@cardinali-studio/adminkit 2.2.37 → 2.2.39

package/README.md

@@ -196,6 +196,14 @@ It is opinionated about the useful narrow case: Hugo content, React 19, Zod 4, C
 
 This narrowness is intentional. A smaller system with explicit failure modes is easier to trust around content that people have edited by hand.
 
+## Delivery ZIP compatibility (2.2.38)
+
+New delivery archives use STORE members with their CRC and sizes in each local header, without data descriptors. This prevents streaming extractors from mistaking descriptor-shaped bytes inside a photograph for the end of the file. CRC preparation reads bounded 4 MiB slices and remains pausable and cancellable; source changes fail closed. ZIP64 sizes and offsets are promoted independently.
+
+Persistent checkpoints record `store-header-v1`. Checkpoints from earlier releases continue with `store-descriptor-v1`, preserving confirmed multipart bytes and derivative retries. The update affects newly generated archives; it does not rewrite existing stored ZIPs. Consumers must update the dependency, rebuild and redeploy.
+
+The regression includes 208 synthetic members with the collision at member 53, streaming and indexed readers, ZIP64 offsets, and byte-identical resume against fixtures from 2.2.37.
+
 ## Development
 
 ```sh

package/dist/app/app.css

@@ -1107,6 +1107,13 @@ body { margin: 0; background: var(--ak-bg); color: var(--ak-ink); font-family: v
 }
 .dl-card,.dl-group { min-width: 0; }
 .dl-card { background: var(--ak-panel); border: 1px solid var(--ak-line); border-radius: var(--ak-radius); }
+.dl-payment-status {
+  display: inline-flex; justify-self: start; padding: 4px 8px; border: 1px solid var(--ak-line);
+  border-radius: 999px; background: var(--ak-bg); color: var(--ak-ink-quiet);
+  font: 600 10px/1.4 var(--ak-font);
+}
+.dl-payment-disabled { cursor: not-allowed; }
+.dl-payment-disabled input { opacity: .5; cursor: not-allowed; }
 
 /* Le due mattonelle di scelta: sono la prima cosa che si guarda entrando. */
 .dl-pick { padding: 14px; display: grid; grid-template-columns: 1fr 1fr; gap: 10px; }

package/dist/app/lib/delivery-upload.d.ts

@@ -1,5 +1,8 @@
 import { type UploadControl } from "./delivery-network.js";
 export { UploadCancelled, type UploadControl } from "./delivery-network.js";
+declare const ZIP_FORMAT = "store-header-v1";
+declare const LEGACY_ZIP_FORMAT = "store-descriptor-v1";
+type ZipFormat = typeof ZIP_FORMAT | typeof LEGACY_ZIP_FORMAT;
 export interface DeliveryUploadProgress {
     phase: "originals" | "derivatives" | "finalizing";
     file: string;
@@ -57,6 +60,8 @@ interface MemberCheckpoint {
     dataOffset: number;
     time: number;
     date: number;
+    zipFormat?: ZipFormat;
+    headerCrc?: number;
 }
 export declare function uploadDeliveryPackage(deliveryId: string, packageId: string, selected: File[], options: UploadOptions, onProgress: (progress: DeliveryUploadProgress) => void, control?: UploadControl): Promise<UploadResult>;
 interface ZipSink {
@@ -69,9 +74,10 @@ export declare class ZipStream {
     private sink;
     private offset;
     private entries;
-    constructor(sink: ZipSink, utc?: boolean);
+    private format;
+    constructor(sink: ZipSink, utc?: boolean, format?: ZipFormat);
     restore(entries: DeliveryManifestEntry[], files: File[], offset: number): void;
-    add(nameValue: string, blob: Blob, progress?: (read: number) => void, modified?: Date, checkpoint?: (current: MemberCheckpoint, offset: number) => Promise<void>, resume?: MemberCheckpoint): Promise<ZipMember>;
+    add(nameValue: string, blob: Blob, progress?: (read: number, preparing?: boolean) => void, modified?: Date, checkpoint?: (current: MemberCheckpoint, offset: number) => Promise<void>, resume?: MemberCheckpoint): Promise<ZipMember>;
     close(): Promise<void>;
     private sinkGate;
     private push;

package/dist/app/lib/delivery-upload.js

@@ -14,6 +14,8 @@ const READ = 4 * 1024 * 1024;
 const UPLOAD_CONCURRENCY = 4;
 const IMAGE = /\.(jpe?g|png|webp)$/i;
 const enc = new TextEncoder();
+const ZIP_FORMAT = "store-header-v1";
+const LEGACY_ZIP_FORMAT = "store-descriptor-v1";
 const droppedPaths = new WeakMap();
 /* Il cancello di pausa e annullamento.
  *
@@ -154,7 +156,9 @@ async function buildDeliveryPackage(deliveryId, packageId, selected, options, on
     let currentOriginal = "";
     const originalsSink = new B2Sink(deliveryId, packageId, "originals", reportOriginals, control, options.manifestVersion === 2);
     sinks.push(originalsSink);
-    const originals = new ZipStream(originalsSink, options.manifestVersion === 2);
+    // Confirmed multipart prefixes and derivative retries keep their original layout.
+    const zipFormat = checkpoint ? (checkpoint.current?.zipFormat || LEGACY_ZIP_FORMAT) : ZIP_FORMAT;
+    const originals = new ZipStream(originalsSink, options.manifestVersion === 2, zipFormat);
     if (checkpoint) {
         if (checkpoint.complete) {
             originalsSink.totalBytes = checkpoint.offset;
@@ -175,12 +179,13 @@ async function buildDeliveryPackage(deliveryId, packageId, selected, options, on
             checkpoint: { version: 1, fileIndex: processed, offset, sequence, current } }, control);
         lastCheckpoint = offset;
     }
-    function reportOriginals() {
+    function reportOriginals(_read, preparing = false) {
         onProgress({
             phase: "originals", file: currentOriginal, doneFiles: processed, totalFiles: files.length,
             sourceBytes, uploadedBytes: originalsSink.uploadedBytes,
             transferredBytes: originalsSink.transferredBytes, startedAt,
             transferStartedAt: originalsSink.transferStartedAt || undefined,
+            note: preparing ? "Verifico il file prima del caricamento…" : undefined,
         });
     }
     for (const file of files.slice(processed)) {
@@ -188,7 +193,7 @@ async function buildDeliveryPackage(deliveryId, packageId, selected, options, on
             await control.gate();
         const name = safePath(deliveryRelativeName(file));
         currentOriginal = name;
-        const member = await originals.add(name, file, reportOriginals, new Date(file.lastModified), options.manifestVersion === 2 ? saveCheckpoint : undefined, checkpoint && processed === checkpoint.fileIndex ? checkpoint.current : undefined);
+        const member = await originals.add(name, file, reportOriginals, new Date(file.lastModified), options.manifestVersion === 2 ? saveCheckpoint : undefined, checkpoint && !checkpoint.complete && processed === checkpoint.fileIndex ? checkpoint.current : undefined);
         entryByName.set(name, entries.length);
         entries.push({ name, type: file.type || mimeFromName(name), original: member });
         await saveMetadata(entries.length - 1, entries[entries.length - 1]);
@@ -200,7 +205,7 @@ async function buildDeliveryPackage(deliveryId, packageId, selected, options, on
     await flushMetadata();
     if (options.manifestVersion === 2 && !checkpoint?.complete) {
         await deliveryJson("/admin/api/deliveries", { action: "manifestCheckpoint", id: deliveryId, packageId,
-            checkpoint: { version: 1, fileIndex: files.length, offset: originalsSink.totalBytes, sequence, complete: true } }, control);
+            checkpoint: { version: 1, fileIndex: files.length, offset: originalsSink.totalBytes, sequence, complete: true, current: { zipFormat } } }, control);
     }
     phase = "variants";
     sequence = 0;
@@ -213,12 +218,12 @@ async function buildDeliveryPackage(deliveryId, packageId, selected, options, on
     if (wantWebArchive) {
         webSink = new B2Sink(deliveryId, packageId, "web", undefined, control, options.manifestVersion === 2);
         sinks.push(webSink);
-        webZip = new ZipStream(webSink, options.manifestVersion === 2);
+        webZip = new ZipStream(webSink, options.manifestVersion === 2, zipFormat);
     }
     if (options.galleryEnabled) {
         thumbsSink = new B2Sink(deliveryId, packageId, "thumbs", undefined, control, options.manifestVersion === 2);
         sinks.push(thumbsSink);
-        thumbsZip = new ZipStream(thumbsSink, options.manifestVersion === 2);
+        thumbsZip = new ZipStream(thumbsSink, options.manifestVersion === 2, zipFormat);
     }
     if (webZip) {
         let imageDone = 0;
@@ -494,9 +499,13 @@ export class ZipStream {
     sink;
     offset = 0;
     entries = [];
-    constructor(sink, utc = false) {
+    format;
+    constructor(sink, utc = false, format = ZIP_FORMAT) {
+        if (![ZIP_FORMAT, LEGACY_ZIP_FORMAT].includes(format))
+            throw new Error("Formato del checkpoint ZIP non supportato.");
         this.utc = utc;
         this.sink = sink;
+        this.format = format;
     }
     restore(entries, files, offset) {
         this.offset = offset;
@@ -509,22 +518,46 @@ export class ZipStream {
         });
     }
     async add(nameValue, blob, progress, modified = new Date(), checkpoint, resume) {
+        await this.sinkGate();
         const name = enc.encode(safePath(nameValue));
         const size = blob.size;
         const localOffset = resume?.localOffset ?? this.offset;
         const zip64 = size >= 0xffffffff;
+        const legacy = this.format === LEGACY_ZIP_FORMAT;
+        if (resume && (resume.zipFormat || LEGACY_ZIP_FORMAT) !== this.format)
+            throw new Error("Formato del checkpoint ZIP diverso dal caricamento.");
+        // STORE has a known size, but needs a CRC before its local header can
+        // be self-contained. Two bounded reads avoid buffering whole photos.
+        let headerCrc = 0;
+        if (!legacy) {
+            let value = 0xffffffff;
+            progress?.(0, true);
+            for (let offset = 0; offset < size; offset += READ) {
+                await this.sinkGate();
+                const length = Math.min(READ, size - offset);
+                const chunk = new Uint8Array(await blob.slice(offset, offset + length).arrayBuffer());
+                if (chunk.length !== length)
+                    throw new Error("Lettura sorgente incompleta durante la verifica.");
+                value = crc32Update(value, chunk);
+                progress?.(offset + length, true);
+            }
+            headerCrc = (value ^ 0xffffffff) >>> 0;
+            if (resume && resume.headerCrc !== headerCrc)
+                throw new Error("Il file è cambiato: il checksum non corrisponde al checkpoint.");
+        }
         const extra = zip64 ? zip64Extra([size, size]) : new Uint8Array();
         const local = bytes(30 + name.length + extra.length);
         const v = view(local);
         v.setUint32(0, 0x04034b50, true);
         v.setUint16(4, zip64 ? 45 : 20, true);
-        v.setUint16(6, 0x0808, true); // descriptor + nomi UTF-8
+        v.setUint16(6, legacy ? 0x0808 : 0x0800, true); // UTF-8; descriptor only for legacy checkpoints
         v.setUint16(8, 0, true); // STORE
         const [time, date] = dosDate(modified, this.utc);
         v.setUint16(10, time, true);
         v.setUint16(12, date, true);
-        v.setUint32(18, zip64 ? 0xffffffff : 0, true);
-        v.setUint32(22, zip64 ? 0xffffffff : 0, true);
+        v.setUint32(14, legacy ? 0 : headerCrc, true);
+        v.setUint32(18, zip64 ? 0xffffffff : legacy ? 0 : size, true);
+        v.setUint32(22, zip64 ? 0xffffffff : legacy ? 0 : size, true);
         v.setUint16(26, name.length, true);
         v.setUint16(28, extra.length, true);
         local.set(name, 30);
@@ -564,46 +597,56 @@ export class ZipStream {
             read += chunk.byteLength;
             await this.push(chunk);
             if (checkpoint && this.offset % PART === 0)
-                await checkpoint({ name: nameValue, size, read, crc, chain, localOffset, dataOffset, time, date }, this.offset);
+                await checkpoint({ name: nameValue, size, read, crc, chain, localOffset, dataOffset, time, date,
+                    zipFormat: this.format, ...(!legacy ? { headerCrc } : {}) }, this.offset);
             progress?.(read);
         }
         crc = (crc ^ 0xffffffff) >>> 0;
-        const descriptor = bytes(zip64 ? 24 : 16);
-        const d = view(descriptor);
-        d.setUint32(0, 0x08074b50, true);
-        d.setUint32(4, crc, true);
-        if (zip64) {
-            setU64(d, 8, size);
-            setU64(d, 16, size);
-        }
-        else {
-            d.setUint32(8, size, true);
-            d.setUint32(12, size, true);
+        if (!legacy && crc !== headerCrc)
+            throw new Error("Il file è cambiato durante il caricamento. Riseleziona i file e riprova.");
+        if (legacy) {
+            const descriptor = bytes(zip64 ? 24 : 16);
+            const d = view(descriptor);
+            d.setUint32(0, 0x08074b50, true);
+            d.setUint32(4, crc, true);
+            if (zip64) {
+                setU64(d, 8, size);
+                setU64(d, 16, size);
+            }
+            else {
+                d.setUint32(8, size, true);
+                d.setUint32(12, size, true);
+            }
+            await this.push(descriptor);
         }
-        await this.push(descriptor);
         this.entries.push({ name, size, crc, localOffset, time, date });
         return { offset: dataOffset, length: size, crc32: crc };
     }
     async close() {
         const centralOffset = this.offset;
         for (const entry of this.entries) {
-            const large = entry.size >= 0xffffffff || entry.localOffset >= 0xffffffff;
-            const extra = large ? zip64Extra([entry.size, entry.size, entry.localOffset]) : new Uint8Array();
+            const legacy = this.format === LEGACY_ZIP_FORMAT;
+            const largeSize = entry.size >= 0xffffffff;
+            const largeOffset = entry.localOffset >= 0xffffffff;
+            const large = largeSize || largeOffset;
+            const values = legacy && large ? [entry.size, entry.size, entry.localOffset]
+                : [...(largeSize ? [entry.size, entry.size] : []), ...(largeOffset ? [entry.localOffset] : [])];
+            const extra = values.length ? zip64Extra(values) : new Uint8Array();
             const central = bytes(46 + entry.name.length + extra.length);
             const v = view(central);
             v.setUint32(0, 0x02014b50, true);
             v.setUint16(4, 45, true);
             v.setUint16(6, large ? 45 : 20, true);
-            v.setUint16(8, 0x0808, true);
+            v.setUint16(8, legacy ? 0x0808 : 0x0800, true);
             v.setUint16(10, 0, true);
             v.setUint16(12, entry.time, true);
             v.setUint16(14, entry.date, true);
             v.setUint32(16, entry.crc, true);
-            v.setUint32(20, large ? 0xffffffff : entry.size, true);
-            v.setUint32(24, large ? 0xffffffff : entry.size, true);
+            v.setUint32(20, largeSize || (legacy && large) ? 0xffffffff : entry.size, true);
+            v.setUint32(24, largeSize || (legacy && large) ? 0xffffffff : entry.size, true);
             v.setUint16(28, entry.name.length, true);
             v.setUint16(30, extra.length, true);
-            v.setUint32(42, large ? 0xffffffff : entry.localOffset, true);
+            v.setUint32(42, largeOffset || (legacy && large) ? 0xffffffff : entry.localOffset, true);
             central.set(entry.name, 46);
             central.set(extra, 46 + entry.name.length);
             await this.push(central);

package/dist/app/routes/Deliveries.js

@@ -407,7 +407,7 @@ export function DeliveryWorkspace({ delivery: fromServer, busy, onAction, onRefr
                                                     }
                                                 }, children: "Accorcia link" })), _jsx("button", { className: "ak-btn ak-btn-primary", onClick: () => void copy(link.url, "link"), children: copied === "link" ? "Copiato" : "Copia il link" }), _jsx("button", { className: "ak-btn", onClick: () => void copy(messageFor(draft, link, expiry), "messaggio"), children: copied === "messaggio" ? "Copiato" : "Copia il messaggio" }), _jsx("a", { className: "ak-btn", target: "_blank", rel: "noreferrer", href: `https://wa.me/?text=${encodeURIComponent(messageFor(draft, link, expiry))}`, children: "Apri in WhatsApp" })] }), _jsx("p", { className: "dl-link-stats", children: linkStory(link) }), draft.pin && (_jsxs("p", { className: "dl-link-stats", children: ["Codice di accesso ", _jsx("strong", { children: draft.pin }), " \u2014 \u00E8 gi\u00E0 dentro il messaggio."] }))] })) : (_jsxs("section", { className: "dl-card dl-get", children: [_jsx("button", { className: "ak-btn ak-btn-primary dl-get-btn", disabled: !delivery || saving || busy, onClick: () => void save(), children: saving ? "Preparo…" : "Ottieni il link" }), _jsx("p", { children: delivery
                                             ? "Il link vale già mentre l'upload continua: chi lo apre vede che i file stanno arrivando."
-                                            : "Aggiungi i file: il caricamento parte subito e il resto si compila mentre va." })] }))] }), _jsxs("div", { className: "dl-side", children: [_jsxs(Group, { title: "Chi pu\u00F2 aprirlo", children: [_jsxs("label", { className: "dl-radio", children: [_jsx("input", { type: "radio", name: "dl-access", checked: !draft.pin, onChange: () => change({ pin: "" }) }), _jsxs("span", { children: [_jsx("strong", { children: "Chiunque abbia il link" }), _jsx("small", { children: "Il link \u00E8 lungo e casuale: non si indovina." })] })] }), _jsxs("label", { className: "dl-radio", children: [_jsx("input", { type: "radio", name: "dl-access", checked: !!draft.pin, onChange: () => change({ pin: draft.pin || makeCode() }) }), _jsxs("span", { children: [_jsx("strong", { children: "Serve anche un codice" }), _jsx("small", { children: "Da mandare insieme al link. Dopo dieci errori si blocca per un'ora." })] })] }), !!draft.pin && (_jsxs("div", { className: "dl-code", children: [_jsx("input", { value: draft.pin, spellCheck: false, onChange: (e) => change({ pin: e.target.value.toUpperCase() }) }), _jsx("button", { className: "ak-btn", onClick: () => change({ pin: makeCode() }), children: "Altro" })] }))] }), _jsxs(Group, { title: "Cosa riceve", note: packages.length
+                                            : "Aggiungi i file: il caricamento parte subito e il resto si compila mentre va." })] }))] }), _jsxs("div", { className: "dl-side", children: [_jsxs(Group, { title: "Chi pu\u00F2 aprirlo", children: [_jsxs("label", { className: "dl-radio", children: [_jsx("input", { type: "radio", name: "dl-access", checked: !draft.pin, onChange: () => change({ pin: "" }) }), _jsxs("span", { children: [_jsx("strong", { children: "Chiunque abbia il link" }), _jsx("small", { children: "Il link \u00E8 lungo e casuale: non si indovina." })] })] }), _jsxs("label", { className: "dl-radio", children: [_jsx("input", { type: "radio", name: "dl-access", checked: !!draft.pin, onChange: () => change({ pin: draft.pin || makeCode() }) }), _jsxs("span", { children: [_jsx("strong", { children: "Serve anche un codice" }), _jsx("small", { children: "Da mandare insieme al link. Dopo dieci errori si blocca per un'ora." })] })] }), !!draft.pin && (_jsxs("div", { className: "dl-code", children: [_jsx("input", { value: draft.pin, spellCheck: false, onChange: (e) => change({ pin: e.target.value.toUpperCase() }) }), _jsx("button", { className: "ak-btn", onClick: () => change({ pin: makeCode() }), children: "Altro" })] }))] }), _jsxs(Group, { title: "Richiedi pagamento", children: [_jsx("span", { className: "dl-payment-status", children: "Chiedi di attivare la funzione" }), _jsxs("label", { className: "dl-check dl-payment-disabled", children: [_jsx("input", { type: "checkbox", checked: false, disabled: true, "aria-describedby": "dl-payment-description" }), _jsxs("span", { children: [_jsx("strong", { children: "Sblocca gallery e download al saldo" }), _jsx("small", { id: "dl-payment-description", children: "Potrai impostare l\u2019importo da incassare per questa consegna. Il cliente pagher\u00E0 una sola volta per sbloccare la galleria e scaricare i file." })] })] }), _jsx("p", { className: "dl-note", children: "Questa opzione non \u00E8 ancora disponibile: il transfer non richiede pagamenti e segue le impostazioni di accesso qui sopra." })] }), _jsxs(Group, { title: "Cosa riceve", note: packages.length
                                     ? "Si decide prima di caricare: per cambiarle bisognerebbe ricaricare i file."
                                     : undefined, children: [_jsxs("label", { className: "dl-check", children: [_jsx("input", { type: "checkbox", checked: draft.gallery, disabled: !!packages.length, onChange: (e) => change({ gallery: e.target.checked }) }), _jsxs("span", { children: [_jsx("strong", { children: "Vede le foto sulla pagina" }), _jsx("small", { children: "Anteprime e ingrandimento, senza scaricare niente. Da telefono \u00E8 la differenza fra un link e un Transfer." })] })] }), _jsxs("label", { className: "dl-check", children: [_jsx("input", { type: "checkbox", checked: draft.light, disabled: !!packages.length, onChange: (e) => change({ light: e.target.checked }) }), _jsxs("span", { children: [_jsx("strong", { children: "Pu\u00F2 scaricare una versione leggera" }), _jsx("small", { children: "Un secondo download, adatto a social e web. Gli originali ci sono sempre." })] })] }), draft.light && (_jsxs("label", { className: "dl-field", children: [_jsx("span", { children: "Formato della versione leggera" }), _jsxs("select", { className: "dl-select", "aria-label": "Formato della versione leggera", value: draft.webFormat, disabled: !!packages.length || uploading, onChange: (e) => change({ webFormat: e.target.value === "jpg" ? "jpg" : "webp" }), children: [_jsx("option", { value: "webp", children: "WebP \u2014 file pi\u00F9 piccoli" }), _jsx("option", { value: "jpg", disabled: !jpegEnabled && draft.webFormat !== "jpg", children: "JPG \u2014 massima compatibilit\u00E0" })] }), _jsxs("small", { children: ["2048 px sul lato lungo, senza ingrandire le foto pi\u00F9 piccole. Qualit\u00E0 ", draft.webFormat === "jpg" ? "82%" : "80%", "."] })] }))] }), downloadLabelsEnabled && (_jsxs(Group, { title: "Testi dei pulsanti di download", note: "Lascia vuoto per usare il testo predefinito. Puoi cambiarli anche dopo l\u2019invio, senza ricaricare i file.", children: [delivery?.status !== "archived" && (_jsx(Field, { label: "Pulsante degli originali", children: _jsx("input", { value: draft.downloadOriginalsLabel, maxLength: 80, placeholder: "Scarica i file", onChange: (e) => change({ downloadOriginalsLabel: e.target.value }) }) })), (packages.length ? packages.some(pkg => pkg.webEnabled) : draft.light) && (_jsx(Field, { label: "Pulsante della versione leggera", children: _jsx("input", { value: draft.downloadWebLabel, maxLength: 80, placeholder: "Versione leggera", onChange: (e) => change({ downloadWebLabel: e.target.value }) }) }))] })), _jsxs(Group, { title: "Per quanto resta scaricabile", children: [_jsxs("select", { className: "dl-select", value: draft.duration, onChange: (e) => change({ duration: e.target.value }), children: [delivery && _jsx("option", { value: "keep", children: delivery.filesExpiresAt
                                                     ? `Fino al ${formatDate(delivery.filesExpiresAt)}`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cardinali-studio/adminkit",
-  "version": "2.2.37",
+  "version": "2.2.39",
   "type": "module",
   "description": "Motore riusabile di un pannello di amministrazione per siti Hugo su Cloudflare Pages: codec del front matter guidato dallo schema, form React, libreria media su R2. NIENTE di specifico di un sito qui dentro.",
   "license": "0BSD",
@@ -104,6 +104,7 @@
     "react-dom": "^19.2.8",
     "react-hook-form": "^7.85.0",
     "typescript": "^5.9.3",
+    "unzipper": "0.12.5",
     "wrangler": "4.114.0",
     "zod": "^4.4.3"
   },