@t4h.framework/zip 0.2.9 → 0.2.11

package/.ai/skills/framework-zip/SKILL.md

@@ -1,67 +1,43 @@
 ---
 name: framework-zip
 description: >-
-  Guides correct use of @t4h.framework/zip in workflows: opening a ZIP archive
-  that arrives from SFTP, HTTP or storage, listing what is inside it without
-  downloading it, and extracting the entries that matter into `Binary` files
-  that `read`, `split` and `sftp.put` accept. Use whenever a workflow receives
-  a `.zip` (a compressed batch file, a bundle of invoices, a partner's return
-  package), whenever the user mentions unzipping, decompressing, inflate,
-  deflate, zip entries, or the symbols `unzip`, `list`, `ZipEntry`,
-  `ZipExtractActivity`, and above all when someone is about to hand-roll a
-  lazy `Binary` that inflates on `stream()` in App code. Prefer this skill
-  over `node:zlib` in workflow code and over any hand-written ZIP parsing.
+  Guides the use of @t4h.framework/zip to read a ZIP archive in a T4H
+  Framework workflow: list() to read the entries without their content, and
+  unzip() with include/exclude globs to extract entries into Binary files that
+  read, split and sftp.put accept (ZipEntry, ZipEntryInfo, ZipExtractActivity,
+  ZipListActivity). Use when a workflow receives a .zip (a compressed batch
+  file, a bundle of invoices, a partner return package), when someone asks to
+  unzip, decompress or inflate, and when someone is about to use node:zlib or
+  write a lazy Binary that inflates on stream() in workflow code.
 ---
 
 # @t4h.framework/zip
 
-Reading ZIP archives inside a workflow. Package path: `framework/packages/zip`.
-Peer dependencies: `@t4h.framework/core`, `@t4h.framework/fs`.
+## Extract the entry you need
 
-## Import surface
-
-```typescript
-import { list, unzip } from '@t4h.framework/zip'
-```
-
-Two durable activities, nothing else to wire:
-
-- `unzip(archive, options?)` — extracts entries into files, resolves with
-  `ZipEntry[]` (`{ path, binary, contentLength, compressedLength,
-compressionMethod, crc32, lastModifiedAt, directory }`), directories
-  excluded, in central directory order.
-- `list(archive, options?)` — the same metadata **without** `binary` and
-  without transferring content, directories included.
-
-`archive` is any `Binary`: `sftp.get`, an HTTP response body, `write`, a slice.
-
-## Workflow usage
-
-The canonical pipeline — fetch a compressed batch, extract the one file that
-carries the records, fan it out:
+1. Get the archive as a `Binary` (`sftp.get`, an HTTP body, `write`).
+2. Call `unzip` once, high in the workflow, with an `include` glob.
+3. Check the result: no match gives an empty array, not an error.
+4. Pass `entry.binary` down to `read`, `split` or `sftp.put`.
 
 ```typescript
 import { split, Split } from '@t4h.framework/fs'
 import { unzip } from '@t4h.framework/zip'
 
-const main = new Workflow(inputSchema, async input => {
-  const archive = await sftp.get(input.path)
+const archive = await sftp.get(input.path)
 
-  const [file] = await unzip(archive, { include: 'MOVIMENTO.TXT' })
+const [file] = await unzip(archive, { include: 'MOVIMENTO.TXT' })
 
-  if (!file) throw new Error(`${input.path} has no movement file`)
+if (!file) throw new Error(`${input.path} has no movement file`)
 
-  return await split(file.binary, processRecord, {
-    delimiter: Split.line(),
-  })
-})
+return await split(file.binary, processRecord, { delimiter: Split.line() })
 ```
 
-Deciding from metadata first, when most runs do not need the content:
+When the decision needs only names, sizes or dates, call `list` first. It does
+not extract content:
 
 ```typescript
 const entries = await list(archive)
-
 const invoice = entries.find(entry => entry.path.endsWith(`/${id}.txt`))
 
 if (!invoice) return { status: 'missing' }
@@ -69,86 +45,39 @@ if (!invoice) return { status: 'missing' }
 const [extracted] = await unzip(archive, { include: invoice.path })
 ```
 
-## Options
-
-| Option        | Applies to      | Default | Behavior                                                               |
-| ------------- | --------------- | ------- | ---------------------------------------------------------------------- |
-| `include`     | `unzip`, `list` | —       | Glob or array of globs an entry must match.                            |
-| `exclude`     | `unzip`, `list` | —       | Globs that drop entries, applied after `include`.                      |
-| `encoding`    | `unzip`, `list` | `utf8`  | Decoding of entry names not flagged UTF-8 (legacy archives: `latin1`). |
-| `contentType` | `unzip`         | —       | Content type of the extracted files; omitted, the claim infers it.     |
-
-Patterns match the whole entry path, case sensitively: `*` and `?` never cross
-a `/`, `**` does (`'**.csv'` reaches any depth, `'invoices/*'` one level). An
-`include` matching nothing resolves with an empty array — always check.
-
-## Behaviors you can rely on
-
-- **Content never enters the workflow.** Only file references do; the bytes go
-  from the archive to storage, inflated in a stream with backpressure.
-- **You pay for what you extract.** A ZIP's index sits at the end of the file,
-  so the listing is a ranged read of the tail and each entry is fetched by
-  offset — pulling one file out of a 6 MB archive does not download 6 MB. A
-  binary the claim cannot slice (SFTP, HTTP) is streamed **once** into storage
-  first, then read by range.
-- **Corruption fails the activity.** CRC-32 and size are verified as the entry
-  flows to storage.
-- **Hostile paths are refused** before anything is written (`../`, absolute,
-  drive qualified).
-- **Format coverage.** Stored and deflate, ZIP64, data descriptors, archive
-  comments, UTF-8 and legacy names, empty entries. Encrypted entries and other
-  compression methods are refused with a `TypeError`.
-
-## Limits
-
-- **No writing.** The package reads archives; it does not create them. A file
-  to send compressed has to be produced another way.
-- **Deflate and stored only.** bzip2, LZMA and zstd entries are refused.
-- **Extraction is one activity per call.** The result is recorded whole, so a
-  `unzip` with no `include` over a 3 000-entry archive puts 3 000 references in
-  the history and 3 000 files in storage. Filter.
-- **What is bounded and what is not.** Entry content, the reads over the
-  archive and the history are constant whatever the archive weighs. Memory
-  grows with the _number_ of entries — the central directory is read whole,
-  50 to 100 bytes per entry — not with their size. A zip bomb costs storage,
-  not memory: the read stops at the declared compressed size and the inflate is
-  aborted the moment the output goes past the declared uncompressed size, so a
-  lying entry never writes more than it declares — one that honestly declares
-  40 GB still writes 40 GB, and `list` shows `contentLength` beforehand. A
-  non-sliceable source adds one durable copy of the archive, and whether that
-  copy streams is the `FileSystemClaim`'s contract, as it is for `split`.
-
-## Runtime requirements
-
-- Claim provider: `FileSystemClaim` (from `@t4h.framework/fs`).
-- Production allowlist: register `ZipExtractActivity` and `ZipListActivity`
-  via `runtime.addActivity`.
-
-## Anti-patterns
-
-- **Hand-rolling a lazy `Binary` that inflates on `stream()`.** The usual shape
-  is a `class ZipEntryBinary extends Binary` in App code that parses the local
-  header on demand. It passes locally and breaks in production: a `Binary`
-  given to a primitive is the input of a durable activity, serialized to
-  storage before the activity runs, and rehydrated in a process where the
-  closure no longer exists. Its `contentLength` also has to lie — the real size
-  lives in the central directory — so every ranged `read` over it truncates.
-  `unzip` does the same work inside an activity; that is the supported way.
-- **Inflating in workflow code.** `createInflateRaw` in a workflow re-runs on
-  every replay and holds the content in workflow memory. Extraction belongs to
-  an activity.
-- **Calling `unzip` per record.** Extract once, high in the workflow, and pass
-  the entry `Binary` down to children. `unzip` inside a loop or inside a helper
-  every child calls turns one extraction into thousands of activities.
-- **Extracting to read metadata.** If the run only needs a name, a size or a
-  date, `list` answers without transferring content.
-- **Trusting `include` to find something.** It is a filter: no match is an
-  empty array, not an error.
-
-## Related skills
-
-- `framework-fs-split` — `split`/`join`/`read`: what to do with the entry once
-  it is a `Binary`.
-- `framework-sftp` — `sftp.get` is where most archives come from.
-- `framework-transforms` — JSON inside the archive: normalize to NDJSON before
-  fanning out.
+## Traps
+
+- Globs match the whole entry path, case sensitive. `*` and `?` do not cross a
+  `/`; `**` does. `'*.csv'` matches only the root; use `'**.csv'` for any
+  depth.
+- `unzip` skips directory entries; `list` returns them with
+  `directory: true`.
+- `unzip` without `include` extracts every entry: one file in storage and one
+  reference in the history for each. Filter.
+- Do not call `unzip` in a loop or in a helper that each child workflow runs.
+  Extract once and pass the `Binary` down.
+- `lastModifiedAt` is a string in local time with no time zone
+  (`'2024-03-07T14:25:38'`). `contentLength` is the uncompressed size in
+  bytes.
+- Only stored and deflate entries. An encrypted entry, another compression
+  method or a path with `..`, `/` or a drive letter throws a `TypeError`. A
+  bad or corrupted archive throws a `SyntaxError`. The package cannot create a
+  ZIP.
+- `@t4h.framework/core/no-io-in-workflow` rejects `node:zlib` in a workflow,
+  and `@t4h.framework/core/no-binary-subclass` rejects a `Binary` subclass. Do
+  not inflate by hand; use `unzip`. See the `framework-fs` skill for `Binary`.
+- The runtime must provide `FileSystemClaim` and allow `ZipExtractActivity`
+  and `ZipListActivity`.
+
+## Test
+
+`unzip` and `list` run in the test. Commit a real `.zip` fixture and mock
+`FileSystemClaim` with `write` (keep the bytes) and `slice` (return a window).
+Make `slice` throw for a binary the mock did not write to test the fallback
+copy. The cookbook recipe below has a complete test.
+
+## Reference
+
+- Guide: https://tech4humans-brasil.github.io/framework/zip/
+- Recipe with a test: https://tech4humans-brasil.github.io/framework/cookbook/zip-batch
+- Types: `node_modules/@t4h.framework/zip/dist/zip.d.ts`

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @t4h.framework/zip
 
+## 0.2.11
+
+### Patch Changes
+
+- [#257](https://github.com/tech4humans-brasil/framework/pull/257) [`586bfb4`](https://github.com/tech4humans-brasil/framework/commit/586bfb4663f4a478527ee0c8db360603f034d615) Thanks [@gusteycamargo](https://github.com/gusteycamargo)! - The zip README is now short and links to the site. The docs page now has a testing section and all the errors, and it no longer names the internals of sftp, the dev server or the runtime.
+
+## 0.2.10
+
+### Patch Changes
+
+- [#241](https://github.com/tech4humans-brasil/framework/pull/241) [`f6b8454`](https://github.com/tech4humans-brasil/framework/commit/f6b845484d22e7c8e7240fe2e113f1cdea7c8ce3) Thanks [@gusteycamargo](https://github.com/gusteycamargo)! - Adds seven rules to `@t4h.framework/core/eslint` and turns them on in `configs.recommended`:
+  - `no-io-in-workflow` reports `fetch` and calls to network, file, database and mail modules in a workflow and in the `constructor`, `toInput` and `toOutput` of an activity. It also reports `zlib` and `stream` calls there, because they work on the content in memory on each replay.
+  - `no-binary-subclass` reports a class that extends `Binary`.
+  - `no-framework-activity-in-app` reports `new` and `extends` on an activity of a framework package other than the core.
+  - `no-testing-import-in-source` reports an import of a `@t4h.framework/<package>/testing` entry out of a test file.
+  - `require-workflow-id` reports a `Workflow` with no `id`.
+  - `no-secret-to-string` reports a `Secret` that becomes a string.
+  - `no-literal-secret-in-authorization` reports a string literal in the `secret` or `clientSecret` field of an `Authorization`.
+
+  The package skills now name these rules in place of the text that the rules enforce. The docs and skills give each `Workflow` an `id`, read the HMAC secret from `EnvDesign`, and do not document a custom HTTP activity.
+
+- [#240](https://github.com/tech4humans-brasil/framework/pull/240) [`0606115`](https://github.com/tech4humans-brasil/framework/commit/0606115e2e0baa994e9f0ed3559ee54ecac88e44) Thanks [@gusteycamargo](https://github.com/gusteycamargo)! - The skills do not repeat a rule that a lint rule, `tsc` or a runtime error already enforces. Each such rule is now one line that names the gate. The examples that broke a gate (`process.env`, `as any`, an inline secret, an `EnvDesign` in a workflow file, `ref.output` before `wait()`) are correct now.
+
+- [#228](https://github.com/tech4humans-brasil/framework/pull/228) [`d29e1ab`](https://github.com/tech4humans-brasil/framework/commit/d29e1ab29a039b13c3e4b075472bd615566ae75e) Thanks [@gusteycamargo](https://github.com/gusteycamargo)! - Uses exact types and `unknown` in place of `any`, and checks external data with guards.
+  - harness: the fix-issues prompt lists each sensor as `- checkTypes: PASS`. Before, it printed `- 0: [object Object]`.
+  - hmac: an algorithm name such as `constructor` throws `Unsupported algorithm`.
+  - oidc: a discovery response with no `introspection_endpoint`, or a null introspection body, throws a clear error.
+  - `HttpRequestActivity.toOutput` takes `HttpRequestActivityOutput` in place of `any`.
+
 ## 0.2.9
 
 ## 0.2.8

package/README.md

@@ -1,208 +1,34 @@
 # @t4h.framework/zip
 
-Reads ZIP archives inside a workflow. `list` tells you what is in an archive
-without transferring its content, and `unzip` unpacks the entries you ask for
-into files — each one a `Binary`, the same reference every other package
-consumes.
+Reads ZIP archives in a T4H Framework workflow. `list` tells what an archive
+holds without its content, and `unzip` extracts the entries you select into
+files. Each entry is a `Binary`.
 
-Both are durable activities: the work happens once, the result is recorded in
-the workflow history, and a replay never re-reads the archive.
-
-## Installation
+## Install
 
 ```bash
 npm install @t4h.framework/zip
-# or
-yarn add @t4h.framework/zip
-```
-
-Peer dependencies: `@t4h.framework/core` and `@t4h.framework/fs` — entries are
-written through the `FileSystemClaim`, so a file system provider must be
-registered in the runtime.
-
-## Basic usage
-
-```typescript
-import { unzip } from '@t4h.framework/zip'
-
-const [entry] = await unzip(archive)
-
-// entry.binary is a regular Binary: read a window, split it, upload it
-const header = await read(entry.binary, { range: { start: 0, end: 240 } })
-```
-
-`archive` is any `Binary`: an `sftp.get`, an HTTP response body, a file written
-by `write`. `unzip` resolves with one `ZipEntry` per file in the archive, in
-central directory order, directories excluded.
-
-## Extract only what you need
-
-An archive with three thousand invoices in it does not have to become three
-thousand files:
-
-```typescript
-const [invoice] = await unzip(archive, { include: 'invoices/0001.txt' })
-
-const csvs = await unzip(archive, {
-  include: '**.csv',
-  exclude: '**/draft-*.csv',
-})
 ```
 
-`include` and `exclude` are glob patterns (or arrays of them) matched against
-the whole entry path:
-
-| Pattern        | Matches                                 |
-| -------------- | --------------------------------------- |
-| `notes.txt`    | exactly that path                       |
-| `*.txt`        | `.txt` files at the root of the archive |
-| `invoices/*`   | anything directly inside `invoices/`    |
-| `**.csv`       | `.csv` files at any depth               |
-| `report-?.txt` | `report-1.txt`, not `report-42.txt`     |
+Peer dependencies: `@t4h.framework/core` and `@t4h.framework/fs`. The runtime
+must provide the `FileSystemClaim`.
 
-Matching is case sensitive, `include` runs before `exclude`, and an `include`
-that matches nothing resolves with an empty array rather than throwing.
-
-## Listing without unpacking
+## Usage
 
 ```typescript
-import { list } from '@t4h.framework/zip'
+import { read } from '@t4h.framework/fs'
+import { list, unzip } from '@t4h.framework/zip'
 
 const entries = await list(archive)
-// [{ path, contentLength, compressedLength, compressionMethod,
-//    crc32, lastModifiedAt, directory }, ...]
-```
-
-`list` reads the archive's index (its central directory), which lives in the
-last few kilobytes of the file — so on a sliceable binary a listing costs about
-a kilobyte, whatever the archive weighs. Use it whenever the decision (does
-this archive contain the file I need? how big is it?) can be made from metadata
-alone, and unzip afterwards only if the content is really needed.
-
-Unlike `unzip`, `list` reports directory entries too, flagged with
-`directory: true`.
-
-## How the bytes move
 
-The package never holds an archive, or an entry, in memory.
+const [entry] = await unzip(archive, { include: 'invoices/0001.txt' })
 
-1. **Ranged reads.** A ZIP is read back to front — the central directory sits
-   at the end of the file and points backwards at each entry — so every read
-   goes through `FileSystemClaim.slice`: the tail for the index, one local
-   header per entry, then the entry's compressed range.
-2. **Streaming inflate.** That range is streamed through `inflateRaw` and
-   straight into `FileSystemClaim.write`, with backpressure all the way.
-   Extracting a thousand entries costs the same memory as extracting one.
-3. **One entry at a time.** Entries are extracted sequentially, on purpose:
-   parallel extraction would multiply the memory and the storage pressure for
-   no gain on a single source stream.
-4. **Verified content.** Every entry is checked against the CRC-32 and the size
-   the archive declares while it flows to storage, so a truncated download or a
-   corrupted archive fails the activity instead of quietly producing a shorter
-   file.
-
-### Binaries that cannot be sliced
-
-Ranged reads need a binary the file system claim owns. An `sftp.get` reference
-or an HTTP body is not one: for those, the archive is streamed **once** into
-storage (`zip/<activity-id>.zip`) and the ranges are read from that copy. It
-costs one pass and one durable copy of the archive, and everything downstream
-behaves identically.
-
-Nothing has to be configured for this; it is the fallback, not a mode.
-
-## Memory: what scales with what
-
-Bounded, whatever the archive weighs: entry content (source range →
-`inflateRaw` → CRC-32 → `FileSystemClaim.write`, one entry at a time), the
-reads over the archive (a ranged read of the tail plus one 30-byte local header
-per entry) and the workflow history (references only).
-
-What scales, and with what:
-
-- **The central directory is read whole**, so memory grows with the _number_ of
-  entries — 50 to 100 bytes each. Three thousand entries is 200 KB; a million
-  is around 100 MB.
-- **`unzip` without `include` extracts everything**: one file in storage and
-  one reference in the history per entry.
-- **A zip bomb costs storage, not memory.** The read stops at the declared
-  compressed size, and the inflate is aborted the moment the output goes past
-  the declared uncompressed size — an entry that lies never writes more than it
-  declares. One that honestly declares 40 GB still writes 40 GB, so check
-  `contentLength` with `list` beforehand.
-- **A non-sliceable source** is streamed once into a durable copy of the
-  archive; whether that copy streams is the `FileSystemClaim`'s contract.
-- **Downstream is yours.** `buffer(await entry.binary.stream())` pulls the file
-  into workflow memory; `read` is capped at 1 MiB and `split` streams.
-
-## Never build a lazy `Binary` by hand
-
-The temptation, when a workflow needs one entry out of a zip, is to write a
-`Binary` subclass that inflates on `stream()` and pass it around. It works in
-the dev server and breaks in production:
-
-- A `Binary` handed to a primitive becomes the **input of a durable activity**,
-  and that input is serialized to storage before the activity runs. A class
-  holding a closure over another stream has nothing to serialize into.
-- After a replay the activity may run in **another process**, where the object
-  no longer exists.
-- `contentLength` has to lie (the uncompressed size is only in the central
-  directory), and every consumer that trusts it — a ranged `read`, a
-  `Content-Length` header — is then wrong.
-
-`unzip` is the supported answer: it does the same work inside an activity, and
-what travels is a file reference the runtime knows how to rehydrate.
-
-## Cost model
-
-`unzip` and `list` are activities, so each call is one history entry with the
-work behind it done exactly once. The reference to watch is **how many times
-you call them**, not how big the archive is:
-
-```typescript
-// once per run, however many records follow
-const [entry] = await unzip(archive, { include: 'MOVIMENTO.TXT' })
-
-const batch = await split(entry.binary, processRecord, {
-  delimiter: Split.line(),
-})
+const header = await read(entry.binary, { range: { start: 0, end: 240 } })
 ```
 
-Calling `unzip` once per record instead — inside a loop, or inside a helper
-called by every child — turns one extraction into thousands of activities, each
-with its own history entry and its own copy of the entry in storage. Extract
-high, pass the `Binary` down.
-
-## Limits
-
-- **Deflate and stored only** (methods `0` and `8`) — the two an archiver
-  produces without being asked. Anything else (bzip2, LZMA, zstd) is refused
-  with a `TypeError` naming the method.
-- **No encryption.** An encrypted entry is refused; the ZIP crypto formats are
-  either broken (ZipCrypto) or vendor-specific (AES extensions).
-- **No writing.** This package reads archives; it does not create them.
-- **Reading, not extracting to disk.** Entries land wherever the
-  `FileSystemClaim` puts them, under `zip/<activity-id>/<entry path>`.
-- **Hostile paths are refused.** An entry whose path is absolute, drive
-  qualified or contains `..` fails the whole activity before anything is
-  written (the "zip slip" class of archive).
-
-ZIP64 archives, entries written with a data descriptor (the streaming writers'
-flavour, where the local header has no sizes), UTF-8 and legacy entry names,
-archive comments and empty entries are all handled.
-
-## Errors
-
-| Situation                                       | Error         |
-| ----------------------------------------------- | ------------- |
-| Not a ZIP, or truncated beyond repair           | `SyntaxError` |
-| CRC-32 or size mismatch on an entry             | `SyntaxError` |
-| Encrypted entry, unsupported compression method | `TypeError`   |
-| Entry path escaping the extraction directory    | `TypeError`   |
-| Multi-disk archive                              | `TypeError`   |
+`archive` is any `Binary`, for example from `sftp.get`, an HTTP response body
+or `write`.
 
-## Runtime requirements
+## Documentation
 
-- Claim provider: `FileSystemClaim` (from `@t4h.framework/fs`).
-- Production allowlist: register `ZipExtractActivity` and `ZipListActivity`
-  through `runtime.addActivity`.
+https://tech4humans-brasil.github.io/framework/zip/

package/dist/helpers/ZipChecksum.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ZipChecksum.d.ts","sourceRoot":"","sources":["../../src/helpers/ZipChecksum.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,qBAAa,WAAY,SAAQ,SAAS;IAK5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJrC,OAAO,CAAC,QAAQ,CAAI;IAEpB,OAAO,CAAC,MAAM,CAAI;gBAEW,QAAQ,EAAE,sBAAsB;IAI7C,UAAU,CACxB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,cAAc,EACzB,QAAQ,EAAE,iBAAiB,GAC1B,IAAI;IAgBS,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI;CAiB1D"}
+{"version":3,"file":"ZipChecksum.d.ts","sourceRoot":"","sources":["../../src/helpers/ZipChecksum.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,qBAAa,WAAY,SAAQ,SAAS;IAK5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJrC,OAAO,CAAC,QAAQ,CAAI;IAEpB,OAAO,CAAC,MAAM,CAAI;gBAEW,QAAQ,EAAE,sBAAsB;IAI7C,UAAU,CACxB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,cAAc,EACzB,QAAQ,EAAE,iBAAiB,GAC1B,IAAI;IAmBS,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI;CAqB1D"}

package/dist/helpers/ZipChecksum.js

@@ -10,18 +10,24 @@ export class ZipChecksum extends Transform {
     }
     _transform(chunk, _encoding, callback) {
         const { path, contentLength } = this.expected;
-        if (this.length + chunk.length > contentLength)
-            return callback(new SyntaxError(`ZIP entry "${path}" unpacked past the ${contentLength} bytes the archive declares`));
+        if (this.length + chunk.length > contentLength) {
+            callback(new SyntaxError(`ZIP entry "${path}" unpacked past the ${String(contentLength)} bytes the archive declares`));
+            return;
+        }
         this.checksum = crc32(chunk, this.checksum);
         this.length += chunk.length;
         callback(null, chunk);
     }
     _flush(callback) {
         const { path, crc32: expectedChecksum, contentLength } = this.expected;
-        if (this.length !== contentLength)
-            return callback(new SyntaxError(`ZIP entry "${path}" unpacked to ${this.length} bytes, the archive declares ${contentLength}`));
-        if (this.checksum !== expectedChecksum)
-            return callback(new SyntaxError(`ZIP entry "${path}" failed its CRC-32 check`));
+        if (this.length !== contentLength) {
+            callback(new SyntaxError(`ZIP entry "${path}" unpacked to ${String(this.length)} bytes, the archive declares ${String(contentLength)}`));
+            return;
+        }
+        if (this.checksum !== expectedChecksum) {
+            callback(new SyntaxError(`ZIP entry "${path}" failed its CRC-32 check`));
+            return;
+        }
         callback();
     }
 }

package/dist/helpers/ZipChecksum.js.map

@@ -1 +1 @@
-{"version":3,"file":"ZipChecksum.js","sourceRoot":"","sources":["../../src/helpers/ZipChecksum.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAQjC,MAAM,OAAO,WAAY,SAAQ,SAAS;IAKX;IAJrB,QAAQ,GAAG,CAAC,CAAA;IAEZ,MAAM,GAAG,CAAC,CAAA;IAElB,YAA6B,QAAgC;QAC3D,KAAK,EAAE,CAAA;QADoB,aAAQ,GAAR,QAAQ,CAAwB;IAE7D,CAAC;IAEe,UAAU,CACxB,KAAa,EACb,SAAyB,EACzB,QAA2B;QAE3B,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QAE7C,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,aAAa;YAC5C,OAAO,QAAQ,CACb,IAAI,WAAW,CACb,cAAc,IAAI,uBAAuB,aAAa,6BAA6B,CACpF,CACF,CAAA;QAEH,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA;QAE3B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACvB,CAAC;IAEe,MAAM,CAAC,QAA2B;QAChD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QAEtE,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa;YAC/B,OAAO,QAAQ,CACb,IAAI,WAAW,CACb,cAAc,IAAI,iBAAiB,IAAI,CAAC,MAAM,gCAAgC,aAAa,EAAE,CAC9F,CACF,CAAA;QAEH,IAAI,IAAI,CAAC,QAAQ,KAAK,gBAAgB;YACpC,OAAO,QAAQ,CACb,IAAI,WAAW,CAAC,cAAc,IAAI,2BAA2B,CAAC,CAC/D,CAAA;QAEH,QAAQ,EAAE,CAAA;IACZ,CAAC;CACF"}
+{"version":3,"file":"ZipChecksum.js","sourceRoot":"","sources":["../../src/helpers/ZipChecksum.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAQjC,MAAM,OAAO,WAAY,SAAQ,SAAS;IAKX;IAJrB,QAAQ,GAAG,CAAC,CAAA;IAEZ,MAAM,GAAG,CAAC,CAAA;IAElB,YAA6B,QAAgC;QAC3D,KAAK,EAAE,CAAA;QADoB,aAAQ,GAAR,QAAQ,CAAwB;IAE7D,CAAC;IAEe,UAAU,CACxB,KAAa,EACb,SAAyB,EACzB,QAA2B;QAE3B,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QAE7C,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YAC/C,QAAQ,CACN,IAAI,WAAW,CACb,cAAc,IAAI,uBAAuB,MAAM,CAAC,aAAa,CAAC,6BAA6B,CAC5F,CACF,CAAA;YAED,OAAM;QACR,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA;QAE3B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACvB,CAAC;IAEe,MAAM,CAAC,QAA2B;QAChD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QAEtE,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAClC,QAAQ,CACN,IAAI,WAAW,CACb,cAAc,IAAI,iBAAiB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gCAAgC,MAAM,CAAC,aAAa,CAAC,EAAE,CAC9G,CACF,CAAA;YAED,OAAM;QACR,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,WAAW,CAAC,cAAc,IAAI,2BAA2B,CAAC,CAAC,CAAA;YAExE,OAAM;QACR,CAAC;QAED,QAAQ,EAAE,CAAA;IACZ,CAAC;CACF"}

package/dist/helpers/ZipSource.js

@@ -24,7 +24,7 @@ export class ZipSource {
     }
     async stream(start, end) {
         if (start < 0 || end > this.contentLength)
-            throw new SyntaxError(`ZIP archive is truncated: bytes ${start}-${end} are outside a file of ${this.contentLength} bytes`);
+            throw new SyntaxError(`ZIP archive is truncated: bytes ${String(start)}-${String(end)} are outside a file of ${String(this.contentLength)} bytes`);
         const slice = await this.slice(start, end);
         return await slice.stream();
     }

package/dist/helpers/ZipSource.js.map

@@ -1 +1 @@
-{"version":3,"file":"ZipSource.js","sourceRoot":"","sources":["../../src/helpers/ZipSource.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAK9C,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACrB;IAA5B,YAA4B,MAAe;QACzC,KAAK,CAAC,mDAAmD,CAAC,CAAA;QADhC,WAAM,GAAN,MAAM,CAAS;QAGzC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;IACxC,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IAED;IACD;IAFlB,YACmB,EAAmB,EACpB,MAAc;QADb,OAAE,GAAF,EAAE,CAAiB;QACpB,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEJ,IAAW,aAAa;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAA;IAClC,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,GAAW;QAC1C,IAAI,GAAG,IAAI,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAExC,OAAO,MAAM,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;IACpD,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,GAAW;QAC5C,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa;YACvC,MAAM,IAAI,WAAW,CACnB,mCAAmC,KAAK,IAAI,GAAG,0BAA0B,IAAI,CAAC,aAAa,QAAQ,CACpG,CAAA;QAEH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAE1C,OAAO,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;IAC7B,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,GAAW;QAC5C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"ZipSource.js","sourceRoot":"","sources":["../../src/helpers/ZipSource.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAK9C,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACrB;IAA5B,YAA4B,MAAe;QACzC,KAAK,CAAC,mDAAmD,CAAC,CAAA;QADhC,WAAM,GAAN,MAAM,CAAS;QAGzC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;IACxC,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IAED;IACD;IAFlB,YACmB,EAAmB,EACpB,MAAc;QADb,OAAE,GAAF,EAAE,CAAiB;QACpB,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEJ,IAAW,aAAa;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAA;IAClC,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,GAAW;QAC1C,IAAI,GAAG,IAAI,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAExC,OAAO,MAAM,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;IACpD,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,GAAW;QAC5C,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa;YACvC,MAAM,IAAI,WAAW,CACnB,mCAAmC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAC5H,CAAA;QAEH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAE1C,OAAO,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;IAC7B,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,GAAW;QAC5C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;CACF"}

package/dist/helpers/extract-entry.js

@@ -25,6 +25,6 @@ function assertReadable(entry) {
         throw new TypeError(`ZIP entry "${entry.path}" is encrypted; encrypted archives are not supported`);
     if (entry.compressionMethod !== ZIP_COMPRESSION_STORED &&
         entry.compressionMethod !== ZIP_COMPRESSION_DEFLATE)
-        throw new TypeError(`ZIP entry "${entry.path}" uses compression method ${entry.compressionMethod}; only stored (0) and deflate (8) are supported`);
+        throw new TypeError(`ZIP entry "${entry.path}" uses compression method ${String(entry.compressionMethod)}; only stored (0) and deflate (8) are supported`);
 }
 //# sourceMappingURL=extract-entry.js.map

package/dist/helpers/extract-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract-entry.js","sourceRoot":"","sources":["../../src/helpers/extract-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAiB,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAK5C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,GAExB,MAAM,wBAAwB,CAAA;AAO/B,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAmB,EACnB,MAAiB,EACjB,KAAuB,EACvB,OAA4B;IAE5B,cAAc,CAAC,KAAK,CAAC,CAAA;IAErB,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC;QAC3B,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAE3E,MAAM,MAAM,GAAG,gBAAgB,CAC7B,MAAM,MAAM,CAAC,IAAI,CACf,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,iBAAiB,GAAG,uBAAuB,CAClD,CACF,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAA;IAErD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAE7E,OAAO,MAAM,EAAE,CAAC,KAAK,CACnB,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,EAC1B,OAAO,CAAC,WAAW,CACpB,CAAA;AACH,CAAC;AAED,SAAS,OAAO,CAAC,UAAoB,EAAE,KAAuB;IAC5D,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,CAAA;IAEvC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;IAEhC,MAAM,MAAM,GACV,KAAK,CAAC,iBAAiB,KAAK,sBAAsB;QAChD,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC;QAChC,CAAC,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAExD,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAE1B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAuB;IAC7C,IAAI,KAAK,CAAC,KAAK,GAAG,kBAAkB;QAClC,MAAM,IAAI,SAAS,CACjB,cAAc,KAAK,CAAC,IAAI,sDAAsD,CAC/E,CAAA;IAEH,IACE,KAAK,CAAC,iBAAiB,KAAK,sBAAsB;QAClD,KAAK,CAAC,iBAAiB,KAAK,uBAAuB;QAEnD,MAAM,IAAI,SAAS,CACjB,cAAc,KAAK,CAAC,IAAI,6BAA6B,KAAK,CAAC,iBAAiB,iDAAiD,CAC9H,CAAA;AACL,CAAC"}
+{"version":3,"file":"extract-entry.js","sourceRoot":"","sources":["../../src/helpers/extract-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAiB,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAK5C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,GAExB,MAAM,wBAAwB,CAAA;AAO/B,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAmB,EACnB,MAAiB,EACjB,KAAuB,EACvB,OAA4B;IAE5B,cAAc,CAAC,KAAK,CAAC,CAAA;IAErB,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC;QAC3B,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAE3E,MAAM,MAAM,GAAG,gBAAgB,CAC7B,MAAM,MAAM,CAAC,IAAI,CACf,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,iBAAiB,GAAG,uBAAuB,CAClD,CACF,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAA;IAErD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAE7E,OAAO,MAAM,EAAE,CAAC,KAAK,CACnB,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,EAC1B,OAAO,CAAC,WAAW,CACpB,CAAA;AACH,CAAC;AAED,SAAS,OAAO,CAAC,UAAoB,EAAE,KAAuB;IAC5D,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,CAAA;IAEvC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;IAEhC,MAAM,MAAM,GACV,KAAK,CAAC,iBAAiB,KAAK,sBAAsB;QAChD,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC;QAChC,CAAC,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAExD,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAE1B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAuB;IAC7C,IAAI,KAAK,CAAC,KAAK,GAAG,kBAAkB;QAClC,MAAM,IAAI,SAAS,CACjB,cAAc,KAAK,CAAC,IAAI,sDAAsD,CAC/E,CAAA;IAEH,IACE,KAAK,CAAC,iBAAiB,KAAK,sBAAsB;QAClD,KAAK,CAAC,iBAAiB,KAAK,uBAAuB;QAEnD,MAAM,IAAI,SAAS,CACjB,cAAc,KAAK,CAAC,IAAI,6BAA6B,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,iDAAiD,CACtI,CAAA;AACL,CAAC"}

package/dist/helpers/open-archive.js

@@ -21,7 +21,7 @@ export async function openArchive(fs, binary, options) {
 async function read(source, encoding) {
     const { contentLength } = source;
     if (contentLength < ZIP_END_OF_CENTRAL_DIRECTORY_LENGTH)
-        throw new SyntaxError(`A ZIP archive is at least ${ZIP_END_OF_CENTRAL_DIRECTORY_LENGTH} bytes, this file has ${contentLength}`);
+        throw new SyntaxError(`A ZIP archive is at least ${String(ZIP_END_OF_CENTRAL_DIRECTORY_LENGTH)} bytes, this file has ${String(contentLength)}`);
     const end = findEndOfCentralDirectory(await readTail(source));
     const { entryCount, centralDirectoryOffset, centralDirectoryLength } = end.zip64Offset === null
         ? end

package/dist/helpers/open-archive.js.map

@@ -1 +1 @@
-{"version":3,"file":"open-archive.js","sourceRoot":"","sources":["../../src/helpers/open-archive.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AACpE,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,EAClB,+BAA+B,EAC/B,mCAAmC,EACnC,sBAAsB,EACtB,sBAAsB,EACtB,yCAAyC,EACzC,wBAAwB,GAEzB,MAAM,wBAAwB,CAAA;AAY/B,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAmB,EACnB,MAAc,EACd,OAA2B;IAE3B,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,IAAI,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,wBAAwB,CAAC;YAAE,MAAM,KAAK,CAAA;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAC5B,OAAO,CAAC,WAAW,EACnB,MAAM,MAAM,CAAC,MAAM,EAAE,EACrB,iBAAiB,CAClB,CAAA;IAED,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,IAAI,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,wBAAwB;YAC3C,MAAM,IAAI,SAAS,CACjB,iGAAiG,EACjG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;QAEH,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,MAAiB,EACjB,QAAwB;IAExB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAA;IAEhC,IAAI,aAAa,GAAG,mCAAmC;QACrD,MAAM,IAAI,WAAW,CACnB,6BAA6B,mCAAmC,yBAAyB,aAAa,EAAE,CACzG,CAAA;IAEH,MAAM,GAAG,GAAG,yBAAyB,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAE7D,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,GAClE,GAAG,CAAC,WAAW,KAAK,IAAI;QACtB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,+BAA+B,CAC7B,MAAM,MAAM,CAAC,IAAI,CACf,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,WAAW,GAAG,yCAAyC,CAC5D,CACF,CAAA;IAEP,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,sBAAsB,EACtB,sBAAsB,GAAG,sBAAsB,CAChD,CAAA;IAED,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,GAAI,CAAC;QACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAE9D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAEpB,MAAM,IAAI,MAAM,CAAC,MAAM,CAAA;IACzB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAiB;IACvC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAA;IAEhC,MAAM,OAAO,GAAG;QACd,sBAAsB;QACtB,sBAAsB;YACpB,mCAAmC;YACnC,wBAAwB;KAC3B,CAAA;IAED,IAAI,IAAI,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAElC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;QAE9C,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM;YAAE,MAAK;QAEhC,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,MAAM,EAAE,aAAa,CAAC,CAAA;QAE/D,IAAI,wBAAwB,CAAC,IAAI,CAAC;YAAE,MAAK;IAC3C,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"open-archive.js","sourceRoot":"","sources":["../../src/helpers/open-archive.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AACpE,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,EAClB,+BAA+B,EAC/B,mCAAmC,EACnC,sBAAsB,EACtB,sBAAsB,EACtB,yCAAyC,EACzC,wBAAwB,GAEzB,MAAM,wBAAwB,CAAA;AAY/B,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAmB,EACnB,MAAc,EACd,OAA2B;IAE3B,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,IAAI,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,wBAAwB,CAAC;YAAE,MAAM,KAAK,CAAA;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAC5B,OAAO,CAAC,WAAW,EACnB,MAAM,MAAM,CAAC,MAAM,EAAE,EACrB,iBAAiB,CAClB,CAAA;IAED,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,IAAI,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,wBAAwB;YAC3C,MAAM,IAAI,SAAS,CACjB,iGAAiG,EACjG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;QAEH,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,MAAiB,EACjB,QAAwB;IAExB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAA;IAEhC,IAAI,aAAa,GAAG,mCAAmC;QACrD,MAAM,IAAI,WAAW,CACnB,6BAA6B,MAAM,CAAC,mCAAmC,CAAC,yBAAyB,MAAM,CAAC,aAAa,CAAC,EAAE,CACzH,CAAA;IAEH,MAAM,GAAG,GAAG,yBAAyB,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAE7D,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,GAClE,GAAG,CAAC,WAAW,KAAK,IAAI;QACtB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,+BAA+B,CAC7B,MAAM,MAAM,CAAC,IAAI,CACf,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,WAAW,GAAG,yCAAyC,CAC5D,CACF,CAAA;IAEP,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,sBAAsB,EACtB,sBAAsB,GAAG,sBAAsB,CAChD,CAAA;IAED,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,GAAI,CAAC;QACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAE9D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAEpB,MAAM,IAAI,MAAM,CAAC,MAAM,CAAA;IACzB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAiB;IACvC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAA;IAEhC,MAAM,OAAO,GAAG;QACd,sBAAsB;QACtB,sBAAsB;YACpB,mCAAmC;YACnC,wBAAwB;KAC3B,CAAA;IAED,IAAI,IAAI,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAElC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;QAE9C,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM;YAAE,MAAK;QAEhC,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,MAAM,EAAE,aAAa,CAAC,CAAA;QAE/D,IAAI,wBAAwB,CAAC,IAAI,CAAC;YAAE,MAAK;IAC3C,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/tools/match-path.js

@@ -8,15 +8,14 @@ function toRegExp(pattern) {
         return cached;
     let source = '^';
     for (let index = 0; index < pattern.length; index += 1) {
-        const char = pattern[index];
+        const char = pattern.charAt(index);
+        if (char === '*' && pattern[index + 1] === '*') {
+            source += '.*';
+            index += 1;
+            continue;
+        }
         if (char === '*') {
-            if (pattern[index + 1] === '*') {
-                source += '.*';
-                index += 1;
-            }
-            else {
-                source += '[^/]*';
-            }
+            source += '[^/]*';
             continue;
         }
         source += char === '?' ? '[^/]' : escape(char);

package/dist/tools/match-path.js.map

@@ -1 +1 @@
-{"version":3,"file":"match-path.js","sourceRoot":"","sources":["../../src/tools/match-path.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,QAA2B;IACjE,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;AAEvC,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAEjC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,MAAM,GAAG,GAAG,CAAA;IAEhB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAE,CAAA;QAE5B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/B,MAAM,IAAI,IAAI,CAAA;gBACd,KAAK,IAAI,CAAC,CAAA;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,OAAO,CAAA;YACnB,CAAC;YAED,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,CAAA;IAEvC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAE1B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7D,CAAC"}
+{"version":3,"file":"match-path.js","sourceRoot":"","sources":["../../src/tools/match-path.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,QAA2B;IACjE,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;AAEvC,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAEjC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,MAAM,GAAG,GAAG,CAAA;IAEhB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAElC,IAAI,IAAI,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/C,MAAM,IAAI,IAAI,CAAA;YACd,KAAK,IAAI,CAAC,CAAA;YAEV,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,OAAO,CAAA;YAEjB,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,CAAA;IAEvC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAE1B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@t4h.framework/zip",
-  "version": "0.2.9",
+  "version": "0.2.11",
   "description": "ZIP extraction module for the T4H Framework",
   "homepage": "https://github.com/tech4humans-brasil/framework/tree/main/packages/zip",
   "bugs": "https://github.com/tech4humans-brasil/framework/issues",
@@ -26,14 +26,15 @@
   "scripts": {
     "build": "tsc --project tsconfig.build.json",
     "check-types": "tsc --noEmit",
-    "lint": "eslint .",
+    "check-package": "publint --strict && attw --pack . --profile esm-only",
+    "lint": "eslint . --max-warnings 0",
     "prepublishOnly": "yarn build",
     "test": "vitest run",
     "test:watch": "vitest"
   },
   "devDependencies": {
-    "@t4h.framework/core": "^0.19.0",
-    "@t4h.framework/fs": "^0.13.0",
+    "@t4h.framework/core": "^0.21.0",
+    "@t4h.framework/fs": "^0.14.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.18"
   },