typescript-virtual-container 1.1.0 → 1.1.1-c

package/src/VirtualShell/shellParser.ts

@@ -9,7 +9,16 @@ export function parseShellPipeline(rawInput: string): Pipeline {
 	}
 
 	const commands: PipelineCommand[] = [];
-	const pipeTokens = tokenizePipeline(trimmed);
+	const tokenized = tokenizePipeline(trimmed);
+	if (tokenized.error) {
+		return {
+			commands: [],
+			isValid: false,
+			error: tokenized.error,
+		};
+	}
+
+	const pipeTokens = tokenized.tokens;
 
 	for (const token of pipeTokens) {
 		const cmd = parseCommandWithRedirections(token);
@@ -29,7 +38,7 @@ export function parseShellPipeline(rawInput: string): Pipeline {
 }
 
 /** Tokenize input by pipes, respecting quoted strings */
-function tokenizePipeline(input: string): string[] {
+function tokenizePipeline(input: string): { tokens: string[]; error?: string } {
 	const tokens: string[] = [];
 	let current = "";
 	let inQuotes = false;
@@ -49,9 +58,13 @@ function tokenizePipeline(input: string): string[] {
 			current += ch;
 			i++;
 		} else if (ch === "|" && !inQuotes) {
-			if (current.trim()) {
-				tokens.push(current.trim());
+			if (!current.trim()) {
+				return {
+					tokens: [],
+					error: "Syntax error near unexpected token '|'",
+				};
 			}
+			tokens.push(current.trim());
 			current = "";
 			i++;
 		} else {
@@ -60,11 +73,23 @@ function tokenizePipeline(input: string): string[] {
 		}
 	}
 
-	if (current.trim()) {
-		tokens.push(current.trim());
+	if (inQuotes) {
+		return {
+			tokens: [],
+			error: "Syntax error: unterminated quote",
+		};
 	}
 
-	return tokens;
+	if (!current.trim()) {
+		return {
+			tokens: [],
+			error: "Syntax error near unexpected token '|'",
+		};
+	}
+
+	tokens.push(current.trim());
+
+	return { tokens };
 }
 
 interface ParseResult {

package/src/VirtualUserManager/index.ts

@@ -1,4 +1,5 @@
 import { randomBytes, randomUUID, scryptSync } from "node:crypto";
+import * as path from "node:path";
 import type VirtualFileSystem from "../VirtualFileSystem";
 
 /** Persisted virtual user credential record. */
@@ -33,9 +34,11 @@ export interface VirtualActiveSession {
 export class VirtualUserManager {
 	private readonly usersPath = "/virtual-env-js/.auth/htpasswd";
 	private readonly sudoersPath = "/virtual-env-js/.auth/sudoers";
+	private readonly quotasPath = "/virtual-env-js/.auth/quotas";
 	private readonly authDirPath = "/virtual-env-js/.auth";
 	private readonly users = new Map<string, VirtualUserRecord>();
 	private readonly sudoers = new Set<string>();
+	private readonly quotas = new Map<string, number>();
 	private readonly activeSessions = new Map<string, VirtualActiveSession>();
 	private nextTty = 0;
 
@@ -58,6 +61,7 @@ export class VirtualUserManager {
 	public async initialize(): Promise<void> {
 		this.loadFromVfs();
 		this.loadSudoersFromVfs();
+		this.loadQuotasFromVfs();
 
 		this.users.set("root", this.createRecord("root", this.defaultRootPassword));
 
@@ -66,6 +70,113 @@ export class VirtualUserManager {
 		await this.persist();
 	}
 
+	/**
+	 * Sets max allowed bytes under /home/<username>.
+	 *
+	 * @param username Target username.
+	 * @param maxBytes Quota ceiling in bytes.
+	 */
+	public async setQuotaBytes(
+		username: string,
+		maxBytes: number,
+	): Promise<void> {
+		this.validateUsername(username);
+		if (!this.users.has(username)) {
+			throw new Error(`quota: user '${username}' does not exist`);
+		}
+
+		if (!Number.isFinite(maxBytes) || maxBytes < 0) {
+			throw new Error("quota: maxBytes must be a non-negative number");
+		}
+
+		this.quotas.set(username, Math.floor(maxBytes));
+		await this.persist();
+	}
+
+	/**
+	 * Removes quota for a user.
+	 *
+	 * @param username Target username.
+	 */
+	public async clearQuota(username: string): Promise<void> {
+		this.validateUsername(username);
+		this.quotas.delete(username);
+		await this.persist();
+	}
+
+	/**
+	 * Gets configured quota in bytes for a user.
+	 *
+	 * @param username Target username.
+	 * @returns Quota in bytes, or null when unlimited.
+	 */
+	public getQuotaBytes(username: string): number | null {
+		return this.quotas.get(username) ?? null;
+	}
+
+	/**
+	 * Computes current usage under /home/<username>.
+	 *
+	 * @param username Target username.
+	 * @returns Current usage in bytes.
+	 */
+	public getUsageBytes(username: string): number {
+		const homePath = `/home/${username}`;
+		if (!this.vfs.exists(homePath)) {
+			return 0;
+		}
+
+		return this.vfs.getUsageBytes(homePath);
+	}
+
+	/**
+	 * Validates that writing file content would not exceed user quota.
+	 *
+	 * Quotas are enforced only for writes inside /home/<username>.
+	 *
+	 * @param username Authenticated user.
+	 * @param targetPath Target file path.
+	 * @param nextContent New file content.
+	 */
+	public assertWriteWithinQuota(
+		username: string,
+		targetPath: string,
+		nextContent: string | Buffer,
+	): void {
+		const quota = this.quotas.get(username);
+		if (quota === undefined) {
+			return;
+		}
+
+		const normalizedPath = normalizeVfsPath(targetPath);
+		const homePath = normalizeVfsPath(`/home/${username}`);
+		const inUserHome =
+			normalizedPath === homePath || normalizedPath.startsWith(`${homePath}/`);
+		if (!inUserHome) {
+			return;
+		}
+
+		const currentUsage = this.getUsageBytes(username);
+		let existingSize = 0;
+		if (this.vfs.exists(normalizedPath)) {
+			const existing = this.vfs.stat(normalizedPath);
+			if (existing.type === "file") {
+				existingSize = existing.size;
+			}
+		}
+
+		const incomingSize = Buffer.isBuffer(nextContent)
+			? nextContent.length
+			: Buffer.byteLength(nextContent, "utf8");
+		const projectedUsage = currentUsage - existingSize + incomingSize;
+
+		if (projectedUsage > quota) {
+			throw new Error(
+				`quota exceeded for '${username}': ${projectedUsage}/${quota} bytes`,
+			);
+		}
+	}
+
 	/**
 	 * Verifies plaintext password against stored record.
 	 *
@@ -291,6 +402,30 @@ export class VirtualUserManager {
 		}
 	}
 
+	private loadQuotasFromVfs(): void {
+		this.quotas.clear();
+
+		if (!this.vfs.exists(this.quotasPath)) {
+			return;
+		}
+
+		const raw = this.vfs.readFile(this.quotasPath);
+		for (const line of raw.split("\n")) {
+			const trimmed = line.trim();
+			if (trimmed.length === 0) {
+				continue;
+			}
+
+			const [username, value] = trimmed.split(":");
+			const bytes = Number.parseInt(value ?? "", 10);
+			if (!username || !Number.isFinite(bytes) || bytes < 0) {
+				continue;
+			}
+
+			this.quotas.set(username, bytes);
+		}
+	}
+
 	private async persist(): Promise<void> {
 		if (!this.vfs.exists(this.authDirPath)) {
 			this.vfs.mkdir(this.authDirPath, 0o700);
@@ -314,6 +449,15 @@ export class VirtualUserManager {
 			sudoersContent.length > 0 ? `${sudoersContent}\n` : "",
 			{ mode: 0o600 },
 		);
+		const quotasContent = Array.from(this.quotas.entries())
+			.sort(([left], [right]) => left.localeCompare(right))
+			.map(([username, maxBytes]) => `${username}:${maxBytes}`)
+			.join("\n");
+		this.vfs.writeFile(
+			this.quotasPath,
+			quotasContent.length > 0 ? `${quotasContent}\n` : "",
+			{ mode: 0o600 },
+		);
 		await this.vfs.flushMirror();
 	}
 
@@ -346,3 +490,8 @@ export class VirtualUserManager {
 		}
 	}
 }
+
+function normalizeVfsPath(targetPath: string): string {
+	const normalized = path.posix.normalize(targetPath);
+	return normalized.startsWith("/") ? normalized : `/${normalized}`;
+}

package/src/{VirtualShell/commands → commands}/adduser.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 
 export const adduserCommand: ShellModule = {
 	name: "adduser",

package/src/{VirtualShell/commands → commands}/cat.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { getArg } from "./command-helpers";
 import { assertPathAccess, resolveReadablePath } from "./helpers";
 

package/src/{VirtualShell/commands → commands}/cd.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { assertPathAccess, resolvePath } from "./helpers";
 
 export const cdCommand: ShellModule = {

package/src/{VirtualShell/commands → commands}/clear.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 
 export const clearCommand: ShellModule = {
 	name: "clear",

package/src/{VirtualShell/commands → commands}/curl.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { parseArgs } from "./command-helpers";
 import {
 	assertPathAccess,
@@ -39,7 +39,7 @@ export const curlCommand: ShellModule = {
 		if (outputPath) {
 			const target = resolvePath(cwd, outputPath);
 			assertPathAccess(authUser, target, "curl");
-			shell.vfs.writeFile(target, result.stdout);
+			shell.writeFileAsUser(authUser, target, result.stdout);
 			return {
 				stderr: result.stderr
 					? normalizeTerminalOutput(result.stderr)

package/src/{VirtualShell/commands → commands}/deluser.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 
 export const deluserCommand: ShellModule = {
 	name: "deluser",

package/src/{VirtualShell/commands → commands}/echo.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { parseArgs } from "./command-helpers";
 import { getAllEnvVars } from "./set";
 

package/src/{VirtualShell/commands → commands}/env.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { getAllEnvVars } from "./set";
 
 export const envCommand: ShellModule = {

package/src/{VirtualShell/commands → commands}/exit.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 
 export const exitCommand: ShellModule = {
 	name: "exit",

package/src/{VirtualShell/commands → commands}/export.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { getArg } from "./command-helpers";
 import { getEnvVar, setEnvVar } from "./set";
 

package/src/{VirtualShell/commands → commands}/grep.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { parseArgs } from "./command-helpers";
 import { assertPathAccess, resolvePath } from "./helpers";
 

package/src/{VirtualShell/commands → commands}/help.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 
 export function createHelpCommand(getNames: () => string[]): ShellModule {
 	return {

package/src/{VirtualShell/commands → commands}/helpers.ts

@@ -1,6 +1,6 @@
 import { spawn } from "node:child_process";
 import * as path from "node:path";
-import type VirtualFileSystem from "../../VirtualFileSystem";
+import type VirtualFileSystem from "../VirtualFileSystem";
 
 const PROTECTED_PREFIXES = ["/virtual-env-js/.auth"] as const;
 

package/src/{VirtualShell/commands → commands}/hostname.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 
 export const hostnameCommand: ShellModule = {
 	name: "hostname",

package/src/{VirtualShell/commands → commands}/htop.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 
 export const htopCommand: ShellModule = {
 	name: "htop",

package/src/{VirtualShell/commands → commands}/index.ts

@@ -1,10 +1,10 @@
-import type { VirtualShell } from "..";
+import type { VirtualShell } from "../VirtualShell";
 import type {
 	CommandContext,
 	CommandMode,
 	CommandResult,
 	ShellModule,
-} from "../../types/commands";
+} from "../types/commands";
 import { adduserCommand } from "./adduser";
 import { catCommand } from "./cat";
 import { cdCommand } from "./cd";
@@ -142,6 +142,9 @@ export function getCommandNames(): string[] {
 }
 
 export function resolveModule(name: string): ShellModule | undefined {
+	if (!cachedCommandNames) {
+		buildCache();
+	}
 	return commandRegistry.get(name.toLowerCase());
 }
 
@@ -213,8 +216,8 @@ export async function runCommand(
 	}
 
 	if (trimmed.includes("|") || trimmed.includes(">") || trimmed.includes("<")) {
-		const { parseShellPipeline } = await import("../shellParser");
-		const { executePipeline } = await import("../../SSHMimic/executor");
+		const { parseShellPipeline } = await import("../VirtualShell/shellParser");
+		const { executePipeline } = await import("../SSHMimic/executor");
 
 		const pipeline = parseShellPipeline(trimmed);
 		if (!pipeline.isValid) {

package/src/{VirtualShell/commands → commands}/ls.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { getArg, ifFlag } from "./command-helpers";
 import { assertPathAccess, joinListWithType, resolvePath } from "./helpers";
 

package/src/{VirtualShell/commands → commands}/mkdir.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { getArg } from "./command-helpers";
 import { assertPathAccess, resolvePath } from "./helpers";
 

package/src/{VirtualShell/commands → commands}/nano.ts

@@ -1,5 +1,5 @@
 import * as path from "node:path";
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { assertPathAccess, resolvePath } from "./helpers";
 
 export const nanoCommand: ShellModule = {

package/src/{VirtualShell/commands → commands}/neofetch.ts

@@ -1,5 +1,5 @@
-import { buildNeofetchOutput } from "../../../modules/neofetch";
-import type { ShellModule } from "../../types/commands";
+import { buildNeofetchOutput } from "../modules/neofetch";
+import type { ShellModule } from "../types/commands";
 import { ifFlag } from "./command-helpers";
 import { getAllEnvVars } from "./set";
 

package/src/{VirtualShell/commands → commands}/pwd.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 
 export const pwdCommand: ShellModule = {
 	name: "pwd",

package/src/{VirtualShell/commands → commands}/rm.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { getArg, ifFlag } from "./command-helpers";
 import { assertPathAccess, resolvePath } from "./helpers";
 

package/src/{VirtualShell/commands → commands}/set.ts

@@ -1,5 +1,5 @@
 /** biome-ignore-all lint/style/useNamingConvention: env variables */
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { getArg } from "./command-helpers";
 
 // Simple in-memory environment variables store

package/src/{VirtualShell/commands → commands}/sh.ts

@@ -1,4 +1,4 @@
-import type { CommandContext, ShellModule } from "../../types/commands";
+import type { CommandContext, ShellModule } from "../types/commands";
 import { getArg, getFlag } from "./command-helpers";
 import { runCommand } from "./index";
 

package/src/{VirtualShell/commands → commands}/su.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { getArg } from "./command-helpers";
 
 export const suCommand: ShellModule = {

package/src/{VirtualShell/commands → commands}/sudo.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { parseArgs } from "./command-helpers";
 import { runCommand } from "./index";
 

package/src/{VirtualShell/commands → commands}/touch.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { assertPathAccess, resolvePath } from "./helpers";
 
 export const touchCommand: ShellModule = {
@@ -13,7 +13,7 @@ export const touchCommand: ShellModule = {
 			const target = resolvePath(cwd, file);
 			assertPathAccess(authUser, target, "touch");
 			if (!shell.vfs.exists(target)) {
-				shell.vfs.writeFile(target, "");
+				shell.writeFileAsUser(authUser, target, "");
 			}
 		}
 		return { exitCode: 0 };

package/src/{VirtualShell/commands → commands}/tree.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { getArg } from "./command-helpers";
 import { assertPathAccess, resolvePath } from "./helpers";
 

package/src/{VirtualShell/commands → commands}/unset.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { setEnvVar } from "./set";
 
 export const unsetCommand: ShellModule = {

package/src/{VirtualShell/commands → commands}/wget.ts

@@ -2,7 +2,7 @@ import { spawn } from "node:child_process";
 import { mkdtemp, readFile, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 import { ifFlag, parseArgs } from "./command-helpers";
 import {
 	assertPathAccess,
@@ -131,7 +131,7 @@ export const wgetCommand: ShellModule = {
 			const content = await readFile(tempFile, "utf8");
 			const target = resolvePath(cwd, outputPath || stripUrlFilename(url));
 			assertPathAccess(authUser, target, "wget");
-			shell.vfs.writeFile(target, content);
+			shell.writeFileAsUser(authUser, target, content);
 
 			return {
 				stdout: `saved ${target}`,

package/src/{VirtualShell/commands → commands}/who.ts

@@ -1,5 +1,5 @@
-import { formatLoginDate } from "../../SSHMimic/loginFormat";
-import type { ShellModule } from "../../types/commands";
+import { formatLoginDate } from "../SSHMimic/loginFormat";
+import type { ShellModule } from "../types/commands";
 
 export const whoCommand: ShellModule = {
 	name: "who",

package/src/{VirtualShell/commands → commands}/whoami.ts

@@ -1,4 +1,4 @@
-import type { ShellModule } from "../../types/commands";
+import type { ShellModule } from "../types/commands";
 
 export const whoamiCommand: ShellModule = {
 	name: "whoami",

package/src/index.ts

@@ -1,4 +1,4 @@
-import { SshClient } from "./SSHMimic/client";
+import { SshClient } from "./SSHClient";
 import { SshMimic } from "./SSHMimic/index";
 import VirtualFileSystem from "./VirtualFileSystem";
 import { VirtualShell } from "./VirtualShell";
@@ -41,4 +41,4 @@ export {
 	getArg,
 	getFlag,
 	ifFlag,
-} from "./VirtualShell/commands/command-helpers";
+} from "./commands/command-helpers";