[Change] Update vendored tlog_lib.sh and tlog to v2.0.4

[Change] Update vendored tlog_lib.sh and tlog to v2.0.4 (shell alias safety,
inline comment standards)

Author: rfxn

CHANGELOG

@@ -1,5 +1,10 @@
 v2.0.1 | Mar 10 2026:
 
+  -- Changes --
+
+[Change] Update vendored tlog_lib.sh and tlog to v2.0.4 (shell alias safety,
+      inline comment standards)
+
   -- New Features --
 
 [New] Compound signature (csig) scanning: multi-pattern boolean logic

CHANGELOG.RELEASE

@@ -1,5 +1,10 @@
 v2.0.1 | Mar 10 2026:
 
+  -- Changes --
+
+[Change] Update vendored tlog_lib.sh and tlog to v2.0.4 (shell alias safety,
+      inline comment standards)
+
   -- New Features --
 
 [New] Compound signature (csig) scanning: multi-pattern boolean logic

files/internals/tlog

@@ -27,7 +27,7 @@
 PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/local/bin:/usr/local/sbin
 export PATH
 
-TLOG_VERSION="2.0.2"
+TLOG_VERSION="2.0.4"
 
 # BASERUN: cursor storage directory — sed-replaced at install time
 BASERUN="${BASERUN:-/tmp}"
@@ -259,8 +259,8 @@ if [[ ! -f "$_LIB" ]]; then
 fi
 
 # Security check: library must be root-owned and not world-writable
-_lib_owner=$(stat -L -c '%u' "$_LIB" 2>/dev/null)
-_lib_perms=$(stat -L -c '%a' "$_LIB" 2>/dev/null)
+_lib_owner=$(stat -L -c '%u' "$_LIB" 2>/dev/null)  # stat may fail if lib deleted between checks
+_lib_perms=$(stat -L -c '%a' "$_LIB" 2>/dev/null)  # stat may fail if lib deleted between checks
 _lib_world="${_lib_perms: -1}"
 if [[ "$_lib_owner" != "0" ]] || [[ $((_lib_world & 2)) -ne 0 ]]; then
 	echo "tlog: security check failed on $_LIB (owner=$_lib_owner perms=$_lib_perms)" >&2
@@ -356,7 +356,7 @@ _tlog_cmd_status() {
 	if [[ $parse_rc -eq 2 ]]; then
 		# Corrupt cursor: show raw content for diagnosis
 		local raw_value=""
-		read -r raw_value < "$cursor_file" 2>/dev/null || true
+		read -r raw_value < "$cursor_file" 2>/dev/null || true  # read exits 1 on EOF; not an error
 		printf 'raw:    %s\n' "$raw_value"
 		printf 'state:  corrupt (would auto-reset on next read)\n'
 	elif [[ -z "$_tlog_cursor_value" ]]; then
@@ -369,7 +369,7 @@ _tlog_cmd_status() {
 		# Cursor age
 		if [[ -f "$cursor_file" ]]; then
 			local mtime now age_s
-			mtime=$(stat -c %Y "$cursor_file" 2>/dev/null) || mtime=0
+			mtime=$(stat -c %Y "$cursor_file" 2>/dev/null) || mtime=0  # stat fails if cursor removed; default to 0
 			now=$(date +%s)
 			age_s=$((now - mtime))
 			if [[ $age_s -ge 86400 ]]; then
@@ -411,7 +411,7 @@ _tlog_cmd_status() {
 	# Related files
 	if [[ -f "$BASERUN/${name}.jts" ]]; then
 		local jts_val
-		read -r jts_val < "$BASERUN/${name}.jts" 2>/dev/null || true
+		read -r jts_val < "$BASERUN/${name}.jts" 2>/dev/null || true  # read exits 1 on EOF; not an error
 		printf 'jts:    %s\n' "$jts_val"
 	fi
 	if [[ -f "$BASERUN/${name}.lock" ]]; then
@@ -440,21 +440,21 @@ _tlog_cmd_reset() {
 
 	# Cursor file
 	if [[ -f "$BASERUN/$name" ]]; then
-		rm -f "$BASERUN/$name"
+		command rm -f "$BASERUN/$name"
 		printf 'removed: %s\n' "$BASERUN/$name"
 		found=1
 	fi
 
 	# Journal timestamp
 	if [[ -f "$BASERUN/${name}.jts" ]]; then
-		rm -f "$BASERUN/${name}.jts"
+		command rm -f "$BASERUN/${name}.jts"
 		printf 'removed: %s\n' "$BASERUN/${name}.jts"
 		found=1
 	fi
 
 	# Lock file
 	if [[ -f "$BASERUN/${name}.lock" ]]; then
-		rm -f "$BASERUN/${name}.lock"
+		command rm -f "$BASERUN/${name}.lock"
 		printf 'removed: %s\n' "$BASERUN/${name}.lock"
 		found=1
 	fi
@@ -463,7 +463,7 @@ _tlog_cmd_reset() {
 	local tmpfile
 	for tmpfile in "$BASERUN"/."${name}".??????; do
 		if [[ -f "$tmpfile" ]]; then
-			rm -f "$tmpfile"
+			command rm -f "$tmpfile"
 			printf 'removed: %s\n' "$tmpfile"
 			found=1
 		fi
@@ -472,7 +472,7 @@ _tlog_cmd_reset() {
 	# Orphaned JTS temp files (mktemp pattern: .NAME.jts.XXXXXX)
 	for tmpfile in "$BASERUN"/."${name}".jts.??????; do
 		if [[ -f "$tmpfile" ]]; then
-			rm -f "$tmpfile"
+			command rm -f "$tmpfile"
 			printf 'removed: %s\n' "$tmpfile"
 			found=1
 		fi

files/internals/tlog_lib.sh

@@ -17,11 +17,11 @@
 # GNU General Public License for more details.
 
 # Source guard — prevent double-sourcing
-[[ -n "${_TLOG_LIB_LOADED:-}" ]] && return 0 2>/dev/null
+[[ -n "${_TLOG_LIB_LOADED:-}" ]] && return 0 2>/dev/null  # return may fail at top-level; not an error
 _TLOG_LIB_LOADED=1
 
 # shellcheck disable=SC2034
-TLOG_LIB_VERSION="2.0.3"
+TLOG_LIB_VERSION="2.0.4"
 
 # Journal filter registry — consuming projects populate via tlog_journal_register()
 # Uses parallel indexed arrays instead of declare -A to avoid scope issues
@@ -56,7 +56,7 @@ _tlog_validate_name() {
 _tlog_check_baserun_perms() {
 	local baserun="$1"
 	local perms world_bits
-	perms=$(stat -c '%a' "$baserun" 2>/dev/null) || return 0
+	perms=$(stat -c '%a' "$baserun" 2>/dev/null) || return 0  # stat fails if dir removed; advisory check
 	world_bits="${perms: -1}"
 	if [[ $((world_bits & 2)) -ne 0 ]]; then
 		echo "tlog: warning: baserun directory '$baserun' is world-writable" >&2
@@ -142,9 +142,9 @@ _tlog_write_cursor() {
 	}
 	printf '%s\n' "$formatted" > "$tmp_file"
 
-	if ! mv -f "$tmp_file" "$cursor_file"; then
+	if ! command mv -f "$tmp_file" "$cursor_file"; then
 		echo "tlog: warning: cursor write failed for $tlog_name (rename)" >&2
-		rm -f "$tmp_file"
+		command rm -f "$tmp_file"
 		return 1
 	fi
 
@@ -289,12 +289,12 @@ _tlog_handle_rotation() {
 
 	if _tlog_is_compressed "$rtfile"; then
 		# Try temp-file path: mktemp + decompress + read from temp
-		tmp_decomp=$(mktemp "$baserun/.${tlog_name}.XXXXXX" 2>/dev/null) || tmp_decomp=""
+		tmp_decomp=$(mktemp "$baserun/.${tlog_name}.XXXXXX" 2>/dev/null) || tmp_decomp=""  # fallback to pipe path on failure
 		if [[ -n "$tmp_decomp" ]] && _tlog_cat_file "$rtfile" > "$tmp_decomp"; then
 			rtsize=$(_tlog_get_size "$tmp_decomp" "$mode")
 		else
 			# Temp approach failed — clean up and fall back to pipe
-			[[ -n "$tmp_decomp" ]] && rm -f "$tmp_decomp"
+			[[ -n "$tmp_decomp" ]] && command rm -f "$tmp_decomp"
 			echo "tlog: warning: rotation temp file failed for $tlog_name, using pipe fallback" >&2
 			_tlog_rotation_via_pipe "$rtfile" "$cursor_size" "$mode"
 			return 0
@@ -314,7 +314,7 @@ _tlog_handle_rotation() {
 		fi
 	fi
 
-	[[ -n "$tmp_decomp" ]] && rm -f "$tmp_decomp"
+	[[ -n "$tmp_decomp" ]] && command rm -f "$tmp_decomp"
 	return 0
 }
 
@@ -331,7 +331,7 @@ tlog_get_file_size() {
 		return 1
 	fi
 
-	size=$(stat -c %s "$file" 2>/dev/null) || size=$(wc -c < "$file")
+	size=$(stat -c %s "$file" 2>/dev/null) || size=$(wc -c < "$file")  # stat unavailable on some platforms; wc fallback
 	size="${size## }"
 	printf '%s' "$size"
 }