bashkit 0.18.1__tar.gz → 0.18.2__tar.gz

{bashkit-0.18.1 → bashkit-0.18.2}/Cargo.lock

@@ -238,7 +238,7 @@ checksum = "82f6aeea286b8eb4dd3431a1be1b59d290ace00f5bfd8e2a159bc2a05e2c1667"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -342,7 +342,7 @@ checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
 
 [[package]]
 name = "bashkit"
-version = "0.18.1"
+version = "0.18.2"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -404,7 +404,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-bench"
-version = "0.18.1"
+version = "0.18.2"
 dependencies = [
  "anyhow",
  "bashkit",
@@ -419,7 +419,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-capi"
-version = "0.18.1"
+version = "0.18.2"
 dependencies = [
  "bashkit",
  "serde",
@@ -429,7 +429,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-cli"
-version = "0.18.1"
+version = "0.18.2"
 dependencies = [
  "anyhow",
  "bashkit",
@@ -443,21 +443,21 @@ dependencies = [
 
 [[package]]
 name = "bashkit-coreutils-port"
-version = "0.18.1"
+version = "0.18.2"
 dependencies = [
  "anyhow",
  "prettyplease",
  "proc-macro2",
  "quote",
  "serde",
- "syn 3.0.5",
+ "syn 3.0.6",
  "tempfile",
  "toml",
 ]
 
 [[package]]
 name = "bashkit-eval"
-version = "0.18.1"
+version = "0.18.2"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -474,7 +474,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-js"
-version = "0.18.1"
+version = "0.18.2"
 dependencies = [
  "bashkit",
  "napi",
@@ -486,7 +486,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-python"
-version = "0.18.1"
+version = "0.18.2"
 dependencies = [
  "bashkit",
  "num-bigint 0.4.8",
@@ -498,7 +498,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-wasm"
-version = "0.18.1"
+version = "0.18.2"
 dependencies = [
  "bashkit",
  "console_error_panic_hook",
@@ -664,7 +664,7 @@ checksum = "fc0e56a716f1e132ff6bf4bdac1c944a3fcdc1cae65f70a4a2a1ac3b401d2d1f"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -830,9 +830,9 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.6.6"
+version = "4.6.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "473c7e07f409a8d772161724aa8db6a765a2532a70f9667eeb7b49d3d02fbdca"
+checksum = "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -840,9 +840,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.6.6"
+version = "4.6.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7b48fea5a88e9ae728a2dcbedbfc0e730f7d60da42e1cb049a83c9fb8b789889"
+checksum = "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d"
 dependencies = [
  "anstyle",
  "clap_lex",
@@ -850,14 +850,14 @@ dependencies = [
 
 [[package]]
 name = "clap_derive"
-version = "4.6.4"
+version = "4.6.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d012d2b9d65aca7f18f4d9878a045bc17899bba951561ba5ec3c2ba1eed9a061"
+checksum = "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0"
 dependencies = [
  "heck",
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -911,7 +911,7 @@ version = "3.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "faf9468729b8cbcea668e36183cb69d317348c2e08e994829fb56ebfdfbaac34"
 dependencies = [
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1336,7 +1336,7 @@ checksum = "c6232dd377dcc64799954cbd3a9bb882e9cdc1308ccd87b1c098f1fb2eaf82a8"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -1475,7 +1475,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1668,7 +1668,7 @@ checksum = "9fb9654ba8355388abeb8dcb4fc62f511300867002afc858860463bdd9fe0c44"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -2675,7 +2675,7 @@ checksum = "77060ebe535362c3da75682cd17b0431017b6e7c5661e714fc69a7ad017d1301"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -2938,9 +2938,9 @@ dependencies = [
 
 [[package]]
 name = "napi"
-version = "3.12.4"
+version = "3.12.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d2c1d080c842ec1347ebf3cfb9347c15f8c2262f143cc30eea41ddf1c7da720"
+checksum = "b7d3c1107f2fda46a7bd2676d65221b7b8160054494b38554b0e055c731714db"
 dependencies = [
  "bitflags 2.13.2",
  "ctor",
@@ -2955,15 +2955,15 @@ dependencies = [
 
 [[package]]
 name = "napi-build"
-version = "2.4.2"
+version = "2.4.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "860e7c40864f95cfb83cde99f9ebadd88ef3d9bdccd7dd2cee0cc96a2dd4ffa7"
+checksum = "9befcb51d87271051c0c11aaf625d09340266b7f1ac3fef5975e62274dc2813f"
 
 [[package]]
 name = "napi-derive"
-version = "3.6.5"
+version = "3.6.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "350057056a30368aa76c11a0d406b0aa61321710be2c36656ab4f6efe0b785a2"
+checksum = "7e332e701386d8101b093203e296059ad8aeef58ddd4c75594f3c84ce637405e"
 dependencies = [
  "convert_case",
  "ctor",
@@ -2975,9 +2975,9 @@ dependencies = [
 
 [[package]]
 name = "napi-derive-backend"
-version = "6.1.3"
+version = "6.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4c1c87a71568f3fe5c736b10878ff55064b250bb4ea4b48c8055713e07b9e463"
+checksum = "fd6856fe1686867da90ed0dc292d7c0c87a695eb7c578b913360f33619ee01e3"
 dependencies = [
  "convert_case",
  "proc-macro2",
@@ -2988,9 +2988,9 @@ dependencies = [
 
 [[package]]
 name = "napi-sys"
-version = "3.3.1"
+version = "3.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4d29a242104e456960e6c6479847570be731c1a92b8f8c05ddfb5439e5c09915"
+checksum = "6801fc65ba4d7035636e93635e281113f00410401a237dcd4f55b1565ead2115"
 dependencies = [
  "libloading 0.9.0",
 ]
@@ -3788,7 +3788,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2bfe0f4c752e450fc2faf62654f1c134747922825d5b04ca717b8874f41a40c0"
 dependencies = [
  "proc-macro2",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -4468,7 +4468,7 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4526,7 +4526,7 @@ dependencies = [
  "security-framework",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4746,7 +4746,7 @@ checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -4816,7 +4816,7 @@ checksum = "a22144e767da4ddd8416dbf383700542ffd8a5dc493dfecedfe1fe3ad03c98ae"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -5182,9 +5182,9 @@ dependencies = [
 
 [[package]]
 name = "syn"
-version = "3.0.5"
+version = "3.0.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12df2e0110f65b775f769bb17ef989067a1d931b2eb822bd4346631eeada89f9"
+checksum = "8593e8e72159ed2257d083c7a454a85cbf854f37a0966d8d483aff8c8a3ebcee"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -5256,7 +5256,7 @@ dependencies = [
  "getrandom 0.4.3",
  "once_cell",
  "rustix",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -5312,7 +5312,7 @@ checksum = "bc04cd3e1236dd4a98afca4569f2deb3f120e5422a4023be2cb683f8486292af"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -5384,7 +5384,7 @@ checksum = "78773a2a397f451582ce068015985c33193cf6dea8b74d2a639fe457b2f07b0e"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]
@@ -5990,7 +5990,7 @@ dependencies = [
  "bumpalo",
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
  "wasm-bindgen-shared",
 ]
 
@@ -6067,7 +6067,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -6438,7 +6438,7 @@ checksum = "34df6fc39dbd26ddc9c10e6a2984476e13acce22e64e4487636ef494369225da"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]
 
 [[package]]

{bashkit-0.18.1 → bashkit-0.18.2}/Cargo.toml

@@ -7,7 +7,7 @@ resolver = "2"
 members = ["crates/*"]
 
 [workspace.package]
-version = "0.18.1"
+version = "0.18.2"
 edition = "2024"
 license = "MIT"
 authors = ["Mykhailo Chalyi <mike@chaliy.name>", "Everruns"]

{bashkit-0.18.1 → bashkit-0.18.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bashkit
-Version: 0.18.1
+Version: 0.18.2
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/README.md

@@ -431,7 +431,7 @@ Enable the `sqlite` feature to embed [Turso](https://github.com/tursodatabase/tu
 
 ```toml
 [dependencies]
-bashkit = { version = "0.18.1", features = ["sqlite"] }
+bashkit = { version = "0.18.2", features = ["sqlite"] }
 ```
 
 ```rust
@@ -617,7 +617,7 @@ Hex as `ex_bashkit`. Independent community project, unaffiliated with Everruns.
 
 ### .NET (community)
 
-[computerwelt](https://github.com/theolivenbaum/computerwelt) — Community .NET binding for Bashkit. Independent community project, unaffiliated with Everruns.
+[computerwelt](https://github.com/curiosity-ai/computerwelt) — Community .NET binding for Bashkit. Independent community project, unaffiliated with Everruns.
 
 ## Security
 

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/docs/compatibility.md

@@ -72,7 +72,7 @@ for sandbox security reasons. See the compliance spec for details.
 | `times` | - | POSIX display process times |
 | `grep` | `-i`, `-v`, `-c`, `-n`, `-E`, `-q` | Pattern matching |
 | `rg` | `-i/-S/-s`, `-n/-N`, `--column`, `-b/--byte-offset`, `--vimgrep`, basic `--json`, `--stats`, `--null`, `-c`, `--count-matches`, `--include-zero`, `-l`, `--files-with-matches`, `--files-without-match`, `--files`, `-F`, `-w`, `-x`, `-a/--text`, `--binary`, `-m`, `-M/--max-columns`, `--max-columns-preview`, `--max-depth`, `-A`, `-B`, `-C`, separator flags, `--heading/--no-heading`, `--sort/--sortr`, `--path-separator`, `-g/--glob`, `--ignore-file`, `.ignore`/`.gitignore`, `--no-ignore*`, `--require-git/--no-require-git`, `-u/--unrestricted`, `--messages/--no-messages`, `-t/--type`, `-T/--type-not`, `--type-add`, `--type-clear`, `--type-list`, `--hidden/--no-hidden`, `-o`, `-q`, `-e`, `-f`, `-E/--encoding` (`auto`, `none`, UTF-8, UTF-16LE/BE), `-r`, `--passthru`, `--trim`, `-H/-I`, `--no-config`, `--line-buffered`, `--block-buffered`, `--mmap/--no-mmap`, `-P/--pcre2`, `--no-pcre2`, `--engine`, `--auto-hybrid-regex`, `--no-auto-hybrid-regex`, `--help`, `--version` | Recursive ripgrep-style search |
-| `sed` | `s///[g]`, `d`, `p`, `q`, `a`, `i`, `c`, `h/H/g/G/x`, `-E`, `-n`, `!` | Stream editing |
+| `sed` | `s///[gpiImMN w]`, `y`, `d`, `D`, `p`, `P`, `n`, `N`, `q[N]`, `Q[N]`, `=`, `l[N]`, `z`, `F`, `a`, `i`, `c`, `r`, `R`, `w`, `W`, `h/H/g/G/x`, `b`/`t`/`T`/`:label`, `{}`, `#`/`#n`; addresses `N`, `$`, `/re/[IM]`, `\cREc`, `first~step`, `a,b`, `a,+N`, `a,~N`, `0,/re/`, `!`; options `-n -e -f -i[SUF] -E/-r -s -z -l N -u --` and long forms | Stream editing; one stream across operands unless `-s`/`-i` |
 | `awk` | `'{print}'`, `-F`, `-v`, loops, arrays, increment, ternary | Text processing |
 | `jq` | `.field`, `.[n]`, pipes, file args, `-r`, `-c`, `-n`, `-s`, `-S`, `-e`, `-j`, `--tab`, `--arg`, `--argjson`, `-V`, combined flags | JSON processing |
 | `sleep` | `N`, `N.N` | Pause execution (max 60s) |
@@ -502,6 +502,11 @@ Identified from eval analysis, all items now implemented:
 - [x] `sed` `0~2` step addressing, even/odd line processing
 - [x] `sed` `Q` quiet quit command
 - [x] `sed` `0,/pattern/` first match addressing
+- [x] `sed` GNU rewrite, issue #2427: literal `$` in the replacement, BRE/ERE
+  translation shared by `s///` and address regexes, stateful range addresses,
+  single-stream multi-file input, preserved missing final newline, `s///Ng`,
+  the `y = l n N P D T z F r R w W` commands, `#` comments and `#n`, atomic
+  mode-preserving `-i`, and full getopt-style option parsing
 - [x] AWK `$0` modification with field re-splitting
 
 ### Not Planned

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/docs/logging.md

@@ -14,7 +14,7 @@ Add the `logging` feature to your `Cargo.toml`:
 
 ```toml
 [dependencies]
-bashkit = { version = "0.18.1", features = ["logging"] }
+bashkit = { version = "0.18.2", features = ["logging"] }
 tracing-subscriber = "0.3"  # or your preferred subscriber
 ```
 

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/docs/sqlite.md

@@ -13,7 +13,7 @@ the `sqlite` feature. The engine is [Turso](https://github.com/tursodatabase/tur
 
 ```toml
 # Cargo.toml
-bashkit = { version = "0.18.1", features = ["sqlite"] }
+bashkit = { version = "0.18.2", features = ["sqlite"] }
 ```
 
 ```rust,ignore

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/docs/threat-model.md

@@ -277,7 +277,7 @@ Scripts may attempt to leak sensitive information.
 
 | Threat | Attack Example | Mitigation | Status |
 |--------|---------------|------------|--------|
-| Fork-PR secret exfil (TM-INF-026) | Fork PR edits `examples/*.rs` or `build.rs` to read `$DOPPLER_TOKEN` / `$ANTHROPIC_API_KEY` from the runner env and exfiltrate; first-time-contributor approval gate runs the workflow from PR head, and `DOPPLER_TOKEN` is the master key to every other secret in the Doppler config | Trusted-run gates exclude PR execution from secret-backed examples. Dedicated fetch steps in `.github/workflows/{ci,js,publish-js}.yml` request one API key, mask it, and exit before build/example execution. Execution steps receive only that scoped key; Docker inherits it by name, without a secret value in argv. Neither the execution shell nor a live Doppler parent retains the broad service token. This protects process environments on a trusted runner; it does not sandbox dependencies persisting across steps. Workflow-script regression tests check child/parent environments. CI has contents-read permission only and does not persist checkout credentials; release examples install the reviewed lockfile without lifecycle scripts before linking the built artifact | **FIXED** |
+| Fork-PR secret exfil (TM-INF-026) | Fork PR edits `examples/*.rs` or `build.rs` to read `$DOPPLER_TOKEN` / `$ANTHROPIC_API_KEY` from the runner env and exfiltrate; first-time-contributor approval gate runs the workflow from PR head, and `DOPPLER_TOKEN` is the master key to every other secret in the Doppler config | Trusted-run gates exclude PR execution from secret-backed examples. Dedicated fetch steps in `.github/workflows/{ci,js,publish-js}.yml` request one API key, mask it, and exit before build/example execution. Execution steps receive only that scoped key; Docker inherits it by name, without a secret value in argv. Neither the execution shell nor a live Doppler parent retains the broad service token. This protects process environments on a trusted runner; it does not sandbox dependencies persisting across steps. Workflow-script regression tests check child/parent environments. CI has contents-read permission only and does not persist checkout credentials anywhere they could reach untrusted code (TM-INF-034); release examples install the reviewed lockfile without lifecycle scripts before linking the built artifact | **FIXED** |
 
 **Additional information-disclosure hardening:**
 
@@ -287,6 +287,7 @@ Scripts may attempt to leak sensitive information.
 | jq `halt`/`halt_error` exits the host process (TM-INF-023) | Filter calls `halt(N)` → `std::process::exit` | Upstream `halt` native stripped; safe replacement returns a jq error | MITIGATED |
 | Host env side-channel via clap `Arg::env` (TM-INF-024) | `ls` resolved `TABSIZE`/`TIME_STYLE` from host env | Codegen strips `.env(...)`; builtins read `ctx.env` only | MITIGATED |
 | Untrusted generated Rust in drift CI (TM-INF-025) | Malicious upstream `uu_app()` runs with a write token | Generator validates the emitted shape; drift workflow splits read/write privilege | FIXED |
+| Checkout token readable by untrusted CI code (TM-INF-034) | `actions/checkout` leaves `GITHUB_TOKEN` in `.git/config`, where a dependency build script or test in the same job can read it | `persist-credentials: false` on every checkout that does not back an authenticated `git`/`gh` call, and on every job of a pull-request-triggered workflow; every workflow declares a read-only default `permissions` block | FIXED |
 | Publish from unverified release refs (TM-INF-027) | Dispatch publish from a branch or unprotected tag | Dispatch requires `refs/heads/main`; publish gated on real `vX.Y.Z` tags | FIXED |
 | JS `onOutput` errors expose host stack traces (TM-INF-028) | Callback throws, leaking `error.stack` | Propagate `error.message` only; strip absolute/`file://` paths | FIXED |
 | Raw callback errors leak host internals (TM-INF-030) | Tool callback throws API keys/connection strings/stack traces | `sanitize_errors` defaults on for `ScriptedTool`/`ToolImpl`/`ToolRegistry` across shell/Python/TypeScript | MITIGATED |
@@ -882,7 +883,7 @@ builtin silently fails.
 | Threat | Attack Example | Mitigation | Status |
 |--------|---------------|------------|--------|
 | Awk byte-boundary panic (TM-UNI-001) | Multi-byte chars in awk input | `catch_unwind` catches panic | PARTIAL |
-| Sed byte-boundary panic (TM-UNI-002) | Box-drawing chars in sed pattern | `catch_unwind` catches panic | PARTIAL |
+| Sed byte-boundary panic (TM-UNI-002) | Multi-byte `s` delimiter, e.g. `sed 's≠a≠X≠'` | Char-based script parser; no byte slicing of script text | FIXED |
 | Expr substr panic (TM-UNI-015) | `expr substr "café" 4 1` | `catch_unwind` catches panic | PARTIAL |
 | Printf precision panic (TM-UNI-016) | `printf "%.1s" "é"` | `catch_unwind` catches panic | PARTIAL |
 | Cut/tr byte-level parsing (TM-UNI-017) | `tr 'é' 'e'`, multi-byte in char set | `catch_unwind` catches; silent data loss | PARTIAL |

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/src/builtins/archive.rs

@@ -31,6 +31,7 @@ use std::path::{Path, PathBuf};
 use super::limits::ARCHIVE_MAX_DECOMPRESSION_RATIO as MAX_DECOMPRESSION_RATIO;
 use super::{Builtin, Context, resolve_path};
 use crate::error::Result;
+use crate::fs::vfs_join;
 use crate::interpreter::ExecResult;
 use crate::limits::{BudgetedBytes, BudgetedString, BudgetedVec, LimitExceeded};
 
@@ -586,7 +587,7 @@ fn add_directory_to_tar<'a>(
         // Add directory contents
         let entries = ctx.fs.read_dir(path).await?;
         for entry in entries {
-            let child_path = path.join(&entry.name);
+            let child_path = vfs_join(path, &entry.name);
             let child_name = format!("{}/{}", name, entry.name);
 
             if entry.metadata.file_type.is_dir() {
@@ -661,7 +662,12 @@ fn validate_tar_for_extraction(
 
         if !to_stdout {
             let entry = Path::new(name.as_ref());
-            if entry.is_absolute()
+            // `has_root()` rather than `is_absolute()`: a `/etc/passwd` entry
+            // carries no drive prefix, so on Windows `is_absolute()` is false
+            // and this arm never fired (issue #2425's class). The
+            // `starts_with(extract_base)` arm below still blocked the write.
+            if entry.has_root()
+                || entry.is_absolute()
                 || entry
                     .components()
                     .any(|component| matches!(component, std::path::Component::ParentDir))

bashkit-0.18.2/crates/bashkit/src/builtins/atomic_write.rs

@@ -0,0 +1,92 @@
+//! Shared atomic in-place file replacement for builtins that rewrite files.
+//!
+//! THREAT[TM-FS-016]: write a sibling temporary file, copy the original mode
+//! onto it, and rename only after the new content is fully written. Any failure
+//! leaves the source file untouched and removes the temporary.
+//!
+//! Extracted from `yq` so `sed -i` gets the same guarantees (issue #2427,
+//! finding E): the previous `sed -i` wrote straight through
+//! `FileSystem::write_file`, which recreates the entry with mode 0644 and loses
+//! the original content if the write fails part-way.
+
+use std::path::Path;
+
+use crate::fs::vfs_join;
+
+/// Failpoint names for one call site. Each builtin supplies its own so the
+/// security failpoint suite can target them independently.
+#[cfg_attr(not(feature = "failpoints"), allow(dead_code))]
+pub(crate) struct AtomicFailpoints {
+    pub(crate) allocate: &'static str,
+    pub(crate) chmod: &'static str,
+    pub(crate) rename: &'static str,
+}
+
+pub(crate) async fn atomic_replace(
+    fs: &dyn crate::fs::FileSystem,
+    target: &Path,
+    content: &[u8],
+    tool: &str,
+    failpoints: AtomicFailpoints,
+) -> std::result::Result<(), String> {
+    let parent = target.parent().unwrap_or_else(|| Path::new("/"));
+    #[cfg(feature = "failpoints")]
+    if injected_failure(failpoints.allocate, "exhausted") {
+        return Err("cannot allocate temporary file".to_string());
+    }
+    let mut temp = None;
+    for _ in 0..16 {
+        let mut suffix = [0u8; 8];
+        getrandom::fill(&mut suffix)
+            .map_err(|_| "cannot generate temporary filename".to_string())?;
+        let suffix = suffix
+            .iter()
+            .map(|byte| format!("{byte:02x}"))
+            .collect::<String>();
+        let candidate = vfs_join(parent, format!(".bashkit-{tool}-{suffix}.tmp"));
+        if !fs
+            .exists(&candidate)
+            .await
+            .map_err(|error| error.to_string())?
+        {
+            temp = Some(candidate);
+            break;
+        }
+    }
+    let temp = temp.ok_or_else(|| "cannot allocate temporary file".to_string())?;
+    if let Err(error) = fs.write_file(&temp, content).await {
+        let _ = fs.remove(&temp, false).await;
+        return Err(format!("cannot write temporary file: {error}"));
+    }
+    #[cfg(feature = "failpoints")]
+    if injected_failure(failpoints.chmod, "error") {
+        let _ = fs.remove(&temp, false).await;
+        return Err("cannot preserve file mode: injected failure".to_string());
+    }
+    if let Ok(metadata) = fs.stat(target).await
+        && let Err(error) = fs.chmod(&temp, metadata.mode).await
+    {
+        let _ = fs.remove(&temp, false).await;
+        return Err(format!("cannot preserve file mode: {error}"));
+    }
+    #[cfg(feature = "failpoints")]
+    if injected_failure(failpoints.rename, "error") {
+        let _ = fs.remove(&temp, false).await;
+        return Err(format!(
+            "cannot replace '{}': injected failure",
+            target.display()
+        ));
+    }
+    if let Err(error) = fs.rename(&temp, target).await {
+        let _ = fs.remove(&temp, false).await;
+        return Err(format!("cannot replace '{}': {error}", target.display()));
+    }
+    #[cfg(not(feature = "failpoints"))]
+    let _ = failpoints;
+    Ok(())
+}
+
+#[cfg(feature = "failpoints")]
+fn injected_failure(name: &str, expected: &str) -> bool {
+    fail::eval(name, |action| action.as_deref() == Some(expected)).unwrap_or(false)
+}

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/src/builtins/awk/interpreter.rs

@@ -18,6 +18,7 @@ use crate::fs::{FileSystem, normalize_path};
 use crate::limits::ExecutionLimits;
 // On wasm32 there is no OS thread to bridge the sync AWK evaluator to the async
 // VFS, so redirected reads/writes drive the VFS future inline with now_or_never.
+use crate::fs::vfs_join;
 #[cfg(target_family = "wasm")]
 use futures_util::FutureExt;
 
@@ -234,7 +235,7 @@ impl AwkInterpreter {
         let resolved = if path_str.starts_with('/') {
             PathBuf::from(path_str)
         } else {
-            self.cwd.join(path_str)
+            vfs_join(&self.cwd, path_str)
         };
         normalize_path(&resolved).to_string_lossy().to_string()
     }
@@ -1200,7 +1201,7 @@ impl AwkInterpreter {
         let resolved = if path.starts_with('/') {
             PathBuf::from(path)
         } else {
-            self.cwd.join(path)
+            vfs_join(&self.cwd, path)
         };
         let key = resolved.to_string_lossy().into_owned();
         // Bound the number of distinct redirect targets (DoS guard, parity with

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/src/builtins/awk/mod.rs

@@ -451,6 +451,7 @@ fn normalize_awk_newlines(input: &str) -> String {
 
 mod interpreter;
 mod parser;
+use crate::fs::vfs_join;
 use interpreter::{AwkFlow, AwkInterpreter};
 use parser::AwkParser;
 
@@ -535,7 +536,7 @@ impl Builtin for Awk {
                     let path = if ctx.args[i].starts_with('/') {
                         std::path::PathBuf::from(&ctx.args[i])
                     } else {
-                        ctx.cwd.join(&ctx.args[i])
+                        vfs_join(ctx.cwd, &ctx.args[i])
                     };
                     program_str = match read_text_file(&*ctx.fs, &path, "awk").await {
                         Ok(t) => t,
@@ -615,7 +616,7 @@ impl Builtin for Awk {
                 let path = if file.starts_with('/') {
                     std::path::PathBuf::from(file)
                 } else {
-                    ctx.cwd.join(file)
+                    vfs_join(ctx.cwd, file)
                 };
 
                 let text = match read_text_file(&*ctx.fs, &path, "awk").await {

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/src/builtins/cat.rs

@@ -12,6 +12,7 @@ use std::path::Path;
 
 use super::{Builtin, Context};
 use crate::error::Result;
+use crate::fs::vfs_join;
 use crate::interpreter::ExecResult;
 
 pub struct Cat;
@@ -72,7 +73,7 @@ impl Builtin for Cat {
                 let path = if Path::new(file).is_absolute() {
                     file.clone()
                 } else {
-                    ctx.cwd.join(file).to_string_lossy().into_owned()
+                    vfs_join(ctx.cwd, file).to_string_lossy().into_owned()
                 };
                 match ctx.fs.read_file(Path::new(&path)).await {
                     Ok(bytes) => raw.extend_from_slice(&bytes),

{bashkit-0.18.1 → bashkit-0.18.2}/crates/bashkit/src/builtins/checksum.rs

@@ -7,6 +7,7 @@ use sha2::{Digest, Sha256};
 
 use super::{Builtin, Context};
 use crate::error::Result;
+use crate::fs::vfs_join;
 use crate::interpreter::ExecResult;
 
 /// md5sum builtin - compute MD5 message digest
@@ -100,7 +101,7 @@ async fn checksum_execute<D: Digest>(ctx: &Context<'_>, cmd: &str) -> Result<Exe
             let path = if file.starts_with('/') {
                 std::path::PathBuf::from(file)
             } else {
-                ctx.cwd.join(file)
+                vfs_join(ctx.cwd, file)
             };
 
             match ctx.fs.read_file(&path).await {