@poe-platform/safe-bash 0.1.656 → 0.1.658

package/dist/safe-bash/commands/archive/zip/aes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/aes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,YAAY,EAAmB,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,SAAS,aAAa;IACpB,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,CAAC,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,CAAU,CAAC;IACzF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAU,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC;QAAE,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACvH,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAqC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,OAAO,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAQ,CAAC;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC5K,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAuB,EAAE,OAAO,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAChF,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC/G,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,GAAG,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,IAAI,CAAC,QAAoB,EAAE,IAAgB,EAAE,GAAW,EAAE,MAAmB;IACpF,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACxC,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAAC,CAAC;IACjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAiB,EAAE,GAAe,EAAE,GAAW,EAAE,MAAmB;IAC3F,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC,cAAc,CAAC,OAAO,GAAG,CAAC,QAAQ,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACpF,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,wEAAwE;QACxE,uEAAuE;QACvE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC5D,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;gBAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC5H,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE;gBAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;YACxC,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAkB,EAAE,UAA2C,EAAE,QAAgB,EAAE,MAAmB;IAC5I,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,SAAiC,CAAC;IACtC,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,QAAoB,CAAC;QACzB,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC/D,MAAM,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAAC,CAAC;QAC7E,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,QAAQ,YAAY,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC9G,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/G,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAChD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAgB,EAAE,QAAoB,EAAE,GAAW,EAAE,QAAgB,EAAE,MAAmB;IAChI,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACnD,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,6CAA6C,CAAC,CAAC;IACzH,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,EAAE;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,EAAE,CAAC;IAC1C,IAAI,IAAI,GAAG,QAAQ;QAAE,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC1E,gFAAgF;IAChF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1I,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/G,MAAM,SAAS,GAAG,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;QACrG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtD,OAAO,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAc;IAClD,aAAa,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/safe-bash/commands/archive/zip/crypto.d.ts

@@ -1,4 +1,20 @@
 import { type ByteSource } from "../../../contracts/index.js";
+import { type ZipHost } from "../internal.js";
+import { PublicDiagnostic } from "../../../diagnostics.js";
+import type { ZipAes } from "./aes.js";
+/** Fixed capability diagnostics may be shown without credential-text filtering. */
+export declare class ZipHostFailure extends PublicDiagnostic {
+    readonly code: "no-echo" | "entropy" | "entropy-failed" | "entropy-bytes" | "prompt-failed" | "prompt-eof" | "password-bytes" | "password-empty" | "password-confirm";
+    constructor(code: "no-echo" | "entropy" | "entropy-failed" | "entropy-bytes" | "prompt-failed" | "prompt-eof" | "password-bytes" | "password-empty" | "password-confirm");
+}
+export interface ZipEncryption {
+    readonly aes?: ZipAes;
+    readonly password: Uint8Array;
+    readonly entropy: NonNullable<ZipHost["entropy"]>;
+}
+export declare function encryptZipPayload(source: ByteSource, encryption: ZipEncryption, verifier: number, signal: AbortSignal): ByteSource;
+export declare function decryptZipPayload(source: ByteSource, password: Uint8Array, verifier: number, signal: AbortSignal): ByteSource;
+export declare function readZipPassword(host: ZipHost | undefined, maxBytes: number, signal: AbortSignal, confirm: boolean): Promise<Uint8Array>;
 /** Traditional PKZIP byte transformation; callers own header/password checks. */
 export declare function zipCrypto(source: ByteSource, password: Uint8Array, decode: boolean, signal: AbortSignal): AsyncGenerator<Uint8Array>;
 //# sourceMappingURL=crypto.d.ts.map

package/dist/safe-bash/commands/archive/zip/crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAIzE,iFAAiF;AACjF,wBAAuB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,cAAc,CAAC,UAAU,CAAC,CA2B3I"}
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAGzE,OAAO,EAAQ,KAAK,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,mFAAmF;AACnF,qBAAa,cAAe,SAAQ,gBAAgB;IACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,gBAAgB,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,kBAAkB;gBAA5J,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,gBAAgB,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,kBAAkB;CAalL;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;CACnD;AAED,wBAAuB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,UAAU,CAezI;AAED,wBAAuB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,UAAU,CAWpI;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAmB7I;AAED,iFAAiF;AACjF,wBAAuB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,cAAc,CAAC,UAAU,CAAC,CA2B3I"}

package/dist/safe-bash/commands/archive/zip/crypto.js

@@ -1,6 +1,91 @@
 import { readBytes } from "../../../contracts/index.js";
 import { yieldTurn } from "../../../contracts/yield.js";
 import { crcTable } from "./crc.js";
+import { fail } from "../internal.js";
+import { PublicDiagnostic } from "../../../diagnostics.js";
+/** Fixed capability diagnostics may be shown without credential-text filtering. */
+export class ZipHostFailure extends PublicDiagnostic {
+    code;
+    constructor(code) {
+        super({
+            "no-echo": "ZIP no-echo password capability is unavailable",
+            entropy: "ZIP entropy capability is unavailable",
+            "entropy-failed": "ZIP entropy capability failed",
+            "entropy-bytes": "ZIP entropy capability must return 11 bytes",
+            "prompt-failed": "ZIP password capability failed",
+            "prompt-eof": "ZIP EOF while reading password",
+            "password-bytes": "ZIP invalid password bytes",
+            "password-empty": "zero length password not allowed",
+            "password-confirm": "password verification failed",
+        }[code]);
+        this.code = code;
+    }
+}
+export async function* encryptZipPayload(source, encryption, verifier, signal) {
+    signal.throwIfAborted();
+    const password = new Uint8Array(encryption.password);
+    let random;
+    try {
+        random = await encryption.entropy(11, signal);
+    }
+    catch (error) {
+        signal.throwIfAborted();
+        throw new ZipHostFailure(error instanceof ZipHostFailure && error.code === "entropy" ? "entropy" : "entropy-failed");
+    }
+    signal.throwIfAborted();
+    if (!(random instanceof Uint8Array) || random.length !== 11)
+        throw new ZipHostFailure("entropy-bytes");
+    const header = new Uint8Array(12);
+    header.set(random);
+    header[11] = verifier;
+    yield* zipCrypto((async function* () { yield header; yield* readBytes(source, signal); })(), password, false, signal);
+}
+export async function* decryptZipPayload(source, password, verifier, signal) {
+    let header = 0;
+    for await (const chunk of zipCrypto(source, new Uint8Array(password), true, signal)) {
+        let offset = 0;
+        while (header < 12 && offset < chunk.length) {
+            if (header === 11 && chunk[offset] !== verifier)
+                fail("ZIP incorrect password");
+            header++;
+            offset++;
+        }
+        if (offset < chunk.length)
+            yield chunk.subarray(offset);
+    }
+    if (header !== 12)
+        fail("ZIP truncated encryption header");
+}
+export async function readZipPassword(host, maxBytes, signal, confirm) {
+    if (!host?.password)
+        throw new ZipHostFailure("no-echo");
+    const read = async (prompt) => {
+        signal.throwIfAborted();
+        let bytes;
+        try {
+            bytes = await host.password({ prompt, maxBytes, signal });
+        }
+        catch {
+            signal.throwIfAborted();
+            throw new ZipHostFailure("prompt-failed");
+        }
+        signal.throwIfAborted();
+        if (!bytes)
+            throw new ZipHostFailure("prompt-eof");
+        if (!(bytes instanceof Uint8Array) || bytes.length > maxBytes || bytes.includes(0))
+            throw new ZipHostFailure("password-bytes");
+        return new Uint8Array(bytes);
+    };
+    const password = await read("Enter password: ");
+    if (confirm) {
+        if (!password.length)
+            throw new ZipHostFailure("password-empty");
+        const repeated = await read("Verify password: ");
+        if (password.length !== repeated.length || password.some((byte, index) => byte !== repeated[index]))
+            throw new ZipHostFailure("password-confirm");
+    }
+    return password;
+}
 /** Traditional PKZIP byte transformation; callers own header/password checks. */
 export async function* zipCrypto(source, password, decode, signal) {
     signal.throwIfAborted();

package/dist/safe-bash/commands/archive/zip/crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAmB,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,iFAAiF;AACjF,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,SAAS,CAAC,MAAkB,EAAE,QAAoB,EAAE,MAAe,EAAE,MAAmB;IAC7G,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,IAAI,GAAG,UAAU,EAAE,IAAI,GAAG,UAAU,EAAE,IAAI,GAAG,UAAU,CAAC;IAC5D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;QACpC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAE,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,GAAG,GAAG,CAAE,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACpD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC5D,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;YACtE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAE,CAAC;gBACrC,MAAM,SAAS,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC9E,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;YAC9B,CAAC;YACD,MAAM,MAAM,CAAC;YACb,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAmB,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,IAAI,EAAgB,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,mFAAmF;AACnF,MAAM,OAAO,cAAe,SAAQ,gBAAgB;IAC7B;IAArB,YAAqB,IAA4J;QAC/K,KAAK,CAAC;YACJ,SAAS,EAAE,gDAAgD;YAC3D,OAAO,EAAE,uCAAuC;YAChD,gBAAgB,EAAE,+BAA+B;YACjD,eAAe,EAAE,6CAA6C;YAC9D,eAAe,EAAE,gCAAgC;YACjD,YAAY,EAAE,gCAAgC;YAC9C,gBAAgB,EAAE,4BAA4B;YAC9C,gBAAgB,EAAE,kCAAkC;YACpD,kBAAkB,EAAE,8BAA8B;SACnD,CAAC,IAAI,CAAC,CAAC,CAAC;QAXU,SAAI,GAAJ,IAAI,CAAwJ;IAYjL,CAAC;CACF;AAQD,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,iBAAiB,CAAC,MAAkB,EAAE,UAAyB,EAAE,QAAgB,EAAE,MAAmB;IAC3H,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACtD,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,cAAc,CAAC,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,CAAC,CAAC,MAAM,YAAY,UAAU,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,eAAe,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC;IACtB,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,CAAC,MAAM,MAAM,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACxH,CAAC;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,iBAAiB,CAAC,MAAkB,EAAE,QAAoB,EAAE,QAAgB,EAAE,MAAmB;IACtH,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACpF,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,EAAE,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,IAAI,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAChF,MAAM,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,KAAK,EAAE;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAyB,EAAE,QAAgB,EAAE,MAAmB,EAAE,OAAgB;IACtH,IAAI,CAAC,IAAI,EAAE,QAAQ;QAAE,MAAM,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAuB,EAAE;QACzD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,KAA6B,CAAC;QAClC,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,IAAI,CAAC,QAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QACnE,MAAM,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,MAAM,IAAI,cAAc,CAAC,eAAe,CAAC,CAAC;QAAC,CAAC;QAC7E,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAC/H,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;IACpJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,SAAS,CAAC,MAAkB,EAAE,QAAoB,EAAE,MAAe,EAAE,MAAmB;IAC7G,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,IAAI,GAAG,UAAU,EAAE,IAAI,GAAG,UAAU,EAAE,IAAI,GAAG,UAAU,CAAC;IAC5D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;QACpC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAE,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,GAAG,GAAG,CAAE,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACpD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC5D,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;YACtE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAE,CAAC;gBACrC,MAAM,SAAS,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC9E,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;YAC9B,CAAC;YACD,MAAM,MAAM,CAAC;YACb,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/safe-bash/commands/archive/zip/grow.d.ts

@@ -0,0 +1,4 @@
+import type { ZipEntry } from "../zip-format.js";
+/** Owned local records from an explicitly requested, validated grow read. */
+export declare const zipGrowRecords: WeakMap<ZipEntry, Uint8Array<ArrayBufferLike>>;
+//# sourceMappingURL=grow.d.ts.map

package/dist/safe-bash/commands/archive/zip/grow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grow.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/grow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD,6EAA6E;AAC7E,eAAO,MAAM,cAAc,gDAAsC,CAAC"}

package/dist/safe-bash/commands/archive/zip/grow.js

@@ -0,0 +1,3 @@
+/** Owned local records from an explicitly requested, validated grow read. */
+export const zipGrowRecords = new WeakMap();
+//# sourceMappingURL=grow.js.map

package/dist/safe-bash/commands/archive/zip/grow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grow.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/grow.ts"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,OAAO,EAAwB,CAAC"}

package/dist/safe-bash/commands/archive/zip/help.d.ts

@@ -1,3 +1,5 @@
-export declare const zipHelp = "safe-bash zip\nUsage: zip [options] archive [file ...]\n       zip [options] - [file ...]       write an archive to stdout\n       zip [options] archive -          read a member from stdin\n\n  -r          recurse into directories\n  -j          store basenames, discarding directory paths\n  -q          suppress progress messages\n  -0          store without compression\n  -1 .. -9    select compression effort\n  -Z METHOD   select store, deflate, or bzip2 compression\n  -n SUFFIXES store matching suffixes (colon-separated)\n  -u / -f     update / freshen existing members\n  -d / -U     delete / copy selected archive members\n  -FS         synchronize selected members with filesystem sources\n  -O FILE     write to a separate output archive\n  -m          remove archived sources after successful publication\n  -D / -y     omit directory entries / store symlinks\n  -i / -x     include / exclude matching names\n  -@          read filenames from stdin\n  -t / -tt    select files from / before a date\n  -T          test archive integrity before replacement\n  -z / -c     read archive / entry comments from stdin\n  -o          set archive time to the latest member time\n  -l          convert text LF line endings to CRLF\n  -X          strip optional metadata\n  -fz / -fz-  force / disable ZIP64 output\n  -fd         force data descriptors\n  -h          show this help\n\nUse -- after the archive name to pass filenames beginning with '-'.\nLong option equivalents are accepted, for example --junk-paths and\n--compression-method=bzip2. All filesystem operations use the virtual filesystem.\n";
-export declare const zipExtendedHelp = "safe-bash zip\nUsage: zip [options] archive [file ...]\n       zip [options] - [file ...]       write an archive to stdout\n       zip [options] archive -          read a member from stdin\n\n  -r          recurse into directories\n  -j          store basenames, discarding directory paths\n  -q          suppress progress messages\n  -0          store without compression\n  -1 .. -9    select compression effort\n  -Z METHOD   select store, deflate, or bzip2 compression\n  -n SUFFIXES store matching suffixes (colon-separated)\n  -u / -f     update / freshen existing members\n  -d / -U     delete / copy selected archive members\n  -FS         synchronize selected members with filesystem sources\n  -O FILE     write to a separate output archive\n  -m          remove archived sources after successful publication\n  -D / -y     omit directory entries / store symlinks\n  -i / -x     include / exclude matching names\n  -@          read filenames from stdin\n  -t / -tt    select files from / before a date\n  -T          test archive integrity before replacement\n  -z / -c     read archive / entry comments from stdin\n  -o          set archive time to the latest member time\n  -l          convert text LF line endings to CRLF\n  -X          strip optional metadata\n  -fz / -fz-  force / disable ZIP64 output\n  -fd         force data descriptors\n  -h          show this help\n\nUse -- after the archive name to pass filenames beginning with '-'.\nLong option equivalents are accepted, for example --junk-paths and\n--compression-method=bzip2. All filesystem operations use the virtual filesystem.\n\nSelection\n  -r traverses listed directories; -R recursively searches matching names.\n  Do not combine -r and -R. -D omits directory records without stopping traversal.\n  -i patterns and -x patterns accept lists ending at another option or at @.\n  Quote patterns to prevent the shell expanding them before zip receives them.\n  Exclusions take precedence over inclusions. -j flattens selected source names;\n  duplicate basenames fail before the archive is replaced.\n  -nw disables wildcard interpretation; -ws prevents wildcards crossing '/'.\n  -MM makes missing input matches fatal. -t includes files from a date; -tt\n  selects files before a date. Dates accept mmddyyyy or yyyy-mm-dd.\n  -y stores the symbolic link itself; otherwise its target is read.\n  -p accepts the native paths compatibility flag and does not undo -j.\n\nArchive operations\n  The default action adds new members and replaces selected existing members.\n  -u updates changed/new sources; -f freshens existing members only.\n  -d deletes matching archive members; -U copies matching archive members.\n  -FS synchronizes selected existing members, including missing sources.\n  -O output.zip preserves the input archive and publishes a separate output.\n  -m removes sources only after successful publication or stdout completion.\n  Removal needs atomic filesystem support; excluded/nonempty directories remain.\n  -T checks integrity before replacement. With stdout output it is ignored.\n  -z reads an archive comment; -c reads selected member comments in archive order.\n  -X strips optional metadata; -X- preserves available metadata.\n  -o sets the archive timestamp to the newest resulting member timestamp.\n\nCompression and format\n  -Z selects store, deflate, or bzip2; method names accept unique prefixes.\n  -1 through -9 select effort. Store selection remains through later levels.\n  -n .jpg:.png stores matching suffixes; -9 overrides suffix-based storage.\n  Compression may fall back to STORE for regular files when it expands data.\n  -l converts text LF to CRLF, leaving detected binary input unchanged.\n  -fz forces ZIP64; -fz- disables it. -fd forces signed data descriptors.\n  BZIP2 members use extraction version 4.6, including with ZIP64 records.\n\nStreaming\n  A '-' input filename reads one member from stdin, named '-'.\n  A '-' archive name writes binary archive bytes to stdout and progress to stderr.\n  With no archive or file operands, zip acts as a stdin-to-stdout filter.\n  Streamed members retain compression even if it expands their data.\n  -@ instead reads newline-separated input filenames; it cannot also read a '-'\n  payload from the same stdin. Empty filename lines are ignored.\n  Complete the output stream before using the resulting archive.\n\nArguments and ZIPOPT\n  Long options accept unique abbreviations and --option=value where appropriate.\n  Use -- after the archive name for literal filenames beginning with '-'.\n  ZIPOPT supplies default arguments before the command arguments. Double quotes\n  group words inside ZIPOPT; shell expansion is not performed on these defaults.\n  -h and -h2 print basic and extended help as soon as they are encountered.\n";
+export declare const zipHelp = "safe-bash zip\nUsage: zip [options] archive [file ...]\n       zip [options] - [file ...]       write an archive to stdout\n       zip [options] archive -          read a member from stdin\n\n  -r          recurse into directories\n  -j          store basenames, discarding directory paths\n  -q          suppress progress messages\n  -0          store without compression\n  -1 .. -9    select compression effort\n  -Z METHOD   select store, deflate, bzip2, or lzma compression\n  --encryption PROFILE  select zipcrypto or aes-{128,192,256}-ae{1,2}\n  -n SUFFIXES store matching suffixes (colon-separated)\n  -u / -f     update / freshen existing members\n  -d / -U     delete / copy selected archive members\n  -FS         synchronize selected members with filesystem sources\n  -O FILE     write to a separate output archive\n  -A          adjust validated SFX offsets, retaining the inert prefix\n  -F / -FF    repair from central / local records (requires -O FILE)\n  -s SIZE     split into .z01/.z02/.../.zip volumes (minimum 64k; 0 recombines)\n  -sp         approve volume transitions using an explicit host prompt\n  -sv / -sb   report split volumes / ring before a split-pause prompt\n  -m          remove archived sources after successful publication\n  -D / -y     omit directory entries / store symlinks\n  -i / -x     include / exclude matching names\n  -RE         enable bracket-list glob matching (already enabled on Unix)\n  -k          convert new source names to portable ASCII DOS 8.3 names\n  -FI / -FI-  enable / disable explicit VFS FIFO byte sources\n  -@          read filenames from stdin\n  -t / -tt    select files from / before a date\n  -T          test archive integrity before replacement\n  -P PASSWORD encrypt new members with a supplied password\n  -e          request and confirm a password through a no-echo host capability\n  -z / -c     read archive / entry comments from stdin\n  -o          set archive time to the latest member time\n  -l          convert text LF line endings to CRLF\n  -ll         convert text CRLF line endings to LF (--from-crlf)\n  -X          strip optional metadata\n  -fz / -fz-  force / disable ZIP64 output\n  -fd         force data descriptors\n  -v          verbose operation (a lone -v shows implementation information)\n  --version   show implementation information and exit\n  -L          show this implementation's license\n  -sf / -sf-  list selected files / totals only, without creating an archive\n  -sc         show processed arguments and exit with status 9\n  -so         show implemented options and exit\n  -sd         show virtual archive processing steps\n  -db / -dc   display byte / entry counters\n  -du / -dv   display entry size / single-volume numbers\n  -dd / -dg   display dots per entry / globally for output bytes\n  -ds SIZE    dot interval (kmgt units; default MB; 0 disables dots)\n  -h          show this help\n\nUse -- after the archive name to pass filenames beginning with '-'.\nLong option equivalents are accepted, for example --junk-paths and\n--compression-method=bzip2. All filesystem operations use the virtual filesystem.\n";
+export declare const zipExtendedHelp = "safe-bash zip\nUsage: zip [options] archive [file ...]\n       zip [options] - [file ...]       write an archive to stdout\n       zip [options] archive -          read a member from stdin\n\n  -r          recurse into directories\n  -j          store basenames, discarding directory paths\n  -q          suppress progress messages\n  -0          store without compression\n  -1 .. -9    select compression effort\n  -Z METHOD   select store, deflate, bzip2, or lzma compression\n  --encryption PROFILE  select zipcrypto or aes-{128,192,256}-ae{1,2}\n  -n SUFFIXES store matching suffixes (colon-separated)\n  -u / -f     update / freshen existing members\n  -d / -U     delete / copy selected archive members\n  -FS         synchronize selected members with filesystem sources\n  -O FILE     write to a separate output archive\n  -A          adjust validated SFX offsets, retaining the inert prefix\n  -F / -FF    repair from central / local records (requires -O FILE)\n  -s SIZE     split into .z01/.z02/.../.zip volumes (minimum 64k; 0 recombines)\n  -sp         approve volume transitions using an explicit host prompt\n  -sv / -sb   report split volumes / ring before a split-pause prompt\n  -m          remove archived sources after successful publication\n  -D / -y     omit directory entries / store symlinks\n  -i / -x     include / exclude matching names\n  -RE         enable bracket-list glob matching (already enabled on Unix)\n  -k          convert new source names to portable ASCII DOS 8.3 names\n  -FI / -FI-  enable / disable explicit VFS FIFO byte sources\n  -@          read filenames from stdin\n  -t / -tt    select files from / before a date\n  -T          test archive integrity before replacement\n  -P PASSWORD encrypt new members with a supplied password\n  -e          request and confirm a password through a no-echo host capability\n  -z / -c     read archive / entry comments from stdin\n  -o          set archive time to the latest member time\n  -l          convert text LF line endings to CRLF\n  -ll         convert text CRLF line endings to LF (--from-crlf)\n  -X          strip optional metadata\n  -fz / -fz-  force / disable ZIP64 output\n  -fd         force data descriptors\n  -v          verbose operation (a lone -v shows implementation information)\n  --version   show implementation information and exit\n  -L          show this implementation's license\n  -sf / -sf-  list selected files / totals only, without creating an archive\n  -sc         show processed arguments and exit with status 9\n  -so         show implemented options and exit\n  -sd         show virtual archive processing steps\n  -db / -dc   display byte / entry counters\n  -du / -dv   display entry size / single-volume numbers\n  -dd / -dg   display dots per entry / globally for output bytes\n  -ds SIZE    dot interval (kmgt units; default MB; 0 disables dots)\n  -h          show this help\n\nUse -- after the archive name to pass filenames beginning with '-'.\nLong option equivalents are accepted, for example --junk-paths and\n--compression-method=bzip2. All filesystem operations use the virtual filesystem.\n\nSelection\n  -RE / --regex means bracket lists, not general regular expressions.\n  -k / --DOS-names converts components after selection and -j; collisions fail.\n  DOS conversion is restricted to printable ASCII. Filters parsed after -k\n  are DOS-converted before matching original case-sensitive source names.\n  -FI / --fifo requires a VFS-reported FIFO and explicit streamingRead capability.\n  FIFO payloads are bounded and cancellation-aware; producer failure aborts output.\n  -r traverses listed directories; -R recursively searches matching names.\n  Do not combine -r and -R. -D omits directory records without stopping traversal.\n  -i patterns and -x patterns accept lists ending at another option or at @.\n  Quote patterns to prevent the shell expanding them before zip receives them.\n  Exclusions take precedence over inclusions. -j flattens selected source names;\n  duplicate basenames fail before the archive is replaced.\n  -nw disables wildcard interpretation; -ws prevents wildcards crossing '/'.\n  -MM makes missing input matches fatal. -t includes files from a date; -tt\n  selects files before a date. Dates accept mmddyyyy or yyyy-mm-dd.\n  -y stores the symbolic link itself; otherwise its target is read.\n  -p accepts the native paths compatibility flag and does not undo -j.\n\nArchive operations\n  The default action adds new members and replaces selected existing members.\n  -u updates changed/new sources; -f freshens existing members only.\n  -d deletes matching archive members; -U copies matching archive members.\n  -FS synchronizes selected existing members, including missing sources.\n  -O output.zip preserves the input archive and publishes a separate output.\n  -m removes sources only after successful publication or stdout completion.\n  Removal needs atomic filesystem support; excluded/nonempty directories remain.\n  -DF writes size/time differences and new members to required separate -O output.\n  -g grows by retaining validated local records when only adding members;\n  replacements/deletions rebuild. Publication always uses owned atomic staging.\n  -b directory selects the VFS staging directory, also spooling stdout archives.\n  Cross-provider publication must be supported by the filesystem; no host copy.\n  -J removes a prefix only after validating the complete embedded ZIP and CRCs.\n  -T checks integrity with registered virtual unzip before replacement.\n  -TT \"command args {}\" selects a registered virtual test command; {} is the\n  staged path, or the path is appended. Quotes/escapes form literal arguments;\n  shell operators and substitutions are refused. No host process is spawned.\n  With stdout output -T is ignored.\n  -z reads an archive comment; -c reads selected member comments in archive order.\n  -X strips optional metadata; -X- preserves available metadata.\n  -o sets the archive timestamp to the newest resulting member timestamp.\n\nLogging\n  -lf path writes a VFS log (a missing extension becomes .log).\n  -la appends; -li includes progress in addition to warnings/errors.\n  Logs require atomic conditional byte writes and cannot alias selected inputs.\n  Logs are bounded by maxTextBytes; supplied password bytes are redacted.\n  Completed log/publication effects remain if a later write fails.\n\nCompression and format\n  -Z selects store, deflate, bzip2, or lzma; method names accept unique prefixes.\n  -1 through -9 select effort. Store selection remains through later levels.\n  -n .jpg:.png stores matching suffixes; -9 overrides suffix-based storage.\n  Compression may fall back to STORE for regular files when it expands data.\n  -l converts text LF to CRLF, leaving detected binary input unchanged.\n  -fz forces ZIP64; -fz- disables it. -fd forces signed data descriptors.\n  BZIP2 members use extraction version 4.6, including with ZIP64 records.\n  LZMA is a ZIP format extension (not native Info-ZIP Zip 3.0).\n  LZMA uses version 6.3, a bounded 1 MiB encoder dictionary, and EOS.\n  Readers admit dictionaries up to 8 MiB and SDK 9.4 properties only.\n\nStreaming\n  A '-' input filename reads one member from stdin, named '-'.\n  A '-' archive name writes binary archive bytes to stdout and progress to stderr.\n  With no archive or file operands, zip acts as a stdin-to-stdout filter.\n  Streamed members retain compression even if it expands their data.\n  -@ instead reads newline-separated input filenames; it cannot also read a '-'\n  payload from the same stdin. Empty filename lines are ignored.\n  Complete the output stream before using the resulting archive.\n\nArguments and ZIPOPT\n  Long options accept unique abbreviations and --option=value where appropriate.\n  Use -- after the archive name for literal filenames beginning with '-'.\n  ZIPOPT supplies default arguments before the command arguments. Double quotes\n  group words inside ZIPOPT; shell expansion is not performed on these defaults.\n  -h and -h2 print basic and extended help as soon as they are encountered.\n  --version and -L also exit immediately. Only a lone short -v shows information;\n  --verbose and grouped -v perform an archive operation. Later -q or -v wins.\n  -sc and -so validate all arguments before exiting; -sc returns status 9.\n\nDisplays\n  -sf lists selected names and totals without reading source payloads or writing\n  archives. -sf- and -q suppress names; totals remain visible. With no file\n  operands, -sf lists the input archive. -sd reports only virtual processing steps.\n  Command and diagnostic displays redact credential-shaped arguments and URLs.\n  Display counters accept a trailing '-' to negate them. -ds accepts up to eight\n  characters: digits with an optional k, m, g or t suffix (case-insensitive).\n  Values below 1024 imply MB; nonzero intervals from 1 KB to below 32 KB fail.\n  Empty -ds values restore 10 MB; 0 disables dots. Sizes must be safe integers.\n  Dots use byte intervals, so counts can differ from native codec buffer dots.\n  Per-entry progress appears after bounded preparation; global output dots stay\n  visible with -q. Timed scanning dots and split-volume displays are unavailable.\n";
+export declare const zipVersion = "safe-bash zip (virtual-bash)\nBounded virtual ZIP implementation; not an Info-ZIP native build.\nCompression: store, deflate, bzip2, lzma (format extension). Single-volume ZIP and ZIP64 output.\nFilesystem, signals and byte limits are supplied by the host.\nNative compiler identity and ambient environment are not reported.\n";
+export declare const zipLicense = "safe-bash zip (virtual-bash)\nMIT License\nCopyright (c) 2026 Poe Platform\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\nThis is the virtual implementation license, not the native Info-ZIP license.\n";
 //# sourceMappingURL=help.d.ts.map

package/dist/safe-bash/commands/archive/zip/help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/help.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,8kDAiCnB,CAAC;AAEF,eAAO,MAAM,eAAe,4sJAmD3B,CAAC"}
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/help.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,mkGAwDnB,CAAC;AAEF,eAAO,MAAM,eAAe,ukSA6F3B,CAAC;AAEF,eAAO,MAAM,UAAU,2UAKtB,CAAC;AAEF,eAAO,MAAM,UAAU,urCAuBtB,CAAC"}

package/dist/safe-bash/commands/archive/zip/help.js

@@ -8,24 +8,47 @@ Usage: zip [options] archive [file ...]
   -q          suppress progress messages
   -0          store without compression
   -1 .. -9    select compression effort
-  -Z METHOD   select store, deflate, or bzip2 compression
+  -Z METHOD   select store, deflate, bzip2, or lzma compression
+  --encryption PROFILE  select zipcrypto or aes-{128,192,256}-ae{1,2}
   -n SUFFIXES store matching suffixes (colon-separated)
   -u / -f     update / freshen existing members
   -d / -U     delete / copy selected archive members
   -FS         synchronize selected members with filesystem sources
   -O FILE     write to a separate output archive
+  -A          adjust validated SFX offsets, retaining the inert prefix
+  -F / -FF    repair from central / local records (requires -O FILE)
+  -s SIZE     split into .z01/.z02/.../.zip volumes (minimum 64k; 0 recombines)
+  -sp         approve volume transitions using an explicit host prompt
+  -sv / -sb   report split volumes / ring before a split-pause prompt
   -m          remove archived sources after successful publication
   -D / -y     omit directory entries / store symlinks
   -i / -x     include / exclude matching names
+  -RE         enable bracket-list glob matching (already enabled on Unix)
+  -k          convert new source names to portable ASCII DOS 8.3 names
+  -FI / -FI-  enable / disable explicit VFS FIFO byte sources
   -@          read filenames from stdin
   -t / -tt    select files from / before a date
   -T          test archive integrity before replacement
+  -P PASSWORD encrypt new members with a supplied password
+  -e          request and confirm a password through a no-echo host capability
   -z / -c     read archive / entry comments from stdin
   -o          set archive time to the latest member time
   -l          convert text LF line endings to CRLF
+  -ll         convert text CRLF line endings to LF (--from-crlf)
   -X          strip optional metadata
   -fz / -fz-  force / disable ZIP64 output
   -fd         force data descriptors
+  -v          verbose operation (a lone -v shows implementation information)
+  --version   show implementation information and exit
+  -L          show this implementation's license
+  -sf / -sf-  list selected files / totals only, without creating an archive
+  -sc         show processed arguments and exit with status 9
+  -so         show implemented options and exit
+  -sd         show virtual archive processing steps
+  -db / -dc   display byte / entry counters
+  -du / -dv   display entry size / single-volume numbers
+  -dd / -dg   display dots per entry / globally for output bytes
+  -ds SIZE    dot interval (kmgt units; default MB; 0 disables dots)
   -h          show this help
 
 Use -- after the archive name to pass filenames beginning with '-'.
@@ -34,6 +57,12 @@ Long option equivalents are accepted, for example --junk-paths and
 `;
 export const zipExtendedHelp = `${zipHelp}
 Selection
+  -RE / --regex means bracket lists, not general regular expressions.
+  -k / --DOS-names converts components after selection and -j; collisions fail.
+  DOS conversion is restricted to printable ASCII. Filters parsed after -k
+  are DOS-converted before matching original case-sensitive source names.
+  -FI / --fifo requires a VFS-reported FIFO and explicit streamingRead capability.
+  FIFO payloads are bounded and cancellation-aware; producer failure aborts output.
   -r traverses listed directories; -R recursively searches matching names.
   Do not combine -r and -R. -D omits directory records without stopping traversal.
   -i patterns and -x patterns accept lists ending at another option or at @.
@@ -54,19 +83,39 @@ Archive operations
   -O output.zip preserves the input archive and publishes a separate output.
   -m removes sources only after successful publication or stdout completion.
   Removal needs atomic filesystem support; excluded/nonempty directories remain.
-  -T checks integrity before replacement. With stdout output it is ignored.
+  -DF writes size/time differences and new members to required separate -O output.
+  -g grows by retaining validated local records when only adding members;
+  replacements/deletions rebuild. Publication always uses owned atomic staging.
+  -b directory selects the VFS staging directory, also spooling stdout archives.
+  Cross-provider publication must be supported by the filesystem; no host copy.
+  -J removes a prefix only after validating the complete embedded ZIP and CRCs.
+  -T checks integrity with registered virtual unzip before replacement.
+  -TT "command args {}" selects a registered virtual test command; {} is the
+  staged path, or the path is appended. Quotes/escapes form literal arguments;
+  shell operators and substitutions are refused. No host process is spawned.
+  With stdout output -T is ignored.
   -z reads an archive comment; -c reads selected member comments in archive order.
   -X strips optional metadata; -X- preserves available metadata.
   -o sets the archive timestamp to the newest resulting member timestamp.
 
+Logging
+  -lf path writes a VFS log (a missing extension becomes .log).
+  -la appends; -li includes progress in addition to warnings/errors.
+  Logs require atomic conditional byte writes and cannot alias selected inputs.
+  Logs are bounded by maxTextBytes; supplied password bytes are redacted.
+  Completed log/publication effects remain if a later write fails.
+
 Compression and format
-  -Z selects store, deflate, or bzip2; method names accept unique prefixes.
+  -Z selects store, deflate, bzip2, or lzma; method names accept unique prefixes.
   -1 through -9 select effort. Store selection remains through later levels.
   -n .jpg:.png stores matching suffixes; -9 overrides suffix-based storage.
   Compression may fall back to STORE for regular files when it expands data.
   -l converts text LF to CRLF, leaving detected binary input unchanged.
   -fz forces ZIP64; -fz- disables it. -fd forces signed data descriptors.
   BZIP2 members use extraction version 4.6, including with ZIP64 records.
+  LZMA is a ZIP format extension (not native Info-ZIP Zip 3.0).
+  LZMA uses version 6.3, a bounded 1 MiB encoder dictionary, and EOS.
+  Readers admit dictionaries up to 8 MiB and SDK 9.4 properties only.
 
 Streaming
   A '-' input filename reads one member from stdin, named '-'.
@@ -83,5 +132,51 @@ Arguments and ZIPOPT
   ZIPOPT supplies default arguments before the command arguments. Double quotes
   group words inside ZIPOPT; shell expansion is not performed on these defaults.
   -h and -h2 print basic and extended help as soon as they are encountered.
+  --version and -L also exit immediately. Only a lone short -v shows information;
+  --verbose and grouped -v perform an archive operation. Later -q or -v wins.
+  -sc and -so validate all arguments before exiting; -sc returns status 9.
+
+Displays
+  -sf lists selected names and totals without reading source payloads or writing
+  archives. -sf- and -q suppress names; totals remain visible. With no file
+  operands, -sf lists the input archive. -sd reports only virtual processing steps.
+  Command and diagnostic displays redact credential-shaped arguments and URLs.
+  Display counters accept a trailing '-' to negate them. -ds accepts up to eight
+  characters: digits with an optional k, m, g or t suffix (case-insensitive).
+  Values below 1024 imply MB; nonzero intervals from 1 KB to below 32 KB fail.
+  Empty -ds values restore 10 MB; 0 disables dots. Sizes must be safe integers.
+  Dots use byte intervals, so counts can differ from native codec buffer dots.
+  Per-entry progress appears after bounded preparation; global output dots stay
+  visible with -q. Timed scanning dots and split-volume displays are unavailable.
+`;
+export const zipVersion = `safe-bash zip (virtual-bash)
+Bounded virtual ZIP implementation; not an Info-ZIP native build.
+Compression: store, deflate, bzip2, lzma (format extension). Single-volume ZIP and ZIP64 output.
+Filesystem, signals and byte limits are supplied by the host.
+Native compiler identity and ambient environment are not reported.
+`;
+export const zipLicense = `safe-bash zip (virtual-bash)
+MIT License
+Copyright (c) 2026 Poe Platform
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+This is the virtual implementation license, not the native Info-ZIP license.
 `;
 //# sourceMappingURL=help.js.map

package/dist/safe-bash/commands/archive/zip/help.js.map

@@ -1 +1 @@
-{"version":3,"file":"help.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/help.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCtB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDxC,CAAC"}
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/help.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwDtB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6FxC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;CAKzB,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBzB,CAAC"}

package/dist/safe-bash/commands/archive/zip/line-endings.d.ts

@@ -1,2 +1,3 @@
+export declare function zipFromCrlf(bytes: Uint8Array, store: boolean, signal: AbortSignal, level?: number): Promise<Uint8Array>;
 export declare function zipToCrlf(bytes: Uint8Array, store: boolean, maxBytes: number, signal: AbortSignal): Promise<Uint8Array>;
 //# sourceMappingURL=line-endings.d.ts.map

package/dist/safe-bash/commands/archive/zip/line-endings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"line-endings.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/line-endings.ts"],"names":[],"mappings":"AAIA,wBAAsB,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAwB7H"}
+{"version":3,"file":"line-endings.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/line-endings.ts"],"names":[],"mappings":"AAKA,wBAAsB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,SAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAuCxH;AA8FD,wBAAsB,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAwB7H"}

package/dist/safe-bash/commands/archive/zip/line-endings.js

@@ -1,5 +1,163 @@
 import { fail } from "../internal.js";
 import { yieldTurn } from "../../../contracts/yield.js";
+// Info-ZIP's file_read reserves a sentinel byte in each -ll read. STORE
+// uses SBSZ; the Unix internal DEFLATE compressor initially requests 2*WSIZE.
+export async function zipFromCrlf(bytes, store, signal, level = 6) {
+    signal.throwIfAborted();
+    const window = store ? 16383 : 65535;
+    let text = false;
+    for (let index = 0; index < Math.min(bytes.length, window); index++) {
+        if (index % 32768 === 0)
+            await yieldTurn(signal);
+        const byte = bytes[index];
+        if (byte <= 6 || byte >= 14 && byte <= 25 || byte >= 28 && byte <= 31)
+            return bytes;
+        if (byte >= 32)
+            text = true;
+    }
+    if (!text)
+        return bytes;
+    const output = new Uint8Array(bytes.length);
+    let length = 0;
+    let cursor = 0;
+    // A native read reserves one byte for an LF sentinel. If conversion empties
+    // the read, file_read consumes one more source byte (or retains CR at EOF).
+    const read = (size) => {
+        const start = cursor;
+        const end = Math.min(bytes.length, start + size - 1);
+        if (start === end)
+            return 0;
+        cursor = end;
+        const previous = length;
+        for (let index = start; index < end; index++) {
+            const byte = bytes[index];
+            if (byte !== 13 || index + 1 < end && bytes[index + 1] !== 10)
+                output[length++] = byte;
+        }
+        if (length === previous)
+            output[length++] = cursor < bytes.length ? bytes[cursor++] : bytes[end - 1];
+        else if (output[length - 1] === 26)
+            length--;
+        return length - previous;
+    };
+    if (store || bytes.length <= window) {
+        while (cursor < bytes.length) {
+            await yieldTurn(signal);
+            if (read(window + 1) === 0)
+                break;
+        }
+    }
+    else {
+        await zipDeflateReads(output, read, () => length, level, signal);
+    }
+    return output.slice(0, length);
+}
+// Only the Unix Info-ZIP internal compressor's input schedule is modeled here;
+// the existing codec still encodes the resulting bytes. Refill capacity depends
+// on converted bytes, sliding, and fast/lazy match advancement, not I/O chunks.
+async function zipDeflateReads(output, read, length, level, signal) {
+    const profiles = [
+        [0, 0, 0, 0], [4, 4, 8, 4], [4, 5, 16, 8], [4, 6, 32, 32],
+        [4, 4, 16, 16], [8, 16, 32, 32], [8, 16, 128, 128],
+        [8, 32, 128, 256], [32, 128, 258, 1024], [32, 258, 258, 4096],
+    ];
+    const profile = profiles[level];
+    if (!profile || level === 0)
+        fail("invalid from-crlf compression level");
+    const [good, lazy, nice, chain] = profile;
+    // Absolute positions avoid copying/remapping the window on each slide.
+    // Zero remains NIL; positions at/before the current window base are ignored.
+    const head = new Float64Array(32768);
+    const previous = new Float64Array(32768);
+    let position = 0;
+    let base = 0;
+    let eof = read(65536) === 0;
+    let matchLength = 2;
+    let matchStart = 0;
+    let work = 0;
+    const insert = (at) => {
+        const hash = ((output[at] << 10) ^ (output[at + 1] << 5) ^ output[at + 2]) & 32767;
+        const candidate = head[hash];
+        previous[at & 32767] = candidate;
+        head[hash] = at;
+        return candidate;
+    };
+    const longest = (candidate, best, available) => {
+        let remaining = best >= good ? chain >>> 2 : chain;
+        const limit = Math.max(base, position - 32506);
+        const maximum = Math.min(258, available);
+        do {
+            work++;
+            if (output[candidate + best] === output[position + best] &&
+                output[candidate + best - 1] === output[position + best - 1] &&
+                output[candidate] === output[position] && output[candidate + 1] === output[position + 1]) {
+                let count = 2;
+                while (count < maximum && output[candidate + count] === output[position + count])
+                    count++;
+                if (count > best) {
+                    best = count;
+                    matchStart = candidate;
+                    if (count >= Math.min(nice, available))
+                        break;
+                }
+            }
+            candidate = previous[candidate & 32767];
+        } while (candidate > limit && --remaining > 0);
+        return Math.min(best, available);
+    };
+    while (true) {
+        if (++work >= 32768) {
+            await yieldTurn(signal);
+            work = 0;
+        }
+        let available = length() - position;
+        while (available < 262) {
+            if (position - base >= 65274)
+                base += 32768;
+            if (eof)
+                break;
+            await yieldTurn(signal);
+            eof = read(65536 - (length() - base)) === 0;
+            available = length() - position;
+        }
+        if (available === 0)
+            return;
+        const candidate = available >= 3 ? insert(position) : 0;
+        if (level <= 3) {
+            matchLength = candidate > base && position - candidate <= 32506 ? longest(candidate, 2, available) : 0;
+            if (matchLength >= 3) {
+                const end = position + matchLength;
+                if (matchLength <= lazy && available - matchLength >= 3) {
+                    while (++position < end)
+                        insert(position);
+                }
+                else
+                    position = end;
+            }
+            else
+                position++;
+        }
+        else {
+            const priorLength = matchLength;
+            matchLength = 2;
+            if (candidate > base && priorLength < lazy && position - candidate <= 32506) {
+                matchLength = longest(candidate, priorLength, available);
+                if (matchLength === 3 && position - matchStart > 4096)
+                    matchLength = 2;
+            }
+            if (priorLength >= 3 && matchLength <= priorLength) {
+                const end = position + priorLength - 1;
+                while (++position < end) {
+                    if (position <= length() - 3)
+                        insert(position);
+                }
+                matchLength = 2;
+            }
+            else
+                position++;
+        }
+    }
+}
 // Info-ZIP Unix STORE and DEFLATE first-read sizes after -l halves the buffer.
 export async function zipToCrlf(bytes, store, maxBytes, signal) {
     signal.throwIfAborted();

package/dist/safe-bash/commands/archive/zip/line-endings.js.map

@@ -1 +1 @@
-{"version":3,"file":"line-endings.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/line-endings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAExD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAiB,EAAE,KAAc,EAAE,QAAgB,EAAE,MAAmB;IACtG,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QACpF,IAAI,IAAI,IAAI,EAAE;YAAE,IAAI,GAAG,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;IACxB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ;YAAE,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"line-endings.js","sourceRoot":"","sources":["../../../../src/commands/archive/zip/line-endings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAExD,wEAAwE;AACxE,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAiB,EAAE,KAAc,EAAE,MAAmB,EAAE,KAAK,GAAG,CAAC;IACjG,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACrC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACpE,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QACpF,IAAI,IAAI,IAAI,EAAE;YAAE,IAAI,GAAG,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,CAAC;QACb,MAAM,QAAQ,GAAG,MAAM,CAAC;QACxB,KAAK,IAAI,KAAK,GAAG,KAAK,EAAE,KAAK,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;YAC3B,IAAI,IAAI,KAAK,EAAE,IAAI,KAAK,GAAG,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE;gBAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;QACzF,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC;aAClG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,CAAC;QAC7C,OAAO,MAAM,GAAG,QAAQ,CAAC;IAC3B,CAAC,CAAC;IACF,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;QACpC,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC;gBAAE,MAAM;QACpC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,KAAK,UAAU,eAAe,CAAC,MAAkB,EAAE,IAA8B,EAAE,MAAoB,EAAE,KAAa,EAAE,MAAmB;IACzI,MAAM,QAAQ,GAAG;QACf,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC;QACzD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC;QAClD,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC;KAC9D,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,IAAI,KAAK,KAAK,CAAC;QAAE,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACzE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,OAA2C,CAAC;IAC9E,uEAAuE;IACvE,6EAA6E;IAC7E,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,CAAC,EAAU,EAAU,EAAE;QACpC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC,GAAG,KAAK,CAAC;QACtF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAE,CAAC;QAC9B,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,SAAS,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,SAAiB,EAAU,EAAE;QAC7E,IAAI,SAAS,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACzC,GAAG,CAAC;YACF,IAAI,EAAE,CAAC;YACP,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACpD,MAAM,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC;gBAC5D,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC7F,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,OAAO,KAAK,GAAG,OAAO,IAAI,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;oBAAE,KAAK,EAAE,CAAC;gBAC1F,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;oBACjB,IAAI,GAAG,KAAK,CAAC;oBACb,UAAU,GAAG,SAAS,CAAC;oBACvB,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;wBAAE,MAAM;gBAChD,CAAC;YACH,CAAC;YACD,SAAS,GAAG,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAE,CAAC;QAC3C,CAAC,QAAQ,SAAS,GAAG,KAAK,IAAI,EAAE,SAAS,GAAG,CAAC,EAAE;QAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC;YACpB,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,GAAG,CAAC,CAAC;QACX,CAAC;QACD,IAAI,SAAS,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC;QACpC,OAAO,SAAS,GAAG,GAAG,EAAE,CAAC;YACvB,IAAI,QAAQ,GAAG,IAAI,IAAI,KAAK;gBAAE,IAAI,IAAI,KAAK,CAAC;YAC5C,IAAI,GAAG;gBAAE,MAAM;YACf,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACxB,GAAG,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;YAC5C,SAAS,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC;QAClC,CAAC;QACD,IAAI,SAAS,KAAK,CAAC;YAAE,OAAO;QAC5B,MAAM,SAAS,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,WAAW,GAAG,SAAS,GAAG,IAAI,IAAI,QAAQ,GAAG,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvG,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,QAAQ,GAAG,WAAW,CAAC;gBACnC,IAAI,WAAW,IAAI,IAAI,IAAI,SAAS,GAAG,WAAW,IAAI,CAAC,EAAE,CAAC;oBACxD,OAAO,EAAE,QAAQ,GAAG,GAAG;wBAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC5C,CAAC;;oBAAM,QAAQ,GAAG,GAAG,CAAC;YACxB,CAAC;;gBAAM,QAAQ,EAAE,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,GAAG,WAAW,CAAC;YAChC,WAAW,GAAG,CAAC,CAAC;YAChB,IAAI,SAAS,GAAG,IAAI,IAAI,WAAW,GAAG,IAAI,IAAI,QAAQ,GAAG,SAAS,IAAI,KAAK,EAAE,CAAC;gBAC5E,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;gBACzD,IAAI,WAAW,KAAK,CAAC,IAAI,QAAQ,GAAG,UAAU,GAAG,IAAI;oBAAE,WAAW,GAAG,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,WAAW,IAAI,CAAC,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;gBACnD,MAAM,GAAG,GAAG,QAAQ,GAAG,WAAW,GAAG,CAAC,CAAC;gBACvC,OAAO,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC;oBACxB,IAAI,QAAQ,IAAI,MAAM,EAAE,GAAG,CAAC;wBAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,CAAC;gBACD,WAAW,GAAG,CAAC,CAAC;YAClB,CAAC;;gBAAM,QAAQ,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAiB,EAAE,KAAc,EAAE,QAAgB,EAAE,MAAmB;IACtG,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QACpF,IAAI,IAAI,IAAI,EAAE;YAAE,IAAI,GAAG,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;IACxB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ;YAAE,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/safe-bash/commands/archive/zip/log.d.ts

@@ -0,0 +1,23 @@
+import { type ByteSink } from "../../../contracts/index.js";
+import type { ZipScope } from "./safety.js";
+/** Persistent log bytes are intentional effects, never invocation scratch files. */
+export declare class ZipLog {
+    private readonly scope;
+    private readonly info;
+    failed: boolean;
+    password: Uint8Array | undefined;
+    private path;
+    private parent;
+    private expected;
+    private bytes;
+    private append;
+    started: boolean;
+    private readonly pending;
+    constructor(scope: ZipScope, info: boolean);
+    open(name: string, append: boolean, protectedNames: readonly string[]): Promise<void>;
+    protect(names: readonly string[]): Promise<void>;
+    start(): Promise<void>;
+    private write;
+    sink(destination: ByteSink, quiet?: boolean): ByteSink;
+}
+//# sourceMappingURL=log.d.ts.map

package/dist/safe-bash/commands/archive/zip/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../../../src/commands/archive/zip/log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,QAAQ,EAAiB,MAAM,6BAA6B,CAAC;AAIhG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,oFAAoF;AACpF,qBAAa,MAAM;IAUL,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAY,OAAO,CAAC,QAAQ,CAAC,IAAI;IATnE,MAAM,UAAS;IACf,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,OAAO,CAAC,IAAI,CAAM;IAClB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,UAAS;IAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;gBACf,KAAK,EAAE,QAAQ,EAAmB,IAAI,EAAE,OAAO;IACtE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BrF,OAAO,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBhD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAsBd,KAAK;IAQnB,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,UAAQ,GAAG,QAAQ;CAsCrD"}