@cj-tech-master/excelts 9.2.0 → 9.2.1

package/dist/cjs/modules/xml/dom.js

@@ -17,8 +17,9 @@ exports.textContent = textContent;
 exports.attr = attr;
 exports.walk = walk;
 exports.toPlainObject = toPlainObject;
+const errors_1 = require("../../utils/errors.js");
+const errors_2 = require("./errors.js");
 const sax_1 = require("./sax.js");
-const errors_1 = require("./errors.js");
 const to_object_shared_1 = require("./to-object-shared.js");
 // =============================================================================
 // Security
@@ -107,7 +108,7 @@ function parseXml(xml, options) {
     let error;
     parser.on("error", err => {
         if (!error) {
-            error = err instanceof errors_1.XmlParseError ? err : new errors_1.XmlParseError(err.message);
+            error = err instanceof errors_2.XmlParseError ? err : new errors_2.XmlParseError(err.message);
         }
     });
     parser.on("opentag", tag => {
@@ -179,15 +180,15 @@ function parseXml(xml, options) {
     parser.write(xml);
     parser.close();
     if (error) {
-        throw error;
+        throw (0, errors_1.toError)(error);
     }
     // Extract the real root from the synthetic container
     const roots = syntheticRoot.children.filter((n) => n.type === "element");
     if (roots.length === 0) {
-        throw new errors_1.XmlParseError("document has no root element");
+        throw new errors_2.XmlParseError("document has no root element");
     }
     if (!isFragment && roots.length > 1) {
-        throw new errors_1.XmlParseError("document has multiple root elements");
+        throw new errors_2.XmlParseError("document has multiple root elements");
     }
     // Collect top-level comments and processing instructions (prologue)
     const prologue = syntheticRoot.children.filter((n) => n.type === "comment" || n.type === "processing-instruction");

package/dist/cjs/modules/xml/encode.js

@@ -208,7 +208,7 @@ function xmlEncodeAttr(value) {
  * This is a fast security check to prevent markup injection via names,
  * not a full XML NameChar validation (which would require Unicode tables).
  */
-const INVALID_NAME_CHARS = /[\s<>"'\/=&]/;
+const INVALID_NAME_CHARS = /[\s<>"'/=&]/;
 /**
  * Validate an XML element or attribute name against injection attacks.
  *

package/dist/cjs/modules/xml/query.js

@@ -51,7 +51,7 @@ function parsePath(path) {
     }
     return steps;
 }
-const STEP_RE = /^([^[]+)(?:\[@([\w:.\-]+)='([^']*)'\]|\[(\d+)\])?$/;
+const STEP_RE = /^([^[]+)(?:\[@([\w:.-]+)='([^']*)'\]|\[(\d+)\])?$/;
 function parseStep(raw, recursive) {
     const m = STEP_RE.exec(raw);
     if (!m) {

package/dist/cjs/modules/xml/sax.js

@@ -18,7 +18,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SaxParser = void 0;
 exports.parseSax = parseSax;
 exports.saxStream = saxStream;
-const errors_1 = require("./errors.js");
+const errors_1 = require("../../utils/errors.js");
+const errors_2 = require("./errors.js");
 // =============================================================================
 // Character Codes
 // =============================================================================
@@ -293,7 +294,7 @@ class SaxParser {
     // Error Handling
     // ===========================================================================
     makeError(message) {
-        return new errors_1.XmlParseError(message, {
+        return new errors_2.XmlParseError(message, {
             line: this.trackPosition ? this.line : undefined,
             column: this.trackPosition ? this.column : undefined,
             fileName: this.fileName
@@ -1898,7 +1899,7 @@ async function* parseSax(iterable, options) {
         const chunkStr = typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true });
         parser.write(chunkStr);
         if (error) {
-            throw error;
+            throw (0, errors_1.toError)(error);
         }
         if (events.length > 0) {
             yield events;
@@ -1914,7 +1915,7 @@ async function* parseSax(iterable, options) {
     }
     parser.close();
     if (error) {
-        throw error;
+        throw (0, errors_1.toError)(error);
     }
     if (events.length > 0) {
         yield events;
@@ -1956,7 +1957,7 @@ async function saxStream(parser, iterable) {
         const chunkStr = typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true });
         parser.write(chunkStr);
         if (error) {
-            throw error;
+            throw (0, errors_1.toError)(error);
         }
     }
     // Flush any trailing bytes from the streaming decoder
@@ -1966,6 +1967,6 @@ async function saxStream(parser, iterable) {
     }
     parser.close();
     if (error) {
-        throw error;
+        throw (0, errors_1.toError)(error);
     }
 }

package/dist/cjs/modules/xml/to-object.js

@@ -11,8 +11,9 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseXmlToObject = parseXmlToObject;
+const errors_1 = require("../../utils/errors.js");
+const errors_2 = require("./errors.js");
 const sax_1 = require("./sax.js");
-const errors_1 = require("./errors.js");
 const to_object_shared_1 = require("./to-object-shared.js");
 // =============================================================================
 // parseXmlToObject
@@ -56,7 +57,7 @@ function parseXmlToObject(xml, options) {
     let error;
     parser.on("error", err => {
         if (!error) {
-            error = err instanceof errors_1.XmlParseError ? err : new errors_1.XmlParseError(err.message);
+            error = err instanceof errors_2.XmlParseError ? err : new errors_2.XmlParseError(err.message);
         }
     });
     parser.on("opentag", tag => {
@@ -108,7 +109,7 @@ function parseXmlToObject(xml, options) {
     parser.write(xml);
     parser.close();
     if (error) {
-        throw error;
+        throw (0, errors_1.toError)(error);
     }
     // The synthetic root's obj should contain exactly one key (the document root).
     return syntheticObj;

package/dist/cjs/utils/binary.js

@@ -366,18 +366,22 @@ function uint8ArrayIndexOf(haystack, needle, start = 0, end) {
     }
     const firstByte = needle[0];
     const last = haystackLen - needleLen;
-    outer: for (let i = start; i <= last; i++) {
+    for (let i = start; i <= last; i++) {
         // Quick check first byte
         if (haystack[i] !== firstByte) {
             continue;
         }
         // Check rest of pattern
+        let matched = true;
         for (let j = 1; j < needleLen; j++) {
             if (haystack[i + j] !== needle[j]) {
-                continue outer;
+                matched = false;
+                break;
             }
         }
-        return i;
+        if (matched) {
+            return i;
+        }
     }
     return -1;
 }

package/dist/cjs/utils/crypto.js

@@ -40,11 +40,11 @@ const node_crypto_1 = __importDefault(require("node:crypto"));
 // SHA-256
 // =============================================================================
 /**
- * SHA-256 hash function.
+ * SHA-256 hash function (FIPS 180-4).
  * @returns 32-byte digest
  */
 function sha256(input) {
-    return new Uint8Array(node_crypto_1.default.createHash("sha256").update(input).digest());
+    return new Uint8Array(node_crypto_1.default.hash("sha256", input, "buffer"));
 }
 // =============================================================================
 // Generic hash
@@ -61,10 +61,18 @@ function hmacSha256(key, message) {
 // =============================================================================
 /**
  * MD5 hash function (RFC 1321).
+ *
+ * **Security note:** MD5 is cryptographically broken for password hashing.
+ * This function exists solely for PDF specification compliance — ISO 32000
+ * mandates MD5 in its key derivation algorithms for RC4 and AES-128
+ * encryption (Algorithm 2, Algorithm 3 in PDF 1.7 Reference). It cannot
+ * be replaced with a stronger hash without breaking compatibility with
+ * every existing encrypted PDF file.
+ *
  * @returns 16-byte digest
  */
 function md5(input) {
-    return new Uint8Array(node_crypto_1.default.createHash("md5").update(input).digest());
+    return new Uint8Array(node_crypto_1.default.hash("md5", input, "buffer"));
 }
 // =============================================================================
 // AES-CBC
@@ -181,7 +189,7 @@ function randomBytes(length) {
  */
 function hash(algorithm, data) {
     const algo = algorithm.toLowerCase().replace(/-/g, "");
-    return new Uint8Array(node_crypto_1.default.createHash(algo).update(data).digest());
+    return new Uint8Array(node_crypto_1.default.hash(algo, data, "buffer"));
 }
 /**
  * Async version of `hash()` — same behavior, but returns a Promise for API

package/dist/cjs/utils/datetime.js

@@ -292,7 +292,7 @@ class DateFormatter {
                     return "";
                 }
                 const t = d.getTime();
-                if (t !== t) {
+                if (Number.isNaN(t)) {
                     return "";
                 } // NaN check
                 const y = d.getUTCFullYear();
@@ -309,7 +309,7 @@ class DateFormatter {
                     return "";
                 }
                 const t = d.getTime();
-                if (t !== t) {
+                if (Number.isNaN(t)) {
                     return "";
                 } // NaN check
                 const y = d.getFullYear();
@@ -333,7 +333,7 @@ class DateFormatter {
                         return "";
                     }
                     const t = d.getTime();
-                    if (t !== t) {
+                    if (Number.isNaN(t)) {
                         return "";
                     }
                     return `${d.getUTCFullYear()}-${PAD2[d.getUTCMonth() + 1]}-${PAD2[d.getUTCDate()]}`;
@@ -343,7 +343,7 @@ class DateFormatter {
                         return "";
                     }
                     const t = d.getTime();
-                    if (t !== t) {
+                    if (Number.isNaN(t)) {
                         return "";
                     }
                     return `${d.getFullYear()}-${PAD2[d.getMonth() + 1]}-${PAD2[d.getDate()]}`;
@@ -356,7 +356,7 @@ class DateFormatter {
                         return "";
                     }
                     const t = d.getTime();
-                    if (t !== t) {
+                    if (Number.isNaN(t)) {
                         return "";
                     }
                     return `${d.getUTCFullYear()}-${PAD2[d.getUTCMonth() + 1]}-${PAD2[d.getUTCDate()]} ${PAD2[d.getUTCHours()]}:${PAD2[d.getUTCMinutes()]}:${PAD2[d.getUTCSeconds()]}`;
@@ -366,7 +366,7 @@ class DateFormatter {
                         return "";
                     }
                     const t = d.getTime();
-                    if (t !== t) {
+                    if (Number.isNaN(t)) {
                         return "";
                     }
                     return `${d.getFullYear()}-${PAD2[d.getMonth() + 1]}-${PAD2[d.getDate()]} ${PAD2[d.getHours()]}:${PAD2[d.getMinutes()]}:${PAD2[d.getSeconds()]}`;
@@ -380,7 +380,7 @@ class DateFormatter {
                         return "";
                     }
                     const t = d.getTime();
-                    if (t !== t) {
+                    if (Number.isNaN(t)) {
                         return "";
                     }
                     return `${PAD2[d.getUTCMonth() + 1]}${sep}${PAD2[d.getUTCDate()]}${sep}${d.getUTCFullYear()}`;
@@ -390,7 +390,7 @@ class DateFormatter {
                         return "";
                     }
                     const t = d.getTime();
-                    if (t !== t) {
+                    if (Number.isNaN(t)) {
                         return "";
                     }
                     return `${PAD2[d.getMonth() + 1]}${sep}${PAD2[d.getDate()]}${sep}${d.getFullYear()}`;
@@ -404,7 +404,7 @@ class DateFormatter {
                         return "";
                     }
                     const t = d.getTime();
-                    if (t !== t) {
+                    if (Number.isNaN(t)) {
                         return "";
                     }
                     return `${PAD2[d.getUTCDate()]}${sep}${PAD2[d.getUTCMonth() + 1]}${sep}${d.getUTCFullYear()}`;
@@ -414,7 +414,7 @@ class DateFormatter {
                         return "";
                     }
                     const t = d.getTime();
-                    if (t !== t) {
+                    if (Number.isNaN(t)) {
                         return "";
                     }
                     return `${PAD2[d.getDate()]}${sep}${PAD2[d.getMonth() + 1]}${sep}${d.getFullYear()}`;
@@ -464,7 +464,7 @@ class DateFormatter {
                 return "";
             }
             const t = d.getTime();
-            if (t !== t) {
+            if (Number.isNaN(t)) {
                 return "";
             }
             let out = tpl;

package/dist/esm/modules/archive/compression/compress.browser.js

@@ -11,7 +11,6 @@
  * Worker Pool: Optional off-main-thread compression/decompression
  * to prevent UI blocking for large files.
  */
-import { concatUint8Arrays } from "../../../utils/binary.js";
 import { compressWithStream, decompressWithStream, transformWithStream, hasCompressionStream, hasDeflateRawCompressionStream, hasDeflateRawDecompressionStream, 
 // GZIP
 GZIP_ID1, GZIP_ID2, GZIP_CM_DEFLATE, GZIP_FLAG_FEXTRA, GZIP_FLAG_FNAME, GZIP_FLAG_FCOMMENT, GZIP_FLAG_FHCRC, GZIP_MIN_SIZE, hasGzipCompressionStream, hasGzipDecompressionStream, 
@@ -19,12 +18,13 @@ GZIP_ID1, GZIP_ID2, GZIP_CM_DEFLATE, GZIP_FLAG_FEXTRA, GZIP_FLAG_FNAME, GZIP_FLA
 ZLIB_CM_DEFLATE, ZLIB_CINFO_MAX, ZLIB_MIN_SIZE, isZlibData, detectCompressionFormat, adler32, 
 // Zlib helpers (shared)
 hasDeflateCompressionStream, hasDeflateDecompressionStream, getZlibHeader, buildZlibTrailer, parseZlibHeader, readZlibTrailer, verifyAdler32 } from "./compress.base.js";
+import { crc32 } from "./crc32.browser.js";
 import { inflateRaw, deflateRawCompressed, deflateRawStore } from "./deflate-fallback.js";
+import { deflateWithPool, inflateWithPool, hasWorkerSupport } from "./worker-pool/index.browser.js";
 import { DEFAULT_COMPRESS_LEVEL } from "../shared/defaults.js";
 import { createAbortError, isAbortError, throwIfAborted } from "../shared/errors.js";
-import { deflateWithPool, inflateWithPool, hasWorkerSupport } from "./worker-pool/index.browser.js";
-import { crc32 } from "./crc32.browser.js";
 import { readUint32LE } from "../zip-spec/binary.js";
+import { concatUint8Arrays } from "../../../utils/binary.js";
 // Re-export shared types and GZIP utilities
 export {};
 export { hasCompressionStream, hasWorkerSupport, 

package/dist/esm/modules/archive/compression/crc32.js

@@ -8,8 +8,8 @@
  * x^32 + x^26 + x^23 + x^22 + x^16 + x^12 + x^11 + x^10 + x^8 + x^7 + x^5 + x^4 + x^2 + x + 1
  * Represented as 0xEDB88320 in reversed (LSB-first) form
  */
-import { isNode } from "../../../utils/env.js";
 import { crc32JS, crc32UpdateJS, crc32Finalize } from "./crc32.base.js";
+import { isNode } from "../../../utils/env.js";
 // Lazy-loaded zlib module for Node.js
 let _zlib = null;
 let _zlibLoading = null;

package/dist/esm/modules/archive/compression/streaming-compress.browser.js

@@ -9,13 +9,13 @@
  *
  * API compatible with Node.js version - supports .on("data"), .on("end"), .write(callback), .end()
  */
-import { EventEmitter } from "../../../utils/event-emitter.js";
-import { deflateRawCompressed, inflateRaw, SyncDeflater as PureJsSyncDeflater } from "./deflate-fallback.js";
 import { hasDeflateRawWebStreams, hasDeflateRawCompressionStream, hasGzipCompressionStream, hasGzipDecompressionStream, hasDeflateCompressionStream, hasDeflateDecompressionStream } from "./compress.base.js";
-import { concatUint8Arrays } from "../../../utils/binary.js";
-import { DEFAULT_COMPRESS_LEVEL } from "../shared/defaults.js";
-import { hasWorkerSupport, getDefaultWorkerPool } from "./worker-pool/index.browser.js";
 import { gzipSync, gunzipSync, zlibSync, unzlibSync } from "./compress.browser.js";
+import { deflateRawCompressed, inflateRaw, SyncDeflater as PureJsSyncDeflater } from "./deflate-fallback.js";
+import { hasWorkerSupport, getDefaultWorkerPool } from "./worker-pool/index.browser.js";
+import { DEFAULT_COMPRESS_LEVEL } from "../shared/defaults.js";
+import { concatUint8Arrays } from "../../../utils/binary.js";
+import { EventEmitter } from "../../../utils/event-emitter.js";
 import { toError } from "./streaming-compress.base.js";
 import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
 export { hasWorkerSupport };
@@ -139,7 +139,7 @@ function createNativeWebStreamCodec(format, isCompress) {
             await writer.close();
             await readLoop;
             if (readLoopError) {
-                throw readLoopError;
+                throw toError(readLoopError);
             }
         },
         abort: err => {

package/dist/esm/modules/archive/compression/streaming-compress.js

@@ -5,8 +5,8 @@
  * Each write() immediately produces compressed output without waiting for end().
  */
 import { createDeflateRaw, createInflateRaw, createGzip, createGunzip, createDeflate, createInflate, deflateRawSync, constants } from "zlib";
-import { Transform } from "../../stream/index.js";
 import { DEFAULT_COMPRESS_LEVEL } from "../shared/defaults.js";
+import { Transform } from "../../stream/index.js";
 /**
  * Generic wrapper around zlib streams that flushes after every write.
  * This ensures true streaming behavior - data is emitted immediately, not buffered.

package/dist/esm/modules/archive/crypto/aes.js

@@ -13,9 +13,9 @@
  *
  * Works in both Node.js and browsers using the Web Crypto API.
  */
+import { toArrayBuffer } from "../shared/text.js";
 import { stringToUint8Array as encodeUtf8 } from "../../../utils/binary.js";
 import { randomBytes } from "../../../utils/crypto.js";
-import { toArrayBuffer } from "../shared/text.js";
 /**
  * AES vendor ID for WinZip format.
  */

package/dist/esm/modules/archive/fs/archive-file.js

@@ -29,21 +29,21 @@
  *
  * @module
  */
+import { createReadStream, createWriteStream } from "node:fs";
 import * as path from "node:path";
-import { TarArchive, TarReader } from "../tar/tar-archive.js";
-import { isDirectory as isTarDirectory } from "../tar/tar-entry-info.js";
-import { textEncoder as utf8Encoder } from "../../../utils/binary.js";
 import { gzipSync, gunzipSync } from "../compression/compress.js";
 import { createGzipStream } from "../compression/streaming-compress.js";
-import { ZipParser } from "../unzip/zip-parser.js";
-import { createZip, createZipSync } from "../zip/zip-bytes.js";
-import { ZipArchive } from "../zip/zip-archive.js";
-import { collectUint8ArrayStream, toAsyncIterable } from "../io/archive-source.js";
 import { pipeIterableToSink } from "../io/archive-sink.js";
+import { collectUint8ArrayStream, toAsyncIterable } from "../io/archive-source.js";
+import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
+import { TarArchive, TarReader } from "../tar/tar-archive.js";
+import { isDirectory as isTarDirectory } from "../tar/tar-entry-info.js";
+import { ZipParser } from "../unzip/zip-parser.js";
 import { joinZipPath, normalizeZipPath } from "../zip-spec/zip-path.js";
+import { ZipArchive } from "../zip/zip-archive.js";
+import { createZip, createZipSync } from "../zip/zip-bytes.js";
 import { ZipEditView } from "../zip/zip-edit-view.js";
-import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
-import { createReadStream, createWriteStream } from "node:fs";
+import { textEncoder as utf8Encoder } from "../../../utils/binary.js";
 import { traverseDirectory, traverseDirectorySync, glob as globFiles, globSync as globFilesSync, ensureDir, ensureDirSync, fileExists, fileExistsSync, readFileBytes, readFileBytesSync, writeFileBytes, writeFileBytesSync, setFileTime, setFileTimeSync, safeStats, safeStatsSync, createSymlink, createSymlinkSync, chmod, chmodSync, supportsUnixPermissions } from "../../../utils/fs.js";
 // =============================================================================
 // Transform Helpers (internal)

package/dist/esm/modules/archive/io/archive-sink.js

@@ -1,6 +1,6 @@
-import { concatUint8Arrays } from "../../../utils/binary.js";
 import { onceEvent } from "../../stream/internal/event-utils.js";
 import { isWritableStream } from "../../stream/internal/type-guards.js";
+import { concatUint8Arrays } from "../../../utils/binary.js";
 export async function pipeIterableToSink(iterable, sink) {
     if (isWritableStream(sink)) {
         const writer = sink.getWriter();

package/dist/esm/modules/archive/io/archive-source.js

@@ -1,7 +1,7 @@
-import { stringToUint8Array as encodeUtf8, concatUint8Arrays } from "../../../utils/binary.js";
-import { isAsyncIterable, isReadableStream } from "../../stream/internal/type-guards.js";
-import { createAbortError } from "../shared/errors.js";
 import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
+import { createAbortError } from "../shared/errors.js";
+import { isAsyncIterable, isReadableStream } from "../../stream/internal/type-guards.js";
+import { stringToUint8Array as encodeUtf8, concatUint8Arrays } from "../../../utils/binary.js";
 /**
  * Convert an ArchiveSource to a web ReadableStream of Uint8Array chunks.
  *

package/dist/esm/modules/archive/shared/bytes.js

@@ -78,13 +78,17 @@ export function indexOfUint8ArrayPattern(buffer, pattern, startIndex = 0) {
         }
         return -1;
     }
-    outer: for (let i = start; i <= bufLen - patLen; i++) {
+    for (let i = start; i <= bufLen - patLen; i++) {
+        let matched = true;
         for (let j = 0; j < patLen; j++) {
             if (buffer[i + j] !== pattern[j]) {
-                continue outer;
+                matched = false;
+                break;
             }
         }
-        return i;
+        if (matched) {
+            return i;
+        }
     }
     return -1;
 }

package/dist/esm/modules/archive/tar/tar-archive.js

@@ -4,8 +4,8 @@
  * Provides TarArchive and TarReader classes with the same interface
  * as ZipArchive and ZipReader, allowing seamless format switching.
  */
-import { toAsyncIterable, toUint8Array, isInMemoryArchiveSource } from "../io/archive-source.js";
 import { collect, pipeIterableToSink } from "../io/archive-sink.js";
+import { toAsyncIterable, toUint8Array, isInMemoryArchiveSource } from "../io/archive-source.js";
 import { createLinkedAbortController } from "../shared/errors.js";
 import { concatUint8Arrays, textEncoder, getTextDecoder } from "../../../utils/binary.js";
 import { TAR_TYPE, DEFAULT_TAR_MODE, DEFAULT_TAR_DIR_MODE } from "./tar-constants.js";

package/dist/esm/modules/archive/tar/tar-gzip.js

@@ -4,11 +4,11 @@
  * Provides utilities for creating and extracting gzip-compressed TAR archives.
  * Uses the unified compress module for compression/decompression.
  */
-import { DEFAULT_COMPRESS_LEVEL } from "../shared/defaults.js";
 import { gunzip } from "../compression/compress.js";
 import { createGzipStream } from "../compression/streaming-compress.js";
-import { toUint8Array, isInMemoryArchiveSource, toAsyncIterable } from "../io/archive-source.js";
 import { collect } from "../io/archive-sink.js";
+import { toUint8Array, isInMemoryArchiveSource, toAsyncIterable } from "../io/archive-source.js";
+import { DEFAULT_COMPRESS_LEVEL } from "../shared/defaults.js";
 import { TarArchive, addEntries } from "./tar-archive.js";
 import { parseTar, untar } from "./tar-parser.js";
 /**

package/dist/esm/modules/archive/tar/tar-header.js

@@ -3,9 +3,9 @@
  *
  * Functions for encoding and decoding TAR headers.
  */
-import { TAR_BLOCK_SIZE, TAR_HEADER, TAR_TYPE, USTAR_MAGIC, USTAR_VERSION, DEFAULT_TAR_MODE, DEFAULT_TAR_DIR_MODE, DEFAULT_TAR_UID, DEFAULT_TAR_GID, DEFAULT_TAR_UNAME, DEFAULT_TAR_GNAME } from "./tar-constants.js";
-import { textEncoder, textDecoder } from "../../../utils/binary.js";
 import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
+import { textEncoder, textDecoder } from "../../../utils/binary.js";
+import { TAR_BLOCK_SIZE, TAR_HEADER, TAR_TYPE, USTAR_MAGIC, USTAR_VERSION, DEFAULT_TAR_MODE, DEFAULT_TAR_DIR_MODE, DEFAULT_TAR_UID, DEFAULT_TAR_GID, DEFAULT_TAR_UNAME, DEFAULT_TAR_GNAME } from "./tar-constants.js";
 /**
  * Encode a string to a fixed-size field (null-terminated if space allows)
  */

package/dist/esm/modules/archive/tar/tar-parser.js

@@ -4,10 +4,10 @@
  * Parses TAR archives from various input sources.
  * Supports POSIX ustar, GNU tar (long filenames), and PAX extensions.
  */
+import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
+import { textDecoder } from "../../../utils/binary.js";
 import { TAR_BLOCK_SIZE, TAR_TYPE } from "./tar-constants.js";
 import { decodeHeader, isZeroBlock, calculatePadding } from "./tar-header.js";
-import { textDecoder } from "../../../utils/binary.js";
-import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
 // Helper to strip trailing null characters without using control char regex
 const NULL_CHAR = String.fromCharCode(0);
 function stripTrailingNulls(str) {

package/dist/esm/modules/archive/unzip/parser-core.js

@@ -1,6 +1,6 @@
-import { parseDosDateTimeUTC, resolveZipLastModifiedDateFromUnixSeconds } from "../zip-spec/timestamps.js";
-import { parseFormattedTyped as parseBuffer, readUint32LE, writeUint32LE } from "../zip-spec/binary.js";
 import { indexOfUint8ArrayPattern } from "../shared/bytes.js";
+import { parseFormattedTyped as parseBuffer, readUint32LE, writeUint32LE } from "../zip-spec/binary.js";
+import { parseDosDateTimeUTC, resolveZipLastModifiedDateFromUnixSeconds } from "../zip-spec/timestamps.js";
 import { parseZipExtraFields } from "../zip-spec/zip-extra-fields.js";
 import { CENTRAL_DIR_HEADER_SIG, DATA_DESCRIPTOR_SIG, END_OF_CENTRAL_DIR_SIG, FLAG_UTF8, LOCAL_FILE_HEADER_SIG, ZIP64_END_OF_CENTRAL_DIR_LOCATOR_SIG, ZIP64_END_OF_CENTRAL_DIR_SIG } from "../zip-spec/zip-records.js";
 // Shared parseBuffer() formats

package/dist/esm/modules/archive/unzip/remote-zip-reader.js

@@ -13,16 +13,16 @@
  *
  * @module
  */
-import { BinaryReader } from "../zip-spec/binary.js";
 import { crc32 } from "../compression/crc32.js";
 import { zipCryptoVerifyPassword, aesVerifyPassword, AES_PASSWORD_VERIFY_LENGTH, AES_SALT_LENGTH, ZIP_CRYPTO_HEADER_SIZE } from "../crypto/index.js";
-import { processEntryData, processEntryDataStream, LOCAL_HEADER_FIXED_SIZE } from "./zip-extract-core.js";
-import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
 import { pipeIterableToSink } from "../io/archive-sink.js";
-import { EOCD_MAX_SEARCH_SIZE, ZIP64_EOCD_LOCATOR_SIZE, findEOCDSignature, parseEOCD, parseZIP64EOCDLocator, parseZIP64EOCD, applyZIP64ToEOCD, parseCentralDirectory } from "../zip-spec/zip-parser-core.js";
+import { HttpRangeReader } from "../io/random-access.js";
+import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
 import { resolveZipStringCodec } from "../shared/text.js";
+import { processEntryData, processEntryDataStream, LOCAL_HEADER_FIXED_SIZE } from "./zip-extract-core.js";
+import { BinaryReader } from "../zip-spec/binary.js";
+import { EOCD_MAX_SEARCH_SIZE, ZIP64_EOCD_LOCATOR_SIZE, findEOCDSignature, parseEOCD, parseZIP64EOCDLocator, parseZIP64EOCD, applyZIP64ToEOCD, parseCentralDirectory } from "../zip-spec/zip-parser-core.js";
 import { LOCAL_FILE_HEADER_SIG } from "../zip-spec/zip-records.js";
-import { HttpRangeReader } from "../io/random-access.js";
 /**
  * Error thrown when CRC32 validation fails
  */

package/dist/esm/modules/archive/unzip/stream.base.js

@@ -1,9 +1,10 @@
-import { Duplex, PassThrough, Transform, pipeline, finished } from "../../stream/index.js";
-import { concatUint8Arrays, textEncoder as utf8Encoder } from "../../../utils/binary.js";
 import { ByteQueue } from "../shared/byte-queue.js";
 import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
 import { decodeZipPath, resolveZipStringCodec } from "../shared/text.js";
 import { PatternScanner } from "./pattern-scanner.js";
+import { Duplex, PassThrough, Transform, pipeline, finished } from "../../stream/index.js";
+import { concatUint8Arrays, textEncoder as utf8Encoder } from "../../../utils/binary.js";
+import { toError } from "../../../utils/errors.js";
 /**
  * Returns true when `err` is the Node.js ERR_STREAM_PREMATURE_CLOSE error.
  *
@@ -742,7 +743,7 @@ async function pumpKnownCompressedSizeToEntry(io, inflater, entry, compressedSiz
         inflater.pipe(entry);
         while (remaining > 0) {
             if (err) {
-                throw err;
+                throw toError(err);
             }
             // If downstream decides to autodrain mid-entry (common when a consumer bails out
             // early due to a limit), stop inflating and just skip the remaining compressed bytes.

package/dist/esm/modules/archive/unzip/stream.browser.js

@@ -5,16 +5,16 @@
  * Falls back to pure JavaScript implementation for older browsers.
  * Uses the browser Duplex stream implementation for compatibility.
  */
-import { Duplex, PassThrough } from "../../stream/index.js";
-import { concatUint8Arrays } from "../../../utils/binary.js";
-import { toError } from "../shared/errors.js";
-import { runParseLoop, DEFAULT_UNZIP_STREAM_HIGH_WATER_MARK, streamUntilValidatedDataDescriptor } from "./stream.base.js";
-import { DATA_DESCRIPTOR_SIGNATURE_BYTES } from "./parser-core.js";
-import { PatternScanner } from "./pattern-scanner.js";
+import { hasDeflateRawDecompressionStream } from "../compression/compress.base.js";
 import { inflateRaw as fallbackInflateRaw } from "../compression/deflate-fallback.js";
 import { ByteQueue } from "../shared/byte-queue.js";
 import { EMPTY_UINT8ARRAY } from "../shared/bytes.js";
-import { hasDeflateRawDecompressionStream } from "../compression/compress.base.js";
+import { toError } from "../shared/errors.js";
+import { DATA_DESCRIPTOR_SIGNATURE_BYTES } from "./parser-core.js";
+import { PatternScanner } from "./pattern-scanner.js";
+import { runParseLoop, DEFAULT_UNZIP_STREAM_HIGH_WATER_MARK, streamUntilValidatedDataDescriptor } from "./stream.base.js";
+import { Duplex, PassThrough } from "../../stream/index.js";
+import { concatUint8Arrays } from "../../../utils/binary.js";
 // =============================================================================
 // Browser InflateRaw using DecompressionStream
 // =============================================================================

package/dist/esm/modules/archive/unzip/stream.js

@@ -1,6 +1,6 @@
 import zlib from "zlib";
-import { PullStream, runParseLoop, streamUntilValidatedDataDescriptor } from "./stream.base.js";
 import { DATA_DESCRIPTOR_SIGNATURE_BYTES } from "./parser-core.js";
+import { PullStream, runParseLoop, streamUntilValidatedDataDescriptor } from "./stream.base.js";
 /**
  * Creates an InflateRaw stream using Node.js native zlib.
  */

package/dist/esm/modules/archive/unzip/zip-extract-core.js

@@ -11,13 +11,13 @@
  */
 import { decompress, decompressSync } from "../compression/compress.js";
 import { crc32, crc32Finalize, crc32Update } from "../compression/crc32.js";
+import { createInflateStream } from "../compression/streaming-compress.js";
 import { ZIP_CRYPTO_HEADER_SIZE, aesDecrypt, zipCryptoDecrypt, zipCryptoDecryptByte, zipCryptoInitKeys } from "../crypto/index.js";
+import { collect } from "../io/archive-sink.js";
+import { createAsyncQueue } from "../shared/async-queue.js";
+import { Crc32MismatchError, DecryptionError, EntrySizeMismatchError, PasswordRequiredError, UnsupportedCompressionError, throwIfAborted, toError } from "../shared/errors.js";
 import { BinaryReader } from "../zip-spec/binary.js";
 import { COMPRESSION_DEFLATE, COMPRESSION_STORE, LOCAL_FILE_HEADER_SIG } from "../zip-spec/zip-records.js";
-import { Crc32MismatchError, DecryptionError, EntrySizeMismatchError, PasswordRequiredError, UnsupportedCompressionError, throwIfAborted, toError } from "../shared/errors.js";
-import { createAsyncQueue } from "../shared/async-queue.js";
-import { createInflateStream } from "../compression/streaming-compress.js";
-import { collect } from "../io/archive-sink.js";
 /**
  * Local file header fixed size (30 bytes)
  */