@udondan/avanti 0.23.1 → 0.24.0

package/dist/writer.js

@@ -40,19 +40,53 @@ const path = __importStar(require("path"));
 function atomicWrite(targets, deletions = []) {
     // Stage each file as a sibling temp file on the same filesystem as the
     // destination so that renameSync (rename(2)) is atomic on POSIX.
+    const mvTargets = targets.filter((t) => !t.writeInPlace);
+    const inPlaceTargets = targets.filter((t) => t.writeInPlace);
     const staged = [];
     const backupTemps = [];
     try {
-        // Phase 1: write all temp files. No backups yet — if any write fails we
-        // don't want orphaned backup files for targets whose destinations haven't
-        // changed yet.
-        for (const t of targets) {
+        // Phase 1 (mv targets): write all temp files. Backups are deferred to
+        // Phase 2 so that a staging failure here never creates an orphaned backup
+        // for a destination that hasn't been modified yet.
+        // In-place targets skip this phase (no temp file); their backups are still
+        // created in Phase 2. If Phase 4 fails after open (which truncates the
+        // file), the destination may be empty or partially written — the backup
+        // captures the pre-write content and can be used for recovery.
+        for (const t of mvTargets) {
             const dir = path.dirname(t.targetPath);
             if (!fs.existsSync(dir)) {
                 fs.mkdirSync(dir, { recursive: true });
             }
-            const tmpFile = path.join(dir, '.' + path.basename(t.targetPath) + '.avanti-tmp');
-            fs.writeFileSync(tmpFile, t.content);
+            const tmpFile = path.join(dir, '.' +
+                path.basename(t.targetPath) +
+                '.' +
+                crypto.randomBytes(8).toString('hex') +
+                '.avanti-tmp');
+            // O_CREAT|O_EXCL rejects any pre-existing entry at this path (including
+            // symlinks — POSIX guarantees EEXIST when O_EXCL is set and the path
+            // resolves to a symlink). O_NOFOLLOW is belt-and-suspenders on POSIX.
+            // The random suffix makes pre-creation attacks impractical regardless.
+            const oNoFollow = fs.constants['O_NOFOLLOW'] ?? 0;
+            const tmpFd = fs.openSync(tmpFile, fs.constants.O_WRONLY |
+                fs.constants.O_CREAT |
+                fs.constants.O_EXCL |
+                oNoFollow, 0o666);
+            // Register for cleanup before the write so a writeSync failure (e.g.
+            // ENOSPC) doesn't leave an orphan .avanti-tmp in the target directory.
+            const stagingEntry = {
+                tmp: tmpFile,
+                dest: t.targetPath,
+            };
+            staged.push(stagingEntry);
+            try {
+                let written = 0;
+                while (written < t.content.length) {
+                    written += fs.writeSync(tmpFd, t.content, written, t.content.length - written);
+                }
+            }
+            finally {
+                fs.closeSync(tmpFd);
+            }
             // Resolve the effective mode: explicit config value wins; otherwise
             // preserve the existing file's full permission bits (0o7777) so rename(2)
             // doesn't silently reset them to the umask default. New files get the
@@ -69,7 +103,7 @@ function atomicWrite(targets, deletions = []) {
                     // file doesn't exist yet — leave the temp file's umask permissions
                 }
             }
-            staged.push({ tmp: tmpFile, dest: t.targetPath, effectiveMode });
+            stagingEntry.effectiveMode = effectiveMode;
         }
         // Phase 2: all staging succeeded — now create backups.
         // Phase 2a: copy each source file to a uniquely-named temp in the backup
@@ -106,6 +140,87 @@ function atomicWrite(targets, deletions = []) {
                 fs.chmodSync(s.dest, s.effectiveMode);
             }
         }
+        // Phase 4: in-place writes — preserve inode, not atomic
+        for (const t of inPlaceTargets) {
+            const dir = path.dirname(t.targetPath);
+            if (!fs.existsSync(dir)) {
+                fs.mkdirSync(dir, { recursive: true });
+            }
+            const existingEntry = fs.lstatSync(t.targetPath, {
+                throwIfNoEntry: false,
+            });
+            // Fast-path rejection of non-regular, non-symlink entries (FIFOs,
+            // sockets, devices): opening a FIFO with O_WRONLY blocks until a reader
+            // connects; device/socket writes have unpredictable side effects. Not
+            // relied on for correctness — the fstat check on the opened fd (below,
+            // POSIX path) closes the TOCTOU window if the path is replaced after
+            // this check.
+            if (existingEntry &&
+                !existingEntry.isFile() &&
+                !existingEntry.isSymbolicLink()) {
+                throw new Error(`writeInPlace: ${t.targetPath} is not a regular file; refusing to write`);
+            }
+            let effectiveMode;
+            if (t.mode) {
+                effectiveMode = parseInt(t.mode, 8);
+            }
+            else if (existingEntry?.isFile()) {
+                effectiveMode = existingEntry.mode & 0o7777;
+            }
+            // Refuse to follow a symlink — unlike renameSync, which replaces the
+            // symlink itself, writeFileSync would write through it to the target.
+            // On POSIX: open with O_NOFOLLOW so the kernel rejects symlinks
+            // atomically (no TOCTOU window); ELOOP means the path is a symlink.
+            // O_NONBLOCK prevents blocking at open(2) if the lstatSync pre-check
+            // lost a TOCTOU race and the path became a FIFO with no reader.
+            // fstatSync on the opened fd then closes the remaining TOCTOU window by
+            // validating the type after open, before any write.
+            // On Windows: O_NOFOLLOW is not available; fall back to an lstat check
+            // (best-effort — a narrow TOCTOU race remains).
+            const oNoFollow = fs.constants['O_NOFOLLOW'] ?? 0;
+            const oNonBlock = fs.constants['O_NONBLOCK'] ?? 0;
+            if (oNoFollow !== 0) {
+                let fd;
+                try {
+                    fd = fs.openSync(t.targetPath, fs.constants.O_WRONLY |
+                        fs.constants.O_CREAT |
+                        fs.constants.O_TRUNC |
+                        oNoFollow |
+                        oNonBlock, effectiveMode ?? 0o666);
+                }
+                catch (err) {
+                    if (err.code === 'ELOOP') {
+                        throw new Error(`writeInPlace: ${t.targetPath} is a symlink; refusing to follow`, { cause: err });
+                    }
+                    throw err;
+                }
+                try {
+                    // fstat validates the type on the opened fd, catching any non-regular
+                    // file that slipped past the lstatSync pre-check via a TOCTOU race.
+                    if (!fs.fstatSync(fd).isFile()) {
+                        throw new Error(`writeInPlace: ${t.targetPath} is not a regular file; refusing to write`);
+                    }
+                    let written = 0;
+                    while (written < t.content.length) {
+                        written += fs.writeSync(fd, t.content, written, t.content.length - written);
+                    }
+                }
+                finally {
+                    fs.closeSync(fd);
+                }
+            }
+            else {
+                if (existingEntry?.isSymbolicLink()) {
+                    throw new Error(`writeInPlace: ${t.targetPath} is a symlink; refusing to follow`);
+                }
+                fs.writeFileSync(t.targetPath, t.content, {
+                    mode: effectiveMode ?? 0o666,
+                });
+            }
+            if (effectiveMode !== undefined) {
+                fs.chmodSync(t.targetPath, effectiveMode);
+            }
+        }
     }
     finally {
         for (const tmp of backupTemps) {

package/dist/writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"writer.js","sourceRoot":"","sources":["../src/writer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,kCA8GC;AAzHD,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAS7B,SAAgB,WAAW,CACzB,OAAsB,EACtB,YAAsB,EAAE;IAExB,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,MAAM,GACV,EAAE,CAAC;IACL,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,wEAAwE;QACxE,0EAA0E;QAC1E,eAAe;QACf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,GAAG,EACH,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,aAAa,CAClD,CAAC;YACF,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAErC,oEAAoE;YACpE,0EAA0E;YAC1E,sEAAsE;YACtE,oBAAoB;YACpB,IAAI,aAAiC,CAAC;YACtC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACX,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,aAAa,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC;oBACP,mEAAmE;gBACrE,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,uDAAuD;QACvD,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,aAAa,GAAyC,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IACE,CAAC,CAAC,UAAU;gBACZ,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAC/D,CAAC;gBACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBACD,2DAA2D;gBAC3D,6DAA6D;gBAC7D,kEAAkE;gBAClE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,SAAS,EACT,GAAG;oBACD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;oBAC3B,GAAG;oBACH,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACrC,aAAa,CAChB,CAAC;gBACF,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC5B,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;gBACzC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,aAAa,EAAE,CAAC;YAC1C,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,uDAAuD;QACvD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAClC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,6BAA6B,CAAC,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../src/writer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,kCA6PC;AAzQD,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAU7B,SAAgB,WAAW,CACzB,OAAsB,EACtB,YAAsB,EAAE;IAExB,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,MAAM,GACV,EAAE,CAAC;IACL,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,sEAAsE;QACtE,0EAA0E;QAC1E,mDAAmD;QACnD,2EAA2E;QAC3E,uEAAuE;QACvE,wEAAwE;QACxE,+DAA+D;QAC/D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,GAAG,EACH,GAAG;gBACD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC3B,GAAG;gBACH,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACrC,aAAa,CAChB,CAAC;YACF,wEAAwE;YACxE,qEAAqE;YACrE,sEAAsE;YACtE,uEAAuE;YACvE,MAAM,SAAS,GACZ,EAAE,CAAC,SAAoC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CACvB,OAAO,EACP,EAAE,CAAC,SAAS,CAAC,QAAQ;gBACnB,EAAE,CAAC,SAAS,CAAC,OAAO;gBACpB,EAAE,CAAC,SAAS,CAAC,MAAM;gBACnB,SAAS,EACX,KAAK,CACN,CAAC;YACF,qEAAqE;YACrE,uEAAuE;YACvE,MAAM,YAAY,GAAuB;gBACvC,GAAG,EAAE,OAAO;gBACZ,IAAI,EAAE,CAAC,CAAC,UAAU;aACnB,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,OAAO,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBAClC,OAAO,IAAI,EAAE,CAAC,SAAS,CACrB,KAAK,EACL,CAAC,CAAC,OAAO,EACT,OAAO,EACP,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,CAC3B,CAAC;gBACJ,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YAED,oEAAoE;YACpE,0EAA0E;YAC1E,sEAAsE;YACtE,oBAAoB;YACpB,IAAI,aAAiC,CAAC;YACtC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACX,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,aAAa,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC;oBACP,mEAAmE;gBACrE,CAAC;YACH,CAAC;YAED,YAAY,CAAC,aAAa,GAAG,aAAa,CAAC;QAC7C,CAAC;QAED,uDAAuD;QACvD,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,aAAa,GAAyC,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IACE,CAAC,CAAC,UAAU;gBACZ,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAC/D,CAAC;gBACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBACD,2DAA2D;gBAC3D,6DAA6D;gBAC7D,kEAAkE;gBAClE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,SAAS,EACT,GAAG;oBACD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;oBAC3B,GAAG;oBACH,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACrC,aAAa,CAChB,CAAC;gBACF,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC5B,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;gBACzC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,aAAa,EAAE,CAAC;YAC1C,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,uDAAuD;QACvD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAClC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,aAAa,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE;gBAC/C,cAAc,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,kEAAkE;YAClE,wEAAwE;YACxE,sEAAsE;YACtE,uEAAuE;YACvE,qEAAqE;YACrE,cAAc;YACd,IACE,aAAa;gBACb,CAAC,aAAa,CAAC,MAAM,EAAE;gBACvB,CAAC,aAAa,CAAC,cAAc,EAAE,EAC/B,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,iBAAiB,CAAC,CAAC,UAAU,2CAA2C,CACzE,CAAC;YACJ,CAAC;YACD,IAAI,aAAiC,CAAC;YACtC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACX,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACtC,CAAC;iBAAM,IAAI,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC;gBACnC,aAAa,GAAG,aAAa,CAAC,IAAI,GAAG,MAAM,CAAC;YAC9C,CAAC;YACD,qEAAqE;YACrE,sEAAsE;YACtE,gEAAgE;YAChE,oEAAoE;YACpE,qEAAqE;YACrE,gEAAgE;YAChE,wEAAwE;YACxE,oDAAoD;YACpD,uEAAuE;YACvE,gDAAgD;YAChD,MAAM,SAAS,GACZ,EAAE,CAAC,SAAoC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,SAAS,GACZ,EAAE,CAAC,SAAoC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,IAAI,EAAU,CAAC;gBACf,IAAI,CAAC;oBACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CACd,CAAC,CAAC,UAAU,EACZ,EAAE,CAAC,SAAS,CAAC,QAAQ;wBACnB,EAAE,CAAC,SAAS,CAAC,OAAO;wBACpB,EAAE,CAAC,SAAS,CAAC,OAAO;wBACpB,SAAS;wBACT,SAAS,EACX,aAAa,IAAI,KAAK,CACvB,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,MAAM,IAAI,KAAK,CACb,iBAAiB,CAAC,CAAC,UAAU,mCAAmC,EAChE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;oBACJ,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,IAAI,CAAC;oBACH,sEAAsE;oBACtE,oEAAoE;oBACpE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;wBAC/B,MAAM,IAAI,KAAK,CACb,iBAAiB,CAAC,CAAC,UAAU,2CAA2C,CACzE,CAAC;oBACJ,CAAC;oBACD,IAAI,OAAO,GAAG,CAAC,CAAC;oBAChB,OAAO,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;wBAClC,OAAO,IAAI,EAAE,CAAC,SAAS,CACrB,EAAE,EACF,CAAC,CAAC,OAAO,EACT,OAAO,EACP,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,CAC3B,CAAC;oBACJ,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,aAAa,EAAE,cAAc,EAAE,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CACb,iBAAiB,CAAC,CAAC,UAAU,mCAAmC,CACjE,CAAC;gBACJ,CAAC;gBACD,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;oBACxC,IAAI,EAAE,aAAa,IAAI,KAAK;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,6BAA6B,CAAC,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@udondan/avanti",
-  "version": "0.23.1",
+  "version": "0.24.0",
   "description": "Assemble local files from any source via a declarative YAML spec",
   "bin": {
     "avanti": "dist/cli.js"
@@ -41,7 +41,7 @@
     "url": "https://github.com/udondan/avanti.git"
   },
   "dependencies": {
-    "@aws-sdk/client-s3": "3.1048.0",
+    "@aws-sdk/client-s3": "3.1049.0",
     "@aws-sdk/client-secrets-manager": "3.1048.0",
     "@aws-sdk/client-ssm": "3.1048.0",
     "chalk": "5.6.2",
@@ -64,14 +64,14 @@
     "@types/ejs": "3.1.5",
     "@types/js-yaml": "4.0.9",
     "@types/mustache": "4.2.6",
-    "@types/node": "25.8.0",
+    "@types/node": "25.9.0",
     "@types/nunjucks": "3.2.6",
     "eslint": "10.4.0",
     "eslint-config-prettier": "10.1.8",
     "prettier": "3.8.3",
-    "tsx": "4.22.1",
+    "tsx": "4.22.2",
     "typescript": "6.0.3",
-    "typescript-eslint": "8.59.3",
+    "typescript-eslint": "8.59.4",
     "vitest": "4.1.6"
   }
 }