@poe-platform/safe-bash 0.1.799 → 0.1.800

package/dist/safe-bash/commands/archive/zip/comments.js

@@ -1,84 +1,2 @@
-import { concatBytes, encodeBytes } from "../../../byte-encoding.js";
-import { readBytes } from "../../../contracts/index.js";
-import { yieldTurn } from "../../../contracts/yield.js";
-import { fail } from "../internal.js";
-/** One bounded cursor for all comments; an input chunk may contain many lines. */
-export class ZipCommentInput {
-    limits;
-    signal;
-    iterator;
-    chunk = new Uint8Array();
-    offset = 0;
-    bytes = 0;
-    pulls = 0;
-    ended = false;
-    constructor(source, limits, signal) {
-        this.limits = limits;
-        this.signal = signal;
-        this.iterator = readBytes(source, signal)[Symbol.asyncIterator]();
-    }
-    async readLine() {
-        const line = [];
-        while (line.length < 65535) {
-            this.signal.throwIfAborted();
-            if (this.offset === this.chunk.length) {
-                if (this.ended)
-                    break;
-                if (++this.pulls > this.limits.maxPatternSteps)
-                    fail("ZIP comment input work limit exceeded");
-                const next = await this.iterator.next();
-                if (next.done) {
-                    this.ended = true;
-                    break;
-                }
-                if (next.value.length > this.limits.maxFilesFromBytes - this.bytes)
-                    fail("ZIP comment input byte limit exceeded");
-                this.chunk = new Uint8Array(next.value);
-                this.offset = 0;
-                if (this.pulls % 64 === 0)
-                    await yieldTurn(this.signal);
-                if (!this.chunk.length)
-                    continue;
-            }
-            if (++this.bytes > this.limits.maxFilesFromBytes)
-                fail("ZIP comment input byte limit exceeded");
-            const byte = this.chunk[this.offset++];
-            line.push(byte);
-            if (this.bytes % 4096 === 0)
-                await yieldTurn(this.signal);
-            if (byte === 10)
-                break;
-        }
-        if (!line.length)
-            return undefined;
-        const zero = line.indexOf(0);
-        return Uint8Array.from(line.slice(0, zero < 0 ? undefined : zero));
-    }
-}
-/** Info-ZIP's fgets/strlen archive-comment grammar, with explicit byte limits. */
-export async function readZipComment(source, limits, signal) {
-    const input = source instanceof ZipCommentInput ? source : new ZipCommentInput(source, limits, signal);
-    const parts = [];
-    let length = 0;
-    try {
-        for (;;) {
-            const line = await input.readLine();
-            if (line === undefined || line.length === 2 && line[0] === 46 && line[1] === 10)
-                break;
-            const text = line.at(-1) === 10 ? line.subarray(0, -1) : line;
-            const separator = length || !text.length ? 2 : 0;
-            if (text.length + separator > Math.min(limits.maxTextBytes, 65535) - length)
-                fail("ZIP archive comment byte limit exceeded");
-            if (separator)
-                parts.push(encodeBytes("\r\n"));
-            if (text.length)
-                parts.push(text);
-            length += separator + text.length;
-        }
-        return concatBytes(parts, length);
-    }
-    finally {
-        await input.iterator.return?.();
-    }
-}
+export * from "../../../../safe-bash-zip-engine/zip/comments.js";
 //# sourceMappingURL=comments.js.map

package/dist/safe-bash/commands/archive/zip/crc.d.ts

@@ -1,2 +1,2 @@
-export { crcTable } from "../../../../safe-bash-compression-engine/crc.js";
+export * from "../../../../safe-bash-zip-engine/zip/crc.js";
 //# sourceMappingURL=crc.d.ts.map

package/dist/safe-bash/commands/archive/zip/crc.js

@@ -1,2 +1,2 @@
-export { crcTable } from "../../../../safe-bash-compression-engine/crc.js";
+export * from "../../../../safe-bash-zip-engine/zip/crc.js";
 //# sourceMappingURL=crc.js.map

package/dist/safe-bash/commands/archive/zip/crypto.d.ts

@@ -1,20 +1,2 @@
-import { type ByteSource } from "../../../contracts/index.js";
-import { type ZipHost } from "../internal.js";
-import { PublicDiagnostic } from "../../../diagnostics.js";
-import type { ZipAes } from "./aes.js";
-/** Fixed capability diagnostics may be shown without credential-text filtering. */
-export declare class ZipHostFailure extends PublicDiagnostic {
-    readonly code: "no-echo" | "entropy" | "entropy-failed" | "entropy-bytes" | "prompt-failed" | "prompt-eof" | "password-bytes" | "password-empty" | "password-confirm";
-    constructor(code: "no-echo" | "entropy" | "entropy-failed" | "entropy-bytes" | "prompt-failed" | "prompt-eof" | "password-bytes" | "password-empty" | "password-confirm");
-}
-export interface ZipEncryption {
-    readonly aes?: ZipAes;
-    readonly password: Uint8Array;
-    readonly entropy: NonNullable<ZipHost["entropy"]>;
-}
-export declare function encryptZipPayload(source: ByteSource, encryption: ZipEncryption, verifier: number, signal: AbortSignal): ByteSource;
-export declare function decryptZipPayload(source: ByteSource, password: Uint8Array, verifier: number, signal: AbortSignal): ByteSource;
-export declare function readZipPassword(host: ZipHost | undefined, maxBytes: number, signal: AbortSignal, confirm: boolean): Promise<Uint8Array>;
-/** Traditional PKZIP byte transformation; callers own header/password checks. */
-export declare function zipCrypto(source: ByteSource, password: Uint8Array, decode: boolean, signal: AbortSignal): AsyncGenerator<Uint8Array>;
+export * from "../../../../safe-bash-zip-engine/zip/crypto.js";
 //# sourceMappingURL=crypto.d.ts.map

package/dist/safe-bash/commands/archive/zip/crypto.js

@@ -1,119 +1,2 @@
-import { readBytes } from "../../../contracts/index.js";
-import { yieldTurn } from "../../../contracts/yield.js";
-import { crcTable } from "./crc.js";
-import { fail } from "../internal.js";
-import { PublicDiagnostic } from "../../../diagnostics.js";
-/** Fixed capability diagnostics may be shown without credential-text filtering. */
-export class ZipHostFailure extends PublicDiagnostic {
-    code;
-    constructor(code) {
-        super({
-            "no-echo": "ZIP no-echo password capability is unavailable",
-            entropy: "ZIP entropy capability is unavailable",
-            "entropy-failed": "ZIP entropy capability failed",
-            "entropy-bytes": "ZIP entropy capability must return 11 bytes",
-            "prompt-failed": "ZIP password capability failed",
-            "prompt-eof": "ZIP EOF while reading password",
-            "password-bytes": "ZIP invalid password bytes",
-            "password-empty": "zero length password not allowed",
-            "password-confirm": "password verification failed",
-        }[code]);
-        this.code = code;
-    }
-}
-export async function* encryptZipPayload(source, encryption, verifier, signal) {
-    signal.throwIfAborted();
-    const password = new Uint8Array(encryption.password);
-    let random;
-    try {
-        random = await encryption.entropy(11, signal);
-    }
-    catch (error) {
-        signal.throwIfAborted();
-        throw new ZipHostFailure(error instanceof ZipHostFailure && error.code === "entropy" ? "entropy" : "entropy-failed");
-    }
-    signal.throwIfAborted();
-    if (!(random instanceof Uint8Array) || random.length !== 11)
-        throw new ZipHostFailure("entropy-bytes");
-    const header = new Uint8Array(12);
-    header.set(random);
-    header[11] = verifier;
-    yield* zipCrypto((async function* () { yield header; yield* readBytes(source, signal); })(), password, false, signal);
-}
-export async function* decryptZipPayload(source, password, verifier, signal) {
-    let header = 0;
-    for await (const chunk of zipCrypto(source, new Uint8Array(password), true, signal)) {
-        let offset = 0;
-        while (header < 12 && offset < chunk.length) {
-            if (header === 11 && chunk[offset] !== verifier)
-                fail("ZIP incorrect password");
-            header++;
-            offset++;
-        }
-        if (offset < chunk.length)
-            yield chunk.subarray(offset);
-    }
-    if (header !== 12)
-        fail("ZIP truncated encryption header");
-}
-export async function readZipPassword(host, maxBytes, signal, confirm) {
-    if (!host?.password)
-        throw new ZipHostFailure("no-echo");
-    const read = async (prompt) => {
-        signal.throwIfAborted();
-        let bytes;
-        try {
-            bytes = await host.password({ prompt, maxBytes, signal });
-        }
-        catch {
-            signal.throwIfAborted();
-            throw new ZipHostFailure("prompt-failed");
-        }
-        signal.throwIfAborted();
-        if (!bytes)
-            throw new ZipHostFailure("prompt-eof");
-        if (!(bytes instanceof Uint8Array) || bytes.length > maxBytes || bytes.includes(0))
-            throw new ZipHostFailure("password-bytes");
-        return new Uint8Array(bytes);
-    };
-    const password = await read("Enter password: ");
-    if (confirm) {
-        if (!password.length)
-            throw new ZipHostFailure("password-empty");
-        const repeated = await read("Verify password: ");
-        if (password.length !== repeated.length || password.some((byte, index) => byte !== repeated[index]))
-            throw new ZipHostFailure("password-confirm");
-    }
-    return password;
-}
-/** Traditional PKZIP byte transformation; callers own header/password checks. */
-export async function* zipCrypto(source, password, decode, signal) {
-    signal.throwIfAborted();
-    let key0 = 0x12345678, key1 = 0x23456789, key2 = 0x34567890;
-    const update = (byte) => {
-        key0 = (key0 >>> 8 ^ crcTable[(key0 ^ byte) & 255]) >>> 0;
-        key1 = (Math.imul(key1 + (key0 & 255), 134775813) + 1) >>> 0;
-        key2 = (key2 >>> 8 ^ crcTable[(key2 ^ key1 >>> 24) & 255]) >>> 0;
-    };
-    for (let index = 0; index < password.length; index++) {
-        update(password[index]);
-        if ((index + 1) % 65536 === 0)
-            await yieldTurn(signal);
-    }
-    for await (const bytes of readBytes(source, signal)) {
-        for (let offset = 0; offset < bytes.length; offset += 65536) {
-            signal.throwIfAborted();
-            const output = new Uint8Array(Math.min(65536, bytes.length - offset));
-            for (let index = 0; index < output.length; index++) {
-                const value = bytes[offset + index];
-                const temporary = (key2 & 65535) | 2;
-                const transformed = value ^ (Math.imul(temporary, temporary ^ 1) >>> 8 & 255);
-                update(decode ? transformed : value);
-                output[index] = transformed;
-            }
-            yield output;
-            await yieldTurn(signal);
-        }
-    }
-}
+export * from "../../../../safe-bash-zip-engine/zip/crypto.js";
 //# sourceMappingURL=crypto.js.map

package/dist/safe-bash/commands/archive/zip/dates.d.ts

@@ -1,5 +1,2 @@
-import type { ZipEntry } from "../zip-format.js";
-export declare function zipLatestTime(entries: readonly ZipEntry[], signal: AbortSignal): Promise<number | undefined>;
-export declare function parseZipDate(input: string, option: "t" | "tt"): number;
-export declare function zipDateMatches(modified: Date, from: number | undefined, until: number | undefined): boolean;
+export * from "../../../../safe-bash-zip-engine/zip/dates.js";
 //# sourceMappingURL=dates.d.ts.map

package/dist/safe-bash/commands/archive/zip/dates.js

@@ -1,67 +1,2 @@
-import { ZipFailure } from "./options.js";
-import { yieldTurn } from "../../../contracts/yield.js";
-export async function zipLatestTime(entries, signal) {
-    signal.throwIfAborted();
-    let latest;
-    for (let index = 0; index < entries.length; index++) {
-        if (index % 128 === 0)
-            await yieldTurn(signal);
-        const entry = entries[index];
-        if (entry.directory)
-            continue;
-        const rounded = new Date(Math.ceil(Math.floor(entry.modified.getTime() / 1000) / 2) * 2000);
-        const timestamp = rounded.getFullYear() < 1980 ? new Date(1980, 0, 1).getTime()
-            : new Date(rounded.getFullYear(), rounded.getMonth(), rounded.getDate(), rounded.getHours(), rounded.getMinutes(), rounded.getSeconds()).getTime();
-        if (latest === undefined || timestamp > latest)
-            latest = timestamp;
-    }
-    return latest;
-}
-function integer(input, start, width) {
-    let offset = start;
-    while (" \t\r\n\v\f".includes(input[offset] ?? "\0"))
-        offset++;
-    const end = offset + width;
-    let sign = 1;
-    if (input[offset] === "+" || input[offset] === "-") {
-        sign = input[offset] === "-" ? -1 : 1;
-        offset++;
-    }
-    let digits = 0;
-    let value = 0;
-    while (offset < end && input[offset] !== undefined && input[offset] >= "0" && input[offset] <= "9") {
-        value = value * 10 + Number(input[offset++]);
-        digits++;
-    }
-    return digits ? { value: value * sign, end: offset } : undefined;
-}
-function fields(input, iso) {
-    const first = integer(input, 0, iso ? 4 : 2);
-    if (!first || iso && input[first.end] !== "-")
-        return;
-    const second = integer(input, first.end + (iso ? 1 : 0), 2);
-    if (!second || iso && input[second.end] !== "-")
-        return;
-    const third = integer(input, second.end + (iso ? 1 : 0), iso ? 2 : 4);
-    if (!third)
-        return;
-    return iso ? [first.value, second.value, third.value] : [third.value, first.value, second.value];
-}
-export function parseZipDate(input, option) {
-    const result = fields(input, true) ?? fields(input, false);
-    if (!result || result[1] < 1 || result[1] > 12 || result[2] < 1 || result[2] > 31) {
-        throw new ZipFailure(16, "Invalid command arguments", `invalid date entered for -${option} option - use mmddyyyy or yyyy-mm-dd`);
-    }
-    const [year, month, day] = result;
-    return year < 1980 ? 2162688 : (year - 1980) * 33554432 + month * 2097152 + day * 65536;
-}
-export function zipDateMatches(modified, from, until) {
-    if (from === undefined && until === undefined)
-        return true;
-    const rounded = new Date(Math.ceil(Math.floor(modified.getTime() / 1000) / 2) * 2000);
-    const key = rounded.getFullYear() < 1980 ? 2162688 : (rounded.getFullYear() - 1980) * 33554432
-        + (rounded.getMonth() + 1) * 2097152 + rounded.getDate() * 65536
-        + rounded.getHours() * 2048 + rounded.getMinutes() * 32 + rounded.getSeconds() / 2;
-    return (from === undefined || key >= from) && (until === undefined || key < until);
-}
+export * from "../../../../safe-bash-zip-engine/zip/dates.js";
 //# sourceMappingURL=dates.js.map

package/dist/safe-bash/commands/archive/zip/environment.d.ts

@@ -1,3 +1,2 @@
-import { type ArchiveLimits } from "../internal.js";
-export declare function zipEnvironmentArguments(env: Readonly<Record<string, string>>, argv: readonly string[], limits: ArchiveLimits): readonly string[];
+export * from "../../../../safe-bash-zip-engine/zip/environment.js";
 //# sourceMappingURL=environment.d.ts.map

package/dist/safe-bash/commands/archive/zip/environment.js

@@ -1,63 +1,2 @@
-import { byteLength, decodeBytes, encodeBytes } from "../../../byte-encoding.js";
-import { fail } from "../internal.js";
-function whitespace(character) {
-    return character === " " || character === "\t" || character === "\n" || character === "\r" || character === "\v" || character === "\f";
-}
-export function zipEnvironmentArguments(env, argv, limits) {
-    let value = "";
-    let selectedBytes = 0;
-    for (const key of ["ZIPOPT", "ZIP_OPTS"]) {
-        const candidate = env[key] ?? "";
-        if (byteLength(candidate) > limits.maxArgumentBytes)
-            fail("environment argument byte limit exceeded");
-        let start = 0;
-        while (whitespace(candidate[start]))
-            start++;
-        if (start < candidate.length) {
-            value = candidate.slice(start);
-            selectedBytes = byteLength(candidate);
-            break;
-        }
-    }
-    if (!value)
-        return argv;
-    if (value.includes("\0") || decodeBytes(encodeBytes(value), "utf8") !== value)
-        fail("invalid environment argument text");
-    let bytes = selectedBytes;
-    for (const argument of argv) {
-        bytes += byteLength(argument);
-        if (bytes > limits.maxArgumentBytes)
-            fail("argument byte limit exceeded");
-    }
-    const defaults = [];
-    let offset = 0;
-    while (offset < value.length) {
-        let argument = "";
-        if (value[offset] === '"') {
-            offset++;
-            while (offset < value.length && value[offset] !== '"') {
-                if (value[offset] === "\\") {
-                    offset++;
-                    if (offset === value.length)
-                        break;
-                }
-                argument += value[offset++];
-            }
-            if (value[offset] === '"')
-                offset++;
-        }
-        else {
-            const start = offset;
-            while (offset < value.length && !whitespace(value[offset]))
-                offset++;
-            argument = value.slice(start, offset);
-        }
-        if (defaults.length + argv.length >= limits.maxArgumentBytes)
-            fail("argument count limit exceeded");
-        defaults.push(argument);
-        while (whitespace(value[offset]))
-            offset++;
-    }
-    return [...defaults, ...argv];
-}
+export * from "../../../../safe-bash-zip-engine/zip/environment.js";
 //# sourceMappingURL=environment.js.map

package/dist/safe-bash/commands/archive/zip/grow.d.ts

@@ -1,4 +1,2 @@
-import type { ZipEntry } from "../zip-format.js";
-/** Owned local records from an explicitly requested, validated grow read. */
-export declare const zipGrowRecords: WeakMap<ZipEntry, Uint8Array<ArrayBufferLike>>;
+export * from "../../../../safe-bash-zip-engine/zip/grow.js";
 //# sourceMappingURL=grow.d.ts.map

package/dist/safe-bash/commands/archive/zip/grow.js

@@ -1,3 +1,2 @@
-/** Owned local records from an explicitly requested, validated grow read. */
-export const zipGrowRecords = new WeakMap();
+export * from "../../../../safe-bash-zip-engine/zip/grow.js";
 //# sourceMappingURL=grow.js.map

package/dist/safe-bash/commands/archive/zip/help.d.ts

@@ -1,5 +1,2 @@
-export declare const zipHelp = "safe-bash zip\nUsage: zip [options] archive [file ...]\n       zip [options] - [file ...]       write an archive to stdout\n       zip [options] archive -          read a member from stdin\n\n  -r          recurse into directories\n  -j          store basenames, discarding directory paths\n  -q          suppress progress messages\n  -0          store without compression\n  -1 .. -9    select compression effort\n  -Z METHOD   select store, deflate, bzip2, or lzma compression\n  --encryption PROFILE  select zipcrypto or aes-{128,192,256}-ae{1,2}\n  -n SUFFIXES store matching suffixes (colon-separated)\n  -u / -f     update / freshen existing members\n  -d / -U     delete / copy selected archive members\n  -FS         synchronize selected members with filesystem sources\n  -O FILE     write to a separate output archive\n  -A          adjust validated SFX offsets, retaining the inert prefix\n  -F / -FF    repair from central / local records (requires -O FILE)\n  -s SIZE     split into .z01/.z02/.../.zip volumes (minimum 64k; 0 recombines)\n  -sp         approve volume transitions using an explicit host prompt\n  -sv / -sb   report split volumes / ring before a split-pause prompt\n  -m          remove archived sources after successful publication\n  -D / -y     omit directory entries / store symlinks\n  -i / -x     include / exclude matching names\n  -RE         enable bracket-list glob matching (already enabled on Unix)\n  -k          convert new source names to portable ASCII DOS 8.3 names\n  -FI / -FI-  enable / disable explicit VFS FIFO byte sources\n  -@          read filenames from stdin\n  -t / -tt    select files from / before a date\n  -T          test archive integrity before replacement\n  -P PASSWORD encrypt new members with a supplied password\n  -e          request and confirm a password through a no-echo host capability\n  -z / -c     read archive / entry comments from stdin\n  -o          set archive time to the latest member time\n  -l          convert text LF line endings to CRLF\n  -ll         convert text CRLF line endings to LF (--from-crlf)\n  -X          strip optional metadata\n  -fz / -fz-  force / disable ZIP64 output\n  -fd         force data descriptors\n  -v          verbose operation (a lone -v shows implementation information)\n  --version   show implementation information and exit\n  -L          show this implementation's license\n  -sf / -sf-  list selected files / totals only, without creating an archive\n  -sc         show processed arguments and exit with status 9\n  -so         show implemented options and exit\n  -sd         show virtual archive processing steps\n  -db / -dc   display byte / entry counters\n  -du / -dv   display entry size / single-volume numbers\n  -dd / -dg   display dots per entry / globally for output bytes\n  -ds SIZE    dot interval (kmgt units; default MB; 0 disables dots)\n  -h          show this help\n\nUse -- after the archive name to pass filenames beginning with '-'.\nLong option equivalents are accepted, for example --junk-paths and\n--compression-method=bzip2. All filesystem operations use the virtual filesystem.\n";
-export declare const zipExtendedHelp = "safe-bash zip\nUsage: zip [options] archive [file ...]\n       zip [options] - [file ...]       write an archive to stdout\n       zip [options] archive -          read a member from stdin\n\n  -r          recurse into directories\n  -j          store basenames, discarding directory paths\n  -q          suppress progress messages\n  -0          store without compression\n  -1 .. -9    select compression effort\n  -Z METHOD   select store, deflate, bzip2, or lzma compression\n  --encryption PROFILE  select zipcrypto or aes-{128,192,256}-ae{1,2}\n  -n SUFFIXES store matching suffixes (colon-separated)\n  -u / -f     update / freshen existing members\n  -d / -U     delete / copy selected archive members\n  -FS         synchronize selected members with filesystem sources\n  -O FILE     write to a separate output archive\n  -A          adjust validated SFX offsets, retaining the inert prefix\n  -F / -FF    repair from central / local records (requires -O FILE)\n  -s SIZE     split into .z01/.z02/.../.zip volumes (minimum 64k; 0 recombines)\n  -sp         approve volume transitions using an explicit host prompt\n  -sv / -sb   report split volumes / ring before a split-pause prompt\n  -m          remove archived sources after successful publication\n  -D / -y     omit directory entries / store symlinks\n  -i / -x     include / exclude matching names\n  -RE         enable bracket-list glob matching (already enabled on Unix)\n  -k          convert new source names to portable ASCII DOS 8.3 names\n  -FI / -FI-  enable / disable explicit VFS FIFO byte sources\n  -@          read filenames from stdin\n  -t / -tt    select files from / before a date\n  -T          test archive integrity before replacement\n  -P PASSWORD encrypt new members with a supplied password\n  -e          request and confirm a password through a no-echo host capability\n  -z / -c     read archive / entry comments from stdin\n  -o          set archive time to the latest member time\n  -l          convert text LF line endings to CRLF\n  -ll         convert text CRLF line endings to LF (--from-crlf)\n  -X          strip optional metadata\n  -fz / -fz-  force / disable ZIP64 output\n  -fd         force data descriptors\n  -v          verbose operation (a lone -v shows implementation information)\n  --version   show implementation information and exit\n  -L          show this implementation's license\n  -sf / -sf-  list selected files / totals only, without creating an archive\n  -sc         show processed arguments and exit with status 9\n  -so         show implemented options and exit\n  -sd         show virtual archive processing steps\n  -db / -dc   display byte / entry counters\n  -du / -dv   display entry size / single-volume numbers\n  -dd / -dg   display dots per entry / globally for output bytes\n  -ds SIZE    dot interval (kmgt units; default MB; 0 disables dots)\n  -h          show this help\n\nUse -- after the archive name to pass filenames beginning with '-'.\nLong option equivalents are accepted, for example --junk-paths and\n--compression-method=bzip2. All filesystem operations use the virtual filesystem.\n\nSelection\n  -RE / --regex means bracket lists, not general regular expressions.\n  -k / --DOS-names converts components after selection and -j; collisions fail.\n  DOS conversion is restricted to printable ASCII. Filters parsed after -k\n  are DOS-converted before matching original case-sensitive source names.\n  -FI / --fifo requires a VFS-reported FIFO and explicit streamingRead capability.\n  FIFO payloads are bounded and cancellation-aware; producer failure aborts output.\n  -r traverses listed directories; -R recursively searches matching names.\n  Do not combine -r and -R. -D omits directory records without stopping traversal.\n  -i patterns and -x patterns accept lists ending at another option or at @.\n  Quote patterns to prevent the shell expanding them before zip receives them.\n  Exclusions take precedence over inclusions. -j flattens selected source names;\n  duplicate basenames fail before the archive is replaced.\n  -nw disables wildcard interpretation; -ws prevents wildcards crossing '/'.\n  -MM makes missing input matches fatal. -t includes files from a date; -tt\n  selects files before a date. Dates accept mmddyyyy or yyyy-mm-dd.\n  -y stores the symbolic link itself; otherwise its target is read.\n  -p accepts the native paths compatibility flag and does not undo -j.\n\nArchive operations\n  The default action adds new members and replaces selected existing members.\n  -u updates changed/new sources; -f freshens existing members only.\n  -d deletes matching archive members; -U copies matching archive members.\n  -FS synchronizes selected existing members, including missing sources.\n  -O output.zip preserves the input archive and publishes a separate output.\n  -m removes sources only after successful publication or stdout completion.\n  Removal needs atomic filesystem support; excluded/nonempty directories remain.\n  -DF writes size/time differences and new members to required separate -O output.\n  -g grows by retaining validated local records when only adding members;\n  replacements/deletions rebuild. Publication uses owned atomic staging or\n  conditional byte publication with opaque host identities and versions.\n  -b directory selects the VFS staging directory, also spooling stdout archives.\n  Cross-provider publication must be supported by the filesystem; no host copy.\n  -J removes a prefix only after validating the complete embedded ZIP and CRCs.\n  -T checks integrity with registered virtual unzip before replacement.\n  -TT \"command args {}\" selects a registered virtual test command; {} is the\n  staged path, or the path is appended. Quotes/escapes form literal arguments;\n  shell operators and substitutions are refused. No host process is spawned.\n  With stdout output -T is ignored.\n  -z reads an archive comment; -c reads selected member comments in archive order.\n  -X strips optional metadata; -X- preserves available metadata.\n  -o sets the archive timestamp to the newest resulting member timestamp.\n\nLogging\n  -lf path writes a VFS log (a missing extension becomes .log).\n  -la appends; -li includes progress in addition to warnings/errors.\n  Logs require atomic conditional byte writes and cannot alias selected inputs.\n  Logs are bounded by maxTextBytes; supplied password bytes are redacted.\n  Completed log/publication effects remain if a later write fails.\n\nCompression and format\n  -Z selects store, deflate, bzip2, or lzma; method names accept unique prefixes.\n  -1 through -9 select effort. Store selection remains through later levels.\n  -n .jpg:.png stores matching suffixes; -9 overrides suffix-based storage.\n  Compression may fall back to STORE for regular files when it expands data.\n  -l converts text LF to CRLF, leaving detected binary input unchanged.\n  -fz forces ZIP64; -fz- disables it. -fd forces signed data descriptors.\n  BZIP2 members use extraction version 4.6, including with ZIP64 records.\n  LZMA is a ZIP format extension (not native Info-ZIP Zip 3.0).\n  LZMA uses version 6.3, a bounded 1 MiB encoder dictionary, and EOS.\n  Readers admit dictionaries up to 8 MiB and SDK 9.4 properties only.\n\nStreaming\n  A '-' input filename reads one member from stdin, named '-'.\n  A '-' archive name writes binary archive bytes to stdout and progress to stderr.\n  With no archive or file operands, zip acts as a stdin-to-stdout filter.\n  Streamed members retain compression even if it expands their data.\n  -@ instead reads newline-separated input filenames; it cannot also read a '-'\n  payload from the same stdin. Empty filename lines are ignored.\n  Complete the output stream before using the resulting archive.\n\nArguments and ZIPOPT\n  Long options accept unique abbreviations and --option=value where appropriate.\n  Use -- after the archive name for literal filenames beginning with '-'.\n  ZIPOPT supplies default arguments before the command arguments. Double quotes\n  group words inside ZIPOPT; shell expansion is not performed on these defaults.\n  -h and -h2 print basic and extended help as soon as they are encountered.\n  --version and -L also exit immediately. Only a lone short -v shows information;\n  --verbose and grouped -v perform an archive operation. Later -q or -v wins.\n  -sc and -so validate all arguments before exiting; -sc returns status 9.\n\nDisplays\n  -sf lists selected names and totals without reading source payloads or writing\n  archives. -sf- and -q suppress names; totals remain visible. With no file\n  operands, -sf lists the input archive. -sd reports only virtual processing steps.\n  Command and diagnostic displays redact credential-shaped arguments and URLs.\n  Display counters accept a trailing '-' to negate them. -ds accepts up to eight\n  characters: digits with an optional k, m, g or t suffix (case-insensitive).\n  Values below 1024 imply MB; nonzero intervals from 1 KB to below 32 KB fail.\n  Empty -ds values restore 10 MB; 0 disables dots. Sizes must be safe integers.\n  Dots use byte intervals, so counts can differ from native codec buffer dots.\n  Per-entry progress appears after bounded preparation; global output dots stay\n  visible with -q. Timed scanning dots and split-volume displays are unavailable.\n";
-export declare const zipVersion = "safe-bash zip (virtual-bash)\nBounded virtual ZIP implementation; not an Info-ZIP native build.\nCompression: store, deflate, bzip2, lzma (format extension). Single-volume ZIP and ZIP64 output.\nFilesystem, signals and byte limits are supplied by the host.\nNative compiler identity and ambient environment are not reported.\n";
-export declare const zipLicense = "safe-bash zip (virtual-bash)\nMIT License\nCopyright (c) 2026 Poe Platform\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\nThis is the virtual implementation license, not the native Info-ZIP license.\n";
+export * from "../../../../safe-bash-zip-engine/zip/help.js";
 //# sourceMappingURL=help.d.ts.map

package/dist/safe-bash/commands/archive/zip/help.js

@@ -1,183 +1,2 @@
-export const zipHelp = `safe-bash zip
-Usage: zip [options] archive [file ...]
-       zip [options] - [file ...]       write an archive to stdout
-       zip [options] archive -          read a member from stdin
-
-  -r          recurse into directories
-  -j          store basenames, discarding directory paths
-  -q          suppress progress messages
-  -0          store without compression
-  -1 .. -9    select compression effort
-  -Z METHOD   select store, deflate, bzip2, or lzma compression
-  --encryption PROFILE  select zipcrypto or aes-{128,192,256}-ae{1,2}
-  -n SUFFIXES store matching suffixes (colon-separated)
-  -u / -f     update / freshen existing members
-  -d / -U     delete / copy selected archive members
-  -FS         synchronize selected members with filesystem sources
-  -O FILE     write to a separate output archive
-  -A          adjust validated SFX offsets, retaining the inert prefix
-  -F / -FF    repair from central / local records (requires -O FILE)
-  -s SIZE     split into .z01/.z02/.../.zip volumes (minimum 64k; 0 recombines)
-  -sp         approve volume transitions using an explicit host prompt
-  -sv / -sb   report split volumes / ring before a split-pause prompt
-  -m          remove archived sources after successful publication
-  -D / -y     omit directory entries / store symlinks
-  -i / -x     include / exclude matching names
-  -RE         enable bracket-list glob matching (already enabled on Unix)
-  -k          convert new source names to portable ASCII DOS 8.3 names
-  -FI / -FI-  enable / disable explicit VFS FIFO byte sources
-  -@          read filenames from stdin
-  -t / -tt    select files from / before a date
-  -T          test archive integrity before replacement
-  -P PASSWORD encrypt new members with a supplied password
-  -e          request and confirm a password through a no-echo host capability
-  -z / -c     read archive / entry comments from stdin
-  -o          set archive time to the latest member time
-  -l          convert text LF line endings to CRLF
-  -ll         convert text CRLF line endings to LF (--from-crlf)
-  -X          strip optional metadata
-  -fz / -fz-  force / disable ZIP64 output
-  -fd         force data descriptors
-  -v          verbose operation (a lone -v shows implementation information)
-  --version   show implementation information and exit
-  -L          show this implementation's license
-  -sf / -sf-  list selected files / totals only, without creating an archive
-  -sc         show processed arguments and exit with status 9
-  -so         show implemented options and exit
-  -sd         show virtual archive processing steps
-  -db / -dc   display byte / entry counters
-  -du / -dv   display entry size / single-volume numbers
-  -dd / -dg   display dots per entry / globally for output bytes
-  -ds SIZE    dot interval (kmgt units; default MB; 0 disables dots)
-  -h          show this help
-
-Use -- after the archive name to pass filenames beginning with '-'.
-Long option equivalents are accepted, for example --junk-paths and
---compression-method=bzip2. All filesystem operations use the virtual filesystem.
-`;
-export const zipExtendedHelp = `${zipHelp}
-Selection
-  -RE / --regex means bracket lists, not general regular expressions.
-  -k / --DOS-names converts components after selection and -j; collisions fail.
-  DOS conversion is restricted to printable ASCII. Filters parsed after -k
-  are DOS-converted before matching original case-sensitive source names.
-  -FI / --fifo requires a VFS-reported FIFO and explicit streamingRead capability.
-  FIFO payloads are bounded and cancellation-aware; producer failure aborts output.
-  -r traverses listed directories; -R recursively searches matching names.
-  Do not combine -r and -R. -D omits directory records without stopping traversal.
-  -i patterns and -x patterns accept lists ending at another option or at @.
-  Quote patterns to prevent the shell expanding them before zip receives them.
-  Exclusions take precedence over inclusions. -j flattens selected source names;
-  duplicate basenames fail before the archive is replaced.
-  -nw disables wildcard interpretation; -ws prevents wildcards crossing '/'.
-  -MM makes missing input matches fatal. -t includes files from a date; -tt
-  selects files before a date. Dates accept mmddyyyy or yyyy-mm-dd.
-  -y stores the symbolic link itself; otherwise its target is read.
-  -p accepts the native paths compatibility flag and does not undo -j.
-
-Archive operations
-  The default action adds new members and replaces selected existing members.
-  -u updates changed/new sources; -f freshens existing members only.
-  -d deletes matching archive members; -U copies matching archive members.
-  -FS synchronizes selected existing members, including missing sources.
-  -O output.zip preserves the input archive and publishes a separate output.
-  -m removes sources only after successful publication or stdout completion.
-  Removal needs atomic filesystem support; excluded/nonempty directories remain.
-  -DF writes size/time differences and new members to required separate -O output.
-  -g grows by retaining validated local records when only adding members;
-  replacements/deletions rebuild. Publication uses owned atomic staging or
-  conditional byte publication with opaque host identities and versions.
-  -b directory selects the VFS staging directory, also spooling stdout archives.
-  Cross-provider publication must be supported by the filesystem; no host copy.
-  -J removes a prefix only after validating the complete embedded ZIP and CRCs.
-  -T checks integrity with registered virtual unzip before replacement.
-  -TT "command args {}" selects a registered virtual test command; {} is the
-  staged path, or the path is appended. Quotes/escapes form literal arguments;
-  shell operators and substitutions are refused. No host process is spawned.
-  With stdout output -T is ignored.
-  -z reads an archive comment; -c reads selected member comments in archive order.
-  -X strips optional metadata; -X- preserves available metadata.
-  -o sets the archive timestamp to the newest resulting member timestamp.
-
-Logging
-  -lf path writes a VFS log (a missing extension becomes .log).
-  -la appends; -li includes progress in addition to warnings/errors.
-  Logs require atomic conditional byte writes and cannot alias selected inputs.
-  Logs are bounded by maxTextBytes; supplied password bytes are redacted.
-  Completed log/publication effects remain if a later write fails.
-
-Compression and format
-  -Z selects store, deflate, bzip2, or lzma; method names accept unique prefixes.
-  -1 through -9 select effort. Store selection remains through later levels.
-  -n .jpg:.png stores matching suffixes; -9 overrides suffix-based storage.
-  Compression may fall back to STORE for regular files when it expands data.
-  -l converts text LF to CRLF, leaving detected binary input unchanged.
-  -fz forces ZIP64; -fz- disables it. -fd forces signed data descriptors.
-  BZIP2 members use extraction version 4.6, including with ZIP64 records.
-  LZMA is a ZIP format extension (not native Info-ZIP Zip 3.0).
-  LZMA uses version 6.3, a bounded 1 MiB encoder dictionary, and EOS.
-  Readers admit dictionaries up to 8 MiB and SDK 9.4 properties only.
-
-Streaming
-  A '-' input filename reads one member from stdin, named '-'.
-  A '-' archive name writes binary archive bytes to stdout and progress to stderr.
-  With no archive or file operands, zip acts as a stdin-to-stdout filter.
-  Streamed members retain compression even if it expands their data.
-  -@ instead reads newline-separated input filenames; it cannot also read a '-'
-  payload from the same stdin. Empty filename lines are ignored.
-  Complete the output stream before using the resulting archive.
-
-Arguments and ZIPOPT
-  Long options accept unique abbreviations and --option=value where appropriate.
-  Use -- after the archive name for literal filenames beginning with '-'.
-  ZIPOPT supplies default arguments before the command arguments. Double quotes
-  group words inside ZIPOPT; shell expansion is not performed on these defaults.
-  -h and -h2 print basic and extended help as soon as they are encountered.
-  --version and -L also exit immediately. Only a lone short -v shows information;
-  --verbose and grouped -v perform an archive operation. Later -q or -v wins.
-  -sc and -so validate all arguments before exiting; -sc returns status 9.
-
-Displays
-  -sf lists selected names and totals without reading source payloads or writing
-  archives. -sf- and -q suppress names; totals remain visible. With no file
-  operands, -sf lists the input archive. -sd reports only virtual processing steps.
-  Command and diagnostic displays redact credential-shaped arguments and URLs.
-  Display counters accept a trailing '-' to negate them. -ds accepts up to eight
-  characters: digits with an optional k, m, g or t suffix (case-insensitive).
-  Values below 1024 imply MB; nonzero intervals from 1 KB to below 32 KB fail.
-  Empty -ds values restore 10 MB; 0 disables dots. Sizes must be safe integers.
-  Dots use byte intervals, so counts can differ from native codec buffer dots.
-  Per-entry progress appears after bounded preparation; global output dots stay
-  visible with -q. Timed scanning dots and split-volume displays are unavailable.
-`;
-export const zipVersion = `safe-bash zip (virtual-bash)
-Bounded virtual ZIP implementation; not an Info-ZIP native build.
-Compression: store, deflate, bzip2, lzma (format extension). Single-volume ZIP and ZIP64 output.
-Filesystem, signals and byte limits are supplied by the host.
-Native compiler identity and ambient environment are not reported.
-`;
-export const zipLicense = `safe-bash zip (virtual-bash)
-MIT License
-Copyright (c) 2026 Poe Platform
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-This is the virtual implementation license, not the native Info-ZIP license.
-`;
+export * from "../../../../safe-bash-zip-engine/zip/help.js";
 //# sourceMappingURL=help.js.map

package/dist/safe-bash/commands/archive/zip/line-endings.d.ts

@@ -1,3 +1,2 @@
-export declare function zipFromCrlf(bytes: Uint8Array, store: boolean, signal: AbortSignal, level?: number): Promise<Uint8Array>;
-export declare function zipToCrlf(bytes: Uint8Array, store: boolean, maxBytes: number, signal: AbortSignal): Promise<Uint8Array>;
+export * from "../../../../safe-bash-zip-engine/zip/line-endings.js";
 //# sourceMappingURL=line-endings.d.ts.map