@caupulican/pi-adaptative 0.85.8 → 0.86.2

package/dist/utils/zip-extractor.js

@@ -0,0 +1,275 @@
+import { lstat, mkdir, readFile, writeFile } from "node:fs/promises";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { inflateRaw } from "node:zlib";
+const LOCAL_FILE_SIGNATURE = 0x04034b50;
+const CENTRAL_FILE_SIGNATURE = 0x02014b50;
+const END_OF_CENTRAL_DIRECTORY_SIGNATURE = 0x06054b50;
+const END_OF_CENTRAL_DIRECTORY_BYTES = 22;
+const MAX_ZIP_COMMENT_BYTES = 65_535;
+const MAX_ARCHIVE_BYTES = 512 * 1024 * 1024;
+const MAX_ENTRY_BYTES = 512 * 1024 * 1024;
+const MAX_TOTAL_BYTES = 1024 * 1024 * 1024;
+const MAX_ENTRIES = 4_096;
+const MAX_PATH_BYTES = 4_096;
+const ZIP64_16_BIT_SENTINEL = 0xffff;
+const ZIP64_32_BIT_SENTINEL = 0xffffffff;
+export class ZipExtractionError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.name = "ZipExtractionError";
+        this.code = code;
+    }
+}
+const CRC32_TABLE = new Uint32Array(256);
+for (let index = 0; index < CRC32_TABLE.length; index++) {
+    let value = index;
+    for (let bit = 0; bit < 8; bit++)
+        value = (value >>> 1) ^ (value & 1 ? 0xedb88320 : 0);
+    CRC32_TABLE[index] = value >>> 0;
+}
+function crc32(value) {
+    let checksum = 0xffffffff;
+    for (const byte of value)
+        checksum = (checksum >>> 8) ^ (CRC32_TABLE[(checksum ^ byte) & 0xff] ?? 0);
+    return (checksum ^ 0xffffffff) >>> 0;
+}
+function invalidArchive(message) {
+    throw new ZipExtractionError("invalid_archive", message);
+}
+function assertBufferRange(buffer, offset, bytes) {
+    if (!Number.isSafeInteger(offset) ||
+        !Number.isSafeInteger(bytes) ||
+        offset < 0 ||
+        bytes < 0 ||
+        offset + bytes > buffer.length) {
+        invalidArchive("ZIP structure extends beyond the archive boundary.");
+    }
+}
+function findEndOfCentralDirectory(archive) {
+    const minimumOffset = Math.max(0, archive.length - END_OF_CENTRAL_DIRECTORY_BYTES - MAX_ZIP_COMMENT_BYTES);
+    for (let offset = archive.length - END_OF_CENTRAL_DIRECTORY_BYTES; offset >= minimumOffset; offset--) {
+        if (archive.readUInt32LE(offset) !== END_OF_CENTRAL_DIRECTORY_SIGNATURE)
+            continue;
+        const commentBytes = archive.readUInt16LE(offset + 20);
+        if (offset + END_OF_CENTRAL_DIRECTORY_BYTES + commentBytes === archive.length)
+            return offset;
+    }
+    return invalidArchive("ZIP end-of-central-directory record is missing.");
+}
+function normalizeEntryPath(rawName) {
+    if (!rawName || rawName.includes("\0") || rawName.includes("\ufffd")) {
+        throw new ZipExtractionError("unsafe_entry", "ZIP contains an invalid entry path.");
+    }
+    const portableName = rawName.replaceAll("\\", "/");
+    if (portableName.startsWith("/") || isAbsolute(portableName) || /^[A-Za-z]:/u.test(portableName)) {
+        throw new ZipExtractionError("unsafe_entry", "ZIP contains an absolute entry path.");
+    }
+    const directory = portableName.endsWith("/");
+    const segments = portableName.split("/");
+    if (directory)
+        segments.pop();
+    if (segments.length === 0 ||
+        segments.some((segment) => segment.length === 0 || segment === "." || segment === ".." || segment.includes(":"))) {
+        throw new ZipExtractionError("unsafe_entry", "ZIP contains a traversal or ambiguous entry path.");
+    }
+    return { segments, directory };
+}
+function parseEntries(archive) {
+    const endOffset = findEndOfCentralDirectory(archive);
+    const diskNumber = archive.readUInt16LE(endOffset + 4);
+    const centralDiskNumber = archive.readUInt16LE(endOffset + 6);
+    const entriesOnDisk = archive.readUInt16LE(endOffset + 8);
+    const entryCount = archive.readUInt16LE(endOffset + 10);
+    const centralBytes = archive.readUInt32LE(endOffset + 12);
+    const centralOffset = archive.readUInt32LE(endOffset + 16);
+    if (diskNumber !== 0 ||
+        centralDiskNumber !== 0 ||
+        entriesOnDisk !== entryCount ||
+        entryCount === ZIP64_16_BIT_SENTINEL ||
+        centralBytes === ZIP64_32_BIT_SENTINEL ||
+        centralOffset === ZIP64_32_BIT_SENTINEL) {
+        throw new ZipExtractionError("unsupported_archive", "Multi-disk and ZIP64 archives are unsupported.");
+    }
+    if (entryCount > MAX_ENTRIES) {
+        throw new ZipExtractionError("limit_exceeded", `ZIP contains more than ${MAX_ENTRIES} entries.`);
+    }
+    assertBufferRange(archive, centralOffset, centralBytes);
+    if (centralOffset + centralBytes > endOffset)
+        invalidArchive("ZIP central directory overlaps its footer.");
+    const entries = [];
+    const seenPaths = new Set();
+    let totalBytes = 0;
+    let cursor = centralOffset;
+    for (let index = 0; index < entryCount; index++) {
+        assertBufferRange(archive, cursor, 46);
+        if (archive.readUInt32LE(cursor) !== CENTRAL_FILE_SIGNATURE) {
+            invalidArchive("ZIP central directory entry is malformed.");
+        }
+        const versionMadeBy = archive.readUInt16LE(cursor + 4);
+        const flags = archive.readUInt16LE(cursor + 8);
+        const method = archive.readUInt16LE(cursor + 10);
+        const checksum = archive.readUInt32LE(cursor + 16);
+        const compressedBytes = archive.readUInt32LE(cursor + 20);
+        const uncompressedBytes = archive.readUInt32LE(cursor + 24);
+        const nameBytes = archive.readUInt16LE(cursor + 28);
+        const extraBytes = archive.readUInt16LE(cursor + 30);
+        const commentBytes = archive.readUInt16LE(cursor + 32);
+        const startingDisk = archive.readUInt16LE(cursor + 34);
+        const externalAttributes = archive.readUInt32LE(cursor + 38);
+        const localHeaderOffset = archive.readUInt32LE(cursor + 42);
+        const variableBytes = nameBytes + extraBytes + commentBytes;
+        assertBufferRange(archive, cursor + 46, variableBytes);
+        if (startingDisk !== 0 ||
+            compressedBytes === ZIP64_32_BIT_SENTINEL ||
+            uncompressedBytes === ZIP64_32_BIT_SENTINEL ||
+            localHeaderOffset === ZIP64_32_BIT_SENTINEL) {
+            throw new ZipExtractionError("unsupported_archive", "ZIP64 entries are unsupported.");
+        }
+        if ((flags & 0x0001) !== 0) {
+            throw new ZipExtractionError("unsupported_archive", "Encrypted ZIP entries are unsupported.");
+        }
+        if (method !== 0 && method !== 8) {
+            throw new ZipExtractionError("unsupported_archive", "ZIP compression method is unsupported.");
+        }
+        if (nameBytes === 0 || nameBytes > MAX_PATH_BYTES) {
+            throw new ZipExtractionError("limit_exceeded", "ZIP entry path exceeds its bound.");
+        }
+        const rawName = archive.subarray(cursor + 46, cursor + 46 + nameBytes).toString("utf8");
+        const normalized = normalizeEntryPath(rawName);
+        const hostSystem = versionMadeBy >>> 8;
+        const unixMode = hostSystem === 3 ? (externalAttributes >>> 16) & 0xffff : 0;
+        const unixType = unixMode & 0xf000;
+        const directory = normalized.directory || unixType === 0x4000 || (externalAttributes & 0x10) !== 0;
+        if (unixType !== 0 && unixType !== 0x4000 && unixType !== 0x8000) {
+            throw new ZipExtractionError("unsafe_entry", "ZIP contains a non-file entry.");
+        }
+        if (uncompressedBytes > MAX_ENTRY_BYTES) {
+            throw new ZipExtractionError("limit_exceeded", "ZIP entry exceeds its uncompressed-size bound.");
+        }
+        totalBytes += uncompressedBytes;
+        if (!Number.isSafeInteger(totalBytes) || totalBytes > MAX_TOTAL_BYTES) {
+            throw new ZipExtractionError("limit_exceeded", "ZIP exceeds its total uncompressed-size bound.");
+        }
+        const identity = normalized.segments.join("/");
+        const collisionKey = process.platform === "win32" ? identity.toLowerCase() : identity;
+        if (seenPaths.has(collisionKey)) {
+            throw new ZipExtractionError("unsafe_entry", "ZIP contains duplicate entry paths.");
+        }
+        seenPaths.add(collisionKey);
+        entries.push({
+            segments: normalized.segments,
+            directory,
+            flags,
+            method,
+            checksum,
+            compressedBytes,
+            uncompressedBytes,
+            localHeaderOffset,
+        });
+        cursor += 46 + variableBytes;
+    }
+    if (cursor > centralOffset + centralBytes)
+        invalidArchive("ZIP central directory exceeds its declared size.");
+    return entries;
+}
+async function inflateEntry(compressed, expectedBytes) {
+    return new Promise((resolvePromise, reject) => {
+        inflateRaw(compressed, { maxOutputLength: Math.max(1, expectedBytes) }, (error, output) => {
+            if (error) {
+                reject(new ZipExtractionError("invalid_archive", "ZIP deflate stream is invalid."));
+                return;
+            }
+            resolvePromise(output);
+        });
+    });
+}
+async function ensureDirectory(root, segments) {
+    let current = root;
+    for (const segment of segments) {
+        current = join(current, segment);
+        try {
+            const metadata = await lstat(current);
+            if (metadata.isSymbolicLink() || !metadata.isDirectory()) {
+                throw new ZipExtractionError("unsafe_entry", "ZIP extraction path crosses a non-directory.");
+            }
+        }
+        catch (error) {
+            if (error instanceof ZipExtractionError)
+                throw error;
+            if (error.code !== "ENOENT")
+                throw error;
+            await mkdir(current, { mode: 0o700 });
+        }
+    }
+}
+function resolveEntryTarget(destination, segments) {
+    const target = resolve(destination, ...segments);
+    const fromDestination = relative(destination, target);
+    if (fromDestination === ".." || fromDestination.startsWith(`..${sep}`) || isAbsolute(fromDestination)) {
+        throw new ZipExtractionError("unsafe_entry", "ZIP entry escapes the extraction destination.");
+    }
+    return target;
+}
+async function extractEntry(archive, destination, entry) {
+    if (entry.directory) {
+        await ensureDirectory(destination, entry.segments);
+        return;
+    }
+    await ensureDirectory(destination, entry.segments.slice(0, -1));
+    const target = resolveEntryTarget(destination, entry.segments);
+    try {
+        await lstat(target);
+        throw new ZipExtractionError("unsafe_entry", "ZIP extraction refuses to overwrite an existing path.");
+    }
+    catch (error) {
+        if (error instanceof ZipExtractionError)
+            throw error;
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    assertBufferRange(archive, entry.localHeaderOffset, 30);
+    if (archive.readUInt32LE(entry.localHeaderOffset) !== LOCAL_FILE_SIGNATURE) {
+        invalidArchive("ZIP local file header is malformed.");
+    }
+    const localFlags = archive.readUInt16LE(entry.localHeaderOffset + 6);
+    const localMethod = archive.readUInt16LE(entry.localHeaderOffset + 8);
+    const localNameBytes = archive.readUInt16LE(entry.localHeaderOffset + 26);
+    const localExtraBytes = archive.readUInt16LE(entry.localHeaderOffset + 28);
+    if (localFlags !== entry.flags || localMethod !== entry.method) {
+        invalidArchive("ZIP local and central headers disagree.");
+    }
+    const dataOffset = entry.localHeaderOffset + 30 + localNameBytes + localExtraBytes;
+    assertBufferRange(archive, dataOffset, entry.compressedBytes);
+    const compressed = archive.subarray(dataOffset, dataOffset + entry.compressedBytes);
+    const output = entry.method === 0 ? Buffer.from(compressed) : await inflateEntry(compressed, entry.uncompressedBytes);
+    if (output.length !== entry.uncompressedBytes || crc32(output) !== entry.checksum) {
+        invalidArchive("ZIP entry size or checksum is invalid.");
+    }
+    await writeFile(target, output, { flag: "wx", mode: 0o600 });
+}
+/** Extract a bounded ordinary ZIP with no dependency on platform archive utilities. */
+export async function extractZipFile(archivePath, destination) {
+    try {
+        const metadata = await lstat(archivePath);
+        if (metadata.isSymbolicLink() || !metadata.isFile())
+            invalidArchive("ZIP source is not a regular file.");
+        if (metadata.size > MAX_ARCHIVE_BYTES) {
+            throw new ZipExtractionError("limit_exceeded", "ZIP archive exceeds its 512 MiB input bound.");
+        }
+        const archive = await readFile(archivePath);
+        const entries = parseEntries(archive);
+        await mkdir(destination, { recursive: true, mode: 0o700 });
+        const destinationMetadata = await lstat(destination);
+        if (destinationMetadata.isSymbolicLink() || !destinationMetadata.isDirectory()) {
+            throw new ZipExtractionError("unsafe_entry", "ZIP destination is not a regular directory.");
+        }
+        for (const entry of entries)
+            await extractEntry(archive, destination, entry);
+    }
+    catch (error) {
+        if (error instanceof ZipExtractionError)
+            throw error;
+        throw new ZipExtractionError("write_failed", `ZIP extraction failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+//# sourceMappingURL=zip-extractor.js.map

package/dist/utils/zip-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip-extractor.js","sourceRoot":"","sources":["../../src/utils/zip-extractor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AACxC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAC1C,MAAM,kCAAkC,GAAG,UAAU,CAAC;AACtD,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,qBAAqB,GAAG,UAAU,CAAC;AASzC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAG5C,YAAY,IAA4B,EAAE,OAAe;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;CACD;AAaD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;AACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;IACzD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE;QAAE,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,WAAW,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC3B,IAAI,QAAQ,GAAG,UAAU,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,QAAQ,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACtC,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa;IACvE,IACC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC5B,MAAM,GAAG,CAAC;QACV,KAAK,GAAG,CAAC;QACT,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,EAC7B,CAAC;QACF,cAAc,CAAC,oDAAoD,CAAC,CAAC;IACtE,CAAC;AACF,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAe;IACjD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,8BAA8B,GAAG,qBAAqB,CAAC,CAAC;IAC3G,KAAK,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,8BAA8B,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC;QACtG,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,kCAAkC;YAAE,SAAS;QAClF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,GAAG,8BAA8B,GAAG,YAAY,KAAK,OAAO,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC;IAC9F,CAAC;IACD,OAAO,cAAc,CAAC,iDAAiD,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,SAAS;QAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC9B,IACC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC/G,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,mDAAmD,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACpC,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;IAC3D,IACC,UAAU,KAAK,CAAC;QAChB,iBAAiB,KAAK,CAAC;QACvB,aAAa,KAAK,UAAU;QAC5B,UAAU,KAAK,qBAAqB;QACpC,YAAY,KAAK,qBAAqB;QACtC,aAAa,KAAK,qBAAqB,EACtC,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,UAAU,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,0BAA0B,WAAW,WAAW,CAAC,CAAC;IAClG,CAAC;IACD,iBAAiB,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IACxD,IAAI,aAAa,GAAG,YAAY,GAAG,SAAS;QAAE,cAAc,CAAC,4CAA4C,CAAC,CAAC;IAE3G,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,GAAG,aAAa,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,sBAAsB,EAAE,CAAC;YAC7D,cAAc,CAAC,2CAA2C,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACnD,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,CAAC;QAC5D,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;QACvD,IACC,YAAY,KAAK,CAAC;YAClB,eAAe,KAAK,qBAAqB;YACzC,iBAAiB,KAAK,qBAAqB;YAC3C,iBAAiB,KAAK,qBAAqB,EAC1C,CAAC;YACF,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,gCAAgC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wCAAwC,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wCAAwC,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;YACnD,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,aAAa,KAAK,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;QACnC,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,QAAQ,KAAK,MAAM,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACnG,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAClE,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,iBAAiB,GAAG,eAAe,EAAE,CAAC;YACzC,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,gDAAgD,CAAC,CAAC;QAClG,CAAC;QACD,UAAU,IAAI,iBAAiB,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;YACvE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,gDAAgD,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtF,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;QACrF,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,SAAS;YACT,KAAK;YACL,MAAM;YACN,QAAQ;YACR,eAAe;YACf,iBAAiB;YACjB,iBAAiB;SACjB,CAAC,CAAC;QACH,MAAM,IAAI,EAAE,GAAG,aAAa,CAAC;IAC9B,CAAC;IACD,IAAI,MAAM,GAAG,aAAa,GAAG,YAAY;QAAE,cAAc,CAAC,kDAAkD,CAAC,CAAC;IAC9G,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,UAAkB,EAAE,aAAqB;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC7C,UAAU,CAAC,UAAU,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACzF,IAAI,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAC,CAAC;gBACpF,OAAO;YACR,CAAC;YACD,cAAc,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,QAA2B;IACvE,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC1D,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,8CAA8C,CAAC,CAAC;YAC9F,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,kBAAkB;gBAAE,MAAM,KAAK,CAAC;YACrD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvC,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,QAA2B;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,+CAA+C,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,WAAmB,EAAE,KAAe;IAChF,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO;IACR,CAAC;IACD,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,uDAAuD,CAAC,CAAC;IACvG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAC;QACrD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACrE,CAAC;IAED,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,oBAAoB,EAAE,CAAC;QAC5E,cAAc,CAAC,qCAAqC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,KAAK,CAAC,KAAK,IAAI,WAAW,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAChE,cAAc,CAAC,yCAAyC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,iBAAiB,GAAG,EAAE,GAAG,cAAc,GAAG,eAAe,CAAC;IACnF,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC;IACpF,MAAM,MAAM,GACX,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnF,cAAc,CAAC,wCAAwC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB,EAAE,WAAmB;IAC5E,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,cAAc,CAAC,mCAAmC,CAAC,CAAC;QACzG,IAAI,QAAQ,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,EAAE,CAAC;YAChF,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,6CAA6C,CAAC,CAAC;QAC7F,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,MAAM,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAC;QACrD,MAAM,IAAI,kBAAkB,CAC3B,cAAc,EACd,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClF,CAAC;IACH,CAAC;AACF,CAAC","sourcesContent":["import { lstat, mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport { inflateRaw } from \"node:zlib\";\n\nconst LOCAL_FILE_SIGNATURE = 0x04034b50;\nconst CENTRAL_FILE_SIGNATURE = 0x02014b50;\nconst END_OF_CENTRAL_DIRECTORY_SIGNATURE = 0x06054b50;\nconst END_OF_CENTRAL_DIRECTORY_BYTES = 22;\nconst MAX_ZIP_COMMENT_BYTES = 65_535;\nconst MAX_ARCHIVE_BYTES = 512 * 1024 * 1024;\nconst MAX_ENTRY_BYTES = 512 * 1024 * 1024;\nconst MAX_TOTAL_BYTES = 1024 * 1024 * 1024;\nconst MAX_ENTRIES = 4_096;\nconst MAX_PATH_BYTES = 4_096;\nconst ZIP64_16_BIT_SENTINEL = 0xffff;\nconst ZIP64_32_BIT_SENTINEL = 0xffffffff;\n\nexport type ZipExtractionErrorCode =\n\t| \"invalid_archive\"\n\t| \"limit_exceeded\"\n\t| \"unsafe_entry\"\n\t| \"unsupported_archive\"\n\t| \"write_failed\";\n\nexport class ZipExtractionError extends Error {\n\treadonly code: ZipExtractionErrorCode;\n\n\tconstructor(code: ZipExtractionErrorCode, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ZipExtractionError\";\n\t\tthis.code = code;\n\t}\n}\n\ninterface ZipEntry {\n\tsegments: string[];\n\tdirectory: boolean;\n\tflags: number;\n\tmethod: number;\n\tchecksum: number;\n\tcompressedBytes: number;\n\tuncompressedBytes: number;\n\tlocalHeaderOffset: number;\n}\n\nconst CRC32_TABLE = new Uint32Array(256);\nfor (let index = 0; index < CRC32_TABLE.length; index++) {\n\tlet value = index;\n\tfor (let bit = 0; bit < 8; bit++) value = (value >>> 1) ^ (value & 1 ? 0xedb88320 : 0);\n\tCRC32_TABLE[index] = value >>> 0;\n}\n\nfunction crc32(value: Buffer): number {\n\tlet checksum = 0xffffffff;\n\tfor (const byte of value) checksum = (checksum >>> 8) ^ (CRC32_TABLE[(checksum ^ byte) & 0xff] ?? 0);\n\treturn (checksum ^ 0xffffffff) >>> 0;\n}\n\nfunction invalidArchive(message: string): never {\n\tthrow new ZipExtractionError(\"invalid_archive\", message);\n}\n\nfunction assertBufferRange(buffer: Buffer, offset: number, bytes: number): void {\n\tif (\n\t\t!Number.isSafeInteger(offset) ||\n\t\t!Number.isSafeInteger(bytes) ||\n\t\toffset < 0 ||\n\t\tbytes < 0 ||\n\t\toffset + bytes > buffer.length\n\t) {\n\t\tinvalidArchive(\"ZIP structure extends beyond the archive boundary.\");\n\t}\n}\n\nfunction findEndOfCentralDirectory(archive: Buffer): number {\n\tconst minimumOffset = Math.max(0, archive.length - END_OF_CENTRAL_DIRECTORY_BYTES - MAX_ZIP_COMMENT_BYTES);\n\tfor (let offset = archive.length - END_OF_CENTRAL_DIRECTORY_BYTES; offset >= minimumOffset; offset--) {\n\t\tif (archive.readUInt32LE(offset) !== END_OF_CENTRAL_DIRECTORY_SIGNATURE) continue;\n\t\tconst commentBytes = archive.readUInt16LE(offset + 20);\n\t\tif (offset + END_OF_CENTRAL_DIRECTORY_BYTES + commentBytes === archive.length) return offset;\n\t}\n\treturn invalidArchive(\"ZIP end-of-central-directory record is missing.\");\n}\n\nfunction normalizeEntryPath(rawName: string): { segments: string[]; directory: boolean } {\n\tif (!rawName || rawName.includes(\"\\0\") || rawName.includes(\"\\ufffd\")) {\n\t\tthrow new ZipExtractionError(\"unsafe_entry\", \"ZIP contains an invalid entry path.\");\n\t}\n\tconst portableName = rawName.replaceAll(\"\\\\\", \"/\");\n\tif (portableName.startsWith(\"/\") || isAbsolute(portableName) || /^[A-Za-z]:/u.test(portableName)) {\n\t\tthrow new ZipExtractionError(\"unsafe_entry\", \"ZIP contains an absolute entry path.\");\n\t}\n\tconst directory = portableName.endsWith(\"/\");\n\tconst segments = portableName.split(\"/\");\n\tif (directory) segments.pop();\n\tif (\n\t\tsegments.length === 0 ||\n\t\tsegments.some((segment) => segment.length === 0 || segment === \".\" || segment === \"..\" || segment.includes(\":\"))\n\t) {\n\t\tthrow new ZipExtractionError(\"unsafe_entry\", \"ZIP contains a traversal or ambiguous entry path.\");\n\t}\n\treturn { segments, directory };\n}\n\nfunction parseEntries(archive: Buffer): ZipEntry[] {\n\tconst endOffset = findEndOfCentralDirectory(archive);\n\tconst diskNumber = archive.readUInt16LE(endOffset + 4);\n\tconst centralDiskNumber = archive.readUInt16LE(endOffset + 6);\n\tconst entriesOnDisk = archive.readUInt16LE(endOffset + 8);\n\tconst entryCount = archive.readUInt16LE(endOffset + 10);\n\tconst centralBytes = archive.readUInt32LE(endOffset + 12);\n\tconst centralOffset = archive.readUInt32LE(endOffset + 16);\n\tif (\n\t\tdiskNumber !== 0 ||\n\t\tcentralDiskNumber !== 0 ||\n\t\tentriesOnDisk !== entryCount ||\n\t\tentryCount === ZIP64_16_BIT_SENTINEL ||\n\t\tcentralBytes === ZIP64_32_BIT_SENTINEL ||\n\t\tcentralOffset === ZIP64_32_BIT_SENTINEL\n\t) {\n\t\tthrow new ZipExtractionError(\"unsupported_archive\", \"Multi-disk and ZIP64 archives are unsupported.\");\n\t}\n\tif (entryCount > MAX_ENTRIES) {\n\t\tthrow new ZipExtractionError(\"limit_exceeded\", `ZIP contains more than ${MAX_ENTRIES} entries.`);\n\t}\n\tassertBufferRange(archive, centralOffset, centralBytes);\n\tif (centralOffset + centralBytes > endOffset) invalidArchive(\"ZIP central directory overlaps its footer.\");\n\n\tconst entries: ZipEntry[] = [];\n\tconst seenPaths = new Set<string>();\n\tlet totalBytes = 0;\n\tlet cursor = centralOffset;\n\tfor (let index = 0; index < entryCount; index++) {\n\t\tassertBufferRange(archive, cursor, 46);\n\t\tif (archive.readUInt32LE(cursor) !== CENTRAL_FILE_SIGNATURE) {\n\t\t\tinvalidArchive(\"ZIP central directory entry is malformed.\");\n\t\t}\n\t\tconst versionMadeBy = archive.readUInt16LE(cursor + 4);\n\t\tconst flags = archive.readUInt16LE(cursor + 8);\n\t\tconst method = archive.readUInt16LE(cursor + 10);\n\t\tconst checksum = archive.readUInt32LE(cursor + 16);\n\t\tconst compressedBytes = archive.readUInt32LE(cursor + 20);\n\t\tconst uncompressedBytes = archive.readUInt32LE(cursor + 24);\n\t\tconst nameBytes = archive.readUInt16LE(cursor + 28);\n\t\tconst extraBytes = archive.readUInt16LE(cursor + 30);\n\t\tconst commentBytes = archive.readUInt16LE(cursor + 32);\n\t\tconst startingDisk = archive.readUInt16LE(cursor + 34);\n\t\tconst externalAttributes = archive.readUInt32LE(cursor + 38);\n\t\tconst localHeaderOffset = archive.readUInt32LE(cursor + 42);\n\t\tconst variableBytes = nameBytes + extraBytes + commentBytes;\n\t\tassertBufferRange(archive, cursor + 46, variableBytes);\n\t\tif (\n\t\t\tstartingDisk !== 0 ||\n\t\t\tcompressedBytes === ZIP64_32_BIT_SENTINEL ||\n\t\t\tuncompressedBytes === ZIP64_32_BIT_SENTINEL ||\n\t\t\tlocalHeaderOffset === ZIP64_32_BIT_SENTINEL\n\t\t) {\n\t\t\tthrow new ZipExtractionError(\"unsupported_archive\", \"ZIP64 entries are unsupported.\");\n\t\t}\n\t\tif ((flags & 0x0001) !== 0) {\n\t\t\tthrow new ZipExtractionError(\"unsupported_archive\", \"Encrypted ZIP entries are unsupported.\");\n\t\t}\n\t\tif (method !== 0 && method !== 8) {\n\t\t\tthrow new ZipExtractionError(\"unsupported_archive\", \"ZIP compression method is unsupported.\");\n\t\t}\n\t\tif (nameBytes === 0 || nameBytes > MAX_PATH_BYTES) {\n\t\t\tthrow new ZipExtractionError(\"limit_exceeded\", \"ZIP entry path exceeds its bound.\");\n\t\t}\n\t\tconst rawName = archive.subarray(cursor + 46, cursor + 46 + nameBytes).toString(\"utf8\");\n\t\tconst normalized = normalizeEntryPath(rawName);\n\t\tconst hostSystem = versionMadeBy >>> 8;\n\t\tconst unixMode = hostSystem === 3 ? (externalAttributes >>> 16) & 0xffff : 0;\n\t\tconst unixType = unixMode & 0xf000;\n\t\tconst directory = normalized.directory || unixType === 0x4000 || (externalAttributes & 0x10) !== 0;\n\t\tif (unixType !== 0 && unixType !== 0x4000 && unixType !== 0x8000) {\n\t\t\tthrow new ZipExtractionError(\"unsafe_entry\", \"ZIP contains a non-file entry.\");\n\t\t}\n\t\tif (uncompressedBytes > MAX_ENTRY_BYTES) {\n\t\t\tthrow new ZipExtractionError(\"limit_exceeded\", \"ZIP entry exceeds its uncompressed-size bound.\");\n\t\t}\n\t\ttotalBytes += uncompressedBytes;\n\t\tif (!Number.isSafeInteger(totalBytes) || totalBytes > MAX_TOTAL_BYTES) {\n\t\t\tthrow new ZipExtractionError(\"limit_exceeded\", \"ZIP exceeds its total uncompressed-size bound.\");\n\t\t}\n\t\tconst identity = normalized.segments.join(\"/\");\n\t\tconst collisionKey = process.platform === \"win32\" ? identity.toLowerCase() : identity;\n\t\tif (seenPaths.has(collisionKey)) {\n\t\t\tthrow new ZipExtractionError(\"unsafe_entry\", \"ZIP contains duplicate entry paths.\");\n\t\t}\n\t\tseenPaths.add(collisionKey);\n\t\tentries.push({\n\t\t\tsegments: normalized.segments,\n\t\t\tdirectory,\n\t\t\tflags,\n\t\t\tmethod,\n\t\t\tchecksum,\n\t\t\tcompressedBytes,\n\t\t\tuncompressedBytes,\n\t\t\tlocalHeaderOffset,\n\t\t});\n\t\tcursor += 46 + variableBytes;\n\t}\n\tif (cursor > centralOffset + centralBytes) invalidArchive(\"ZIP central directory exceeds its declared size.\");\n\treturn entries;\n}\n\nasync function inflateEntry(compressed: Buffer, expectedBytes: number): Promise<Buffer> {\n\treturn new Promise((resolvePromise, reject) => {\n\t\tinflateRaw(compressed, { maxOutputLength: Math.max(1, expectedBytes) }, (error, output) => {\n\t\t\tif (error) {\n\t\t\t\treject(new ZipExtractionError(\"invalid_archive\", \"ZIP deflate stream is invalid.\"));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tresolvePromise(output);\n\t\t});\n\t});\n}\n\nasync function ensureDirectory(root: string, segments: readonly string[]): Promise<void> {\n\tlet current = root;\n\tfor (const segment of segments) {\n\t\tcurrent = join(current, segment);\n\t\ttry {\n\t\t\tconst metadata = await lstat(current);\n\t\t\tif (metadata.isSymbolicLink() || !metadata.isDirectory()) {\n\t\t\t\tthrow new ZipExtractionError(\"unsafe_entry\", \"ZIP extraction path crosses a non-directory.\");\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tif (error instanceof ZipExtractionError) throw error;\n\t\t\tif ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n\t\t\tawait mkdir(current, { mode: 0o700 });\n\t\t}\n\t}\n}\n\nfunction resolveEntryTarget(destination: string, segments: readonly string[]): string {\n\tconst target = resolve(destination, ...segments);\n\tconst fromDestination = relative(destination, target);\n\tif (fromDestination === \"..\" || fromDestination.startsWith(`..${sep}`) || isAbsolute(fromDestination)) {\n\t\tthrow new ZipExtractionError(\"unsafe_entry\", \"ZIP entry escapes the extraction destination.\");\n\t}\n\treturn target;\n}\n\nasync function extractEntry(archive: Buffer, destination: string, entry: ZipEntry): Promise<void> {\n\tif (entry.directory) {\n\t\tawait ensureDirectory(destination, entry.segments);\n\t\treturn;\n\t}\n\tawait ensureDirectory(destination, entry.segments.slice(0, -1));\n\tconst target = resolveEntryTarget(destination, entry.segments);\n\ttry {\n\t\tawait lstat(target);\n\t\tthrow new ZipExtractionError(\"unsafe_entry\", \"ZIP extraction refuses to overwrite an existing path.\");\n\t} catch (error) {\n\t\tif (error instanceof ZipExtractionError) throw error;\n\t\tif ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n\t}\n\n\tassertBufferRange(archive, entry.localHeaderOffset, 30);\n\tif (archive.readUInt32LE(entry.localHeaderOffset) !== LOCAL_FILE_SIGNATURE) {\n\t\tinvalidArchive(\"ZIP local file header is malformed.\");\n\t}\n\tconst localFlags = archive.readUInt16LE(entry.localHeaderOffset + 6);\n\tconst localMethod = archive.readUInt16LE(entry.localHeaderOffset + 8);\n\tconst localNameBytes = archive.readUInt16LE(entry.localHeaderOffset + 26);\n\tconst localExtraBytes = archive.readUInt16LE(entry.localHeaderOffset + 28);\n\tif (localFlags !== entry.flags || localMethod !== entry.method) {\n\t\tinvalidArchive(\"ZIP local and central headers disagree.\");\n\t}\n\tconst dataOffset = entry.localHeaderOffset + 30 + localNameBytes + localExtraBytes;\n\tassertBufferRange(archive, dataOffset, entry.compressedBytes);\n\tconst compressed = archive.subarray(dataOffset, dataOffset + entry.compressedBytes);\n\tconst output =\n\t\tentry.method === 0 ? Buffer.from(compressed) : await inflateEntry(compressed, entry.uncompressedBytes);\n\tif (output.length !== entry.uncompressedBytes || crc32(output) !== entry.checksum) {\n\t\tinvalidArchive(\"ZIP entry size or checksum is invalid.\");\n\t}\n\tawait writeFile(target, output, { flag: \"wx\", mode: 0o600 });\n}\n\n/** Extract a bounded ordinary ZIP with no dependency on platform archive utilities. */\nexport async function extractZipFile(archivePath: string, destination: string): Promise<void> {\n\ttry {\n\t\tconst metadata = await lstat(archivePath);\n\t\tif (metadata.isSymbolicLink() || !metadata.isFile()) invalidArchive(\"ZIP source is not a regular file.\");\n\t\tif (metadata.size > MAX_ARCHIVE_BYTES) {\n\t\t\tthrow new ZipExtractionError(\"limit_exceeded\", \"ZIP archive exceeds its 512 MiB input bound.\");\n\t\t}\n\t\tconst archive = await readFile(archivePath);\n\t\tconst entries = parseEntries(archive);\n\t\tawait mkdir(destination, { recursive: true, mode: 0o700 });\n\t\tconst destinationMetadata = await lstat(destination);\n\t\tif (destinationMetadata.isSymbolicLink() || !destinationMetadata.isDirectory()) {\n\t\t\tthrow new ZipExtractionError(\"unsafe_entry\", \"ZIP destination is not a regular directory.\");\n\t\t}\n\t\tfor (const entry of entries) await extractEntry(archive, destination, entry);\n\t} catch (error) {\n\t\tif (error instanceof ZipExtractionError) throw error;\n\t\tthrow new ZipExtractionError(\n\t\t\t\"write_failed\",\n\t\t\t`ZIP extraction failed: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n}\n"]}

package/docs/harness-architecture.md

@@ -49,7 +49,9 @@ second line of defense, not the main implementation.
   context paths before content loading. Live extension loading repeats the profile check before
   import.
 - Isolated research and worker lanes create fresh tools only for their expanded lane grant. They do
-  not copy the foreground registry, extensions, skills, shell, or mutable memory surface.
+  not copy the foreground registry, extensions, or skills. Native agents may materialize fresh
+  memory, write/edit, platform-shell, and recursive-delegation adapters when their immutable grant
+  and live service switches admit them.
 - Worker orchestration state is lazily materialized only when the active surface grants `delegate`
   (or a managed-lane terminal report requires the shared notifier); worker-role sessions allocate no
   worker scheduler, lifecycle store, or notification coordinator.
@@ -65,20 +67,23 @@ footprint must omit that extension at the resource layer, not merely block one o
 
 ## Child work contracts
 
-Owner-authored orchestration profiles are the routing authority. A profile fixes role, ordered model
-policy, exact thinking level, tool names, resource profiles, semantic capability ceiling, budgets,
-concurrency, lease duration, and verification policy. An architect profile additionally declares the
-only worker profile IDs it may dispatch. The model-facing dispatch request contains a task, profile
-ID, instructions, and resource pointers; it has no model, thinking, tool, budget, or concurrency
-override fields.
+The model-facing `delegate` request can choose role label, authenticated model, exact supported
+reasoning level, classified tools, semantic capabilities, read/write paths, and budget. An optional
+owner-authored orchestration profile supplies reusable defaults; it is not a dispatch allowlist.
+Profile-free roots start from the foreground model and maximum host-permitted classified core
+surface. Descendants inherit immutable parent execution authority by default. The host validates and
+materializes every choice, intersects it with parent authority and live global switches, and persists
+the exact resulting contract before execution. Built-in roles are routing/audit labels unless an
+embedding supplies an explicit role ceiling.
 
 The durable control plane is an append-only session event store projected into objectives, DAG
 tasks, attempts, leases, checkpoints, logical agent bindings, typed results, and a notification
 outbox. Every result carries its attempt lease and fencing token. A stale worker therefore cannot
-win a race after retry or resume. In-process isolated completions have no resumable transcript: an
-interrupted lease is fenced and its persisted dispatch is re-queued as a new attempt. A process-backed
-Pi worker instead retains its logical agent ID and resume context and is woken with `/resume` against
-the same session, worktree, orchestration profile, and checkpoint pointers when present.
+win a race after retry or resume. In-process agents retain durable logical identity, lineage, exact
+transcript, mailbox, immutable execution contract, and checkpoint usage across interruption and
+resume. A process-backed Pi worker similarly retains its logical agent ID and resume context and is
+woken with `/resume` against the same session, worktree, orchestration preset, and checkpoint
+pointers when present.
 
 Policy is a mandatory pre-lease gate. An attempt cannot lease without a compiled execution grant.
 When compilation crosses owner authority or budget, the gate persists a typed approval request and
@@ -91,17 +96,24 @@ Acceptance is a runtime invariant, not a worker claim. Task criterion IDs must r
 objective, a completed criterion-bound result must carry trusted evidence for every linked criterion,
 and an objective cannot close until all required criteria have trusted evidence in its task results.
 
-In-process workers are bounded child loops with fresh context, a synthetic cache-affinity key, a
-profile-pinned model and exact reasoning level, a construction-filtered tool surface,
-turn/time/token/tool/cost bounds, and parent validation of the result. Process-capable profiles may
-expose `run_process`, which uses an exact executable allowlist, direct argv, a scoped environment,
-bounded output, and process-tree termination; unrestricted shell is not inherited. Worker output is
-untrusted; the parent retrieves it through `delegate_status` after a terminal lane event. A profile
-that requires independent verification names a separate owner-pinned verifier profile. The runtime
-automatically dispatches that verifier as a durable task, withholds the implementation's terminal
-handoff, and reconciles the typed verdict before the implementation can become accepted. Restart
-recovery closes both persistence gaps: an implementation awaiting a not-yet-created verifier is
-re-dispatched, while a persisted verifier result awaiting reconciliation is applied exactly once.
+In-process agents have fresh context, a synthetic cache-affinity key, a selected model and exact
+reasoning level, and a construction-filtered tool surface. They inherit `delegate`, may inspect exact
+paginated transcripts for any logical peer in the session tree, exchange threaded messages, and may
+materialize a persistent per-agent platform shell. There is no framework depth or fan-out cap; one
+global scheduler owns concurrency and durable queuing, one root coordinator owns cumulative
+token/cost/tool/active-time/attempt budgets, and exact ancestor task cycles are rejected. `run_process`
+keeps its separate exact executable allowlist, direct argv, scoped environment, bounded output, and
+process-tree termination contract. The platform shell is real host process authority, not container
+isolation or a path-scoped substitute for `write`/`edit`.
+
+Worker output remains untrusted evidence. The parent receives a bounded terminal event and retrieves
+lane results explicitly; raw peer transcripts require an explicit `transcript` action and are paged
+only for context size. A preset that requires independent verification names a separate owner-pinned
+verifier profile. The runtime automatically dispatches that verifier as a durable task, withholds the
+implementation's terminal handoff, and reconciles the typed verdict before the implementation can
+become accepted. Restart recovery closes both persistence gaps: an implementation awaiting a
+not-yet-created verifier is re-dispatched, while a persisted verifier result awaiting reconciliation
+is applied exactly once.
 
 Out-of-process managed workers use the same lifecycle shape:
 

package/docs/index.md

@@ -55,7 +55,7 @@ For the full first-run flow, see [Quickstart](quickstart.md).
 
 - [Extensions](extensions.md) - TypeScript modules for tools, commands, events, and custom UI.
 - [tmux agent manager](tmux-agent-manager.md) - bundled event-driven external-provider teams with parent wake handoffs.
-- [Task worker profiles](worker-profiles.md) - immutable session-scoped worker profiles with bounded model and tool authority.
+- [Task worker presets](worker-profiles.md) - optional immutable session presets for recursive agents with model-authored authority.
 - [Skills](skills.md) - Agent Skills for reusable on-demand capabilities.
 - [Resource profiles & library](resources.md) - curate extensions, skills, and agents per project or situation; share a catalog; install and back up.
 - [Self-adaptation](self-adaptation.md) - draft live skills/extensions and run evidence-backed Pi harness improvement loops.

package/docs/resources.md

@@ -49,7 +49,7 @@ A profile may also bind a **model**, **thinking level**, **soul**, and **modelRo
 
 Pi activates the complete situation as one runtime generation: model/router, thinking, soul, extensions, skills, prompts, agents, themes, and tools are reloaded together. A failed reload restores the prior valid generation instead of persisting a partial selection.
 
-Built-in research and worker lanes also ship a profile as one unit: its model, thinking, soul, and tool filter govern the isolated child loop. Lane tool globs expand to exact names over Pi's classified lane surface. Research can receive only `read`, `grep`, `find`, and `ls`; workers can additionally receive `write` and `edit` only with the explicit write setting and path roots. Recursive delegation, shell, memory/lifecycle tools, and extension tools without capability metadata stay fail-closed. A concrete profile grant that cannot bind to this classified surface produces a deduplicated warning instead of silently gaining authority.
+Built-in research lanes still use a fixed read-only profile with `read`, `grep`, `find`, and `ls`. Native worker agents use a different contract: orchestration profiles are optional presets, a profile-free root receives the maximum host-permitted classified core surface, and descendants inherit immutable authority while retaining recursive `delegate`, peer-transcript, messaging, memory, write/edit, and platform-shell capabilities when their parent and live service switches permit them. Lane tool globs expand to exact classified names. Opaque extension tools without orchestration metadata are not guessed into a child surface, and an explicit tool request that cannot be materialized is rejected visibly.
 
 Profiles are stored in settings under `resourceProfiles`, and the active one(s) in `activeResourceProfile`: