@poe-platform/safe-bash 0.1.533 → 0.1.534

package/dist/safe-bash/commands/archive/index.d.ts

@@ -1,6 +1,8 @@
 import { type CommandDefinition, type VirtualShellPlugin } from "../../contracts/index.js";
 import { type ArchiveCommandsOptions } from "./internal.js";
 export { DEFAULT_ARCHIVE_LIMITS } from "./internal.js";
+export { createZipCommand } from "./zip.js";
+export { createUnzipCommand } from "./unzip.js";
 export type { ArchiveCommandsOptions, ArchiveLimits } from "./internal.js";
 export declare function createTarCommand(options?: ArchiveCommandsOptions): CommandDefinition;
 export declare function createArchiveCommands(options?: ArchiveCommandsOptions): readonly CommandDefinition[];

package/dist/safe-bash/commands/archive/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/archive/index.ts"],"names":[],"mappings":"AACA,OAAO,EAA+D,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAIxJ,OAAO,EAA8G,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAIxK,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,YAAY,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3E,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,sBAA2B,GAAG,iBAAiB,CAqCxF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,SAAS,iBAAiB,EAAE,CAExG;AAED,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,kBAAkB,CAMxF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/archive/index.ts"],"names":[],"mappings":"AACA,OAAO,EAA+D,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAIxJ,OAAO,EAA8G,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAMxK,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3E,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,sBAA2B,GAAG,iBAAiB,CAqCxF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,SAAS,iBAAiB,EAAE,CAExG;AAED,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,kBAAkB,CAUxF"}

package/dist/safe-bash/commands/archive/index.js

@@ -6,7 +6,11 @@ import { readArchive } from "./extract.js";
 import { Budget, bounded, display, fail, fileSource, maybeStat, operation, publish, sameIdentity, settings, vfsPath } from "./internal.js";
 import { parseOptions } from "./options.js";
 import { compressed } from "./stream.js";
+import { createZipCommand } from "./zip.js";
+import { createUnzipCommand } from "./unzip.js";
 export { DEFAULT_ARCHIVE_LIMITS } from "./internal.js";
+export { createZipCommand } from "./zip.js";
+export { createUnzipCommand } from "./unzip.js";
 export function createTarCommand(options = {}) {
     const limits = settings(options);
     return { name: "tar", description: "Stream USTAR/PAX archives through the virtual filesystem", async execute(original) {
@@ -58,13 +62,17 @@ export function createTarCommand(options = {}) {
         } };
 }
 export function createArchiveCommands(options = {}) {
-    return [createTarCommand(options)];
+    return [createTarCommand(options), createZipCommand(options), createUnzipCommand(options)];
 }
 export function archiveCommands(options = {}) {
     const commands = createArchiveCommands(options);
     return { name: "archive-commands", setup(host) {
-            if (!options.replace && host.commands.has("tar"))
-                throw new Error("Command already registered: tar");
+            if (!options.replace) {
+                for (const command of commands) {
+                    if (host.commands.has(command.name))
+                        throw new Error(`Command already registered: ${command.name}`);
+                }
+            }
             for (const command of commands)
                 host.commands.register(command, { replace: options.replace ?? false });
         } };

package/dist/safe-bash/commands/archive/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/archive/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAyF,MAAM,0BAA0B,CAAC;AACxJ,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAA+B,MAAM,eAAe,CAAC;AACxK,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAGvD,MAAM,UAAU,gBAAgB,CAAC,UAAkC,EAAE;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,0DAA0D,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;YACnH,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACrE,MAAM,OAAO,GAAmB,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAC;YACxD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBACzD,IAAI,MAAM,GAAe,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC7I,IAAI,MAAM,CAAC,IAAI;wBAAE,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBACpE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;wBACpB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;wBAC3D,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;4BAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;wBACvF,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;4BAAE,IAAI,CAAC,yDAAyD,CAAC,CAAC;wBACxJ,IAAI,QAAQ;4BAAE,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;wBAC1F,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAClD,CAAC;yBAAM,CAAC;wBACN,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;4BAAE,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACvG,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;oBACnL,IAAI,MAAM,CAAC,IAAI;wBAAE,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBACnE,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxB,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC7H,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5H,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACzB,CAAC;oBAAS,CAAC;gBAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAAC,CAAC;QACpE,CAAC,EAAE,CAAC;AACN,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkC,EAAE;IACxE,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAkC,EAAE;IAClE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,IAAI;YAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrG,KAAK,MAAM,OAAO,IAAI,QAAQ;gBAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QACzG,CAAC,EAAE,CAAC;AACN,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/archive/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAyF,MAAM,0BAA0B,CAAC;AACxJ,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAA+B,MAAM,eAAe,CAAC;AACxK,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGhD,MAAM,UAAU,gBAAgB,CAAC,UAAkC,EAAE;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,0DAA0D,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;YACnH,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACrE,MAAM,OAAO,GAAmB,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAC;YACxD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBACzD,IAAI,MAAM,GAAe,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC7I,IAAI,MAAM,CAAC,IAAI;wBAAE,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBACpE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;wBACpB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;wBAC3D,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;4BAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;wBACvF,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;4BAAE,IAAI,CAAC,yDAAyD,CAAC,CAAC;wBACxJ,IAAI,QAAQ;4BAAE,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;wBAC1F,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAClD,CAAC;yBAAM,CAAC;wBACN,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;4BAAE,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACvG,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;oBACnL,IAAI,MAAM,CAAC,IAAI;wBAAE,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBACnE,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxB,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC7H,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5H,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACzB,CAAC;oBAAS,CAAC;gBAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAAC,CAAC;QACpE,CAAC,EAAE,CAAC;AACN,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkC,EAAE;IACxE,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAkC,EAAE;IAClE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,IAAI;YAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtG,CAAC;YACH,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,QAAQ;gBAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QACzG,CAAC,EAAE,CAAC;AACN,CAAC"}

package/dist/safe-bash/commands/archive/unzip/arguments.d.ts

@@ -0,0 +1,32 @@
+import { type ByteSource, type CommandContext } from "../../../contracts/index.js";
+import { type ArchiveLimits } from "../internal.js";
+export declare function parseArguments(context: Pick<CommandContext, "args" | "argumentValues">, limits: ArchiveLimits): {
+    list: boolean;
+    overwrite: boolean;
+    destination: string | undefined;
+    archive: string;
+    patterns: string[];
+};
+export declare class Selection {
+    private readonly limits;
+    private readonly signal;
+    private work;
+    private readonly patterns;
+    readonly matched: Set<number>;
+    constructor(patterns: readonly string[], limits: ArchiveLimits, signal: AbortSignal);
+    private step;
+    matches(name: string): Promise<boolean>;
+}
+export declare class Answers {
+    private readonly limits;
+    private readonly signal;
+    private readonly iterator;
+    private chunk;
+    private offset;
+    private bytes;
+    private pulls;
+    constructor(source: ByteSource, limits: ArchiveLimits, signal: AbortSignal);
+    read(maximum?: number): Promise<string | undefined>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=arguments.d.ts.map

package/dist/safe-bash/commands/archive/unzip/arguments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arguments.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/unzip/arguments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGnH,OAAO,EAAyB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE3E,wBAAgB,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,aAAa;;;;;;EA8C7G;AAsCD,qBAAa,SAAS;IAIqB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAiB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHxG,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,QAAQ,CAAC,OAAO,cAAqB;gBACzB,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAmB,MAAM,EAAE,aAAa,EAAmB,MAAM,EAAE,WAAW;IAGrH,OAAO,CAAC,IAAI;IAGN,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAkC9C;AAED,qBAAa,OAAO;IAMc,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAiB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAL/F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,KAAK,CAAK;gBACN,MAAM,EAAE,UAAU,EAAmB,MAAM,EAAE,aAAa,EAAmB,MAAM,EAAE,WAAW;IAGtG,IAAI,CAAC,OAAO,SAAI,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAqB9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAC7B"}

package/dist/safe-bash/commands/archive/unzip/arguments.js

@@ -0,0 +1,214 @@
+import { getCommandArguments, readBytes } from "../../../contracts/index.js";
+import { shellValueByteLength, shellValueBytes } from "../../../contracts/value.js";
+import { yieldTurn } from "../../../contracts/yield.js";
+import { checkPath, fail, text } from "../internal.js";
+export function parseArguments(context, limits) {
+    const { args } = context;
+    let bytes = 0;
+    for (const argument of args) {
+        bytes += Buffer.byteLength(argument) + 1;
+        if (bytes > limits.maxArgumentBytes)
+            fail("argument byte limit exceeded");
+        if (argument.includes("\0"))
+            fail("NUL in argument");
+    }
+    if (context.argumentValues) {
+        const argumentsValue = getCommandArguments(context);
+        let rawBytes = 0;
+        for (const value of argumentsValue.values) {
+            const size = shellValueByteLength(value) + 1;
+            if (size > limits.maxArgumentBytes - rawBytes)
+                fail("argument byte limit exceeded");
+            rawBytes += size;
+        }
+        for (const value of argumentsValue.values)
+            text(shellValueBytes(value));
+    }
+    let list = false;
+    let overwrite = false;
+    let destination;
+    let archive;
+    let ended = false;
+    const patterns = [];
+    for (let index = 0; index < args.length; index++) {
+        const argument = args[index];
+        if (!ended && argument === "--") {
+            ended = true;
+            continue;
+        }
+        if (!ended && argument.startsWith("-") && argument !== "-") {
+            for (let offset = 1; offset < argument.length; offset++) {
+                const flag = argument[offset];
+                if (flag === "l")
+                    list = true;
+                else if (flag === "o")
+                    overwrite = true;
+                else if (flag === "d") {
+                    if (destination !== undefined)
+                        fail("-d may only be specified once");
+                    destination = argument.slice(offset + 1) || args[++index];
+                    if (!destination)
+                        fail("must specify directory to which to extract with -d option");
+                    checkPath(destination, limits);
+                    break;
+                }
+                else
+                    fail(`unsupported option: -${flag}`);
+            }
+        }
+        else if (archive === undefined)
+            archive = argument;
+        else
+            patterns.push(argument);
+    }
+    if (archive === undefined)
+        fail("usage: unzip [-l] [-o] [-d DIR] ARCHIVE [FILES...]");
+    checkPath(archive, limits);
+    return { list, overwrite, destination, archive, patterns };
+}
+function tokenize(pattern) {
+    const characters = Array.from(pattern);
+    const tokens = [];
+    for (let index = 0; index < characters.length; index++) {
+        const character = characters[index];
+        if (character === "*") {
+            if (tokens.at(-1)?.kind !== "star")
+                tokens.push({ kind: "star" });
+        }
+        else if (character === "?")
+            tokens.push({ kind: "any" });
+        else if (character === "\\") {
+            const escaped = characters[++index];
+            tokens.push(escaped === undefined ? { kind: "never" } : { kind: "literal", value: escaped });
+        }
+        else if (character === "[") {
+            const negative = characters[index + 1] === "!" || characters[index + 1] === "^";
+            if (negative)
+                index++;
+            const ranges = [];
+            let closed = false;
+            while (++index < characters.length) {
+                let first = characters[index];
+                if (first === "]") {
+                    closed = true;
+                    break;
+                }
+                if (first === "\\")
+                    first = characters[++index] ?? "";
+                let last = first;
+                if (characters[index + 1] === "-" && characters[index + 2] && characters[index + 2] !== "]") {
+                    index += 2;
+                    last = characters[index];
+                    if (last === "\\")
+                        last = characters[++index] ?? "";
+                }
+                ranges.push([first.codePointAt(0) ?? -1, last.codePointAt(0) ?? -1]);
+            }
+            tokens.push(closed ? { kind: "class", ranges, negative } : { kind: "never" });
+        }
+        else
+            tokens.push({ kind: "literal", value: character });
+    }
+    return tokens;
+}
+export class Selection {
+    limits;
+    signal;
+    work = 0;
+    patterns;
+    matched = new Set();
+    constructor(patterns, limits, signal) {
+        this.limits = limits;
+        this.signal = signal;
+        this.patterns = patterns.map(tokenize);
+    }
+    step() {
+        if (++this.work > this.limits.maxPatternSteps)
+            fail("pattern work limit exceeded");
+    }
+    async matches(name) {
+        if (!this.patterns.length)
+            return true;
+        const characters = Array.from(name);
+        let selected = false;
+        for (let pattern = 0; pattern < this.patterns.length; pattern++) {
+            this.step();
+            let states = new Uint8Array(characters.length + 1);
+            states[0] = 1;
+            for (const token of this.patterns[pattern]) {
+                const next = new Uint8Array(states.length);
+                for (let index = 0; index < states.length; index++) {
+                    this.step();
+                    if (token.kind === "star")
+                        next[index] = states[index] || (index > 0 ? next[index - 1] : 0);
+                    else if (states[index] && index < characters.length) {
+                        const character = characters[index];
+                        let match = token.kind === "any" || (token.kind === "literal" && token.value === character);
+                        if (token.kind === "class") {
+                            let inRange = false;
+                            for (const [first, last] of token.ranges) {
+                                this.step();
+                                if (character.codePointAt(0) >= first && character.codePointAt(0) <= last)
+                                    inRange = true;
+                            }
+                            match = inRange !== token.negative;
+                        }
+                        if (match)
+                            next[index + 1] = 1;
+                    }
+                    if (this.work % 4096 === 0)
+                        await yieldTurn(this.signal);
+                }
+                states = next;
+            }
+            if (states[characters.length]) {
+                this.matched.add(pattern);
+                selected = true;
+            }
+        }
+        return selected;
+    }
+}
+export class Answers {
+    limits;
+    signal;
+    iterator;
+    chunk = new Uint8Array();
+    offset = 0;
+    bytes = 0;
+    pulls = 0;
+    constructor(source, limits, signal) {
+        this.limits = limits;
+        this.signal = signal;
+        this.iterator = readBytes(source, signal)[Symbol.asyncIterator]();
+    }
+    async read(maximum = 9) {
+        const answer = [];
+        while (answer.length < maximum) {
+            this.signal.throwIfAborted();
+            if (this.offset === this.chunk.length) {
+                if (++this.pulls > this.limits.maxPatternSteps)
+                    fail("overwrite input work limit exceeded");
+                if (this.pulls % 64 === 0)
+                    await yieldTurn(this.signal);
+                const next = await this.iterator.next();
+                if (next.done)
+                    break;
+                if (next.value.length > this.limits.maxFilesFromBytes - this.bytes)
+                    fail("overwrite input byte limit exceeded");
+                this.bytes += next.value.length;
+                this.chunk = Uint8Array.from(next.value);
+                this.offset = 0;
+                if (!this.chunk.length)
+                    continue;
+            }
+            const byte = this.chunk[this.offset++];
+            answer.push(byte);
+            if (byte === 10)
+                break;
+        }
+        return answer.length ? Buffer.from(answer).toString("utf8") : undefined;
+    }
+    async close() { await this.iterator.return?.(); }
+}
+//# sourceMappingURL=arguments.js.map

package/dist/safe-bash/commands/archive/unzip/arguments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arguments.js","sourceRoot":"","sources":["../../../../src/commands/archive/unzip/arguments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAwC,MAAM,6BAA6B,CAAC;AACnH,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAsB,MAAM,gBAAgB,CAAC;AAE3E,MAAM,UAAU,cAAc,CAAC,OAAwD,EAAE,MAAqB;IAC5G,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,GAAG,MAAM,CAAC,gBAAgB;YAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,IAAI,GAAG,MAAM,CAAC,gBAAgB,GAAG,QAAQ;gBAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;YACpF,QAAQ,IAAI,IAAI,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,MAAM;YAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,WAA+B,CAAC;IACpC,IAAI,OAA2B,CAAC;IAChC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YAC3D,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,IAAI,KAAK,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC;qBACzB,IAAI,IAAI,KAAK,GAAG;oBAAE,SAAS,GAAG,IAAI,CAAC;qBACnC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACtB,IAAI,WAAW,KAAK,SAAS;wBAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;oBACrE,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;oBAC1D,IAAI,CAAC,WAAW;wBAAE,IAAI,CAAC,2DAA2D,CAAC,CAAC;oBACpF,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;oBAC/B,MAAM;gBACR,CAAC;;oBAAM,IAAI,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,GAAG,QAAQ,CAAC;;YAChD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACtF,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC7D,CAAC;AAKD,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAE,CAAC;QACrC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAAC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;aACxF,IAAI,SAAS,KAAK,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;aACpD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;YAChF,IAAI,QAAQ;gBAAE,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,GAAuB,EAAE,CAAC;YACtC,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,OAAO,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;gBACnC,IAAI,KAAK,GAAG,UAAU,CAAC,KAAK,CAAE,CAAC;gBAC/B,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBAC5C,IAAI,KAAK,KAAK,IAAI;oBAAE,KAAK,GAAG,UAAU,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACtD,IAAI,IAAI,GAAG,KAAK,CAAC;gBACjB,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC5F,KAAK,IAAI,CAAC,CAAC;oBACX,IAAI,GAAG,UAAU,CAAC,KAAK,CAAE,CAAC;oBAC1B,IAAI,IAAI,KAAK,IAAI;wBAAE,IAAI,GAAG,UAAU,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACtD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;;YAAM,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,SAAS;IAIsC;IAAwC;IAH1F,IAAI,GAAG,CAAC,CAAC;IACA,QAAQ,CAAqB;IACrC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,YAAY,QAA2B,EAAmB,MAAqB,EAAmB,MAAmB;QAA3D,WAAM,GAAN,MAAM,CAAe;QAAmB,WAAM,GAAN,MAAM,CAAa;QACnH,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IACO,IAAI;QACV,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAE,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;oBACnD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACZ,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;wBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;yBACzF,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;wBACpD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAE,CAAC;wBACrC,IAAI,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;wBAC5F,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4BAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;4BACpB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gCACzC,IAAI,CAAC,IAAI,EAAE,CAAC;gCACZ,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,IAAI,KAAK,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,IAAI,IAAI;oCAAE,OAAO,GAAG,IAAI,CAAC;4BAC9F,CAAC;4BACD,KAAK,GAAG,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC;wBACrC,CAAC;wBACD,IAAI,KAAK;4BAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;oBACjC,CAAC;oBACD,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC;wBAAE,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,CAAC;QAChF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,OAAO,OAAO;IAM+B;IAAwC;IALxE,QAAQ,CAA4B;IAC7C,KAAK,GAAG,IAAI,UAAU,EAAE,CAAC;IACzB,MAAM,GAAG,CAAC,CAAC;IACX,KAAK,GAAG,CAAC,CAAC;IACV,KAAK,GAAG,CAAC,CAAC;IAClB,YAAY,MAAkB,EAAmB,MAAqB,EAAmB,MAAmB;QAA3D,WAAM,GAAN,MAAM,CAAe;QAAmB,WAAM,GAAN,MAAM,CAAa;QAC1G,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC;QACpB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtC,IAAI,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe;oBAAE,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBAC5F,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,CAAC;oBAAE,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,IAAI;oBAAE,MAAM;gBACrB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBAChH,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAChC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;oBAAE,SAAS;YACnC,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,IAAI,KAAK,EAAE;gBAAE,MAAM;QACzB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,KAAK,KAAoB,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;CACjE"}

package/dist/safe-bash/commands/archive/unzip/safety.d.ts

@@ -0,0 +1,28 @@
+import { type ByteSource, type CommandContext, type FileStat } from "../../../contracts/index.js";
+import { type ArchiveLimits } from "../internal.js";
+export declare class Extraction {
+    readonly context: CommandContext;
+    readonly limits: ArchiveLimits;
+    private readonly pending;
+    private readonly publications;
+    private readonly readers;
+    private closed;
+    private work;
+    private serial;
+    constructor(context: CommandContext, limits: ArchiveLimits);
+    operation<Value>(action: () => Promise<Value>): Promise<Value>;
+    close(): Promise<void>;
+    source(source: ByteSource): ByteSource;
+    input(path: string): ByteSource;
+    stat(path: string): Promise<FileStat | undefined>;
+    directory(raw: string, create: boolean): Promise<string>;
+    parents(root: string, path: string, create: boolean): Promise<void>;
+    member(root: string, name: string): string;
+    target(root: string, path: string, target: string): Promise<void>;
+    destination(path: string, archivePath: string, archiveStat: FileStat): Promise<FileStat | undefined>;
+    checked(root: string, path: string, expected: FileStat): Promise<void>;
+    metadata(root: string, path: string, identity: FileStat, mode: number, modified: Date): Promise<void>;
+    publish(root: string, path: string, chunks: readonly Uint8Array[], expected: FileStat | undefined, mode: number, modified: Date, target?: string): Promise<void>;
+    private stage;
+}
+//# sourceMappingURL=safety.d.ts.map

package/dist/safe-bash/commands/archive/unzip/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/unzip/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiD,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEjJ,OAAO,EAAuD,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEzG,qBAAa,UAAU;IAOT,QAAQ,CAAC,OAAO,EAAE,cAAc;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa;IAN5E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,MAAM,CAAK;gBACE,OAAO,EAAE,cAAc,EAAW,MAAM,EAAE,aAAa;IACtE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IAS9D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAM5B,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU;IAqB/B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;IAchC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAQjD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAaxD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAQpC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCjE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAOpG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAW3G,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAKlJ,KAAK;CA4DpB"}

package/dist/safe-bash/commands/archive/unzip/safety.js

@@ -0,0 +1,288 @@
+import { dirname, isPathWithin, readBytes, resolvePath } from "../../../contracts/index.js";
+import { retainFileSystemCleanup } from "@poe-platform/safe-fs/core";
+import { checkPath, display, fail, hasIdentity, sameIdentity } from "../internal.js";
+export class Extraction {
+    context;
+    limits;
+    pending = new Set();
+    publications = new Set();
+    readers = new Set();
+    closed = false;
+    work = 0;
+    serial = 0;
+    constructor(context, limits) {
+        this.context = context;
+        this.limits = limits;
+    }
+    async operation(action) {
+        this.context.signal.throwIfAborted();
+        if (this.closed)
+            fail("extraction is closed");
+        if (++this.work > this.limits.maxPatternSteps)
+            fail("filesystem work limit exceeded");
+        const pending = Promise.resolve().then(() => { this.context.signal.throwIfAborted(); return action(); });
+        this.pending.add(pending);
+        try {
+            const value = await pending;
+            this.context.signal.throwIfAborted();
+            return value;
+        }
+        finally {
+            this.pending.delete(pending);
+        }
+    }
+    async close() {
+        this.closed = true;
+        while (this.pending.size)
+            await Promise.allSettled([...this.pending]);
+        while (this.publications.size)
+            await Promise.allSettled([...this.publications]);
+        await Promise.allSettled([...this.readers].map(close => close()));
+    }
+    source(source) {
+        return { [Symbol.asyncIterator]: () => {
+                const state = {};
+                let closing;
+                const close = () => closing ??= (async () => {
+                    try {
+                        await state.iterator?.return?.();
+                    }
+                    finally {
+                        this.readers.delete(close);
+                    }
+                })();
+                this.readers.add(close);
+                this.context.signal.throwIfAborted();
+                state.iterator = source[Symbol.asyncIterator]();
+                return {
+                    next: () => this.operation(async () => {
+                        const result = await state.iterator.next();
+                        if (result.done)
+                            this.readers.delete(close);
+                        return result;
+                    }),
+                    async return() { await close(); return { done: true, value: undefined }; },
+                };
+            } };
+    }
+    async *input(path) {
+        const { fs, signal } = this.context;
+        const capabilities = await this.operation(async () => await fs.capabilitiesFor?.(path, { signal }) ?? fs.capabilities);
+        if (fs.readStream && capabilities.streamingRead !== false) {
+            const source = await this.operation(async () => fs.readStream(path, { signal, chunkSize: this.limits.chunkSize }));
+            yield* readBytes(this.source(source), signal);
+        }
+        else {
+            const stat = await this.operation(() => fs.stat(path, { signal }));
+            if (stat.size > this.limits.maxBufferedFileBytes)
+                fail("filesystem lacks streaming reads: buffered file limit exceeded");
+            const bytes = await this.operation(() => fs.readFile(path, { signal, maxBytes: this.limits.maxBufferedFileBytes }));
+            if (bytes.length > this.limits.maxBufferedFileBytes)
+                fail("buffered file limit exceeded");
+            yield bytes;
+        }
+    }
+    async stat(path) {
+        try {
+            return await this.operation(() => this.context.fs.lstat(path, { signal: this.context.signal }));
+        }
+        catch (error) {
+            this.context.signal.throwIfAborted();
+            if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT")
+                return undefined;
+            throw error;
+        }
+    }
+    async directory(raw, create) {
+        checkPath(raw, this.limits);
+        let current = "/";
+        const { fs, signal } = this.context;
+        for (const component of raw.split("/")) {
+            if (!component || component === ".")
+                continue;
+            current = resolvePath(current, component);
+            const stat = await this.stat(current);
+            if (!stat && create)
+                await this.operation(() => fs.mkdir(current, { signal, mode: 0o755 }));
+            else if (!stat || stat.type !== "directory")
+                fail(`unsafe non-directory or symlink ancestor: ${display(current)}`);
+        }
+        return current;
+    }
+    async parents(root, path, create) {
+        if (!isPathWithin(root, path))
+            fail("extraction path escapes root");
+        await this.directory(dirname(path), create);
+    }
+    member(root, name) {
+        checkPath(name, this.limits);
+        if (name.startsWith("/") || name.split("/").includes(".."))
+            fail(`unsafe archive member: ${display(name)}`);
+        const path = resolvePath(root, name);
+        checkPath(path, this.limits);
+        if (!isPathWithin(root, path))
+            fail("extraction path escapes root");
+        return path;
+    }
+    async target(root, path, target) {
+        checkPath(target, this.limits);
+        if (target.startsWith("/"))
+            fail("symlink target escapes extraction root");
+        let current = dirname(path);
+        const components = (value) => {
+            checkPath(value, this.limits);
+            let descended = false;
+            const result = value.split("/");
+            for (const component of result) {
+                if (component === ".." && descended)
+                    fail("unsafe non-leading parent in symlink target");
+                if (component && component !== "." && component !== "..")
+                    descended = true;
+            }
+            return result;
+        };
+        let pending = components(target);
+        let links = 0;
+        let steps = 0;
+        while (pending.length) {
+            if (++steps > this.limits.maxDepth * 41)
+                fail("symlink target resolution limit exceeded");
+            const component = pending.shift();
+            if (!component || component === ".")
+                continue;
+            if (component === "..") {
+                if (current === root)
+                    fail("symlink target escapes extraction root");
+                current = dirname(current);
+                continue;
+            }
+            const candidate = resolvePath(current, component);
+            checkPath(candidate, this.limits);
+            if (!isPathWithin(root, candidate))
+                fail("symlink target escapes extraction root");
+            const stat = await this.stat(candidate);
+            if (stat?.type === "symlink") {
+                if (++links > 40 || !this.context.fs.readlink)
+                    fail("symlink target chain cannot be safely resolved");
+                const link = await this.operation(() => this.context.fs.readlink(candidate, { signal: this.context.signal }));
+                if (link.startsWith("/"))
+                    fail("absolute symlink target chain is unsafe");
+                pending = [...components(link), ...pending];
+                if (pending.length > this.limits.maxDepth * 41)
+                    fail("symlink target resolution limit exceeded");
+            }
+            else
+                current = candidate;
+        }
+    }
+    async destination(path, archivePath, archiveStat) {
+        const stat = await this.stat(path);
+        if (path === archivePath || (stat && sameIdentity(stat, archiveStat)))
+            fail("entry would overwrite input archive");
+        if (stat && stat.type !== "file")
+            fail(`unsafe non-regular destination: ${display(path)}`);
+        if (stat && (!hasIdentity(stat) || !hasIdentity(archiveStat)))
+            fail("cannot overwrite file with unknown input-archive backing identity");
+        return stat;
+    }
+    async checked(root, path, expected) {
+        await this.parents(root, path, false);
+        const current = await this.stat(path);
+        if (!current || current.type !== expected.type || !sameIdentity(current, expected))
+            fail("extraction entry changed before mutation");
+    }
+    async metadata(root, path, identity, mode, modified) {
+        const { fs, signal } = this.context;
+        if (fs.chmod && fs.capabilities.permissions !== false) {
+            await this.checked(root, path, identity);
+            await this.operation(() => fs.chmod(path, mode & 0o777, { signal }));
+        }
+        if (fs.utimes && fs.capabilities.timestamps !== false) {
+            await this.checked(root, path, identity);
+            await this.operation(() => fs.utimes(path, modified.getTime(), modified.getTime(), { signal }));
+        }
+    }
+    publish(root, path, chunks, expected, mode, modified, target) {
+        const publication = this.stage(root, path, chunks, expected, mode, modified, target);
+        this.publications.add(publication);
+        return publication.finally(() => { this.publications.delete(publication); });
+    }
+    async stage(root, path, chunks, expected, mode, modified, target) {
+        const { fs, signal } = this.context;
+        let temporary = "";
+        let identity;
+        let created = false;
+        let failure;
+        const cleanup = retainFileSystemCleanup(fs, async (view) => {
+            if (!created || !identity)
+                return;
+            try {
+                let parent = "/";
+                for (const component of dirname(temporary).split("/").filter(Boolean)) {
+                    parent = resolvePath(parent, component);
+                    if ((await view.lstat(parent)).type !== "directory")
+                        return;
+                }
+                const current = await view.lstat(temporary);
+                if (current.type === identity.type && sameIdentity(current, identity))
+                    await view.rm(temporary);
+            }
+            catch (error) {
+                if (typeof error !== "object" || error === null || !("code" in error) || error.code !== "ENOENT")
+                    throw error;
+            }
+        }, { maxOperations: Math.min(4096, this.limits.maxDepth + 3) });
+        try {
+            await this.parents(root, path, true);
+            for (let attempt = 0; attempt < this.limits.maxMembers; attempt++) {
+                temporary = resolvePath(dirname(path), `.unzip-${++this.serial}`);
+                checkPath(temporary, this.limits);
+                if (temporary === path || await this.stat(temporary))
+                    continue;
+                await this.operation(async () => {
+                    if (target === undefined)
+                        await fs.writeFile(temporary, new Uint8Array(), { signal, flag: "wx", mode: 0o600 });
+                    else
+                        await fs.symlink(target, temporary, { signal });
+                    created = true;
+                    identity = await fs.lstat(temporary);
+                });
+                if (!identity || !hasIdentity(identity))
+                    fail("temporary file backing identity unavailable");
+                break;
+            }
+            if (!created)
+                fail("temporary file attempt limit exceeded");
+            if (target === undefined) {
+                for (const chunk of chunks) {
+                    await this.checked(root, temporary, identity);
+                    await this.operation(() => fs.appendFile(temporary, chunk, { signal }));
+                }
+                await this.metadata(root, temporary, identity, mode, modified);
+            }
+            await this.parents(root, path, false);
+            const current = await this.stat(path);
+            if (current ? !expected || !sameIdentity(current, expected) || current.type !== "file" : expected !== undefined)
+                fail("destination changed before publication");
+            const staging = await this.stat(temporary);
+            if (!staging || !identity || !sameIdentity(staging, identity) || staging.type !== (target === undefined ? "file" : "symlink"))
+                fail("temporary file changed before publication");
+            await this.operation(() => fs.rename(temporary, path, { signal }));
+            created = false;
+        }
+        catch (error) {
+            failure = { reason: error };
+        }
+        try {
+            await cleanup();
+        }
+        catch (error) {
+            if (failure)
+                throw new AggregateError([failure.reason, error], "unzip publication and cleanup failed");
+            throw error;
+        }
+        if (failure)
+            throw failure.reason;
+    }
+}
+//# sourceMappingURL=safety.js.map