@poe-platform/safe-bash 0.1.751 → 0.1.752

package/dist/safe-bash/chunks/{chunk-ILHNFAZE.js → chunk-W7QHCGDH.js}

@@ -52139,8 +52139,18 @@ function writeRichString(value3, runs, xml2, charge, target = "cell") {
   const t2 = (text2) => xml2("t", text2.trim() !== text2 ? { "xml:space": "preserve" } : {}, escapeXlsx(encodeXlsxString(text2)));
   if (!runs?.length) return t2(value3);
   charge?.(runs.length);
-  const bytes = new TextEncoder().encode(value3), decoder = new TextDecoder("UTF-8", { fatal: true });
-  const points = [.../* @__PURE__ */ new Set([0, bytes.length, ...runs.flatMap((run) => [run.start, run.end])])].sort((a3, b3) => a3 - b3);
+  const length = new TextEncoder().encode(value3).length;
+  const points = [.../* @__PURE__ */ new Set([0, length, ...runs.flatMap((run) => [run.start, run.end])])].sort((a3, b3) => a3 - b3);
+  let byteOffset = 0, characterOffset = 0;
+  const characters = points.map((point) => {
+    while (byteOffset < point && characterOffset < value3.length) {
+      const code2 = value3.codePointAt(characterOffset);
+      byteOffset += code2 < 128 ? 1 : code2 < 2048 ? 2 : code2 < 65536 ? 3 : 4;
+      characterOffset += code2 > 65535 ? 2 : 1;
+    }
+    if (byteOffset !== point) throw new SsconvertError("invalid-request", "Invalid rich text UTF-8 boundary");
+    return characterOffset;
+  });
   let result2 = target === "comment" ? xml2("r", {}, t2("")) : "";
   for (let i4 = 0; i4 + 1 < points.length; i4++) {
     charge?.(runs.length);
@@ -52160,7 +52170,7 @@ function writeRichString(value3, runs, xml2, charge, target = "cell") {
       val: Object.hasOwn(richUnderlines, attrs.underline) ? richUnderlines[attrs.underline] : "none"
     });
     if (attrs.subscript || attrs.superscript) properties += xml2("vertAlign", { val: attrs.subscript ? "subscript" : "superscript" });
-    result2 += xml2("r", {}, (properties || target === "comment" ? xml2("rPr", {}, properties) : "") + t2(decoder.decode(bytes.subarray(start, end2))));
+    result2 += xml2("r", {}, (properties || target === "comment" ? xml2("rPr", {}, properties) : "") + t2(value3.slice(characters[i4], characters[i4 + 1])));
   }
   return result2;
 }
@@ -83189,7 +83199,7 @@ function createHtmlWriter(profile) {
                     closures.unshift(close);
                   }
                 }
-                put(encoded2(new TextDecoder().decode(bytes.subarray(from, to))));
+                put(encoded2(new TextDecoder("utf-8", { ignoreBOM: true }).decode(bytes.subarray(from, to))));
                 for (const closure of closures) put(closure);
               }
             } else if (cell) put(encoded2(await renderCellText(cell, book, context2, "preserve")));
@@ -164631,4 +164641,4 @@ tslib/tslib.js:
 @noble/ciphers/utils.js:
   (*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) *)
 */
-//# sourceMappingURL=chunk-ILHNFAZE.js.map
+//# sourceMappingURL=chunk-W7QHCGDH.js.map

package/dist/safe-bash/chunks/{src-XXKXVO7T.js → src-XCSZZ35R.js}

@@ -81,7 +81,7 @@ import {
   updateWorkbook,
   validSheetSize,
   visitFormula
-} from "./chunk-ILHNFAZE.js";
+} from "./chunk-W7QHCGDH.js";
 import "./chunk-CVAVQZSF.js";
 import "./chunk-RCM5PZBN.js";
 import "./chunk-LSRHLNCR.js";
@@ -171,4 +171,4 @@ export {
   validSheetSize,
   visitFormula
 };
-//# sourceMappingURL=src-XXKXVO7T.js.map
+//# sourceMappingURL=src-XCSZZ35R.js.map

package/dist/safe-bash/commands/text.js

@@ -2363,6 +2363,8 @@ async function executeUniqGeneral(context, preReadSource) {
     const onlyRepeated = parsed.flags.has("d");
     const onlyUnique = parsed.flags.has("u");
     const identityKey = skipFields === 0 && skipCharacters === 0 && width === Infinity && !ignoreCase;
+    const locale = context.env.LC_ALL || context.env.LC_CTYPE || context.env.LANG;
+    const byteLocale = locale === "C" || locale === "POSIX";
     const uniqDecoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
     const key = (bytes) => {
         if (identityKey)
@@ -2376,8 +2378,14 @@ async function executeUniqGeneral(context, preReadSource) {
         }
         let result;
         try {
-            const chars = Array.from(uniqDecoder.decode(bytes.subarray(offset)));
-            result = encoder.encode((width === Infinity ? chars.slice(skipCharacters) : chars.slice(skipCharacters, skipCharacters + width)).join(""));
+            if (byteLocale) {
+                offset += skipCharacters;
+                result = bytes.subarray(offset, width === Infinity ? undefined : offset + width);
+            }
+            else {
+                const chars = Array.from(uniqDecoder.decode(bytes.subarray(offset)));
+                result = encoder.encode((width === Infinity ? chars.slice(skipCharacters) : chars.slice(skipCharacters, skipCharacters + width)).join(""));
+            }
         }
         catch (error) {
             if (!(error instanceof TypeError))
@@ -2898,7 +2906,7 @@ export function textCommands() {
                                             else {
                                                 const f1 = Number(part.slice(0, dashIdx));
                                                 const f2 = Number(part.slice(dashIdx + 1));
-                                                if (f1 < 1 || f2 < f1 || f2 > 30) {
+                                                if (!Number.isFinite(f2) || f1 < 1 || f2 < f1 || f2 > 30) {
                                                     okMask = false;
                                                     break;
                                                 }

package/dist/safe-bash/core.browser.js

@@ -10852,6 +10852,8 @@ async function executeUniqGeneral(context2, preReadSource) {
   const onlyRepeated = parsed.flags.has("d");
   const onlyUnique = parsed.flags.has("u");
   const identityKey = skipFields === 0 && skipCharacters === 0 && width === Infinity && !ignoreCase;
+  const locale = context2.env.LC_ALL || context2.env.LC_CTYPE || context2.env.LANG;
+  const byteLocale2 = locale === "C" || locale === "POSIX";
   const uniqDecoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
   const key = (bytes2) => {
     if (identityKey) return bytes2;
@@ -10862,8 +10864,13 @@ async function executeUniqGeneral(context2, preReadSource) {
     }
     let result;
     try {
-      const chars = Array.from(uniqDecoder.decode(bytes2.subarray(offset)));
-      result = encoder.encode((width === Infinity ? chars.slice(skipCharacters) : chars.slice(skipCharacters, skipCharacters + width)).join(""));
+      if (byteLocale2) {
+        offset += skipCharacters;
+        result = bytes2.subarray(offset, width === Infinity ? void 0 : offset + width);
+      } else {
+        const chars = Array.from(uniqDecoder.decode(bytes2.subarray(offset)));
+        result = encoder.encode((width === Infinity ? chars.slice(skipCharacters) : chars.slice(skipCharacters, skipCharacters + width)).join(""));
+      }
     } catch (error) {
       if (!(error instanceof TypeError)) throw error;
       offset += skipCharacters;
@@ -11320,7 +11327,7 @@ function textCommands() {
                       } else {
                         const f1 = Number(part.slice(0, dashIdx));
                         const f2 = Number(part.slice(dashIdx + 1));
-                        if (f1 < 1 || f2 < f1 || f2 > 30) {
+                        if (!Number.isFinite(f2) || f1 < 1 || f2 < f1 || f2 > 30) {
                           okMask = false;
                           break;
                         }
@@ -68481,8 +68488,6 @@ var DiscardCommandFailure = class extends CommandFailure2 {
 };
 var ParameterExpansionFailure = class extends ExpansionFailure {
 };
-var SubstringRangeFailure = class extends ExpansionFailure {
-};
 var NounsetFailure = class extends ExpansionFailure {
   constructor(message3, line, status2 = 1) {
     super(message3, line);
@@ -79025,40 +79030,16 @@ var Runtime = class _Runtime {
         if (getArraySelector(part) !== void 0) {
           return false;
         }
-        if (part.length || part.substring || part.operator !== void 0) {
+        if (part.substring) return false;
+        if (part.length || part.operator !== void 0) {
           if (this.budget.limits.maxExpansionBytes !== Infinity || rawState.depth >= 32 || rawState.nounset || rawState.nocasematch || byteLocale(rawState.variables) !== false) {
             return false;
           }
           if (part.length) {
-            if (part.operator !== void 0 || part.substring) return false;
-          } else if (part.substring) {
-            if (part.operator !== void 0 || !part.substring.offset.parts.every((p) => p.kind === "text" || p.kind === "variable" && !p.operator && !p.substring && !p.length) || part.substring.length && !part.substring.length.parts.every((p) => p.kind === "text" || p.kind === "variable" && !p.operator && !p.substring && !p.length)) {
-              return false;
-            }
-          } else if (part.operator === "^" || part.operator === "^^" || part.operator === "," || part.operator === ",,") {
-            if (part.alternate && part.alternate.parts.length > 0) return false;
+            if (part.operator !== void 0) return false;
           } else if (part.operator === "-" || part.operator === ":-" || part.operator === "+" || part.operator === ":+") {
             if (!part.alternate || !part.alternate.parts.every((p) => p.kind === "text" || p.kind === "arithmetic" || p.kind === "variable" && !p.operator && !p.substring && p.prefixNames !== "@")) return false;
             if (!this.isPureSyncValueWord(part.alternate, rawState, allowAt)) return false;
-          } else if (part.operator === "#" || part.operator === "##" || part.operator === "%" || part.operator === "%%") {
-            if (!part.alternate || part.alternate.parts.length === 0) return false;
-            const q0 = part.alternate.parts[0].quoted;
-            const trimOp = part.operator;
-            if (!part.alternate.parts.every((p, idx) => p.quoted === q0 && (p.kind === "text" && !p.byteValue && (p.quoted || !hasGlobOrEscape(p.value, !!rawState.extglob) || idx === 0 && (trimOp === "#" || trimOp === "##") && p.value === "*" || idx === part.alternate.parts.length - 1 && (trimOp === "%" || trimOp === "%%") && p.value === "*" || part.alternate.parts.length === 1 && Boolean(tryCompileTrimGlobToRegex(p.value, trimOp, !!rawState.extglob))) || p.kind === "variable" && !p.operator && !p.substring && !p.length && !p.indirect && !p.prefixNames && !p.specialParameter && !p.transform && (getArraySelector(p) === void 0 || p.name === "BASH_REMATCH" && getArraySelector(p)?.kind === "element" && /^[0-9]{1,2}$/.test(getArraySelector(p).index.decimal)) && isShellIdentifier(p.name)))) {
-              return false;
-            }
-          } else if (part.operator === "/" || part.operator === "//" || part.operator === "/#" || part.operator === "/%") {
-            if (!part.alternate || part.alternate.parts.length === 0) return false;
-            const q0 = part.alternate.parts[0].quoted;
-            const repOp = part.operator;
-            if (!part.alternate.parts.every((p) => p.quoted === q0 && (p.kind === "text" && !p.byteValue && (p.quoted || !hasGlobOrEscape(p.value, !!rawState.extglob) || part.alternate.parts.length === 1 && Boolean(tryCompileFixedGlobToRegex(p.value, repOp, !!rawState.extglob))) || p.kind === "variable" && !p.operator && !p.substring && !p.length && !p.indirect && !p.prefixNames && !p.specialParameter && !p.transform && getArraySelector(p) === void 0 && isShellIdentifier(p.name)))) {
-              return false;
-            }
-            if (part.replacement && part.replacement.parts.length > 0) {
-              if (!part.replacement.parts.every((p) => p.kind === "text" && !p.byteValue && !p.value.includes("&") && !p.value.includes("\\") && (p.quoted || !p.value.startsWith("~")) || p.kind === "variable" && !p.operator && !p.substring && !p.length && !p.indirect && !p.prefixNames && !p.specialParameter && !p.transform && getArraySelector(p) === void 0 && isShellIdentifier(p.name))) {
-                return false;
-              }
-            }
           } else return false;
         }
         continue;
@@ -79127,11 +79108,7 @@ var Runtime = class _Runtime {
         if (w0Plain === "printf") {
           if (!this.isSyncPrintfCallOk(cmd, 1, rawState, this._activePrintfInductionName)) return false;
         } else if (w0Plain === "echo") {
-          const firstArg = cmd.words[1];
-          if (firstArg) {
-            const prefix3 = firstArg.parts.find((part2) => part2.kind !== "text" || part2.value.length > 0);
-            if (prefix3?.kind !== "text" || prefix3.value.startsWith("-")) return false;
-          }
+          if (!this.isSyncSubEchoCallOk(cmd, rawState)) return false;
         } else if (w0Plain === "dirname" || w0Plain === "basename") {
           const simArgs = [];
           let seenDoubleDash = false;
@@ -79291,6 +79268,7 @@ var Runtime = class _Runtime {
   canSyncNestedForWords(words, rawState, io, line) {
     if (words === void 0) return true;
     if (words.length === 0 || words.length > 64) return false;
+    if (words.some((w) => w.parts.some((p) => p.kind === "variable" && (p.substring || p.operator !== void 0 || p.transform)))) return false;
     if (words.length === 1 && this.isQuotedAtWord(words[0])) return true;
     if (words.length === 1) {
       const w0 = words[0];
@@ -79321,8 +79299,9 @@ var Runtime = class _Runtime {
     }
     if (words.length === 1) {
       const w0 = words[0];
-      const arrMembers = this.tryExpandSyncArrayMembersWord(w0, rawState, io, line);
-      if (arrMembers !== void 0) return arrMembers;
+      if (this.canSyncArrayMembersWord(w0, rawState)) {
+        return this.tryExpandSyncArrayMembersWord(w0, rawState, io, line);
+      }
       const p02 = w0.parts.length === 1 ? w0.parts[0] : w0.parts.length === 2 && w0.parts[0].kind === "text" && w0.parts[0].value === "" ? w0.parts[1] : void 0;
       if (p02 && !p02.quoted && (rawState.variables.IFS === void 0 || rawState.variables.IFS === " 	\n") && !rawState.noglob) {
         if (p02.kind === "variable" && !p02.indirect && !p02.prefixNames && !p02.length && !p02.transform && getArraySelector(p02) === void 0) {
@@ -79497,6 +79476,35 @@ var Runtime = class _Runtime {
     }
     return { ifsWord, varNames, isBareReply, inputWord: r0.target, ...delimChar !== void 0 ? { delimChar } : {}, ...maxChars !== void 0 ? { maxChars } : {}, ...exactChars !== void 0 ? { exactChars } : {} };
   }
+  canSyncLoopConditionalOperands(expression, rawState, allowRegex = true) {
+    const checkLeaf = (e) => {
+      if (e.kind === "nonempty") return this.isPureSyncValueWord(e.operand, rawState);
+      if (e.kind === "unary") return (e.operator === "-n" || e.operator === "-z" || e.operator === "-v" || syncConditionalFileUnaryOps.has(e.operator) && this._isMemoryBackingFs && this.canFastMemoryRedirect && this.budget.limits.maxFileSystemOperations >= 1e3 && (this._fileWrites === void 0 || this._fileWrites.size === 0) && (this._outputFiles === void 0 || this._outputFiles.size === 0)) && this.isPureSyncValueWord(e.operand, rawState);
+      if (e.kind === "binary") {
+        if (e.operator === "=~") {
+          if (!allowRegex) return false;
+          const patInfo = this.extractSimpleErePattern(e.right, rawState);
+          if (patInfo?.isVar) return false;
+          return this.isPureSyncValueWord(e.left, rawState) && this.getFastAnchoredEreRegex(e.right, rawState) !== void 0 && !rawState.readonlyVariables?.has("BASH_REMATCH") && !rawState.exported.has("BASH_REMATCH") && !stateMonitor(rawState)?.hasOverlay("BASH_REMATCH") && !(stateMonitor(rawState)?.store ?? requireArrays(rawState))?.watches.has("BASH_REMATCH");
+        }
+        return this.isPureSyncValueWord(e.left, rawState) && this.isPureSyncValueWord(e.right, rawState) && (!(e.operator === "==" || e.operator === "=" || e.operator === "!=") || e.right.parts.length > 0 && e.right.parts.every((p) => p.quoted));
+      }
+      if (e.kind === "not") return checkLeaf(e.operand);
+      if (e.kind === "and" || e.kind === "or") return checkLeaf(e.left) && checkLeaf(e.right);
+      return false;
+    };
+    return checkLeaf(expression);
+  }
+  isSyncSubEchoCallOk(cmd, rawState) {
+    if (!this.isSyncEchoCallOk(cmd, rawState)) return false;
+    if (!cmd.words.slice(1).every((w) => w.parts.length > 0 && w.parts.every(
+      (part) => part.quoted || part.kind === "text" && part.value.length > 0 && !part.value.includes(" ") && !part.value.includes("	") && !part.value.includes("\n") && !part.value.includes("{") && !hasGlobOrEscape(part.value, true)
+    ))) return false;
+    const firstArg = cmd.words[1];
+    if (!firstArg) return true;
+    const prefix3 = firstArg.parts.find((part) => part.kind !== "text" || part.value.length > 0);
+    return prefix3?.kind === "text" && !prefix3.value.startsWith("-");
+  }
   isPureSyncSubIfOrCase(cmd, rawState) {
     if (cmd.redirects.length !== 0) return false;
     const isSimpleEchoOrPrintf = (s) => {
@@ -79506,7 +79514,7 @@ var Runtime = class _Runtime {
       const sc = pl.commands[0];
       if (sc.kind !== "simple" || sc.redirects.length !== 0 || sc.words.length === 0) return false;
       const w0 = sc.words[0]?.plain;
-      if (w0 === "echo") return this.isSyncEchoCallOk(sc, rawState);
+      if (w0 === "echo") return this.isSyncSubEchoCallOk(sc, rawState);
       if (w0 === "printf" && sc.words[1]?.plain !== "-v") return this.isSyncPrintfCallOk(sc, 1, rawState);
       return false;
     };
@@ -79520,9 +79528,10 @@ var Runtime = class _Runtime {
           if (bc.redirects.length !== 0 || bc.expression.error || bc.expression.hasMutation || bc.expression.hasSubscript || !isSafeSmiProgram(bc.expression) || !this.canSyncArithmeticWithoutFault(bc.expression.tree, rawState, bc.line ?? 1)) return false;
         } else if (bc.kind === "conditional") {
           if (bc.redirects.length !== 0 || rawState.nocasematch || byteLocale(rawState.variables) || !this.canSyncConditional(bc.expression, 0, rawState, true)) return false;
-          if (bc.expression.kind === "binary" && bc.expression.operator === "=~") return false;
-        } else if (!this.extractPosixBracketCondExpr(bc, rawState, true, br.body)) {
-          return false;
+          if (!this.canSyncLoopConditionalOperands(bc.expression, rawState, false)) return false;
+        } else {
+          const expression = this.extractPosixBracketCondExpr(bc, rawState, true, br.body);
+          if (!expression || !this.canSyncLoopConditionalOperands(expression, rawState, false)) return false;
         }
         if (!isSimpleEchoOrPrintf(br.body)) return false;
       }
@@ -79550,22 +79559,7 @@ var Runtime = class _Runtime {
         const cmd = pipeline.commands[0];
         const canSyncLoopCondCmd = (c) => {
           if (c.redirects.length !== 0 || rawState.nocasematch || byteLocale(rawState.variables) || !this.canSyncConditional(c.expression, 0, rawState, true)) return false;
-          const checkLeaf = (e) => {
-            if (e.kind === "nonempty") return this.isPureSyncValueWord(e.operand, rawState);
-            if (e.kind === "unary") return (e.operator === "-n" || e.operator === "-z" || e.operator === "-v" || syncConditionalFileUnaryOps.has(e.operator) && this._isMemoryBackingFs && this.canFastMemoryRedirect && this.budget.limits.maxFileSystemOperations >= 1e3 && (this._fileWrites === void 0 || this._fileWrites.size === 0) && (this._outputFiles === void 0 || this._outputFiles.size === 0)) && this.isPureSyncValueWord(e.operand, rawState);
-            if (e.kind === "binary") {
-              if (e.operator === "=~") {
-                const patInfo = this.extractSimpleErePattern(e.right, rawState);
-                if (patInfo?.isVar) return false;
-                return this.isPureSyncValueWord(e.left, rawState) && this.getFastAnchoredEreRegex(e.right, rawState) !== void 0 && !rawState.readonlyVariables?.has("BASH_REMATCH") && !rawState.exported.has("BASH_REMATCH") && !stateMonitor(rawState)?.hasOverlay("BASH_REMATCH") && !(store ?? requireArrays(rawState))?.watches.has("BASH_REMATCH");
-              }
-              return this.isPureSyncValueWord(e.left, rawState) && this.isPureSyncValueWord(e.right, rawState) && (!(e.operator === "==" || e.operator === "=" || e.operator === "!=") || e.right.parts.length > 0 && e.right.parts.every((p2) => p2.quoted));
-            }
-            if (e.kind === "not") return checkLeaf(e.operand);
-            if (e.kind === "and" || e.kind === "or") return checkLeaf(e.left) && checkLeaf(e.right);
-            return false;
-          };
-          return checkLeaf(c.expression);
+          return this.canSyncLoopConditionalOperands(c.expression, rawState);
         };
         if (cmd.kind === "arithmetic") {
           if (cmd.redirects.length === 0) {
@@ -79797,7 +79791,7 @@ var Runtime = class _Runtime {
           return false;
         }
         const assignment = this.assignment(w0);
-        if (assignment && (assignment.name === "LC_ALL" || assignment.name === "LC_CTYPE" || assignment.name === "LC_COLLATE" || assignment.name === "LANG")) return false;
+        if (assignment && (assignment.name === "IFS" || assignment.name === "LC_ALL" || assignment.name === "LC_CTYPE" || assignment.name === "LC_COLLATE" || assignment.name === "LANG")) return false;
         if (!assignment || assignment.append && this.budget.limits.maxExpansionBytes !== Infinity || assignment.name === "OPTIND" || assignment.name === "PIPESTATUS" || assignment.name.includes("[") || rawState.readonlyVariables?.has(assignment.name) || rawState.variableAttributes?.get(assignment.name) || store?.get(assignment.name) || !this.isPureSyncValueWord(assignment.value, rawState)) {
           return false;
         }
@@ -80695,7 +80689,7 @@ var Runtime = class _Runtime {
               if (rawState.allexport) monitor.proxy.exported.add(varName);
             } else {
               monitor.values.invalidate(varName);
-              monitor.proxy.exported.delete(varName);
+              if (!rawState.exported.has(varName)) monitor.proxy.exported.delete(varName);
             }
           }
         }
@@ -81034,7 +81028,7 @@ var Runtime = class _Runtime {
             if (rawState.allexport) monitor.proxy.exported.add(varName);
           } else {
             monitor.values.invalidate(varName);
-            monitor.proxy.exported.delete(varName);
+            if (!rawState.exported.has(varName)) monitor.proxy.exported.delete(varName);
           }
         }
       }
@@ -84167,7 +84161,7 @@ ${s1}
         (0, diagnostics_exports.publicDiagnosticMessage)(failure, this.budget.onInternalError);
       }
     }
-    if (error instanceof ExpansionFailure && !(error instanceof SubstringRangeFailure && state.loopDepth > 0) || error instanceof BraceExpansionFailure) throw completedExit(error instanceof ParameterExpansionFailure && !state.isolated ? 127 : 1);
+    if (error instanceof ExpansionFailure || error instanceof BraceExpansionFailure) throw completedExit(error instanceof ParameterExpansionFailure && !state.isolated ? 127 : 1);
     if (error instanceof FatalCommandFailure) throw completedExit(error.status);
     if (error instanceof DiscardCommandFailure) throw completedExit(error.status, "discard");
     const status2 = outputTracker.outputStatus ?? (error instanceof CommandFailure2 ? error.status : 1);
@@ -89251,7 +89245,7 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
       if (expression.length) {
         const length = await arithmetic2(expression.length);
         end = length.value < 0n ? size + length.value : offset + length.value;
-        if (end < offset) throw new SubstringRangeFailure(`${length.source}: substring expression < 0`, line);
+        if (end < offset) throw new ExpansionFailure(`${length.source}: substring expression < 0`, line);
         if (end > size) end = size;
       }
       this.signal.throwIfAborted();
@@ -90236,6 +90230,11 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
     return out;
   }
   evalSyncTr(input3, opArgs) {
+    for (const value2 of opArgs) {
+      for (let i = 0; i < value2.length; i++) {
+        if (value2.charCodeAt(i) >= 128) return void 0;
+      }
+    }
     let idx = 0;
     let flagC = false;
     let flagD = false;
@@ -91863,7 +91862,7 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
     const out = [];
     let curStyle = bodyStyle;
     let num = start;
-    const unnumberedPrefix = " ".repeat(width + sep.length);
+    const unnumberedPrefix = " ".repeat(width + shellValueByteLength(sep));
     for (let i = 0; i < rawLines.length; i++) {
       const l = rawLines[i];
       if (l === "\\:" || l === "\\:\\:" || l === "\\:\\:\\:") {
@@ -92001,7 +92000,9 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
     const units = "KMGTPEZY";
     const out = [];
     for (let i = 0; i < rawLines.length; i++) {
-      const raw = rawLines[i].trim();
+      const line = rawLines[i];
+      const raw = line.trim();
+      if (line !== raw) return void 0;
       if (raw.length === 0) {
         out.push("");
         continue;
@@ -92269,7 +92270,7 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
     if (arg === "-L" || arg === "--max-line-length") return "-L";
     return void 0;
   }
-  evalSyncUniq(rawLines, opArgs) {
+  evalSyncUniq(rawLines, opArgs, isByteLocale = false) {
     let ignoreCase = false;
     let hasCount = false;
     let onlyRepeated = false;
@@ -92308,6 +92309,18 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
         return void 0;
       }
     }
+    if (isByteLocale && (skipChars !== 0 || checkChars !== Infinity) && rawLines.some((line) => {
+      for (let i = 0; i < line.length; i++) if (line.charCodeAt(i) > 127) return true;
+      return false;
+    })) return void 0;
+    const foldAscii = (value2) => {
+      let folded = "";
+      for (let i = 0; i < value2.length; i++) {
+        const code = value2.charCodeAt(i);
+        folded += code >= 97 && code <= 122 ? String.fromCharCode(code - 32) : value2[i];
+      }
+      return folded;
+    };
     const keyOf = (l) => {
       let offset = 0;
       for (let f = 0; f < skipFields; f++) {
@@ -92316,11 +92329,11 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
       }
       if (skipChars === 0 && checkChars === Infinity) {
         const sub2 = l.slice(offset);
-        return ignoreCase ? sub2.toLowerCase() : sub2;
+        return ignoreCase ? foldAscii(sub2) : sub2;
       }
       const chars = Array.from(l.slice(offset));
       const sub = (checkChars === Infinity ? chars.slice(skipChars) : chars.slice(skipChars, skipChars + checkChars)).join("");
-      return ignoreCase ? sub.toLowerCase() : sub;
+      return ignoreCase ? foldAscii(sub) : sub;
     };
     const outLines = [];
     let uIdx = 0;
@@ -92664,8 +92677,8 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
                 for (let k = 0; k < inStr.length; k++) if (inStr.charCodeAt(k) === 10) nl++;
                 outLines = [String(nl)];
               } else if (stageArgs[0] === "-w") {
-                const trimmed = inStr.trim();
-                outLines = [String(trimmed.length === 0 ? 0 : trimmed.split(/[ \t\n\r\f\v]+/).length)];
+                if (!byteLocale(rawState.variables) && prevBuf.subarray(0, prevLen).some((byte) => byte > 127)) return void 0;
+                outLines = [String(inStr.split(/[ \t\n\r\f\v]+/).filter(Boolean).length)];
               } else if (stageArgs[0] === "-m") {
                 outLines = [String(byteLocale(rawState.variables) ? prevLen : Array.from(inStr).length)];
               } else if (stageArgs[0] === "-L") {
@@ -92692,7 +92705,7 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
             } else if (isInlineSort) {
               outLines = this.evalSyncSort(rawLines, stageArgs, false) ?? [];
             } else if (isInlineUniq) {
-              const uniqRes = this.evalSyncUniq(rawLines, stageArgs);
+              const uniqRes = this.evalSyncUniq(rawLines, stageArgs, byteLocale(rawState.variables));
               if (uniqRes === void 0) return void 0;
               outLines = uniqRes;
             } else if (inlineSedMatch) {
@@ -92981,14 +92994,16 @@ ${prefix3} line ${offset + line}: \`${source2.split("\n")[line - 1] ?? ""}'
               const sortRes = this.evalSyncSort(rawLines, opArgs, false);
               if (sortRes !== void 0) fileRes = renderLines(sortRes);
             } else if (w0Plain === "uniq") {
-              const uniqRes = this.evalSyncUniq(rawLines, opArgs);
+              const uniqRes = this.evalSyncUniq(rawLines, opArgs, byteLocale(rawState.variables));
               if (uniqRes !== void 0) fileRes = renderLines(uniqRes);
             } else if (w0Plain === "tr" && (hasSingleStdinRedir || hasSingleHereStringRedir)) {
               fileRes = this.evalSyncTr(fileStr, opArgs);
             } else if (hasSingleHereStringRedir && w0Plain === "base64" && (opArgs.length === 0 || opArgs.length === 1 && (opArgs[0] === "-d" || opArgs[0] === "--decode"))) {
               if (opArgs.length === 0) fileRes = this.syncBase64Encode(view) + "\n";
               else {
-                const decoded = this.syncBase64DecodeBytes(fileStr);
+                const cleaned = fileStr.replace(/[ \t\r\n]+/g, "");
+                if (cleaned.length % 4 !== 0 || cleaned.length > 0 && !/^[A-Za-z0-9+/]+={0,2}$/.test(cleaned)) return void 0;
+                const decoded = this.syncBase64DecodeBytes(cleaned);
                 if (decoded.some((byte) => byte === 0 || byte >= 128)) return void 0;
                 fileRes = sharedSyncPipeDecoder.decode(decoded);
               }

package/dist/safe-bash/shell/runtime.d.ts

@@ -514,6 +514,8 @@ export declare class Runtime {
     private evalSyncNestedForWords;
     private isSyncEchoCallOk;
     private extractSyncReadHereStringSpec;
+    private canSyncLoopConditionalOperands;
+    private isSyncSubEchoCallOk;
     private isPureSyncSubIfOrCase;
     private canSyncLoopBody;
     private extractIntLoopStep;

package/dist/safe-bash/shell/runtime.js

@@ -1245,8 +1245,6 @@ class DiscardCommandFailure extends CommandFailure {
 }
 class ParameterExpansionFailure extends ExpansionFailure {
 }
-class SubstringRangeFailure extends ExpansionFailure {
-}
 class NounsetFailure extends ExpansionFailure {
     status;
     constructor(message, line, status = 1) {
@@ -13675,21 +13673,17 @@ export class Runtime {
                     // their alternates rather than risking corruption or replay.
                     return false;
                 }
-                if (part.length || part.substring || part.operator !== undefined) {
+                // Substrings and pattern/case operators can decline as loop values
+                // change to Unicode or lengths become invalid. Loop steps cannot resume
+                // after that decline without corrupting assignments or replaying effects.
+                if (part.substring)
+                    return false;
+                if (part.length || part.operator !== undefined) {
                     if (this.budget.limits.maxExpansionBytes !== Infinity || rawState.depth >= 32 || rawState.nounset || rawState.nocasematch || byteLocale(rawState.variables) !== false) {
                         return false;
                     }
                     if (part.length) {
-                        if (part.operator !== undefined || part.substring)
-                            return false;
-                    }
-                    else if (part.substring) {
-                        if (part.operator !== undefined || !part.substring.offset.parts.every(p => p.kind === "text" || (p.kind === "variable" && !p.operator && !p.substring && !p.length)) || (part.substring.length && !part.substring.length.parts.every(p => p.kind === "text" || (p.kind === "variable" && !p.operator && !p.substring && !p.length)))) {
-                            return false;
-                        }
-                    }
-                    else if (part.operator === "^" || part.operator === "^^" || part.operator === "," || part.operator === ",,") {
-                        if (part.alternate && part.alternate.parts.length > 0)
+                        if (part.operator !== undefined)
                             return false;
                     }
                     else if (part.operator === "-" || part.operator === ":-" || part.operator === "+" || part.operator === ":+") {
@@ -13698,29 +13692,6 @@ export class Runtime {
                         if (!this.isPureSyncValueWord(part.alternate, rawState, allowAt))
                             return false;
                     }
-                    else if (part.operator === "#" || part.operator === "##" || part.operator === "%" || part.operator === "%%") {
-                        if (!part.alternate || part.alternate.parts.length === 0)
-                            return false;
-                        const q0 = part.alternate.parts[0].quoted;
-                        const trimOp = part.operator;
-                        if (!part.alternate.parts.every((p, idx) => p.quoted === q0 && ((p.kind === "text" && !p.byteValue && (p.quoted || !hasGlobOrEscape(p.value, !!rawState.extglob) || (idx === 0 && (trimOp === "#" || trimOp === "##") && p.value === "*") || (idx === part.alternate.parts.length - 1 && (trimOp === "%" || trimOp === "%%") && p.value === "*") || (part.alternate.parts.length === 1 && Boolean(tryCompileTrimGlobToRegex(p.value, trimOp, !!rawState.extglob))))) || (p.kind === "variable" && !p.operator && !p.substring && !p.length && !p.indirect && !p.prefixNames && !p.specialParameter && !p.transform && (getArraySelector(p) === undefined || (p.name === "BASH_REMATCH" && getArraySelector(p)?.kind === "element" && /^[0-9]{1,2}$/.test(getArraySelector(p).index.decimal))) && isShellIdentifier(p.name))))) {
-                            return false;
-                        }
-                    }
-                    else if (part.operator === "/" || part.operator === "//" || part.operator === "/#" || part.operator === "/%") {
-                        if (!part.alternate || part.alternate.parts.length === 0)
-                            return false;
-                        const q0 = part.alternate.parts[0].quoted;
-                        const repOp = part.operator;
-                        if (!part.alternate.parts.every(p => p.quoted === q0 && ((p.kind === "text" && !p.byteValue && (p.quoted || !hasGlobOrEscape(p.value, !!rawState.extglob) || (part.alternate.parts.length === 1 && Boolean(tryCompileFixedGlobToRegex(p.value, repOp, !!rawState.extglob))))) || (p.kind === "variable" && !p.operator && !p.substring && !p.length && !p.indirect && !p.prefixNames && !p.specialParameter && !p.transform && getArraySelector(p) === undefined && isShellIdentifier(p.name))))) {
-                            return false;
-                        }
-                        if (part.replacement && part.replacement.parts.length > 0) {
-                            if (!part.replacement.parts.every(p => ((p.kind === "text" && !p.byteValue && !p.value.includes("&") && !p.value.includes("\\") && (p.quoted || !p.value.startsWith("~"))) || (p.kind === "variable" && !p.operator && !p.substring && !p.length && !p.indirect && !p.prefixNames && !p.specialParameter && !p.transform && getArraySelector(p) === undefined && isShellIdentifier(p.name))))) {
-                                return false;
-                            }
-                        }
-                    }
                     else
                         return false;
                 }
@@ -13830,14 +13801,8 @@ export class Runtime {
                         return false;
                 }
                 else if (w0Plain === "echo") {
-                    const firstArg = cmd.words[1];
-                    if (firstArg) {
-                        const prefix = firstArg.parts.find(part => part.kind !== "text" || part.value.length > 0);
-                        // Substitution execution rejects options, including those that appear
-                        // only on later iterations. Require a stable non-option prefix.
-                        if (prefix?.kind !== "text" || prefix.value.startsWith("-"))
-                            return false;
-                    }
+                    if (!this.isSyncSubEchoCallOk(cmd, rawState))
+                        return false;
                 }
                 else if (w0Plain === "dirname" || w0Plain === "basename") {
                     const simArgs = [];
@@ -14056,6 +14021,10 @@ export class Runtime {
             return true;
         if (words.length === 0 || words.length > 64)
             return false;
+        // Slice expressions and member transformations may stop being synchronous
+        // after body mutations. Preserve member expansion through the normal path.
+        if (words.some(w => w.parts.some(p => p.kind === "variable" && (p.substring || p.operator !== undefined || p.transform))))
+            return false;
         if (words.length === 1 && this.isQuotedAtWord(words[0]))
             return true;
         // Unquoted expansions need splitting and globbing against the state at
@@ -14097,9 +14066,10 @@ export class Runtime {
         }
         if (words.length === 1) {
             const w0 = words[0];
-            const arrMembers = this.tryExpandSyncArrayMembersWord(w0, rawState, io, line);
-            if (arrMembers !== undefined)
-                return arrMembers;
+            if (this.canSyncArrayMembersWord(w0, rawState)) {
+                // Member words must never degrade into a single joined scalar word.
+                return this.tryExpandSyncArrayMembersWord(w0, rawState, io, line);
+            }
             const p0 = w0.parts.length === 1 ? w0.parts[0] : (w0.parts.length === 2 && w0.parts[0].kind === "text" && w0.parts[0].value === "" ? w0.parts[1] : undefined);
             if (p0 && !p0.quoted && (rawState.variables.IFS === undefined || rawState.variables.IFS === " \t\n") && !rawState.noglob) {
                 if (p0.kind === "variable" && !p0.indirect && !p0.prefixNames && !p0.length && !p0.transform && getArraySelector(p0) === undefined) {
@@ -14329,6 +14299,45 @@ export class Runtime {
         }
         return { ifsWord, varNames, isBareReply, inputWord: r0.target, ...(delimChar !== undefined ? { delimChar } : {}), ...(maxChars !== undefined ? { maxChars } : {}), ...(exactChars !== undefined ? { exactChars } : {}) };
     }
+    canSyncLoopConditionalOperands(expression, rawState, allowRegex = true) {
+        const checkLeaf = (e) => {
+            if (e.kind === "nonempty")
+                return this.isPureSyncValueWord(e.operand, rawState);
+            if (e.kind === "unary")
+                return (e.operator === "-n" || e.operator === "-z" || e.operator === "-v" || (syncConditionalFileUnaryOps.has(e.operator) && this._isMemoryBackingFs && this.canFastMemoryRedirect && this.budget.limits.maxFileSystemOperations >= 1000 && (this._fileWrites === undefined || this._fileWrites.size === 0) && (this._outputFiles === undefined || this._outputFiles.size === 0))) && this.isPureSyncValueWord(e.operand, rawState);
+            if (e.kind === "binary") {
+                if (e.operator === "=~") {
+                    if (!allowRegex)
+                        return false;
+                    const patInfo = this.extractSimpleErePattern(e.right, rawState);
+                    // A variable pattern can change through expansions or called functions.
+                    if (patInfo?.isVar)
+                        return false;
+                    return this.isPureSyncValueWord(e.left, rawState) && this.getFastAnchoredEreRegex(e.right, rawState) !== undefined && !rawState.readonlyVariables?.has("BASH_REMATCH") && !rawState.exported.has("BASH_REMATCH") && !stateMonitor(rawState)?.hasOverlay("BASH_REMATCH") && !(stateMonitor(rawState)?.store ?? requireArrays(rawState))?.watches.has("BASH_REMATCH");
+                }
+                // A synchronous loop cannot hand off an unsupported pattern mid-iteration.
+                return this.isPureSyncValueWord(e.left, rawState) && this.isPureSyncValueWord(e.right, rawState) && (!(e.operator === "==" || e.operator === "=" || e.operator === "!=") || (e.right.parts.length > 0 && e.right.parts.every(p => p.quoted)));
+            }
+            if (e.kind === "not")
+                return checkLeaf(e.operand);
+            if (e.kind === "and" || e.kind === "or")
+                return checkLeaf(e.left) && checkLeaf(e.right);
+            return false;
+        };
+        return checkLeaf(expression);
+    }
+    isSyncSubEchoCallOk(cmd, rawState) {
+        if (!this.isSyncEchoCallOk(cmd, rawState))
+            return false;
+        if (!cmd.words.slice(1).every(w => w.parts.length > 0 && w.parts.every(part => part.quoted || (part.kind === "text" && part.value.length > 0 && !part.value.includes(" ") && !part.value.includes("\t") && !part.value.includes("\n") && !part.value.includes("{") && !hasGlobOrEscape(part.value, true)))))
+            return false;
+        const firstArg = cmd.words[1];
+        if (!firstArg)
+            return true;
+        const prefix = firstArg.parts.find(part => part.kind !== "text" || part.value.length > 0);
+        // Substitution execution cannot resume when an option appears mid-loop.
+        return prefix?.kind === "text" && !prefix.value.startsWith("-");
+    }
     isPureSyncSubIfOrCase(cmd, rawState) {
         if (cmd.redirects.length !== 0)
             return false;
@@ -14343,7 +14352,7 @@ export class Runtime {
                 return false;
             const w0 = sc.words[0]?.plain;
             if (w0 === "echo")
-                return this.isSyncEchoCallOk(sc, rawState);
+                return this.isSyncSubEchoCallOk(sc, rawState);
             if (w0 === "printf" && sc.words[1]?.plain !== "-v")
                 return this.isSyncPrintfCallOk(sc, 1, rawState);
             return false;
@@ -14363,11 +14372,13 @@ export class Runtime {
                 else if (bc.kind === "conditional") {
                     if (bc.redirects.length !== 0 || rawState.nocasematch || byteLocale(rawState.variables) || !this.canSyncConditional(bc.expression, 0, rawState, true))
                         return false;
-                    if (bc.expression.kind === "binary" && bc.expression.operator === "=~")
+                    if (!this.canSyncLoopConditionalOperands(bc.expression, rawState, false))
                         return false;
                 }
-                else if (!this.extractPosixBracketCondExpr(bc, rawState, true, br.body)) {
-                    return false;
+                else {
+                    const expression = this.extractPosixBracketCondExpr(bc, rawState, true, br.body);
+                    if (!expression || !this.canSyncLoopConditionalOperands(expression, rawState, false))
+                        return false;
                 }
                 if (!isSimpleEchoOrPrintf(br.body))
                     return false;
@@ -14405,29 +14416,7 @@ export class Runtime {
                 const canSyncLoopCondCmd = (c) => {
                     if (c.redirects.length !== 0 || rawState.nocasematch || byteLocale(rawState.variables) || !this.canSyncConditional(c.expression, 0, rawState, true))
                         return false;
-                    const checkLeaf = (e) => {
-                        if (e.kind === "nonempty")
-                            return this.isPureSyncValueWord(e.operand, rawState);
-                        if (e.kind === "unary")
-                            return (e.operator === "-n" || e.operator === "-z" || e.operator === "-v" || (syncConditionalFileUnaryOps.has(e.operator) && this._isMemoryBackingFs && this.canFastMemoryRedirect && this.budget.limits.maxFileSystemOperations >= 1000 && (this._fileWrites === undefined || this._fileWrites.size === 0) && (this._outputFiles === undefined || this._outputFiles.size === 0))) && this.isPureSyncValueWord(e.operand, rawState);
-                        if (e.kind === "binary") {
-                            if (e.operator === "=~") {
-                                const patInfo = this.extractSimpleErePattern(e.right, rawState);
-                                // A variable pattern can change through expansions or called functions.
-                                if (patInfo?.isVar)
-                                    return false;
-                                return this.isPureSyncValueWord(e.left, rawState) && this.getFastAnchoredEreRegex(e.right, rawState) !== undefined && !rawState.readonlyVariables?.has("BASH_REMATCH") && !rawState.exported.has("BASH_REMATCH") && !stateMonitor(rawState)?.hasOverlay("BASH_REMATCH") && !(store ?? requireArrays(rawState))?.watches.has("BASH_REMATCH");
-                            }
-                            // A synchronous loop cannot hand off an unsupported pattern mid-iteration.
-                            return this.isPureSyncValueWord(e.left, rawState) && this.isPureSyncValueWord(e.right, rawState) && (!(e.operator === "==" || e.operator === "=" || e.operator === "!=") || (e.right.parts.length > 0 && e.right.parts.every(p => p.quoted)));
-                        }
-                        if (e.kind === "not")
-                            return checkLeaf(e.operand);
-                        if (e.kind === "and" || e.kind === "or")
-                            return checkLeaf(e.left) && checkLeaf(e.right);
-                        return false;
-                    };
-                    return checkLeaf(c.expression);
+                    return this.canSyncLoopConditionalOperands(c.expression, rawState);
                 };
                 if (cmd.kind === "arithmetic") {
                     if (cmd.redirects.length === 0) {
@@ -14749,9 +14738,9 @@ export class Runtime {
                     return false;
                 }
                 const assignment = this.assignment(w0);
-                // Eligibility is checked against the entry locale. Changing it can make
-                // otherwise pure expansions require the asynchronous byte-aware path.
-                if (assignment && (assignment.name === "LC_ALL" || assignment.name === "LC_CTYPE" || assignment.name === "LC_COLLATE" || assignment.name === "LANG"))
+                // Eligibility uses the entry locale and IFS. Mutations can require
+                // field splitting or byte-aware expansion during a later iteration.
+                if (assignment && (assignment.name === "IFS" || assignment.name === "LC_ALL" || assignment.name === "LC_CTYPE" || assignment.name === "LC_COLLATE" || assignment.name === "LANG"))
                     return false;
                 if (!assignment || (assignment.append && this.budget.limits.maxExpansionBytes !== Infinity) || assignment.name === "OPTIND" || assignment.name === "PIPESTATUS" || assignment.name.includes("[") || rawState.readonlyVariables?.has(assignment.name) || rawState.variableAttributes?.get(assignment.name) || store?.get(assignment.name) || !this.isPureSyncValueWord(assignment.value, rawState)) {
                     return false;
@@ -15732,7 +15721,8 @@ export class Runtime {
                         }
                         else {
                             monitor.values.invalidate(varName);
-                            monitor.proxy.exported.delete(varName);
+                            if (!rawState.exported.has(varName))
+                                monitor.proxy.exported.delete(varName);
                         }
                     }
                 }
@@ -16173,7 +16163,8 @@ export class Runtime {
                     }
                     else {
                         monitor.values.invalidate(varName);
-                        monitor.proxy.exported.delete(varName);
+                        if (!rawState.exported.has(varName))
+                            monitor.proxy.exported.delete(varName);
                     }
                 }
             }
@@ -19784,7 +19775,7 @@ export class Runtime {
                 publicDiagnosticMessage(failure, this.budget.onInternalError);
             }
         }
-        if ((error instanceof ExpansionFailure && !(error instanceof SubstringRangeFailure && state.loopDepth > 0)) || error instanceof BraceExpansionFailure)
+        if (error instanceof ExpansionFailure || error instanceof BraceExpansionFailure)
             throw completedExit(error instanceof ParameterExpansionFailure && !state.isolated ? 127 : 1);
         if (error instanceof FatalCommandFailure)
             throw completedExit(error.status);
@@ -25515,7 +25506,7 @@ export class Runtime {
                 const length = await arithmetic(expression.length);
                 end = length.value < 0n ? size + length.value : offset + length.value;
                 if (end < offset)
-                    throw new SubstringRangeFailure(`${length.source}: substring expression < 0`, line);
+                    throw new ExpansionFailure(`${length.source}: substring expression < 0`, line);
                 if (end > size)
                     end = size;
             }
@@ -26822,6 +26813,13 @@ export class Runtime {
         return out;
     }
     evalSyncTr(input, opArgs) {
+        // Non-ASCII sets require the byte parser; reject them before running producers.
+        for (const value of opArgs) {
+            for (let i = 0; i < value.length; i++) {
+                if (value.charCodeAt(i) >= 128)
+                    return undefined;
+            }
+        }
         let idx = 0;
         let flagC = false;
         let flagD = false;
@@ -28862,7 +28860,7 @@ export class Runtime {
         const out = [];
         let curStyle = bodyStyle;
         let num = start;
-        const unnumberedPrefix = " ".repeat(width + sep.length);
+        const unnumberedPrefix = " ".repeat(width + shellValueByteLength(sep));
         for (let i = 0; i < rawLines.length; i++) {
             const l = rawLines[i];
             if (l === "\\:" || l === "\\:\\:" || l === "\\:\\:\\:") {
@@ -29027,7 +29025,11 @@ export class Runtime {
         const units = "KMGTPEZY";
         const out = [];
         for (let i = 0; i < rawLines.length; i++) {
-            const raw = rawLines[i].trim();
+            const line = rawLines[i];
+            const raw = line.trim();
+            // Preserve field whitespace and padding through the command implementation.
+            if (line !== raw)
+                return undefined;
             if (raw.length === 0) {
                 out.push("");
                 continue;
@@ -29369,7 +29371,7 @@ export class Runtime {
             return "-L";
         return undefined;
     }
-    evalSyncUniq(rawLines, opArgs) {
+    evalSyncUniq(rawLines, opArgs, isByteLocale = false) {
         let ignoreCase = false;
         let hasCount = false;
         let onlyRepeated = false;
@@ -29428,6 +29430,21 @@ export class Runtime {
                 return undefined;
             }
         }
+        if (isByteLocale && (skipChars !== 0 || checkChars !== Infinity) && rawLines.some(line => {
+            for (let i = 0; i < line.length; i++)
+                if (line.charCodeAt(i) > 127)
+                    return true;
+            return false;
+        }))
+            return undefined;
+        const foldAscii = (value) => {
+            let folded = "";
+            for (let i = 0; i < value.length; i++) {
+                const code = value.charCodeAt(i);
+                folded += code >= 97 && code <= 122 ? String.fromCharCode(code - 32) : value[i];
+            }
+            return folded;
+        };
         const keyOf = (l) => {
             let offset = 0;
             for (let f = 0; f < skipFields; f++) {
@@ -29438,11 +29455,11 @@ export class Runtime {
             }
             if (skipChars === 0 && checkChars === Infinity) {
                 const sub = l.slice(offset);
-                return ignoreCase ? sub.toLowerCase() : sub;
+                return ignoreCase ? foldAscii(sub) : sub;
             }
             const chars = Array.from(l.slice(offset));
             const sub = (checkChars === Infinity ? chars.slice(skipChars) : chars.slice(skipChars, skipChars + checkChars)).join("");
-            return ignoreCase ? sub.toLowerCase() : sub;
+            return ignoreCase ? foldAscii(sub) : sub;
         };
         const outLines = [];
         let uIdx = 0;
@@ -29919,8 +29936,9 @@ export class Runtime {
                                 outLines = [String(nl)];
                             }
                             else if (stageArgs[0] === "-w") {
-                                const trimmed = inStr.trim();
-                                outLines = [String(trimmed.length === 0 ? 0 : trimmed.split(/[ \t\n\r\f\v]+/).length)];
+                                if (!byteLocale(rawState.variables) && prevBuf.subarray(0, prevLen).some(byte => byte > 127))
+                                    return undefined;
+                                outLines = [String(inStr.split(/[ \t\n\r\f\v]+/).filter(Boolean).length)];
                             }
                             else if (stageArgs[0] === "-m") {
                                 outLines = [String(byteLocale(rawState.variables) ? prevLen : Array.from(inStr).length)];
@@ -29958,7 +29976,7 @@ export class Runtime {
                             outLines = this.evalSyncSort(rawLines, stageArgs, false) ?? [];
                         }
                         else if (isInlineUniq) {
-                            const uniqRes = this.evalSyncUniq(rawLines, stageArgs);
+                            const uniqRes = this.evalSyncUniq(rawLines, stageArgs, byteLocale(rawState.variables));
                             if (uniqRes === undefined)
                                 return undefined;
                             outLines = uniqRes;
@@ -30359,7 +30377,7 @@ export class Runtime {
                                 fileRes = renderLines(sortRes);
                         }
                         else if (w0Plain === "uniq") {
-                            const uniqRes = this.evalSyncUniq(rawLines, opArgs);
+                            const uniqRes = this.evalSyncUniq(rawLines, opArgs, byteLocale(rawState.variables));
                             if (uniqRes !== undefined)
                                 fileRes = renderLines(uniqRes);
                         }
@@ -30370,7 +30388,10 @@ export class Runtime {
                             if (opArgs.length === 0)
                                 fileRes = this.syncBase64Encode(view) + "\n";
                             else {
-                                const decoded = this.syncBase64DecodeBytes(fileStr);
+                                const cleaned = fileStr.replace(/[ \t\r\n]+/g, "");
+                                if (cleaned.length % 4 !== 0 || (cleaned.length > 0 && !/^[A-Za-z0-9+/]+={0,2}$/.test(cleaned)))
+                                    return undefined;
+                                const decoded = this.syncBase64DecodeBytes(cleaned);
                                 // Text-only substitutions cannot retain binary byte provenance.
                                 if (decoded.some(byte => byte === 0 || byte >= 128))
                                     return undefined;

package/dist/safe-bash-command-ssconvert/index.js

@@ -100968,8 +100968,18 @@ function writeRichString(value3, runs, xml2, charge, target = "cell") {
   const t = (text2) => xml2("t", text2.trim() !== text2 ? { "xml:space": "preserve" } : {}, escapeXlsx(encodeXlsxString(text2)));
   if (!runs?.length) return t(value3);
   charge?.(runs.length);
-  const bytes = new TextEncoder().encode(value3), decoder = new TextDecoder("UTF-8", { fatal: true });
-  const points = [.../* @__PURE__ */ new Set([0, bytes.length, ...runs.flatMap((run) => [run.start, run.end])])].sort((a3, b3) => a3 - b3);
+  const length = new TextEncoder().encode(value3).length;
+  const points = [.../* @__PURE__ */ new Set([0, length, ...runs.flatMap((run) => [run.start, run.end])])].sort((a3, b3) => a3 - b3);
+  let byteOffset = 0, characterOffset = 0;
+  const characters = points.map((point) => {
+    while (byteOffset < point && characterOffset < value3.length) {
+      const code = value3.codePointAt(characterOffset);
+      byteOffset += code < 128 ? 1 : code < 2048 ? 2 : code < 65536 ? 3 : 4;
+      characterOffset += code > 65535 ? 2 : 1;
+    }
+    if (byteOffset !== point) throw new SsconvertError("invalid-request", "Invalid rich text UTF-8 boundary");
+    return characterOffset;
+  });
   let result2 = target === "comment" ? xml2("r", {}, t("")) : "";
   for (let i = 0; i + 1 < points.length; i++) {
     charge?.(runs.length);
@@ -100989,7 +100999,7 @@ function writeRichString(value3, runs, xml2, charge, target = "cell") {
       val: Object.hasOwn(richUnderlines, attrs.underline) ? richUnderlines[attrs.underline] : "none"
     });
     if (attrs.subscript || attrs.superscript) properties += xml2("vertAlign", { val: attrs.subscript ? "subscript" : "superscript" });
-    result2 += xml2("r", {}, (properties || target === "comment" ? xml2("rPr", {}, properties) : "") + t(decoder.decode(bytes.subarray(start, end2))));
+    result2 += xml2("r", {}, (properties || target === "comment" ? xml2("rPr", {}, properties) : "") + t(value3.slice(characters[i], characters[i + 1])));
   }
   return result2;
 }
@@ -136315,7 +136325,7 @@ function createHtmlWriter(profile) {
                     closures.unshift(close);
                   }
                 }
-                put(encoded2(new TextDecoder().decode(bytes.subarray(from, to))));
+                put(encoded2(new TextDecoder("utf-8", { ignoreBOM: true }).decode(bytes.subarray(from, to))));
                 for (const closure of closures) put(closure);
               }
             } else if (cell) put(encoded2(await renderCellText(cell, book, context, "preserve")));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-bash",
-  "version": "0.1.751",
+  "version": "0.1.752",
   "description": "Extensible virtual shell with pluggable filesystems and streaming commands",
   "type": "module",
   "license": "MIT",
@@ -645,7 +645,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.751",
+    "@poe-platform/safe-fs": "0.1.752",
     "pdf-lib": "1.17.1",
     "@types/node": "^25.2.2",
     "pako": "3.0.1",