@poe-platform/safe-bash 0.1.656 → 0.1.658

package/dist/safe-bash/commands/archive/zip/safety.js

@@ -1,5 +1,6 @@
 import { readBytes } from "../../../contracts/index.js";
 import { retainFileSystemCleanup } from "@poe-platform/safe-fs/core";
+import { writeFileOutput } from "../../../contracts/filesystem-output.js";
 import { checkPath, fail } from "../internal.js";
 export class ZipScope {
     original;
@@ -10,6 +11,7 @@ export class ZipScope {
     readers = new Set();
     closedReason = new Error("ZIP command is closed");
     drain;
+    inputDrain;
     work = 0;
     stdinSource;
     constructor(original, limits) {
@@ -23,17 +25,21 @@ export class ZipScope {
             this.drain = Promise.resolve().then(async () => {
                 while (this.pending.size)
                     await Promise.allSettled([...this.pending]);
-                const results = await Promise.allSettled([...this.readers].map(close => close()));
-                const failures = results.filter(result => result.status === "rejected").map(result => result.reason);
-                if (failures.length === 1)
-                    throw failures[0];
-                if (failures.length)
-                    throw new AggregateError(failures, "ZIP reader cleanup failed");
+                await this.closeInputs();
             });
             this.controller.abort(this.original.signal.aborted ? this.original.signal.reason : this.closedReason);
         }
         return this.drain;
     };
+    closeInputs() {
+        return this.inputDrain ??= Promise.allSettled([...this.readers].map(close => close())).then(results => {
+            const failures = results.filter(result => result.status === "rejected").map(result => result.reason);
+            if (failures.length === 1)
+                throw failures[0];
+            if (failures.length)
+                throw new AggregateError(failures, "ZIP reader cleanup failed");
+        });
+    }
     async operation(action) {
         this.context.signal.throwIfAborted();
         if (++this.work > this.limits.maxPatternSteps)
@@ -63,10 +69,13 @@ export class ZipScope {
     get stdin() {
         return this.stdinSource ??= this.source(this.original.stdin);
     }
-    source(source) {
+    source(source, controller) {
+        if (this.inputDrain)
+            fail("ZIP inputs are closed");
         const iterator = source[Symbol.asyncIterator]();
         let closing;
         const close = () => closing ??= (async () => {
+            controller?.abort(this.closedReason);
             try {
                 await iterator.return?.();
             }
@@ -85,11 +94,15 @@ export class ZipScope {
                 async return() { await close(); return { done: true, value: undefined }; },
             }) };
     }
-    async *input(path) {
-        const { fs, signal } = this.context;
+    async *input(path, fifo = false) {
+        const { fs } = this.context;
+        const controller = new AbortController();
+        const signal = AbortSignal.any([this.context.signal, controller.signal]);
         const capabilities = await this.operation(() => fs.capabilitiesFor?.(path, { signal }) ?? fs.capabilities);
+        if (fifo && (!fs.readStream || capabilities.streamingRead !== true))
+            fail("filesystem lacks explicit FIFO byte stream capability");
         if (fs.readStream && capabilities.streamingRead !== false) {
-            const source = await this.operation(() => this.source(fs.readStream(path, { signal, chunkSize: this.limits.chunkSize })));
+            const source = await this.operation(() => this.source(fs.readStream(path, { signal, chunkSize: this.limits.chunkSize }), controller));
             yield* readBytes(source, signal);
         }
         else {
@@ -103,11 +116,14 @@ export class ZipScope {
         }
     }
 }
-export async function publishZip(scope, prepared) {
+/** Own a temporary archive through acquisition, writing, consumption and cleanup. */
+export async function stageZip(scope, prepared, consume) {
     const { fs, signal } = scope.context;
-    const capabilities = await scope.operation(() => fs.capabilitiesFor?.(prepared.output, { signal, create: true }) ?? fs.capabilities);
-    if (capabilities.atomicFileStaging !== true || !fs.createStagedFile || !fs.publishStagedFile || !fs.removeStagedFile)
-        fail("ZIP publication requires atomic owned file staging");
+    const capabilities = await scope.operation(() => fs.capabilitiesFor?.(prepared.parent, { signal }) ?? fs.capabilities);
+    if (capabilities.atomicFileStaging !== true || !fs.createStagedFile || !fs.removeStagedFile)
+        fail("ZIP temporary path requires atomic owned file staging");
+    if (prepared.source && (capabilities.atomicFileMutation !== true || !fs.writeFileConditional))
+        fail("ZIP temporary path requires atomic conditional writes");
     let staging;
     let failure;
     const close = retainFileSystemCleanup(fs, async (cleanup) => {
@@ -119,14 +135,14 @@ export async function publishZip(scope, prepared) {
     }, { maxOperations: 16 });
     try {
         for (let attempt = 0; attempt < Math.min(64, scope.limits.maxMembers); attempt++) {
-            const path = `${prepared.parent === "/" ? "" : prepared.parent}/.zip-${attempt + 1}`;
+            const path = `${prepared.parent === "/" ? "" : prepared.parent}/.${prepared.stagingPrefix ?? "zip"}-${attempt + 1}`;
             checkPath(path, scope.limits);
             checkPath(`${path}/archive.zip`, scope.limits);
-            if (path === prepared.output)
+            if (path === prepared.reservedPath)
                 continue;
             try {
                 await scope.operation(async () => {
-                    staging = await fs.createStagedFile(path, "archive.zip", { type: "file", data: prepared.bytes }, {
+                    staging = await fs.createStagedFile(path, "archive.zip", { type: "file", data: prepared.bytes ?? new Uint8Array() }, {
                         signal, parent: prepared.parentStat, ...(prepared.existing ? { mode: prepared.existing.mode & 0o7777 } : {}),
                         ...(prepared.mtimeMs === undefined ? {} : { mtimeMs: prepared.mtimeMs, atimeMs: prepared.mtimeMs }),
                     });
@@ -141,14 +157,25 @@ export async function publishZip(scope, prepared) {
         }
         if (!staging)
             fail("ZIP temporary directory attempt limit exceeded");
+        if (prepared.source) {
+            for await (const chunk of readBytes(prepared.source, signal)) {
+                try {
+                    await writeFileOutput(scope.context, chunk, bytes => scope.operation(async () => {
+                        const stat = await fs.writeFileConditional(staging.file.path, bytes, {
+                            signal, parent: staging.directory.stat, expected: staging.file.stat, append: true,
+                        });
+                        staging = { ...staging, file: { path: staging.file.path, stat } };
+                    }));
+                }
+                catch (error) {
+                    void scope.closeInputs().catch(() => { });
+                    throw error;
+                }
+            }
+        }
         if (prepared.mtimeMs !== undefined && (staging.file.stat.mtimeMs !== prepared.mtimeMs || staging.file.stat.atimeMs !== prepared.mtimeMs))
             fail("ZIP staging did not retain archive modification time");
-        const parent = await scope.operation(() => fs.realpath(prepared.parentName, { signal }));
-        if (parent !== prepared.parent)
-            fail("archive parent changed before publication");
-        await scope.operation(() => fs.publishStagedFile(staging, prepared.output, {
-            signal, parent: prepared.parentStat, destination: prepared.existing ?? null,
-        }));
+        await consume(staging);
     }
     catch (error) {
         failure = { reason: error };
@@ -164,4 +191,27 @@ export async function publishZip(scope, prepared) {
     if (failure)
         throw failure.reason;
 }
+export async function publishZip(scope, prepared) {
+    const { fs, signal } = scope.context;
+    const capabilities = await scope.operation(() => fs.capabilitiesFor?.(prepared.output, { signal, create: true }) ?? fs.capabilities);
+    if (capabilities.atomicFileStaging !== true || !fs.publishStagedFile)
+        fail("ZIP publication requires atomic owned file staging");
+    await stageZip(scope, {
+        ...prepared, reservedPath: prepared.output, parent: prepared.stagingParent ?? prepared.parent, parentStat: prepared.stagingParentStat ?? prepared.parentStat,
+    }, async (staging) => {
+        if (prepared.validate)
+            await prepared.validate(staging.file.path);
+        if (prepared.stagingName !== undefined) {
+            const current = await scope.operation(() => fs.realpath(prepared.stagingName, { signal }));
+            if (current !== prepared.stagingParent)
+                fail("ZIP temporary path changed before publication");
+        }
+        const parent = await scope.operation(() => fs.realpath(prepared.parentName, { signal }));
+        if (parent !== prepared.parent)
+            fail("archive parent changed before publication");
+        await scope.operation(() => fs.publishStagedFile(staging, prepared.output, {
+            signal, parent: prepared.parentStat, destination: prepared.existing ?? null,
+        }));
+    });
+}
 //# sourceMappingURL=safety.js.map

package/dist/safe-bash/commands/archive/zip/safety.js.map

@@ -1 +1 @@
-{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyE,MAAM,6BAA6B,CAAC;AAC/H,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAsB,MAAM,gBAAgB,CAAC;AAErE,MAAM,OAAO,QAAQ;IASU;IAAmC;IARvD,OAAO,CAAiB;IAChB,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,YAAY,GAAG,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3D,KAAK,CAA4B;IACjC,IAAI,GAAG,CAAC,CAAC;IACT,WAAW,CAAyB;IAC5C,YAA6B,QAAwB,EAAW,MAAqB;QAAxD,aAAQ,GAAR,QAAQ,CAAgB;QAAW,WAAM,GAAN,MAAM,CAAe;QACnF,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnG,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACQ,KAAK,GAAG,GAAkB,EAAE;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI;oBAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC7C,IAAI,QAAQ,CAAC,MAAM;oBAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;YACvF,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;IACF,KAAK,CAAC,SAAS,CAAQ,MAAwC;QAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;IAC7C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACxG,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,CAAC,MAAkB;QACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,IAAI,OAAkC,CAAC;QACvC,MAAM,KAAK,GAAG,GAAkB,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;YACzD,IAAI,CAAC;gBAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAAC,CAAC;oBAC1B,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;oBACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACrC,IAAI,MAAM,CAAC,IAAI;wBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC5C,OAAO,MAAM,CAAC;gBAChB,CAAC,CAAC;gBACF,KAAK,CAAC,MAAM,KAAK,MAAM,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;aACpF,CAAC,EAAE,CAAC;IACP,CAAC;IACD,KAAK,CAAC,CAAC,KAAK,CAAC,IAAY;QACvB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;QAC3G,IAAI,EAAE,CAAC,UAAU,IAAI,YAAY,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAW,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3H,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACnE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB;gBAAE,IAAI,CAAC,gEAAgE,CAAC,CAAC;YACzH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;YACpH,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB;gBAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC1F,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAYD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAe,EAAE,QAAwB;IACxE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;IACrI,IAAI,YAAY,CAAC,iBAAiB,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,gBAAgB,IAAI,CAAC,EAAE,CAAC,iBAAiB,IAAI,CAAC,EAAE,CAAC,gBAAgB;QAAE,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACjL,IAAI,OAAgC,CAAC;IACrC,IAAI,OAAwC,CAAC;IAC7C,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;QACxD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,gBAAgB;gBAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACtE,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,SAAS,OAAO,GAAG,CAAC,EAAE,CAAC;YACrF,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9B,SAAS,CAAC,GAAG,IAAI,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,QAAQ,CAAC,MAAM;gBAAE,SAAS;YACvC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;oBAC/B,OAAO,GAAG,MAAM,EAAE,CAAC,gBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE;wBAChG,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5G,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;qBACpG,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAChH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACvM,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAClF,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,iBAAkB,CAAC,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE;YAC3E,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI;SAC5E,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,CAAC;IAChD,IAAI,CAAC;QAAC,MAAM,KAAK,EAAE,CAAC;IAAC,CAAC;IACtB,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,OAAO;YAAE,MAAM,IAAI,cAAc,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,oCAAoC,CAAC,CAAC;QACrG,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC,MAAM,CAAC;AACpC,CAAC"}
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyE,MAAM,6BAA6B,CAAC;AAC/H,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAsB,MAAM,gBAAgB,CAAC;AAErE,MAAM,OAAO,QAAQ;IAUU;IAAmC;IATvD,OAAO,CAAiB;IAChB,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,YAAY,GAAG,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3D,KAAK,CAA4B;IACjC,UAAU,CAA4B;IACtC,IAAI,GAAG,CAAC,CAAC;IACT,WAAW,CAAyB;IAC5C,YAA6B,QAAwB,EAAW,MAAqB;QAAxD,aAAQ,GAAR,QAAQ,CAAgB;QAAW,WAAM,GAAN,MAAM,CAAe;QACnF,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnG,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACQ,KAAK,GAAG,GAAkB,EAAE;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI;oBAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;IACF,WAAW;QACT,OAAO,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YACpG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,MAAM;gBAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CAAQ,MAAwC;QAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;IAC7C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACxG,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,CAAC,MAAkB,EAAE,UAA4B;QACrD,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,IAAI,OAAkC,CAAC;QACvC,MAAM,KAAK,GAAG,GAAkB,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;YACzD,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,CAAC;gBAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAAC,CAAC;oBAC1B,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;oBACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACrC,IAAI,MAAM,CAAC,IAAI;wBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC5C,OAAO,MAAM,CAAC;gBAChB,CAAC,CAAC;gBACF,KAAK,CAAC,MAAM,KAAK,MAAM,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;aACpF,CAAC,EAAE,CAAC;IACP,CAAC;IACD,KAAK,CAAC,CAAC,KAAK,CAAC,IAAY,EAAE,IAAI,GAAG,KAAK;QACrC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;QAC3G,IAAI,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,IAAI,YAAY,CAAC,aAAa,KAAK,IAAI,CAAC;YAAE,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACnI,IAAI,EAAE,CAAC,UAAU,IAAI,YAAY,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAW,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YACvI,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACnE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB;gBAAE,IAAI,CAAC,gEAAgE,CAAC,CAAC;YACzH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;YACpH,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB;gBAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC1F,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA4BD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAe,EAAE,QAAoB,EAAE,OAAgD;IACpH,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;IACvH,IAAI,YAAY,CAAC,iBAAiB,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,gBAAgB,IAAI,CAAC,EAAE,CAAC,gBAAgB;QAAE,IAAI,CAAC,uDAAuD,CAAC,CAAC;IAC3J,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC;QAAE,IAAI,CAAC,uDAAuD,CAAC,CAAC;IAC7J,IAAI,OAAgC,CAAC;IACrC,IAAI,OAAwC,CAAC;IAC7C,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;QACxD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,gBAAgB;gBAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACtE,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,aAAa,IAAI,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACpH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9B,SAAS,CAAC,GAAG,IAAI,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,QAAQ,CAAC,YAAY;gBAAE,SAAS;YAC7C,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;oBAC/B,OAAO,GAAG,MAAM,EAAE,CAAC,gBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,UAAU,EAAE,EAAE,EAAE;wBACpH,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5G,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;qBACpG,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAChH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC;oBAAC,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;wBACpF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,oBAAqB,CAAC,OAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;4BACrE,MAAM,EAAE,MAAM,EAAE,OAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI;yBACpF,CAAC,CAAC;wBACH,OAAO,GAAG,EAAE,GAAG,OAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;oBACtE,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACpB,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACzC,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACvM,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,CAAC;IAChD,IAAI,CAAC;QAAC,MAAM,KAAK,EAAE,CAAC;IAAC,CAAC;IACtB,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,OAAO;YAAE,MAAM,IAAI,cAAc,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,oCAAoC,CAAC,CAAC;QACrG,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC,MAAM,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAe,EAAE,QAAwB;IACxE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;IACrI,IAAI,YAAY,CAAC,iBAAiB,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,iBAAiB;QAAE,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACjI,MAAM,QAAQ,CAAC,KAAK,EAAE;QACpB,GAAG,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,iBAAiB,IAAI,QAAQ,CAAC,UAAU;KAC7J,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;QACjB,IAAI,QAAQ,CAAC,QAAQ;YAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAY,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5F,IAAI,OAAO,KAAK,QAAQ,CAAC,aAAa;gBAAE,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAClF,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,iBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YAC1E,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI;SAC5E,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/safe-bash/commands/archive/zip/sfx.d.ts

@@ -0,0 +1,5 @@
+import { type ArchiveLimits } from "../internal.js";
+import { type ZipArchive } from "../zip-format.js";
+/** Accept only a complete validated archive following a prefix. Never execute it. */
+export declare function readZipSfx(bytes: Uint8Array, limits: ArchiveLimits, signal: AbortSignal, password?: Uint8Array): Promise<ZipArchive>;
+//# sourceMappingURL=sfx.d.ts.map

package/dist/safe-bash/commands/archive/zip/sfx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sfx.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/sfx.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAkC,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnF,qFAAqF;AACrF,wBAAsB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAkC1I"}

package/dist/safe-bash/commands/archive/zip/sfx.js

@@ -0,0 +1,56 @@
+import { yieldTurn } from "../../../contracts/yield.js";
+import { fail } from "../internal.js";
+import { decodeZipEntry, readZipArchive } from "../zip-format.js";
+/** Accept only a complete validated archive following a prefix. Never execute it. */
+export async function readZipSfx(bytes, limits, signal, password) {
+    signal.throwIfAborted();
+    if (bytes.length > limits.maxArchiveBytes)
+        fail("ZIP archive byte limit exceeded");
+    let archive;
+    try {
+        archive = await readZipArchive(bytes, limits, signal, { prefix: true });
+    }
+    catch {
+        signal.throwIfAborted();
+    }
+    if (!archive) {
+        const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+        let attempts = 0;
+        // Unadjusted SFX offsets are relative to the embedded ZIP. Signature
+        // recognition only nominates a candidate; the strict reader proves all spans.
+        for (let offset = 1; offset + 22 <= bytes.length; offset++) {
+            if (offset > limits.maxPatternSteps)
+                fail("ZIP SFX scan work limit exceeded");
+            if (offset % 4096 === 0)
+                await yieldTurn(signal);
+            const signature = view.getUint32(offset, true);
+            if (signature !== 0x04034b50 && signature !== 0x06054b50)
+                continue;
+            if (++attempts > Math.min(64, limits.maxMembers))
+                fail("ZIP SFX candidate limit exceeded");
+            let candidate;
+            try {
+                candidate = await readZipArchive(bytes.subarray(offset), limits, signal);
+            }
+            catch {
+                signal.throwIfAborted();
+                continue;
+            }
+            archive = candidate;
+            break;
+        }
+    }
+    if (!archive)
+        fail("ZIP SFX prefix does not contain a validated archive");
+    // CRC/expanded-size validation is required before prefix removal publication.
+    let decoded = 0;
+    for (const entry of archive.entries) {
+        for await (const chunk of decodeZipEntry(entry, limits, signal, password)) {
+            if (chunk.length > limits.maxTotalBytes - decoded)
+                fail("ZIP SFX decoded byte limit exceeded");
+            decoded += chunk.length;
+        }
+    }
+    return archive;
+}
+//# sourceMappingURL=sfx.js.map

package/dist/safe-bash/commands/archive/zip/sfx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sfx.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/sfx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,IAAI,EAAsB,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAmB,MAAM,kBAAkB,CAAC;AAEnF,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAiB,EAAE,MAAqB,EAAE,MAAmB,EAAE,QAAqB;IACnH,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACnF,IAAI,OAA+B,CAAC;IACpC,IAAI,CAAC;QAAC,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAChF,MAAM,CAAC;QAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAAC,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,qEAAqE;QACrE,8EAA8E;QAC9E,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;YAC3D,IAAI,MAAM,GAAG,MAAM,CAAC,eAAe;gBAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC9E,IAAI,MAAM,GAAG,IAAI,KAAK,CAAC;gBAAE,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,UAAU;gBAAE,SAAS;YACnE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC;gBAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC3F,IAAI,SAAqB,CAAC;YAC1B,IAAI,CAAC;gBAAC,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YACjF,MAAM,CAAC;gBAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC5C,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,qDAAqD,CAAC,CAAC;IAC1E,8EAA8E;IAC9E,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC1E,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,GAAG,OAAO;gBAAE,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAC/F,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/safe-bash/commands/archive/zip/test-command.d.ts

@@ -0,0 +1,6 @@
+import { Budget } from "../internal.js";
+import type { ZipScope } from "./safety.js";
+/** A literal argv grammar: spaces, quotes and backslash escapes, with no shell. */
+export declare function parseZipTestCommand(value: string): readonly string[];
+export declare function testZipCommand(scope: ZipScope, command: readonly string[] | undefined, path: string, budget: Budget, archive: string, quiet: boolean, password?: Uint8Array): Promise<void>;
+//# sourceMappingURL=test-command.d.ts.map

package/dist/safe-bash/commands/archive/zip/test-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-command.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/test-command.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAQ,MAAM,gBAAgB,CAAC;AAE9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAwBpE;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCjM"}

package/dist/safe-bash/commands/archive/zip/test-command.js

@@ -0,0 +1,101 @@
+import { shellValueFromBytes } from "../../../contracts/value.js";
+import { createCommandArguments, toByteSource } from "../../../contracts/index.js";
+import { Budget, fail } from "../internal.js";
+import { ZipFailure, zipPublicText } from "./options.js";
+/** A literal argv grammar: spaces, quotes and backslash escapes, with no shell. */
+export function parseZipTestCommand(value) {
+    const words = [];
+    let word = "";
+    let quote = "";
+    let active = false;
+    for (let index = 0; index < value.length; index++) {
+        const character = value[index];
+        if ("\n\r\0;|&<>$`".includes(character))
+            throw new ZipFailure(16, "Invalid command arguments", "unsupported virtual test-command syntax");
+        if (character === "\\" && quote !== "'") {
+            const next = value[++index];
+            if (next === undefined || "\n\r\0;|&<>$`".includes(next))
+                throw new ZipFailure(16, "Invalid command arguments", "invalid test-command escape");
+            word += next;
+            active = true;
+        }
+        else if (quote) {
+            if (character === quote)
+                quote = "";
+            else
+                word += character;
+        }
+        else if (character === "'" || character === '"') {
+            quote = character;
+            active = true;
+        }
+        else if (character === " " || character === "\t") {
+            if (active) {
+                words.push(word);
+                word = "";
+                active = false;
+            }
+        }
+        else {
+            word += character;
+            active = true;
+        }
+    }
+    if (quote)
+        throw new ZipFailure(16, "Invalid command arguments", "unterminated test-command quote");
+    if (active)
+        words.push(word);
+    if (!words[0] || words[0].includes("{}"))
+        throw new ZipFailure(16, "Invalid command arguments", "invalid virtual test command");
+    return words;
+}
+export async function testZipCommand(scope, command, path, budget, archive, quiet, password) {
+    const { context, limits } = scope;
+    let outputBytes = 0;
+    const sink = { async write(chunk) {
+            context.signal.throwIfAborted();
+            if (chunk.length > limits.maxTextBytes - outputBytes)
+                fail("ZIP test-command output limit exceeded");
+            outputBytes += chunk.length;
+        } };
+    try {
+        if (!context.invoke)
+            fail("virtual command invocation unavailable");
+        const virtualCommand = command ?? ["unzip", "-tqq"];
+        const placeholders = virtualCommand.slice(1).some(word => word.includes("{}"));
+        let argumentBytes = command === undefined && password !== undefined ? password.length + 4 : 0;
+        for (const word of virtualCommand.slice(1)) {
+            let placeholders = 0;
+            for (let index = 0; index + 1 < word.length; index++)
+                if (word[index] === "{" && word[index + 1] === "}") {
+                    placeholders++;
+                    index++;
+                }
+            const size = Buffer.byteLength(word) + placeholders * (Buffer.byteLength(path) - 2) + 1;
+            if (size > limits.maxArgumentBytes - argumentBytes)
+                fail("ZIP test-command argument byte limit exceeded");
+            argumentBytes += size;
+        }
+        if (!placeholders && Buffer.byteLength(path) + 1 > limits.maxArgumentBytes - argumentBytes)
+            fail("ZIP test-command argument byte limit exceeded");
+        const args = virtualCommand.slice(1).map(word => word.split("{}").join(path));
+        if (!placeholders)
+            args.push(path);
+        const values = createCommandArguments(command === undefined && password !== undefined ? ["-P", shellValueFromBytes(password), ...args] : args);
+        const result = await scope.operation(() => context.invoke(virtualCommand[0], values.args, {
+            argumentValues: values,
+            signal: context.signal, stdin: toByteSource(""), stdinIsDefault: true, stdout: sink, stderr: sink,
+        }));
+        if (result.exitCode !== 0)
+            fail("ZIP virtual test command failed");
+    }
+    catch {
+        context.signal.throwIfAborted();
+        if (!quiet)
+            await budget.output(`test of ${zipPublicText(archive)} FAILED\n`);
+        throw new ZipFailure(8, "Zip file invalid, could not spawn unzip, or wrong unzip", "virtual test command failed; original files unmodified");
+    }
+    if (!quiet)
+        await budget.output(`test of ${zipPublicText(archive)} OK\n`);
+}
+//# sourceMappingURL=test-command.js.map

package/dist/safe-bash/commands/archive/zip/test-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-command.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/test-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAiB,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGzD,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAChC,IAAI,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,EAAE,EAAE,2BAA2B,EAAE,yCAAyC,CAAC,CAAC;QAC1I,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,EAAE,EAAE,2BAA2B,EAAE,6BAA6B,CAAC,CAAC;YAC/I,IAAI,IAAI,IAAI,CAAC;YACb,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,IAAI,SAAS,KAAK,KAAK;gBAAE,KAAK,GAAG,EAAE,CAAC;;gBAAM,IAAI,IAAI,SAAS,CAAC;QAC9D,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,SAAS,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;QAAC,CAAC;aACnF,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACjD,IAAI,MAAM,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,IAAI,GAAG,EAAE,CAAC;gBAAC,MAAM,GAAG,KAAK,CAAC;YAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YAAC,IAAI,IAAI,SAAS,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;QAAC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK;QAAE,MAAM,IAAI,UAAU,CAAC,EAAE,EAAE,2BAA2B,EAAE,iCAAiC,CAAC,CAAC;IACpG,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,EAAE,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC;IAChI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAe,EAAE,OAAsC,EAAE,IAAY,EAAE,MAAc,EAAE,OAAe,EAAE,KAAc,EAAE,QAAqB;IAChL,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAClC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,IAAI,GAAa,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;YACxC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,GAAG,WAAW;gBAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACrG,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;QAC9B,CAAC,EAAE,CAAC;IACJ,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACpE,MAAM,cAAc,GAAG,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,aAAa,GAAG,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE;gBAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,YAAY,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;YACtI,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,YAAY,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACxF,IAAI,IAAI,GAAG,MAAM,CAAC,gBAAgB,GAAG,aAAa;gBAAE,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAC1G,aAAa,IAAI,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,gBAAgB,GAAG,aAAa;YAAE,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAClJ,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,mBAAmB,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/I,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAO,CAAC,cAAc,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,IAAI,EAAE;YAC1F,cAAc,EAAE,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI;SAClG,CAAC,CAAC,CAAC;QACJ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9E,MAAM,IAAI,UAAU,CAAC,CAAC,EAAE,yDAAyD,EAAE,wDAAwD,CAAC,CAAC;IAC/I,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC5E,CAAC"}

package/dist/safe-bash/commands/archive/zip/volumes.d.ts

@@ -0,0 +1,22 @@
+import { type FileStat } from "../../../contracts/index.js";
+import { type ArchiveLimits, type ZipHost } from "../internal.js";
+import { type ZipPublication, type ZipScope } from "./safety.js";
+import { type ZipDisks } from "./zip64.js";
+export declare function splitSize(value: string): number;
+export declare function volumeName(archive: string, disk: number, disks: number): string;
+export declare function zipEndOffset(bytes: Uint8Array): number;
+/** Input disks are supplied by the host, then read solely through the invocation VFS. */
+export declare function resolveZipVolumes(scope: Pick<ZipScope, "context" | "limits" | "operation" | "stat" | "input">, archive: string, final: Uint8Array, host?: ZipHost): Promise<{
+    bytes: Uint8Array;
+    disks?: ZipDisks;
+    paths: readonly string[];
+    volumes?: readonly {
+        path: string;
+        stat: FileStat;
+    }[];
+}>;
+/** Partition a validated single-disk encoding, preserving record boundaries and ciphertext. */
+export declare function splitZipVolumes(input: Uint8Array, size: number, limits: ArchiveLimits, signal: AbortSignal): Promise<Uint8Array[]>;
+/** All destinations preflight; all volumes staged before the first per-volume publication. */
+export declare function publishZipVolumes(scope: ZipScope, publication: ZipPublication, parts: readonly Uint8Array[], inputPaths: readonly string[], before: (path: string, disk: number) => Promise<void>): Promise<void>;
+//# sourceMappingURL=volumes.d.ts.map

package/dist/safe-bash/commands/archive/zip/volumes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"volumes.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/volumes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,QAAQ,EAAoB,MAAM,6BAA6B,CAAC;AAG5F,OAAO,EAAuD,KAAK,aAAa,EAAE,KAAK,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEvH,OAAO,EAAY,KAAK,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAA+B,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAExE,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAU/C;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAWtD;AAED,yFAAyF;AACzF,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC,CA6C3S;AAID,+FAA+F;AAC/F,wBAAsB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CA4FxI;AAED,8FAA8F;AAC9F,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCvN"}