@ai-agent-forge/agent-forge 0.85.0

package/dist/plugins/ecosystem/node-tar-package.js

@@ -0,0 +1,294 @@
+import { createGunzip } from "node:zlib";
+import { NodePackageInstallErrorV1, normalizedEntryName, resolveNodePackageLimitsV1, } from "./node-package-install-host.js";
+const TAR_BLOCK_BYTES_V1 = 512;
+const TAR_NAME_LENGTH_V1 = 100;
+const TAR_SIZE_OFFSET_V1 = 124;
+const TAR_SIZE_LENGTH_V1 = 12;
+const TAR_CHECKSUM_OFFSET_V1 = 148;
+const TAR_CHECKSUM_LENGTH_V1 = 8;
+const TAR_TYPEFLAG_OFFSET_V1 = 156;
+const TAR_MAGIC_OFFSET_V1 = 257;
+const TAR_PREFIX_OFFSET_V1 = 345;
+const TAR_PREFIX_LENGTH_V1 = 155;
+const USTAR_MAGIC_V1 = [0x75, 0x73, 0x74, 0x61, 0x72];
+function readHeaderString(bytes, offset, length) {
+    const end = offset + length;
+    let stop = offset;
+    while (stop < end && bytes[stop] !== 0)
+        stop += 1;
+    try {
+        return new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(offset, stop));
+    }
+    catch {
+        throw new NodePackageInstallErrorV1("archive_invalid");
+    }
+}
+function readOctalHeaderField(header, offset, length) {
+    const end = offset + length;
+    let start = offset;
+    while (start < end && header[start] === 0x20)
+        start += 1;
+    let stop = end;
+    while (stop > start && (header[stop - 1] === 0 || header[stop - 1] === 0x20))
+        stop -= 1;
+    let value = 0;
+    for (let index = start; index < stop; index += 1) {
+        const byte = header[index];
+        // Octal ASCII only; the GNU base-256 (0x80-prefixed) encoding is rejected.
+        if (byte < 0x30 || byte > 0x37)
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        value = value * 8 + (byte - 0x30);
+        if (value > Number.MAX_SAFE_INTEGER)
+            throw new NodePackageInstallErrorV1("archive_invalid");
+    }
+    return value;
+}
+function verifyHeaderChecksum(header) {
+    let sum = 0;
+    for (let index = 0; index < TAR_BLOCK_BYTES_V1; index += 1) {
+        sum +=
+            index >= TAR_CHECKSUM_OFFSET_V1 && index < TAR_CHECKSUM_OFFSET_V1 + TAR_CHECKSUM_LENGTH_V1
+                ? 32
+                : header[index];
+    }
+    if (readOctalHeaderField(header, TAR_CHECKSUM_OFFSET_V1, TAR_CHECKSUM_LENGTH_V1) !== sum)
+        throw new NodePackageInstallErrorV1("archive_invalid");
+}
+function headerEntryName(header) {
+    for (let index = 0; index < USTAR_MAGIC_V1.length; index += 1)
+        if (header[TAR_MAGIC_OFFSET_V1 + index] !== USTAR_MAGIC_V1[index])
+            throw new NodePackageInstallErrorV1("archive_invalid");
+    const name = readHeaderString(header, 0, TAR_NAME_LENGTH_V1);
+    const prefix = readHeaderString(header, TAR_PREFIX_OFFSET_V1, TAR_PREFIX_LENGTH_V1);
+    return prefix === "" ? name : `${prefix}/${name}`;
+}
+function isZeroBlock(tar, offset) {
+    for (let index = 0; index < TAR_BLOCK_BYTES_V1; index += 1)
+        if (tar[offset + index] !== 0)
+            return false;
+    return true;
+}
+function verifyZeroPadding(tar, dataEnd, paddedEnd) {
+    for (let index = dataEnd; index < paddedEnd; index += 1)
+        if (tar[index] !== 0)
+            throw new NodePackageInstallErrorV1("archive_invalid");
+}
+/**
+ * Extract the `path` override from a pax extended header payload. Records are
+ * `<length> <key>=<value>\n` with byte-oriented lengths; every record except
+ * `path` is deliberately ignored.
+ */
+function parsePaxPath(data) {
+    let offset = 0;
+    let path;
+    while (offset < data.byteLength) {
+        let space = offset;
+        while (space < data.byteLength && data[space] !== 0x20)
+            space += 1;
+        if (space >= data.byteLength)
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        let recordLength = 0;
+        for (let index = offset; index < space; index += 1) {
+            const byte = data[index];
+            if (byte < 0x30 || byte > 0x39)
+                throw new NodePackageInstallErrorV1("archive_invalid");
+            recordLength = recordLength * 10 + (byte - 0x30);
+            if (recordLength > data.byteLength)
+                throw new NodePackageInstallErrorV1("archive_invalid");
+        }
+        if (recordLength <= space - offset + 1)
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        const end = offset + recordLength;
+        if (end > data.byteLength || data[end - 1] !== 0x0a)
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        let equals = space + 1;
+        while (equals < end - 1 && data[equals] !== 0x3d)
+            equals += 1;
+        if (equals >= end - 1)
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        if (readHeaderString(data, space + 1, equals - space - 1) === "path")
+            path = readHeaderString(data, equals + 1, end - 1 - equals - 1);
+        offset = end;
+    }
+    return path;
+}
+function readGnuLongName(data) {
+    let end = data.byteLength;
+    if (end > 0 && data[end - 1] === 0)
+        end -= 1;
+    if (end === 0)
+        throw new NodePackageInstallErrorV1("archive_invalid");
+    try {
+        return new TextDecoder("utf-8", { fatal: true }).decode(data.subarray(0, end));
+    }
+    catch {
+        throw new NodePackageInstallErrorV1("archive_invalid");
+    }
+}
+/**
+ * Streaming gunzip with a running output counter so a gzip bomb is cut off
+ * as soon as the extracted budget is exceeded, never buffered in full first.
+ */
+function gunzipBounded(input, maxBytes) {
+    return new Promise((resolve, reject) => {
+        const gunzip = createGunzip();
+        const chunks = [];
+        let total = 0;
+        let settled = false;
+        const fail = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            gunzip.destroy();
+            reject(error);
+        };
+        gunzip.on("data", (chunk) => {
+            if (settled)
+                return;
+            total += chunk.byteLength;
+            if (total > maxBytes) {
+                fail(new NodePackageInstallErrorV1("archive_budget_exceeded"));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        gunzip.on("end", () => {
+            if (settled)
+                return;
+            settled = true;
+            const result = new Uint8Array(total);
+            let offset = 0;
+            for (const chunk of chunks) {
+                result.set(chunk, offset);
+                offset += chunk.byteLength;
+            }
+            resolve(result);
+        });
+        gunzip.on("error", () => {
+            fail(new NodePackageInstallErrorV1("archive_invalid"));
+        });
+        gunzip.end(input);
+    });
+}
+function parseTarEntries(tar, limits) {
+    const entries = [];
+    const names = new Set();
+    let extractedBytes = 0;
+    let offset = 0;
+    let pendingPath;
+    while (offset + TAR_BLOCK_BYTES_V1 <= tar.byteLength) {
+        const header = tar.subarray(offset, offset + TAR_BLOCK_BYTES_V1);
+        if (isZeroBlock(tar, offset)) {
+            // EOF is two consecutive zero blocks followed by nothing but zero padding.
+            if (offset + 2 * TAR_BLOCK_BYTES_V1 > tar.byteLength || !isZeroBlock(tar, offset + TAR_BLOCK_BYTES_V1))
+                throw new NodePackageInstallErrorV1("archive_invalid");
+            if (pendingPath !== undefined)
+                throw new NodePackageInstallErrorV1("archive_invalid");
+            for (let index = offset + 2 * TAR_BLOCK_BYTES_V1; index < tar.byteLength; index += 1)
+                if (tar[index] !== 0)
+                    throw new NodePackageInstallErrorV1("archive_invalid");
+            return Object.freeze(entries);
+        }
+        verifyHeaderChecksum(header);
+        const typeflag = String.fromCharCode(header[TAR_TYPEFLAG_OFFSET_V1]);
+        const size = readOctalHeaderField(header, TAR_SIZE_OFFSET_V1, TAR_SIZE_LENGTH_V1);
+        if (size > limits.maxEntryBytes)
+            throw new NodePackageInstallErrorV1("archive_budget_exceeded");
+        const dataStart = offset + TAR_BLOCK_BYTES_V1;
+        const dataEnd = dataStart + size;
+        if (dataEnd > tar.byteLength)
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        const paddedEnd = Math.ceil(dataEnd / TAR_BLOCK_BYTES_V1) * TAR_BLOCK_BYTES_V1;
+        verifyZeroPadding(tar, dataEnd, paddedEnd);
+        const data = tar.subarray(dataStart, dataEnd);
+        if (typeflag === "L") {
+            pendingPath = readGnuLongName(data);
+            offset = paddedEnd;
+            continue;
+        }
+        if (typeflag === "x") {
+            const paxPath = parsePaxPath(data);
+            if (paxPath !== undefined)
+                pendingPath = paxPath;
+            offset = paddedEnd;
+            continue;
+        }
+        if (typeflag === "g") {
+            offset = paddedEnd;
+            continue;
+        }
+        // Hard links ('1') and symlinks ('2') are rejected like ZIP symlink entries.
+        if (typeflag === "1" || typeflag === "2")
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        if (typeflag !== "\0" && typeflag !== "0" && typeflag !== "5")
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        let rawName = pendingPath ?? headerEntryName(header);
+        pendingPath = undefined;
+        if (typeflag === "5" && !rawName.endsWith("/"))
+            rawName += "/";
+        const normalized = normalizedEntryName(rawName);
+        if (normalized.directory && size !== 0)
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        if (names.has(normalized.name))
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        names.add(normalized.name);
+        if (entries.length + 1 > limits.maxEntries)
+            throw new NodePackageInstallErrorV1("archive_budget_exceeded");
+        const bytes = normalized.directory ? new Uint8Array() : new Uint8Array(data);
+        extractedBytes += bytes.byteLength;
+        if (extractedBytes > limits.maxExtractedBytes)
+            throw new NodePackageInstallErrorV1("archive_budget_exceeded");
+        entries.push(Object.freeze({ name: normalized.name, directory: normalized.directory, bytes }));
+        offset = paddedEnd;
+    }
+    // The archive ended without the two-block EOF marker.
+    throw new NodePackageInstallErrorV1("archive_invalid");
+}
+/**
+ * npm tarballs root every entry below a single literal `package/` directory,
+ * while ZIP packages carry their manifests at the archive root. When every
+ * entry shares exactly that one leading directory segment, strip the one
+ * layer so npm tgz artifacts land in the same normalized shape as ZIP
+ * artifacts. Any other layout — including root-level entries and arbitrary
+ * nested directories — is returned unchanged.
+ */
+function stripNpmPackageRoot(entries) {
+    if (entries.length === 0)
+        return entries;
+    const rootSegment = entries[0].name.split("/")[0];
+    if (rootSegment !== "package")
+        return entries;
+    const sharesRoot = (entry) => {
+        if (entry.name === rootSegment)
+            return entry.directory;
+        const parts = entry.name.split("/");
+        return parts.length >= 2 && parts[0] === rootSegment;
+    };
+    if (!entries.every(sharesRoot))
+        return entries;
+    const stripped = [];
+    for (const entry of entries) {
+        if (entry.name === rootSegment)
+            continue;
+        stripped.push(Object.freeze({ ...entry, name: entry.name.slice(rootSegment.length + 1) }));
+    }
+    return Object.freeze(stripped);
+}
+/**
+ * Parse a gzip-compressed tar package into the same normalized entry shape as
+ * {@link parseNodeZipPackageV1}, sharing its name normalization, budgets, and
+ * structured errors. The gzip layer is decompressed streaming with a hard
+ * extracted-bytes cap; the tar layer accepts only ustar-style headers with
+ * valid checksums, rejects links and non-regular types, and supports GNU long
+ * names ('L'), pax path records ('x'), and skipped global headers ('g').
+ */
+export async function parseNodeTarGzPackageV1(input, limitsInput = {}) {
+    if (!(input instanceof Uint8Array))
+        throw new NodePackageInstallErrorV1("archive_invalid");
+    const limits = resolveNodePackageLimitsV1(limitsInput);
+    if (input.byteLength > limits.maxArchiveBytes)
+        throw new NodePackageInstallErrorV1("archive_budget_exceeded");
+    const tar = await gunzipBounded(input, limits.maxExtractedBytes);
+    return stripNpmPackageRoot(parseTarEntries(tar, limits));
+}
+//# sourceMappingURL=node-tar-package.js.map

package/dist/plugins/ecosystem/node-tar-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-tar-package.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-tar-package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EACN,yBAAyB,EAGzB,mBAAmB,EACnB,0BAA0B,GAC1B,MAAM,gCAAgC,CAAC;AAExC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,cAAc,GAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEzE,SAAS,gBAAgB,CAAC,KAAiB,EAAE,MAAc,EAAE,MAAc,EAAU;IACpF,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC;IAC5B,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,OAAO,IAAI,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC;QACJ,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IACxD,CAAC;AAAA,CACD;AAED,SAAS,oBAAoB,CAAC,MAAkB,EAAE,MAAc,EAAE,MAAc,EAAU;IACzF,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC;IAC5B,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,OAAO,KAAK,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,KAAK,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,OAAO,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,IAAI,IAAI,CAAC,CAAC;IACxF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;QAC5B,2EAA2E;QAC3E,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QACvF,KAAK,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,MAAM,CAAC,gBAAgB;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,oBAAoB,CAAC,MAAkB,EAAQ;IACvD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,kBAAkB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,GAAG;YACF,KAAK,IAAI,sBAAsB,IAAI,KAAK,GAAG,sBAAsB,GAAG,sBAAsB;gBACzF,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC;IACpB,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,EAAE,sBAAsB,EAAE,sBAAsB,CAAC,KAAK,GAAG;QACvF,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;AAAA,CACxD;AAED,SAAS,eAAe,CAAC,MAAkB,EAAU;IACpD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAC5D,IAAI,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC;YAChE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IACpF,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;AAAA,CAClD;AAED,SAAS,WAAW,CAAC,GAAe,EAAE,MAAc,EAAW;IAC9D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,kBAAkB,EAAE,KAAK,IAAI,CAAC;QAAE,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACxG,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,iBAAiB,CAAC,GAAe,EAAE,OAAe,EAAE,SAAiB,EAAQ;IACrF,KAAK,IAAI,KAAK,GAAG,OAAO,EAAE,KAAK,GAAG,SAAS,EAAE,KAAK,IAAI,CAAC;QACtD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;AAAA,CAC9E;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAgB,EAAsB;IAC3D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAwB,CAAC;IAC7B,OAAO,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,IAAI,KAAK,GAAG,MAAM,CAAC;QACnB,OAAO,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,KAAK,IAAI,CAAC,CAAC;QACnE,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QACrF,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,IAAI,KAAK,GAAG,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;YAC1B,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;YACvF,YAAY,GAAG,YAAY,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YACjD,IAAI,YAAY,GAAG,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,YAAY,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,MAAM,GAAG,YAAY,CAAC;QAClC,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QAC5G,IAAI,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;QACvB,OAAO,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,CAAC;QAC9D,IAAI,MAAM,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QAC9E,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,KAAK,MAAM;YACnE,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,eAAe,CAAC,IAAgB,EAAU;IAClD,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;IAC1B,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;QAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,IAAI,GAAG,KAAK,CAAC;QAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IACtE,IAAI,CAAC;QACJ,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IACxD,CAAC;AAAA,CACD;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAiB,EAAE,QAAgB,EAAuB;IAChF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,KAAgC,EAAQ,EAAE,CAAC;YACxD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CACd,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAiB,EAAE,EAAE,CAAC;YACxC,IAAI,OAAO;gBAAE,OAAO;YACpB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,yBAAyB,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAA,CACnB,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;YAC5B,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,CAChB,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAAA,CACvD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAAA,CAClB,CAAC,CAAC;AAAA,CACH;AAED,SAAS,eAAe,CAAC,GAAe,EAAE,MAAwC,EAAoC;IACrH,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,WAA+B,CAAC;IACpC,OAAO,MAAM,GAAG,kBAAkB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAAC,CAAC;QACjE,IAAI,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9B,2EAA2E;YAC3E,IAAI,MAAM,GAAG,CAAC,GAAG,kBAAkB,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAAC;gBACrG,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;YACxD,IAAI,WAAW,KAAK,SAAS;gBAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;YACtF,KAAK,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,kBAAkB,EAAE,KAAK,GAAG,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,CAAC;gBACnF,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;YAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,sBAAsB,CAAE,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QAClF,IAAI,IAAI,GAAG,MAAM,CAAC,aAAa;YAAE,MAAM,IAAI,yBAAyB,CAAC,yBAAyB,CAAC,CAAC;QAChG,MAAM,SAAS,GAAG,MAAM,GAAG,kBAAkB,CAAC;QAC9C,MAAM,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;QACjC,IAAI,OAAO,GAAG,GAAG,CAAC,UAAU;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;QAC/E,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACtB,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,GAAG,SAAS,CAAC;YACnB,SAAS;QACV,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,KAAK,SAAS;gBAAE,WAAW,GAAG,OAAO,CAAC;YACjD,MAAM,GAAG,SAAS,CAAC;YACnB,SAAS;QACV,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,GAAG,SAAS,CAAC;YACnB,SAAS;QACV,CAAC;QACD,6EAA6E;QAC7E,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QACjG,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG;YAC5D,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QACxD,IAAI,OAAO,GAAG,WAAW,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,WAAW,GAAG,SAAS,CAAC;QACxB,IAAI,QAAQ,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,GAAG,CAAC;QAC/D,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,SAAS,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QAC/F,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QACvF,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU;YAAE,MAAM,IAAI,yBAAyB,CAAC,yBAAyB,CAAC,CAAC;QAC3G,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7E,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,cAAc,GAAG,MAAM,CAAC,iBAAiB;YAAE,MAAM,IAAI,yBAAyB,CAAC,yBAAyB,CAAC,CAAC;QAC9G,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/F,MAAM,GAAG,SAAS,CAAC;IACpB,CAAC;IACD,sDAAsD;IACtD,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;AAAA,CACvD;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,OAAyC,EAAoC;IACzG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACpD,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC9C,MAAM,UAAU,GAAG,CAAC,KAA4B,EAAW,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC,SAAS,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;IAAA,CACrD,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IAC/C,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QACzC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAAA,CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,KAAiB,EACjB,WAAW,GAA2B,EAAE,EACI;IAC5C,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,eAAe;QAAE,MAAM,IAAI,yBAAyB,CAAC,yBAAyB,CAAC,CAAC;IAC9G,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACjE,OAAO,mBAAmB,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAAA,CACzD","sourcesContent":["import { createGunzip } from \"node:zlib\";\nimport {\n\tNodePackageInstallErrorV1,\n\ttype NodeZipPackageEntryV1,\n\ttype NodeZipPackageLimitsV1,\n\tnormalizedEntryName,\n\tresolveNodePackageLimitsV1,\n} from \"./node-package-install-host.ts\";\n\nconst TAR_BLOCK_BYTES_V1 = 512;\nconst TAR_NAME_LENGTH_V1 = 100;\nconst TAR_SIZE_OFFSET_V1 = 124;\nconst TAR_SIZE_LENGTH_V1 = 12;\nconst TAR_CHECKSUM_OFFSET_V1 = 148;\nconst TAR_CHECKSUM_LENGTH_V1 = 8;\nconst TAR_TYPEFLAG_OFFSET_V1 = 156;\nconst TAR_MAGIC_OFFSET_V1 = 257;\nconst TAR_PREFIX_OFFSET_V1 = 345;\nconst TAR_PREFIX_LENGTH_V1 = 155;\nconst USTAR_MAGIC_V1: readonly number[] = [0x75, 0x73, 0x74, 0x61, 0x72];\n\nfunction readHeaderString(bytes: Uint8Array, offset: number, length: number): string {\n\tconst end = offset + length;\n\tlet stop = offset;\n\twhile (stop < end && bytes[stop] !== 0) stop += 1;\n\ttry {\n\t\treturn new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes.subarray(offset, stop));\n\t} catch {\n\t\tthrow new NodePackageInstallErrorV1(\"archive_invalid\");\n\t}\n}\n\nfunction readOctalHeaderField(header: Uint8Array, offset: number, length: number): number {\n\tconst end = offset + length;\n\tlet start = offset;\n\twhile (start < end && header[start] === 0x20) start += 1;\n\tlet stop = end;\n\twhile (stop > start && (header[stop - 1] === 0 || header[stop - 1] === 0x20)) stop -= 1;\n\tlet value = 0;\n\tfor (let index = start; index < stop; index += 1) {\n\t\tconst byte = header[index]!;\n\t\t// Octal ASCII only; the GNU base-256 (0x80-prefixed) encoding is rejected.\n\t\tif (byte < 0x30 || byte > 0x37) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tvalue = value * 8 + (byte - 0x30);\n\t\tif (value > Number.MAX_SAFE_INTEGER) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t}\n\treturn value;\n}\n\nfunction verifyHeaderChecksum(header: Uint8Array): void {\n\tlet sum = 0;\n\tfor (let index = 0; index < TAR_BLOCK_BYTES_V1; index += 1) {\n\t\tsum +=\n\t\t\tindex >= TAR_CHECKSUM_OFFSET_V1 && index < TAR_CHECKSUM_OFFSET_V1 + TAR_CHECKSUM_LENGTH_V1\n\t\t\t\t? 32\n\t\t\t\t: header[index]!;\n\t}\n\tif (readOctalHeaderField(header, TAR_CHECKSUM_OFFSET_V1, TAR_CHECKSUM_LENGTH_V1) !== sum)\n\t\tthrow new NodePackageInstallErrorV1(\"archive_invalid\");\n}\n\nfunction headerEntryName(header: Uint8Array): string {\n\tfor (let index = 0; index < USTAR_MAGIC_V1.length; index += 1)\n\t\tif (header[TAR_MAGIC_OFFSET_V1 + index] !== USTAR_MAGIC_V1[index])\n\t\t\tthrow new NodePackageInstallErrorV1(\"archive_invalid\");\n\tconst name = readHeaderString(header, 0, TAR_NAME_LENGTH_V1);\n\tconst prefix = readHeaderString(header, TAR_PREFIX_OFFSET_V1, TAR_PREFIX_LENGTH_V1);\n\treturn prefix === \"\" ? name : `${prefix}/${name}`;\n}\n\nfunction isZeroBlock(tar: Uint8Array, offset: number): boolean {\n\tfor (let index = 0; index < TAR_BLOCK_BYTES_V1; index += 1) if (tar[offset + index] !== 0) return false;\n\treturn true;\n}\n\nfunction verifyZeroPadding(tar: Uint8Array, dataEnd: number, paddedEnd: number): void {\n\tfor (let index = dataEnd; index < paddedEnd; index += 1)\n\t\tif (tar[index] !== 0) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n}\n\n/**\n * Extract the `path` override from a pax extended header payload. Records are\n * `<length> <key>=<value>\\n` with byte-oriented lengths; every record except\n * `path` is deliberately ignored.\n */\nfunction parsePaxPath(data: Uint8Array): string | undefined {\n\tlet offset = 0;\n\tlet path: string | undefined;\n\twhile (offset < data.byteLength) {\n\t\tlet space = offset;\n\t\twhile (space < data.byteLength && data[space] !== 0x20) space += 1;\n\t\tif (space >= data.byteLength) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tlet recordLength = 0;\n\t\tfor (let index = offset; index < space; index += 1) {\n\t\t\tconst byte = data[index]!;\n\t\t\tif (byte < 0x30 || byte > 0x39) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\t\trecordLength = recordLength * 10 + (byte - 0x30);\n\t\t\tif (recordLength > data.byteLength) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\t}\n\t\tif (recordLength <= space - offset + 1) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tconst end = offset + recordLength;\n\t\tif (end > data.byteLength || data[end - 1] !== 0x0a) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tlet equals = space + 1;\n\t\twhile (equals < end - 1 && data[equals] !== 0x3d) equals += 1;\n\t\tif (equals >= end - 1) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tif (readHeaderString(data, space + 1, equals - space - 1) === \"path\")\n\t\t\tpath = readHeaderString(data, equals + 1, end - 1 - equals - 1);\n\t\toffset = end;\n\t}\n\treturn path;\n}\n\nfunction readGnuLongName(data: Uint8Array): string {\n\tlet end = data.byteLength;\n\tif (end > 0 && data[end - 1] === 0) end -= 1;\n\tif (end === 0) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\ttry {\n\t\treturn new TextDecoder(\"utf-8\", { fatal: true }).decode(data.subarray(0, end));\n\t} catch {\n\t\tthrow new NodePackageInstallErrorV1(\"archive_invalid\");\n\t}\n}\n\n/**\n * Streaming gunzip with a running output counter so a gzip bomb is cut off\n * as soon as the extracted budget is exceeded, never buffered in full first.\n */\nfunction gunzipBounded(input: Uint8Array, maxBytes: number): Promise<Uint8Array> {\n\treturn new Promise((resolve, reject) => {\n\t\tconst gunzip = createGunzip();\n\t\tconst chunks: Uint8Array[] = [];\n\t\tlet total = 0;\n\t\tlet settled = false;\n\t\tconst fail = (error: NodePackageInstallErrorV1): void => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tgunzip.destroy();\n\t\t\treject(error);\n\t\t};\n\t\tgunzip.on(\"data\", (chunk: Uint8Array) => {\n\t\t\tif (settled) return;\n\t\t\ttotal += chunk.byteLength;\n\t\t\tif (total > maxBytes) {\n\t\t\t\tfail(new NodePackageInstallErrorV1(\"archive_budget_exceeded\"));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tchunks.push(chunk);\n\t\t});\n\t\tgunzip.on(\"end\", () => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tconst result = new Uint8Array(total);\n\t\t\tlet offset = 0;\n\t\t\tfor (const chunk of chunks) {\n\t\t\t\tresult.set(chunk, offset);\n\t\t\t\toffset += chunk.byteLength;\n\t\t\t}\n\t\t\tresolve(result);\n\t\t});\n\t\tgunzip.on(\"error\", () => {\n\t\t\tfail(new NodePackageInstallErrorV1(\"archive_invalid\"));\n\t\t});\n\t\tgunzip.end(input);\n\t});\n}\n\nfunction parseTarEntries(tar: Uint8Array, limits: Required<NodeZipPackageLimitsV1>): readonly NodeZipPackageEntryV1[] {\n\tconst entries: NodeZipPackageEntryV1[] = [];\n\tconst names = new Set<string>();\n\tlet extractedBytes = 0;\n\tlet offset = 0;\n\tlet pendingPath: string | undefined;\n\twhile (offset + TAR_BLOCK_BYTES_V1 <= tar.byteLength) {\n\t\tconst header = tar.subarray(offset, offset + TAR_BLOCK_BYTES_V1);\n\t\tif (isZeroBlock(tar, offset)) {\n\t\t\t// EOF is two consecutive zero blocks followed by nothing but zero padding.\n\t\t\tif (offset + 2 * TAR_BLOCK_BYTES_V1 > tar.byteLength || !isZeroBlock(tar, offset + TAR_BLOCK_BYTES_V1))\n\t\t\t\tthrow new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\t\tif (pendingPath !== undefined) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\t\tfor (let index = offset + 2 * TAR_BLOCK_BYTES_V1; index < tar.byteLength; index += 1)\n\t\t\t\tif (tar[index] !== 0) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\t\treturn Object.freeze(entries);\n\t\t}\n\t\tverifyHeaderChecksum(header);\n\t\tconst typeflag = String.fromCharCode(header[TAR_TYPEFLAG_OFFSET_V1]!);\n\t\tconst size = readOctalHeaderField(header, TAR_SIZE_OFFSET_V1, TAR_SIZE_LENGTH_V1);\n\t\tif (size > limits.maxEntryBytes) throw new NodePackageInstallErrorV1(\"archive_budget_exceeded\");\n\t\tconst dataStart = offset + TAR_BLOCK_BYTES_V1;\n\t\tconst dataEnd = dataStart + size;\n\t\tif (dataEnd > tar.byteLength) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tconst paddedEnd = Math.ceil(dataEnd / TAR_BLOCK_BYTES_V1) * TAR_BLOCK_BYTES_V1;\n\t\tverifyZeroPadding(tar, dataEnd, paddedEnd);\n\t\tconst data = tar.subarray(dataStart, dataEnd);\n\t\tif (typeflag === \"L\") {\n\t\t\tpendingPath = readGnuLongName(data);\n\t\t\toffset = paddedEnd;\n\t\t\tcontinue;\n\t\t}\n\t\tif (typeflag === \"x\") {\n\t\t\tconst paxPath = parsePaxPath(data);\n\t\t\tif (paxPath !== undefined) pendingPath = paxPath;\n\t\t\toffset = paddedEnd;\n\t\t\tcontinue;\n\t\t}\n\t\tif (typeflag === \"g\") {\n\t\t\toffset = paddedEnd;\n\t\t\tcontinue;\n\t\t}\n\t\t// Hard links ('1') and symlinks ('2') are rejected like ZIP symlink entries.\n\t\tif (typeflag === \"1\" || typeflag === \"2\") throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tif (typeflag !== \"\\0\" && typeflag !== \"0\" && typeflag !== \"5\")\n\t\t\tthrow new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tlet rawName = pendingPath ?? headerEntryName(header);\n\t\tpendingPath = undefined;\n\t\tif (typeflag === \"5\" && !rawName.endsWith(\"/\")) rawName += \"/\";\n\t\tconst normalized = normalizedEntryName(rawName);\n\t\tif (normalized.directory && size !== 0) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tif (names.has(normalized.name)) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tnames.add(normalized.name);\n\t\tif (entries.length + 1 > limits.maxEntries) throw new NodePackageInstallErrorV1(\"archive_budget_exceeded\");\n\t\tconst bytes = normalized.directory ? new Uint8Array() : new Uint8Array(data);\n\t\textractedBytes += bytes.byteLength;\n\t\tif (extractedBytes > limits.maxExtractedBytes) throw new NodePackageInstallErrorV1(\"archive_budget_exceeded\");\n\t\tentries.push(Object.freeze({ name: normalized.name, directory: normalized.directory, bytes }));\n\t\toffset = paddedEnd;\n\t}\n\t// The archive ended without the two-block EOF marker.\n\tthrow new NodePackageInstallErrorV1(\"archive_invalid\");\n}\n\n/**\n * npm tarballs root every entry below a single literal `package/` directory,\n * while ZIP packages carry their manifests at the archive root. When every\n * entry shares exactly that one leading directory segment, strip the one\n * layer so npm tgz artifacts land in the same normalized shape as ZIP\n * artifacts. Any other layout — including root-level entries and arbitrary\n * nested directories — is returned unchanged.\n */\nfunction stripNpmPackageRoot(entries: readonly NodeZipPackageEntryV1[]): readonly NodeZipPackageEntryV1[] {\n\tif (entries.length === 0) return entries;\n\tconst rootSegment = entries[0]!.name.split(\"/\")[0]!;\n\tif (rootSegment !== \"package\") return entries;\n\tconst sharesRoot = (entry: NodeZipPackageEntryV1): boolean => {\n\t\tif (entry.name === rootSegment) return entry.directory;\n\t\tconst parts = entry.name.split(\"/\");\n\t\treturn parts.length >= 2 && parts[0] === rootSegment;\n\t};\n\tif (!entries.every(sharesRoot)) return entries;\n\tconst stripped: NodeZipPackageEntryV1[] = [];\n\tfor (const entry of entries) {\n\t\tif (entry.name === rootSegment) continue;\n\t\tstripped.push(Object.freeze({ ...entry, name: entry.name.slice(rootSegment.length + 1) }));\n\t}\n\treturn Object.freeze(stripped);\n}\n\n/**\n * Parse a gzip-compressed tar package into the same normalized entry shape as\n * {@link parseNodeZipPackageV1}, sharing its name normalization, budgets, and\n * structured errors. The gzip layer is decompressed streaming with a hard\n * extracted-bytes cap; the tar layer accepts only ustar-style headers with\n * valid checksums, rejects links and non-regular types, and supports GNU long\n * names ('L'), pax path records ('x'), and skipped global headers ('g').\n */\nexport async function parseNodeTarGzPackageV1(\n\tinput: Uint8Array,\n\tlimitsInput: NodeZipPackageLimitsV1 = {},\n): Promise<readonly NodeZipPackageEntryV1[]> {\n\tif (!(input instanceof Uint8Array)) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\tconst limits = resolveNodePackageLimitsV1(limitsInput);\n\tif (input.byteLength > limits.maxArchiveBytes) throw new NodePackageInstallErrorV1(\"archive_budget_exceeded\");\n\tconst tar = await gunzipBounded(input, limits.maxExtractedBytes);\n\treturn stripNpmPackageRoot(parseTarEntries(tar, limits));\n}\n"]}

package/dist/plugins/ecosystem/node-tar-writer.d.ts

@@ -0,0 +1,16 @@
+export type NodeTarWriterErrorCodeV1 = "invalid_entry" | "entry_name_too_long";
+export declare class NodeTarWriterErrorV1 extends Error {
+    readonly code: NodeTarWriterErrorCodeV1;
+    constructor(code: NodeTarWriterErrorCodeV1, message: string);
+}
+export interface NodeTarWriterEntryV1 {
+    /** Forward-slash normalized path; validated with the shared archive rules. */
+    readonly name: string;
+    readonly directory: boolean;
+    readonly bytes?: Uint8Array;
+}
+/** Build deterministic ustar tar bytes (two zero EOF blocks included). */
+export declare function buildNodeTarBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array;
+/** Build deterministic gzip-compressed ustar tar bytes (the `application/gzip` package shape). */
+export declare function buildNodeTarGzBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array;
+//# sourceMappingURL=node-tar-writer.d.ts.map

package/dist/plugins/ecosystem/node-tar-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-tar-writer.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-tar-writer.ts"],"names":[],"mappings":"AAmBA,MAAM,MAAM,wBAAwB,GAAG,eAAe,GAAG,qBAAqB,CAAC;AAE/E,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAExC,YAAY,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAI1D;CACD;AAED,MAAM,WAAW,oBAAoB;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC5B;AA6ED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG,UAAU,CAyBxF;AAED,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG,UAAU,CAI1F","sourcesContent":["import { gzipSync } from \"node:zlib\";\nimport { normalizedEntryName } from \"./node-package-install-host.ts\";\n\n/**\n * Minimal deterministic ustar tar+gzip writer. It exists so a local plugin\n * directory can be packed into the same `application/gzip` package shape the\n * install host already parses (`node-tar-package.ts`), reusing its entry-name\n * normalization. Output is fully deterministic: fixed mode/uid/gid/mtime, no\n * uname/gname, sorted-free (callers pass entries in their chosen order), and\n * a gzip wrapper with a zero mtime.\n */\n\nconst TAR_BLOCK_BYTES_V1 = 512;\nconst TAR_NAME_LENGTH_V1 = 100;\nconst TAR_MODE_LENGTH_V1 = 8;\nconst TAR_SIZE_LENGTH_V1 = 12;\nconst TAR_CHECKSUM_LENGTH_V1 = 8;\nconst TAR_PREFIX_LENGTH_V1 = 155;\n\nexport type NodeTarWriterErrorCodeV1 = \"invalid_entry\" | \"entry_name_too_long\";\n\nexport class NodeTarWriterErrorV1 extends Error {\n\treadonly code: NodeTarWriterErrorCodeV1;\n\n\tconstructor(code: NodeTarWriterErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeTarWriterErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeTarWriterEntryV1 {\n\t/** Forward-slash normalized path; validated with the shared archive rules. */\n\treadonly name: string;\n\treadonly directory: boolean;\n\treadonly bytes?: Uint8Array;\n}\n\nfunction octalField(value: number, length: number): string {\n\tconst digits = length - 1;\n\tconst octal = value.toString(8);\n\tif (octal.length > digits) throw new NodeTarWriterErrorV1(\"invalid_entry\", \"tar header field overflows\");\n\treturn `${octal.padStart(digits, \"0\")}\\0`;\n}\n\nfunction writeHeader(header: Uint8Array, entry: NodeTarWriterEntryV1, nameField: string, prefixField: string): void {\n\theader.fill(0);\n\tconst encode = (value: string, offset: number, length: number): void => {\n\t\tconst bytes = new TextEncoder().encode(value);\n\t\tif (bytes.byteLength > length)\n\t\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar header name field overflows\");\n\t\theader.set(bytes, offset);\n\t};\n\tencode(nameField, 0, TAR_NAME_LENGTH_V1 - 1);\n\tconst contentBytes = entry.directory ? 0 : (entry.bytes?.byteLength ?? 0);\n\tconst mode = octalField(entry.directory ? 0o755 : 0o644, TAR_MODE_LENGTH_V1);\n\tconst encodedMode = new TextEncoder().encode(mode);\n\theader.set(encodedMode, 100);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 108);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 116);\n\theader.set(new TextEncoder().encode(octalField(contentBytes, TAR_SIZE_LENGTH_V1)), 124);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_SIZE_LENGTH_V1)), 136);\n\theader[156] = entry.directory ? 0x35 : 0x30;\n\tconst magic = new TextEncoder().encode(\"ustar\\0\");\n\theader.set(magic, 257);\n\theader.set(new TextEncoder().encode(\"00\"), 263);\n\tif (prefixField.length > 0) encode(prefixField, 345, TAR_PREFIX_LENGTH_V1 - 1);\n\tlet checksum = 0;\n\tfor (let index = 148; index < 148 + TAR_CHECKSUM_LENGTH_V1; index += 1) header[index] = 0x20;\n\tfor (const byte of header) checksum += byte;\n\tconst checksumText = `${checksum.toString(8).padStart(6, \"0\")}\\0 `;\n\theader.set(new TextEncoder().encode(checksumText), 148);\n}\n\nfunction entryFields(name: string): { readonly name: string; readonly prefix: string } {\n\tconst bytes = new TextEncoder().encode(name);\n\tif (bytes.byteLength <= TAR_NAME_LENGTH_V1 - 1) return { name, prefix: \"\" };\n\tlet split = -1;\n\tfor (let index = Math.min(bytes.byteLength, TAR_PREFIX_LENGTH_V1) - 1; index >= 0; index -= 1) {\n\t\tif (bytes[index] === 0x2f) {\n\t\t\tsplit = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (split <= 0)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar entry name cannot be split into ustar fields\");\n\tconst prefix = name.slice(0, split);\n\tconst rest = name.slice(split + 1);\n\tconst restBytes = new TextEncoder().encode(rest);\n\tif (\n\t\trestBytes.byteLength > TAR_NAME_LENGTH_V1 - 1 ||\n\t\tnew TextEncoder().encode(prefix).byteLength > TAR_PREFIX_LENGTH_V1 - 1\n\t)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar entry name cannot be split into ustar fields\");\n\treturn { name: rest, prefix };\n}\n\nfunction headerBlock(entry: NodeTarWriterEntryV1): Uint8Array {\n\tif (typeof entry.name !== \"string\" || entry.name.length === 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entry name is invalid\");\n\tconst normalized = normalizedEntryName(entry.directory ? `${entry.name}/` : entry.name);\n\tif (normalized.name !== entry.name)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entry name is not normalized\");\n\tif (entry.directory && entry.bytes !== undefined && entry.bytes.byteLength > 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar directory entry must be empty\");\n\tif (!entry.directory && !(entry.bytes instanceof Uint8Array))\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar file entry requires bytes\");\n\tconst header = new Uint8Array(TAR_BLOCK_BYTES_V1);\n\tconst fields = entryFields(entry.name);\n\twriteHeader(header, entry, fields.name, fields.prefix);\n\treturn header;\n}\n\n/** Build deterministic ustar tar bytes (two zero EOF blocks included). */\nexport function buildNodeTarBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\tif (!Array.isArray(entries)) throw new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entries must be an array\");\n\tconst names = new Set<string>();\n\tconst blocks: Uint8Array[] = [];\n\tfor (const entry of entries) {\n\t\tif (names.has(entry.name))\n\t\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", `duplicate tar entry name: ${entry.name}`);\n\t\tnames.add(entry.name);\n\t\tblocks.push(headerBlock(entry));\n\t\tif (!entry.directory) {\n\t\t\tconst bytes = entry.bytes ?? new Uint8Array();\n\t\t\tconst padding = (TAR_BLOCK_BYTES_V1 - (bytes.byteLength % TAR_BLOCK_BYTES_V1)) % TAR_BLOCK_BYTES_V1;\n\t\t\tblocks.push(bytes, new Uint8Array(padding));\n\t\t}\n\t}\n\tblocks.push(new Uint8Array(TAR_BLOCK_BYTES_V1), new Uint8Array(TAR_BLOCK_BYTES_V1));\n\tlet total = 0;\n\tfor (const block of blocks) total += block.byteLength;\n\tconst output = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const block of blocks) {\n\t\toutput.set(block, offset);\n\t\toffset += block.byteLength;\n\t}\n\treturn output;\n}\n\n/** Build deterministic gzip-compressed ustar tar bytes (the `application/gzip` package shape). */\nexport function buildNodeTarGzBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\t// Node's gzip wrapper writes a zero mtime header unless configured, so the\n\t// default compression is deterministic within one runtime.\n\treturn gzipSync(buildNodeTarBytesV1(entries));\n}\n"]}

package/dist/plugins/ecosystem/node-tar-writer.js

@@ -0,0 +1,134 @@
+import { gzipSync } from "node:zlib";
+import { normalizedEntryName } from "./node-package-install-host.js";
+/**
+ * Minimal deterministic ustar tar+gzip writer. It exists so a local plugin
+ * directory can be packed into the same `application/gzip` package shape the
+ * install host already parses (`node-tar-package.ts`), reusing its entry-name
+ * normalization. Output is fully deterministic: fixed mode/uid/gid/mtime, no
+ * uname/gname, sorted-free (callers pass entries in their chosen order), and
+ * a gzip wrapper with a zero mtime.
+ */
+const TAR_BLOCK_BYTES_V1 = 512;
+const TAR_NAME_LENGTH_V1 = 100;
+const TAR_MODE_LENGTH_V1 = 8;
+const TAR_SIZE_LENGTH_V1 = 12;
+const TAR_CHECKSUM_LENGTH_V1 = 8;
+const TAR_PREFIX_LENGTH_V1 = 155;
+export class NodeTarWriterErrorV1 extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = "NodeTarWriterErrorV1";
+        this.code = code;
+    }
+}
+function octalField(value, length) {
+    const digits = length - 1;
+    const octal = value.toString(8);
+    if (octal.length > digits)
+        throw new NodeTarWriterErrorV1("invalid_entry", "tar header field overflows");
+    return `${octal.padStart(digits, "0")}\0`;
+}
+function writeHeader(header, entry, nameField, prefixField) {
+    header.fill(0);
+    const encode = (value, offset, length) => {
+        const bytes = new TextEncoder().encode(value);
+        if (bytes.byteLength > length)
+            throw new NodeTarWriterErrorV1("entry_name_too_long", "tar header name field overflows");
+        header.set(bytes, offset);
+    };
+    encode(nameField, 0, TAR_NAME_LENGTH_V1 - 1);
+    const contentBytes = entry.directory ? 0 : (entry.bytes?.byteLength ?? 0);
+    const mode = octalField(entry.directory ? 0o755 : 0o644, TAR_MODE_LENGTH_V1);
+    const encodedMode = new TextEncoder().encode(mode);
+    header.set(encodedMode, 100);
+    header.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 108);
+    header.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 116);
+    header.set(new TextEncoder().encode(octalField(contentBytes, TAR_SIZE_LENGTH_V1)), 124);
+    header.set(new TextEncoder().encode(octalField(0, TAR_SIZE_LENGTH_V1)), 136);
+    header[156] = entry.directory ? 0x35 : 0x30;
+    const magic = new TextEncoder().encode("ustar\0");
+    header.set(magic, 257);
+    header.set(new TextEncoder().encode("00"), 263);
+    if (prefixField.length > 0)
+        encode(prefixField, 345, TAR_PREFIX_LENGTH_V1 - 1);
+    let checksum = 0;
+    for (let index = 148; index < 148 + TAR_CHECKSUM_LENGTH_V1; index += 1)
+        header[index] = 0x20;
+    for (const byte of header)
+        checksum += byte;
+    const checksumText = `${checksum.toString(8).padStart(6, "0")}\0 `;
+    header.set(new TextEncoder().encode(checksumText), 148);
+}
+function entryFields(name) {
+    const bytes = new TextEncoder().encode(name);
+    if (bytes.byteLength <= TAR_NAME_LENGTH_V1 - 1)
+        return { name, prefix: "" };
+    let split = -1;
+    for (let index = Math.min(bytes.byteLength, TAR_PREFIX_LENGTH_V1) - 1; index >= 0; index -= 1) {
+        if (bytes[index] === 0x2f) {
+            split = index;
+            break;
+        }
+    }
+    if (split <= 0)
+        throw new NodeTarWriterErrorV1("entry_name_too_long", "tar entry name cannot be split into ustar fields");
+    const prefix = name.slice(0, split);
+    const rest = name.slice(split + 1);
+    const restBytes = new TextEncoder().encode(rest);
+    if (restBytes.byteLength > TAR_NAME_LENGTH_V1 - 1 ||
+        new TextEncoder().encode(prefix).byteLength > TAR_PREFIX_LENGTH_V1 - 1)
+        throw new NodeTarWriterErrorV1("entry_name_too_long", "tar entry name cannot be split into ustar fields");
+    return { name: rest, prefix };
+}
+function headerBlock(entry) {
+    if (typeof entry.name !== "string" || entry.name.length === 0)
+        throw new NodeTarWriterErrorV1("invalid_entry", "tar entry name is invalid");
+    const normalized = normalizedEntryName(entry.directory ? `${entry.name}/` : entry.name);
+    if (normalized.name !== entry.name)
+        throw new NodeTarWriterErrorV1("invalid_entry", "tar entry name is not normalized");
+    if (entry.directory && entry.bytes !== undefined && entry.bytes.byteLength > 0)
+        throw new NodeTarWriterErrorV1("invalid_entry", "tar directory entry must be empty");
+    if (!entry.directory && !(entry.bytes instanceof Uint8Array))
+        throw new NodeTarWriterErrorV1("invalid_entry", "tar file entry requires bytes");
+    const header = new Uint8Array(TAR_BLOCK_BYTES_V1);
+    const fields = entryFields(entry.name);
+    writeHeader(header, entry, fields.name, fields.prefix);
+    return header;
+}
+/** Build deterministic ustar tar bytes (two zero EOF blocks included). */
+export function buildNodeTarBytesV1(entries) {
+    if (!Array.isArray(entries))
+        throw new NodeTarWriterErrorV1("invalid_entry", "tar entries must be an array");
+    const names = new Set();
+    const blocks = [];
+    for (const entry of entries) {
+        if (names.has(entry.name))
+            throw new NodeTarWriterErrorV1("invalid_entry", `duplicate tar entry name: ${entry.name}`);
+        names.add(entry.name);
+        blocks.push(headerBlock(entry));
+        if (!entry.directory) {
+            const bytes = entry.bytes ?? new Uint8Array();
+            const padding = (TAR_BLOCK_BYTES_V1 - (bytes.byteLength % TAR_BLOCK_BYTES_V1)) % TAR_BLOCK_BYTES_V1;
+            blocks.push(bytes, new Uint8Array(padding));
+        }
+    }
+    blocks.push(new Uint8Array(TAR_BLOCK_BYTES_V1), new Uint8Array(TAR_BLOCK_BYTES_V1));
+    let total = 0;
+    for (const block of blocks)
+        total += block.byteLength;
+    const output = new Uint8Array(total);
+    let offset = 0;
+    for (const block of blocks) {
+        output.set(block, offset);
+        offset += block.byteLength;
+    }
+    return output;
+}
+/** Build deterministic gzip-compressed ustar tar bytes (the `application/gzip` package shape). */
+export function buildNodeTarGzBytesV1(entries) {
+    // Node's gzip wrapper writes a zero mtime header unless configured, so the
+    // default compression is deterministic within one runtime.
+    return gzipSync(buildNodeTarBytesV1(entries));
+}
+//# sourceMappingURL=node-tar-writer.js.map

package/dist/plugins/ecosystem/node-tar-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-tar-writer.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-tar-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE;;;;;;;GAOG;AAEH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAIjC,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACrC,IAAI,CAA2B;IAExC,YAAY,IAA8B,EAAE,OAAe,EAAE;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CACjB;CACD;AASD,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAU;IAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IACzG,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC;AAAA,CAC1C;AAED,SAAS,WAAW,CAAC,MAAkB,EAAE,KAA2B,EAAE,SAAiB,EAAE,WAAmB,EAAQ;IACnH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc,EAAQ,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM;YAC5B,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAAA,CAC1B,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxF,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,GAAG,EAAE,KAAK,GAAG,GAAG,GAAG,sBAAsB,EAAE,KAAK,IAAI,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,QAAQ,IAAI,IAAI,CAAC;IAC5C,MAAM,YAAY,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;IACnE,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC;AAAA,CACxD;AAED,SAAS,WAAW,CAAC,IAAY,EAAsD;IACtF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,UAAU,IAAI,kBAAkB,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5E,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/F,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,GAAG,KAAK,CAAC;YACd,MAAM;QACP,CAAC;IACF,CAAC;IACD,IAAI,KAAK,IAAI,CAAC;QACb,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,kDAAkD,CAAC,CAAC;IAC3G,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,IACC,SAAS,CAAC,UAAU,GAAG,kBAAkB,GAAG,CAAC;QAC7C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,GAAG,oBAAoB,GAAG,CAAC;QAEtE,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,kDAAkD,CAAC,CAAC;IAC3G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAAA,CAC9B;AAED,SAAS,WAAW,CAAC,KAA2B,EAAc;IAC7D,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAC5D,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACjC,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC;QAC7E,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,UAAU,CAAC;QAC3D,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,OAAwC,EAAc;IACzF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,6BAA6B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5F,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,CAAC,kBAAkB,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,kBAAkB,CAAC,CAAC,GAAG,kBAAkB,CAAC;YACpG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,OAAwC,EAAc;IAC3F,2EAA2E;IAC3E,2DAA2D;IAC3D,OAAO,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;AAAA,CAC9C","sourcesContent":["import { gzipSync } from \"node:zlib\";\nimport { normalizedEntryName } from \"./node-package-install-host.ts\";\n\n/**\n * Minimal deterministic ustar tar+gzip writer. It exists so a local plugin\n * directory can be packed into the same `application/gzip` package shape the\n * install host already parses (`node-tar-package.ts`), reusing its entry-name\n * normalization. Output is fully deterministic: fixed mode/uid/gid/mtime, no\n * uname/gname, sorted-free (callers pass entries in their chosen order), and\n * a gzip wrapper with a zero mtime.\n */\n\nconst TAR_BLOCK_BYTES_V1 = 512;\nconst TAR_NAME_LENGTH_V1 = 100;\nconst TAR_MODE_LENGTH_V1 = 8;\nconst TAR_SIZE_LENGTH_V1 = 12;\nconst TAR_CHECKSUM_LENGTH_V1 = 8;\nconst TAR_PREFIX_LENGTH_V1 = 155;\n\nexport type NodeTarWriterErrorCodeV1 = \"invalid_entry\" | \"entry_name_too_long\";\n\nexport class NodeTarWriterErrorV1 extends Error {\n\treadonly code: NodeTarWriterErrorCodeV1;\n\n\tconstructor(code: NodeTarWriterErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeTarWriterErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeTarWriterEntryV1 {\n\t/** Forward-slash normalized path; validated with the shared archive rules. */\n\treadonly name: string;\n\treadonly directory: boolean;\n\treadonly bytes?: Uint8Array;\n}\n\nfunction octalField(value: number, length: number): string {\n\tconst digits = length - 1;\n\tconst octal = value.toString(8);\n\tif (octal.length > digits) throw new NodeTarWriterErrorV1(\"invalid_entry\", \"tar header field overflows\");\n\treturn `${octal.padStart(digits, \"0\")}\\0`;\n}\n\nfunction writeHeader(header: Uint8Array, entry: NodeTarWriterEntryV1, nameField: string, prefixField: string): void {\n\theader.fill(0);\n\tconst encode = (value: string, offset: number, length: number): void => {\n\t\tconst bytes = new TextEncoder().encode(value);\n\t\tif (bytes.byteLength > length)\n\t\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar header name field overflows\");\n\t\theader.set(bytes, offset);\n\t};\n\tencode(nameField, 0, TAR_NAME_LENGTH_V1 - 1);\n\tconst contentBytes = entry.directory ? 0 : (entry.bytes?.byteLength ?? 0);\n\tconst mode = octalField(entry.directory ? 0o755 : 0o644, TAR_MODE_LENGTH_V1);\n\tconst encodedMode = new TextEncoder().encode(mode);\n\theader.set(encodedMode, 100);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 108);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 116);\n\theader.set(new TextEncoder().encode(octalField(contentBytes, TAR_SIZE_LENGTH_V1)), 124);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_SIZE_LENGTH_V1)), 136);\n\theader[156] = entry.directory ? 0x35 : 0x30;\n\tconst magic = new TextEncoder().encode(\"ustar\\0\");\n\theader.set(magic, 257);\n\theader.set(new TextEncoder().encode(\"00\"), 263);\n\tif (prefixField.length > 0) encode(prefixField, 345, TAR_PREFIX_LENGTH_V1 - 1);\n\tlet checksum = 0;\n\tfor (let index = 148; index < 148 + TAR_CHECKSUM_LENGTH_V1; index += 1) header[index] = 0x20;\n\tfor (const byte of header) checksum += byte;\n\tconst checksumText = `${checksum.toString(8).padStart(6, \"0\")}\\0 `;\n\theader.set(new TextEncoder().encode(checksumText), 148);\n}\n\nfunction entryFields(name: string): { readonly name: string; readonly prefix: string } {\n\tconst bytes = new TextEncoder().encode(name);\n\tif (bytes.byteLength <= TAR_NAME_LENGTH_V1 - 1) return { name, prefix: \"\" };\n\tlet split = -1;\n\tfor (let index = Math.min(bytes.byteLength, TAR_PREFIX_LENGTH_V1) - 1; index >= 0; index -= 1) {\n\t\tif (bytes[index] === 0x2f) {\n\t\t\tsplit = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (split <= 0)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar entry name cannot be split into ustar fields\");\n\tconst prefix = name.slice(0, split);\n\tconst rest = name.slice(split + 1);\n\tconst restBytes = new TextEncoder().encode(rest);\n\tif (\n\t\trestBytes.byteLength > TAR_NAME_LENGTH_V1 - 1 ||\n\t\tnew TextEncoder().encode(prefix).byteLength > TAR_PREFIX_LENGTH_V1 - 1\n\t)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar entry name cannot be split into ustar fields\");\n\treturn { name: rest, prefix };\n}\n\nfunction headerBlock(entry: NodeTarWriterEntryV1): Uint8Array {\n\tif (typeof entry.name !== \"string\" || entry.name.length === 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entry name is invalid\");\n\tconst normalized = normalizedEntryName(entry.directory ? `${entry.name}/` : entry.name);\n\tif (normalized.name !== entry.name)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entry name is not normalized\");\n\tif (entry.directory && entry.bytes !== undefined && entry.bytes.byteLength > 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar directory entry must be empty\");\n\tif (!entry.directory && !(entry.bytes instanceof Uint8Array))\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar file entry requires bytes\");\n\tconst header = new Uint8Array(TAR_BLOCK_BYTES_V1);\n\tconst fields = entryFields(entry.name);\n\twriteHeader(header, entry, fields.name, fields.prefix);\n\treturn header;\n}\n\n/** Build deterministic ustar tar bytes (two zero EOF blocks included). */\nexport function buildNodeTarBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\tif (!Array.isArray(entries)) throw new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entries must be an array\");\n\tconst names = new Set<string>();\n\tconst blocks: Uint8Array[] = [];\n\tfor (const entry of entries) {\n\t\tif (names.has(entry.name))\n\t\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", `duplicate tar entry name: ${entry.name}`);\n\t\tnames.add(entry.name);\n\t\tblocks.push(headerBlock(entry));\n\t\tif (!entry.directory) {\n\t\t\tconst bytes = entry.bytes ?? new Uint8Array();\n\t\t\tconst padding = (TAR_BLOCK_BYTES_V1 - (bytes.byteLength % TAR_BLOCK_BYTES_V1)) % TAR_BLOCK_BYTES_V1;\n\t\t\tblocks.push(bytes, new Uint8Array(padding));\n\t\t}\n\t}\n\tblocks.push(new Uint8Array(TAR_BLOCK_BYTES_V1), new Uint8Array(TAR_BLOCK_BYTES_V1));\n\tlet total = 0;\n\tfor (const block of blocks) total += block.byteLength;\n\tconst output = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const block of blocks) {\n\t\toutput.set(block, offset);\n\t\toffset += block.byteLength;\n\t}\n\treturn output;\n}\n\n/** Build deterministic gzip-compressed ustar tar bytes (the `application/gzip` package shape). */\nexport function buildNodeTarGzBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\t// Node's gzip wrapper writes a zero mtime header unless configured, so the\n\t// default compression is deterministic within one runtime.\n\treturn gzipSync(buildNodeTarBytesV1(entries));\n}\n"]}

package/dist/plugins/ecosystem/node-url-package-source.d.ts

@@ -0,0 +1,31 @@
+import { type PluginPackageMediaTypeV1 } from "./node-package-media.ts";
+export type NodeUrlPackageSourceErrorCodeV1 = "cancelled" | "invalid_configuration" | "invalid_url" | "request_failed" | "request_timed_out" | "response_too_large" | "digest_mismatch";
+export declare class NodeUrlPackageSourceErrorV1 extends Error {
+    readonly code: NodeUrlPackageSourceErrorCodeV1;
+    constructor(code: NodeUrlPackageSourceErrorCodeV1, message: string);
+}
+export interface NodeUrlPackageSourceOptionsV1 {
+    /** Real fetch or a deterministic test replacement. */
+    readonly fetch?: typeof globalThis.fetch;
+    readonly requestTimeoutMs?: number;
+    readonly maxPackageBytes?: number;
+    readonly maxRedirects?: number;
+    readonly userAgent?: string;
+}
+export interface NodeUrlPackageDownloadV1 {
+    readonly bytes: Uint8Array;
+    readonly mediaType: PluginPackageMediaTypeV1;
+    /** sha256 hex of the downloaded bytes; always computed, verified when expected. */
+    readonly digestHex: string;
+}
+/**
+ * Download one package file over http(s). Redirects are followed manually and
+ * every hop must again be a valid http(s) URL without credentials. When
+ * `expectedDigestHex` is present the sha256 of the bytes must match exactly.
+ */
+export declare function downloadNodeUrlPackageV1(options: NodeUrlPackageSourceOptionsV1, input: {
+    readonly url: string;
+    readonly expectedDigestHex?: string;
+    readonly signal?: AbortSignal;
+}): Promise<NodeUrlPackageDownloadV1>;
+//# sourceMappingURL=node-url-package-source.d.ts.map

package/dist/plugins/ecosystem/node-url-package-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-url-package-source.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-url-package-source.ts"],"names":[],"mappings":"AACA,OAAO,EAAkC,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAiBxG,MAAM,MAAM,+BAA+B,GACxC,WAAW,GACX,uBAAuB,GACvB,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,GACpB,iBAAiB,CAAC;AAErB,qBAAa,2BAA4B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;IAE/C,YAAY,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,MAAM,EAIjE;CACD;AAED,MAAM,WAAW,6BAA6B;IAC7C,sDAAsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,mFAAmF;IACnF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAkCD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,6BAA6B,EACtC,KAAK,EAAE;IACN,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B,GACC,OAAO,CAAC,wBAAwB,CAAC,CAyHnC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { detectPluginPackageMediaTypeV1, type PluginPackageMediaTypeV1 } from \"./node-package-media.ts\";\n\n/**\n * Custom-URL plugin package download (design §4.6 \"自定义 URL\" row). The URL\n * is the package file itself (zip/tgz); integrity is layered: a `#sha256:<hex>`\n * ref fragment becomes a strong digest check, otherwise TLS plus the double\n * manifest validation performed by the install host.\n */\n\nconst DEFAULT_TIMEOUT_MS_V1 = 30_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_MAX_PACKAGE_BYTES_V1 = 128 * 1024 * 1024;\nconst MAX_PACKAGE_BYTES_V1 = 512 * 1024 * 1024;\nconst DEFAULT_REDIRECTS_V1 = 3;\nconst MAX_REDIRECTS_V1 = 5;\nconst REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);\n\nexport type NodeUrlPackageSourceErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_configuration\"\n\t| \"invalid_url\"\n\t| \"request_failed\"\n\t| \"request_timed_out\"\n\t| \"response_too_large\"\n\t| \"digest_mismatch\";\n\nexport class NodeUrlPackageSourceErrorV1 extends Error {\n\treadonly code: NodeUrlPackageSourceErrorCodeV1;\n\n\tconstructor(code: NodeUrlPackageSourceErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeUrlPackageSourceErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeUrlPackageSourceOptionsV1 {\n\t/** Real fetch or a deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxPackageBytes?: number;\n\treadonly maxRedirects?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeUrlPackageDownloadV1 {\n\treadonly bytes: Uint8Array;\n\treadonly mediaType: PluginPackageMediaTypeV1;\n\t/** sha256 hex of the downloaded bytes; always computed, verified when expected. */\n\treadonly digestHex: string;\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must be a positive integer at most ${maximum}`,\n\t\t);\n\treturn result;\n}\n\nfunction packageUrl(value: string): URL {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", \"plugin package URL is invalid\");\n\t}\n\tif (\n\t\t(parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") ||\n\t\tparsed.username !== \"\" ||\n\t\tparsed.password !== \"\"\n\t)\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", \"plugin package URL must use http(s) without credentials\");\n\tif (parsed.hash !== \"\")\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", \"plugin package URL must not include a fragment\");\n\treturn parsed;\n}\n\nfunction isAbortLike(error: unknown): boolean {\n\treturn error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\");\n}\n\n/**\n * Download one package file over http(s). Redirects are followed manually and\n * every hop must again be a valid http(s) URL without credentials. When\n * `expectedDigestHex` is present the sha256 of the bytes must match exactly.\n */\nexport async function downloadNodeUrlPackageV1(\n\toptions: NodeUrlPackageSourceOptionsV1,\n\tinput: {\n\t\treadonly url: string;\n\t\treadonly expectedDigestHex?: string;\n\t\treadonly signal?: AbortSignal;\n\t},\n): Promise<NodeUrlPackageDownloadV1> {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\")\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_configuration\", \"Node fetch is unavailable\");\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxPackageBytes = boundedPositive(\n\t\toptions.maxPackageBytes,\n\t\tDEFAULT_MAX_PACKAGE_BYTES_V1,\n\t\tMAX_PACKAGE_BYTES_V1,\n\t\t\"maxPackageBytes\",\n\t);\n\tconst maxRedirects = options.maxRedirects ?? DEFAULT_REDIRECTS_V1;\n\tif (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > MAX_REDIRECTS_V1)\n\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`maxRedirects must be an integer between 0 and ${MAX_REDIRECTS_V1}`,\n\t\t);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-url/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent))\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_configuration\", \"userAgent is invalid\");\n\tif (input.expectedDigestHex !== undefined && !/^[0-9a-f]{64}$/u.test(input.expectedDigestHex))\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", \"expected sha256 digest is invalid\");\n\n\tlet current = packageUrl(input.url);\n\tlet response: Response | undefined;\n\tconst controller = new AbortController();\n\tlet timedOut = false;\n\tconst abort = () => controller.abort(input.signal?.reason);\n\tif (input.signal?.aborted === true) abort();\n\telse input.signal?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\ttimedOut = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\ttry {\n\t\tfor (let redirect = 0; ; redirect += 1) {\n\t\t\tif (controller.signal.aborted)\n\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", \"plugin package download was cancelled\");\n\t\t\tlet hop: Response;\n\t\t\ttry {\n\t\t\t\thop = await transport(current.toString(), {\n\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\theaders: { accept: \"*/*\", \"user-agent\": userAgent },\n\t\t\t\t\tredirect: \"manual\",\n\t\t\t\t\tsignal: controller.signal,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\tif (timedOut)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_timed_out\", \"plugin package download timed out\");\n\t\t\t\tif (isAbortLike(error) || input.signal?.aborted === true)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", \"plugin package download was cancelled\");\n\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package download failed\");\n\t\t\t}\n\t\t\tif (!REDIRECT_STATUS.has(hop.status)) {\n\t\t\t\tresponse = hop;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tconst location = hop.headers.get(\"location\");\n\t\t\tawait hop.body?.cancel().catch(() => undefined);\n\t\t\tif (location === null || redirect >= maxRedirects)\n\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package redirect limit exceeded\");\n\t\t\tcurrent = packageUrl(new URL(location, current).toString());\n\t\t}\n\t\tif (response === undefined)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package download failed\");\n\t\tif (response.status < 200 || response.status >= 300)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package download did not succeed\");\n\t\tif (response.body === null)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package response has no body\");\n\t\tconst reader = response.body.getReader();\n\t\tconst chunks: Uint8Array[] = [];\n\t\tconst hash = createHash(\"sha256\");\n\t\tlet total = 0;\n\t\ttry {\n\t\t\tfor (;;) {\n\t\t\t\tif (controller.signal.aborted)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", \"plugin package download was cancelled\");\n\t\t\t\tconst item = await reader.read();\n\t\t\t\tif (item.done) break;\n\t\t\t\ttotal += item.value.byteLength;\n\t\t\t\tif (total > maxPackageBytes)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\t\"plugin package exceeds the configured size limit\",\n\t\t\t\t\t);\n\t\t\t\thash.update(item.value);\n\t\t\t\tchunks.push(item.value);\n\t\t\t}\n\t\t} finally {\n\t\t\treader.releaseLock();\n\t\t}\n\t\tif (controller.signal.aborted)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", \"plugin package download was cancelled\");\n\t\tconst bytes = new Uint8Array(total);\n\t\tlet offset = 0;\n\t\tfor (const chunk of chunks) {\n\t\t\tbytes.set(chunk, offset);\n\t\t\toffset += chunk.byteLength;\n\t\t}\n\t\tconst digestHex = hash.digest(\"hex\");\n\t\tif (input.expectedDigestHex !== undefined && digestHex !== input.expectedDigestHex)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\t\"digest_mismatch\",\n\t\t\t\t\"plugin package bytes do not match the expected sha256 digest\",\n\t\t\t);\n\t\tconst fileName = current.pathname.split(\"/\").pop();\n\t\tconst mediaType = detectPluginPackageMediaTypeV1(\n\t\t\tbytes,\n\t\t\tfileName === undefined || fileName.length === 0 ? undefined : fileName,\n\t\t);\n\t\treturn { bytes, mediaType, digestHex };\n\t} finally {\n\t\tclearTimeout(timeout);\n\t\tinput.signal?.removeEventListener(\"abort\", abort);\n\t\tawait response?.body?.cancel().catch(() => undefined);\n\t}\n}\n"]}