@cloudbitmaps/roaring 0.18.1 → 0.18.3

package/dist/bin/export-segments.js

@@ -3,7 +3,7 @@
 // src/bin/export-segments.ts
 import { randomUUID } from "node:crypto";
 import { realpathSync } from "node:fs";
-import { mkdir, open, rename, rm, writeFile } from "node:fs/promises";
+import { lstat, mkdir, open, rename, rm, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import { pathToFileURL } from "node:url";
 import { encodeNameForPath, namespacePathPart } from "@cloudbitmaps/core/driver-kit";
@@ -3215,11 +3215,30 @@ function parseConfig(env) {
   const namespace = env.CR_EXPORT_NAMESPACE || void 0;
   return { root, out, format, namespace };
 }
+async function ensureOwnDirectory(out, dir) {
+  await mkdir(out, { recursive: true, mode: 448 });
+  try {
+    await mkdir(dir, { mode: 448 });
+    return;
+  } catch (err) {
+    if (err.code !== "EEXIST") throw err;
+  }
+  const found = await lstat(dir);
+  const refuse = (why) => {
+    throw new ValidationError3(`the export directory is not one this tool made: ${why}`);
+  };
+  if (found.isSymbolicLink()) refuse("a namespace directory is a symbolic link");
+  if (!found.isDirectory()) refuse("a namespace path is not a directory");
+  if (process.getuid !== void 0) {
+    if (found.uid !== process.getuid()) refuse("a namespace directory belongs to another user");
+    if ((found.mode & 63) !== 0) refuse("a namespace directory is open to group or others");
+  }
+}
 function fsSink(out) {
   return {
     async open(ref, ext) {
       const dir = join(out, namespacePathPart(ref.namespace));
-      await mkdir(dir, { recursive: true, mode: 448 });
+      await ensureOwnDirectory(out, dir);
       const finalPath = join(dir, `${encodeNameForPath(ref.segment)}${ext}`);
       const tmpPath = `${finalPath}.${randomUUID()}.part`;
       const handle = await open(tmpPath, "wx", 384);