hsh

FWIW there are several Haskell and OCaml shell projects on this wiki page, which is editable: Internal DSLs for Shell - https://github.com/oils-for-unix/oils/wiki/Internal-DSLs-for... and ones in many other languages like Scheme and Lisp e.g. https://github.com/jgoerzen/hsh/wiki https://github.com/luke-clifton/shh/tree/master/shh And also a page of alternative shells: https://github.com/oils-for-unix/oils/wiki/Alternative-Shell...

FWIW there is a big list of similar libraries / internal DSLs in nearly all Lisps, and nearly all statically typed functional languages here: https://github.com/oilshell/oil/wiki/Internal-DSLs-for-Shell e.g. points to another Haskell project, which may be old - https://github.com/jgoerzen/hsh/wiki Which is related to the list of free-standing shells: https://github.com/oilshell/oil/wiki/Alternative-Shells

Your quoting of "$0" does not protect it from the shell. An attacker need only provide an input such as: /tmp"; rm -rf /; " There are pipeline libraries that avoid the shell for several languages. Some I can recommend: * libpipeline http://libpipeline.nongnu.org/ easy, if somewhat verbose, pipeline construction in C. * hsh https://github.com/jgoerzen/hsh/wiki makes pipelines in haskell, using operators so they really look like pipelines, but without involving the shell. Example: "ls -l" -|- "wc -l"