@poe-platform/safe-bash 0.1.616 → 0.1.617

package/dist/safe-bash/core.browser.js

@@ -34,7 +34,7 @@ import {
   createLineEndingCommands,
   createUnix2dosCommand,
   lineEndingCommands
-} from "./chunks/chunk-F5TCC4UG.js";
+} from "./chunks/chunk-X55AMTNM.js";
 import {
   createLlmCommands,
   llmCommands
@@ -86,7 +86,7 @@ import {
   curlCommands,
   defaultNetworkLimits,
   networkCommands
-} from "./chunks/chunk-PFMSKAFQ.js";
+} from "./chunks/chunk-KYNRHYHP.js";
 import {
   RecordBuffer,
   UsageError,
@@ -138,12 +138,12 @@ import {
   exprMatchCeilings,
   matchEre,
   withRegexSession
-} from "./chunks/chunk-PW4WQSCS.js";
+} from "./chunks/chunk-3M5F7LD5.js";
 import {
   bindFileOutputBudget,
   openFileOutput,
   writeFileOutput
-} from "./chunks/chunk-CEPNDODE.js";
+} from "./chunks/chunk-4DBWBEU7.js";
 import {
   createOutputOperation
 } from "./chunks/chunk-RNKTWFEM.js";
@@ -26614,6 +26614,82 @@ init_platform();
 
 // packages/safe-bash/src/commands/archive/zip-format.ts
 init_platform();
+
+// packages/safe-bash/src/commands/archive/zip/zip64.ts
+init_platform();
+function wide(view, offset) {
+  if (offset < 0 || offset + 8 > view.byteLength) fail("ZIP64 truncated numeric field");
+  const value2 = view.getBigUint64(offset, true);
+  if (value2 > BigInt(Number.MAX_SAFE_INTEGER)) fail("ZIP64 unsafe numeric field");
+  return Number(value2);
+}
+function zip64Directory(view, end, limits) {
+  let members = view.getUint16(end + 10, true);
+  let centralSize = view.getUint32(end + 12, true);
+  let centralStart = view.getUint32(end + 16, true);
+  let centralEnd = end;
+  const diskMembers = view.getUint16(end + 8, true);
+  if (view.getUint16(end + 4, true) || view.getUint16(end + 6, true)) fail("ZIP multi-disk archive is unsupported");
+  const locator = end >= 20 && view.getUint32(end - 20, true) === 117853008;
+  if (locator) {
+    if (view.getUint32(end - 16, true) || view.getUint32(end - 4, true) !== 1) fail("ZIP64 multi-disk locator is unsupported");
+    centralEnd = wide(view, end - 12);
+    if (centralEnd + 56 > end - 20 || view.getUint32(centralEnd, true) !== 101075792) fail("ZIP64 invalid end-record span");
+    const length = wide(view, centralEnd + 4);
+    if (length < 44 || length - 44 > limits.maxPaxBytes || centralEnd + 12 + length !== end - 20) fail("ZIP64 invalid end-record length");
+    if (view.getUint16(centralEnd + 14, true) !== 45) fail("ZIP64 unsupported end-record extraction version");
+    if (view.getUint32(centralEnd + 16, true) || view.getUint32(centralEnd + 20, true)) fail("ZIP64 multi-disk archive is unsupported");
+    const count2 = wide(view, centralEnd + 32);
+    if (wide(view, centralEnd + 24) !== count2 || members !== 65535 && members !== count2 || diskMembers !== 65535 && diskMembers !== count2) fail("ZIP64 inconsistent member count");
+    const size = wide(view, centralEnd + 40);
+    const start = wide(view, centralEnd + 48);
+    if (centralSize !== 4294967295 && centralSize !== size || centralStart !== 4294967295 && centralStart !== start) fail("ZIP64 inconsistent central directory");
+    members = count2;
+    centralSize = size;
+    centralStart = start;
+  } else if (members === 65535 || centralSize === 4294967295 || centralStart === 4294967295) fail("ZIP64 missing end record and locator");
+  else if (diskMembers !== members) fail("ZIP inconsistent member count");
+  if (members > limits.maxMembers) fail("ZIP member limit exceeded");
+  if (centralStart > limits.maxArchiveBytes || centralSize > limits.maxArchiveBytes || centralStart + centralSize !== centralEnd) fail("ZIP invalid central directory span");
+  return { members, centralStart, centralSize, centralEnd };
+}
+function zip64Fields(data2, values) {
+  let offset = 0;
+  const view = data2 && new DataView(data2.buffer, data2.byteOffset, data2.byteLength);
+  return values.map((value2, index) => {
+    if (value2 !== 4294967295) return value2;
+    if (!view) fail("ZIP64 missing required extra field");
+    const width = index === 3 ? 4 : 8;
+    if (offset + width > view.byteLength) fail("ZIP64 truncated extra field");
+    const resolved = width === 4 ? view.getUint32(offset, true) : wide(view, offset);
+    offset += width;
+    return resolved;
+  });
+}
+function stripZip64(bytes3) {
+  const view = new DataView(bytes3.buffer, bytes3.byteOffset, bytes3.byteLength);
+  const retained = [];
+  let length = 0;
+  for (let offset2 = 0; offset2 < bytes3.length; ) {
+    if (offset2 + 4 > bytes3.length) fail("ZIP truncated extra field");
+    const next = offset2 + 4 + view.getUint16(offset2 + 2, true);
+    if (next > bytes3.length) fail("ZIP truncated extra field payload");
+    if (view.getUint16(offset2, true) !== 1) {
+      retained.push(bytes3.subarray(offset2, next));
+      length += next - offset2;
+    }
+    offset2 = next;
+  }
+  const result = new Uint8Array(length);
+  let offset = 0;
+  for (const field2 of retained) {
+    result.set(field2, offset);
+    offset += field2.length;
+  }
+  return result;
+}
+
+// packages/safe-bash/src/commands/archive/zip-format.ts
 var encoder2 = new TextEncoder();
 var cp437 = "\xC7\xFC\xE9\xE2\xE4\xE0\xE5\xE7\xEA\xEB\xE8\xEF\xEE\xEC\xC4\xC5\xC9\xE6\xC6\xF4\xF6\xF2\xFB\xF9\xFF\xD6\xDC\xA2\xA3\xA5\u20A7\u0192\xE1\xED\xF3\xFA\xF1\xD1\xAA\xBA\xBF\u2310\xAC\xBD\xBC\xA1\xAB\xBB\u2591\u2592\u2593\u2502\u2524\u2561\u2562\u2556\u2555\u2563\u2551\u2557\u255D\u255C\u255B\u2510\u2514\u2534\u252C\u251C\u2500\u253C\u255E\u255F\u255A\u2554\u2569\u2566\u2560\u2550\u256C\u2567\u2568\u2564\u2565\u2559\u2558\u2552\u2553\u256B\u256A\u2518\u250C\u2588\u2584\u258C\u2590\u2580\u03B1\xDF\u0393\u03C0\u03A3\u03C3\xB5\u03C4\u03A6\u0398\u03A9\u03B4\u221E\u03C6\u03B5\u2229\u2261\xB1\u2265\u2264\u2320\u2321\xF7\u2248\xB0\u2219\xB7\u221A\u207F\xB2\u25A0\xA0";
 var crcTable4 = Uint32Array.from({ length: 256 }, (_, index) => {
@@ -26670,7 +26746,10 @@ function extras(bytes3, rawName, comment2, central, limits) {
     if (offset + length > bytes3.length) fail("ZIP truncated extra field payload");
     if (seen.has(identifier)) fail("ZIP duplicate extra field");
     seen.add(identifier);
-    if (identifier === 1) fail("ZIP64 is unsupported");
+    if (identifier === 1) {
+      if (!length || length > 28 || length % 4) fail("ZIP64 invalid extra field length");
+      result.zip64 = bytes3.subarray(offset, offset + length);
+    }
     if (identifier === 39169 || identifier === 23 || identifier === 24 || identifier === 25) fail("ZIP encryption is unsupported");
     if (identifier === 28789 || identifier === 25461) {
       if (length < 5 || bytes3[offset] !== 1) fail("ZIP unsupported or truncated Unicode extra field");
@@ -26706,7 +26785,7 @@ function format(method, flags3, version) {
   if (flags3 & (1 | 64 | 8192)) fail("ZIP encryption is unsupported");
   if (flags3 & ~2062 || method === 0 && flags3 & 6) fail("ZIP unsupported general purpose flags");
   if (method !== 0 && method !== 8) fail("ZIP unsupported compression method");
-  if (version < (method === 8 || flags3 & 8 ? 20 : 10) || version > 20) fail("ZIP unsupported extraction version (including ZIP64)");
+  if (version < (method === 8 || flags3 & 8 ? 20 : 10) || version > 20 && version !== 45) fail("ZIP unsupported extraction version (including ZIP64)");
 }
 function dosModified(date2, time) {
   if (!date2 && !time) return new Date(1980, 0, 1);
@@ -26758,13 +26837,7 @@ async function readZipArchive(bytes3, limits, signal) {
     }
   }
   if (end === -1) fail("ZIP truncated or missing end of central directory");
-  const members = view.getUint16(end + 10, true);
-  const centralSize = view.getUint32(end + 12, true);
-  const centralStart = view.getUint32(end + 16, true);
-  if (members === 65535 || centralSize === 4294967295 || centralStart === 4294967295) fail("ZIP64 is unsupported");
-  if (view.getUint16(end + 4, true) || view.getUint16(end + 6, true) || view.getUint16(end + 8, true) !== members) fail("ZIP multi-disk or inconsistent member count is unsupported");
-  if (centralStart + centralSize !== end) fail("ZIP invalid central directory span or unsupported ZIP64/trailing records");
-  number3(members, limits.maxMembers, "member");
+  const { members, centralStart, centralEnd } = zip64Directory(view, end, limits);
   number3(bytes3.length - end - 22, limits.maxTextBytes, "archive comment");
   const entries2 = [];
   const spans = [];
@@ -26772,7 +26845,7 @@ async function readZipArchive(bytes3, limits, signal) {
   let total = 0;
   for (let index = 0; index < members; index++) {
     await yieldTurn(signal);
-    if (offset + 46 > end || view.getUint32(offset, true) !== 33639248) fail("ZIP truncated or invalid central header");
+    if (offset + 46 > centralEnd || view.getUint32(offset, true) !== 33639248) fail("ZIP truncated or invalid central header");
     const versionMadeBy = view.getUint16(offset + 4, true);
     const version = view.getUint16(offset + 6, true);
     const flags3 = view.getUint16(offset + 8, true);
@@ -26781,29 +26854,32 @@ async function readZipArchive(bytes3, limits, signal) {
     const dosTime = view.getUint16(offset + 12, true);
     const dosDate = view.getUint16(offset + 14, true);
     const checksum = view.getUint32(offset + 16, true);
-    const compressedSize = view.getUint32(offset + 20, true);
-    const size = view.getUint32(offset + 24, true);
+    let compressedSize = view.getUint32(offset + 20, true);
+    let size = view.getUint32(offset + 24, true);
     const nameLength = view.getUint16(offset + 28, true);
     const extraLength = view.getUint16(offset + 30, true);
     const commentLength = view.getUint16(offset + 32, true);
     const internalAttributes = view.getUint16(offset + 36, true);
     if (internalAttributes & ~1) fail("ZIP unsupported internal attributes");
     const externalAttributes = view.getUint32(offset + 38, true);
-    const local = view.getUint32(offset + 42, true);
-    if (view.getUint16(offset + 34, true)) fail("ZIP multi-disk member is unsupported");
-    if (compressedSize === 4294967295 || size === 4294967295 || local === 4294967295) fail("ZIP64 is unsupported");
-    number3(size, limits.maxEntryBytes, "entry byte");
-    if (method === 0 && compressedSize !== size) fail("ZIP stored size mismatch");
-    total += size;
-    number3(total, limits.maxTotalBytes, "total byte");
+    let local = view.getUint32(offset + 42, true);
+    const disk = view.getUint16(offset + 34, true);
     const next = offset + 46 + nameLength + extraLength + commentLength;
-    if (next > end) fail("ZIP truncated central metadata");
+    if (next > centralEnd) fail("ZIP truncated central metadata");
     number3(commentLength, limits.maxTextBytes, "entry comment");
     const rawName = bytes3.subarray(offset + 46, offset + 46 + nameLength);
     const centralExtra = bytes3.subarray(offset + 46 + nameLength, next - commentLength);
     const comment2 = bytes3.subarray(next - commentLength, next);
     if (flags3 & 2048) text2(comment2);
     const centralMetadata = extras(centralExtra, rawName, comment2, true, limits);
+    const resolved = zip64Fields(centralMetadata.zip64, [size, compressedSize, local, disk === 65535 ? 4294967295 : disk]);
+    [size, compressedSize, local] = resolved;
+    if (resolved[3]) fail("ZIP multi-disk member is unsupported");
+    number3(size, limits.maxEntryBytes, "entry byte");
+    number3(compressedSize, limits.maxArchiveBytes, "compressed entry byte");
+    if (method === 0 && compressedSize !== size) fail("ZIP stored size mismatch");
+    total += size;
+    number3(total, limits.maxTotalBytes, "total byte");
     const name2 = nameFrom(rawName, flags3, centralMetadata, limits);
     if (local + 30 > centralStart || view.getUint32(local, true) !== 67324752) fail("ZIP invalid local header span");
     if (view.getUint16(local + 4, true) !== version || view.getUint16(local + 6, true) !== flags3 || view.getUint16(local + 8, true) !== method || view.getUint16(local + 10, true) !== dosTime || view.getUint16(local + 12, true) !== dosDate) fail("ZIP central/local metadata mismatch");
@@ -26819,15 +26895,22 @@ async function readZipArchive(bytes3, limits, signal) {
     const localEffective = nameFrom(localName, flags3, localMetadata, limits);
     if (localMetadata.name !== void 0 && localEffective !== name2) fail("ZIP central/local Unicode name mismatch");
     if (centralMetadata.modified !== void 0 && localMetadata.modified !== void 0 && centralMetadata.modified !== localMetadata.modified) fail("ZIP central/local timestamp mismatch");
-    for (const [position, expected] of [[14, checksum], [18, compressedSize], [22, size]]) {
-      const actual = view.getUint32(local + position, true);
+    const rawLocalSize = view.getUint32(local + 22, true);
+    const rawLocalCompressed = view.getUint32(local + 18, true);
+    const [localSize, localCompressed] = zip64Fields(localMetadata.zip64, [rawLocalSize, rawLocalCompressed]);
+    for (const [actual, expected] of [[view.getUint32(local + 14, true), checksum], [localCompressed, compressedSize], [localSize, size]]) {
       if (actual !== expected && (!(flags3 & 8) || actual !== 0)) fail("ZIP central/local size or CRC mismatch");
     }
     if (flags3 & 8) {
       const matches2 = [];
       for (const signed2 of [false, true]) {
         const descriptor = payloadEnd + (signed2 ? 4 : 0);
-        if (descriptor + 12 <= centralStart && (!signed2 || view.getUint32(payloadEnd, true) === 134695760) && view.getUint32(descriptor, true) === checksum && view.getUint32(descriptor + 4, true) === compressedSize && view.getUint32(descriptor + 8, true) === size) matches2.push(descriptor + 12);
+        const wide2 = rawLocalSize === 4294967295 || rawLocalCompressed === 4294967295;
+        const length = wide2 ? 20 : 12;
+        if (descriptor + length > centralStart || signed2 && view.getUint32(payloadEnd, true) !== 134695760 || view.getUint32(descriptor, true) !== checksum) continue;
+        const compressed2 = wide2 ? view.getBigUint64(descriptor + 4, true) : BigInt(view.getUint32(descriptor + 4, true));
+        const expanded = wide2 ? view.getBigUint64(descriptor + 12, true) : BigInt(view.getUint32(descriptor + 8, true));
+        if (compressed2 === BigInt(compressedSize) && expanded === BigInt(size)) matches2.push(descriptor + length);
       }
       if (matches2.length !== 1) fail("ZIP truncated, ambiguous or mismatched data descriptor");
       payloadEnd = matches2[0];
@@ -26847,7 +26930,7 @@ async function readZipArchive(bytes3, limits, signal) {
     spans.push({ start: local, end: payloadEnd });
     offset = next;
   }
-  if (offset !== end) fail("ZIP central directory size or member count mismatch");
+  if (offset !== centralEnd) fail("ZIP central directory size or member count mismatch");
   spans.sort((first, second) => first.start - second.start);
   let covered = 0;
   for (const span of spans) {
@@ -26968,8 +27051,12 @@ async function writeZipArchive(archive, limits, signal, descriptors = false) {
     const comment2 = entry.comment ?? new Uint8Array();
     number3(comment2.length, Math.min(limits.maxTextBytes, 65535), "entry comment");
     if (flags3 & 2048) text2(comment2);
-    const localExtra = entry.localExtra ?? timestampExtra(entry.modified);
-    const centralExtra = entry.centralExtra ?? timestampExtra(entry.modified);
+    const originalLocalExtra = entry.localExtra ?? timestampExtra(entry.modified);
+    extras(originalLocalExtra, rawName, comment2, false, limits);
+    const localExtra = stripZip64(originalLocalExtra);
+    const originalCentralExtra = entry.centralExtra ?? timestampExtra(entry.modified);
+    extras(originalCentralExtra, rawName, comment2, true, limits);
+    const centralExtra = stripZip64(originalCentralExtra);
     const localMetadata = extras(localExtra, rawName, comment2, false, limits);
     const centralMetadata = extras(centralExtra, rawName, comment2, true, limits);
     if (nameFrom(rawName, flags3, centralMetadata, limits) !== entry.name || localMetadata.name !== void 0 && nameFrom(rawName, flags3, localMetadata, limits) !== entry.name || entry.localName && !equal(rawName, entry.localName)) fail("ZIP retained filename metadata mismatch");