typescript-virtual-container 1.3.4 → 1.4.1

package/dist/utils/tokenize.d.ts

@@ -0,0 +1,20 @@
+/**
+ * tokenize.ts
+ *
+ * Shared shell tokenizer used by `shellParser.ts` and `runtime.ts`.
+ * Splits a shell input string into tokens respecting single and double
+ * quotes, and separates `>`, `>>`, `<` as standalone redirect tokens.
+ */
+/**
+ * Tokenize a shell command line respecting quoted strings and redirect
+ * operators.
+ *
+ * - Single-quoted content is preserved verbatim.
+ * - Double-quoted content is preserved (expansion happens later).
+ * - `>`, `>>`, and `<` are emitted as standalone tokens.
+ *
+ * @param input Raw shell command string.
+ * @returns Array of string tokens.
+ */
+export declare function tokenizeCommand(input: string): string[];
+//# sourceMappingURL=tokenize.d.ts.map

package/dist/utils/tokenize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenize.d.ts","sourceRoot":"","sources":["../../src/utils/tokenize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA0DvD"}

package/dist/utils/tokenize.js

@@ -0,0 +1,74 @@
+/**
+ * tokenize.ts
+ *
+ * Shared shell tokenizer used by `shellParser.ts` and `runtime.ts`.
+ * Splits a shell input string into tokens respecting single and double
+ * quotes, and separates `>`, `>>`, `<` as standalone redirect tokens.
+ */
+/**
+ * Tokenize a shell command line respecting quoted strings and redirect
+ * operators.
+ *
+ * - Single-quoted content is preserved verbatim.
+ * - Double-quoted content is preserved (expansion happens later).
+ * - `>`, `>>`, and `<` are emitted as standalone tokens.
+ *
+ * @param input Raw shell command string.
+ * @returns Array of string tokens.
+ */
+export function tokenizeCommand(input) {
+    const tokens = [];
+    let current = "";
+    let inQ = false;
+    let qChar = "";
+    let i = 0;
+    while (i < input.length) {
+        const ch = input[i];
+        const next = input[i + 1];
+        if ((ch === '"' || ch === "'") && !inQ) {
+            inQ = true;
+            qChar = ch;
+            i++;
+            continue;
+        }
+        if (inQ && ch === qChar) {
+            inQ = false;
+            qChar = "";
+            i++;
+            continue;
+        }
+        if (inQ) {
+            current += ch;
+            i++;
+            continue;
+        }
+        if (ch === " ") {
+            if (current) {
+                tokens.push(current);
+                current = "";
+            }
+            i++;
+            continue;
+        }
+        if ((ch === ">" || ch === "<") && !inQ) {
+            if (current) {
+                tokens.push(current);
+                current = "";
+            }
+            if (ch === ">" && next === ">") {
+                tokens.push(">>");
+                i += 2;
+            }
+            else {
+                tokens.push(ch);
+                i++;
+            }
+            continue;
+        }
+        current += ch;
+        i++;
+    }
+    if (current)
+        tokens.push(current);
+    return tokens;
+}

package/examples/web.min.js

@@ -1,4 +1,4 @@
-var P=Object.defineProperty;var A=(o,e,t)=>e in o?P(o,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):o[e]=t;var u=(o,e,t)=>A(o,typeof e!="symbol"?e+"":e,t);function v(o){let e=o.trim();if(!e)return{statements:[],isValid:!0};try{return{statements:z(e),isValid:!0}}catch(t){return{statements:[],isValid:!1,error:t.message}}}function z(o){let e=O(o),t=[];for(let r of e){let s={pipeline:{commands:R(r.text.trim()),isValid:!0}};r.op&&(s.op=r.op),t.push(s)}return t}function O(o){let e=[],t="",r=0,n=!1,s="",i=0,a=c=>{t.trim()&&e.push({text:t,op:c}),t=""};for(;i<o.length;){let c=o[i],d=o.slice(i,i+2);if((c==='"'||c==="'")&&!n){n=!0,s=c,t+=c,i++;continue}if(n&&c===s){n=!1,t+=c,i++;continue}if(n){t+=c,i++;continue}if(c==="("){r++,t+=c,i++;continue}if(c===")"){r--,t+=c,i++;continue}if(r>0){t+=c,i++;continue}if(d==="&&"){a("&&"),i+=2;continue}if(d==="||"){a("||"),i+=2;continue}if(c===";"){a(";"),i++;continue}t+=c,i++}return a(),e}function R(o){return F(o).map(L)}function F(o){let e=[],t="",r=!1,n="";for(let i=0;i<o.length;i++){let a=o[i];if((a==='"'||a==="'")&&!r){r=!0,n=a,t+=a;continue}if(r&&a===n){r=!1,t+=a;continue}if(r){t+=a;continue}if(a==="|"&&o[i+1]!=="|"){if(!t.trim())throw new Error("Syntax error near unexpected token '|'");e.push(t.trim()),t=""}else t+=a}let s=t.trim();if(!s&&e.length>0)throw new Error("Syntax error near unexpected token '|'");return s&&e.push(s),e}function L(o){let e=_(o);if(e.length===0)return{name:"",args:[]};let t=[],r,n,s=!1,i=0;for(;i<e.length;){let c=e[i];if(c==="<"){if(i++,i>=e.length)throw new Error("Syntax error: expected filename after <");r=e[i],i++}else if(c===">>"){if(i++,i>=e.length)throw new Error("Syntax error: expected filename after >>");n=e[i],s=!0,i++}else if(c===">"){if(i++,i>=e.length)throw new Error("Syntax error: expected filename after >");n=e[i],s=!1,i++}else t.push(c),i++}return{name:(t[0]??"").toLowerCase(),args:t.slice(1),inputFile:r,outputFile:n,appendOutput:s}}function _(o){let e=[],t="",r=!1,n="",s=0;for(;s<o.length;){let i=o[s],a=o[s+1];if((i==='"'||i==="'")&&!r){r=!0,n=i,s++;continue}if(r&&i===n){r=!1,n="",s++;continue}if(r){t+=i,s++;continue}if(i===" "){t&&(e.push(t),t=""),s++;continue}if((i===">"||i==="<")&&!r){t&&(e.push(t),t=""),i===">"&&a===">"?(e.push(">>"),s+=2):(e.push(i),s++);continue}t+=i,s++}return t&&e.push(t),e}function I(o,e){let t=o.replace(/\b([A-Za-z_][A-Za-z0-9_]*)\b/g,(r,n)=>{let s=e[n];return s!==void 0&&s!==""?s:"0"});if(!/^[\d\s+\-*/%()^!&|<>=,. ]+$/.test(t))return NaN;try{let r=Function(`"use strict"; return (${t.replace(/\*\*/g,"**")});`)();return typeof r=="number"?Math.trunc(r):NaN}catch{return NaN}}function k(o,e){let t=[],r=0;for(;r<o.length;){let n=o.indexOf("'",r);if(n===-1){t.push(e(o.slice(r)));break}t.push(e(o.slice(r,n)));let s=o.indexOf("'",n+1);if(s===-1){t.push(o.slice(n));break}t.push(o.slice(n,s+1)),r=s+1}return t.join("")}function p(o,e,t=0,r){let n=r??e.HOME??"/home/user";return k(o,s=>{let i=s;return i=i.replace(/(^|[\s:])~(\/|$)/g,(a,c,d)=>`${c}${n}${d}`),i=i.replace(/\$\?/g,String(t)),i=i.replace(/\$\$/g,"1"),i=i.replace(/\$#/g,"0"),i=i.replace(/\$\(\(([^)]+(?:\([^)]*\)[^)]*)*)\)\)/g,(a,c)=>{let d=I(c,e);return Number.isNaN(d)?"0":String(d)}),i=i.replace(/\$\{#([A-Za-z_][A-Za-z0-9_]*)\}/g,(a,c)=>String((e[c]??"").length)),i=i.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*):-([^}]*)\}/g,(a,c,d)=>e[c]!==void 0&&e[c]!==""?e[c]:d),i=i.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*):=([^}]*)\}/g,(a,c,d)=>((e[c]===void 0||e[c]==="")&&(e[c]=d),e[c])),i=i.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*):\+([^}]*)\}/g,(a,c,d)=>e[c]!==void 0&&e[c]!==""?d:""),i=i.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g,(a,c)=>e[c]??""),i=i.replace(/\$([A-Za-z_][A-Za-z0-9_]*)/g,(a,c)=>e[c]??""),i})}async function w(o,e,t,r){if(o.includes("$(")){let n="",s=!1,i=0;for(;i<o.length;){let a=o[i];if(a==="'"&&!s){s=!0,n+=a,i++;continue}if(a==="'"&&s){s=!1,n+=a,i++;continue}if(!s&&a==="$"&&o[i+1]==="("){if(o[i+2]==="("){n+=a,i++;continue}let c=0,d=i+1;for(;d<o.length;){if(o[d]==="(")c++;else if(o[d]===")"&&(c--,c===0))break;d++}let g=o.slice(i+2,d).trim(),D=(await r(g)).replace(/\n$/,"");n+=D,i=d+1;continue}n+=a,i++}o=n}return p(o,e,t)}var M=new TextEncoder,B=new TextDecoder;function T(o){let e="";for(let t of o)e+=String.fromCharCode(t);return btoa(e)}function C(o){let e=atob(o),t=new Uint8Array(e.length);for(let r=0;r<e.length;r+=1)t[r]=e.charCodeAt(r);return t}function l(o,e="/"){let r=(o.startsWith("/")?o:`${e}/${o}`).split("/"),n=[];for(let s of r)if(!(!s||s===".")){if(s===".."){n.pop();continue}n.push(s)}return`/${n.join("/")}`||"/"}function h(o){let e=l(o);if(e==="/")return"/";let t=e.split("/").filter(Boolean);return t.pop(),t.length>0?`/${t.join("/")}`:"/"}function f(o){let e=l(o);return e==="/"?"/":e.split("/").filter(Boolean).at(-1)??"/"}function E(o){return o.type==="file"?{...o,contentBase64:o.contentBase64}:{...o,children:o.children.map(e=>E(e))}}function N(o,e){let t=new Date().toISOString();return{type:"directory",name:o,mode:e,createdAt:t,updatedAt:t,children:[]}}function j(o,e,t){let r=new Date().toISOString();return{type:"file",name:o,mode:t,createdAt:r,updatedAt:r,contentBase64:T(e)}}function b(o,e){return o.children.find(t=>t.name===e)}function m(o,e){let t=o.children.findIndex(r=>r.name===e.name);if(t===-1){o.children.push(e);return}o.children[t]=e}function W(o,e){o.children=o.children.filter(t=>t.name!==e)}function S(o){return l(o).split("/").filter(Boolean)}var V=globalThis;function $(o){return new Promise((e,t)=>{o.addEventListener("success",()=>e(o.result)),o.addEventListener("error",()=>t(o.error))})}var y=class{constructor(e={}){u(this,"databaseName");u(this,"storeName");u(this,"key");u(this,"root");this.databaseName=e.databaseName??"typescript-virtual-container-web",this.storeName=e.storeName??"snapshots",this.key=e.key??"current",this.root=N("",493)}async openDatabase(){return new Promise((e,t)=>{let r=V.indexedDB;if(!r){t(new Error("IndexedDB is not available in this environment"));return}let n=r.open(this.databaseName,1);n.addEventListener("upgradeneeded",()=>{let s=n.result;s.objectStoreNames.contains(this.storeName)||s.createObjectStore(this.storeName)}),n.addEventListener("success",()=>e(n.result)),n.addEventListener("error",()=>t(n.error))})}async readSnapshot(){let e=await this.openDatabase();try{let n=e.transaction(this.storeName,"readonly").objectStore(this.storeName).get(this.key),s=await $(n);return s?JSON.parse(s):null}finally{e.close()}}async writeSnapshot(e){let t=await this.openDatabase();try{let r=t.transaction(this.storeName,"readwrite"),n=r.objectStore(this.storeName);await $(n.put(JSON.stringify(e),this.key)),await new Promise((s,i)=>{r.addEventListener("complete",()=>s()),r.addEventListener("error",()=>i(r.error)),r.addEventListener("abort",()=>i(r.error))})}finally{t.close()}}serializeNode(e){return e.type==="file"?{...e}:{...e,children:e.children.map(t=>this.serializeNode(t))}}deserializeNode(e){return e.type==="file"?{...e}:{...e,children:e.children.map(t=>this.deserializeNode(t))}}getNode(e){let t=l(e);if(t==="/")return this.root;let r=S(t),n=this.root;for(let s of r){if(n.type!=="directory")throw new Error(`Not a directory: ${t}`);let i=b(n,s);if(!i)throw new Error(`No such file or directory: ${t}`);n=i}return n}ensureDirectory(e,t){let r=l(e);if(r==="/")return this.root;let n=S(r),s=this.root;for(let i of n){let a=b(s,i);if(!a){let c=N(i,t);m(s,c),s=c;continue}if(a.type!=="directory")throw new Error(`Cannot create directory '${r}': path is a file.`);s=a}return s}removeNode(e,t){let r=l(e);if(r==="/")throw new Error("Cannot remove root directory");let n=this.getNode(h(r));if(n.type!=="directory")throw new Error(`Not a directory: ${h(r)}`);let s=f(r),i=b(n,s);if(!i)throw new Error(`No such file or directory: ${r}`);if(i.type==="directory"&&i.children.length>0&&!t)throw new Error(`Cannot remove '${r}': directory not empty.`);W(n,s)}copyNode(e){return e.type==="file"?{...e,contentBase64:e.contentBase64}:{...e,children:e.children.map(t=>this.copyNode(t))}}async restoreMirror(){let e=await this.readSnapshot();e&&(this.root=this.deserializeNode(e.root))}async flushMirror(){await this.writeSnapshot({root:this.serializeNode(this.root)})}exists(e){try{return this.getNode(e),!0}catch{return!1}}list(e){let t=this.getNode(e);if(t.type!=="directory")throw new Error(`Not a directory: ${e}`);return t.children.map(r=>r.name).sort((r,n)=>r.localeCompare(n))}stat(e){let t=this.getNode(e);return t.type==="file"?{type:"file",mode:t.mode,size:C(t.contentBase64).byteLength,name:t.name}:{type:"directory",mode:t.mode,size:0,name:t.name}}readFile(e){let t=this.getNode(e);if(t.type!=="file")throw new Error(`Is a directory: ${e}`);return B.decode(C(t.contentBase64))}writeFile(e,t,r=420){let n=l(e),s=this.ensureDirectory(h(n),493),i=typeof t=="string"?M.encode(t):t,a=j(f(n),i,r);m(s,a)}mkdir(e,t=493){this.ensureDirectory(e,t)}touch(e){this.exists(e)||this.writeFile(e,"")}move(e,t){let r=this.getNode(e),n=this.getNode(h(e)),s=this.ensureDirectory(h(t),493);if(n.type!=="directory")throw new Error(`Not a directory: ${h(e)}`);W(n,f(e));let i=E(r);i.name=f(t),m(s,i)}copy(e,t){let r=this.getNode(e),n=this.ensureDirectory(h(t),493),s=this.copyNode(r);s.name=f(t),m(n,s)}remove(e,t={}){this.removeNode(e,t.recursive??!1)}exportSnapshot(){return{root:this.serializeNode(this.root)}}importSnapshot(e){this.root=this.deserializeNode(e.root)}},x=class{constructor(e,t={}){u(this,"hostname");u(this,"vfs");u(this,"env");u(this,"cwd");u(this,"commands",new Map);u(this,"initialized",!1);this.hostname=e,this.cwd=t.cwd??"/home/root",this.env={vars:{PATH:"/usr/bin:/bin",HOME:"/home/root",USER:"root",LOGNAME:"root",SHELL:"/bin/sh",HOSTNAME:e,PWD:this.cwd},lastExitCode:0},this.vfs=new y(t.vfs),this.registerBuiltins()}register(e){this.commands.set(e.name.toLowerCase(),e);for(let t of e.aliases??[])this.commands.set(t.toLowerCase(),e)}registerBuiltins(){this.register({name:"help",description:"List available web commands",params:[],run:()=>({stdout:`${this.listCommands().join(`
+var k=Object.defineProperty;var O=(o,e,t)=>e in o?k(o,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):o[e]=t;var u=(o,e,t)=>O(o,typeof e!="symbol"?e+"":e,t);function x(o){let e=[],t="",r=!1,n="",s=0;for(;s<o.length;){let i=o[s],a=o[s+1];if((i==='"'||i==="'")&&!r){r=!0,n=i,s++;continue}if(r&&i===n){r=!1,n="",s++;continue}if(r){t+=i,s++;continue}if(i===" "){t&&(e.push(t),t=""),s++;continue}if((i===">"||i==="<")&&!r){t&&(e.push(t),t=""),i===">"&&a===">"?(e.push(">>"),s+=2):(e.push(i),s++);continue}t+=i,s++}return t&&e.push(t),e}function w(o){let e=o.trim();if(!e)return{statements:[],isValid:!0};try{return{statements:z(e),isValid:!0}}catch(t){return{statements:[],isValid:!1,error:t.message}}}function z(o){let e=A(o),t=[];for(let r of e){let s={pipeline:{commands:R(r.text.trim()),isValid:!0}};r.op&&(s.op=r.op),t.push(s)}return t}function A(o){let e=[],t="",r=0,n=!1,s="",i=0,a=c=>{t.trim()&&e.push({text:t,op:c}),t=""};for(;i<o.length;){let c=o[i],d=o.slice(i,i+2);if((c==='"'||c==="'")&&!n){n=!0,s=c,t+=c,i++;continue}if(n&&c===s){n=!1,t+=c,i++;continue}if(n){t+=c,i++;continue}if(c==="("){r++,t+=c,i++;continue}if(c===")"){r--,t+=c,i++;continue}if(r>0){t+=c,i++;continue}if(d==="&&"){a("&&"),i+=2;continue}if(d==="||"){a("||"),i+=2;continue}if(c===";"){a(";"),i++;continue}t+=c,i++}return a(),e}function R(o){return F(o).map(L)}function F(o){let e=[],t="",r=!1,n="";for(let i=0;i<o.length;i++){let a=o[i];if((a==='"'||a==="'")&&!r){r=!0,n=a,t+=a;continue}if(r&&a===n){r=!1,t+=a;continue}if(r){t+=a;continue}if(a==="|"&&o[i+1]!=="|"){if(!t.trim())throw new Error("Syntax error near unexpected token '|'");e.push(t.trim()),t=""}else t+=a}let s=t.trim();if(!s&&e.length>0)throw new Error("Syntax error near unexpected token '|'");return s&&e.push(s),e}function L(o){let e=x(o);if(e.length===0)return{name:"",args:[]};let t=[],r,n,s=!1,i=0;for(;i<e.length;){let c=e[i];if(c==="<"){if(i++,i>=e.length)throw new Error("Syntax error: expected filename after <");r=e[i],i++}else if(c===">>"){if(i++,i>=e.length)throw new Error("Syntax error: expected filename after >>");n=e[i],s=!0,i++}else if(c===">"){if(i++,i>=e.length)throw new Error("Syntax error: expected filename after >");n=e[i],s=!1,i++}else t.push(c),i++}return{name:(t[0]??"").toLowerCase(),args:t.slice(1),inputFile:r,outputFile:n,appendOutput:s}}function I(o,e){let t=o.replace(/\b([A-Za-z_][A-Za-z0-9_]*)\b/g,(r,n)=>{let s=e[n];return s!==void 0&&s!==""?s:"0"});if(!/^[\d\s+\-*/%()^!&|<>=,. ]+$/.test(t))return NaN;try{let r=Function(`"use strict"; return (${t.replace(/\*\*/g,"**")});`)();return typeof r=="number"?Math.trunc(r):NaN}catch{return NaN}}function M(o,e){let t=[],r=0;for(;r<o.length;){let n=o.indexOf("'",r);if(n===-1){t.push(e(o.slice(r)));break}t.push(e(o.slice(r,n)));let s=o.indexOf("'",n+1);if(s===-1){t.push(o.slice(n));break}t.push(o.slice(n,s+1)),r=s+1}return t.join("")}function p(o,e,t=0,r){let n=r??e.HOME??"/home/user";return M(o,s=>{let i=s;return i=i.replace(/(^|[\s:])~(\/|$)/g,(a,c,d)=>`${c}${n}${d}`),i=i.replace(/\$\?/g,String(t)),i=i.replace(/\$\$/g,"1"),i=i.replace(/\$#/g,"0"),i=i.replace(/\$\(\(([^)]+(?:\([^)]*\)[^)]*)*)\)\)/g,(a,c)=>{let d=I(c,e);return Number.isNaN(d)?"0":String(d)}),i=i.replace(/\$\{#([A-Za-z_][A-Za-z0-9_]*)\}/g,(a,c)=>String((e[c]??"").length)),i=i.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*):-([^}]*)\}/g,(a,c,d)=>e[c]!==void 0&&e[c]!==""?e[c]:d),i=i.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*):=([^}]*)\}/g,(a,c,d)=>((e[c]===void 0||e[c]==="")&&(e[c]=d),e[c])),i=i.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*):\+([^}]*)\}/g,(a,c,d)=>e[c]!==void 0&&e[c]!==""?d:""),i=i.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g,(a,c)=>e[c]??""),i=i.replace(/\$([A-Za-z_][A-Za-z0-9_]*)/g,(a,c)=>e[c]??""),i})}async function C(o,e,t,r){if(o.includes("$(")){let n="",s=!1,i=0;for(;i<o.length;){let a=o[i];if(a==="'"&&!s){s=!0,n+=a,i++;continue}if(a==="'"&&s){s=!1,n+=a,i++;continue}if(!s&&a==="$"&&o[i+1]==="("){if(o[i+2]==="("){n+=a,i++;continue}let c=0,d=i+1;for(;d<o.length;){if(o[d]==="(")c++;else if(o[d]===")"&&(c--,c===0))break;d++}let g=o.slice(i+2,d).trim(),P=(await r(g)).replace(/\n$/,"");n+=P,i=d+1;continue}n+=a,i++}o=n}return p(o,e,t)}var _=new TextEncoder,B=new TextDecoder;function j(o){let e="";for(let t of o)e+=String.fromCharCode(t);return btoa(e)}function N(o){let e=atob(o),t=new Uint8Array(e.length);for(let r=0;r<e.length;r+=1)t[r]=e.charCodeAt(r);return t}function l(o,e="/"){let r=(o.startsWith("/")?o:`${e}/${o}`).split("/"),n=[];for(let s of r)if(!(!s||s===".")){if(s===".."){n.pop();continue}n.push(s)}return`/${n.join("/")}`||"/"}function h(o){let e=l(o);if(e==="/")return"/";let t=e.split("/").filter(Boolean);return t.pop(),t.length>0?`/${t.join("/")}`:"/"}function f(o){let e=l(o);return e==="/"?"/":e.split("/").filter(Boolean).at(-1)??"/"}function D(o){return o.type==="file"?{...o,contentBase64:o.contentBase64}:{...o,children:o.children.map(e=>D(e))}}function W(o,e){let t=new Date().toISOString();return{type:"directory",name:o,mode:e,createdAt:t,updatedAt:t,children:[]}}function T(o,e,t){let r=new Date().toISOString();return{type:"file",name:o,mode:t,createdAt:r,updatedAt:r,contentBase64:j(e)}}function b(o,e){return o.children.find(t=>t.name===e)}function m(o,e){let t=o.children.findIndex(r=>r.name===e.name);if(t===-1){o.children.push(e);return}o.children[t]=e}function S(o,e){o.children=o.children.filter(t=>t.name!==e)}function $(o){return l(o).split("/").filter(Boolean)}var V=globalThis;function E(o){return new Promise((e,t)=>{o.addEventListener("success",()=>e(o.result)),o.addEventListener("error",()=>t(o.error))})}var y=class{constructor(e={}){u(this,"databaseName");u(this,"storeName");u(this,"key");u(this,"root");this.databaseName=e.databaseName??"typescript-virtual-container-web",this.storeName=e.storeName??"snapshots",this.key=e.key??"current",this.root=W("",493)}async openDatabase(){return new Promise((e,t)=>{let r=V.indexedDB;if(!r){t(new Error("IndexedDB is not available in this environment"));return}let n=r.open(this.databaseName,1);n.addEventListener("upgradeneeded",()=>{let s=n.result;s.objectStoreNames.contains(this.storeName)||s.createObjectStore(this.storeName)}),n.addEventListener("success",()=>e(n.result)),n.addEventListener("error",()=>t(n.error))})}async readSnapshot(){let e=await this.openDatabase();try{let n=e.transaction(this.storeName,"readonly").objectStore(this.storeName).get(this.key),s=await E(n);return s?JSON.parse(s):null}finally{e.close()}}async writeSnapshot(e){let t=await this.openDatabase();try{let r=t.transaction(this.storeName,"readwrite"),n=r.objectStore(this.storeName);await E(n.put(JSON.stringify(e),this.key)),await new Promise((s,i)=>{r.addEventListener("complete",()=>s()),r.addEventListener("error",()=>i(r.error)),r.addEventListener("abort",()=>i(r.error))})}finally{t.close()}}serializeNode(e){return e.type==="file"?{...e}:{...e,children:e.children.map(t=>this.serializeNode(t))}}deserializeNode(e){return e.type==="file"?{...e}:{...e,children:e.children.map(t=>this.deserializeNode(t))}}getNode(e){let t=l(e);if(t==="/")return this.root;let r=$(t),n=this.root;for(let s of r){if(n.type!=="directory")throw new Error(`Not a directory: ${t}`);let i=b(n,s);if(!i)throw new Error(`No such file or directory: ${t}`);n=i}return n}ensureDirectory(e,t){let r=l(e);if(r==="/")return this.root;let n=$(r),s=this.root;for(let i of n){let a=b(s,i);if(!a){let c=W(i,t);m(s,c),s=c;continue}if(a.type!=="directory")throw new Error(`Cannot create directory '${r}': path is a file.`);s=a}return s}removeNode(e,t){let r=l(e);if(r==="/")throw new Error("Cannot remove root directory");let n=this.getNode(h(r));if(n.type!=="directory")throw new Error(`Not a directory: ${h(r)}`);let s=f(r),i=b(n,s);if(!i)throw new Error(`No such file or directory: ${r}`);if(i.type==="directory"&&i.children.length>0&&!t)throw new Error(`Cannot remove '${r}': directory not empty.`);S(n,s)}copyNode(e){return e.type==="file"?{...e,contentBase64:e.contentBase64}:{...e,children:e.children.map(t=>this.copyNode(t))}}async restoreMirror(){let e=await this.readSnapshot();e&&(this.root=this.deserializeNode(e.root))}async flushMirror(){await this.writeSnapshot({root:this.serializeNode(this.root)})}exists(e){try{return this.getNode(e),!0}catch{return!1}}list(e){let t=this.getNode(e);if(t.type!=="directory")throw new Error(`Not a directory: ${e}`);return t.children.map(r=>r.name).sort((r,n)=>r.localeCompare(n))}stat(e){let t=this.getNode(e);return t.type==="file"?{type:"file",mode:t.mode,size:N(t.contentBase64).byteLength,name:t.name}:{type:"directory",mode:t.mode,size:0,name:t.name}}readFile(e){let t=this.getNode(e);if(t.type!=="file")throw new Error(`Is a directory: ${e}`);return B.decode(N(t.contentBase64))}writeFile(e,t,r=420){let n=l(e),s=this.ensureDirectory(h(n),493),i=typeof t=="string"?_.encode(t):t,a=T(f(n),i,r);m(s,a)}mkdir(e,t=493){this.ensureDirectory(e,t)}touch(e){this.exists(e)||this.writeFile(e,"")}move(e,t){let r=this.getNode(e),n=this.getNode(h(e)),s=this.ensureDirectory(h(t),493);if(n.type!=="directory")throw new Error(`Not a directory: ${h(e)}`);S(n,f(e));let i=D(r);i.name=f(t),m(s,i)}copy(e,t){let r=this.getNode(e),n=this.ensureDirectory(h(t),493),s=this.copyNode(r);s.name=f(t),m(n,s)}remove(e,t={}){this.removeNode(e,t.recursive??!1)}exportSnapshot(){return{root:this.serializeNode(this.root)}}importSnapshot(e){this.root=this.deserializeNode(e.root)}},v=class{constructor(e,t={}){u(this,"hostname");u(this,"vfs");u(this,"env");u(this,"cwd");u(this,"commands",new Map);u(this,"initialized",!1);this.hostname=e,this.cwd=t.cwd??"/home/root",this.env={vars:{PATH:"/usr/bin:/bin",HOME:"/home/root",USER:"root",LOGNAME:"root",SHELL:"/bin/sh",HOSTNAME:e,PWD:this.cwd},lastExitCode:0},this.vfs=new y(t.vfs),this.registerBuiltins()}register(e){this.commands.set(e.name.toLowerCase(),e);for(let t of e.aliases??[])this.commands.set(t.toLowerCase(),e)}registerBuiltins(){this.register({name:"help",description:"List available web commands",params:[],run:()=>({stdout:`${this.listCommands().join(`
 `)}
 `,exitCode:0})}),this.register({name:"pwd",description:"Print current directory",params:[],run:()=>({stdout:`${this.cwd}
 `,exitCode:0})}),this.register({name:"cd",description:"Change current directory",params:["[dir]"],run:({args:e})=>{let t=e[0]?l(e[0],this.cwd):"/home/root";return!this.vfs.exists(t)||this.vfs.stat(t).type!=="directory"?{stderr:`cd: no such file or directory: ${t}`,exitCode:1}:(this.cwd=t,this.env.vars.PWD=t,{exitCode:0,nextCwd:t})}}),this.register({name:"echo",description:"Display text",params:["[-n] [-e] [text...]"],run:({args:e,stdin:t})=>{let r=e.includes("-n"),n=e.filter(a=>a!=="-n"&&a!=="-e"&&a!=="-E"),s=n.length>0?n.join(" "):t??"",i=p(s,this.env.vars,this.env.lastExitCode,this.env.vars.HOME);return{stdout:r?i:`${i}
@@ -9,5 +9,5 @@ var P=Object.defineProperty;var A=(o,e,t)=>e in o?P(o,e,{enumerable:!0,configura
 `)),this.vfs.exists("/tmp")||this.vfs.mkdir("/tmp"),this.vfs.exists("/etc")||this.vfs.mkdir("/etc"),this.vfs.exists("/etc/hostname")||this.vfs.writeFile("/etc/hostname",`${this.hostname}
 `),this.vfs.exists("/etc/hosts")||this.vfs.writeFile("/etc/hosts",`127.0.0.1 localhost
 ::1 localhost
-`),this.initialized=!0)}getCurrentWorkingDirectory(){return this.cwd}async executeCommandLine(e,t=!0){await this.ensureInitialized();let r=e.trim();if(!r)return{exitCode:0};let n=await w(r,this.env.vars,this.env.lastExitCode,a=>this.executeCommandLine(a,!1).then(c=>c.stdout??"")),s=v(n),i=await this.executeStatements(s.statements);return this.env.lastExitCode=i.exitCode??0,t&&await this.vfs.flushMirror(),i}async executeStatements(e){let t={exitCode:0},r=0;for(;r<e.length;){let n=e[r];if(t=await this.executePipeline(n.pipeline.commands),this.env.lastExitCode=t.exitCode??0,t.closeSession||t.switchUser)return t;let s=n.op;if(!(!s||s===";")){if(s==="&&"){if((t.exitCode??0)!==0)for(;r<e.length&&e[r]?.op==="&&";)r+=1}else if(s==="||"&&(t.exitCode??0)===0)for(;r<e.length&&e[r]?.op==="||";)r+=1}r+=1}return t}async executePipeline(e){return e.length===0?{exitCode:0}:e.length===1?this.executeSingleCommandWithRedirections(e[0]):this.executePipelineChain(e)}async executeSingleCommandWithRedirections(e){let t;if(e.inputFile){let n=l(e.inputFile,this.cwd);try{t=this.vfs.readFile(n)}catch{return{stderr:`${e.inputFile}: No such file or directory`,exitCode:1}}}let r=await this.executeCommand(e.name,e.args,t);if(e.outputFile){let n=l(e.outputFile,this.cwd),s=r.stdout??"";if(e.appendOutput&&this.vfs.exists(n)){let i=this.vfs.readFile(n);this.vfs.writeFile(n,`${i}${s}`)}else this.vfs.writeFile(n,s);return{...r,stdout:""}}return r}async executePipelineChain(e){let t="",r=0;for(let n=0;n<e.length;n+=1){let s=e[n];if(n===0&&s.inputFile){let a=l(s.inputFile,this.cwd);try{t=this.vfs.readFile(a)}catch{return{stderr:`${s.inputFile}: No such file or directory`,exitCode:1}}}let i=await this.executeCommand(s.name,s.args,t);t=i.stdout??"",r=i.exitCode??0}return{stdout:t,exitCode:r}}async executeCommand(e,t,r){let n=this.resolveCommand(e);if(!n)return{stderr:`${e}: command not found`,exitCode:127};let i={args:t.map(a=>p(a,this.env.vars,this.env.lastExitCode,this.env.vars.HOME)),stdin:r,cwd:this.cwd,env:this.env,rawInput:`${e} ${t.join(" ")}`.trim(),shell:this};try{let a=await n.run(i);return a.nextCwd&&(this.cwd=a.nextCwd,this.env.vars.PWD=a.nextCwd),a}catch(a){return{stderr:a instanceof Error?a.message:String(a),exitCode:1}}}};function G(o="typescript-vm",e={}){return new x(o,e)}export{y as IndexedDbMirrorVfs,x as WebShell,G as createWebShell};
+`),this.initialized=!0)}getCurrentWorkingDirectory(){return this.cwd}async executeCommandLine(e,t=!0){await this.ensureInitialized();let r=e.trim();if(!r)return{exitCode:0};let n=await C(r,this.env.vars,this.env.lastExitCode,a=>this.executeCommandLine(a,!1).then(c=>c.stdout??"")),s=w(n),i=await this.executeStatements(s.statements);return this.env.lastExitCode=i.exitCode??0,t&&await this.vfs.flushMirror(),i}async executeStatements(e){let t={exitCode:0},r=0;for(;r<e.length;){let n=e[r];if(t=await this.executePipeline(n.pipeline.commands),this.env.lastExitCode=t.exitCode??0,t.closeSession||t.switchUser)return t;let s=n.op;if(!(!s||s===";")){if(s==="&&"){if((t.exitCode??0)!==0)for(;r<e.length&&e[r]?.op==="&&";)r+=1}else if(s==="||"&&(t.exitCode??0)===0)for(;r<e.length&&e[r]?.op==="||";)r+=1}r+=1}return t}async executePipeline(e){return e.length===0?{exitCode:0}:e.length===1?this.executeSingleCommandWithRedirections(e[0]):this.executePipelineChain(e)}async executeSingleCommandWithRedirections(e){let t;if(e.inputFile){let n=l(e.inputFile,this.cwd);try{t=this.vfs.readFile(n)}catch{return{stderr:`${e.inputFile}: No such file or directory`,exitCode:1}}}let r=await this.executeCommand(e.name,e.args,t);if(e.outputFile){let n=l(e.outputFile,this.cwd),s=r.stdout??"";if(e.appendOutput&&this.vfs.exists(n)){let i=this.vfs.readFile(n);this.vfs.writeFile(n,`${i}${s}`)}else this.vfs.writeFile(n,s);return{...r,stdout:""}}return r}async executePipelineChain(e){let t="",r=0;for(let n=0;n<e.length;n+=1){let s=e[n];if(n===0&&s.inputFile){let a=l(s.inputFile,this.cwd);try{t=this.vfs.readFile(a)}catch{return{stderr:`${s.inputFile}: No such file or directory`,exitCode:1}}}let i=await this.executeCommand(s.name,s.args,t);t=i.stdout??"",r=i.exitCode??0}return{stdout:t,exitCode:r}}async executeCommand(e,t,r){let n=this.resolveCommand(e);if(!n)return{stderr:`${e}: command not found`,exitCode:127};let i={args:t.map(a=>p(a,this.env.vars,this.env.lastExitCode,this.env.vars.HOME)),stdin:r,cwd:this.cwd,env:this.env,rawInput:`${e} ${t.join(" ")}`.trim(),shell:this};try{let a=await n.run(i);return a.nextCwd&&(this.cwd=a.nextCwd,this.env.vars.PWD=a.nextCwd),a}catch(a){return{stderr:a instanceof Error?a.message:String(a),exitCode:1}}}};function K(o="typescript-vm",e={}){return new v(o,e)}export{y as IndexedDbMirrorVfs,v as WebShell,K as createWebShell};
 //# sourceMappingURL=web.min.js.map

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "typescript-virtual-container",
-  "description": "In-memory SSH server with virtual filesystem and typed programmatic API",
+  "description": "Scalable Linux emulator with included SSH/SFTP server, virtual filesystem and typed programmatic API for testing, automation, and interactive shell scripting in TypeScript/JavaScript.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",
-  "version": "1.3.4",
+  "version": "1.4.1",
   "license": "MIT",
   "repository": {
     "type": "git",

package/src/SSHClient/index.ts

@@ -62,11 +62,14 @@ export class SshClient {
 		);
 
 		// Handle async results
-		if (result instanceof Promise) {
-			return await result;
+		const resolved = result instanceof Promise ? await result : result;
+
+		// Propagate cwd changes (cd, su, etc.)
+		if (resolved.nextCwd && (resolved.exitCode ?? 0) === 0) {
+			this.currentCwd = resolved.nextCwd;
 		}
 
-		return result;
+		return resolved;
 	}
 
 	/**

package/src/SSHMimic/executor.ts

@@ -4,54 +4,13 @@ import type { CommandMode, CommandResult, ShellEnv } from "../types/commands";
 import type {
 	Pipeline,
 	PipelineCommand,
-	Script,
 	Statement,
 } from "../types/pipeline";
 import type { VirtualShell } from "../VirtualShell";
 
 // ── Script executor (handles &&/||/;) ────────────────────────────────────────
 
-export async function executeScript(
-	script: Script,
-	authUser: string,
-	hostname: string,
-	mode: CommandMode,
-	cwd: string,
-	shell: VirtualShell,
-	env: ShellEnv,
-): Promise<CommandResult> {
-	if (!script.isValid)
-		return { stderr: script.error || "Syntax error", exitCode: 1 };
-
-	let lastResult: CommandResult = { exitCode: 0 };
 
-	for (const stmt of script.statements) {
-		// Decide whether to run this statement based on previous op
-		lastResult = await executePipeline(
-			stmt.pipeline,
-			authUser,
-			hostname,
-			mode,
-			cwd,
-			shell,
-			env,
-		);
-		env.lastExitCode = lastResult.exitCode ?? 0;
-
-		// Propagate session-control signals
-		if (
-			lastResult.closeSession ||
-			lastResult.switchUser ||
-			lastResult.nextCwd
-		) {
-			break;
-		}
-	}
-
-	return lastResult;
-}
-
-/** Execute statements connected by &&/||/; */
 export async function executeStatements(
 	statements: Statement[],
 	authUser: string,
@@ -62,6 +21,8 @@ export async function executeStatements(
 	env: ShellEnv,
 ): Promise<CommandResult> {
 	let last: CommandResult = { exitCode: 0 };
+	const accumulatedStdout: string[] = [];
+	let currentCwd = cwd; // track cwd changes from cd, su, etc.
 	let i = 0;
 
 	while (i < statements.length) {
@@ -71,13 +32,26 @@ export async function executeStatements(
 			authUser,
 			hostname,
 			mode,
-			cwd,
+			currentCwd,
 			shell,
 			env,
 		);
 		env.lastExitCode = last.exitCode ?? 0;
 
-		if (last.closeSession || last.switchUser) return last;
+		// Propagate cwd changes (cd, su -l, etc.)
+		if (last.nextCwd && (last.exitCode ?? 0) === 0) {
+			currentCwd = last.nextCwd;
+		}
+
+		// Collect stdout from each statement (for echo a; echo b → "a\nb\n")
+		if (last.stdout) accumulatedStdout.push(last.stdout);
+
+		if (last.closeSession || last.switchUser) {
+			return {
+				...last,
+				stdout: accumulatedStdout.join("") || last.stdout,
+			};
+		}
 
 		const op = stmt.op;
 		if (!op || op === ";") {
@@ -95,7 +69,10 @@ export async function executeStatements(
 		}
 		i++;
 	}
-	return last;
+	// Merge accumulated stdout (for "echo a; echo b" → "a\nb\n")
+	const merged = accumulatedStdout.join("");
+	// Preserve the deepest cwd change across the whole pipeline
+	return { ...last, stdout: merged || last.stdout, nextCwd: currentCwd !== cwd ? currentCwd : undefined };
 }
 
 // ── Pipeline executor ─────────────────────────────────────────────────────────

package/src/SSHMimic/index.ts

@@ -21,6 +21,11 @@ import { loadOrCreateHostKey } from "./hostKey";
  */
 const perf: PerfLogger = createPerfLogger("SshMimic");
 
+// ── Dev-mode logger ───────────────────────────────────────────────────────────
+const DEV = !!process.env.DEV_MODE;
+const devLog = DEV ? console.log.bind(console) : () => {};
+
+
 interface RateLimitEntry {
 	attempts: number;
 	lockedUntil: number;
@@ -152,9 +157,6 @@ class SshMimic extends EventEmitter {
 					// ── Password auth ──────────────────────────────────────
 					if (ctx.method === "password") {
 						if (!shell.users.hasPassword(candidateUser)) {
-							console.log(
-								`User ${candidateUser} has no password set, allowing login without verification`,
-							);
 							authUser = candidateUser;
 							sessionId = shell.users.registerSession(
 								authUser,
@@ -297,7 +299,7 @@ class SshMimic extends EventEmitter {
 		return new Promise<number>((resolve, reject) => {
 			this.server?.once("error", (err: unknown) => reject(err));
 			this.server?.listen(this.port, "0.0.0.0", () => {
-				console.log(`SSH Mimic listening on port ${this.port}`);
+				devLog(`SSH Mimic listening on port ${this.port}`);
 				this.emit("start", { port: this.port });
 				resolve(this.port);
 			});
@@ -311,7 +313,7 @@ class SshMimic extends EventEmitter {
 		perf.mark("stop");
 		if (this.server) {
 			this.server.close(() => {
-				console.log("SSH Mimic stopped");
+				devLog("SSH Mimic stopped");
 				this.emit("stop");
 			});
 		}

package/src/SSHMimic/sftp.ts

@@ -10,6 +10,13 @@ import type VirtualFileSystem from "../VirtualFileSystem";
 import { VirtualShell } from "../VirtualShell";
 import type { VirtualUserManager } from "../VirtualUserManager";
 import { loadOrCreateHostKey } from "./hostKey";
+// ── Dev-mode logger — silent in production ────────────────────────────────────
+const DEV = !!process.env.DEV_MODE;
+const devLog  = DEV ? console.log.bind(console)  : () => {};
+const devWarn = DEV ? console.warn.bind(console) : () => {};
+const devErr  = DEV ? console.error.bind(console): () => {};
+
+
 
 const SFTP_STATUS_CODE = {
 	OK: 0,
@@ -218,7 +225,7 @@ export class SftpMimic extends EventEmitter {
 
 				// Add error handling for the client
 				client.on("error", (error: unknown) => {
-					console.error(`[SFTP] Client error:`, error);
+					devErr(`[SFTP] Client error:`, error);
 				});
 
 				const acceptSession = (username: string): void => {
@@ -248,7 +255,7 @@ export class SftpMimic extends EventEmitter {
 					const candidateUser = ctx.username || "root";
 					remoteAddress = (ctx as { ip?: string }).ip ?? remoteAddress;
 
-					console.log(
+					devLog(
 						`[SFTP] Auth attempt: user=${candidateUser}, method=${ctx.method}, ip=${remoteAddress}`,
 					);
 
@@ -326,7 +333,7 @@ export class SftpMimic extends EventEmitter {
 
 						// Add error handling for the session
 						session.on("error", (error: unknown) => {
-							console.error(
+							devErr(
 								`[SFTP] Session error for user=${authUser}:`,
 								error,
 							);
@@ -349,7 +356,7 @@ export class SftpMimic extends EventEmitter {
 					address && typeof address === "object" && "port" in address
 						? address.port
 						: this.port;
-				console.log(`SFTP Mimic listening on port ${actualPort}`);
+				devLog(`SFTP Mimic listening on port ${actualPort}`);
 				this.emit("start", { port: actualPort });
 				resolve(actualPort as number);
 			});
@@ -360,7 +367,7 @@ export class SftpMimic extends EventEmitter {
 		perf.mark("stop");
 		if (this.server) {
 			this.server.close(() => {
-				console.log("SFTP Mimic stopped");
+				devLog("SFTP Mimic stopped");
 				this.emit("stop");
 			});
 		}
@@ -452,7 +459,7 @@ export class SftpMimic extends EventEmitter {
 
 			// Security: Confine to home directory
 			if (!this.isPathWithinHome(targetPath, authUser)) {
-				console.warn(
+				devWarn(
 					`[SFTP] Path traversal attempt blocked: user=${authUser}, path=${targetPath}`,
 				);
 				sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -507,7 +514,7 @@ export class SftpMimic extends EventEmitter {
 				});
 				sftp.handle(reqid, handle);
 			} catch (error) {
-				console.error("SFTP OPEN error:", error);
+				devErr("SFTP OPEN error:", error);
 				sftp.status(reqid, SFTP_STATUS_CODE.FAILURE);
 			}
 		});
@@ -580,7 +587,7 @@ export class SftpMimic extends EventEmitter {
 					getVfs().writeFile(entry.path, entry.buffer);
 					void getVfs().flushMirror();
 				} catch (error) {
-					console.error("SFTP CLOSE write error:", error);
+					devErr("SFTP CLOSE write error:", error);
 					sftp.status(reqid, SFTP_STATUS_CODE.FAILURE);
 					this.closeHandle(handle);
 					return;
@@ -596,7 +603,7 @@ export class SftpMimic extends EventEmitter {
 
 			// Security: Confine to home directory
 			if (!this.isPathWithinHome(targetPath, authUser)) {
-				console.warn(
+				devWarn(
 					`[SFTP] Path traversal attempt blocked: user=${authUser}, path=${targetPath}`,
 				);
 				sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -649,7 +656,7 @@ export class SftpMimic extends EventEmitter {
 
 			// Security: Confine to home directory
 			if (!this.isPathWithinHome(targetPath, authUser)) {
-				console.warn(
+				devWarn(
 					`[SFTP] Path traversal attempt blocked: user=${authUser}, path=${targetPath}`,
 				);
 				sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -669,7 +676,7 @@ export class SftpMimic extends EventEmitter {
 
 			// Security: Confine to home directory
 			if (!this.isPathWithinHome(targetPath, authUser)) {
-				console.warn(
+				devWarn(
 					`[SFTP] Path traversal attempt blocked: user=${authUser}, path=${targetPath}`,
 				);
 				sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -711,7 +718,7 @@ export class SftpMimic extends EventEmitter {
 
 				// Security: Confine to home directory
 				if (!this.isPathWithinHome(targetPath, authUser)) {
-					console.warn(
+					devWarn(
 						`[SFTP] Path traversal attempt blocked: user=${authUser}, path=${targetPath}`,
 					);
 					sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -734,7 +741,7 @@ export class SftpMimic extends EventEmitter {
 
 			// Security: Confine to home directory
 			if (!this.isPathWithinHome(normalized, authUser)) {
-				console.warn(
+				devWarn(
 					`[SFTP] Path traversal attempt blocked: user=${authUser}, path=${normalized}`,
 				);
 				sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -762,7 +769,7 @@ export class SftpMimic extends EventEmitter {
 
 			// Security: Confine to home directory
 			if (!this.isPathWithinHome(targetPath, authUser)) {
-				console.warn(
+				devWarn(
 					`[SFTP] Path traversal attempt blocked: user=${authUser}, path=${targetPath}`,
 				);
 				sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -783,7 +790,7 @@ export class SftpMimic extends EventEmitter {
 
 			// Security: Confine to home directory
 			if (!this.isPathWithinHome(targetPath, authUser)) {
-				console.warn(
+				devWarn(
 					`[SFTP] Path traversal attempt blocked: user=${authUser}, path=${targetPath}`,
 				);
 				sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -804,7 +811,7 @@ export class SftpMimic extends EventEmitter {
 
 			// Security: Confine to home directory
 			if (!this.isPathWithinHome(targetPath, authUser)) {
-				console.warn(
+				devWarn(
 					`[SFTP] Path traversal attempt blocked: user=${authUser}, path=${targetPath}`,
 				);
 				sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -829,7 +836,7 @@ export class SftpMimic extends EventEmitter {
 				!this.isPathWithinHome(fromPath, authUser) ||
 				!this.isPathWithinHome(toPath, authUser)
 			) {
-				console.warn(
+				devWarn(
 					`[SFTP] Path traversal attempt blocked: user=${authUser}, from=${fromPath}, to=${toPath}`,
 				);
 				sftp.status(reqid, SFTP_STATUS_CODE.PERMISSION_DENIED);
@@ -854,21 +861,21 @@ export class SftpMimic extends EventEmitter {
 		});
 
 		sftp.on("error", (error: Error) => {
-			console.error(`[SFTP] Stream error for user=${authUser}:`, error);
+			devErr(`[SFTP] Stream error for user=${authUser}:`, error);
 		});
 
 		sftp.on("close", () => {
-			console.log(`[SFTP] Stream closed for user=${authUser}`);
+			devLog(`[SFTP] Stream closed for user=${authUser}`);
 			this.handles.clear();
 		});
 
 		sftp.on("end", () => {
-			console.log(`[SFTP] end event for user=${authUser}`);
+			devLog(`[SFTP] end event for user=${authUser}`);
 			this.handles.clear();
 		});
 
 		sftp.on("END", () => {
-			console.log(`[SFTP] END event for user=${authUser}`);
+			devLog(`[SFTP] END event for user=${authUser}`);
 			this.handles.clear();
 		});
 	}

package/src/VirtualPackageManager/index.ts

@@ -556,7 +556,35 @@ const PACKAGE_REGISTRY: PackageDefinition[] = [
 				mode: 0o755,
 			},
 		],
-	},
+	},{
+		name: "gzip",
+		version: "1.12-2",
+		section: "utils",
+		description: "GNU compression utility",
+		shortDesc: "compression utility",
+		installedSizeKb: 128,
+		files: [
+			{
+				path: "/usr/bin/gzip",
+				content: "#!/bin/sh\necho 'gzip: virtual stub'\n",
+				mode: 0o755,
+			},
+		]
+	}, {
+		name: "neofetch",
+		version: "7.1.0-1",
+		section: "utils",
+		description: "A command-line system information tool written in bash 3.2+",
+		shortDesc: "command-line system information tool",
+		installedSizeKb: 256,
+		files: [
+			{
+				path: "/usr/bin/neofetch",
+				content: "#!/bin/sh\necho 'neofetch: virtual stub'\n",
+				mode: 0o755,
+			},
+		],
+	}
 ];
 
 /**

package/src/VirtualShell/shell.ts

@@ -15,7 +15,7 @@ import {
 } from "../modules/shellRuntime";
 import { buildLoginBanner } from "../SSHMimic/loginBanner";
 import { buildPrompt } from "../SSHMimic/prompt";
-import type { ShellEnv } from "../types/commands";
+import type { CommandResult, ShellEnv } from "../types/commands";
 import type { ShellStream } from "../types/streams";
 import type VirtualFileSystem from "../VirtualFileSystem";
 
@@ -33,6 +33,11 @@ interface PendingSudo {
 	loginShell: boolean;
 	prompt: string;
 	buffer: string;
+	mode?: "sudo" | "passwd" | "confirm";
+	onPassword?: (input: string, shell: VirtualShell) => Promise<{
+		result: CommandResult | null;
+		nextPrompt?: string;
+	}>;
 }
 
 export function startShell(
@@ -110,6 +115,11 @@ export function startShell(
 		commandLine: string | null;
 		loginShell: boolean;
 		prompt: string;
+		mode?: "sudo" | "passwd" | "confirm";
+		onPassword?: (input: string, shell: VirtualShell) => Promise<{
+			result: CommandResult | null;
+			nextPrompt?: string;
+		}>;
 	}): void {
 		pendingSudo = {
 			...challenge,
@@ -135,7 +145,9 @@ export function startShell(
 
 		if (!challenge.commandLine) {
 			authUser = challenge.targetUser;
-			cwd = `/home/${authUser}`;
+			if (challenge.loginShell) {
+				cwd = `/home/${authUser}`;
+			}
 			shell.users.updateSession(sessionId, authUser, remoteAddress);
 			stream.write("\r\n");
 			renderLine();
@@ -443,11 +455,29 @@ export function startShell(
 				}
 
 				if (ch === "\r" || ch === "\n") {
-					const password = pendingSudo.buffer;
+					const typed = pendingSudo.buffer;
 					pendingSudo.buffer = "";
+
+					// ── Generic onPassword handler (passwd / confirm modes) ────
+					if (pendingSudo.onPassword) {
+						const { result, nextPrompt } = await pendingSudo.onPassword(typed, shell);
+						stream.write("\r\n");
+						if (result !== null) {
+							pendingSudo = null;
+							if (result.stdout) stream.write(result.stdout.replace(/\n/g, "\r\n"));
+							if (result.stderr) stream.write(result.stderr.replace(/\n/g, "\r\n"));
+							renderLine();
+						} else {
+							if (nextPrompt) pendingSudo.prompt = nextPrompt;
+							stream.write(pendingSudo.prompt);
+						}
+						return;
+					}
+
+					// ── Default sudo mode — verify current user's password ─────
 					const valid = shell.users.verifyPassword(
 						pendingSudo.username,
-						password,
+						typed,
 					);
 					await finishSudoPrompt(valid);
 					return;