8 @@ export declare function isStringCompareOp(op: string): op is StringCompareOp;
  * @param left - Left operand
  * @param right - Right operand
  * @param usePattern - If true, use glob pattern matching for equality (default: false)
+ * @param nocasematch - If true, use case-insensitive comparison (default: false)
+ * @param extglob - If true, enable extended glob patterns @(), *(), +(), ?(), !() (default: false)
  * @returns True if the comparison succeeds
  */
-export declare function compareStrings(op: StringCompareOp, left: string, right: string, usePattern?: boolean): boolean;
+export declare function compareStrings(op: StringCompareOp, left: string, right: string, usePattern?: boolean, nocasematch?: boolean, extglob?: boolean): boolean;

package/dist/interpreter/helpers/tilde.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Tilde expansion helper functions.
+ *
+ * Handles ~ expansion in assignment contexts.
+ */
+import type { InterpreterContext } from "../types.js";
+/**
+ * Expand tildes in assignment values (PATH-like expansion)
+ * - ~ at start expands to HOME
+ * - ~ after : expands to HOME (for PATH-like values)
+ * - ~username expands to user's home (only root supported)
+ */
+export declare function expandTildesInValue(ctx: InterpreterContext, value: string): string;

package/dist/interpreter/helpers/variable-tests.d.ts

@@ -6,4 +6,4 @@ import type { InterpreterContext } from "../types.js";
  * @param ctx - Interpreter context with environment variables
  * @param operand - The variable name to test, may include array subscript (e.g., "arr[0]", "arr[-1]")
  */
-export declare function evaluateVariableTest(ctx: InterpreterContext, operand: string): boolean;
+export declare function evaluateVariableTest(ctx: InterpreterContext, operand: string): Promise<boolean>;

package/dist/interpreter/helpers/word-matching.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Interpreter Utility Functions
+ *
+ * Standalone helper functions used by the interpreter.
+ */
+import type { WordNode } from "../../ast/types.js";
+/**
+ * Check if a WordNode is a literal match for any of the given strings.
+ * Returns true only if the word is a single literal (no expansions, no quoting)
+ * that matches one of the target strings.
+ *
+ * This is used to detect assignment builtins at "parse time" - bash determines
+ * whether a command is export/declare/etc based on the literal token, not the
+ * runtime value after expansion.
+ */
+export declare function isWordLiteralMatch(word: WordNode, targets: string[]): boolean;
+/**
+ * Parse the content of a read-write file descriptor.
+ * Format: __rw__:pathLength:path:position:content
+ * @returns The parsed components, or null if format is invalid
+ */
+export declare function parseRwFdContent(fdContent: string): {
+    path: string;
+    position: number;
+    content: string;
+} | null;

package/dist/interpreter/helpers/xtrace.d.ts

@@ -0,0 +1,18 @@
+/**
+ * xtrace (set -x) helper functions
+ *
+ * Handles trace output generation when xtrace option is enabled.
+ * PS4 variable controls the prefix (default "+ ").
+ * PS4 is expanded (variable substitution) before each trace line.
+ */
+import type { InterpreterContext } from "../types.js";
+/**
+ * Generate xtrace output for a simple command.
+ * Returns the trace line to be added to stderr.
+ */
+export declare function traceSimpleCommand(ctx: InterpreterContext, commandName: string, args: string[]): Promise<string>;
+/**
+ * Generate xtrace output for an assignment.
+ * Returns the trace line to be added to stderr.
+ */
+export declare function traceAssignment(ctx: InterpreterContext, name: string, value: string): Promise<string>;

package/dist/interpreter/interpreter.d.ts

@@ -34,28 +34,27 @@ export interface InterpreterOptions {
 export declare class Interpreter {
     private ctx;
     constructor(options: InterpreterOptions, state: InterpreterState);
+    /**
+     * Build environment record containing only exported variables.
+     * In bash, only exported variables are passed to child processes.
+     * This includes both permanently exported variables (via export/declare -x)
+     * and temporarily exported variables (prefix assignments like FOO=bar cmd).
+     */
+    private buildExportedEnv;
     executeScript(node: ScriptNode): Promise<ExecResult>;
+    /**
+     * Execute a user script file found in PATH.
+     */
+    private executeUserScript;
     private executeStatement;
     private executePipeline;
     private executeCommand;
     private executeSimpleCommand;
     private executeSimpleCommandInner;
     private runCommand;
-    /**
-     * Resolve a command name to its implementation via PATH lookup.
-     * Returns the command and its resolved path, or null if not found.
-     *
-     * Resolution order:
-     * 1. If command contains "/", resolve as a path
-     * 2. Search PATH directories for the command file
-     * 3. Fall back to registry lookup (for non-InMemoryFs filesystems like OverlayFs)
-     */
-    private resolveCommand;
-    /**
-     * Find all paths for a command in PATH (for `which -a`).
-     */
+    private aliasExpansionStack;
+    private expandAlias;
     findCommandInPath(commandName: string): Promise<string[]>;
-    private handleType;
     private executeSubshell;
     private executeGroup;
     private executeArithmeticCommand;

package/dist/interpreter/pipeline-execution.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Pipeline Execution
+ *
+ * Handles execution of command pipelines (cmd1 | cmd2 | cmd3).
+ */
+import type { CommandNode, PipelineNode } from "../ast/types.js";
+import type { ExecResult } from "../types.js";
+import type { InterpreterContext } from "./types.js";
+/**
+ * Type for executeCommand callback
+ */
+export type ExecuteCommandFn = (node: CommandNode, stdin: string) => Promise<ExecResult>;
+/**
+ * Execute a pipeline node (command or sequence of piped commands).
+ */
+export declare function executePipeline(ctx: InterpreterContext, node: PipelineNode, executeCommand: ExecuteCommandFn): Promise<ExecResult>;

package/dist/interpreter/redirections.d.ts

@@ -7,8 +7,45 @@
  * - 2> : Write stderr to file
  * - &> : Write both stdout and stderr to file
  * - >& : Redirect fd to another fd
+ * - {fd}>file : Allocate FD and store in variable
  */
 import type { RedirectionNode } from "../ast/types.js";
 import type { ExecResult } from "../types.js";
 import type { InterpreterContext } from "./types.js";
-export declare function applyRedirections(ctx: InterpreterContext, result: ExecResult, redirections: RedirectionNode[]): Promise<ExecResult>;
+/**
+ * Pre-expanded redirect targets, keyed by index into the redirections array.
+ * This allows us to expand redirect targets (including side effects) before
+ * executing a function body, then apply the redirections after.
+ */
+export type ExpandedRedirectTargets = Map<number, string>;
+/**
+ * Pre-expand redirect targets for function definitions.
+ * This is needed because redirections on function definitions are evaluated
+ * each time the function is called, and any side effects (like $((i++)))
+ * must occur BEFORE the function body executes.
+ */
+export declare function preExpandRedirectTargets(ctx: InterpreterContext, redirections: RedirectionNode[]): Promise<{
+    targets: ExpandedRedirectTargets;
+    error?: string;
+}>;
+/**
+ * Process FD variable redirections ({varname}>file syntax).
+ * This allocates FDs and sets variables before command execution.
+ * Returns an error result if there's an issue, or null if successful.
+ */
+export declare function processFdVariableRedirections(ctx: InterpreterContext, redirections: RedirectionNode[]): Promise<ExecResult | null>;
+/**
+ * Pre-open (truncate) output redirect files before command execution.
+ * This is needed for compound commands (subshell, for, case, [[) where
+ * bash opens/truncates the redirect file BEFORE evaluating any words in
+ * the command body (including command substitutions).
+ *
+ * Example: `(echo \`cat FILE\`) > FILE`
+ * - Bash first truncates FILE (making it empty)
+ * - Then executes the subshell, where `cat FILE` returns empty string
+ *
+ * Returns an error result if there's an issue (like directory or noclobber),
+ * or null if pre-opening succeeded.
+ */
+export declare function preOpenOutputRedirects(ctx: InterpreterContext, redirections: RedirectionNode[]): Promise<ExecResult | null>;
+export declare function applyRedirections(ctx: InterpreterContext, result: ExecResult, redirections: RedirectionNode[], preExpandedTargets?: ExpandedRedirectTargets): Promise<ExecResult>;

package/dist/interpreter/simple-command-assignments.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Simple Command Assignment Handling
+ *
+ * Handles variable assignments in simple commands:
+ * - Array assignments: VAR=(a b c)
+ * - Subscript assignments: VAR[idx]=value
+ * - Scalar assignments with nameref resolution
+ */
+import type { SimpleCommandNode } from "../ast/types.js";
+import type { ExecResult } from "../types.js";
+import type { InterpreterContext } from "./types.js";
+/**
+ * Result of processing assignments in a simple command
+ */
+export interface AssignmentResult {
+    /** Whether to continue to the next statement (skip command execution) */
+    continueToNext: boolean;
+    /** Accumulated xtrace output for assignments */
+    xtraceOutput: string;
+    /** Temporary assignments for prefix bindings (FOO=bar cmd) */
+    tempAssignments: Record<string, string | undefined>;
+    /** Error result if assignment failed */
+    error?: ExecResult;
+}
+/**
+ * Process all assignments in a simple command.
+ * Returns assignment results including temp bindings and any errors.
+ */
+export declare function processAssignments(ctx: InterpreterContext, node: SimpleCommandNode): Promise<AssignmentResult>;

package/dist/interpreter/subshell-group.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Subshell, Group, and Script Execution
+ *
+ * Handles execution of subshells (...), groups { ...; }, and user scripts
+ */
+import type { GroupNode, ScriptNode, StatementNode, SubshellNode } from "../ast/types.js";
+import type { ExecResult } from "../types.js";
+import type { InterpreterContext } from "./types.js";
+/**
+ * Type for executeStatement callback
+ */
+export type ExecuteStatementFn = (stmt: StatementNode) => Promise<ExecResult>;
+/**
+ * Execute a subshell node (...).
+ * Creates an isolated execution environment that doesn't affect the parent.
+ */
+export declare function executeSubshell(ctx: InterpreterContext, node: SubshellNode, stdin: string, executeStatement: ExecuteStatementFn): Promise<ExecResult>;
+/**
+ * Execute a group node { ...; }.
+ * Runs commands in the current execution environment.
+ */
+export declare function executeGroup(ctx: InterpreterContext, node: GroupNode, stdin: string, executeStatement: ExecuteStatementFn): Promise<ExecResult>;
+/**
+ * Type for executeScript callback
+ */
+export type ExecuteScriptFn = (node: ScriptNode) => Promise<ExecResult>;
+/**
+ * Execute a user script file found in PATH.
+ * This handles executable files that don't have registered command handlers.
+ * The script runs in a subshell-like environment with its own positional parameters.
+ */
+export declare function executeUserScript(ctx: InterpreterContext, scriptPath: string, args: string[], stdin: string, executeScript: ExecuteScriptFn): Promise<ExecResult>;

package/dist/interpreter/type-command.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Type Command Implementation
+ *
+ * Implements the `type` builtin command and related functionality:
+ * - type [-afptP] name...
+ * - command -v/-V name...
+ *
+ * Also includes helpers for function source serialization.
+ */
+import type { IFileSystem } from "../fs/interface.js";
+import type { CommandRegistry, ExecResult } from "../types.js";
+import type { InterpreterState } from "./types.js";
+/**
+ * Context needed for type command operations
+ */
+export interface TypeCommandContext {
+    state: InterpreterState;
+    fs: IFileSystem;
+    commands: CommandRegistry;
+}
+/**
+ * Handle the `type` builtin command.
+ * type [-afptP] name...
+ */
+export declare function handleType(ctx: TypeCommandContext, args: string[], findFirstInPath: (name: string) => Promise<string | null>, findCommandInPath: (name: string) => Promise<string[]>): Promise<ExecResult>;
+/**
+ * Handle `command -v` and `command -V` flags
+ * -v: print the name or path of the command (simple output)
+ * -V: print a description like `type` does (verbose output)
+ */
+export declare function handleCommandV(ctx: TypeCommandContext, names: string[], _showPath: boolean, verboseDescribe: boolean): Promise<ExecResult>;
+/**
+ * Find the first occurrence of a command in PATH.
+ * Returns the full path if found, null otherwise.
+ * Only returns executable files, not directories.
+ */
+export declare function findFirstInPath(ctx: TypeCommandContext, name: string): Promise<string | null>;

package/dist/interpreter/types.d.ts

@@ -6,6 +6,23 @@ import type { IFileSystem } from "../fs/interface.js";
 import type { ExecutionLimits } from "../limits.js";
 import type { SecureFetch } from "../network/index.js";
 import type { CommandRegistry, ExecResult, TraceCallback } from "../types.js";
+/**
+ * Completion specification for a command, set by the `complete` builtin.
+ */
+export interface CompletionSpec {
+    /** Word list for -W option */
+    wordlist?: string;
+    /** Function name for -F option */
+    function?: string;
+    /** Command to run for -C option */
+    command?: string;
+    /** Completion options (nospace, filenames, etc.) */
+    options?: string[];
+    /** Actions to perform (from -A option) */
+    actions?: string[];
+    /** Whether this is a default completion (-D) */
+    isDefault?: boolean;
+}
 export interface ShellOptions {
     /** set -e: Exit immediately if a command exits with non-zero status */
     errexit: boolean;
@@ -17,44 +34,261 @@ export interface ShellOptions {
     xtrace: boolean;
     /** set -v: Print shell input lines as they are read (verbose) */
     verbose: boolean;
+    /** set -o posix: POSIX mode for stricter compliance */
+    posix: boolean;
+    /** set -a: Export all variables */
+    allexport: boolean;
+    /** set -C: Prevent overwriting files with redirection */
+    noclobber: boolean;
+    /** set -f: Disable filename expansion (globbing) */
+    noglob: boolean;
+    /** set -n: Read commands but do not execute them (syntax check mode) */
+    noexec: boolean;
+    /** set -o vi: Use vi-style line editing (mutually exclusive with emacs) */
+    vi: boolean;
+    /** set -o emacs: Use emacs-style line editing (mutually exclusive with vi) */
+    emacs: boolean;
 }
-export interface InterpreterState {
-    env: Record<string, string>;
-    cwd: string;
-    previousDir: string;
-    functions: Map<string, FunctionDefNode>;
+export interface ShoptOptions {
+    /** shopt -s extglob: Enable extended globbing patterns @(), *(), +(), ?(), !() */
+    extglob: boolean;
+    /** shopt -s dotglob: Include dotfiles in glob expansion */
+    dotglob: boolean;
+    /** shopt -s nullglob: Return empty for non-matching globs instead of literal pattern */
+    nullglob: boolean;
+    /** shopt -s failglob: Fail if glob pattern has no matches */
+    failglob: boolean;
+    /** shopt -s globstar: Enable ** recursive glob patterns */
+    globstar: boolean;
+    /** shopt -s globskipdots: Skip . and .. in glob patterns (default: true in bash >=5.2) */
+    globskipdots: boolean;
+    /** shopt -s nocaseglob: Case-insensitive glob matching */
+    nocaseglob: boolean;
+    /** shopt -s nocasematch: Case-insensitive pattern matching in [[ ]] and case */
+    nocasematch: boolean;
+    /** shopt -s expand_aliases: Enable alias expansion */
+    expand_aliases: boolean;
+    /** shopt -s lastpipe: Run last command of pipeline in current shell context */
+    lastpipe: boolean;
+    /** shopt -s xpg_echo: Make echo interpret backslash escapes by default (like echo -e) */
+    xpg_echo: boolean;
+}
+/**
+ * Tracks variable type attributes (declare -i, -l, -u, -n, -a, -A, etc.)
+ * and export status. These affect how variables are read, written, and expanded.
+ */
+export interface VariableAttributeState {
+    /** Set of variable names that are readonly */
+    readonlyVars?: Set<string>;
+    /** Set of variable names that are associative arrays */
+    associativeArrays?: Set<string>;
+    /** Set of variable names that are namerefs (declare -n) */
+    namerefs?: Set<string>;
+    /**
+     * Set of nameref variable names that were "bound" to valid targets at creation time.
+     * A bound nameref will always resolve through to its target, even if the target
+     * is later unset. An unbound nameref (target didn't exist at creation) acts like
+     * a regular variable, returning its raw value.
+     */
+    boundNamerefs?: Set<string>;
+    /**
+     * Set of nameref variable names that were created with an invalid target.
+     * Invalid namerefs always read/write their value directly, never resolving.
+     * For example, after `ref=1; typeset -n ref`, ref has an invalid target "1".
+     */
+    invalidNamerefs?: Set<string>;
+    /** Set of variable names that have integer attribute (declare -i) */
+    integerVars?: Set<string>;
+    /** Set of variable names that have lowercase attribute (declare -l) */
+    lowercaseVars?: Set<string>;
+    /** Set of variable names that have uppercase attribute (declare -u) */
+    uppercaseVars?: Set<string>;
+    /** Set of exported variable names */
+    exportedVars?: Set<string>;
+    /** Set of temporarily exported variable names (for prefix assignments like FOO=bar cmd) */
+    tempExportedVars?: Set<string>;
+    /**
+     * Stack of sets tracking variables exported within each local scope.
+     * When a function returns and a local scope is popped, if a variable was
+     * exported only in that scope (not before entering), the export attribute
+     * should be removed. This enables bash's scoped export behavior where
+     * `local V=x; export V` only exports the local, not the global.
+     */
+    localExportedVars?: Set<string>[];
+    /** Set of variable names that have been declared but not assigned a value */
+    declaredVars?: Set<string>;
+}
+/**
+ * Tracks the complex local variable scoping machinery.
+ * Bash's local variable behavior is intricate: variables are dynamically scoped,
+ * can be declared multiple times in nested contexts, and have different unset
+ * behaviors depending on whether the unset happens in the declaring scope.
+ */
+export interface LocalScopingState {
+    /** Stack of local variable scopes (one Map per function call) */
     localScopes: Map<string, string | undefined>[];
+    /**
+     * Tracks at which call depth each local variable was declared.
+     * Used for bash-specific unset scoping behavior:
+     * - local-unset (same scope): value-unset (clears value, keeps local cell)
+     * - dynamic-unset (different scope): cell-unset (removes local cell, exposes outer value)
+     */
+    localVarDepth?: Map<string, number>;
+    /**
+     * Stack of saved values for each local variable, supporting bash's localvar-nest behavior.
+     * Each entry contains the saved (outer) value and the scope index where it was saved.
+     * This allows multiple nested `local` declarations of the same variable (e.g., in nested evals)
+     * to each have their own cell that can be unset independently.
+     */
+    localVarStack?: Map<string, Array<{
+        value: string | undefined;
+        scopeIndex: number;
+    }>>;
+    /**
+     * Map of variable names to scope index where they were fully unset.
+     * Used to prevent tempenv restoration after all local cells are removed.
+     * Entries are cleared when their scope returns.
+     */
+    fullyUnsetLocals?: Map<string, number>;
+    /**
+     * Stack of temporary environment bindings from prefix assignments (e.g., FOO=bar cmd).
+     * Each entry maps variable names to their saved (underlying) values.
+     * Used for bash-specific unset behavior: when unsetting a variable that has a
+     * tempenv binding, the unset should reveal the underlying value, not completely
+     * remove the variable.
+     */
+    tempEnvBindings?: Map<string, string | undefined>[];
+    /**
+     * Set of tempenv variable names that have been explicitly written to within
+     * the current function context (after the prefix assignment, before local).
+     * Used to distinguish between "fresh" tempenvs (local-unset = value-unset)
+     * and "mutated" tempenvs (local-unset reveals the mutated value).
+     */
+    mutatedTempEnvVars?: Set<string>;
+    /**
+     * Set of tempenv variable names that have been accessed (read or written)
+     * within the current function context. Used to determine if a tempenv was
+     * "observed" before a local declaration.
+     */
+    accessedTempEnvVars?: Set<string>;
+}
+/**
+ * Tracks the function call stack and source file nesting.
+ * This state powers the FUNCNAME, BASH_LINENO, and BASH_SOURCE arrays,
+ * and determines the behavior of `return` in different contexts.
+ */
+export interface CallStackState {
+    /** Function definitions (name -> AST node) */
+    functions: Map<string, FunctionDefNode>;
+    /** Current function call depth (for recursion limits and local scoping) */
     callDepth: number;
     /** Current source script nesting depth (for return in sourced scripts) */
     sourceDepth: number;
-    commandCount: number;
-    lastExitCode: number;
-    /** Last argument of previous command, for $_ expansion */
-    lastArg: string;
-    /** Time when shell started (for $SECONDS) */
-    startTime: number;
-    /** PID of last background job (for $!) */
-    lastBackgroundPid: number;
-    /** Current line number being executed (for $LINENO) */
-    currentLine: number;
-    /** Shell options (set -e, etc.) */
-    options: ShellOptions;
+    /** Stack of call line numbers for BASH_LINENO */
+    callLineStack?: number[];
+    /** Stack of function names for FUNCNAME */
+    funcNameStack?: string[];
+    /** Stack of source files for BASH_SOURCE (tracks where functions were defined) */
+    sourceStack?: string[];
+    /** Current source file context (for function definitions) */
+    currentSource?: string;
+}
+/**
+ * Tracks loop nesting and condition context.
+ * Used to implement break/continue commands and to suppress errexit
+ * in condition contexts (if, while, until, ||, &&).
+ */
+export interface ControlFlowState {
     /** True when executing condition for if/while/until (errexit doesn't apply) */
     inCondition: boolean;
     /** Current loop nesting depth (for break/continue) */
     loopDepth: number;
     /** True if this subshell was spawned from within a loop context (for break/continue to exit subshell) */
     parentHasLoopContext?: boolean;
+    /** True when the last executed statement's exit code is "safe" for errexit purposes
+     *  (e.g., from a &&/|| chain where the failure wasn't the final command) */
+    errexitSafe?: boolean;
+}
+/**
+ * Tracks process IDs, timing, and execution counts.
+ * Powers special variables like $$, $BASHPID, $!, and $SECONDS.
+ */
+export interface ProcessState {
+    /** Total commands executed (for execution limits) */
+    commandCount: number;
+    /** Time when shell started (for $SECONDS) */
+    startTime: number;
+    /** PID of last background job (for $!) */
+    lastBackgroundPid: number;
+    /** Current BASHPID (changes in subshells, unlike $$) */
+    bashPid: number;
+    /** Counter for generating unique virtual PIDs for subshells */
+    nextVirtualPid: number;
+}
+/**
+ * Tracks file descriptors and stdin content for I/O operations.
+ * Used for process substitution, here-documents, and compound command stdin.
+ */
+export interface IOState {
     /** Stdin available for commands in compound commands (groups, subshells, while loops with piped input) */
     groupStdin?: string;
-    /** Set of variable names that are readonly */
-    readonlyVars?: Set<string>;
+    /** File descriptors for process substitution and here-docs */
+    fileDescriptors?: Map<number, string>;
+    /** Next available file descriptor for {varname}>file allocation (starts at 10) */
+    nextFd?: number;
+}
+/**
+ * Captures errors that occur during parameter expansion.
+ * Some expansion errors need to be reported after expansion completes,
+ * with their exit codes and stderr preserved.
+ */
+export interface ExpansionState {
     /** Exit code from expansion errors (arithmetic, etc.) - overrides command exit code */
     expansionExitCode?: number;
     /** Stderr from expansion errors */
     expansionStderr?: string;
-    /** Set of variable names that are associative arrays */
-    associativeArrays?: Set<string>;
+}
+/**
+ * Complete interpreter state for bash script execution.
+ *
+ * This interface is composed from focused sub-interfaces:
+ * - {@link VariableAttributeState} - Variable type attributes (readonly, integer, etc.)
+ * - {@link LocalScopingState} - Local variable scoping machinery
+ * - {@link CallStackState} - Function calls and source file tracking
+ * - {@link ControlFlowState} - Loop nesting and condition context
+ * - {@link ProcessState} - PIDs, timing, execution counts
+ * - {@link IOState} - File descriptors and stdin
+ * - {@link ExpansionState} - Expansion error capture
+ */
+export interface InterpreterState extends VariableAttributeState, LocalScopingState, CallStackState, ControlFlowState, ProcessState, IOState, ExpansionState {
+    /** Environment variables (exported to commands) */
+    env: Record<string, string>;
+    /** Current working directory */
+    cwd: string;
+    /** Previous directory (for `cd -`) */
+    previousDir: string;
+    /** Exit code of last executed command */
+    lastExitCode: number;
+    /** Last argument of previous command, for $_ expansion */
+    lastArg: string;
+    /** Current line number being executed (for $LINENO) */
+    currentLine: number;
+    /** Shell options (set -e, etc.) */
+    options: ShellOptions;
+    /** Shopt options (shopt -s, etc.) */
+    shoptOptions: ShoptOptions;
+    /** Completion specifications set by the `complete` builtin */
+    completionSpecs?: Map<string, CompletionSpec>;
+    /** Directory stack for pushd/popd/dirs */
+    directoryStack?: string[];
+    /** Hash table for PATH command lookup caching */
+    hashTable?: Map<string, string>;
+    /**
+     * Suppress verbose mode output (set -v) when inside command substitutions.
+     * bash only prints verbose output for the main script, not for commands
+     * inside $(...) or backticks.
+     */
+    suppressVerbose?: boolean;
 }
 export interface InterpreterContext {
     state: InterpreterState;

package/dist/limits.d.ts

@@ -23,6 +23,8 @@ export interface ExecutionLimits {
     maxJqIterations?: number;
     /** Maximum sqlite3 query execution time in milliseconds (default: 5000) */
     maxSqliteTimeoutMs?: number;
+    /** Maximum Python execution time in milliseconds (default: 30000) */
+    maxPythonTimeoutMs?: number;
 }
 /**
  * Resolve execution limits by merging user-provided limits with defaults.