@poe-platform/safe-bash 0.1.750 → 0.1.751

package/dist/safe-bash/shell/runtime.js

@@ -9796,10 +9796,19 @@ export class Runtime {
             // Matching publishes BASH_REMATCH. A sibling may still require fallback,
             // so only a standalone match can be attempted without replaying writes.
             if (expr.operator === "=~")
-                return depth === 0 && this.extractSimpleErePattern(expr.right, rawState) !== undefined;
+                return !requireTotal && depth === 0 && this.extractSimpleErePattern(expr.right, rawState) !== undefined;
             if (expr.operator === "==" || expr.operator === "=" || expr.operator === "!=") {
                 if (expr.right.parts.length > 0 && expr.right.parts.every(p => p.quoted))
                     return true;
+                if (requireTotal) {
+                    // Variable patterns can change during the loop. Only admit a static
+                    // pattern whose synchronous matcher is guaranteed to return a result.
+                    if (!expr.right.parts.every((p, idx) => p.kind === "text" && !p.byteValue && (p.quoted || idx > 0 || !p.value.startsWith("~"))))
+                        return false;
+                    const pattern = expr.right.parts.map(p => p.kind === "text" ? (p.quoted ? p.value.replace(/[\\*?[\]()]/g, "\\$&") : p.value) : "").join("");
+                    const work = { remaining: 4096, signal: this.signal, exhausted: () => this.budget.fail("maxExpansionBytes") };
+                    return tryMatchesPatternSync(pattern, "", work, false, true) !== undefined;
+                }
                 if (expr.right.parts.length > 0 && expr.right.parts.every((p, idx) => (p.kind === "text" && !p.byteValue && (p.quoted || idx > 0 || !p.value.startsWith("~"))) || (p.kind === "variable" && !p.indirect && !p.prefixNames && !p.length && !p.substring && !p.transform && p.operator === undefined && getArraySelector(p) === undefined)))
                     return true;
                 return false;
@@ -9988,7 +9997,10 @@ export class Runtime {
                     return undefined;
                 const syncTouched = this._syncArithRawWriteOnly ? this._syncArithTouched : undefined;
                 const lTrim = left.trim() || "0";
-                let lNum = resolveSimpleArithOperand(lTrim, rawState, monitor, store, syncTouched);
+                // Preserve all signed 64-bit literal digits instead of rounding through Number.
+                let lNum = lTrim.length > 13 && /^-?[0-9]{1,19}$/.test(lTrim)
+                    ? BigInt.asIntN(64, BigInt(lTrim))
+                    : resolveSimpleArithOperand(lTrim, rawState, monitor, store, syncTouched);
                 if (lNum === undefined) {
                     const lExpr = tryEvalSimpleExpandedArith(lTrim, rawState, monitor, store, syncTouched);
                     if (lExpr !== undefined)
@@ -9997,7 +10009,9 @@ export class Runtime {
                 if (lNum === undefined)
                     return undefined;
                 const rTrim = right.trim() || "0";
-                let rNum = resolveSimpleArithOperand(rTrim, rawState, monitor, store, syncTouched);
+                let rNum = rTrim.length > 13 && /^-?[0-9]{1,19}$/.test(rTrim)
+                    ? BigInt.asIntN(64, BigInt(rTrim))
+                    : resolveSimpleArithOperand(rTrim, rawState, monitor, store, syncTouched);
                 if (rNum === undefined) {
                     const rExpr = tryEvalSimpleExpandedArith(rTrim, rawState, monitor, store, syncTouched);
                     if (rExpr !== undefined)
@@ -10005,6 +10019,10 @@ export class Runtime {
                 }
                 if (rNum === undefined)
                     return undefined;
+                if (typeof lNum !== typeof rNum) {
+                    lNum = BigInt(lNum);
+                    rNum = BigInt(rNum);
+                }
                 let ok;
                 switch (expr.operator) {
                     case "-eq":
@@ -13026,7 +13044,6 @@ export class Runtime {
                         rawState.substitutionStatus = 0;
                         if (rawState.variables._ !== undefined)
                             delete rawState.variables._;
-                        rawState.lastArgument = fnArgs.length > 0 ? fnArgs[fnArgs.length - 1] : w0Plain;
                         const positional = rawState.positional;
                         let fnArgsBytes = 0;
                         for (let i = 0; i < fnArgs.length; i++)
@@ -13240,7 +13257,6 @@ export class Runtime {
                                 rawState.substitutionStatus = 0;
                                 if (rawState.variables._ !== undefined)
                                     delete rawState.variables._;
-                                rawState.lastArgument = lastCmdArg;
                                 rawState.depth++;
                                 let evalStatus;
                                 try {
@@ -13250,6 +13266,7 @@ export class Runtime {
                                     rawState.depth--;
                                 }
                                 if (typeof evalStatus === "number") {
+                                    rawState.lastArgument = lastCmdArg;
                                     if (cachedUnit.script.lists.length === 0) {
                                         const activeStore = monitor.store;
                                         const activeExisting = activeStore?.get("PIPESTATUS");
@@ -13589,6 +13606,11 @@ export class Runtime {
                 continue;
             }
             if (part.kind === "variable") {
+                // Unsubscripted array references expand element zero through the normal
+                // evaluator. fastValueWord cannot guarantee that expansion throughout
+                // a loop, so reject it before executing any loop effects.
+                if (stateMonitor(rawState)?.store?.get(part.name))
+                    return false;
                 // These expansions can require multiple fields or asynchronous quoting
                 // as loop state changes. Decide before the loop produces any effects.
                 if (this._syncLoopFnCheckDepth > 0 && (part.substring || getArraySelector(part)?.kind === "element"))
@@ -13887,11 +13909,11 @@ export class Runtime {
                 if (isNumOp && checkIntVars) {
                     const isGuaranteedIntWord = (w) => {
                         if (w.plain !== undefined)
-                            return /^-?[0-9]+$/.test(w.plain);
+                            return /^-?[0-9]{1,16}$/.test(w.plain);
                         if (w.parts.length === 1) {
                             const p0 = w.parts[0];
                             if (p0.kind === "arithmetic")
-                                return true;
+                                return false;
                             if (p0.kind === "variable" && !p0.indirect && !p0.prefixNames && !p0.substring && !p0.transform && p0.operator === undefined && getArraySelector(p0) === undefined) {
                                 if (script) {
                                     for (const lst of script.lists) {
@@ -13899,14 +13921,14 @@ export class Runtime {
                                             const c0 = pl.commands[0];
                                             if (c0?.kind === "simple" && c0.words.length === 1) {
                                                 const asg = this.assignment(c0.words[0]);
-                                                if (asg?.name === p0.name && (!asg.value.plain || !/^-?[0-9]+$/.test(asg.value.plain)))
+                                                if (asg?.name === p0.name && (!asg.value.plain || !/^-?[0-9]{1,16}$/.test(asg.value.plain)))
                                                     return false;
                                             }
                                         }
                                     }
                                 }
                                 const cur = rawState.variables[p0.name];
-                                return cur === undefined || /^-?[0-9]+$/.test(cur);
+                                return cur === undefined || /^-?[0-9]{1,16}$/.test(cur);
                             }
                         }
                         return false;
@@ -14577,11 +14599,16 @@ export class Runtime {
                         (w0DevPlain === "pwd" || this.commands.has(w0DevPlain))) {
                         const devWordOk = (w) => this.isPureSyncValueWord(w, rawState) &&
                             w.parts.every(p => p.quoted || (p.kind === "text" && p.value.length > 0 && !p.value.includes(" ") && !p.value.includes("\t") && !p.value.includes("\n") && !p.value.includes("{") && !hasGlobOrEscape(p.value, true)));
+                        // Only a nonempty literal prefix proves an expansion cannot become an option.
+                        const devOperandOk = (w) => {
+                            const first = w.parts[0];
+                            return first?.kind === "text" && first.value.length > 0 && !first.value.startsWith("-") && devWordOk(w);
+                        };
                         const devShapeOk = (w0DevPlain === "pwd" && cmd.words.length === 1) ||
-                            ((w0DevPlain === "dirname" || w0DevPlain === "echo") && cmd.words.length === 2 && !cmd.words[1].plain?.startsWith("-") && devWordOk(cmd.words[1])) ||
-                            (w0DevPlain === "basename" && ((cmd.words.length === 2 && !cmd.words[1].plain?.startsWith("-") && devWordOk(cmd.words[1])) ||
-                                (cmd.words.length === 3 && !cmd.words[1].plain?.startsWith("-") && devWordOk(cmd.words[1]) && devWordOk(cmd.words[2])) ||
-                                (cmd.words.length === 4 && cmd.words[1].plain === "-s" && cmd.words[2].plain !== undefined && !cmd.words[3].plain?.startsWith("-") && devWordOk(cmd.words[3]))));
+                            ((w0DevPlain === "dirname" || w0DevPlain === "echo") && cmd.words.length === 2 && devOperandOk(cmd.words[1])) ||
+                            (w0DevPlain === "basename" && ((cmd.words.length === 2 && devOperandOk(cmd.words[1])) ||
+                                (cmd.words.length === 3 && devOperandOk(cmd.words[1]) && devWordOk(cmd.words[2])) ||
+                                (cmd.words.length === 4 && cmd.words[1].plain === "-s" && cmd.words[2].plain !== undefined && devOperandOk(cmd.words[3]))));
                         if (devShapeOk)
                             continue;
                     }
@@ -16686,7 +16713,24 @@ export class Runtime {
                     }
                     if (command.kind !== "simple" || hasShellFunction(rawState, command.words[0]?.plain ?? "") || command.words.some(word => getArrayAssignment(word) !== undefined))
                         return false;
-                    const w0 = command.words[0]?.plain;
+                    let commandIndex = 0;
+                    while (commandIndex < command.words.length && this.assignment(command.words[commandIndex]))
+                        commandIndex++;
+                    const commandWord = command.words[commandIndex];
+                    if (!commandWord?.parts.every(part => part.kind === "text"))
+                        return false;
+                    const w0 = commandWord.parts.map(part => part.kind === "text" ? part.value : "").join("");
+                    // read targets and printf -v targets may be quoted or expanded. Both can
+                    // invalidate the integer assumption used by induction formatting.
+                    if (w0 === "read")
+                        return false;
+                    if (w0 === "printf") {
+                        const option = command.words[commandIndex + 1];
+                        if (!option?.parts.every(part => part.kind === "text"))
+                            return false;
+                        if (option.parts.map(part => part.kind === "text" ? part.value : "").join("") === "-v")
+                            return false;
+                    }
                     if (w0 === "let" || w0 === "declare" || w0 === "typeset" || w0 === "local" || w0 === "export" || w0 === "unset" || w0 === "mapfile" || w0 === "readarray")
                         return false;
                     if (inductionName !== undefined) {
@@ -16695,10 +16739,6 @@ export class Runtime {
                             return p0?.kind === "text" && !p0.quoted && (p0.value.startsWith(inductionName + "=") || p0.value.startsWith(inductionName + "+="));
                         }))
                             return false;
-                        if (w0 === "read" && (inductionName === "REPLY" || command.words.slice(1).some(w => w.plain === inductionName || w.plain === "-a" || w.plain === "-ra" || w.plain === "-ar")))
-                            return false;
-                        if (w0 === "printf" && command.words[1]?.plain === "-v" && command.words[2]?.plain === inductionName)
-                            return false;
                     }
                     for (const word of [...command.words, ...command.redirects.map(redirect => redirect.target)])
                         for (const part of word.parts) {
@@ -16977,6 +17017,7 @@ export class Runtime {
     execSyncLocalDeclStep(decl, rawState, io, monitor, touched, line) {
         const locals = (decl.kind === "local" || decl.kind === "declare") && rawState.locals.length > 0 ? rawState.locals[rawState.locals.length - 1] : undefined;
         let lastArg = decl.kind;
+        const values = decl.items.map(item => item.value === undefined ? undefined : this.fastValueWord(item.value, rawState, io, false, false, false, rawState.braceexpand !== false, 0, line));
         for (let i = 0; i < decl.items.length; i++) {
             const item = decl.items[i];
             const isNewLocal = locals ? !locals.has(item.name) : false;
@@ -16994,7 +17035,7 @@ export class Runtime {
                 touched.add(item.name);
             }
             if (item.value !== undefined) {
-                const val = this.fastValueWord(item.value, rawState, io, false, false, false, rawState.braceexpand !== false, 0, line);
+                const val = values[i];
                 if (item.append) {
                     const curRaw = rawState.variables[item.name];
                     const curStr = curRaw === undefined ? "" : (touched.has(item.name) ? curRaw : (monitor.values.get(item.name, curRaw) ?? curRaw));
@@ -17004,7 +17045,7 @@ export class Runtime {
                     rawState.variables[item.name] = val;
                 }
                 touched.add(item.name);
-                lastArg = `${item.name}=${rawState.variables[item.name]}`;
+                lastArg = `${item.name}${item.append ? "+=" : "="}${val}`;
             }
             else {
                 lastArg = item.name;
@@ -17103,7 +17144,28 @@ export class Runtime {
         if (this._syncStdoutBatch.length >= 8192)
             this.flushSyncStdoutBatch(io);
     }
+    runSyncDiscardStep(step, rawState, io) {
+        this.budget.fileSystemOperation();
+        const args = step.discardWords.map(word => this.fastValueWord(word, rawState, io, false, false, false, false, 0, step.line));
+        const cmdName = step.cmd.words[0].plain;
+        let output;
+        if (cmdName === "pwd")
+            output = rawState.variables.PWD ?? rawState.cwd;
+        else if (cmdName === "echo")
+            output = args[0];
+        else if (cmdName === "dirname")
+            output = this.evalSyncDirname(args);
+        else
+            output = this.evalSyncBasename(step.discardSuffix === undefined ? args : ["-s", step.discardSuffix, ...args]);
+        const bytes = shellValueByteLength(output) + 1;
+        if (this.budget.bytes + bytes > this.budget.maxOutputBytesSmi && bytes > this.budget.limits.maxOutputBytes - this.budget.bytes)
+            this.budget.fail("maxOutputBytes");
+        this.budget.bytes += bytes;
+        return args[args.length - 1] ?? cmdName;
+    }
     writeSyncRedirectStep(step, encoded, append, mode, rawState, io) {
+        if (this.budget.bytes + encoded.byteLength > this.budget.maxOutputBytesSmi && encoded.byteLength > this.budget.limits.maxOutputBytes - this.budget.bytes)
+            this.budget.fail("maxOutputBytes");
         // The memory fast writer may retain its input; the encoder scratch is reused.
         encoded = encoded.slice();
         if (step.targetDirPrefix !== undefined && step.targetNamePrefix !== undefined) {
@@ -17267,31 +17329,7 @@ export class Runtime {
                     lastArg = pLastArg;
                 }
                 else if (step.isDiscardDevNull && step.discardWords !== undefined) {
-                    this.budget.fileSystemOperation();
-                    const dw = step.discardWords;
-                    const cmdName = step.cmd.words[0].plain;
-                    let evalFirst = "";
-                    let evalLast = cmdName;
-                    for (let wi = 0; wi < dw.length; wi++) {
-                        const v = this.fastValueWord(dw[wi], rawState, io, false, false, false, false, 0, step.line);
-                        if (wi === 0)
-                            evalFirst = v;
-                        evalLast = v;
-                    }
-                    let outChars = 0;
-                    if (cmdName === "pwd")
-                        outChars = (rawState.variables.PWD ?? rawState.cwd).length + 1;
-                    else if (cmdName === "echo")
-                        outChars = evalFirst.length + 1;
-                    else if (cmdName === "dirname")
-                        outChars = dirname(evalFirst).length + 1;
-                    else if (cmdName === "basename") {
-                        const sfx = step.discardSuffix !== undefined ? step.discardSuffix : (dw.length === 2 ? evalLast : undefined);
-                        const baseStr = /^\/+$/u.test(evalFirst) ? "/" : basename(evalFirst);
-                        outChars = (sfx && baseStr !== sfx && baseStr.endsWith(sfx) ? baseStr.length - sfx.length : baseStr.length) + 1;
-                    }
-                    this.budget.bytes += outChars;
-                    lastArg = step.discardSuffix !== undefined ? evalLast : (dw.length > 0 ? evalLast : cmdName);
+                    lastArg = this.runSyncDiscardStep(step, rawState, io);
                 }
                 else if (step.name !== undefined && step.value !== undefined) {
                     rawState.substitutionStatus = 0;
@@ -17851,31 +17889,7 @@ export class Runtime {
                 lastArg = pLastArg;
             }
             else if (step.isDiscardDevNull && step.discardWords !== undefined) {
-                this.budget.fileSystemOperation();
-                const dw = step.discardWords;
-                const cmdName = step.cmd.words[0].plain;
-                let evalFirst = "";
-                let evalLast = cmdName;
-                for (let wi = 0; wi < dw.length; wi++) {
-                    const v = this.fastValueWord(dw[wi], rawState, io, false, false, false, false, 0, step.line);
-                    if (wi === 0)
-                        evalFirst = v;
-                    evalLast = v;
-                }
-                let outChars = 0;
-                if (cmdName === "pwd")
-                    outChars = (rawState.variables.PWD ?? rawState.cwd).length + 1;
-                else if (cmdName === "echo")
-                    outChars = evalFirst.length + 1;
-                else if (cmdName === "dirname")
-                    outChars = dirname(evalFirst).length + 1;
-                else if (cmdName === "basename") {
-                    const sfx = step.discardSuffix !== undefined ? step.discardSuffix : (dw.length === 2 ? evalLast : undefined);
-                    const baseStr = /^\/+$/u.test(evalFirst) ? "/" : basename(evalFirst);
-                    outChars = (sfx && baseStr !== sfx && baseStr.endsWith(sfx) ? baseStr.length - sfx.length : baseStr.length) + 1;
-                }
-                this.budget.bytes += outChars;
-                lastArg = step.discardSuffix !== undefined ? evalLast : (dw.length > 0 ? evalLast : cmdName);
+                lastArg = this.runSyncDiscardStep(step, rawState, io);
             }
             else if (step.name !== undefined && step.value !== undefined) {
                 rawState.substitutionStatus = 0;
@@ -18031,31 +18045,7 @@ export class Runtime {
                     lastArg = pLastArg;
                 }
                 else if (step.isDiscardDevNull && step.discardWords !== undefined) {
-                    this.budget.fileSystemOperation();
-                    const dw = step.discardWords;
-                    const cmdName = step.cmd.words[0].plain;
-                    let evalFirst = "";
-                    let evalLast = cmdName;
-                    for (let wi = 0; wi < dw.length; wi++) {
-                        const v = this.fastValueWord(dw[wi], rawState, io, false, false, false, false, 0, step.line);
-                        if (wi === 0)
-                            evalFirst = v;
-                        evalLast = v;
-                    }
-                    let outChars = 0;
-                    if (cmdName === "pwd")
-                        outChars = (rawState.variables.PWD ?? rawState.cwd).length + 1;
-                    else if (cmdName === "echo")
-                        outChars = evalFirst.length + 1;
-                    else if (cmdName === "dirname")
-                        outChars = dirname(evalFirst).length + 1;
-                    else if (cmdName === "basename") {
-                        const sfx = step.discardSuffix !== undefined ? step.discardSuffix : (dw.length === 2 ? evalLast : undefined);
-                        const baseStr = /^\/+$/u.test(evalFirst) ? "/" : basename(evalFirst);
-                        outChars = (sfx && baseStr !== sfx && baseStr.endsWith(sfx) ? baseStr.length - sfx.length : baseStr.length) + 1;
-                    }
-                    this.budget.bytes += outChars;
-                    lastArg = step.discardSuffix !== undefined ? evalLast : (dw.length > 0 ? evalLast : cmdName);
+                    lastArg = this.runSyncDiscardStep(step, rawState, io);
                 }
                 else if (step.name !== undefined && step.value !== undefined) {
                     rawState.substitutionStatus = 0;
@@ -18990,8 +18980,6 @@ export class Runtime {
                         const rawState = stateMonitor(state)?.raw ?? state;
                         if (rawState.variables._ !== undefined)
                             delete rawState.variables._;
-                        rawState.lastArgument = wordValues[wordValues.length - 1] ?? w0Plain;
-                        state.lastArgument = rawState.lastArgument;
                         return await this.dispatchFastFunction(w0Plain, state.functions.get(w0Plain), wordValues.slice(1), state, originalIO);
                     }
                 }
@@ -20265,8 +20253,10 @@ export class Runtime {
                     const rawState = stateMonitor(state)?.raw ?? state;
                     if (!state._readOnlyStage && rawState.variables._ !== undefined)
                         delete rawState.variables._;
-                    rawState.lastArgument = words.length > 0 ? words[words.length - 1] : "";
-                    state.lastArgument = rawState.lastArgument;
+                    if (!state.functions.has(words[0] ?? "") && !["eval", ".", "source"].includes(words[declarationIndex] ?? "")) {
+                        rawState.lastArgument = words.at(-1) ?? "";
+                        state.lastArgument = rawState.lastArgument;
+                    }
                     if (!words.length)
                         return state.substitutionStatus;
                     const args = words.slice(1);
@@ -20530,8 +20520,10 @@ export class Runtime {
                 const rawState = stateMonitor(state)?.raw ?? state;
                 if (rawState.variables._ !== undefined && !assignments.some(assignment => assignment.name === "_"))
                     delete rawState.variables._;
-                rawState.lastArgument = words.length > 0 ? words[words.length - 1] : "";
-                state.lastArgument = rawState.lastArgument;
+                if (!functionCommand && !["eval", ".", "source"].includes(words[declarationIndex] ?? "")) {
+                    rawState.lastArgument = words.at(-1) ?? "";
+                    state.lastArgument = rawState.lastArgument;
+                }
             }
             if (!words.length)
                 return state.substitutionStatus;
@@ -21402,10 +21394,16 @@ export class Runtime {
                         }
                         if (context.command === "command" || context.command === "builtin" || context.command === "type")
                             return { exitCode: await this.discoveryBuiltin(context, state, io, assignments, defaultPath) };
-                        if (context.command === "." || context.command === "source")
-                            return { exitCode: await this.sourceBuiltin(context, state, { ...io, ...context }, special) };
-                        if (context.command === "eval")
-                            return { exitCode: await this.evalBuiltin(context, state, { ...io, ...context }, special) };
+                        if (context.command === "." || context.command === "source") {
+                            const exitCode = await this.sourceBuiltin(context, state, { ...io, ...context }, special);
+                            state.lastArgument = context.args.at(-1) ?? context.command;
+                            return { exitCode };
+                        }
+                        if (context.command === "eval") {
+                            const exitCode = await this.evalBuiltin(context, state, { ...io, ...context }, special);
+                            state.lastArgument = context.args.at(-1) ?? context.command;
+                            return { exitCode };
+                        }
                         const builtinWork = this.builtin({ ...context, [declarationArrays]: io[declarationArrays] }, state, assignments, (error, diagnostic) => { builtinFailure = { error, diagnostic }; }, bypassFunctions);
                         const builtin = await interruptible(builtinWork, this.signal);
                         if (builtin !== undefined) {
@@ -27908,6 +27906,10 @@ export class Runtime {
                 const core = anchorEnd ? core1.slice(0, -1) : core1;
                 if (core.length === 0 && !anchorStart && !anchorEnd)
                     return undefined;
+                // POSIX-only brackets and leftmost-longest alternatives belong to sed's matcher.
+                if (core.includes("[:") || core.includes("[.") || core.includes("[=") ||
+                    core.includes("[]") || core.includes("[^]") || isExtended && core.includes("|"))
+                    return undefined;
                 let reSrc;
                 if (/^[a-zA-Z0-9_ :;,=-]*$/.test(core)) {
                     if (/\\[1-9]/.test(rep))
@@ -28121,7 +28123,9 @@ export class Runtime {
         const isOnlyMatching = mode.includes("o");
         // POSIX bracket classes, collating symbols and equivalence classes have
         // different meanings in JS RegExp. Let the command matcher parse them.
-        if (isExtended && !isFixed && rawPatterns.some(pattern => pattern.includes("[:") || pattern.includes("[.") || pattern.includes("[=")))
+        if (!isFixed && rawPatterns.some(pattern => pattern.includes("[:") || pattern.includes("[.") || pattern.includes("[=") ||
+            pattern.includes("[]") || pattern.includes("[^]") ||
+            isExtended && pattern.includes("[") && pattern.includes("|")))
             return undefined;
         if (isCount && (isLineNumber || isOnlyMatching || beforeCtx > 0 || afterCtx > 0))
             return undefined;
@@ -28154,15 +28158,19 @@ export class Runtime {
             if (!re)
                 return undefined;
             const out = [];
+            let matched = false;
             for (let li = 0; li < rawLines.length; li++) {
                 const matches = rawLines[li].match(re);
                 if (matches) {
+                    matched = true;
                     for (let mi = 0; mi < matches.length; mi++) {
+                        if (matches[mi].length === 0)
+                            continue;
                         out.push(isLineNumber ? `${li + 1}:${matches[mi]}` : matches[mi]);
                     }
                 }
             }
-            return { lines: out, status: out.length > 0 ? 0 : 1 };
+            return { lines: out, status: matched ? 0 : 1 };
         }
         if (isExtended && isFixed)
             return undefined;
@@ -29455,6 +29463,11 @@ export class Runtime {
         return this.evalSyncSort(rawLines, flag !== undefined ? [flag] : [], false) ?? [...rawLines];
     }
     translateSyncTr(input, set1Spec, set2Spec, truncateSet1 = false) {
+        // Other string2 classes require the tr parser's class and alignment validation.
+        if (set2Spec.includes("[:") &&
+            !(set1Spec === "[:lower:]" && set2Spec === "[:upper:]") &&
+            !(set1Spec === "[:upper:]" && set2Spec === "[:lower:]"))
+            return undefined;
         if ((set1Spec === "a-z" || set1Spec === "[:lower:]") && (set2Spec === "A-Z" || set2Spec === "[:upper:]")) {
             return input.replace(/[a-z]/g, ch => String.fromCharCode(ch.charCodeAt(0) - 32));
         }
@@ -29830,7 +29843,7 @@ export class Runtime {
                     const firstName = stageNames[sIdx];
                     const extDef = stageDefs[sIdx];
                     const stageArgs = stageArgsList[sIdx];
-                    const nextBuf = (index & 1) === 0 ? sharedSyncPipeBuf0 : sharedSyncPipeBuf1;
+                    let nextBuf = (index & 1) === 0 ? sharedSyncPipeBuf0 : sharedSyncPipeBuf1;
                     const isInlineCutField = firstName === "cut";
                     const isInlineTr = firstName === "tr";
                     const isInlineAwk = firstName === "awk";
@@ -29879,6 +29892,8 @@ export class Runtime {
                                 if (nextTotalBytes > this.budget.maxOutputBytesSmi && sub.byteLength > this.budget.limits.maxOutputBytes - this.budget.bytes)
                                     this.budget.fail("maxOutputBytes");
                                 this.budget.bytes = nextTotalBytes;
+                                if (sub.byteLength > nextBuf.byteLength)
+                                    nextBuf = new Uint8Array(sub.byteLength);
                                 nextBuf.set(sub, 0);
                                 prevBuf = nextBuf;
                                 prevLen = sub.byteLength;
@@ -29928,12 +29943,12 @@ export class Runtime {
                             if (transformed === undefined)
                                 return undefined;
                             const outByteLen = shellValueByteLength(transformed);
-                            if (outByteLen > nextBuf.byteLength)
-                                return undefined;
                             const nextTotalBytes = this.budget.bytes + outByteLen;
                             if (nextTotalBytes > this.budget.maxOutputBytesSmi && outByteLen > this.budget.limits.maxOutputBytes - this.budget.bytes)
                                 this.budget.fail("maxOutputBytes");
                             this.budget.bytes = nextTotalBytes;
+                            if (outByteLen > nextBuf.byteLength)
+                                nextBuf = new Uint8Array(outByteLen);
                             const written = transformed.length === 0 ? 0 : fastSharedTextEncoder.encodeInto(transformed, nextBuf).written;
                             prevBuf = nextBuf;
                             prevLen = written;
@@ -29971,9 +29986,10 @@ export class Runtime {
                             outLines = grepRes.lines;
                         }
                         else if (isInlineTac) {
-                            if (inStr.length > 0 && !inStr.endsWith("\n"))
-                                return undefined;
                             outLines = [...rawLines].reverse();
+                            if (!inStr.endsWith("\n") && outLines.length > 1) {
+                                outLines.splice(0, 2, outLines[0] + outLines[1]);
+                            }
                         }
                         else if (isInlineNl) {
                             const nlRes = this.evalSyncNl(rawLines, stageArgs);
@@ -30003,12 +30019,14 @@ export class Runtime {
                                 if (cleaned.length % 4 !== 0 || (cleaned.length > 0 && !/^[A-Za-z0-9+/]+={0,2}$/.test(cleaned)))
                                     return undefined;
                                 const decoded = this.syncBase64DecodeBytes(cleaned);
-                                if (decoded.some(byte => byte === 0 || byte >= 128) || decoded.byteLength > nextBuf.byteLength)
+                                if (decoded.some(byte => byte === 0 || byte >= 128))
                                     return undefined;
                                 const nextTotalBytes = this.budget.bytes + decoded.byteLength;
                                 if (nextTotalBytes > this.budget.maxOutputBytesSmi && decoded.byteLength > this.budget.limits.maxOutputBytes - this.budget.bytes)
                                     this.budget.fail("maxOutputBytes");
                                 this.budget.bytes = nextTotalBytes;
+                                if (decoded.byteLength > nextBuf.byteLength)
+                                    nextBuf = new Uint8Array(decoded.byteLength);
                                 nextBuf.set(decoded, 0);
                                 prevBuf = nextBuf;
                                 prevLen = decoded.byteLength;
@@ -30023,15 +30041,15 @@ export class Runtime {
                         }
                         // These filters preserve the terminator of the final selected input line.
                         const preservesTerminator = firstName === "head" || firstName === "tail" || firstName === "rev" || firstName === "sed";
-                        const terminated = sedTerminated || !preservesTerminator || inStr.endsWith("\n") || firstName === "head" && outLines.length < rawLines.length;
+                        const terminated = isInlineTac ? inStr.includes("\n") : sedTerminated || !preservesTerminator || inStr.endsWith("\n") || firstName === "head" && outLines.length < rawLines.length;
                         const outStr = outLines.length > 0 ? outLines.join("\n") + (terminated ? "\n" : "") : "";
                         const outByteLen = shellValueByteLength(outStr);
-                        if (outByteLen > nextBuf.byteLength)
-                            return undefined;
                         const nextTotalBytes = this.budget.bytes + outByteLen;
                         if (nextTotalBytes > this.budget.maxOutputBytesSmi && outByteLen > this.budget.limits.maxOutputBytes - this.budget.bytes)
                             this.budget.fail("maxOutputBytes");
                         this.budget.bytes = nextTotalBytes;
+                        if (outByteLen > nextBuf.byteLength)
+                            nextBuf = new Uint8Array(outByteLen);
                         const written = outStr.length === 0 ? 0 : fastSharedTextEncoder.encodeInto(outStr, nextBuf).written;
                         prevBuf = nextBuf;
                         prevLen = written;

package/dist/safe-bash-command-ssconvert/index.js

@@ -100951,6 +100951,18 @@ function metadataNode(value3, charge) {
   }
   return visit(value3);
 }
+var richUnderlines = {
+  none: "none",
+  single: "single",
+  double: "double",
+  low: "singleAccounting",
+  error: "single",
+  "single-line": "single",
+  "double-line": "double",
+  "error-line": "single",
+  singleAccounting: "singleAccounting",
+  doubleAccounting: "doubleAccounting"
+};
 function writeRichString(value3, runs, xml2, charge, target = "cell") {
   charge?.(value3.length);
   const t = (text2) => xml2("t", text2.trim() !== text2 ? { "xml:space": "preserve" } : {}, escapeXlsx(encodeXlsxString(text2)));
@@ -100973,7 +100985,9 @@ function writeRichString(value3, runs, xml2, charge, target = "cell") {
     if (attrs.size !== void 0) properties += xml2("sz", { val: Number(attrs.size) / 1024 });
     if (typeof attrs.family === "string") properties += xml2("rFont", { val: encodeXlsxString(attrs.family) });
     if (typeof attrs.color === "string") properties += xml2("color", { rgb: "FF" + attrs.color.split("x").join("").toUpperCase() });
-    if (typeof attrs.underline === "string") properties += xml2("u", { val: attrs.underline === "low" ? "singleAccounting" : attrs.underline === "error" ? "single" : attrs.underline });
+    if (typeof attrs.underline === "string") properties += xml2("u", {
+      val: Object.hasOwn(richUnderlines, attrs.underline) ? richUnderlines[attrs.underline] : "none"
+    });
     if (attrs.subscript || attrs.superscript) properties += xml2("vertAlign", { val: attrs.subscript ? "subscript" : "superscript" });
     result2 += xml2("r", {}, (properties || target === "comment" ? xml2("rPr", {}, properties) : "") + t(decoder.decode(bytes.subarray(start, end2))));
   }
@@ -144460,7 +144474,11 @@ function odfCellStyle(node3, parent, charge) {
     const italic = attr4(p2, "font-style", "fo");
     if (italic !== void 0) font2.Italic = italic === "italic" || italic === "oblique" ? 1 : 0;
     const underline = attr4(p2, "text-underline-style", "style");
-    if (underline !== void 0) font2.Underline = underline === "none" ? 0 : attr4(p2, "text-underline-type", "style") === "double" ? 2 : 1;
+    if (underline !== void 0) {
+      const type = attr4(p2, "text-underline-type", "style");
+      const double = type === "double" || attr4(p2, "text-underline-width", "style") === "bold";
+      font2.Underline = underline === "none" || type === "none" ? 0 : (double ? 2 : 1) + (attr4(p2, "text-underline-placement", "gnm") === "low" ? 2 : 0);
+    }
     const strike = attr4(p2, "text-line-through-style", "style");
     if (strike !== void 0) font2.StrikeThrough = strike === "none" ? 0 : 1;
     family = attr4(p2, "font-family", "fo") ?? attr4(p2, "font-name", "style") ?? family;
@@ -144964,8 +144982,13 @@ function createOdfStyles(xml2, extended, book, context) {
       if (f2.Bold !== void 0) text2["fo:font-weight"] = Number(f2.Bold) ? "bold" : "normal";
       if (f2.Italic !== void 0) text2["fo:font-style"] = Number(f2.Italic) ? "italic" : "normal";
       if (f2.Underline !== void 0) {
-        text2["style:text-underline-style"] = Number(f2.Underline) ? "solid" : "none";
-        text2["style:text-underline-type"] = Number(f2.Underline) === 2 ? "double" : "single";
+        const underline = Number(f2.Underline), low = underline === 3 || underline === 4;
+        text2["style:text-underline-style"] = underline ? "solid" : "none";
+        text2["style:text-underline-type"] = underline === 2 || underline === 4 ? "double" : underline ? "single" : "none";
+        text2["style:text-underline-width"] = "auto";
+        text2["style:text-underline-color"] = "font-color";
+        text2["style:text-underline-mode"] = "continuous";
+        if (extended && low) text2["gnm:text-underline-placement"] = "low";
       }
       if (f2.StrikeThrough !== void 0) text2["style:text-line-through-style"] = Number(f2.StrikeThrough) ? "solid" : "none";
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-bash",
-  "version": "0.1.750",
+  "version": "0.1.751",
   "description": "Extensible virtual shell with pluggable filesystems and streaming commands",
   "type": "module",
   "license": "MIT",
@@ -645,7 +645,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.750",
+    "@poe-platform/safe-fs": "0.1.751",
     "pdf-lib": "1.17.1",
     "@types/node": "^25.2.2",
     "pako": "3.0.1",