@fern-api/fern-api-dev 3.52.0-33-gce9a88f6335 → 3.52.0-40-g0bd25791343

package/cli.cjs

@@ -1554104,14 +1554104,14 @@ var WriteStreamSync = class extends WriteStream {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/create.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/create.js
 var import_node_path10 = __toESM(require("path"), 1);
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/list.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/list.js
 var import_node_fs3 = __toESM(require("fs"), 1);
 var import_path34 = require("path");
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/options.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/options.js
 var argmap = /* @__PURE__ */ new Map([
   ["C", "cwd"],
   ["f", "file"],
@@ -1554160,7 +1554160,7 @@ var dealias = (opt = {}) => {
   return result;
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/make-command.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/make-command.js
 var makeCommand = (syncFile, asyncFile, syncNoFile, asyncNoFile, validate2) => {
   return Object.assign((opt_ = [], entries10, cb2) => {
     if (Array.isArray(opt_)) {
@@ -1554209,7 +1554209,7 @@ var makeCommand = (syncFile, asyncFile, syncNoFile, asyncNoFile, validate2) => {
   });
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/parse.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/parse.js
 var import_events3 = require("events");
 
 // ../../../node_modules/.pnpm/minizlib@3.1.0/node_modules/minizlib/dist/esm/index.js
@@ -1554600,10 +1554600,10 @@ var ZstdDecompress = class extends Zstd {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/header.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/header.js
 var import_node_path7 = require("path");
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/large-numbers.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/large-numbers.js
 var encode6 = (num, buf) => {
   if (!Number.isSafeInteger(num)) {
     throw Error("cannot encode number outside of javascript safe integer range");
@@ -1554684,7 +1554684,7 @@ var pos = (buf) => {
 var onesComp = (byte) => (255 ^ byte) & 255;
 var twosComp = (byte) => (255 ^ byte) + 1 & 255;
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/types.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/types.js
 var isCode = (c16) => name.has(c16);
 var name = /* @__PURE__ */ new Map([
   ["0", "File"],
@@ -1554727,7 +1554727,7 @@ var name = /* @__PURE__ */ new Map([
 ]);
 var code = new Map(Array.from(name).map((kv2) => [kv2[1], kv2[0]]));
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/header.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/header.js
 var Header2 = class {
   cksumValid = false;
   needPax = false;
@@ -1554930,7 +1554930,7 @@ var encDate = (buf, off, size2, date12) => date12 === void 0 ? false : encNumber
 var NULLS = new Array(156).join("\0");
 var encString = (buf, off, size2, str3) => str3 === void 0 ? false : (buf.write(str3 + NULLS, off, size2, "utf8"), str3.length !== Buffer.byteLength(str3) || str3.length > size2);
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/pax.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/pax.js
 var import_node_path8 = require("path");
 var Pax = class _Pax {
   atime;
@@ -1555047,11 +1555047,11 @@ var parseKVLine = (set13, line) => {
   return set13;
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/normalize-windows-path.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/normalize-windows-path.js
 var platform = process.env.TESTING_TAR_FAKE_PLATFORM || process.platform;
 var normalizeWindowsPath = platform !== "win32" ? (p9) => p9 : (p9) => p9 && p9.replace(/\\/g, "/");
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/read-entry.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/read-entry.js
 var ReadEntry = class extends Minipass {
   extended;
   globalExtended;
@@ -1555168,7 +1555168,7 @@ var ReadEntry = class extends Minipass {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/warn-method.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/warn-method.js
 var warnMethod = (self2, code6, message, data2 = {}) => {
   if (self2.file) {
     data2.file = self2.file;
@@ -1555191,7 +1555191,7 @@ var warnMethod = (self2, code6, message, data2 = {}) => {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/parse.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/parse.js
 var maxMetaEntrySize = 1024 * 1024;
 var gzipHeader = Buffer.from([31, 139]);
 var zstdHeader = Buffer.from([40, 181, 47, 253]);
@@ -1555679,7 +1555679,7 @@ var Parser2 = class extends import_events3.EventEmitter {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/strip-trailing-slashes.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/strip-trailing-slashes.js
 var stripTrailingSlashes = (str3) => {
   let i11 = str3.length - 1;
   let slashesStart = -1;
@@ -1555690,7 +1555690,7 @@ var stripTrailingSlashes = (str3) => {
   return slashesStart === -1 ? str3 : str3.slice(0, slashesStart);
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/list.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/list.js
 var onReadEntryFunction = (opt) => {
   const onReadEntry = opt.onReadEntry;
   opt.onReadEntry = onReadEntry ? (e6) => {
@@ -1555781,14 +1555781,14 @@ var list8 = makeCommand(listFileSync, listFile, (opt) => new Parser2(opt), (opt)
     onReadEntryFunction(opt);
 });
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/pack.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/pack.js
 var import_fs13 = __toESM(require("fs"), 1);
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/write-entry.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/write-entry.js
 var import_fs12 = __toESM(require("fs"), 1);
 var import_path35 = __toESM(require("path"), 1);
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/mode-fix.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/mode-fix.js
 var modeFix = (mode, isDir, portable) => {
   mode &= 4095;
   if (portable) {
@@ -1555808,7 +1555808,7 @@ var modeFix = (mode, isDir, portable) => {
   return mode;
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/strip-absolute-path.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/strip-absolute-path.js
 var import_node_path9 = require("path");
 var { isAbsolute: isAbsolute3, parse: parse9 } = import_node_path9.win32;
 var stripAbsolutePath = (path86) => {
@@ -1555823,7 +1555823,7 @@ var stripAbsolutePath = (path86) => {
   return [r23, path86];
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/winchars.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/winchars.js
 var raw = ["|", "<", ">", "?", ":"];
 var win = raw.map((char) => String.fromCharCode(61440 + char.charCodeAt(0)));
 var toWin = new Map(raw.map((char, i11) => [char, win[i11]]));
@@ -1555831,7 +1555831,7 @@ var toRaw = new Map(win.map((char, i11) => [char, raw[i11]]));
 var encode7 = (s9) => raw.reduce((s10, c16) => s10.split(c16).join(toWin.get(c16)), s9);
 var decode5 = (s9) => win.reduce((s10, c16) => s10.split(c16).join(toRaw.get(c16)), s9);
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/write-entry.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/write-entry.js
 var prefixPath = (path86, prefix2) => {
   if (!prefix2) {
     return normalizeWindowsPath(path86);
@@ -1556778,7 +1556778,7 @@ var Node4 = class {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/pack.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/pack.js
 var import_path36 = __toESM(require("path"), 1);
 var PackJob = class {
   path;
@@ -1556816,6 +1556816,7 @@ var WRITEENTRYCLASS = Symbol("writeEntryClass");
 var WRITE = Symbol("write");
 var ONDRAIN2 = Symbol("ondrain");
 var Pack = class extends Minipass {
+  sync = false;
   opt;
   cwd;
   maxReadSize;
@@ -1556988,6 +1556989,8 @@ var Pack = class extends Minipass {
     job.stat = stat3;
     if (!this.filter(job.path, stat3)) {
       job.ignore = true;
+    } else if (stat3.isFile() && stat3.nlink > 1 && job === this[CURRENT] && !this.linkCache.get(`${stat3.dev}:${stat3.ino}`) && !this.sync) {
+      this[PROCESSJOB](job);
     }
     this[PROCESS3]();
   }
@@ -1557196,7 +1557199,7 @@ var PackSync = class extends Pack {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/create.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/create.js
 var createFileSync = (opt, files) => {
   const p9 = new PackSync(opt);
   const stream5 = new WriteStreamSync(opt.file, {
@@ -1557267,16 +1557270,16 @@ var create2 = makeCommand(createFileSync, createFile, createSync, createAsync, (
   }
 });
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/extract.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/extract.js
 var import_node_fs7 = __toESM(require("fs"), 1);
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/unpack.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/unpack.js
 var import_node_assert7 = __toESM(require("assert"), 1);
 var import_node_crypto5 = require("crypto");
 var import_node_fs6 = __toESM(require("fs"), 1);
 var import_node_path14 = __toESM(require("path"), 1);
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/get-write-flag.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/get-write-flag.js
 var import_fs14 = __toESM(require("fs"), 1);
 var platform2 = process.env.__FAKE_PLATFORM__ || process.platform;
 var isWindows = platform2 === "win32";
@@ -1557365,12 +1557368,12 @@ var chownrSync = (p9, uid, gid) => {
   return lchownSync(p9, uid, gid);
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/mkdir.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/mkdir.js
 var import_node_fs5 = __toESM(require("fs"), 1);
 var import_promises34 = __toESM(require("fs/promises"), 1);
 var import_node_path12 = __toESM(require("path"), 1);
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/cwd-error.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/cwd-error.js
 var CwdError = class extends Error {
   path;
   code;
@@ -1557385,7 +1557388,7 @@ var CwdError = class extends Error {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/symlink-error.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/symlink-error.js
 var SymlinkError = class extends Error {
   path;
   symlink;
@@ -1557401,7 +1557404,7 @@ var SymlinkError = class extends Error {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/mkdir.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/mkdir.js
 var checkCwd = (dir, cb2) => {
   import_node_fs5.default.stat(dir, (er18, st13) => {
     if (er18 || !st13.isDirectory()) {
@@ -1557546,10 +1557549,10 @@ var mkdirSync2 = (dir, opt) => {
   return done(created);
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/path-reservations.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/path-reservations.js
 var import_node_path13 = require("path");
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/normalize-unicode.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/normalize-unicode.js
 var normalizeCache2 = /* @__PURE__ */ Object.create(null);
 var MAX = 1e4;
 var cache3 = /* @__PURE__ */ new Set();
@@ -1557573,7 +1557576,7 @@ var normalizeUnicode = (s9) => {
   return ret;
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/path-reservations.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/path-reservations.js
 var platform3 = process.env.TESTING_TAR_FAKE_PLATFORM || process.platform;
 var isWindows2 = platform3 === "win32";
 var getDirs = (path86) => {
@@ -1557705,7 +1557708,7 @@ var PathReservations = class {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/unpack.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/unpack.js
 var ONENTRY = Symbol("onEntry");
 var CHECKFS = Symbol("checkFs");
 var CHECKFS2 = Symbol("checkFs2");
@@ -1557849,24 +1557852,37 @@ var Unpack = class extends Parser2 {
   // return false if we need to skip this file
   // return true if the field was successfully sanitized
   [STRIPABSOLUTEPATH](entry, field5) {
-    const path86 = entry[field5];
-    if (!path86 || this.preservePaths)
+    const p9 = entry[field5];
+    const { type: type8 } = entry;
+    if (!p9 || this.preservePaths)
       return true;
-    const parts = path86.split("/");
+    const parts = p9.split("/");
     if (parts.includes("..") || /* c8 ignore next */
     isWindows3 && /^[a-z]:\.\.$/i.test(parts[0] ?? "")) {
-      this.warn("TAR_ENTRY_ERROR", `${field5} contains '..'`, {
-        entry,
-        [field5]: path86
-      });
-      return false;
+      if (field5 === "path" || type8 === "Link") {
+        this.warn("TAR_ENTRY_ERROR", `${field5} contains '..'`, {
+          entry,
+          [field5]: p9
+        });
+        return false;
+      } else {
+        const entryDir = import_node_path14.default.posix.dirname(entry.path);
+        const resolved = import_node_path14.default.posix.normalize(import_node_path14.default.posix.join(entryDir, p9));
+        if (resolved.startsWith("../") || resolved === "..") {
+          this.warn("TAR_ENTRY_ERROR", `${field5} escapes extraction directory`, {
+            entry,
+            [field5]: p9
+          });
+          return false;
+        }
+      }
     }
-    const [root6, stripped] = stripAbsolutePath(path86);
+    const [root6, stripped] = stripAbsolutePath(p9);
     if (root6) {
       entry[field5] = String(stripped);
       this.warn("TAR_ENTRY_INFO", `stripping ${root6} from absolute ${field5}`, {
         entry,
-        [field5]: path86
+        [field5]: p9
       });
     }
     return true;
@@ -1558383,7 +1558399,7 @@ var UnpackSync = class extends Unpack {
   }
 };
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/extract.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/extract.js
 var extractFileSync = (opt) => {
   const u7 = new UnpackSync(opt);
   const file4 = opt.file;
@@ -1558422,7 +1558438,7 @@ var extract = makeCommand(extractFileSync, extractFile, (opt) => new UnpackSync(
     filesFilter(opt, files);
 });
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/replace.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/replace.js
 var import_node_fs8 = __toESM(require("fs"), 1);
 var import_node_path15 = __toESM(require("path"), 1);
 var replaceSync = (opt, files) => {
@@ -1558623,7 +1558639,7 @@ var replace = makeCommand(
   }
 );
 
-// ../../../node_modules/.pnpm/tar@7.5.4/node_modules/tar/dist/esm/update.js
+// ../../../node_modules/.pnpm/tar@7.5.7/node_modules/tar/dist/esm/update.js
 var update = makeCommand(replace.syncFile, replace.asyncFile, replace.syncNoFile, replace.asyncNoFile, (opt, entries10 = []) => {
   replace.validate?.(opt, entries10);
   mtimeFilter(opt);
@@ -1650923,7 +1650939,7 @@ var AccessTokenPosthogManager = class {
         properties: {
           ...event,
           ...event.properties,
-          version: "3.52.0-33-gce9a88f6335",
+          version: "3.52.0-40-g0bd25791343",
           usingAccessToken: true
         }
       });
@@ -1650973,7 +1650989,7 @@ var UserPosthogManager = class {
       distinctId: this.userId ?? await this.getPersistedDistinctId(),
       event: "CLI",
       properties: {
-        version: "3.52.0-33-gce9a88f6335",
+        version: "3.52.0-40-g0bd25791343",
         ...event,
         ...event.properties,
         usingAccessToken: false,
@@ -1684115,7 +1684131,7 @@ var CliContext = class {
     if (false) {
       this.logger.error("CLI_VERSION is not defined");
     }
-    return "3.52.0-33-gce9a88f6335";
+    return "3.52.0-40-g0bd25791343";
   }
   getCliName() {
     if (false) {
@@ -1687228,7 +1687244,7 @@ var import_path54 = __toESM(require("path"), 1);
 var LOCAL_STORAGE_FOLDER4 = ".fern-dev";
 var LOGS_FOLDER_NAME = "logs";
 function getCliSource() {
-  const version7 = "3.52.0-33-gce9a88f6335";
+  const version7 = "3.52.0-40-g0bd25791343";
   return `cli@${version7}`;
 }
 var DebugLogger = class {

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.52.0-33-gce9a88f6335",
+  "version": "3.52.0-40-g0bd25791343",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fern-api/fern.git",