@myrialabs/zipkit 0.0.6

package/dist/workers/index.js

@@ -0,0 +1,158 @@
+/**
+ * A persistent, warm worker pool for non-blocking compression on Node and Bun.
+ *
+ * Spinning up a worker per call (and re-instantiating the 1.4 MB Wasm engine
+ * each time) is the cold-start tax fflate's async API pays. ZipKit keeps a
+ * fixed pool of workers, each with the engine already loaded, and round-robins
+ * jobs across them. Where workers aren't available (e.g. the browser without
+ * bundler support), it transparently falls back to running on the calling
+ * thread, so the API never breaks.
+ *
+ * @example
+ * ```ts
+ * import { WorkerPool } from '@myrialabs/zipkit/workers';
+ * const pool = new WorkerPool();
+ * const out = await pool.compress(bytes, 'zstd', { level: 19 });
+ * await pool.destroy();
+ * ```
+ */
+import { AbortError } from '../types.js';
+/** Worker file lives next to this module; `.ts` in source, `.js` once built. */
+const WORKER_URL = new URL(import.meta.url.endsWith('.ts') ? './worker.ts' : './worker.js', import.meta.url);
+/** Default pool size: one worker per CPU, capped to keep memory sane. */
+function defaultSize() {
+    const cores = globalThis.navigator?.hardwareConcurrency ?? 4;
+    return Math.max(1, Math.min(cores, 8));
+}
+async function loadWorkerThreads() {
+    try {
+        return await import('node:worker_threads');
+    }
+    catch {
+        return undefined;
+    }
+}
+export class WorkerPool {
+    size;
+    workers = [];
+    pending = new Map();
+    next = 0;
+    seq = 0;
+    ready;
+    usable = true;
+    /**
+     * Workers are `unref`'d at rest so an idle pool never blocks process exit.
+     * While any job is in flight we `ref` them, so a script whose last action is
+     * `await pool.compress(...)` doesn't exit before the result arrives.
+     */
+    refWhileBusy() {
+        const busy = this.pending.size > 0;
+        for (const w of this.workers)
+            (busy ? w.ref : w.unref).call(w);
+    }
+    constructor(opts = {}) {
+        this.size = opts.size ?? defaultSize();
+    }
+    async ensure() {
+        if (this.ready)
+            return this.ready;
+        this.ready = (async () => {
+            const wt = await loadWorkerThreads();
+            if (!wt) {
+                // No worker_threads (e.g. a browser): fall back to inline execution.
+                this.usable = false;
+                return;
+            }
+            for (let i = 0; i < this.size; i++) {
+                const worker = new wt.Worker(WORKER_URL);
+                worker.on('message', (res) => this.settle(res));
+                worker.on('error', (err) => this.failAll(err));
+                worker.unref();
+                this.workers.push(worker);
+            }
+        })();
+        return this.ready;
+    }
+    settle(res) {
+        const p = this.pending.get(res.id);
+        if (!p)
+            return;
+        this.pending.delete(res.id);
+        this.refWhileBusy();
+        if (p.signal && p.onAbort)
+            p.signal.removeEventListener('abort', p.onAbort);
+        if (res.ok && res.result)
+            p.resolve(res.result);
+        else
+            p.reject(new Error(res.error ?? 'Worker operation failed'));
+    }
+    failAll(err) {
+        for (const [, p] of this.pending)
+            p.reject(err);
+        this.pending.clear();
+        this.refWhileBusy();
+    }
+    async run(kind, data, codec, level, mode, signal, method) {
+        if (signal?.aborted)
+            throw new AbortError();
+        await this.ensure();
+        // Fallback: run on this thread when no worker pool is available.
+        if (!this.usable) {
+            if (kind === 'zipCompress') {
+                const { getEngine } = await import('../engine.js');
+                const e = await getEngine();
+                return method === 'zstd' ? e.zstdCompress(data, level ?? 19) : e.deflateCompress(data, level ?? 6);
+            }
+            const { compress, decompressWith } = await import('../compress.js');
+            return kind === 'compress' ? compress(data, codec, { level, mode }) : decompressWith(data, codec);
+        }
+        const id = this.seq++;
+        const worker = this.workers[this.next++ % this.workers.length];
+        return new Promise((resolve, reject) => {
+            const pending = { resolve, reject, signal };
+            if (signal) {
+                pending.onAbort = () => {
+                    this.pending.delete(id);
+                    this.refWhileBusy();
+                    reject(new AbortError());
+                };
+                signal.addEventListener('abort', pending.onAbort, { once: true });
+            }
+            this.pending.set(id, pending);
+            this.refWhileBusy();
+            // Copy the input so transferring its buffer can't detach the caller's view.
+            const payload = data.slice();
+            const req = { id, kind, codec, level, mode, method, data: payload };
+            worker.postMessage(req, [payload.buffer]);
+        });
+    }
+    /** Compress `data` with `codec` on a worker (or inline as a fallback). */
+    compress(data, codec, opts) {
+        return this.run('compress', data, codec, opts?.level, opts?.mode, opts?.signal);
+    }
+    /** Decompress `data` with `codec` on a worker (or inline as a fallback). */
+    decompress(data, codec, opts) {
+        return this.run('decompress', data, codec, undefined, undefined, opts?.signal);
+    }
+    /**
+     * Compress a ZIP entry on a worker using the raw libdeflate / zstd engine —
+     * denser than the native path and byte-identical to the inline container
+     * code, so a parallel archive matches a single-threaded one exactly.
+     */
+    zipCompress(data, method, level) {
+        return this.run('zipCompress', data, method, level, undefined, undefined, method);
+    }
+    /** Terminate all workers and reject any in-flight jobs. */
+    async destroy() {
+        this.failAll(new Error('Worker pool destroyed'));
+        await Promise.all(this.workers.map((w) => w.terminate()));
+        this.workers = [];
+        this.ready = undefined;
+    }
+}
+let shared;
+/** A lazily-created, process-wide {@link WorkerPool}. */
+export function sharedPool() {
+    return (shared ??= new WorkerPool());
+}
+//# sourceMappingURL=index.js.map

package/dist/workers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,gFAAgF;AAChF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAS7G,yEAAyE;AACzE,SAAS,WAAW;IACnB,MAAM,KAAK,GACT,UAA+D,CAAC,SAAS,EAAE,mBAAmB,IAAI,CAAC,CAAC;IACtG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC/B,IAAI,CAAC;QACJ,OAAO,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAOD,MAAM,OAAO,UAAU;IACL,IAAI,CAAS;IACtB,OAAO,GAAa,EAAE,CAAC;IACvB,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IACrC,IAAI,GAAG,CAAC,CAAC;IACT,GAAG,GAAG,CAAC,CAAC;IACR,KAAK,CAA4B;IACjC,MAAM,GAAG,IAAI,CAAC;IAEtB;;;;OAIG;IACK,YAAY;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,YAAY,OAA0B,EAAE;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,MAAM;QACnB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;YACrC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACT,qEAAqE;gBACrE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBACpB,OAAO;YACR,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACzC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/C,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,GAAmB;QACjC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO;YAAE,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5E,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM;YAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;;YAC3C,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,yBAAyB,CAAC,CAAC,CAAC;IAClE,CAAC;IAEO,OAAO,CAAC,GAAU;QACzB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,YAAY,EAAE,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,GAAG,CAChB,IAA+C,EAC/C,IAAgB,EAChB,KAAY,EACZ,KAAc,EACd,IAAsB,EACtB,MAAoB,EACpB,MAA2B;QAE3B,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,UAAU,EAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAEpB,iEAAiE;QACjE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC5B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;gBACnD,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC;gBAC5B,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;YACpG,CAAC;YACD,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACpE,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnG,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAE,CAAC;QAChE,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,MAAM,OAAO,GAAY,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACrD,IAAI,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE;oBACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACxB,IAAI,CAAC,YAAY,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;gBAC1B,CAAC,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,4EAA4E;YAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACnF,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAqB,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,QAAQ,CAAC,IAAgB,EAAE,KAAY,EAAE,IAAsB;QAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjF,CAAC;IAED,4EAA4E;IAC5E,UAAU,CAAC,IAAgB,EAAE,KAAY,EAAE,IAAwB;QAClE,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,IAAgB,EAAE,MAA0B,EAAE,KAAc;QACvE,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACnF,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,OAAO;QACZ,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACxB,CAAC;CACD;AAED,IAAI,MAA8B,CAAC;AAEnC,yDAAyD;AACzD,MAAM,UAAU,UAAU;IACzB,OAAO,CAAC,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC;AACtC,CAAC"}

package/dist/workers/worker.d.ts

@@ -0,0 +1,18 @@
+import type { Codec, CompressionMode } from '../types.js';
+export interface WorkerRequest {
+    id: number;
+    kind: 'compress' | 'decompress' | 'zipCompress';
+    codec: Codec;
+    mode?: CompressionMode;
+    level?: number;
+    /** ZIP entry method (`zipCompress` only) — raw libdeflate / zstd, no native dispatch. */
+    method?: 'deflate' | 'zstd';
+    data: Uint8Array;
+}
+export interface WorkerResponse {
+    id: number;
+    ok: boolean;
+    result?: Uint8Array;
+    error?: string;
+}
+//# sourceMappingURL=worker.d.ts.map

package/dist/workers/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/workers/worker.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;IAChD,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yFAAyF;IACzF,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,IAAI,EAAE,UAAU,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/workers/worker.js

@@ -0,0 +1,45 @@
+/**
+ * Worker entry point. Runs codec operations off the main thread, one Wasm
+ * engine per worker. Speaks the tiny message protocol in {@link WorkerRequest} /
+ * {@link WorkerResponse}; transfers buffers both ways for zero-copy handoff.
+ */
+import { parentPort } from 'node:worker_threads';
+import { getEngine } from '../engine.js';
+import { compress, decompressWith } from '../compress.js';
+if (parentPort) {
+    const port = parentPort;
+    // Warm the engine immediately so the first job doesn't pay instantiation.
+    void getEngine();
+    port.on('message', async (req) => {
+        try {
+            let result;
+            if (req.kind === 'zipCompress') {
+                // ZIP entries must use the raw libdeflate / zstd engine (denser than
+                // native, and byte-identical to the inline path), bypassing the
+                // codec's native dispatch.
+                const e = await getEngine();
+                result =
+                    req.method === 'zstd'
+                        ? e.zstdCompress(req.data, req.level ?? 19)
+                        : e.deflateCompress(req.data, req.level ?? 6);
+            }
+            else if (req.kind === 'compress') {
+                result = await compress(req.data, req.codec, { mode: req.mode, level: req.level });
+            }
+            else {
+                result = await decompressWith(req.data, req.codec);
+            }
+            const res = { id: req.id, ok: true, result };
+            port.postMessage(res, [result.buffer]);
+        }
+        catch (err) {
+            const res = {
+                id: req.id,
+                ok: false,
+                error: err instanceof Error ? err.message : String(err)
+            };
+            port.postMessage(res);
+        }
+    });
+}
+//# sourceMappingURL=worker.js.map

package/dist/workers/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/workers/worker.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAqB1D,IAAI,UAAU,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,UAAU,CAAC;IACxB,0EAA0E;IAC1E,KAAK,SAAS,EAAE,CAAC;IAEjB,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAkB,EAAE,EAAE;QAC/C,IAAI,CAAC;YACJ,IAAI,MAAkB,CAAC;YACvB,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAChC,qEAAqE;gBACrE,gEAAgE;gBAChE,2BAA2B;gBAC3B,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC;gBAC5B,MAAM;oBACL,GAAG,CAAC,MAAM,KAAK,MAAM;wBACpB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC3C,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YACjD,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACpC,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACP,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,GAAG,GAAmB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC7D,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAqB,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,GAAmB;gBAC3B,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/zip/crypto/aes.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Compact AES (128/192/256) block cipher in CTR mode.
+ *
+ * WinZip AES-encrypted ZIP entries use AES in CTR mode with a 16-byte counter
+ * that increments **little-endian** starting at 1 — which the WebCrypto
+ * `AES-CTR` primitive (big-endian counter, no raw-block/ECB access) cannot
+ * produce. So the keystream is built here from a small, dependency-free,
+ * synchronous AES, while the standard parts (PBKDF2, HMAC-SHA1) still come from
+ * WebCrypto in the caller. Tables are derived once on first use.
+ */
+/** An AES cipher with an expanded key, exposing single-block ECB encryption. */
+export declare class Aes {
+    private rk;
+    private rounds;
+    constructor(key: Uint8Array);
+    /** Encrypt one 16-byte block of `src` at `srcOff` into `dst` at `dstOff`. */
+    encryptBlock(src: Uint8Array, srcOff: number, dst: Uint8Array, dstOff: number): void;
+}
+/**
+ * Encrypt/decrypt `data` with WinZip's AES-CTR: a 16-byte little-endian counter
+ * starting at 1, one keystream block per 16 bytes, XORed into the data. CTR is
+ * symmetric, so the same call decrypts.
+ */
+export declare function aesCtrXor(cipher: Aes, data: Uint8Array): Uint8Array;
+//# sourceMappingURL=aes.d.ts.map

package/dist/zip/crypto/aes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes.d.ts","sourceRoot":"","sources":["../../../src/zip/crypto/aes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAuDH,gFAAgF;AAChF,qBAAa,GAAG;IACf,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,MAAM,CAAS;gBAEX,GAAG,EAAE,UAAU;IAwB3B,6EAA6E;IAC7E,YAAY,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;CAsCpF;AAMD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAkBnE"}

package/dist/zip/crypto/aes.js

@@ -0,0 +1,156 @@
+/**
+ * Compact AES (128/192/256) block cipher in CTR mode.
+ *
+ * WinZip AES-encrypted ZIP entries use AES in CTR mode with a 16-byte counter
+ * that increments **little-endian** starting at 1 — which the WebCrypto
+ * `AES-CTR` primitive (big-endian counter, no raw-block/ECB access) cannot
+ * produce. So the keystream is built here from a small, dependency-free,
+ * synchronous AES, while the standard parts (PBKDF2, HMAC-SHA1) still come from
+ * WebCrypto in the caller. Tables are derived once on first use.
+ */
+let SBOX;
+let T0, T1, T2, T3;
+const RCON = new Uint32Array([0x01000000, 0x02000000, 0x04000000, 0x08000000, 0x10000000, 0x20000000, 0x40000000, 0x80000000, 0x1b000000, 0x36000000]);
+/** Build the S-box and the four encryption T-tables (GF(2^8) arithmetic). */
+function buildTables() {
+    SBOX = new Uint8Array(256);
+    const inv = new Uint8Array(256);
+    let p = 1;
+    let q = 1;
+    // Generate multiplicative inverses via a generator (3) over GF(2^8).
+    do {
+        p = p ^ (p << 1) ^ (p & 0x80 ? 0x11b : 0);
+        p &= 0xff;
+        q ^= q << 1;
+        q ^= q << 2;
+        q ^= q << 4;
+        q &= 0xff;
+        if (q & 0x80)
+            q ^= 0x09;
+        q &= 0xff;
+        inv[p] = q;
+    } while (p !== 1);
+    SBOX[0] = 0x63;
+    for (let i = 0; i < 256; i++) {
+        let x = inv[i];
+        let s = x;
+        for (let k = 0; k < 4; k++) {
+            s = ((s << 1) | (s >>> 7)) & 0xff;
+            x ^= s;
+        }
+        x ^= 0x63;
+        SBOX[i] = i === 0 ? 0x63 : x;
+    }
+    T0 = new Uint32Array(256);
+    T1 = new Uint32Array(256);
+    T2 = new Uint32Array(256);
+    T3 = new Uint32Array(256);
+    for (let i = 0; i < 256; i++) {
+        const s = SBOX[i];
+        const s2 = xtime(s);
+        const s3 = s2 ^ s;
+        T0[i] = ((s2 << 24) | (s << 16) | (s << 8) | s3) >>> 0;
+        T1[i] = ((s3 << 24) | (s2 << 16) | (s << 8) | s) >>> 0;
+        T2[i] = ((s << 24) | (s3 << 16) | (s2 << 8) | s) >>> 0;
+        T3[i] = ((s << 24) | (s << 16) | (s3 << 8) | s2) >>> 0;
+    }
+}
+function xtime(a) {
+    return ((a << 1) ^ (a & 0x80 ? 0x11b : 0)) & 0xff;
+}
+/** An AES cipher with an expanded key, exposing single-block ECB encryption. */
+export class Aes {
+    rk;
+    rounds;
+    constructor(key) {
+        if (!SBOX)
+            buildTables();
+        if (key.length !== 16 && key.length !== 24 && key.length !== 32) {
+            throw new Error(`AES key must be 16/24/32 bytes, got ${key.length}`);
+        }
+        const Nk = key.length / 4;
+        this.rounds = Nk + 6;
+        const total = 4 * (this.rounds + 1);
+        const rk = new Uint32Array(total);
+        for (let i = 0; i < Nk; i++) {
+            rk[i] = ((key[4 * i] << 24) | (key[4 * i + 1] << 16) | (key[4 * i + 2] << 8) | key[4 * i + 3]) >>> 0;
+        }
+        for (let i = Nk; i < total; i++) {
+            let temp = rk[i - 1];
+            if (i % Nk === 0) {
+                temp = (subWord((temp << 8) | (temp >>> 24)) ^ RCON[i / Nk - 1]) >>> 0;
+            }
+            else if (Nk > 6 && i % Nk === 4) {
+                temp = subWord(temp);
+            }
+            rk[i] = (rk[i - Nk] ^ temp) >>> 0;
+        }
+        this.rk = rk;
+    }
+    /** Encrypt one 16-byte block of `src` at `srcOff` into `dst` at `dstOff`. */
+    encryptBlock(src, srcOff, dst, dstOff) {
+        const rk = this.rk;
+        let s0 = ((src[srcOff] << 24) | (src[srcOff + 1] << 16) | (src[srcOff + 2] << 8) | src[srcOff + 3]) ^ rk[0];
+        let s1 = ((src[srcOff + 4] << 24) | (src[srcOff + 5] << 16) | (src[srcOff + 6] << 8) | src[srcOff + 7]) ^ rk[1];
+        let s2 = ((src[srcOff + 8] << 24) | (src[srcOff + 9] << 16) | (src[srcOff + 10] << 8) | src[srcOff + 11]) ^ rk[2];
+        let s3 = ((src[srcOff + 12] << 24) | (src[srcOff + 13] << 16) | (src[srcOff + 14] << 8) | src[srcOff + 15]) ^ rk[3];
+        let rki = 4;
+        for (let round = 1; round < this.rounds; round++) {
+            const t0 = (T0[(s0 >>> 24) & 0xff] ^ T1[(s1 >>> 16) & 0xff] ^ T2[(s2 >>> 8) & 0xff] ^ T3[s3 & 0xff] ^ rk[rki]) >>> 0;
+            const t1 = (T0[(s1 >>> 24) & 0xff] ^ T1[(s2 >>> 16) & 0xff] ^ T2[(s3 >>> 8) & 0xff] ^ T3[s0 & 0xff] ^ rk[rki + 1]) >>> 0;
+            const t2 = (T0[(s2 >>> 24) & 0xff] ^ T1[(s3 >>> 16) & 0xff] ^ T2[(s0 >>> 8) & 0xff] ^ T3[s1 & 0xff] ^ rk[rki + 2]) >>> 0;
+            const t3 = (T0[(s3 >>> 24) & 0xff] ^ T1[(s0 >>> 16) & 0xff] ^ T2[(s1 >>> 8) & 0xff] ^ T3[s2 & 0xff] ^ rk[rki + 3]) >>> 0;
+            s0 = t0;
+            s1 = t1;
+            s2 = t2;
+            s3 = t3;
+            rki += 4;
+        }
+        // Final round uses the S-box directly (no mix-columns).
+        dst[dstOff] = (SBOX[(s0 >>> 24) & 0xff] ^ (rk[rki] >>> 24)) & 0xff;
+        dst[dstOff + 1] = (SBOX[(s1 >>> 16) & 0xff] ^ (rk[rki] >>> 16)) & 0xff;
+        dst[dstOff + 2] = (SBOX[(s2 >>> 8) & 0xff] ^ (rk[rki] >>> 8)) & 0xff;
+        dst[dstOff + 3] = (SBOX[s3 & 0xff] ^ rk[rki]) & 0xff;
+        dst[dstOff + 4] = (SBOX[(s1 >>> 24) & 0xff] ^ (rk[rki + 1] >>> 24)) & 0xff;
+        dst[dstOff + 5] = (SBOX[(s2 >>> 16) & 0xff] ^ (rk[rki + 1] >>> 16)) & 0xff;
+        dst[dstOff + 6] = (SBOX[(s3 >>> 8) & 0xff] ^ (rk[rki + 1] >>> 8)) & 0xff;
+        dst[dstOff + 7] = (SBOX[s0 & 0xff] ^ rk[rki + 1]) & 0xff;
+        dst[dstOff + 8] = (SBOX[(s2 >>> 24) & 0xff] ^ (rk[rki + 2] >>> 24)) & 0xff;
+        dst[dstOff + 9] = (SBOX[(s3 >>> 16) & 0xff] ^ (rk[rki + 2] >>> 16)) & 0xff;
+        dst[dstOff + 10] = (SBOX[(s0 >>> 8) & 0xff] ^ (rk[rki + 2] >>> 8)) & 0xff;
+        dst[dstOff + 11] = (SBOX[s1 & 0xff] ^ rk[rki + 2]) & 0xff;
+        dst[dstOff + 12] = (SBOX[(s3 >>> 24) & 0xff] ^ (rk[rki + 3] >>> 24)) & 0xff;
+        dst[dstOff + 13] = (SBOX[(s0 >>> 16) & 0xff] ^ (rk[rki + 3] >>> 16)) & 0xff;
+        dst[dstOff + 14] = (SBOX[(s1 >>> 8) & 0xff] ^ (rk[rki + 3] >>> 8)) & 0xff;
+        dst[dstOff + 15] = (SBOX[s2 & 0xff] ^ rk[rki + 3]) & 0xff;
+    }
+}
+function subWord(w) {
+    return ((SBOX[(w >>> 24) & 0xff] << 24) | (SBOX[(w >>> 16) & 0xff] << 16) | (SBOX[(w >>> 8) & 0xff] << 8) | SBOX[w & 0xff]) >>> 0;
+}
+/**
+ * Encrypt/decrypt `data` with WinZip's AES-CTR: a 16-byte little-endian counter
+ * starting at 1, one keystream block per 16 bytes, XORed into the data. CTR is
+ * symmetric, so the same call decrypts.
+ */
+export function aesCtrXor(cipher, data) {
+    const out = new Uint8Array(data.length);
+    const counter = new Uint8Array(16);
+    const keystream = new Uint8Array(16);
+    let nonce = 1; // little-endian counter, incremented per block
+    for (let off = 0; off < data.length; off += 16) {
+        // Write the little-endian counter into the low bytes (WinZip uses a 64-bit
+        // counter in practice; 32 bits is ample for any in-memory buffer).
+        counter[0] = nonce & 0xff;
+        counter[1] = (nonce >>> 8) & 0xff;
+        counter[2] = (nonce >>> 16) & 0xff;
+        counter[3] = (nonce >>> 24) & 0xff;
+        cipher.encryptBlock(counter, 0, keystream, 0);
+        const n = Math.min(16, data.length - off);
+        for (let i = 0; i < n; i++)
+            out[off + i] = data[off + i] ^ keystream[i];
+        nonce++;
+    }
+    return out;
+}
+//# sourceMappingURL=aes.js.map

package/dist/zip/crypto/aes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes.js","sourceRoot":"","sources":["../../../src/zip/crypto/aes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,IAAI,IAAgB,CAAC;AACrB,IAAI,EAAe,EAAE,EAAe,EAAE,EAAe,EAAE,EAAe,CAAC;AACvE,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAEvJ,6EAA6E;AAC7E,SAAS,WAAW;IACnB,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,qEAAqE;IACrE,GAAG,CAAC;QACH,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,IAAI,IAAI,CAAC;QACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACZ,CAAC,IAAI,IAAI,CAAC;QACV,IAAI,CAAC,GAAG,IAAI;YAAE,CAAC,IAAI,IAAI,CAAC;QACxB,CAAC,IAAI,IAAI,CAAC;QACV,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;IAClB,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YAClC,CAAC,IAAI,CAAC,CAAC;QACR,CAAC;QACD,CAAC,IAAI,IAAI,CAAC;QACV,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,EAAE,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,EAAE,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,EAAE,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,EAAE,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAClB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACvD,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACvD,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACvD,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;AACF,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACvB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;AACnD,CAAC;AAED,gFAAgF;AAChF,MAAM,OAAO,GAAG;IACP,EAAE,CAAc;IAChB,MAAM,CAAS;IAEvB,YAAY,GAAe;QAC1B,IAAI,CAAC,IAAI;YAAE,WAAW,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QAC1G,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACjC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACtB,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBAClB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YACzE,CAAC;iBAAM,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBACnC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,YAAY,CAAC,GAAe,EAAE,MAAc,EAAE,GAAe,EAAE,MAAc;QAC5E,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC;QACjH,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC;QACrH,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC;QACvH,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC;QAEzH,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YAClD,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,EAAE,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,GAAG,CAAE,CAAC,KAAK,CAAC,CAAC;YAC1H,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,EAAE,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YAC9H,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,EAAE,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YAC9H,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,EAAE,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YAC9H,EAAE,GAAG,EAAE,CAAC;YACR,EAAE,GAAG,EAAE,CAAC;YACR,EAAE,GAAG,EAAE,CAAC;YACR,EAAE,GAAG,EAAE,CAAC;YACR,GAAG,IAAI,CAAC,CAAC;QACV,CAAC;QAED,wDAAwD;QACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAE,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QACrE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAE,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QACzE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAE,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACvE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,GAAG,CAAE,CAAC,GAAG,IAAI,CAAC;QACvD,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7E,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7E,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC3E,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC,GAAG,IAAI,CAAC;QAC3D,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7E,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7E,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5E,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC,GAAG,IAAI,CAAC;QAC5D,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC9E,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC9E,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5E,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC,GAAG,IAAI,CAAC;IAC7D,CAAC;CACD;AAED,SAAS,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAE,CAAC,KAAK,CAAC,CAAC;AACvI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,MAAW,EAAE,IAAgB;IACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,+CAA+C;IAC9D,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;QAChD,2EAA2E;QAC3E,mEAAmE;QACnE,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;QAC1B,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;QAClC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QACnC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QACnC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAE,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC1E,KAAK,EAAE,CAAC;IACT,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/zip/crypto/winzip.d.ts

@@ -0,0 +1,28 @@
+/**
+ * WinZip AES (AE-2) encryption for ZIP entries — AES-256 by default.
+ *
+ * Layout of an encrypted entry's payload: `salt || pwdVerify(2) || ciphertext ||
+ * authCode(10)`. Keys come from PBKDF2-HMAC-SHA1 (1000 iterations) over the
+ * password and salt; the data is AES-CTR encrypted and authenticated with a
+ * truncated HMAC-SHA1. PBKDF2/HMAC use WebCrypto (standard, cross-runtime); the
+ * CTR keystream uses {@link Aes} because WebCrypto's counter endianness differs
+ * from WinZip's. Interoperates with 7-Zip / WinZip AES archives.
+ */
+/** AES strength codes used in the 0x9901 extra field. */
+export type AesStrength = 1 | 2 | 3;
+/**
+ * Encrypt already-compressed `data` as a WinZip AE-2 payload. Returns the bytes
+ * that go where the compressed data would otherwise sit, plus the strength code
+ * for the entry's 0x9901 extra field.
+ */
+export declare function aesEncrypt(data: Uint8Array, password: string, strength?: AesStrength): Promise<{
+    payload: Uint8Array;
+    strength: AesStrength;
+}>;
+/**
+ * Decrypt a WinZip AE-2 payload back to the compressed bytes. Throws
+ * {@link ZipKitError} on a wrong password (verifier mismatch) or a failed
+ * authentication check (tampered/corrupt data).
+ */
+export declare function aesDecrypt(payload: Uint8Array, password: string, strength: AesStrength): Promise<Uint8Array>;
+//# sourceMappingURL=winzip.d.ts.map

package/dist/zip/crypto/winzip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"winzip.d.ts","sourceRoot":"","sources":["../../../src/zip/crypto/winzip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AA8CpC;;;;GAIG;AACH,wBAAsB,UAAU,CAC/B,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,WAAe,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,CAAC,CAYzD;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAiBlH"}

package/dist/zip/crypto/winzip.js

@@ -0,0 +1,87 @@
+/**
+ * WinZip AES (AE-2) encryption for ZIP entries — AES-256 by default.
+ *
+ * Layout of an encrypted entry's payload: `salt || pwdVerify(2) || ciphertext ||
+ * authCode(10)`. Keys come from PBKDF2-HMAC-SHA1 (1000 iterations) over the
+ * password and salt; the data is AES-CTR encrypted and authenticated with a
+ * truncated HMAC-SHA1. PBKDF2/HMAC use WebCrypto (standard, cross-runtime); the
+ * CTR keystream uses {@link Aes} because WebCrypto's counter endianness differs
+ * from WinZip's. Interoperates with 7-Zip / WinZip AES archives.
+ */
+import { Aes, aesCtrXor } from './aes.js';
+import { ZipKitError } from '../../types.js';
+const KEY_BYTES = { 1: 16, 2: 24, 3: 32 };
+const SALT_BYTES = { 1: 8, 2: 12, 3: 16 };
+const MAC_BYTES = 10; // truncated HMAC-SHA1
+const PBKDF2_ITERATIONS = 1000;
+function subtle() {
+    const c = globalThis.crypto;
+    if (!c?.subtle)
+        throw new ZipKitError('WebCrypto (crypto.subtle) is required for ZIP AES encryption');
+    return c.subtle;
+}
+function randomBytes(n) {
+    const c = globalThis.crypto;
+    if (!c?.getRandomValues)
+        throw new ZipKitError('crypto.getRandomValues is required to create encrypted ZIPs');
+    return c.getRandomValues(new Uint8Array(n));
+}
+/** Derive the AES key, MAC key, and 2-byte password verifier via PBKDF2. */
+async function deriveKeys(password, salt, strength) {
+    const keyLen = KEY_BYTES[strength];
+    const baseKey = await subtle().importKey('raw', new TextEncoder().encode(password), 'PBKDF2', false, ['deriveBits']);
+    const bits = await subtle().deriveBits({ name: 'PBKDF2', salt: salt, iterations: PBKDF2_ITERATIONS, hash: 'SHA-1' }, baseKey, (keyLen * 2 + 2) * 8);
+    const out = new Uint8Array(bits);
+    return {
+        aesKey: out.subarray(0, keyLen),
+        macKey: out.subarray(keyLen, keyLen * 2),
+        verifier: out.subarray(keyLen * 2, keyLen * 2 + 2)
+    };
+}
+async function hmacSha1(macKey, data) {
+    const key = await subtle().importKey('raw', macKey, { name: 'HMAC', hash: 'SHA-1' }, false, ['sign']);
+    const sig = await subtle().sign('HMAC', key, data);
+    return new Uint8Array(sig).subarray(0, MAC_BYTES);
+}
+/**
+ * Encrypt already-compressed `data` as a WinZip AE-2 payload. Returns the bytes
+ * that go where the compressed data would otherwise sit, plus the strength code
+ * for the entry's 0x9901 extra field.
+ */
+export async function aesEncrypt(data, password, strength = 3) {
+    const salt = randomBytes(SALT_BYTES[strength]);
+    const { aesKey, macKey, verifier } = await deriveKeys(password, salt, strength);
+    const ciphertext = aesCtrXor(new Aes(aesKey), data);
+    const mac = await hmacSha1(macKey, ciphertext);
+    const payload = new Uint8Array(salt.length + 2 + ciphertext.length + MAC_BYTES);
+    payload.set(salt, 0);
+    payload.set(verifier, salt.length);
+    payload.set(ciphertext, salt.length + 2);
+    payload.set(mac, salt.length + 2 + ciphertext.length);
+    return { payload, strength };
+}
+/**
+ * Decrypt a WinZip AE-2 payload back to the compressed bytes. Throws
+ * {@link ZipKitError} on a wrong password (verifier mismatch) or a failed
+ * authentication check (tampered/corrupt data).
+ */
+export async function aesDecrypt(payload, password, strength) {
+    const saltLen = SALT_BYTES[strength];
+    if (payload.length < saltLen + 2 + MAC_BYTES)
+        throw new ZipKitError('Encrypted ZIP entry is too short to be valid AES');
+    const salt = payload.subarray(0, saltLen);
+    const storedVerifier = payload.subarray(saltLen, saltLen + 2);
+    const ciphertext = payload.subarray(saltLen + 2, payload.length - MAC_BYTES);
+    const storedMac = payload.subarray(payload.length - MAC_BYTES);
+    const { aesKey, macKey, verifier } = await deriveKeys(password, salt, strength);
+    if (verifier[0] !== storedVerifier[0] || verifier[1] !== storedVerifier[1]) {
+        throw new ZipKitError('Wrong password for encrypted ZIP entry');
+    }
+    const mac = await hmacSha1(macKey, ciphertext);
+    for (let i = 0; i < MAC_BYTES; i++) {
+        if (mac[i] !== storedMac[i])
+            throw new ZipKitError('Authentication failed for encrypted ZIP entry (corrupt or tampered)');
+    }
+    return aesCtrXor(new Aes(aesKey), ciphertext);
+}
+//# sourceMappingURL=winzip.js.map

package/dist/zip/crypto/winzip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"winzip.js","sourceRoot":"","sources":["../../../src/zip/crypto/winzip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAK7C,MAAM,SAAS,GAAgC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;AACvE,MAAM,UAAU,GAAgC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;AACvE,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,sBAAsB;AAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,SAAS,MAAM;IACd,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,CAAC;IACrD,IAAI,CAAC,CAAC,EAAE,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,8DAA8D,CAAC,CAAC;IACtG,OAAO,CAAC,CAAC,MAAM,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC7B,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,CAAC;IACrD,IAAI,CAAC,CAAC,EAAE,eAAe;QAAE,MAAM,IAAI,WAAW,CAAC,6DAA6D,CAAC,CAAC;IAC9G,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,UAAU,CACxB,QAAgB,EAChB,IAAgB,EAChB,QAAqB;IAErB,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IACrH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,UAAU,CACrC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAoB,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,EAC5F,OAAO,EACP,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CACpB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO;QACN,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;QAC/B,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC;QACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;KAClD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAkB,EAAE,IAAgB;IAC3D,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,MAAsB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACtH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAoB,CAAC,CAAC;IACnE,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,IAAgB,EAChB,QAAgB,EAChB,WAAwB,CAAC;IAEzB,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE,QAAgB,EAAE,QAAqB;IAC5F,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,GAAG,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,kDAAkD,CAAC,CAAC;IACxH,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAE/D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChF,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,WAAW,CAAC,wCAAwC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,qEAAqE,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC"}

package/dist/zip/crypto/zipcrypto.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Legacy PKWARE "ZipCrypto" — decryption only, for reading old encrypted
+ * archives. The cipher is weak and long deprecated, so ZipKit never *writes* it
+ * (new encrypted archives use WinZip AES, {@link import('./winzip.js')}); this
+ * exists purely for read compatibility with historical files.
+ */
+/**
+ * Decrypt a ZipCrypto entry: the raw bytes are a 12-byte encryption header
+ * followed by the (still-compressed) ciphertext. `checkByte` is the expected
+ * high byte of the verification value — the CRC-32's top byte, or the DOS time's
+ * high byte when the entry used a data descriptor. Throws on a wrong password.
+ */
+export declare function zipCryptoDecrypt(data: Uint8Array, password: string, checkByte: number): Uint8Array;
+//# sourceMappingURL=zipcrypto.d.ts.map

package/dist/zip/crypto/zipcrypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zipcrypto.d.ts","sourceRoot":"","sources":["../../../src/zip/crypto/zipcrypto.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4CH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CAmBlG"}