bashkit 0.15.0__tar.gz → 0.16.0__tar.gz

{bashkit-0.15.0 → bashkit-0.16.0}/Cargo.lock

@@ -386,23 +386,26 @@ checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
 
 [[package]]
 name = "bashkit"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "anyhow",
  "async-trait",
  "base64 0.23.0",
  "bigdecimal",
  "bitflags 2.13.1",
+ "bzip2",
  "chrono",
+ "chrono-tz",
  "clap",
  "criterion",
  "ed25519-dalek",
  "fail",
- "fancy-regex 0.18.0",
+ "fancy-regex 0.19.0",
  "flate2",
  "futures-core",
  "futures-util",
  "getrandom 0.4.3",
+ "gloo-timers",
  "hmac",
  "insta",
  "jaq-core",
@@ -420,8 +423,10 @@ dependencies = [
  "reqwest",
  "russh",
  "rustls",
+ "send_wrapper",
  "serde",
  "serde_json",
+ "serde_yaml_ng",
  "serial_test",
  "sha1",
  "sha2",
@@ -441,7 +446,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-bench"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "anyhow",
  "bashkit",
@@ -456,7 +461,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-capi"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "bashkit",
  "serde",
@@ -466,7 +471,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-cli"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "anyhow",
  "bashkit",
@@ -480,7 +485,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-coreutils-port"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "anyhow",
  "prettyplease",
@@ -494,7 +499,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-eval"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -511,7 +516,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-js"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "bashkit",
  "napi",
@@ -523,7 +528,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-python"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "bashkit",
  "num-bigint",
@@ -535,7 +540,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-wasm"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "bashkit",
  "console_error_panic_hook",
@@ -548,6 +553,7 @@ dependencies = [
  "serde_json",
  "wasm-bindgen",
  "wasm-bindgen-futures",
+ "web-time",
 ]
 
 [[package]]
@@ -715,6 +721,15 @@ version = "1.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
 
+[[package]]
+name = "bzip2"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3a53fac24f34a81bc9954b5d6cfce0c21e18ec6959f44f56e8e90e4bb7c346c"
+dependencies = [
+ "libbz2-rs-sys",
+]
+
 [[package]]
 name = "cast"
 version = "0.3.0"
@@ -796,6 +811,16 @@ dependencies = [
  "windows-link",
 ]
 
+[[package]]
+name = "chrono-tz"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6139a8597ed92cf816dfb33f5dd6cf0bb93a6adc938f11039f371bc5bcd26c3"
+dependencies = [
+ "chrono",
+ "phf 0.12.1",
+]
+
 [[package]]
 name = "ciborium"
 version = "0.2.2"
@@ -847,9 +872,9 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.6.4"
+version = "4.6.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d91e0c145792ef73a6ad36d27c75ac09f1832222a3c209689d90f534685ee5b7"
+checksum = "301b56658598e48f3648647ac6fc887be7e7108eddfa4e9b63fcf3ec58c0cadf"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -857,9 +882,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.6.2"
+version = "4.6.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f09628afdcc538b57f3c6341e9c8e9970f18e4a481690a64974d7023bd33548b"
+checksum = "94a65403d1a1bd28f7dc68eb8506e8874808ee5eecb59298de588e2e1407a078"
 dependencies = [
  "anstream",
  "anstyle",
@@ -936,7 +961,7 @@ version = "3.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "faf9468729b8cbcea668e36183cb69d317348c2e08e994829fb56ebfdfbaac34"
 dependencies = [
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1500,7 +1525,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1539,9 +1564,9 @@ dependencies = [
 
 [[package]]
 name = "fancy-regex"
-version = "0.18.0"
+version = "0.19.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e1e1dacd0d2082dfcf1351c4bdd566bbe89a2b263235a2b50058f1e130a47277"
+checksum = "476de73bddf2ef8490aa4ee8f1cf40b430bf1d56c48c22080e5186952cd580e6"
 dependencies = [
  "bit-set",
  "regex-automata",
@@ -1850,6 +1875,18 @@ dependencies = [
  "polyval 0.7.1",
 ]
 
+[[package]]
+name = "gloo-timers"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbb143cf96099802033e0d4f4963b19fd2e0b728bcf076cd9cf7f6634f092994"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "js-sys",
+ "wasm-bindgen",
+]
+
 [[package]]
 name = "group"
 version = "0.14.0"
@@ -2617,6 +2654,12 @@ version = "1.0.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2604dd126bb14f13fb5d1bd6a66155079cb9fa655b37f875b3a742c705dbed17"
 
+[[package]]
+name = "libbz2-rs-sys"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34b357333733e8260735ba5894eb928c02ecc69c78715f01a8019e7fa7f2db4c"
+
 [[package]]
 name = "libc"
 version = "0.2.186"
@@ -2929,9 +2972,9 @@ dependencies = [
 
 [[package]]
 name = "napi"
-version = "3.11.0"
+version = "3.12.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "de33522036981030a75c231829566bc63414e08101a6f5ff4ac6cef19c8e0941"
+checksum = "6f71d6bc097c4a6eb853c3f24991ab8c9f50f57d1f719e305175541482217e36"
 dependencies = [
  "bitflags 2.13.1",
  "ctor",
@@ -2945,15 +2988,15 @@ dependencies = [
 
 [[package]]
 name = "napi-build"
-version = "2.3.2"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c9c366d2c8c60b86fa632df75f745509b52f9128f91a6bad4c796e44abb505e1"
+checksum = "5282704fbe8d49b0cf8b08e3f33233416a528658f205c7e5ace63b582de0b11c"
 
 [[package]]
 name = "napi-derive"
-version = "3.6.0"
+version = "3.6.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a49c513341a61a16a10af6efcce46b30d0822ba2d4fb197d24d33dfc199c78d5"
+checksum = "6d9002b2940f0184444754546e0fcd15182f56948e6f381968b019d549387c42"
 dependencies = [
  "convert_case",
  "ctor",
@@ -2965,9 +3008,9 @@ dependencies = [
 
 [[package]]
 name = "napi-derive-backend"
-version = "6.0.0"
+version = "6.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4747005fa3e2c9989ac45a723a514c5db2411238b72981a3cda4c701a9dfea17"
+checksum = "d60b5d773ad46c698c8cc2cd9fde0b283d39cbb7f71c04bee633c7bdba4423bd"
 dependencies = [
  "convert_case",
  "proc-macro2",
@@ -3489,6 +3532,15 @@ dependencies = [
  "phf_shared 0.11.3",
 ]
 
+[[package]]
+name = "phf"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "913273894cec178f401a31ec4b656318d95473527be05c0752cc41cdc32be8b7"
+dependencies = [
+ "phf_shared 0.12.1",
+]
+
 [[package]]
 name = "phf"
 version = "0.13.1"
@@ -3552,6 +3604,15 @@ dependencies = [
  "siphasher",
 ]
 
+[[package]]
+name = "phf_shared"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06005508882fb681fd97892ecff4b7fd0fee13ef1aa569f8695dae7ab9099981"
+dependencies = [
+ "siphasher",
+]
+
 [[package]]
 name = "phf_shared"
 version = "0.13.1"
@@ -4128,9 +4189,9 @@ dependencies = [
 
 [[package]]
 name = "regex-automata"
-version = "0.4.14"
+version = "0.4.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
+checksum = "8fcfdb36bda0c880c5931cdc7a2bcdc8ba4556847b9d912bca70bc94708711ad"
 dependencies = [
  "aho-corasick",
  "memchr",
@@ -4456,14 +4517,14 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
 name = "rustls"
-version = "0.23.42"
+version = "0.23.43"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c54fcab019b409d04215d3a17cb438fd7fbf192ee61461f20f4fe18704bc138"
+checksum = "0283386ce02abc0151e1761d08802dfe86c173b0b494af5cbc086574e453da06"
 dependencies = [
  "log",
  "once_cell",
@@ -4513,7 +4574,7 @@ dependencies = [
  "security-framework",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4757,6 +4818,19 @@ dependencies = [
  "serde_core",
 ]
 
+[[package]]
+name = "serde_yaml_ng"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b4db627b98b36d4203a7b458cf3573730f2bb591b28871d916dfa9efabfd41f"
+dependencies = [
+ "indexmap",
+ "itoa",
+ "ryu",
+ "serde",
+ "unsafe-libyaml",
+]
+
 [[package]]
 name = "serdect"
 version = "0.4.3"
@@ -5236,7 +5310,7 @@ dependencies = [
  "getrandom 0.4.3",
  "once_cell",
  "rustix",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -5414,9 +5488,9 @@ dependencies = [
 
 [[package]]
 name = "toml"
-version = "1.1.3+spec-1.1.0"
+version = "1.1.4+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "53c96ecdfa941c8fc4fcaed14f99ada8ebed502eef533015095a07e3301d4c3c"
+checksum = "3aace63f4bbcdfc2c965b059de67119c89c4017a70d633be6c104910f67056f5"
 dependencies = [
  "indexmap",
  "serde_core",
@@ -5438,9 +5512,9 @@ dependencies = [
 
 [[package]]
 name = "toml_parser"
-version = "1.1.2+spec-1.1.0"
+version = "1.1.3+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a2abe9b86193656635d2411dc43050282ca48aa31c2451210f4202550afb7526"
+checksum = "1d38ac1cf9b95face32296c0a3ede1fdc270627c9d9c02a7274dd6d960dc4d56"
 dependencies = [
  "winnow",
 ]
@@ -5804,6 +5878,12 @@ dependencies = [
  "ctutils",
 ]
 
+[[package]]
+name = "unsafe-libyaml"
+version = "0.2.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861"
+
 [[package]]
 name = "untrusted"
 version = "0.7.1"
@@ -6038,7 +6118,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]

{bashkit-0.15.0 → bashkit-0.16.0}/Cargo.toml

@@ -7,7 +7,7 @@ resolver = "2"
 members = ["crates/*"]
 
 [workspace.package]
-version = "0.15.0"
+version = "0.16.0"
 edition = "2024"
 license = "MIT"
 authors = ["Mykhailo Chalyi <mike@chaliy.name>", "Everruns"]
@@ -32,6 +32,7 @@ anyhow = "1"
 # Serialization
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
+serde_yaml_ng = "0.10"
 
 # JSON processing (jq) - verified embeddable
 jaq-core = "3.0"
@@ -48,13 +49,15 @@ rustls = { version = "0.23", default-features = false, features = ["ring", "std"
 
 # Regex
 regex = "1"
-fancy-regex = "0.18"
+fancy-regex = "0.19"
 
 # Date/Time
 chrono = "0.4"
+chrono-tz = "0.10"
 
 # Compression
 flate2 = "1"
+bzip2 = { version = "0.6.1", default-features = true }
 
 # Base64 encoding
 base64 = "0.23"

{bashkit-0.15.0 → bashkit-0.16.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bashkit
-Version: 0.15.0
+Version: 0.16.0
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License

{bashkit-0.15.0 → bashkit-0.16.0}/bashkit/__init__.py

@@ -53,6 +53,7 @@ from bashkit._bashkit import (
     BuiltinResult,
     CapabilityFingerprint,
     ExecResult,
+    ExecutionProfile,
     FileSystem,
     PackedCommit,
     ScriptAnalysis,
@@ -70,6 +71,7 @@ __all__ = [
     "AnalyzedRedirect",
     "Bash",
     "BashError",
+    "ExecutionProfile",
     "BuiltinContext",
     "BuiltinResult",
     "BashTool",

{bashkit-0.15.0 → bashkit-0.16.0}/bashkit/_bashkit.pyi

@@ -1,7 +1,14 @@
 """Type stubs for bashkit native module."""
 
 from collections.abc import Awaitable, Callable, Mapping
-from typing import Any, Literal, Protocol, TypedDict
+from typing import Any, ClassVar, Literal, Protocol, TypedDict
+
+class ExecutionProfile:
+    """Closed set of named resource-policy baselines."""
+
+    Hardened: ClassVar[ExecutionProfile]
+    Standard: ClassVar[ExecutionProfile]
+    Interactive: ClassVar[ExecutionProfile]
 
 class BearerCredentialInjection(TypedDict):
     """Inject ``Authorization: Bearer <token>`` for matching URLs."""
@@ -481,6 +488,7 @@ class Bash:
         readonly_filesystem: bool = False,
         custom_builtins: Mapping[str, BuiltinCallback] | None = None,
         network: NetworkConfig | None = None,
+        profile: ExecutionProfile = ExecutionProfile.Standard,
     ) -> None:
         """Create a new Bash interpreter.
 
@@ -795,6 +803,7 @@ class Bash:
         readonly_filesystem: bool = False,
         custom_builtins: Mapping[str, BuiltinCallback] | None = None,
         network: NetworkConfig | None = None,
+        profile: ExecutionProfile = ExecutionProfile.Standard,
     ) -> Bash:
         """Create a new ``Bash`` from snapshot bytes and optional constructor kwargs."""
         ...
@@ -821,6 +830,7 @@ class Bash:
         readonly_filesystem: bool = False,
         custom_builtins: Mapping[str, BuiltinCallback] | None = None,
         network: NetworkConfig | None = None,
+        profile: ExecutionProfile = ExecutionProfile.Standard,
     ) -> Bash:
         """Create a new ``Bash`` from HMAC-protected snapshot bytes."""
         ...
@@ -1069,6 +1079,7 @@ class BashTool:
         readonly_filesystem: bool = False,
         custom_builtins: Mapping[str, BuiltinCallback] | None = None,
         network: NetworkConfig | None = None,
+        profile: ExecutionProfile = ExecutionProfile.Standard,
     ) -> None:
         """Create a new BashTool.
 
@@ -1366,6 +1377,7 @@ class BashTool:
         readonly_filesystem: bool = False,
         custom_builtins: Mapping[str, BuiltinCallback] | None = None,
         network: NetworkConfig | None = None,
+        profile: ExecutionProfile = ExecutionProfile.Standard,
     ) -> BashTool:
         """Create a new ``BashTool`` from snapshot bytes and optional constructor kwargs."""
         ...
@@ -1388,6 +1400,7 @@ class BashTool:
         readonly_filesystem: bool = False,
         custom_builtins: Mapping[str, BuiltinCallback] | None = None,
         network: NetworkConfig | None = None,
+        profile: ExecutionProfile = ExecutionProfile.Standard,
     ) -> BashTool:
         """Create a new ``BashTool`` from HMAC-protected snapshot bytes."""
         ...

{bashkit-0.15.0 → bashkit-0.16.0}/crates/bashkit/Cargo.toml

@@ -30,6 +30,7 @@ anyhow = { workspace = true }
 # Serialization
 serde = { workspace = true }
 serde_json = { workspace = true }
+serde_yaml_ng = { workspace = true, optional = true }
 
 # Regex
 regex = { workspace = true }
@@ -37,6 +38,7 @@ fancy-regex = { workspace = true }
 
 # Date/Time
 chrono = { workspace = true }
+chrono-tz = { workspace = true }
 
 # HTTP client (for curl/wget) - optional, enabled with http_client feature
 reqwest = { workspace = true, optional = true }
@@ -63,8 +65,9 @@ jaq-core = { workspace = true, optional = true }
 jaq-std = { workspace = true, optional = true }
 jaq-json = { workspace = true, optional = true }
 
-# Compression (for gzip/gunzip)
+# Compression (for gzip/gunzip and bzip2/bunzip2)
 flate2 = { workspace = true }
+bzip2 = { workspace = true }
 
 # Base64 encoding (for base64 builtin and HTTP basic auth)
 base64 = { workspace = true }
@@ -123,7 +126,7 @@ default = ["bash_tool"]
 bash_tool = ["dep:tower", "dep:futures-core"]
 # Enable jq builtin via embedded jaq interpreter
 # Usage: cargo build --features jq
-jq = ["dep:jaq-core", "dep:jaq-std", "dep:jaq-json"]
+jq = ["dep:jaq-core", "dep:jaq-std", "dep:jaq-json", "dep:serde_yaml_ng"]
 http_client = ["reqwest", "rustls"]
 # Enable Ed25519 request signing per RFC 9421 / web-bot-auth profile
 bot-auth = ["http_client", "dep:ed25519-dalek", "dep:rand", "dep:zeroize"]
@@ -165,7 +168,7 @@ sqlite = ["dep:turso_core", "tokio/rt-multi-thread"]
 # Enable RealFs backend for accessing host filesystem directories
 # WARNING: This intentionally breaks the sandbox boundary.
 # Usage: cargo build --features realfs
-realfs = []
+realfs = ["dep:rand"]
 # Enable native-extension interop contracts such as bashkit::interop::fs.
 interop = ["tokio/rt-multi-thread"]
 
@@ -206,6 +209,10 @@ harness = false
 name = "file_ops"
 harness = false
 
+[[bench]]
+name = "awk_regex"
+harness = false
+
 [[bench]]
 name = "snapshot_history"
 harness = false
@@ -277,6 +284,10 @@ tokio = { version = "1", features = ["rt-multi-thread", "fs"] }
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 web-time = { workspace = true }
 
+[target.'cfg(all(target_arch = "wasm32", target_os = "unknown"))'.dependencies]
+gloo-timers = { version = "0.3", features = ["futures"] }
+send_wrapper = { version = "0.6", features = ["futures"] }
+
 # Vendored uucore modules (e.g. generated/format/human.rs) carry upstream
 # `#[cfg(feature = "i18n-decimal")]` gates. bashkit has no i18n surface —
 # the port tool hard-errors on Fluent/translate imports — so this feature

{bashkit-0.15.0 → bashkit-0.16.0}/crates/bashkit/README.md

@@ -4,7 +4,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Crates.io](https://img.shields.io/crates/v/bashkit.svg)](https://crates.io/crates/bashkit)
 [![docs.rs](https://img.shields.io/docsrs/bashkit)](https://docs.rs/bashkit)
-[![Repo: Agent Friendly](https://img.shields.io/badge/Repo-Agent%20Friendly-blue)](AGENTS.md)
+[![Repo: Agent Friendly](https://img.shields.io/badge/Repo-Agent%20Friendly-blue)](https://github.com/everruns/bashkit/blob/main/AGENTS.md)
 
 Awesomely fast virtual sandbox with bash and file system. Written in Rust.
 
@@ -292,6 +292,10 @@ assert_eq!(bash.exec("greet Alice").await?.stdout, "hello Alice\n");
 # }
 ```
 
+Registry builtins get execution-scoped VFS/request handles by default. Only
+trusted host code that intentionally needs a session-lived VFS handle should
+use `registry.insert_trusted(...)`.
+
 Node (`@everruns/bashkit`):
 
 ```typescript
@@ -427,7 +431,7 @@ Enable the `sqlite` feature to embed [Turso](https://github.com/tursodatabase/tu
 
 ```toml
 [dependencies]
-bashkit = { version = "0.13", features = ["sqlite"] }
+bashkit = { version = "0.16.0", features = ["sqlite"] }
 ```
 
 ```rust