feat(archives): add bzip2 interoperability

Cargo.toml

@@ -56,6 +56,7 @@ chrono = "0.4"
 
 # Compression
 flate2 = "1"
+bzip2 = { version = "0.6.1", default-features = true }
 
 # Base64 encoding
 base64 = "0.23"

crates/bashkit/Cargo.toml

@@ -64,8 +64,9 @@ jaq-core = { workspace = true, optional = true }
 jaq-std = { workspace = true, optional = true }
 jaq-json = { workspace = true, optional = true }
 
-# Compression (for gzip/gunzip)
+# Compression (for gzip/gunzip and bzip2/bunzip2)
 flate2 = { workspace = true }
+bzip2 = { workspace = true }
 
 # Base64 encoding (for base64 builtin and HTTP basic auth)
 base64 = { workspace = true }

crates/bashkit/docs/compatibility.md

@@ -106,9 +106,12 @@ for sandbox security reasons. See the compliance spec for details.
 | `file` | (none) | Detect file type via magic bytes |
 | `less` | (none) | View file (behaves like cat in virtual mode) |
 | `stat` | `-c FORMAT` | Display file metadata |
-| `tar` | `-c`, `-x`, `-t`, `-v`, `-f`, `-z` | Archive operations |
+| `tar` | `-c`, `-x`, `-t`, `-v`, `-f`, `-z`/`--gzip`, `-j`/`--bzip2` | Archive operations; auto-detects gzip/bzip2 while reading |
 | `gzip` | `-d`, `-k`, `-f` | Compress files |
 | `gunzip` | `-k`, `-f` | Decompress files |
+| `bzip2` | `-c`, `-d`, `-z`, `-k`, `-f` | Compress or decompress bzip2 streams/files |
+| `bunzip2` | `-c`, `-k`, `-f` | Decompress bzip2 streams/files |
+| `bzcat` | | Decompress bzip2 streams/files to stdout |
 | `env` | `[VAR=val]` | Print/modify environment |
 | `printenv` | `[VAR]` | Print environment variables |
 | `history` | (none) | Command history (limited in virtual mode) |

crates/bashkit/docs/threat-model.md

@@ -41,6 +41,7 @@ through configurable limits.
 | Large file (TM-DOS-005) | `dd if=/dev/zero bs=1G count=100` | `max_file_size` limit | MITIGATED |
 | Many files (TM-DOS-006) | Create 1M files | `max_file_count` | MITIGATED |
 | Zip bomb (TM-DOS-007) | `gunzip bomb.gz` | Decompression limit | MITIGATED |
+| Archive allocation-before-check (TM-DOS-102) | Tiny gzip/bzip2 input expands before quota accounting | Check size/ratio and lease live bytes before output-buffer growth | MITIGATED |
 | Tar bomb (TM-DOS-008) | `tar -xf bomb.tar` | FS limits | MITIGATED |
 | Recursive copy (TM-DOS-009) | `cp -r /tmp /tmp/copy` | FS limits | MITIGATED |
 | Append flood (TM-DOS-010) | `while true; do echo x >> f; done` | FS + loop limits | MITIGATED |
@@ -159,6 +160,7 @@ let bash = Bash::builder()
 | `time` report amplification (TM-DOS-099) | Attacker-controlled `-f` format expands repeatedly or targets the VFS with `-o` | Incremental rendering is capped by the stderr limit before emission or file replacement | MITIGATED |
 | jq control normalization amplification (TM-DOS-100) | Literal controls expand sixfold as `\u00XX` | Charge single-pass work and lease live bytes before allocation growth | MITIGATED |
 | yq structured-data amplification (TM-DOS-101) | Deep/multi-document YAML or JSON, runaway filters, expanded output | Parser depth and 4096-document caps, aggregate budgets, shared jaq work/deadline/output limits, final render cap | MITIGATED |
+| Archive decoder pre-allocation (TM-DOS-102) | Compressed output grows before memory checks | Validate and charge each decoder chunk before reserve/copy | MITIGATED |
 
 ### Sandbox Escape (TM-ESC-*)