@procedures/archive 0.0.0-stage → 0.3.0

package/dist/paths.js

@@ -0,0 +1,205 @@
+/**
+ * The check of the entries of an archive before an extract ("zip slip", roadmap R46).
+ *
+ * `planExtract()` examines all the entries before the extract writes a file. A hostile archive
+ * thus changes nothing. The rules:
+ *
+ * 1. A path must be relative and must not have `..`. A drive letter, a UNC path, a NUL character
+ *    and (on Windows) a colon are refused too. A backslash counts as a separator.
+ * 2. An entry must not go through a symbolic link of the archive: a link `a` and a file `a/b`.
+ * 3. A symbolic link must stay in the target. Its target is relative, and the resolution through
+ *    the other links of the archive stays in the target folder. The check knows all the links of
+ *    the archive first, so the order of the entries does not matter.
+ * 4. A path of a link appears only one time in the archive.
+ * 5. A hard link names a file that came before it in the archive.
+ * 6. A folder of the target that the extract goes through must not be a symbolic link.
+ * 7. Without `overwrite`, an existing file at the path of an entry is an error.
+ *
+ * Rules 2 and 3 compare the paths two times: with the case, and without the case. A file system
+ * that ignores the case (Windows, macOS) then gets the same protection as one that does not.
+ */
+import { lstatSync } from "node:fs";
+import { join } from "node:path";
+import { ArchiveError } from "./errors.js";
+/** The longest chain of links that a resolution follows. More is a loop. */
+const MAX_LINK_STEPS = 40;
+const isWindows = process.platform === "win32";
+/** True for a path that starts at a root: `/x`, `\x`, `C:x`, `C:\x` or `\\server\share`. */
+export function isAbsoluteName(name) {
+    return /^[/\\]/.test(name) || /^[A-Za-z]:/.test(name);
+}
+/**
+ * This function gives the parts of the path of an entry. It throws `UNSAFE_PATH` for an absolute
+ * path, a `..`, a NUL character, and on Windows a colon (an alternate data stream).
+ */
+export function entryParts(name, code = "UNSAFE_PATH") {
+    if (name.includes("\0"))
+        throw new ArchiveError(code, `The entry ${JSON.stringify(name)} has a NUL character`, name);
+    if (isAbsoluteName(name))
+        throw new ArchiveError(code, `The entry ${name} has an absolute path`, name);
+    const parts = name.split(/[/\\]+/).filter((part) => part !== "" && part !== ".");
+    for (const part of parts) {
+        if (part === "..")
+            throw new ArchiveError(code, `The entry ${name} has "..": it can go out of the target folder`, name);
+        if (isWindows && part.includes(":"))
+            throw new ArchiveError(code, `The entry ${name} has a colon, which Windows reads as a data stream`, name);
+    }
+    return parts;
+}
+/** The parts of the target of a symbolic link. `..` stays: the resolution follows it. */
+function linkParts(target) {
+    return target.split(/[/\\]+/).filter((part) => part !== "" && part !== ".");
+}
+/** The key of a path, with the case or without it. */
+function keyOf(parts, fold) {
+    const key = parts.join("/");
+    return fold ? key.normalize("NFC").toLowerCase() : key;
+}
+/** The status of a path, or undefined when it does not exist. The results stay in a cache. */
+function statOf(cache, path) {
+    if (cache.has(path))
+        return cache.get(path);
+    let stats;
+    try {
+        stats = lstatSync(path);
+    }
+    catch {
+        stats = undefined;
+    }
+    cache.set(path, stats);
+    return stats;
+}
+/**
+ * The resolution of parts through the links of the archive: the parts of the place, or undefined
+ * when the resolution goes out of the root, meets an absolute link, meets a link of the target
+ * folder that is not in the archive, or follows too many links.
+ */
+function resolve(parts, links, fold, foreignLink, budget) {
+    const place = [];
+    for (const part of parts) {
+        if (part === "..") {
+            if (place.length === 0)
+                return undefined;
+            place.pop();
+            continue;
+        }
+        place.push(part);
+        const target = links.get(keyOf(place, fold));
+        if (target === undefined) {
+            if (foreignLink(place))
+                return undefined;
+            continue;
+        }
+        if (--budget.steps < 0 || isAbsoluteName(target))
+            return undefined;
+        const resolved = resolve([...place.slice(0, -1), ...linkParts(target)], links, fold, foreignLink, budget);
+        if (resolved === undefined)
+            return undefined;
+        place.splice(0, place.length, ...resolved);
+    }
+    return place;
+}
+/**
+ * This function examines the entries of an archive for an extract into `target` (a real path),
+ * and gives them with their parts. It throws the first problem. It writes nothing.
+ */
+export function planExtract(entries, target, options) {
+    if (entries.length > options.maxEntries) {
+        throw new ArchiveError("TOO_LARGE", `The archive has ${entries.length} entries, more than the limit of ${options.maxEntries}`);
+    }
+    let bytes = 0;
+    const planned = [];
+    for (const entry of entries) {
+        if (entry.kind === "other")
+            throw new ArchiveError("UNSUPPORTED_ENTRY", `The entry ${entry.name} is a special file (a device or a FIFO)`, entry.name);
+        const parts = entryParts(entry.name);
+        if (parts.length === 0) {
+            if (entry.kind === "directory")
+                continue;
+            throw new ArchiveError("UNSAFE_PATH", `The entry ${JSON.stringify(entry.name)} has no name`, entry.name);
+        }
+        if (entry.kind === "file") {
+            bytes += entry.size;
+            if (bytes > options.maxBytes)
+                throw new ArchiveError("TOO_LARGE", `The files of the archive have more than ${options.maxBytes} bytes`, entry.name);
+        }
+        planned.push({ ...entry, parts, path: parts.join("/") });
+    }
+    // The links of the archive, with the case and without it
+    const links = [new Map(), new Map()];
+    for (const entry of planned) {
+        if (entry.kind !== "symlink")
+            continue;
+        for (const [index, map] of links.entries())
+            map.set(keyOf(entry.parts, index === 1), entry.linkTarget ?? "");
+    }
+    const stats = new Map();
+    const foreignLink = (parts) => statOf(stats, join(target, ...parts))?.isSymbolicLink() === true;
+    const files = new Set();
+    const seenLinks = new Set();
+    for (const entry of planned) {
+        const keys = [keyOf(entry.parts, false), keyOf(entry.parts, true)];
+        // Rule 2: no part before the last is a link of the archive
+        for (let length = 1; length < entry.parts.length; length++) {
+            const prefix = entry.parts.slice(0, length);
+            if (links[0].has(keyOf(prefix, false)) || links[1].has(keyOf(prefix, true))) {
+                throw new ArchiveError("UNSAFE_PATH", `The entry ${entry.name} goes through the link ${prefix.join("/")} of the archive`, entry.name);
+            }
+        }
+        // Rule 4: the path of a link appears one time
+        const isLinkPath = links[0].has(keys[0]) || links[1].has(keys[1]);
+        if (isLinkPath && (entry.kind !== "symlink" || seenLinks.has(keys[1]))) {
+            throw new ArchiveError("UNSAFE_LINK", `The path ${entry.name} is a link and another entry of the archive`, entry.name);
+        }
+        if (entry.kind === "symlink") {
+            seenLinks.add(keys[1]);
+            // Rule 3: the target stays in the target folder
+            const linkTarget = entry.linkTarget ?? "";
+            if (linkTarget === "" || isAbsoluteName(linkTarget) || linkTarget.includes("\0")) {
+                throw new ArchiveError("UNSAFE_LINK", `The link ${entry.name} points to ${JSON.stringify(linkTarget)}: a link must point to a relative path`, entry.name);
+            }
+            for (const fold of [false, true]) {
+                const resolved = resolve([...entry.parts.slice(0, -1), ...linkParts(linkTarget)], links[fold ? 1 : 0], fold, foreignLink, { steps: MAX_LINK_STEPS });
+                if (resolved === undefined) {
+                    throw new ArchiveError("UNSAFE_LINK", `The link ${entry.name} points to ${linkTarget}, out of the target folder`, entry.name);
+                }
+            }
+        }
+        if (entry.kind === "hardlink") {
+            // Rule 5: a hard link names an earlier file of the archive
+            const linked = entryParts(entry.linkTarget ?? "", "UNSAFE_LINK");
+            if (!files.has(keyOf(linked, true))) {
+                throw new ArchiveError("UNSAFE_LINK", `The hard link ${entry.name} names ${entry.linkTarget}, which is not an earlier file of the archive`, entry.name);
+            }
+        }
+        if (entry.kind === "file")
+            files.add(keys[1]);
+        // Rule 6: the folders of the target on the way are folders, not links
+        for (let length = 1; length < entry.parts.length; length++) {
+            const folder = join(target, ...entry.parts.slice(0, length));
+            const found = statOf(stats, folder);
+            if (found === undefined)
+                break;
+            if (found.isSymbolicLink())
+                throw new ArchiveError("UNSAFE_PATH", `The folder ${folder} of the target is a link: the entry ${entry.name} can go out through it`, entry.name);
+            if (!found.isDirectory())
+                throw new ArchiveError("EXISTS", `${folder} is a file, and the entry ${entry.name} needs a folder there`, entry.name);
+        }
+        // Rule 7: an existing path
+        const existing = statOf(stats, join(target, ...entry.parts));
+        if (existing !== undefined) {
+            if (entry.kind === "directory") {
+                if (!existing.isDirectory())
+                    throw new ArchiveError("EXISTS", `${join(target, ...entry.parts)} exists and is not a folder`, entry.name);
+            }
+            else if (existing.isDirectory()) {
+                throw new ArchiveError("EXISTS", `${join(target, ...entry.parts)} is a folder, and the entry ${entry.name} is not`, entry.name);
+            }
+            else if (!options.overwrite) {
+                throw new ArchiveError("EXISTS", `${join(target, ...entry.parts)} exists: give overwrite: true to replace it`, entry.name);
+            }
+        }
+    }
+    return planned;
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAc,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA8B3C,4EAA4E;AAC5E,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE/C,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAI,GAAkC,aAAa;IAC1F,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;IACrH,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,aAAa,IAAI,uBAAuB,EAAE,IAAI,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;IACjF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,aAAa,IAAI,+CAA+C,EAAE,IAAI,CAAC,CAAC;QACxH,IAAI,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,aAAa,IAAI,oDAAoD,EAAE,IAAI,CAAC,CAAC;IACjJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED,sDAAsD;AACtD,SAAS,KAAK,CAAC,KAAwB,EAAE,IAAa;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACzD,CAAC;AAED,8FAA8F;AAC9F,SAAS,MAAM,CAAC,KAAqC,EAAE,IAAY;IACjE,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,SAAS,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CACd,KAAwB,EACxB,KAAkC,EAClC,IAAa,EACb,WAAkD,EAClD,MAAyB;IAEzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzC,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,WAAW,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzC,SAAS;QACX,CAAC;QACD,IAAI,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC1G,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAA4B,EAAE,MAAc,EAAE,OAAoB;IAC5F,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,mBAAmB,OAAO,CAAC,MAAM,oCAAoC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,aAAa,KAAK,CAAC,IAAI,yCAAyC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtJ,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS;YACzC,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,aAAa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;YACpB,IAAI,KAAK,GAAG,OAAO,CAAC,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,2CAA2C,OAAO,CAAC,QAAQ,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,yDAAyD;IACzD,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,EAAkB,EAAE,IAAI,GAAG,EAAkB,CAAU,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QACvC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IACnD,MAAM,WAAW,GAAG,CAAC,KAAwB,EAAW,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,IAAI,CAAC;IAC5H,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,2DAA2D;QAC3D,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC5E,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,aAAa,KAAK,CAAC,IAAI,0BAA0B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxI,CAAC;QACH,CAAC;QACD,8CAA8C;QAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACpE,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,YAAY,KAAK,CAAC,IAAI,6CAA6C,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;YACxB,gDAAgD;YAChD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;YAC1C,IAAI,UAAU,KAAK,EAAE,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,YAAY,KAAK,CAAC,IAAI,cAAc,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,wCAAwC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5J,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBACrJ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,YAAY,KAAK,CAAC,IAAI,cAAc,UAAU,4BAA4B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChI,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,2DAA2D;YAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,iBAAiB,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,UAAU,+CAA+C,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1J,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QAE/C,sEAAsE;QACtE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM;YAC/B,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,cAAc,MAAM,uCAAuC,KAAK,CAAC,IAAI,wBAAwB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7K,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,MAAM,6BAA6B,KAAK,CAAC,IAAI,uBAAuB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClJ,CAAC;QACD,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;oBAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1I,CAAC;iBAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,+BAA+B,KAAK,CAAC,IAAI,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClI,CAAC;iBAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7H,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/procedures/archive/create.d.ts

@@ -0,0 +1,14 @@
+/**
+ * archive.create procedure
+ *
+ * Make a tar.gz, tar or zip archive of a folder or of files. The procedure writes a temporary
+ * file next to the archive, and renames it at the end: a failed call leaves no part of an
+ * archive. The walk does not follow a symbolic link: the archive gets the link.
+ */
+import { type ArchiveSettings } from "../../format.js";
+import type { ArchiveCreateInput, ArchiveCreateOutput } from "../../types.js";
+/**
+ * Make a tar.gz or zip archive of a folder or of files
+ */
+export declare function archiveCreate(input: ArchiveCreateInput, settings?: ArchiveSettings): Promise<ArchiveCreateOutput>;
+//# sourceMappingURL=create.d.ts.map

package/dist/procedures/archive/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/procedures/archive/create.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAA0C,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAK/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAsB9E;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,QAAQ,GAAE,eAA0C,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAyCjJ"}

package/dist/procedures/archive/create.js

@@ -0,0 +1,81 @@
+/**
+ * archive.create procedure
+ *
+ * Make a tar.gz, tar or zip archive of a folder or of files. The procedure writes a temporary
+ * file next to the archive, and renames it at the end: a failed call leaves no part of an
+ * archive. The walk does not follow a symbolic link: the archive gets the link.
+ */
+import { randomBytes } from "node:crypto";
+import { mkdir, open, readFile, rename, rm, stat } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { ArchiveError } from "../../errors.js";
+import { DEFAULT_ARCHIVE_SETTINGS, formatOfName } from "../../format.js";
+import { entryParts } from "../../paths.js";
+import { createTar } from "../../tar.js";
+import { folderNames, walk } from "../../walk.js";
+import { writeZip } from "../../zip.js";
+/** The base folder and the names of the input. Exactly one of `source` and `files`. */
+async function inputNames(input) {
+    if ((input.source === undefined) === (input.files === undefined)) {
+        throw new ArchiveError("UNSAFE_PATH", "archive.create needs exactly one of source and files");
+    }
+    if (input.source !== undefined) {
+        const base = resolve(input.source);
+        const stats = await stat(base).catch(() => undefined);
+        if (!stats?.isDirectory())
+            throw new ArchiveError("UNSAFE_PATH", `The source ${base} is not a folder`);
+        return { base, names: await folderNames(base) };
+    }
+    const base = resolve(input.cwd ?? process.cwd());
+    const names = (input.files ?? []).map((name) => {
+        const parts = entryParts(name);
+        if (parts.length === 0)
+            throw new ArchiveError("UNSAFE_PATH", `The file ${JSON.stringify(name)} names the base folder: give source for a whole folder`, name);
+        return parts.join("/");
+    });
+    return { base, names };
+}
+/**
+ * Make a tar.gz or zip archive of a folder or of files
+ */
+export async function archiveCreate(input, settings = DEFAULT_ARCHIVE_SETTINGS) {
+    const format = formatOfName(input.output, input.format);
+    const output = resolve(input.output);
+    const existing = await stat(output).catch(() => undefined);
+    if (existing?.isDirectory())
+        throw new ArchiveError("EXISTS", `${output} is a folder`);
+    if (existing !== undefined && input.overwrite !== true)
+        throw new ArchiveError("EXISTS", `${output} exists: give overwrite: true to replace it`);
+    const { base, names } = await inputNames(input);
+    const temporary = `${output}.${randomBytes(6).toString("hex")}.tmp`;
+    const entries = await walk(base, names, { ...settings, exclude: new Set([output, temporary]) });
+    await mkdir(dirname(output), { recursive: true });
+    try {
+        if (format === "zip") {
+            const items = entries.map((entry) => ({
+                name: entry.name,
+                kind: entry.kind,
+                mode: entry.mode,
+                mtime: entry.mtime,
+                data: entry.kind === "file" ? () => readFile(entry.path) : entry.kind === "symlink" ? Buffer.from(entry.linkTarget ?? "", "utf8") : undefined,
+            }));
+            const handle = await open(temporary, "wx");
+            try {
+                await writeZip(handle, items);
+            }
+            finally {
+                await handle.close();
+            }
+        }
+        else {
+            await createTar(temporary, base, entries.map((entry) => entry.name), format === "tar.gz");
+        }
+        await rename(temporary, output);
+    }
+    catch (error) {
+        await rm(temporary, { force: true });
+        throw error;
+    }
+    return { path: output, format, entries: entries.length, bytes: (await stat(output)).size };
+}
+//# sourceMappingURL=create.js.map

package/dist/procedures/archive/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/procedures/archive/create.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAwB,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAsB,MAAM,cAAc,CAAC;AAG5D,uFAAuF;AACvF,KAAK,UAAU,UAAU,CAAC,KAAyB;IACjD,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,sDAAsD,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,cAAc,IAAI,kBAAkB,CAAC,CAAC;QACvG,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,wDAAwD,EAAE,IAAI,CAAC,CAAC;QAC9J,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAyB,EAAE,QAAQ,GAAoB,wBAAwB;IACjH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,QAAQ,EAAE,WAAW,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,MAAM,cAAc,CAAC,CAAC;IACvF,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,GAAG,MAAM,6CAA6C,CAAC,CAAC;IAEjJ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;IAEhG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,MAAM,KAAK,GAAoB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACrD,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;aAC9I,CAAC,CAAC,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,CACb,SAAS,EACT,IAAI,EACJ,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAClC,MAAM,KAAK,QAAQ,CACpB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7F,CAAC"}

package/dist/procedures/archive/extract.d.ts

@@ -0,0 +1,17 @@
+/**
+ * archive.extract procedure
+ *
+ * Extract a tar.gz, tar or zip archive into a folder. The procedure examines all the entries
+ * before it writes a file (`planExtract()`): an entry with `..` or an absolute path, a symbolic
+ * link out of the target, an entry through a link, a special file, an existing file without
+ * `overwrite`, or an archive over the limits changes nothing.
+ *
+ * A damaged entry (its size or its CRC-32) stops the extract, and the files before it stay.
+ */
+import { type ArchiveSettings } from "../../format.js";
+import type { ArchiveExtractInput, ArchiveExtractOutput } from "../../types.js";
+/**
+ * Extract a tar.gz or zip archive into a folder, with a check of each path
+ */
+export declare function archiveExtract(input: ArchiveExtractInput, settings?: ArchiveSettings): Promise<ArchiveExtractOutput>;
+//# sourceMappingURL=extract.d.ts.map

package/dist/procedures/archive/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../../src/procedures/archive/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAA0C,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAI/F,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAqDhF;;GAEG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,GAAE,eAA0C,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA6BpJ"}

package/dist/procedures/archive/extract.js

@@ -0,0 +1,101 @@
+/**
+ * archive.extract procedure
+ *
+ * Extract a tar.gz, tar or zip archive into a folder. The procedure examines all the entries
+ * before it writes a file (`planExtract()`): an entry with `..` or an absolute path, a symbolic
+ * link out of the target, an entry through a link, a special file, an existing file without
+ * `overwrite`, or an archive over the limits changes nothing.
+ *
+ * A damaged entry (its size or its CRC-32) stops the extract, and the files before it stay.
+ */
+import { lstat, mkdir, realpath, rm, symlink, unlink, utimes } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { DEFAULT_ARCHIVE_SETTINGS, formatOfFile } from "../../format.js";
+import { planExtract } from "../../paths.js";
+import { extractTar, readTarEntries } from "../../tar.js";
+import { extractZipFile, readZipDirectory, readZipLink } from "../../zip.js";
+/** This function removes an old file or link at a path, so a new write does not follow it. */
+async function clear(path) {
+    const found = await lstat(path).catch(() => undefined);
+    if (found !== undefined && !found.isDirectory())
+        await unlink(path);
+}
+/** This function writes the checked entries of a zip, in the order of the archive. */
+async function writeZipEntries(archive, target, planned, zipEntries) {
+    for (const entry of planned) {
+        const destination = join(target, ...entry.parts);
+        if (entry.kind === "directory") {
+            await mkdir(destination, { recursive: true });
+            continue;
+        }
+        await mkdir(dirname(destination), { recursive: true });
+        await clear(destination);
+        if (entry.kind === "symlink") {
+            await symlink(entry.linkTarget ?? "", destination);
+            continue;
+        }
+        const zipEntry = zipEntries[entry.index];
+        try {
+            await extractZipFile(archive, zipEntry, destination, zipEntry.mode === undefined ? undefined : zipEntry.mode & 0o777);
+        }
+        catch (error) {
+            // A damaged entry leaves no part of its file
+            await rm(destination, { force: true });
+            throw error;
+        }
+        await utimes(destination, zipEntry.mtime, zipEntry.mtime);
+    }
+}
+/** The counts of the output. */
+function countsOf(planned) {
+    let files = 0;
+    let directories = 0;
+    let links = 0;
+    let bytes = 0;
+    for (const entry of planned) {
+        if (entry.kind === "file") {
+            files++;
+            bytes += entry.size;
+        }
+        else if (entry.kind === "directory") {
+            directories++;
+        }
+        else {
+            links++;
+        }
+    }
+    return { files, directories, links, bytes };
+}
+/**
+ * Extract a tar.gz or zip archive into a folder, with a check of each path
+ */
+export async function archiveExtract(input, settings = DEFAULT_ARCHIVE_SETTINGS) {
+    const archive = resolve(input.archive);
+    const format = await formatOfFile(archive, input.format);
+    const overwrite = input.overwrite === true;
+    // The entries, before a write
+    let raw;
+    let zipEntries = [];
+    if (format === "zip") {
+        zipEntries = await readZipDirectory(archive, settings.maxEntries);
+        raw = [];
+        for (const [index, entry] of zipEntries.entries()) {
+            raw.push({ name: entry.name, kind: entry.kind, size: entry.size, index, ...(entry.kind === "symlink" ? { linkTarget: await readZipLink(archive, entry) } : {}) });
+        }
+    }
+    else {
+        raw = (await readTarEntries(archive, settings)).map((entry) => ({ name: entry.name, kind: entry.kind, size: entry.size, linkTarget: entry.linkTarget }));
+    }
+    const folder = resolve(input.target);
+    await mkdir(folder, { recursive: true });
+    const target = await realpath(folder);
+    const planned = planExtract(raw, target, { overwrite, maxBytes: settings.maxBytes, maxEntries: settings.maxEntries });
+    if (format === "zip") {
+        await writeZipEntries(archive, target, planned, zipEntries);
+    }
+    else if (planned.length > 0) {
+        await extractTar(archive, target, new Set(planned.map((entry) => entry.name)));
+    }
+    return { target, format, ...countsOf(planned) };
+}
+//# sourceMappingURL=extract.js.map

package/dist/procedures/archive/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../../src/procedures/archive/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAwB,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAoC,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAiB,MAAM,cAAc,CAAC;AAG5F,8FAA8F;AAC9F,KAAK,UAAU,KAAK,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,MAAc,EAAE,OAAgC,EAAE,UAA+B;IAC/H,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;QACzB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,KAAM,CAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;QACxH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6CAA6C;YAC7C,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,gCAAgC;AAChC,SAAS,QAAQ,CAAC,OAAgC;IAChD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,KAAK,EAAE,CAAC;YACR,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACtC,WAAW,EAAE,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA0B,EAAE,QAAQ,GAAoB,wBAAwB;IACnH,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;IAE3C,8BAA8B;IAC9B,IAAI,GAAe,CAAC;IACpB,IAAI,UAAU,GAAe,EAAE,CAAC;IAChC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,UAAU,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClE,GAAG,GAAG,EAAE,CAAC;QACT,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpK,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC3J,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAEtH,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;AAClD,CAAC"}

package/dist/procedures/archive/index.d.ts

@@ -0,0 +1,4 @@
+export { archiveCreate } from "./create.js";
+export { archiveExtract } from "./extract.js";
+export { archiveList } from "./list.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/procedures/archive/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/procedures/archive/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/procedures/archive/index.js

@@ -0,0 +1,4 @@
+export { archiveCreate } from "./create.js";
+export { archiveExtract } from "./extract.js";
+export { archiveList } from "./list.js";
+//# sourceMappingURL=index.js.map

package/dist/procedures/archive/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/procedures/archive/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/procedures/archive/list.d.ts

@@ -0,0 +1,15 @@
+/**
+ * archive.list procedure
+ *
+ * The entries of a tar.gz, tar or zip archive: the path, the kind, the size, the mode, the time
+ * and the target of a link. The list reads the archive and writes nothing.
+ */
+import { type ArchiveSettings } from "../../format.js";
+import type { ArchiveEntry, ArchiveFormat, ArchiveListInput, ArchiveListOutput } from "../../types.js";
+/** The entries of an archive of a known format. `extract` uses them too. */
+export declare function readEntries(path: string, format: ArchiveFormat, settings: ArchiveSettings): Promise<ArchiveEntry[]>;
+/**
+ * The entries of a tar.gz or zip archive
+ */
+export declare function archiveList(input: ArchiveListInput, settings?: ArchiveSettings): Promise<ArchiveListOutput>;
+//# sourceMappingURL=list.d.ts.map

package/dist/procedures/archive/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/procedures/archive/list.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAA0C,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAG/F,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEvG,4EAA4E;AAC5E,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAyBzH;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,GAAE,eAA0C,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAK3I"}

package/dist/procedures/archive/list.js

@@ -0,0 +1,47 @@
+/**
+ * archive.list procedure
+ *
+ * The entries of a tar.gz, tar or zip archive: the path, the kind, the size, the mode, the time
+ * and the target of a link. The list reads the archive and writes nothing.
+ */
+import { resolve } from "node:path";
+import { DEFAULT_ARCHIVE_SETTINGS, formatOfFile } from "../../format.js";
+import { readTarEntries } from "../../tar.js";
+import { readZipDirectory, readZipLink } from "../../zip.js";
+/** The entries of an archive of a known format. `extract` uses them too. */
+export async function readEntries(path, format, settings) {
+    if (format === "zip") {
+        const entries = await readZipDirectory(path, settings.maxEntries);
+        const result = [];
+        for (const entry of entries) {
+            result.push({
+                path: entry.name,
+                kind: entry.kind,
+                size: entry.size,
+                ...(entry.mode !== undefined ? { mode: entry.mode } : {}),
+                mtime: entry.mtime.toISOString(),
+                ...(entry.kind === "symlink" ? { linkTarget: await readZipLink(path, entry) } : {}),
+            });
+        }
+        return result;
+    }
+    const entries = await readTarEntries(path, settings);
+    return entries.map((entry) => ({
+        path: entry.name,
+        kind: entry.kind,
+        size: entry.size,
+        ...(entry.mode !== undefined ? { mode: entry.mode & 0o7777 } : {}),
+        ...(entry.mtime !== undefined ? { mtime: entry.mtime.toISOString() } : {}),
+        ...(entry.linkTarget !== undefined ? { linkTarget: entry.linkTarget } : {}),
+    }));
+}
+/**
+ * The entries of a tar.gz or zip archive
+ */
+export async function archiveList(input, settings = DEFAULT_ARCHIVE_SETTINGS) {
+    const path = resolve(input.archive);
+    const format = await formatOfFile(path, input.format);
+    const entries = await readEntries(path, format, { ...settings, maxBytes: Number.MAX_SAFE_INTEGER });
+    return { format, entries, bytes: entries.reduce((sum, entry) => sum + (entry.kind === "file" ? entry.size : 0), 0) };
+}
+//# sourceMappingURL=list.js.map

package/dist/procedures/archive/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/procedures/archive/list.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAwB,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG7D,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,MAAqB,EAAE,QAAyB;IAC9F,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;gBAChC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAuB,EAAE,QAAQ,GAAoB,wBAAwB;IAC7G,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACpG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACvH,CAAC"}

package/dist/register.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Importing this file registers the procedures of @procedures/archive in the global registry:
+ * `import "@procedures/archive/register"`. The package root registers nothing.
+ */
+export * from "./module.js";
+//# sourceMappingURL=register.d.ts.map

package/dist/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,cAAc,aAAa,CAAC"}

package/dist/register.js

@@ -0,0 +1,8 @@
+/**
+ * Importing this file registers the procedures of @procedures/archive in the global registry:
+ * `import "@procedures/archive/register"`. The package root registers nothing.
+ */
+import { registerArchiveProcedures } from "./module.js";
+export * from "./module.js";
+registerArchiveProcedures();
+//# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,cAAc,aAAa,CAAC;AAE5B,yBAAyB,EAAE,CAAC"}

package/dist/tar.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Tar and tar.gz archives with `tar` (node-tar), the tar library of npm.
+ *
+ * - The list reads the headers with a `Parser`. It stops at the limit of entries or of bytes, so a
+ *   compressed archive with a very large content stops early.
+ * - The extract runs after the check of `planExtract()`. It keeps the protections of node-tar:
+ *   no absolute path, no `..`, and no write through a symbolic link. Its filter lets only the
+ *   checked entries through, and `strict` makes each warning an error.
+ */
+import type { ArchiveEntryKind } from "./types.js";
+/** One header of a tar archive. */
+export interface TarEntryInfo {
+    readonly name: string;
+    readonly kind: ArchiveEntryKind;
+    readonly size: number;
+    readonly mode: number | undefined;
+    readonly mtime: Date | undefined;
+    readonly linkTarget: string | undefined;
+}
+/**
+ * This function reads the headers of a tar or tar.gz archive. It throws `TOO_LARGE` at more than
+ * `maxEntries` entries or more than `maxBytes` bytes of files.
+ */
+export declare function readTarEntries(path: string, limits: {
+    maxEntries: number;
+    maxBytes: number;
+}): Promise<TarEntryInfo[]>;
+/**
+ * This function extracts a tar or tar.gz archive into `target`, after the check. Only the names
+ * of `allowed` pass the filter. A name that the check did not see is an error at the end.
+ */
+export declare function extractTar(path: string, target: string, allowed: ReadonlySet<string>): Promise<void>;
+/**
+ * This function writes a tar or tar.gz archive of the `names` (relative to `cwd`) to `file`. The
+ * names are the full list: the walk of `archive.create` gives each file and folder.
+ */
+export declare function createTar(file: string, cwd: string, names: readonly string[], gzip: boolean): Promise<void>;
+//# sourceMappingURL=tar.d.ts.map

package/dist/tar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar.d.ts","sourceRoot":"","sources":["../src/tar.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,mCAAmC;AACnC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AA0DD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAO5H;AA6DD;;;GAGG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB1G;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjH"}