@photostructure/fs-metadata 0.6.1 → 0.7.1

package/dist/index.mjs

@@ -105,18 +105,19 @@ function getCallerDirname() {
 }
 var patterns = isWindows ? [
   // Standard: "at functionName (C:\path\file.js:1:1)"
-  /\bat\s.+?\((?<path>[A-Z]:\\.+):\d+:\d+\)$/,
+  /\bat\s[^(]*\((?<path>[A-Z]:\\.+?):\d+:\d+\)$/,
   // direct: "at C:\path\file.js:1:1"
-  /\bat\s(?<path>[A-Z]:\\.+):\d+:\d+$/,
+  /\bat\s(?<path>[A-Z]:\\.+?):\d+:\d+$/,
   // UNC: "at functionName (\\server\share\path\file.js:1:1)"
-  /\bat\s.+?\((?<path>\\\\.+):\d+:\d+\)$/,
+  /\bat\s[^(]*\((?<path>\\\\.+?):\d+:\d+\)$/,
   // direct: "at \\server\share\path\file.js:1:1"
-  /\bat\s(?<path>\\\\.+):\d+:\d+$/
+  /\bat\s(?<path>\\\\.+?):\d+:\d+$/
 ] : [
   // Standard: "at functionName (/path/file.js:1:1)"
-  /\bat\s.+?\((?<path>\/.+?):\d+:\d+\)$/,
+  /\bat\s[^(]*\((?<path>\/.*?):\d+:\d+\)$/,
   // Anonymous or direct: "at /path/file.js:1:1"
-  /\bat\s(.+[^/]\s)?(?<path>\/.+?):\d+:\d+$/
+  // eslint-disable-next-line security/detect-unsafe-regex -- parsing trusted Node.js stack traces, bounded by line anchors
+  /\bat\s(?:[^/\s]+\s+)?(?<path>\/.*?):\d+:\d+$/
 ];
 var MaybeUrlRE = /^[a-z]{2,5}:\/\//i;
 function extractCallerPath(stack) {
@@ -282,13 +283,6 @@ async function mapConcurrent({
 async function statAsync(path2, options) {
   return stat(path2, options);
 }
-async function canStatAsync(path2) {
-  try {
-    return null != await statAsync(path2);
-  } catch {
-    return false;
-  }
-}
 async function findAncestorDir(dir, file) {
   dir = resolve(dir);
   try {
@@ -397,6 +391,12 @@ function toError(cause) {
 import { dirname as dirname2, resolve as resolve2 } from "path";
 function normalizePath(mountPoint) {
   if (isBlank(mountPoint)) return void 0;
+  if (mountPoint.includes("..")) {
+    throw new Error("Invalid path: contains directory traversal pattern");
+  }
+  if (mountPoint.includes("\uFFFD") || mountPoint.includes("\0")) {
+    throw new Error("Invalid path: contains invalid characters");
+  }
   const result = isWindows ? normalizeWindowsPath(mountPoint) : normalizePosixPath(mountPoint);
   return result != null ? resolve2(result) : void 0;
 }
@@ -444,11 +444,20 @@ var LocalSupport = HiddenSupportByPlatform[process.platform]?.supported ?? {
   systemFlag: false
 };
 async function isHiddenImpl(pathname, nativeFn2) {
+  debug("isHiddenImpl called with pathname: %s", pathname);
   const norm = normalizePath(pathname);
   if (norm == null) {
     throw new Error("Invalid pathname: " + JSON.stringify(pathname));
   }
-  return LocalSupport.dotPrefix && isPosixHidden(norm) || LocalSupport.systemFlag && isSystemHidden(norm, nativeFn2);
+  debug("Normalized path: %s", norm);
+  debug(
+    "LocalSupport: dotPrefix=%s, systemFlag=%s",
+    LocalSupport.dotPrefix,
+    LocalSupport.systemFlag
+  );
+  const result = LocalSupport.dotPrefix && isPosixHidden(norm) || LocalSupport.systemFlag && await isSystemHidden(norm, nativeFn2);
+  debug("isHiddenImpl returning: %s", result);
+  return result;
 }
 async function isHiddenRecursiveImpl(path2, nativeFn2) {
   let norm = normalizePath(path2);
@@ -487,13 +496,26 @@ function isPosixHidden(pathname) {
   return b.startsWith(".") && b !== "." && b !== "..";
 }
 async function isSystemHidden(pathname, nativeFn2) {
+  debug("isSystemHidden called with pathname: %s", pathname);
   if (!LocalSupport.systemFlag) {
+    debug("systemFlag not supported on this platform");
     return false;
   }
-  if (isWindows && isRootDirectory(pathname)) {
-    return false;
+  const native = await nativeFn2();
+  debug("Calling native isHidden for: %s", pathname);
+  try {
+    const isHidden2 = await native.isHidden(pathname);
+    debug("Native isHidden returned: %s", isHidden2);
+    return isHidden2;
+  } catch (error) {
+    debug("Native isHidden threw error: %s", error);
+    const errorStr = String(error);
+    if (errorStr.includes("Path not found")) {
+      debug("Path not found, returning false");
+      return false;
+    }
+    throw error;
   }
-  return await canStatAsync(pathname) && await (await nativeFn2()).isHidden(pathname);
 }
 async function getHiddenMetadataImpl(pathname, nativeFn2) {
   const norm = normalizePath(pathname);
@@ -616,13 +638,15 @@ var LinuxMountTablePathsDefault = [
   "/etc/mtab"
 ];
 var IncludeSystemVolumesDefault = isWindows;
+var SkipNetworkVolumesDefault = false;
 var OptionsDefault = {
   timeoutMs: TimeoutMsDefault,
   maxConcurrency: availableParallelism2(),
   systemPathPatterns: [...SystemPathPatternsDefault],
   systemFsTypes: [...SystemFsTypesDefault],
   linuxMountTablePaths: [...LinuxMountTablePathsDefault],
-  includeSystemVolumes: IncludeSystemVolumesDefault
+  includeSystemVolumes: IncludeSystemVolumesDefault,
+  skipNetworkVolumes: SkipNetworkVolumesDefault
 };
 function optionsWithDefaults(overrides = {}) {
   if (!isObject(overrides)) {
@@ -812,16 +836,22 @@ function extractRemoteInfo(fsSpec) {
   const patterns2 = [
     {
       // CIFS/SMB pattern: //hostname/share or //user@host/share
-      regex: /^\/\/(?:(?<remoteUser>[^/@]+)@)?(?<remoteHost>[^/@]+)\/(?<remoteShare>.+)$/
+      regex: (
+        // eslint-disable-next-line security/detect-unsafe-regex -- parsing trusted mount paths from OS, bounded by line anchors
+        /^\/\/(?:(?<remoteUser>[^/@]+)@)?(?<remoteHost>[^/@]+)\/(?<remoteShare>.*)$/
+      )
     },
     {
       // sshfs pattern: sshfs#USER@HOST:REMOTE_PATH
-      regex: /^(?:(?<protocol>\w+)#)?(?<remoteUser>[^@]+)@(?<remoteHost>[^:]+):(?<remoteShare>.+)$/
+      regex: (
+        // eslint-disable-next-line security/detect-unsafe-regex -- parsing trusted mount paths from OS, bounded by line anchors
+        /^(?:(?<protocol>\w+)#)?(?<remoteUser>[^@]+)@(?<remoteHost>[^:]+):(?<remoteShare>.*)$/
+      )
     },
     {
       // NFS pattern: hostname:/share
       protocol: "nfs",
-      regex: /^(?<remoteHost>[^:]+):\/(?!\/)(?<remoteShare>.+)$/
+      regex: /^(?<remoteHost>[^:]+):\/(?!\/)(?<remoteShare>.*)$/
     }
   ];
   for (const { protocol, regex } of patterns2) {