@poe-platform/safe-bash 0.1.675 → 0.1.677

package/README.md

@@ -49,7 +49,8 @@ filesystem changes persist in the supplied `fs`.
 - Pipelines (`|`, `|&`), lists (`;`, `&&`, `||`, `!`), file redirection (`<`, `>`,
   `>>`), descriptor redirection such as `2>&1`, here-documents, and here-strings.
 - `if`/`elif`/`else`, `case`, `for name in …`, `while`, `until`, functions,
-  groups `{ …; }`, subshells `( … )`, `[[ … ]]`, `(( … ))`, and indexed arrays.
+  groups `{ …; }`, subshells `( … )` (including adjacent nested subshells),
+  `[[ … ]]`, arithmetic commands `(( … ))`, and indexed arrays.
 - Virtual script files through `sh`, `bash`, or executable paths; `source`/`.`
   runs a script in the current shell. `set -e`, `set -u`, and `set -o pipefail`
   control failures; `shopt -s dotglob` includes dotfiles in globs.
@@ -85,7 +86,7 @@ These plugins are separate from `agentCommands()`; pass them to `shell.use(...)`
 | `curl` | `networkCommands({ authorize, transport?, limits?, replace? })`: required authorization on every request, redirect, and retry. Node uses the native HTTP transport; Workers can inject `createFetchTransport()`. `createOriginAuthorizer([...])` provides exact origin/hostname policy; its omitted allowlist is deliberately `*` (allow all). [Options and limits](src/commands/network/types.ts). |
 | `node` | `nodeCommands({ runtime, limits?, replace? })`: runs JavaScript with an injected SafeJS runtime, virtual files, and shell streams. [Usage and supported subset](src/commands/node/README.md). |
 | `llm` | `llmCommands({ providers, defaultModel?, replace? })`: opt-in model routing, sandbox attachments and streamed text/binary output. Includes injected-transport OpenAI and ElevenLabs reference providers. [Configuration and provider contract](src/commands/llm/README.md). |
-| `playwright-cli` | Standard browser commands through a host-owned adapter. `installPlaywrightNetworkPolicy` from `/playwright` supports browser-native redirects with per-hop bounded host fetch and independent direct-egress denial. [Network policy and lifecycle](src/contracts/playwright-network-policy.md). |
+| `playwright-cli` | Standard browser commands through a host-owned adapter. `installPlaywrightNetworkPolicy` from `/playwright` supports browser-native redirects with per-hop bounded host HTTP fetch and independent direct HTTP/WebSocket denial. Cloudflare guardrails do not establish WebRTC/UDP denial or all-protocol accounting; hosts requiring those guarantees must refuse this integration. [Network policy and lifecycle](src/contracts/playwright-network-policy.md). |
 
 Storage can be in memory, a rooted host directory, S3-compatible storage, or WebDAV,
 with read-only wrappers, mounts, and overlays. Choose and configure it explicitly;

package/dist/safe-bash/chunks/{chunk-AJMYOERL.js → chunk-MP5J46WX.js}

@@ -3088,9 +3088,9 @@ function decodeDouble(raw) {
       continue;
     }
     if (character !== "\\") {
-      const codePoint2 = character.codePointAt(0);
+      const codePoint2 = raw.codePointAt(index);
       if (codePoint2 === 0) throw syntax();
-      result += character;
+      result += String.fromCodePoint(codePoint2);
       if (codePoint2 > 65535) index++;
       continue;
     }
@@ -3156,7 +3156,7 @@ function projectDoubleBytes(raw, start = 0, end = raw.length) {
       continue;
     }
     if (character !== "\\") {
-      const codePoint2 = character.codePointAt(0);
+      const codePoint2 = raw.codePointAt(index);
       if (codePoint2 === 0) throw syntax();
       bytes += utf8Width(codePoint2);
       if (codePoint2 > 65535) index++;
@@ -3228,7 +3228,7 @@ function projectSingleBytes(raw, start = 0, end = raw.length) {
       if (character === "\n" || raw[index] === "\n") while (raw[index + 1] === " " || raw[index + 1] === "	") index++;
       bytes++;
     } else {
-      const codePoint = character.codePointAt(0);
+      const codePoint = raw.codePointAt(index);
       bytes += utf8Width(codePoint);
       if (codePoint > 65535) index++;
     }
@@ -3960,7 +3960,7 @@ async function* parseYamlDocuments(text, work, ledger, admittedRawBytes, lineOff
       let codePoints = 0;
       for (let index = 0; index < line.text.length; index++) {
         const character = line.text[index];
-        const point = character.codePointAt(0);
+        const point = line.text.codePointAt(index);
         if (doubleQuoted) {
           if (escaped) escaped = false;
           else if (character === "\\") escaped = true;
@@ -5200,4 +5200,4 @@ export {
   createYqCommands,
   yqCommands
 };
-//# sourceMappingURL=chunk-AJMYOERL.js.map
+//# sourceMappingURL=chunk-MP5J46WX.js.map