just-bash 3.1.0 → 3.2.0

package/dist/network/dns-pin.d.ts

@@ -1,43 +1,34 @@
 /**
- * Pin DNS resolution for the actual fetch to the IPs that were validated
- * by the preflight private-range check, defeating DNS rebinding.
+ * Request-owned connection binding for DNS-reviewed HTTP requests.
  *
- * How it works:
- * - `dns.lookup` is monkey-patched once globally to consult an
- *   AsyncLocalStorage store. When called inside a `pinDns(...)` async
- *   context for the same hostname, it returns the pre-validated address
- *   without performing any network DNS query.
- * - Calls outside any pinning context (or for a different hostname)
- *   are delegated to the original `dns.lookup`.
+ * Each owner has a private Undici Agent whose connector resolves exactly one
+ * hostname to exactly one preflight-reviewed address. The Agent is never
+ * shared between requests or redirect hops, so an existing origin pool cannot
+ * substitute a socket opened under a different DNS decision.
  *
- * Why `dns.lookup` and not `dns.promises.lookup`:
- * - Node's `net.connect`/`tls.connect` (used by undici under `globalThis.fetch`)
- *   reads `dns.lookup` at call time and uses the callback form.
- * - We do not patch the promises form because it's not on the connect path.
- *
- * Browser builds: this module is imported transitively from `fetch.ts`
- * (re-exported via `just-bash/browser`). `node:dns` is aliased to a
- * stub by the browser build, but `node:async_hooks` cannot be aliased
- * via a static import. We therefore lazy-load both via `require()`
- * inside an `IS_BROWSER === false` guard so esbuild can dead-code
- * eliminate the Node-only path. In the browser the exported `pinDns`
- * is a passthrough that just runs the callback (the preflight that
- * would have produced a `PinnedAddress` always throws first because
- * `node:dns` is unavailable, so the passthrough is unreachable).
+ * The browser build removes the Node-only `undici` branch and edge runtimes
+ * that cannot construct this owner fail closed when private-range denial is
+ * enabled.
  */
 export interface PinnedAddress {
     hostname: string;
     address: string;
     family: 4 | 6;
 }
+export interface PinnedConnectionOwner {
+    fetch(url: string, init: RequestInit): Promise<Response>;
+    close(): Promise<void>;
+}
+export type PinnedConnectionOwnerFactory = (pinned: PinnedAddress) => Promise<PinnedConnectionOwner>;
+export declare class DnsPinningUnavailableError extends Error {
+    constructor();
+}
+type PinnedLookup = import("node:net").LookupFunction;
+/** @internal Pure connector lookup used by focused binding tests. */
+export declare function _createPinnedLookup(pinned: PinnedAddress): PinnedLookup;
 /**
- * Run `fn` with `dns.lookup` for `pinned.hostname` resolving to
- * `pinned.address`/`pinned.family`. Resolutions for other hostnames
- * pass through to the original `dns.lookup`.
- */
-export declare function pinDns<T>(pinned: PinnedAddress, fn: () => Promise<T>): Promise<T>;
-/**
- * @internal Exposed for tests to verify the patched dns.lookup behaves
- * correctly inside and outside a pinning context.
+ * Create a disposable transport whose pool identity is the reviewed address.
+ * The returned owner must be closed after the response body is consumed.
  */
-export declare function _ensureDnsHookInstalled(): void;
+export declare const createPinnedConnectionOwner: PinnedConnectionOwnerFactory;
+export {};

package/dist/network/fetch.d.ts

@@ -14,6 +14,10 @@ export interface SecureFetchOptions {
     followRedirects?: boolean;
     /** Override timeout for this request (capped at global timeout) */
     timeoutMs?: number;
+    /** Override redirects for this request (capped at the host policy). */
+    maxRedirects?: number;
+    /** Abort DNS review, redirects, transport, and response-body consumption. */
+    signal?: AbortSignal;
 }
 /**
  * Type for the secure fetch function

package/dist/network/types.d.ts

@@ -4,6 +4,7 @@
  * Network access is disabled by default. To enable network access (e.g., for curl),
  * you must explicitly configure allowed URLs.
  */
+import type { PinnedConnectionOwnerFactory } from "./dns-pin.js";
 /**
  * DNS lookup result used for private IP resolution checks
  */
@@ -66,7 +67,8 @@ export interface NetworkConfig {
      * - https://api.example.com/v1-admin
      * - https://api.example.com/v2/users
      * - https://api.example.org/v1/users (different origin)
-     * - URLs that rely on ambiguous encoded separators like %2f or %5c
+     * - URLs that rely on ambiguous separators or path parameters like %2f,
+     *   %5c, semicolons, or nested encodings
      *
      * Invalid entries (missing scheme, missing host, relative paths) will throw an error.
      */
@@ -98,6 +100,9 @@ export interface NetworkConfig {
      * Reject URLs with private/loopback IP addresses as hostnames.
      * Performs both lexical hostname checks and DNS resolution to catch
      * domains that resolve to private IPs (e.g., DNS rebinding attacks).
+     * Domain requests fail closed on resolution errors, empty or malformed
+     * answers, and runtimes that cannot pin the reviewed address to the actual
+     * connection. Each redirect hop is resolved and pinned independently.
      * Useful for mitigating SSRF attacks. Default: false (opt-in).
      *
      * When enabled, the private IP check is enforced even when
@@ -111,6 +116,10 @@ export interface NetworkConfig {
      * denyPrivateRanges DNS rebinding check.
      */
     _dnsResolve?: (hostname: string) => Promise<DnsLookupResult[]>;
+    /**
+     * @internal Override request-owned connection binding for testing.
+     */
+    _createConnectionOwner?: PinnedConnectionOwnerFactory;
 }
 /**
  * Result of a network fetch operation

package/dist/parser/parser.d.ts

@@ -14,6 +14,7 @@
  */
 import { type ArithmeticExpansionPart, type ArithmeticExpressionNode, type CommandSubstitutionPart, type RedirectionNode, type ScriptNode, type StatementNode, type WordNode } from "../ast/types.js";
 import { type LexerOptions, type Token, TokenType } from "./lexer.js";
+import { ParseBudget } from "./types.js";
 export type { ParseError } from "./types.js";
 export { ParseException } from "./types.js";
 /**
@@ -23,9 +24,10 @@ export declare class Parser {
     private tokens;
     private pos;
     private pendingHeredocs;
-    private parseIterations;
-    private parseDepth;
+    private readonly parseBudget;
+    private readonly ownsParseBudget;
     private _input;
+    constructor(parseBudget?: ParseBudget);
     /**
      * Get the raw input string being parsed.
      * Used by conditional-parser for extracting exact whitespace in regex patterns.
@@ -40,6 +42,7 @@ export declare class Parser {
      * from deeply nested constructs. Returns a function to decrement depth.
      */
     enterDepth(): () => void;
+    withDepth<T>(callback: () => T): T;
     /**
      * Parse a bash script string
      */

package/dist/parser/types.d.ts

@@ -6,7 +6,6 @@
 import { type Token, TokenType } from "./lexer.js";
 export declare const MAX_INPUT_SIZE = 1000000;
 export declare const MAX_TOKENS = 100000;
-export declare const MAX_PARSE_ITERATIONS = 1000000;
 export declare const MAX_PARSER_DEPTH = 200;
 export declare const REDIRECTION_TOKENS: Set<TokenType>;
 export declare const REDIRECTION_AFTER_NUMBER: Set<TokenType>;
@@ -23,3 +22,13 @@ export declare class ParseException extends Error {
     token: Token | undefined;
     constructor(message: string, line: number, column: number, token?: Token | undefined);
 }
+/** Mutable limits shared by every parser created for one top-level source. */
+export declare class ParseBudget {
+    private iterations;
+    private tokens;
+    private depth;
+    reset(): void;
+    chargeIteration(line: number, column: number): void;
+    chargeTokens(count: number, line?: number, column?: number): void;
+    enter(line: number, column: number): () => void;
+}

package/dist/source-limit.d.ts

@@ -0,0 +1,2 @@
+/** Reject source before normalization or parsing can duplicate it. */
+export declare function assertSourceWithinLimit(source: string, maxSourceBytes: number): void;

package/dist/timers.d.ts

@@ -1,4 +1,16 @@
 export declare const _setTimeout: typeof globalThis.setTimeout;
 export declare const _clearTimeout: typeof globalThis.clearTimeout;
+export interface FiniteTimeoutHandle {
+    cleared: boolean;
+    remainingMs: number;
+    timer: ReturnType<typeof globalThis.setTimeout> | undefined;
+}
+/**
+ * Schedule a configured deadline without overflowing the host timer. Positive
+ * Infinity means no deadline; longer finite delays are advanced in native-safe
+ * chunks so they retain their actual duration.
+ */
+export declare function _setTimeoutIfFinite(callback: Parameters<typeof globalThis.setTimeout>[0], delay: number): FiniteTimeoutHandle | undefined;
+export declare function _clearFiniteTimeout(handle: FiniteTimeoutHandle | undefined): void;
 export declare const _setInterval: typeof globalThis.setInterval;
 export declare const _clearInterval: typeof globalThis.clearInterval;

package/dist/types.d.ts

@@ -1,4 +1,5 @@
 import type { ByteString } from "./encoding.js";
+import type { CommandExecutionBudget } from "./execution-scope.js";
 import type { IFileSystem } from "./fs/interface.js";
 import type { ExecutionLimits } from "./limits.js";
 import type { SecureFetch } from "./network/index.js";
@@ -37,6 +38,19 @@ export interface ExecResult {
      * `"binary"` to mark binary output. New code should prefer `stdoutKind`.
      */
     stdoutEncoding?: "binary";
+    /** @internal PIPESTATUS override used by synthesized transform builtins. */
+    internalPipeStatusOverride?: number[];
+    /**
+     * Bytes in the current result that have already been charged to the shared
+     * execution output budget. Interpreter plumbing must preserve this when it
+     * combines child results so nested shells do not refresh or double-charge
+     * the budget.
+     * @internal
+     */
+    internalOutputAccounting?: {
+        stdout: number;
+        stderr: number;
+    };
 }
 /** Result from BashEnv.exec() - always includes env */
 export interface BashExecResult extends ExecResult {
@@ -120,13 +134,17 @@ export interface TraceEvent {
  * Trace callback function for receiving performance events
  */
 export type TraceCallback = (event: TraceEvent) => void;
-export interface CommandContext {
+export interface RuntimeCommandContext {
     /** Virtual filesystem interface for file operations */
     fs: IFileSystem;
+    /** Stable identity of the underlying filesystem across defense wrappers. */
+    fsIdentity?: object;
     /** Current working directory */
     cwd: string;
     /** Environment variables - uses Map to prevent prototype pollution */
     env: Map<string, string>;
+    /** Interpreter-owned assignment gateway for commands such as `printf -v`. */
+    assignShellVariable?: (name: string, value: string, subscript?: string) => void | Promise<void>;
     /**
      * Exported environment variables only.
      * Used by commands like printenv and env that should only show exported vars.
@@ -148,9 +166,11 @@ export interface CommandContext {
     stdin: ByteString;
     /**
      * Execution limits configuration.
-     * Available when running commands via BashEnv interpreter.
+     * Fully resolved by Bash before a command is invoked.
      */
-    limits?: Required<ExecutionLimits>;
+    limits: Required<ExecutionLimits>;
+    /** Shared top-level accounting, present for interpreter-dispatched commands. */
+    executionScope?: CommandExecutionBudget;
     /**
      * Performance trace callback for profiling.
      * If provided, commands emit timing events for analysis.
@@ -164,6 +184,8 @@ export interface CommandContext {
      * @param options - Required options including `cwd` to prevent directory bugs
      */
     exec?: (command: string, options: CommandExecOptions) => Promise<ExecResult>;
+    /** @internal Closed path for forwarding this command's already-accounted stdin. */
+    execWithInheritedStdin?: (command: string, options: Omit<CommandExecOptions, "stdin" | "stdinKind">) => Promise<ExecResult>;
     /**
      * Secure fetch function for network requests (e.g., for `curl`).
      * Only available when `network` option is configured in BashEnv.
@@ -227,16 +249,30 @@ export interface CommandContext {
      */
     invokeTool?: (path: string, argsJson: string) => Promise<string>;
 }
+/** Legacy standalone context shape used by direct command invocations. */
+export type CommandContext = Omit<RuntimeCommandContext, "limits" | "executionScope"> & {
+    /** Fully resolved when Bash dispatches the command; optional for legacy direct calls. */
+    limits?: Required<ExecutionLimits>;
+    /** Shared accounting is only available for interpreter-dispatched commands. */
+    executionScope?: CommandExecutionBudget;
+};
+/** Context supplied by Bash when dispatching a registered command. */
+export type ResolvedCommandContext = RuntimeCommandContext;
 export interface Command {
     name: string;
     /**
-     * When true, execute this command inside DefenseInDepthBox.runTrustedAsync().
-     * Use for trusted host-extension commands that need direct Node.js globals.
+     * Host-provided commands are trusted by default for compatibility. Set this
+     * to false to select the restricted extension boundary.
      * Built-in commands should generally remain untrusted and use explicit
      * trusted wrappers only at narrow infrastructure boundaries.
      */
     trusted?: boolean;
-    execute(args: string[], ctx: CommandContext): Promise<ExecResult>;
+    /** @internal Marks host extensions that receive a least-authority budget. */
+    internalIsExtension?: boolean;
+    execute(args: string[], ctx: ResolvedCommandContext): Promise<ExecResult>;
+}
+export interface RuntimeCommand extends Omit<Command, "execute"> {
+    execute(args: string[], ctx: RuntimeCommandContext): Promise<ExecResult>;
 }
-export type CommandRegistry = Map<string, Command>;
+export type CommandRegistry = Map<string, RuntimeCommand>;
 export type { IFileSystem };

package/dist/utils/file-reader.d.ts

@@ -5,7 +5,7 @@
  * including parallel batch reading for performance.
  */
 import { type ByteString } from "../encoding.js";
-import type { CommandContext, ExecResult } from "../types.js";
+import type { ExecResult, RuntimeCommandContext } from "../types.js";
 export interface ReadFilesOptions {
     /** Command name for error messages */
     cmdName: string;
@@ -34,6 +34,8 @@ export interface ReadFilesResult {
     /** 0 if all files read successfully, 1 if any errors */
     exitCode: number;
 }
+/** Charge bytes read from a file to the execution-wide input budget. */
+export declare function accountFileInput(ctx: RuntimeCommandContext, bytes: number, site: string): void;
 /**
  * Read content from files or stdin.
  *
@@ -49,7 +51,7 @@ export interface ReadFilesResult {
  *   // process content
  * }
  */
-export declare function readFiles(ctx: CommandContext, files: string[], options: ReadFilesOptions): Promise<ReadFilesResult>;
+export declare function readFiles(ctx: RuntimeCommandContext, files: string[], options: ReadFilesOptions): Promise<ReadFilesResult>;
 /**
  * Read and concatenate all files into a single byte buffer.
  *
@@ -62,7 +64,7 @@ export declare function readFiles(ctx: CommandContext, files: string[], options:
  * if (!result.ok) return result.error;
  * const lines = decodeBytesToUtf8(result.content).split("\n");
  */
-export declare function readAndConcat(ctx: CommandContext, files: string[], options: {
+export declare function readAndConcat(ctx: RuntimeCommandContext, files: string[], options: {
     cmdName: string;
     allowStdinMarker?: boolean;
 }): Promise<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "just-bash",
-  "version": "3.1.0",
+  "version": "3.2.0",
   "description": "A simulated bash environment with virtual filesystem",
   "repository": {
     "type": "git",
@@ -11,6 +11,9 @@
     "url": "https://github.com/vercel-labs/just-bash/issues"
   },
   "type": "module",
+  "engines": {
+    "node": ">=20.18.1"
+  },
   "main": "dist/bundle/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -70,11 +73,11 @@
     "esbuild": "^0.27.2",
     "fast-check": "^3.23.2",
     "knip": "^5.41.1",
+    "tsx": "^4.21.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.16"
   },
   "dependencies": {
-    "seek-bzip": "^2.0.0",
     "diff": "^8.0.2",
     "fast-xml-parser": "^5.7.3",
     "file-type": "^21.2.0",
@@ -84,10 +87,12 @@
     "papaparse": "^5.5.3",
     "quickjs-emscripten": "^0.32.0",
     "re2js": "^1.2.1",
+    "seek-bzip": "^2.0.0",
     "smol-toml": "^1.6.0",
     "sprintf-js": "^1.1.3",
     "sql.js": "^1.13.0",
     "turndown": "^7.2.2",
+    "undici": "^7.25.0",
     "yaml": "^2.8.2"
   },
   "optionalDependencies": {
@@ -100,7 +105,7 @@
     "build:worker": "esbuild src/commands/python3/worker.ts --bundle --platform=node --format=esm --outfile=src/commands/python3/worker.js --external:../../../vendor/cpython-emscripten/* && cp src/commands/python3/worker.js dist/commands/python3/worker.js && mkdir -p dist/bin/chunks && cp src/commands/python3/worker.js dist/bin/chunks/worker.js && mkdir -p dist/bundle/chunks && cp src/commands/python3/worker.js dist/bundle/chunks/worker.js && esbuild src/commands/js-exec/js-exec-worker.ts --bundle --platform=node --format=esm --outfile=src/commands/js-exec/js-exec-worker.js --external:quickjs-emscripten && cp src/commands/js-exec/js-exec-worker.js dist/commands/js-exec/js-exec-worker.js && cp src/commands/js-exec/js-exec-worker.js dist/bin/chunks/js-exec-worker.js && cp src/commands/js-exec/js-exec-worker.js dist/bundle/chunks/js-exec-worker.js && esbuild src/commands/sqlite3/worker.ts --bundle --platform=node --format=esm --outfile=src/commands/sqlite3/worker.js --external:sql.js && mkdir -p dist/commands/sqlite3 && cp src/commands/sqlite3/worker.js dist/commands/sqlite3/worker.js && cp src/commands/sqlite3/worker.js dist/bin/chunks/sqlite3-worker.js && cp src/commands/sqlite3/worker.js dist/bundle/chunks/sqlite3-worker.js",
     "build:lib": "esbuild dist/index.js --bundle --splitting --platform=node --format=esm --minify --outdir=dist/bundle --chunk-names=chunks/[name]-[hash] --banner:js='import{createRequire} from\"node:module\";const require=createRequire(import.meta.url);' --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
     "build:lib:cjs": "esbuild dist/index.js --bundle --platform=node --format=cjs --minify --outfile=dist/bundle/index.cjs --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
-    "build:browser": "esbuild dist/browser.js --bundle --platform=browser --format=esm --minify --outfile=dist/bundle/browser.js --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:node:zlib --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip --define:__BROWSER__=true --alias:node:dns=./src/shims/browser-unsupported.js",
+    "build:browser": "esbuild dist/browser.js --bundle --platform=browser --format=esm --minify --outfile=dist/bundle/browser.js --external:diff --external:minimatch --external:sprintf-js --external:turndown --external:undici --external:node:zlib --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip --define:__BROWSER__=true --alias:node:async_hooks=./src/shims/browser-unsupported.js --alias:node:dns=./src/shims/browser-unsupported.js --alias:node:module=./src/shims/browser-unsupported.js",
     "build:cli": "esbuild dist/cli/just-bash.js --bundle --splitting --platform=node --format=esm --minify --outdir=dist/bin --entry-names=[name] --chunk-names=chunks/[name]-[hash] --banner:js='#!/usr/bin/env node\nimport{createRequire} from\"node:module\";const require=createRequire(import.meta.url);' --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
     "build:shell": "esbuild dist/cli/shell.js --bundle --splitting --platform=node --format=esm --minify --outdir=dist/bin/shell --entry-names=[name] --chunk-names=chunks/[name]-[hash] --banner:js='#!/usr/bin/env node\nimport{createRequire} from\"node:module\";const require=createRequire(import.meta.url);' --external:sql.js --external:quickjs-emscripten --external:@mongodb-js/zstd --external:node-liblzma --external:seek-bzip",
     "validate": "pnpm lint && pnpm knip && pnpm typecheck && pnpm build && pnpm check:worker-sync && pnpm test:run && pnpm test:wasm && pnpm test:dist",
@@ -121,7 +126,7 @@
     "test:coverage:unit": "vitest run --config vitest.unit.config.ts --coverage",
     "test:fuzz": "vitest run src/security/fuzzing/",
     "test:fuzz:long": "FUZZ_RUNS=10000 vitest run src/security/fuzzing/",
-    "shell": "npx tsx src/cli/shell.ts",
-    "dev:exec": "npx tsx src/cli/exec.ts"
+    "shell": "tsx src/cli/shell.ts",
+    "dev:exec": "tsx src/cli/exec.ts"
   }
 }

package/dist/bin/chunks/alias-YRVAW27Y.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a,b,c,d}from"./chunk-DJAX3ZRG.js";import"./chunk-MUFNRCMY.js";import"./chunk-LNVSXNT7.js";export{a as aliasCommand,c as flagsForFuzzing,b as unaliasCommand,d as unaliasFlagsForFuzzing};

package/dist/bin/chunks/awk2-UFCNQFCV.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a,b}from"./chunk-D7YFPDMV.js";import"./chunk-MROECM42.js";import"./chunk-AZH64XMJ.js";import"./chunk-LX2H4DPL.js";import"./chunk-52FZYTIX.js";import"./chunk-DHIKZU63.js";import"./chunk-47WZ2U6M.js";import"./chunk-MUFNRCMY.js";import"./chunk-LNVSXNT7.js";export{a as awkCommand2,b as flagsForFuzzing};

package/dist/bin/chunks/base64-EGKVQIBC.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a,b}from"./chunk-6WJQNLR2.js";import"./chunk-DHIKZU63.js";import"./chunk-NE4R2FVV.js";import"./chunk-MUFNRCMY.js";import"./chunk-LNVSXNT7.js";export{a as base64Command,b as flagsForFuzzing};

package/dist/bin/chunks/basename-F3AQ4KAQ.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a,b}from"./chunk-YJ5OCPSK.js";import"./chunk-MUFNRCMY.js";import"./chunk-LNVSXNT7.js";export{a as basenameCommand,b as flagsForFuzzing};

package/dist/bin/chunks/bash-BEG4JB7K.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a,b,c,d}from"./chunk-OVVMB2JI.js";import"./chunk-MROECM42.js";import"./chunk-DHIKZU63.js";import"./chunk-MUFNRCMY.js";import"./chunk-LNVSXNT7.js";export{a as bashCommand,c as flagsForFuzzing,b as shCommand,d as shFlagsForFuzzing};

package/dist/bin/chunks/cat-NBL6MU5H.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a,b}from"./chunk-GTO74SFS.js";import"./chunk-ZZP3RSWL.js";import"./chunk-DHIKZU63.js";import"./chunk-7JZKVC3F.js";import"./chunk-NE4R2FVV.js";import"./chunk-MUFNRCMY.js";import"./chunk-LNVSXNT7.js";export{a as catCommand,b as flagsForFuzzing};

package/dist/bin/chunks/chmod-S564JCJW.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a,b}from"./chunk-XHCCSVP6.js";import"./chunk-MUFNRCMY.js";import"./chunk-LNVSXNT7.js";export{a as chmodCommand,b as flagsForFuzzing};

package/dist/bin/chunks/chunk-2AIXTPH2.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a as m}from"./chunk-NE4R2FVV.js";import{a as $}from"./chunk-I4IRHQDW.js";import{a as y,b as h}from"./chunk-MUFNRCMY.js";var D={name:"cp",summary:"copy files and directories",usage:"cp [OPTION]... SOURCE... DEST",options:["-r, -R, --recursive  copy directories recursively","-n, --no-clobber     do not overwrite an existing file","-p, --preserve       preserve file attributes","-v, --verbose        explain what is being done","    --help           display this help and exit"]},E={recursive:{short:"r",long:"recursive",type:"boolean"},recursiveUpper:{short:"R",type:"boolean"},noClobber:{short:"n",long:"no-clobber",type:"boolean"},preserve:{short:"p",long:"preserve",type:"boolean"},verbose:{short:"v",long:"verbose",type:"boolean"}},A={name:"cp",async execute(f,e){if(h(f))return y(D);let t=m("cp",f,E);if(!t.ok)return t.error;let u=t.result.flags.recursive||t.result.flags.recursiveUpper,w=t.result.flags.noClobber,C=t.result.flags.preserve,P=t.result.flags.verbose,c=t.result.positional;if(c.length<2)return{stdout:"",stderr:`cp: missing destination file operand
-`,exitCode:1};let g=c.pop()??"",d=c,o=e.fs.resolvePath(e.cwd,g),b="",n="",l=0,p=!1;try{p=(await e.fs.stat(o)).isDirectory}catch{}if(d.length>1&&!p)return{stdout:"",stderr:`cp: target '${g}' is not a directory
-`,exitCode:1};for(let r of d)try{let a=e.fs.resolvePath(e.cwd,r),s=await e.fs.stat(a),i=o;if(p){let v=r.split("/").pop()||r;i=o==="/"?`/${v}`:`${o}/${v}`}if(s.isDirectory&&!u){n+=`cp: -r not specified; omitting directory '${r}'
-`,l=1;continue}if(w)try{await e.fs.stat(i);continue}catch{}await e.fs.cp(a,i,{recursive:u}),P&&(b+=`'${r}' -> '${i}'
-`)}catch(a){let s=$(a);s.includes("ENOENT")||s.includes("no such file")?n+=`cp: cannot stat '${r}': No such file or directory
-`:n+=`cp: cannot copy '${r}': ${s}
-`,l=1}return{stdout:b,stderr:n,exitCode:l}}},F={name:"cp",flags:[{flag:"-r",type:"boolean"},{flag:"-R",type:"boolean"},{flag:"-n",type:"boolean"},{flag:"-p",type:"boolean"},{flag:"-v",type:"boolean"}],needsArgs:!0,minArgs:2};export{A as a,F as b};

package/dist/bin/chunks/chunk-2GG3NVC4.js

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a as p}from"./chunk-PBOVSFTJ.js";import{a as m,b as g,c as h}from"./chunk-MUFNRCMY.js";var y={name:"ln",summary:"make links between files",usage:"ln [OPTIONS] TARGET LINK_NAME",options:["-s      create a symbolic link instead of a hard link","-f      remove existing destination files","-n      treat LINK_NAME as a normal file if it is a symbolic link to a directory","-v      print name of each linked file","    --help display this help and exit"]},v={name:"ln",async execute(n,s){if(g(n))return m(y);let r=!1,a=!1,f=!1,t=0;for(;t<n.length&&n[t].startsWith("-");){let e=n[t];if(e==="-s"||e==="--symbolic")r=!0,t++;else if(e==="-f"||e==="--force")a=!0,t++;else if(e==="-v"||e==="--verbose")f=!0,t++;else if(e==="-n"||e==="--no-dereference")t++;else if(/^-[sfvn]+$/.test(e))e.includes("s")&&(r=!0),e.includes("f")&&(a=!0),e.includes("v")&&(f=!0),t++;else if(e==="--"){t++;break}else return h("ln",e)}let d=n.slice(t);if(d.length<2)return{stdout:"",stderr:`ln: missing file operand
-`,exitCode:1};let i=d[0],l=d[1],o=s.fs.resolvePath(s.cwd,l);if(await s.fs.exists(o))if(a)try{await s.fs.rm(o,{force:!0})}catch{return{stdout:"",stderr:`ln: cannot remove '${l}': Permission denied
-`,exitCode:1}}else return{stdout:"",stderr:`ln: failed to create ${r?"symbolic ":""}link '${l}': File exists
-`,exitCode:1};try{if(r)await s.fs.symlink(i,o);else{let e=s.fs.resolvePath(s.cwd,i);if(!await s.fs.exists(e))return{stdout:"",stderr:`ln: failed to access '${i}': No such file or directory
-`,exitCode:1};await s.fs.link(e,o)}}catch(e){let u=e;return u.message.includes("EPERM")?{stdout:"",stderr:`ln: '${i}': hard link not allowed for directory
-`,exitCode:1}:{stdout:"",stderr:`ln: ${p(u.message)}
-`,exitCode:1}}let c="";return f&&(c=`'${l}' -> '${i}'
-`),{stdout:c,stderr:"",exitCode:0}}},$={name:"ln",flags:[{flag:"-s",type:"boolean"},{flag:"-f",type:"boolean"},{flag:"-n",type:"boolean"},{flag:"-v",type:"boolean"}],needsArgs:!0,minArgs:2};export{v as a,$ as b};

package/dist/bin/chunks/chunk-2ZAK22BG.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a as y}from"./chunk-DHIKZU63.js";import{a as C}from"./chunk-NE4R2FVV.js";import{a as F,b as x}from"./chunk-MUFNRCMY.js";var H={name:"column",summary:"columnate lists",usage:"column [OPTION]... [FILE]...",description:"Format input into multiple columns. By default, fills rows first. Use -t to create a table based on whitespace-delimited input.",options:["-t           Create a table (determine columns from input)","-s SEP       Input field delimiter (default: whitespace)","-o SEP       Output field delimiter (default: two spaces)","-c WIDTH     Output width for fill mode (default: 80)","-n           Don't merge multiple adjacent delimiters"],examples:["ls | column              # Fill columns with ls output","cat data | column -t     # Format as table","column -t -s ',' file    # Format CSV as table","column -c 40 file        # Fill 40-char wide columns"]},I={table:{short:"t",long:"table",type:"boolean"},separator:{short:"s",type:"string"},outputSep:{short:"o",type:"string"},width:{short:"c",type:"number",default:80},noMerge:{short:"n",type:"boolean"}};function v(t,e,o){return e?o?t.split(e):t.split(e).filter(n=>n.length>0):o?t.split(/[ \t]/):t.split(/[ \t]+/).filter(n=>n.length>0)}function T(t){let e=[];for(let o of t)for(let n=0;n<o.length;n++){let l=o[n].length;(e[n]===void 0||l>e[n])&&(e[n]=l)}return e}function W(t,e){if(t.length===0)return"";let o=T(t),n=[];for(let l of t){let c=[];for(let s=0;s<l.length;s++)s===l.length-1?c.push(l[s]):c.push(l[s].padEnd(o[s]));n.push(c.join(e))}return n.join(`
-`)}function j(t,e,o){if(t.length===0)return"";let n=Math.max(...t.map(a=>a.length)),l=o.length,c=n+l,s=Math.max(1,Math.floor((e+l)/c)),p=Math.ceil(t.length/s),d=[];for(let a=0;a<p;a++){let i=[];for(let r=0;r<s;r++){let m=r*p+a;m<t.length&&(r===s-1||(r+1)*p+a>=t.length?i.push(t[m]):i.push(t[m].padEnd(n)))}d.push(i.join(o))}return d.join(`
-`)}var S={name:"column",execute:async(t,e)=>{if(x(t))return F(H);let o=C("column",t,I);if(!o.ok)return o.error;let{table:n,separator:l,outputSep:c,width:s,noMerge:p}=o.result.flags,d=o.result.positional,a=c??"  ",i;if(d.length===0)i=y(e.stdin)??"";else{let u=[];for(let f of d)if(f==="-")u.push(y(e.stdin)??"");else{let w=e.fs.resolvePath(e.cwd,f),b=await e.fs.readFile(w);if(b===null)return{exitCode:1,stdout:"",stderr:`column: ${f}: No such file or directory
-`};u.push(b)}i=u.join("")}if(i===""||i.trim()==="")return{exitCode:0,stdout:"",stderr:""};let r=i.split(`
-`);i.endsWith(`
-`)&&r[r.length-1]===""&&r.pop();let g=r.filter(u=>u.trim().length>0),h;if(n){let u=g.map(f=>v(f,l,p));h=W(u,a)}else{let u=[];for(let f of g){let w=v(f,l,p);u.push(...w)}h=j(u,s,a)}return h.length>0&&(h+=`
-`),{exitCode:0,stdout:h,stderr:""}}},L={name:"column",flags:[{flag:"-t",type:"boolean"},{flag:"-s",type:"value",valueHint:"delimiter"},{flag:"-o",type:"value",valueHint:"string"},{flag:"-c",type:"value",valueHint:"number"},{flag:"-n",type:"boolean"}],stdinType:"text",needsFiles:!0};export{S as a,L as b};

package/dist/bin/chunks/chunk-3WIMLJM7.js

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-import{a as y}from"./chunk-NE4R2FVV.js";import{a as $}from"./chunk-I4IRHQDW.js";import{a as u,b as h}from"./chunk-MUFNRCMY.js";var C={name:"mv",summary:"move (rename) files",usage:"mv [OPTION]... SOURCE... DEST",options:["-f, --force       do not prompt before overwriting","-n, --no-clobber  do not overwrite an existing file","-v, --verbose     explain what is being done","    --help        display this help and exit"]},P={force:{short:"f",long:"force",type:"boolean"},noClobber:{short:"n",long:"no-clobber",type:"boolean"},verbose:{short:"v",long:"verbose",type:"boolean"}},O={name:"mv",async execute(m,t){if(h(m))return u(C);let s=y("mv",m,P);if(!s.ok)return s.error;let p=s.result.flags.force,d=s.result.flags.noClobber,w=s.result.flags.verbose,i=s.result.positional;if(d&&(p=!1),i.length<2)return{stdout:"",stderr:`mv: missing destination file operand
-`,exitCode:1};let r=i.pop()??"",g=i,n=t.fs.resolvePath(t.cwd,r),v="",f="",b=0,a=!1;try{a=(await t.fs.stat(n)).isDirectory}catch{}if(g.length>1&&!a)return{stdout:"",stderr:`mv: target '${r}' is not a directory
-`,exitCode:1};for(let e of g)try{let c=t.fs.resolvePath(t.cwd,e),o=n;if(a){let l=e.split("/").pop()||e;o=n==="/"?`/${l}`:`${n}/${l}`}if(d)try{await t.fs.stat(o);continue}catch{}if(await t.fs.mv(c,o),w){let l=a?`${r}/${e.split("/").pop()||e}`:r;v+=`renamed '${e}' -> '${l}'
-`}}catch(c){let o=$(c);o.includes("ENOENT")||o.includes("no such file")?f+=`mv: cannot stat '${e}': No such file or directory
-`:f+=`mv: cannot move '${e}': ${o}
-`,b=1}return{stdout:v,stderr:f,exitCode:b}}},x={name:"mv",flags:[{flag:"-f",type:"boolean"},{flag:"-n",type:"boolean"},{flag:"-v",type:"boolean"}],needsArgs:!0,minArgs:2};export{O as a,x as b};

package/dist/bin/chunks/chunk-47WZ2U6M.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-var n=class extends Error{stdout;stderr;constructor(t,s="",e=""){super(t),this.stdout=s,this.stderr=e}prependOutput(t,s){this.stdout=t+this.stdout,this.stderr=s+this.stderr}},c=class extends n{levels;name="BreakError";constructor(t=1,s="",e=""){super("break",s,e),this.levels=t}},a=class extends n{levels;name="ContinueError";constructor(t=1,s="",e=""){super("continue",s,e),this.levels=t}},i=class extends n{exitCode;name="ReturnError";constructor(t=0,s="",e=""){super("return",s,e),this.exitCode=t}},u=class extends n{exitCode;name="ErrexitError";constructor(t,s="",e=""){super(`errexit: command exited with status ${t}`,s,e),this.exitCode=t}},x=class extends n{varName;name="NounsetError";constructor(t,s=""){super(`${t}: unbound variable`,s,`bash: ${t}: unbound variable
-`),this.varName=t}},d=class extends n{exitCode;name="ExitError";constructor(t,s="",e=""){super("exit",s,e),this.exitCode=t}},p=class extends n{name="ArithmeticError";fatal;constructor(t,s="",e="",o=!1){super(t,s,e),this.stderr=e||`bash: ${t}
-`,this.fatal=o}},l=class extends n{name="BadSubstitutionError";constructor(t,s="",e=""){super(t,s,e),this.stderr=e||`bash: ${t}: bad substitution
-`}},h=class extends n{name="GlobError";constructor(t,s="",e=""){super(`no match: ${t}`,s,e),this.stderr=e||`bash: no match: ${t}
-`}},m=class extends n{name="BraceExpansionError";constructor(t,s="",e=""){super(t,s,e),this.stderr=e||`bash: ${t}
-`}},b=class extends n{limitType;name="ExecutionLimitError";static EXIT_CODE=126;constructor(t,s,e="",o=""){super(t,e,o),this.limitType=s,this.stderr=o||`bash: ${t}
-`}},$=class extends n{name="ExecutionAbortedError";constructor(t="",s=""){super("execution aborted",t,s)}},f=class extends n{name="SubshellExitError";constructor(t="",s=""){super("subshell exit",t,s)}};function v(r){return r instanceof c||r instanceof a||r instanceof i}var C=class extends n{exitCode;name="PosixFatalError";constructor(t,s="",e=""){super("posix fatal error",s,e),this.exitCode=t}};export{c as a,a as b,i as c,u as d,x as e,d as f,p as g,l as h,h as i,m as j,b as k,$ as l,f as m,v as n,C as o};

package/dist/bin/chunks/chunk-4BNS566Q.js

@@ -1,4 +0,0 @@
-#!/usr/bin/env node
-import{createRequire} from"node:module";const require=createRequire(import.meta.url);
-function M(r,o,a){let e=new Date(o*1e3),t="",n=0;for(;n<r.length;)if(r[n]==="%"&&n+1<r.length){let u=r[n+1],i=S(e,u,a);i!==null?(t+=i,n+=2):(t+=r[n],n++)}else t+=r[n],n++;return t}function f(r,o){let a={year:"numeric",month:"2-digit",day:"2-digit",hour:"2-digit",minute:"2-digit",second:"2-digit",weekday:"short",hour12:!1,timeZone:o};try{let t=new Intl.DateTimeFormat("en-US",a).formatToParts(r),n=c=>t.find(m=>m.type===c)?.value??"",u=new Map([["Sun",0],["Mon",1],["Tue",2],["Wed",3],["Thu",4],["Fri",5],["Sat",6]]),i=n("weekday"),s=(c,m)=>{let y=Number.parseInt(c,10);return Number.isNaN(y)?m:y};return{year:s(n("year"),r.getFullYear()),month:s(n("month"),r.getMonth()+1),day:s(n("day"),r.getDate()),hour:s(n("hour"),r.getHours())%24,minute:s(n("minute"),r.getMinutes()),second:s(n("second"),r.getSeconds()),weekday:u.get(i)??r.getDay()}}catch{return{year:r.getFullYear(),month:r.getMonth()+1,day:r.getDate(),hour:r.getHours(),minute:r.getMinutes(),second:r.getSeconds(),weekday:r.getDay()}}}function S(r,o,a){let e=f(r,a),t=(s,c=2)=>String(s).padStart(c,"0"),n=g(e.year,e.month,e.day),u=d(e.year,e.month,e.day,e.weekday,0),i=d(e.year,e.month,e.day,e.weekday,1);switch(o){case"a":return["Sun","Mon","Tue","Wed","Thu","Fri","Sat"][e.weekday];case"A":return["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"][e.weekday];case"b":case"h":return["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"][e.month-1];case"B":return["January","February","March","April","May","June","July","August","September","October","November","December"][e.month-1];case"c":return`${["Sun","Mon","Tue","Wed","Thu","Fri","Sat"][e.weekday]} ${["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"][e.month-1]} ${String(e.day).padStart(2," ")} ${t(e.hour)}:${t(e.minute)}:${t(e.second)} ${e.year}`;case"C":return t(Math.floor(e.year/100));case"d":return t(e.day);case"D":return`${t(e.month)}/${t(e.day)}/${t(e.year%100)}`;case"e":return String(e.day).padStart(2," ");case"F":return`${e.year}-${t(e.month)}-${t(e.day)}`;case"g":return t(h(e.year,e.month,e.day)%100);case"G":return String(h(e.year,e.month,e.day));case"H":return t(e.hour);case"I":return t(e.hour%12||12);case"j":return String(n).padStart(3,"0");case"k":return String(e.hour).padStart(2," ");case"l":return String(e.hour%12||12).padStart(2," ");case"m":return t(e.month);case"M":return t(e.minute);case"n":return`
-`;case"N":return"000000000";case"p":return e.hour<12?"AM":"PM";case"P":return e.hour<12?"am":"pm";case"r":return`${t(e.hour%12||12)}:${t(e.minute)}:${t(e.second)} ${e.hour<12?"AM":"PM"}`;case"R":return`${t(e.hour)}:${t(e.minute)}`;case"s":return String(Math.floor(r.getTime()/1e3));case"S":return t(e.second);case"t":return"	";case"T":return`${t(e.hour)}:${t(e.minute)}:${t(e.second)}`;case"u":return String(e.weekday===0?7:e.weekday);case"U":return t(u);case"V":return t($(e.year,e.month,e.day));case"w":return String(e.weekday);case"W":return t(i);case"x":return`${t(e.month)}/${t(e.day)}/${t(e.year%100)}`;case"X":return`${t(e.hour)}:${t(e.minute)}:${t(e.second)}`;case"y":return t(e.year%100);case"Y":return String(e.year);case"z":return l(r,a);case"Z":return p(r,a);case"%":return"%";default:return null}}function l(r,o){if(!o){let u=-r.getTimezoneOffset(),i=u>=0?"+":"-",s=Math.floor(Math.abs(u)/60),c=Math.abs(u)%60;return`${i}${String(s).padStart(2,"0")}${String(c).padStart(2,"0")}`}try{let s=new Intl.DateTimeFormat("en-US",{timeZone:o,timeZoneName:"longOffset"}).formatToParts(r).find(c=>c.type==="timeZoneName");if(s){let c=s.value.match(/GMT([+-])(\d{2}):(\d{2})/);if(c)return`${c[1]}${c[2]}${c[3]}`;if(s.value==="GMT"||s.value==="UTC")return"+0000"}}catch{}let a=-r.getTimezoneOffset(),e=a>=0?"+":"-",t=Math.floor(Math.abs(a)/60),n=Math.abs(a)%60;return`${e}${String(t).padStart(2,"0")}${String(n).padStart(2,"0")}`}function p(r,o){try{return new Intl.DateTimeFormat("en-US",{timeZone:o,timeZoneName:"short"}).formatToParts(r).find(n=>n.type==="timeZoneName")?.value??"UTC"}catch{return"UTC"}}function g(r,o,a){let e=[31,28,31,30,31,30,31,31,30,31,30,31];(r%4===0&&r%100!==0||r%400===0)&&(e[1]=29);let n=a;for(let u=0;u<o-1;u++)n+=e[u];return n}function d(r,o,a,e,t){let n=g(r,o,a),u=new Date(r,0,1).getDay(),i=1+(7+t-u)%7,s=n-i;return s<0?0:Math.floor(s/7)+1}function $(r,o,a){let e=new Date(r,o-1,a,12,0,0);e.setDate(e.getDate()+3-(e.getDay()+6)%7);let t=new Date(e.getFullYear(),0,4);t.setDate(t.getDate()+3-(t.getDay()+6)%7);let n=e.getTime()-t.getTime();return 1+Math.round(n/(10080*60*1e3))}function h(r,o,a){let e=new Date(r,o-1,a,12,0,0);return e.setDate(e.getDate()+3-(e.getDay()+6)%7),e.getFullYear()}export{M as a};