bare-operating-system/packages/bare-os-seeder/kernel/bin/setfacl

/* BARE_OS_BIN_API 1.0.0 — bump when staged /bin script semantics change (see developer guide). */
/** Shared helpers for drive-resident /bin scripts (prepended before each command). */
function bareStdin(ctx) {
  return typeof ctx.shellStdin === 'string' ? ctx.shellStdin : ''
}

/** @param {number} mode @param {'file' | 'directory' | 'symlink'} type */
function bareFormatModeString(mode, type) {
  const typeChar = type === 'directory' ? 'd' : type === 'symlink' ? 'l' : '-'
  const perm = mode & 0o777
  const r = (bit) => (perm & bit ? 'r' : '-')
  const w = (bit) => (perm & bit ? 'w' : '-')
  const x = (bit) => (perm & bit ? 'x' : '-')
  return (
    typeChar +
    r(0o400) +
    w(0o200) +
    x(0o100) +
    r(0o040) +
    w(0o020) +
    x(0o010) +
    r(0o004) +
    w(0o002) +
    x(0o001)
  )
}

/** @param {number} mtimeMs @param {number} [nowMs] */
function bareFormatLsMtime(mtimeMs, nowMs) {
  const now = nowMs != null ? nowMs : Date.now()
  const d = new Date(mtimeMs)
  const months = [
    'Jan',
    'Feb',
    'Mar',
    'Apr',
    'May',
    'Jun',
    'Jul',
    'Aug',
    'Sep',
    'Oct',
    'Nov',
    'Dec'
  ]
  const mon = months[d.getMonth()]
  const day = String(d.getDate()).padStart(2, ' ')
  const sixMo = 180 * 24 * 3600 * 1000
  if (Math.abs(now - mtimeMs) > sixMo) {
    const yr = String(d.getFullYear()).padStart(4, ' ')
    return mon + ' ' + day + '  ' + yr
  }
  const hh = String(d.getHours()).padStart(2, '0')
  const mm = String(d.getMinutes()).padStart(2, '0')
  return mon + ' ' + day + ' ' + hh + ':' + mm
}

/** @param {number} size */
function barePosixBlocks(size) {
  return Math.ceil(Number(size) / 512) || 0
}

/**
 * Raw stdout for NUL/binary when **`process.stdout.write`** is missing.
 * If **`ctx.bareOsBinWrite(Uint8Array|string)`** is set (tests / host), use it.
 * @param {Record<string, unknown>} ctx
 * @param {string | Uint8Array} chunk
 * @returns {boolean}
 */
function bareOsEmitRaw(ctx, chunk) {
  if (typeof ctx.bareOsBinWrite === 'function') {
    const b4 = ctx.b4a
    const u8 =
      typeof chunk === 'string'
        ? b4 && typeof b4.from === 'function'
          ? b4.from(chunk)
          : new TextEncoder().encode(chunk)
        : chunk
    ctx.bareOsBinWrite(u8 instanceof Uint8Array ? u8 : new Uint8Array(u8))
    return true
  }
  const w = globalThis.process?.stdout?.write
  if (typeof w === 'function') {
    w.call(globalThis.process.stdout, chunk)
    return true
  }
  return false
}

/**
 * setfacl — store or clear synthetic ACL sidecar text (PATH.bare_acl).
 * Without -b, reads ACL lines from ctx.shellStdin (same pattern as patch).
 */

async function run(ctx, argv) {
  let clear = false
  /** @type {string[]} */
  const modify = []
  /** @type {string[]} */
  const files = []
  for (let i = 1; i < argv.length; i++) {
    const a = argv[i]
    if (a === '-b' || a === '--remove-all') {
      clear = true
      continue
    }
    if (a === '-m' || a === '--modify') {
      const spec = argv[i + 1]
      if (!spec) {
        ctx.console.error('setfacl: -m requires ACL entry')
        ctx.exitCode = 1
        return
      }
      modify.push(spec)
      i++
      continue
    }
    if (a === '--help' || a === '-h') {
      ctx.console.log(
        'usage: setfacl [-b] [-m ENTRY] PATH\nWrites ACL text from stdin when not clearing.'
      )
      return
    }
    if (a.startsWith('-')) {
      ctx.console.error('setfacl: unsupported option ' + a)
      ctx.exitCode = 1
      return
    }
    files.push(a)
  }
  if (files.length !== 1) {
    ctx.console.error('usage: setfacl [-b] PATH')
    ctx.exitCode = 1
    return
  }
  const path = files[0]
  const side = path + '.bare_acl'
  try {
    const st = await ctx.vfs.stat(path)
    if (!st) {
      ctx.console.error('setfacl: ' + path + ': No such file')
      ctx.exitCode = 1
      return
    }
    if (clear) {
      try {
        await ctx.vfs.unlink(side)
      } catch {
        /* ignore missing sidecar */
      }
      return
    }
    let body = ''
    if (modify.length) {
      const prev = await ctx.vfs.readFile(side)
      const lines = prev
        ? ctx.b4a
            .toString(prev)
            .split(/\r?\n/)
            .map((x) => x.trim())
            .filter(Boolean)
        : []
      const byKey = new Map()
      for (const ln of lines) {
        const k = ln.split(':', 2).join(':')
        byKey.set(k, ln)
      }
      for (const m of modify) {
        const spec = String(m).trim()
        if (!spec.includes(':')) {
          ctx.console.error('setfacl: invalid ACL entry ' + spec)
          ctx.exitCode = 1
          return
        }
        const key = spec.split(':', 2).join(':')
        byKey.set(key, spec)
      }
      body = [...byKey.values()].join('\n')
    } else {
      const text = bareStdin(ctx)
      if (!text || !String(text).trim()) {
        ctx.console.error('setfacl: ACL text required on stdin')
        ctx.exitCode = 1
        return
      }
      body = String(text)
    }
    const finalBody = body.endsWith('\n') ? body : body + '\n'
    await ctx.vfs.writeFile(side, ctx.b4a.from(finalBody))
  } catch (e) {
    ctx.console.error('setfacl: ' + (e && e.message ? e.message : String(e)))
    ctx.exitCode = 1
  }
}