app-builder-lib 26.15.2 → 27.0.0-alpha.0

package/dist/targets/win/nsis/nsisUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nsisUtil.js","sourceRoot":"","sources":["../../../../src/targets/win/nsis/nsisUtil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAE3D,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAG9D,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;AAOvD,MAAM,OAAO,gBAAgB;IAO3B,YAA6B,aAAgC;QAAhC,kBAAa,GAAb,aAAa,CAAmB;QAN5C,iBAAY,GAAG,IAAI,GAAG,EAAiC,CAAA;QACvD,mBAAc,GAAG,IAAI,GAAG,EAA4B,CAAA;QAErE,eAAe;QACf,aAAQ,GAAG,CAAC,CAAA;IAEoD,CAAC;IAEjE,KAAK,CAAC,QAAQ,CAAC,IAAU,EAAE,MAAkB;QAC3C,IAAI,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;YACzC,aAAa,GAAG,IAAI,CAAC,aAAa;iBAC/B,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;iBACvB,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;iBACnD,IAAI,CAAC,KAAK,EAAC,QAAQ,EAAC,EAAE,CAAC,CAAC;gBACvB,QAAQ;gBACR,YAAY,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC;aACvC,CAAC,CAAC,CAAA;YACL,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;QAC5C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAA;QAClC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;QACjC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACtC,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACxB,OAAM;QACR,CAAC;QAED,MAAM,aAAa,GAAkB,EAAE,CAAA;QACvC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7D,IAAI,QAAQ,EAAE,CAAC;gBACb,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC3D,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IAA9B;QACmB,WAAM,GAAG,IAAI,GAAG,EAAwB,CAAA;IAkC3D,CAAC;IAhCC,IAAI,CAAC,SAAiB,EAAE,MAAkB;QACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC;YACnD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;QAED,IAAI,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAA;QAC1D,IAAI,mBAAmB,KAAK,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACxE,mBAAmB,GAAG,IAAI,CAAA;YAC1B,GAAG,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAA;QAC3F,CAAC;QAED,IAAI,mBAAmB,KAAK,KAAK,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;QAED,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACxH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC,CAAA;YAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;YACrD,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAA;YACjF,IAAI,qBAAqB,KAAK,KAAK,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;gBAChE,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;YAC5D,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACnC,OAAO,OAAO,CAAA;IAChB,CAAC;CACF;AAED,MAAM,YAAY;IAIhB,YAAY,MAAc;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAA;IACpB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAA;IAC5B,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED,KAAK,CAAC,SAAwB;QAC5B,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,CAAA;YAClC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,IAAI,CAAC,SAAS,IAAI,MAAM,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,IAAY;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;QAC1E,IAAI,CAAC,SAAS,IAAI,IAAI,CAAA;QACtB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM;QACJ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QACpF,IAAI,CAAC,SAAS,IAAI,CAAC,CAAA;QACnB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,IAAI,KAAK,GAAG,EAAE,CAAA;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;YAC1C,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,MAAK;YACP,CAAC;YACD,KAAK,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACjC,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAA;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IAC5B,uCAAuC;IACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAqB,EAAE,eAAuB;QAC9D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAA;QACvC,mBAAmB;QACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;QAC5C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACf,WAAW;QACX,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC9C,oBAAoB;QACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;QAC5C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACf,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QACjC,uBAAuB;QACvB,IAAI,UAAU,GAAG,CAAC,CAAA;QAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACd,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;YAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACf,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,OAAO,CAAC;gBACb,KAAK,QAAQ,CAAC;gBACd,KAAK,OAAO,CAAC;gBACb,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC,CAAA;oBACvD,MAAK;gBACP,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,IAAI,UAAU,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;wBACtC,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA;oBACxD,CAAC;oBACD,MAAK;gBACP,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,UAAU,CAAA;QAC3C,MAAM,UAAU,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAA;QACvF,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACtH,UAAU,CAAC,MAAM,EAAE,CAAA,CAAC,IAAI;QACxB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QACvC,CAAC;QACD,UAAU,CAAC,MAAM,EAAE,CAAA,CAAC,IAAI;QACxB,IAAI,QAAQ,KAAK,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,WAAW,GAAG,IAAI,CAAA;QACtB,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,CAAA;YAC9B,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YAC5C,IAAI,GAAG,IAAI,GAAG,UAAU,CAAA;YACxB,IAAI,IAAI,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,GAAG,IAAI,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBAC7G,MAAK;YACP,CAAC;YACD,IAAI,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YACtC,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAA;YAC5C,WAAW,CAAC,MAAM,EAAE,CAAA,CAAC,IAAI;YACzB,IAAI,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrC,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;gBAC3C,CAAC;gBACD,WAAW,GAAG,MAAM,CAAA;YACtB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC3C,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;QAC/C,MAAM,EAAE,CAAC,UAAU,CAAC,eAAe,EAAE,WAAW,CAAC,CAAA;IACnD,CAAC;CACF","sourcesContent":["import { Arch, copyFile, dirSize, log } from \"builder-util\"\nimport { PackageFileInfo } from \"builder-util-runtime\"\nimport * as fs from \"fs/promises\"\nimport * as path from \"path\"\nimport * as zlib from \"zlib\"\nimport { getNsisElevatePath } from \"../../../toolsets/nsis.js\"\nimport { getTemplatePath } from \"../../../util/pathManager.js\"\nimport { NsisTarget } from \"./NsisTarget.js\"\n\nexport const nsisTemplatesDir = getTemplatePath(\"nsis\")\n\nexport interface PackArchResult {\n  fileInfo: PackageFileInfo\n  unpackedSize: number\n}\n\nexport class AppPackageHelper {\n  private readonly archToResult = new Map<Arch, Promise<PackArchResult>>()\n  private readonly infoToIsDelete = new Map<PackageFileInfo, boolean>()\n\n  /** @private */\n  refCount = 0\n\n  constructor(private readonly elevateHelper: CopyElevateHelper) {}\n\n  async packArch(arch: Arch, target: NsisTarget): Promise<PackArchResult> {\n    let resultPromise = this.archToResult.get(arch)\n    if (resultPromise == null) {\n      const appOutDir = target.archs.get(arch)!\n      resultPromise = this.elevateHelper\n        .copy(appOutDir, target)\n        .then(() => target.buildAppPackage(appOutDir, arch))\n        .then(async fileInfo => ({\n          fileInfo,\n          unpackedSize: await dirSize(appOutDir),\n        }))\n      this.archToResult.set(arch, resultPromise)\n    }\n\n    const result = await resultPromise\n    const { fileInfo: info } = result\n    if (target.isWebInstaller) {\n      this.infoToIsDelete.set(info, false)\n    } else if (!this.infoToIsDelete.has(info)) {\n      this.infoToIsDelete.set(info, true)\n    }\n    return result\n  }\n\n  async finishBuild(): Promise<any> {\n    if (--this.refCount > 0) {\n      return\n    }\n\n    const filesToDelete: Array<string> = []\n    for (const [info, isDelete] of this.infoToIsDelete.entries()) {\n      if (isDelete) {\n        filesToDelete.push(info.path)\n      }\n    }\n\n    await Promise.all(filesToDelete.map(it => fs.unlink(it)))\n  }\n}\n\nexport class CopyElevateHelper {\n  private readonly copied = new Map<string, Promise<any>>()\n\n  copy(appOutDir: string, target: NsisTarget): Promise<any> {\n    if (!target.packager.framework.isCopyElevateHelper) {\n      return Promise.resolve()\n    }\n\n    let isPackElevateHelper = target.options.packElevateHelper\n    if (isPackElevateHelper === false && target.options.perMachine === true) {\n      isPackElevateHelper = true\n      log.warn(\"`packElevateHelper = false` is ignored, because `perMachine` is set to `true`\")\n    }\n\n    if (isPackElevateHelper === false) {\n      return Promise.resolve()\n    }\n\n    let promise = this.copied.get(appOutDir)\n    if (promise != null) {\n      return promise\n    }\n\n    promise = getNsisElevatePath(target.packager.config.toolsets?.nsis, target.packager.buildResourcesDir).then(elevatePath => {\n      const outFile = path.join(appOutDir, \"resources\", \"elevate.exe\")\n      const promise = copyFile(elevatePath, outFile, false)\n      const { signAndEditExecutable, signExecutable } = target.packager.platformOptions\n      if (signAndEditExecutable !== false && signExecutable !== false) {\n        return promise.then(() => target.packager.signIf(outFile))\n      }\n      return promise\n    })\n    this.copied.set(appOutDir, promise)\n    return promise\n  }\n}\n\nclass BinaryReader {\n  private readonly _buffer: Buffer\n  private _position: number\n\n  constructor(buffer: Buffer) {\n    this._buffer = buffer\n    this._position = 0\n  }\n\n  get length(): number {\n    return this._buffer.length\n  }\n\n  get position(): number {\n    return this._position\n  }\n\n  match(signature: Array<number>): boolean {\n    if (signature.every((v, i) => this._buffer[this._position + i] === v)) {\n      this._position += signature.length\n      return true\n    }\n    return false\n  }\n\n  skip(offset: number) {\n    this._position += offset\n  }\n\n  bytes(size: number): Buffer {\n    const value = this._buffer.subarray(this._position, this._position + size)\n    this._position += size\n    return value\n  }\n\n  uint16(): number {\n    const value = this._buffer[this._position] | (this._buffer[this._position + 1] << 8)\n    this._position += 2\n    return value\n  }\n\n  uint32(): number {\n    return this.uint16() | (this.uint16() << 16)\n  }\n\n  string(length: number): string {\n    let value = \"\"\n    for (let i = 0; i < length; i++) {\n      const c = this._buffer[this._position + i]\n      if (c === 0x00) {\n        break\n      }\n      value += String.fromCharCode(c)\n    }\n    this._position += length\n    return value\n  }\n}\n\nexport class UninstallerReader {\n  // noinspection SpellCheckingInspection\n  static async exec(installerPath: string, uninstallerPath: string) {\n    const buffer = await fs.readFile(installerPath)\n    const reader = new BinaryReader(buffer)\n    // IMAGE_DOS_HEADER\n    if (!reader.match([0x4d, 0x5a])) {\n      throw new Error(\"Invalid 'MZ' signature.\")\n    }\n    reader.skip(58)\n    // e_lfanew\n    reader.skip(reader.uint32() - reader.position)\n    // IMAGE_FILE_HEADER\n    if (!reader.match([0x50, 0x45, 0x00, 0x00])) {\n      throw new Error(\"Invalid 'PE' signature.\")\n    }\n    reader.skip(2)\n    const numberOfSections = reader.uint16()\n    reader.skip(12)\n    const sizeOfOptionalHeader = reader.uint16()\n    reader.skip(2)\n    reader.skip(sizeOfOptionalHeader)\n    // IMAGE_SECTION_HEADER\n    let nsisOffset = 0\n    for (let i = 0; i < numberOfSections; i++) {\n      const name = reader.string(8)\n      reader.skip(8)\n      const rawSize = reader.uint32()\n      const rawPointer = reader.uint32()\n      reader.skip(16)\n      switch (name) {\n        case \".text\":\n        case \".rdata\":\n        case \".data\":\n        case \".rsrc\": {\n          nsisOffset = Math.max(rawPointer + rawSize, nsisOffset)\n          break\n        }\n        default: {\n          if (rawPointer !== 0 && rawSize !== 0) {\n            throw new Error(\"Unsupported section '\" + name + \"'.\")\n          }\n          break\n        }\n      }\n    }\n    const executable = buffer.subarray(0, nsisOffset)\n    const nsisSize = buffer.length - nsisOffset\n    const nsisReader = new BinaryReader(buffer.subarray(nsisOffset, nsisOffset + nsisSize))\n    const nsisSignature = [0xef, 0xbe, 0xad, 0xde, 0x4e, 0x75, 0x6c, 0x6c, 0x73, 0x6f, 0x66, 0x74, 0x49, 0x6e, 0x73, 0x74]\n    nsisReader.uint32() // ?\n    if (!nsisReader.match(nsisSignature)) {\n      throw new Error(\"Invalid signature.\")\n    }\n    nsisReader.uint32() // ?\n    if (nsisSize !== nsisReader.uint32()) {\n      throw new Error(\"Size mismatch.\")\n    }\n\n    let innerBuffer = null\n    while (true) {\n      let size = nsisReader.uint32()\n      const compressed = (size & 0x80000000) !== 0\n      size = size & 0x7fffffff\n      if (size === 0 || nsisReader.position + size > nsisReader.length || nsisReader.position >= nsisReader.length) {\n        break\n      }\n      let buffer = nsisReader.bytes(size)\n      if (compressed) {\n        buffer = zlib.inflateRawSync(buffer)\n      }\n      const innerReader = new BinaryReader(buffer)\n      innerReader.uint32() // ?\n      if (innerReader.match(nsisSignature)) {\n        if (innerBuffer) {\n          throw new Error(\"Multiple inner blocks.\")\n        }\n        innerBuffer = buffer\n      }\n    }\n    if (!innerBuffer) {\n      throw new Error(\"Inner block not found.\")\n    }\n    await fs.writeFile(uninstallerPath, executable)\n    await fs.appendFile(uninstallerPath, innerBuffer)\n  }\n}\n"]}

package/dist/targets/win/nsis/nsisValidation.d.ts

@@ -0,0 +1,19 @@
+import type { Defines } from "./Defines.js";
+/**
+ * Validates makensis stdout/stderr after a zero-exit run.
+ *
+ * NSIS can emit "Error:" lines on stderr and still exit 0 (e.g. disk-full
+ * scenarios where the OS silently drops writes). Also checks the
+ * "Install data: <written> / <expected> bytes" progress line for truncation.
+ */
+export declare function checkMakensisOutput(stdout: string, stderr: string): void;
+/**
+ * Verifies the generated installer is at least as large as the sum of the
+ * embedded archive(s). An installer smaller than its payload is definitively
+ * truncated regardless of the makensis exit code.
+ *
+ * Only runs when APP_64/APP_32/APP_ARM64 defines are present (i.e. normal,
+ * non-portable installers). Skipped for the intermediate uninstaller build.
+ */
+export declare function verifyInstallerSize(outFile: string, defines: Defines): Promise<void>;
+//# sourceMappingURL=nsisValidation.d.ts.map

package/dist/targets/win/nsis/nsisValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nsisValidation.d.ts","sourceRoot":"","sources":["../../../../src/targets/win/nsis/nsisValidation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAE3C;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CASxE;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B1F"}

package/dist/targets/win/nsis/nsisValidation.js

@@ -0,0 +1,49 @@
+import { ExecError, statOrNull } from "builder-util";
+/**
+ * Validates makensis stdout/stderr after a zero-exit run.
+ *
+ * NSIS can emit "Error:" lines on stderr and still exit 0 (e.g. disk-full
+ * scenarios where the OS silently drops writes). Also checks the
+ * "Install data: <written> / <expected> bytes" progress line for truncation.
+ */
+export function checkMakensisOutput(stdout, stderr) {
+    const errorLines = stderr
+        .split("\n")
+        .map(l => l.trim())
+        .filter(l => /^Error:/i.test(l));
+    if (errorLines.length > 0) {
+        throw new ExecError("makensis", 0, stdout, stderr);
+    }
+}
+/**
+ * Verifies the generated installer is at least as large as the sum of the
+ * embedded archive(s). An installer smaller than its payload is definitively
+ * truncated regardless of the makensis exit code.
+ *
+ * Only runs when APP_64/APP_32/APP_ARM64 defines are present (i.e. normal,
+ * non-portable installers). Skipped for the intermediate uninstaller build.
+ */
+export async function verifyInstallerSize(outFile, defines) {
+    let archiveSize = 0;
+    for (const key of ["APP_64", "APP_32", "APP_ARM64"]) {
+        const p = defines[key];
+        if (typeof p === "string") {
+            const s = await statOrNull(p);
+            if (s != null) {
+                archiveSize += s.size;
+            }
+        }
+    }
+    if (archiveSize === 0) {
+        return;
+    }
+    const outStat = await statOrNull(outFile);
+    if (outStat == null) {
+        throw new Error(`Generated installer was not created at "${outFile}" — output may be incomplete. Check available disk space and try again.`);
+    }
+    if (outStat.size < archiveSize) {
+        throw new Error(`Generated installer (${outStat.size} bytes) is smaller than the embedded archive(s) (${archiveSize} bytes) — ` +
+            `output may be incomplete. Check available disk space and try again.`);
+    }
+}
+//# sourceMappingURL=nsisValidation.js.map

package/dist/targets/win/nsis/nsisValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nsisValidation.js","sourceRoot":"","sources":["../../../../src/targets/win/nsis/nsisValidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGpD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,MAAc;IAChE,MAAM,UAAU,GAAG,MAAM;SACtB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAElC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACpD,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAe,EAAE,OAAgB;IACzE,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAU,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,CAAA;YAC7B,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;gBACd,WAAW,IAAI,CAAC,CAAC,IAAI,CAAA;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;QACtB,OAAM;IACR,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,yEAAyE,CAAC,CAAA;IAC9I,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,CAAC,IAAI,oDAAoD,WAAW,YAAY;YAC7G,qEAAqE,CACxE,CAAA;IACH,CAAC;AACH,CAAC","sourcesContent":["import { ExecError, statOrNull } from \"builder-util\"\nimport type { Defines } from \"./Defines.js\"\n\n/**\n * Validates makensis stdout/stderr after a zero-exit run.\n *\n * NSIS can emit \"Error:\" lines on stderr and still exit 0 (e.g. disk-full\n * scenarios where the OS silently drops writes). Also checks the\n * \"Install data: <written> / <expected> bytes\" progress line for truncation.\n */\nexport function checkMakensisOutput(stdout: string, stderr: string): void {\n  const errorLines = stderr\n    .split(\"\\n\")\n    .map(l => l.trim())\n    .filter(l => /^Error:/i.test(l))\n\n  if (errorLines.length > 0) {\n    throw new ExecError(\"makensis\", 0, stdout, stderr)\n  }\n}\n\n/**\n * Verifies the generated installer is at least as large as the sum of the\n * embedded archive(s). An installer smaller than its payload is definitively\n * truncated regardless of the makensis exit code.\n *\n * Only runs when APP_64/APP_32/APP_ARM64 defines are present (i.e. normal,\n * non-portable installers). Skipped for the intermediate uninstaller build.\n */\nexport async function verifyInstallerSize(outFile: string, defines: Defines): Promise<void> {\n  let archiveSize = 0\n  for (const key of [\"APP_64\", \"APP_32\", \"APP_ARM64\"] as const) {\n    const p = defines[key]\n    if (typeof p === \"string\") {\n      const s = await statOrNull(p)\n      if (s != null) {\n        archiveSize += s.size\n      }\n    }\n  }\n\n  if (archiveSize === 0) {\n    return\n  }\n\n  const outStat = await statOrNull(outFile)\n  if (outStat == null) {\n    throw new Error(`Generated installer was not created at \"${outFile}\" — output may be incomplete. Check available disk space and try again.`)\n  }\n  if (outStat.size < archiveSize) {\n    throw new Error(\n      `Generated installer (${outStat.size} bytes) is smaller than the embedded archive(s) (${archiveSize} bytes) — ` +\n        `output may be incomplete. Check available disk space and try again.`\n    )\n  }\n}\n"]}

package/dist/toolsets/7zip.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Override the 7za binary path with a pre-resolved absolute path.
+ * Called by the packager when `toolsets.sevenZip` is a `ToolsetCustom` config.
+ * Resets the resolution cache so the next `getPath7za()` call uses this path.
+ */
+export declare function setSevenZipPath(customPath: string): void;
+/** Returns the path to the 7za executable, downloading it on first call. Resets on failure so callers can retry. */
+export declare function getPath7za(): Promise<string>;
+//# sourceMappingURL=7zip.d.ts.map

package/dist/toolsets/7zip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"7zip.d.ts","sourceRoot":"","sources":["../../src/toolsets/7zip.ts"],"names":[],"mappings":"AA4CA;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAGxD;AAED,oHAAoH;AACpH,wBAAgB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAQ5C"}

package/dist/toolsets/7zip.js

@@ -0,0 +1,80 @@
+import { chmod } from "node:fs/promises";
+import * as path from "path";
+import { downloadBuilderToolset } from "../util/electronGet.js";
+const checksums = {
+    "7zip-linux-ia32.tar.gz": "24a5d5bfe81506d0bfe21a812588119ae3deb757e8ba084b2339d8e899543686",
+    "7zip-darwin-arm64.tar.gz": "496a341abe210aae1a25bc202ee97f6de6c76a3dc80f91d96616be05502d72c1",
+    "7zip-darwin-x86_64.tar.gz": "496a341abe210aae1a25bc202ee97f6de6c76a3dc80f91d96616be05502d72c1",
+    "7zip-linux-arm64.tar.gz": "5aff5034206b78f8261249ceb922b5c7e04c9bdb733784d8f5b6df9732cf1f79",
+    "7zip-win-arm64.tar.gz": "ac3f38f96ce7498096a123bb0862dd6db863a7353c9e9e1c15f73c183adf6620",
+    "7zip-win-ia32.tar.gz": "ac3f38f96ce7498096a123bb0862dd6db863a7353c9e9e1c15f73c183adf6620",
+    "7zip-win-x64.tar.gz": "be071f15bd6da2f78fe81c6ddef2009b0c4d8a51f36b780cb806c7e6df95e1b3",
+    "7zip-linux-x64.tar.gz": "d151bb44b2a9d9bfc52813ce4cac042916394a0ab8a56bd5d221a5dc9ef8d5d7",
+};
+function getFilename() {
+    const { platform, arch } = process;
+    if (platform === "darwin") {
+        return arch === "arm64" ? "7zip-darwin-arm64.tar.gz" : "7zip-darwin-x86_64.tar.gz";
+    }
+    if (platform === "linux") {
+        if (arch === "arm64") {
+            return "7zip-linux-arm64.tar.gz";
+        }
+        if (arch === "ia32") {
+            return "7zip-linux-ia32.tar.gz";
+        }
+        return "7zip-linux-x64.tar.gz";
+    }
+    if (platform === "win32") {
+        if (arch === "arm64") {
+            return "7zip-win-arm64.tar.gz";
+        }
+        if (arch === "ia32") {
+            return "7zip-win-ia32.tar.gz";
+        }
+        return "7zip-win-x64.tar.gz";
+    }
+    throw new Error(`Unsupported platform for 7zip toolset: ${platform}/${arch}`);
+}
+let _customPath = null;
+let _resolvedPath = null;
+/**
+ * Override the 7za binary path with a pre-resolved absolute path.
+ * Called by the packager when `toolsets.sevenZip` is a `ToolsetCustom` config.
+ * Resets the resolution cache so the next `getPath7za()` call uses this path.
+ */
+export function setSevenZipPath(customPath) {
+    _customPath = customPath;
+    _resolvedPath = null;
+}
+/** Returns the path to the 7za executable, downloading it on first call. Resets on failure so callers can retry. */
+export function getPath7za() {
+    if (_resolvedPath == null) {
+        _resolvedPath = resolve().catch(err => {
+            _resolvedPath = null;
+            throw err;
+        });
+    }
+    return _resolvedPath;
+}
+async function resolve() {
+    if (_customPath != null) {
+        if (process.platform !== "win32") {
+            await chmod(_customPath, 0o755);
+        }
+        return _customPath;
+    }
+    const filename = getFilename();
+    const toolDir = await downloadBuilderToolset({
+        releaseName: `7zip@1.0.0`,
+        filenameWithExt: filename,
+        checksums: checksums,
+        githubOrgRepo: "electron-userland/electron-builder-binaries",
+    });
+    const bin = path.join(toolDir, "bin", process.platform === "win32" ? "7za.exe" : "7za");
+    if (process.platform !== "win32") {
+        await chmod(bin, 0o755);
+    }
+    return bin;
+}
+//# sourceMappingURL=7zip.js.map

package/dist/toolsets/7zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"7zip.js","sourceRoot":"","sources":["../../src/toolsets/7zip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAE/D,MAAM,SAAS,GAAG;IAChB,wBAAwB,EAAE,kEAAkE;IAC5F,0BAA0B,EAAE,kEAAkE;IAC9F,2BAA2B,EAAE,kEAAkE;IAC/F,yBAAyB,EAAE,kEAAkE;IAC7F,uBAAuB,EAAE,kEAAkE;IAC3F,sBAAsB,EAAE,kEAAkE;IAC1F,qBAAqB,EAAE,kEAAkE;IACzF,uBAAuB,EAAE,kEAAkE;CACnF,CAAA;AAEV,SAAS,WAAW;IAClB,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAClC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,2BAA2B,CAAA;IACpF,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,yBAAyB,CAAA;QAClC,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,wBAAwB,CAAA;QACjC,CAAC;QACD,OAAO,uBAAuB,CAAA;IAChC,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,uBAAuB,CAAA;QAChC,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,sBAAsB,CAAA;QAC/B,CAAC;QACD,OAAO,qBAAqB,CAAA;IAC9B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAA;AAC/E,CAAC;AAED,IAAI,WAAW,GAAkB,IAAI,CAAA;AACrC,IAAI,aAAa,GAA2B,IAAI,CAAA;AAEhD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,WAAW,GAAG,UAAU,CAAA;IACxB,aAAa,GAAG,IAAI,CAAA;AACtB,CAAC;AAED,oHAAoH;AACpH,MAAM,UAAU,UAAU;IACxB,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QAC1B,aAAa,GAAG,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACpC,aAAa,GAAG,IAAI,CAAA;YACpB,MAAM,GAAG,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,aAAa,CAAA;AACtB,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC;QAC3C,WAAW,EAAE,YAAY;QACzB,eAAe,EAAE,QAAQ;QACzB,SAAS,EAAE,SAAS;QACpB,aAAa,EAAE,6CAA6C;KAC7D,CAAC,CAAA;IAEF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACvF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACzB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC","sourcesContent":["import { chmod } from \"node:fs/promises\"\nimport * as path from \"path\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\n\nconst checksums = {\n  \"7zip-linux-ia32.tar.gz\": \"24a5d5bfe81506d0bfe21a812588119ae3deb757e8ba084b2339d8e899543686\",\n  \"7zip-darwin-arm64.tar.gz\": \"496a341abe210aae1a25bc202ee97f6de6c76a3dc80f91d96616be05502d72c1\",\n  \"7zip-darwin-x86_64.tar.gz\": \"496a341abe210aae1a25bc202ee97f6de6c76a3dc80f91d96616be05502d72c1\",\n  \"7zip-linux-arm64.tar.gz\": \"5aff5034206b78f8261249ceb922b5c7e04c9bdb733784d8f5b6df9732cf1f79\",\n  \"7zip-win-arm64.tar.gz\": \"ac3f38f96ce7498096a123bb0862dd6db863a7353c9e9e1c15f73c183adf6620\",\n  \"7zip-win-ia32.tar.gz\": \"ac3f38f96ce7498096a123bb0862dd6db863a7353c9e9e1c15f73c183adf6620\",\n  \"7zip-win-x64.tar.gz\": \"be071f15bd6da2f78fe81c6ddef2009b0c4d8a51f36b780cb806c7e6df95e1b3\",\n  \"7zip-linux-x64.tar.gz\": \"d151bb44b2a9d9bfc52813ce4cac042916394a0ab8a56bd5d221a5dc9ef8d5d7\",\n} as const\n\nfunction getFilename(): keyof typeof checksums {\n  const { platform, arch } = process\n  if (platform === \"darwin\") {\n    return arch === \"arm64\" ? \"7zip-darwin-arm64.tar.gz\" : \"7zip-darwin-x86_64.tar.gz\"\n  }\n  if (platform === \"linux\") {\n    if (arch === \"arm64\") {\n      return \"7zip-linux-arm64.tar.gz\"\n    }\n    if (arch === \"ia32\") {\n      return \"7zip-linux-ia32.tar.gz\"\n    }\n    return \"7zip-linux-x64.tar.gz\"\n  }\n  if (platform === \"win32\") {\n    if (arch === \"arm64\") {\n      return \"7zip-win-arm64.tar.gz\"\n    }\n    if (arch === \"ia32\") {\n      return \"7zip-win-ia32.tar.gz\"\n    }\n    return \"7zip-win-x64.tar.gz\"\n  }\n  throw new Error(`Unsupported platform for 7zip toolset: ${platform}/${arch}`)\n}\n\nlet _customPath: string | null = null\nlet _resolvedPath: Promise<string> | null = null\n\n/**\n * Override the 7za binary path with a pre-resolved absolute path.\n * Called by the packager when `toolsets.sevenZip` is a `ToolsetCustom` config.\n * Resets the resolution cache so the next `getPath7za()` call uses this path.\n */\nexport function setSevenZipPath(customPath: string): void {\n  _customPath = customPath\n  _resolvedPath = null\n}\n\n/** Returns the path to the 7za executable, downloading it on first call. Resets on failure so callers can retry. */\nexport function getPath7za(): Promise<string> {\n  if (_resolvedPath == null) {\n    _resolvedPath = resolve().catch(err => {\n      _resolvedPath = null\n      throw err\n    })\n  }\n  return _resolvedPath\n}\n\nasync function resolve(): Promise<string> {\n  if (_customPath != null) {\n    if (process.platform !== \"win32\") {\n      await chmod(_customPath, 0o755)\n    }\n    return _customPath\n  }\n\n  const filename = getFilename()\n  const toolDir = await downloadBuilderToolset({\n    releaseName: `7zip@1.0.0`,\n    filenameWithExt: filename,\n    checksums: checksums,\n    githubOrgRepo: \"electron-userland/electron-builder-binaries\",\n  })\n\n  const bin = path.join(toolDir, \"bin\", process.platform === \"win32\" ? \"7za.exe\" : \"7za\")\n  if (process.platform !== \"win32\") {\n    await chmod(bin, 0o755)\n  }\n  return bin\n}\n"]}

package/dist/toolsets/appimage.d.ts

@@ -0,0 +1,20 @@
+import { Arch } from "builder-util";
+import { ToolsetConfig } from "../configuration.js";
+export declare const appimageChecksums: {
+    readonly "0.0.0": {
+        readonly "appimage-12.0.1.7z": "d12ff7eb8f1d1ec4652ca5237a7fbdca33acc0c758045636feca62dc6ecb8ec4";
+    };
+    readonly "1.0.2": {
+        readonly "appimage-tools-runtime-20251108.tar.gz": "a784a8c26331ec2e945c23d6bdb14af5c9df27f5939825d84b8709c61dc81eb0";
+    };
+    readonly "1.0.3": {
+        readonly "appimage-tools-runtime-20251108.tar.gz": "84021a78ee214ae6fd33a2d62a92ba25542dd10bc86bf117a9b2d0bba44e7665";
+    };
+};
+export declare function getAppImageTools(toolset: ToolsetConfig["appimage"], targetArch: Arch, resourcesDir: string): Promise<{
+    mksquashfs: string;
+    desktopFileValidate: string;
+    runtime: string;
+    runtimeLibraries: string;
+}>;
+//# sourceMappingURL=appimage.d.ts.map

package/dist/toolsets/appimage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appimage.d.ts","sourceRoot":"","sources":["../../src/toolsets/appimage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAEnC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAInD,eAAO,MAAM,iBAAiB;;;;;;;;;;CAUpB,CAAA;AAEV,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM;;;;;GAwDhH"}

package/dist/toolsets/appimage.js

@@ -0,0 +1,67 @@
+import { Arch } from "builder-util";
+import * as path from "path";
+import { downloadBuilderToolset } from "../util/electronGet.js";
+import { getCustomToolsetPath } from "./custom.js";
+export const appimageChecksums = {
+    "0.0.0": {
+        "appimage-12.0.1.7z": "d12ff7eb8f1d1ec4652ca5237a7fbdca33acc0c758045636feca62dc6ecb8ec4",
+    },
+    "1.0.2": {
+        "appimage-tools-runtime-20251108.tar.gz": "a784a8c26331ec2e945c23d6bdb14af5c9df27f5939825d84b8709c61dc81eb0",
+    },
+    "1.0.3": {
+        "appimage-tools-runtime-20251108.tar.gz": "84021a78ee214ae6fd33a2d62a92ba25542dd10bc86bf117a9b2d0bba44e7665",
+    },
+};
+export async function getAppImageTools(toolset, targetArch, resourcesDir) {
+    const runtimeArch = targetArch === Arch.armv7l ? "arm32" : targetArch === Arch.arm64 ? "arm64" : targetArch === Arch.ia32 ? "ia32" : "x64";
+    // Static-runtime layout: tools at root, runtimes/ subdir, lib/{arch}/ subdir
+    const getPaths = (artifactPath) => ({
+        mksquashfs: path.resolve(artifactPath, "mksquashfs"),
+        desktopFileValidate: path.resolve(artifactPath, "desktop-file-validate"),
+        runtime: path.resolve(artifactPath, "runtimes", `runtime-${runtimeArch}`),
+        runtimeLibraries: path.resolve(artifactPath, "lib", runtimeArch),
+    });
+    // FUSE2 layout: tools under a host-platform subdir; runtime files at root with target-arch suffix
+    const getFuse2Paths = (artifactPath) => {
+        // mksquashfs/desktop-file-validate are HOST binaries — use process.arch, not targetArch
+        const hostArch = process.arch === "arm" ? "arm32" : process.arch === "arm64" ? "arm64" : process.arch === "ia32" ? "ia32" : "x64";
+        const toolRoot = process.platform === "linux" ? `linux-${hostArch}` : "darwin";
+        // Runtime files live at root; armv7l target uses "armv7l" filename, not the internal "arm32" alias
+        const runtimeSuffix = targetArch === Arch.armv7l ? "armv7l" : runtimeArch;
+        // FUSE2 tree only ships lib/ia32 and lib/x64; arm targets fall back to x64 here
+        const libArch = targetArch === Arch.ia32 ? "ia32" : "x64";
+        return {
+            mksquashfs: path.resolve(artifactPath, toolRoot, "mksquashfs"),
+            desktopFileValidate: path.resolve(artifactPath, toolRoot, "desktop-file-validate"),
+            runtime: path.resolve(artifactPath, `runtime-${runtimeSuffix}`),
+            runtimeLibraries: path.resolve(artifactPath, "lib", libArch),
+        };
+    };
+    // null → modern default "1.0.3"
+    const isFuse2 = (toolset ?? "1.0.3") === "0.0.0";
+    if (isFuse2) {
+        const filenameWithExt = "appimage-12.0.1.7z";
+        const artifactPath = await downloadBuilderToolset({
+            releaseName: "appimage-12.0.1",
+            filenameWithExt,
+            checksums: { [filenameWithExt]: appimageChecksums["0.0.0"][filenameWithExt] },
+            githubOrgRepo: "electron-userland/electron-builder-binaries",
+        });
+        return getFuse2Paths(artifactPath);
+    }
+    if (typeof toolset === "object" && toolset != null) {
+        const vendorPath = await getCustomToolsetPath(toolset, resourcesDir);
+        return getPaths(vendorPath);
+    }
+    const effectiveVersion = (toolset ?? "1.0.3");
+    const filenameWithExt = "appimage-tools-runtime-20251108.tar.gz";
+    const artifactPath = await downloadBuilderToolset({
+        releaseName: `appimage@${effectiveVersion}`,
+        filenameWithExt,
+        checksums: { [filenameWithExt]: appimageChecksums[effectiveVersion][filenameWithExt] },
+        githubOrgRepo: "electron-userland/electron-builder-binaries",
+    });
+    return getPaths(artifactPath);
+}
+//# sourceMappingURL=appimage.js.map

package/dist/toolsets/appimage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appimage.js","sourceRoot":"","sources":["../../src/toolsets/appimage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,OAAO,EAAE;QACP,oBAAoB,EAAE,kEAAkE;KACzF;IACD,OAAO,EAAE;QACP,wCAAwC,EAAE,kEAAkE;KAC7G;IACD,OAAO,EAAE;QACP,wCAAwC,EAAE,kEAAkE;KAC7G;CACO,CAAA;AAEV,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAkC,EAAE,UAAgB,EAAE,YAAoB;IAC/G,MAAM,WAAW,GAAG,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;IAE1I,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,CAAC,YAAoB,EAAE,EAAE,CAAC,CAAC;QAC1C,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC;QACpD,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACxE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,WAAW,EAAE,CAAC;QACzE,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,WAAW,CAAC;KACjE,CAAC,CAAA;IAEF,kGAAkG;IAClG,MAAM,aAAa,GAAG,CAAC,YAAoB,EAAE,EAAE;QAC7C,wFAAwF;QACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;QACjI,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;QAC9E,mGAAmG;QACnG,MAAM,aAAa,GAAG,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAA;QACzE,gFAAgF;QAChF,MAAM,OAAO,GAAG,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;QACzD,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC;YAC9D,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,uBAAuB,CAAC;YAClF,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,aAAa,EAAE,CAAC;YAC/D,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC;SAC7D,CAAA;IACH,CAAC,CAAA;IAED,gCAAgC;IAChC,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,OAAO,CAAA;IAEhD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,eAAe,GAAG,oBAAoB,CAAA;QAC5C,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC;YAChD,WAAW,EAAE,iBAAiB;YAC9B,eAAe;YACf,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,EAAE;YAC7E,aAAa,EAAE,6CAA6C;SAC7D,CAAC,CAAA;QACF,OAAO,aAAa,CAAC,YAAY,CAAC,CAAA;IACpC,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACpE,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,gBAAgB,GAAG,CAAC,OAAO,IAAI,OAAO,CAAsB,CAAA;IAClE,MAAM,eAAe,GAAG,wCAAwC,CAAA;IAChE,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC;QAChD,WAAW,EAAE,YAAY,gBAAgB,EAAE;QAC3C,eAAe;QACf,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC,EAAE;QACtF,aAAa,EAAE,6CAA6C;KAC7D,CAAC,CAAA;IACF,OAAO,QAAQ,CAAC,YAAY,CAAC,CAAA;AAC/B,CAAC","sourcesContent":["import { Arch } from \"builder-util\"\nimport * as path from \"path\"\nimport { ToolsetConfig } from \"../configuration.js\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\nimport { getCustomToolsetPath } from \"./custom.js\"\n\nexport const appimageChecksums = {\n  \"0.0.0\": {\n    \"appimage-12.0.1.7z\": \"d12ff7eb8f1d1ec4652ca5237a7fbdca33acc0c758045636feca62dc6ecb8ec4\",\n  },\n  \"1.0.2\": {\n    \"appimage-tools-runtime-20251108.tar.gz\": \"a784a8c26331ec2e945c23d6bdb14af5c9df27f5939825d84b8709c61dc81eb0\",\n  },\n  \"1.0.3\": {\n    \"appimage-tools-runtime-20251108.tar.gz\": \"84021a78ee214ae6fd33a2d62a92ba25542dd10bc86bf117a9b2d0bba44e7665\",\n  },\n} as const\n\nexport async function getAppImageTools(toolset: ToolsetConfig[\"appimage\"], targetArch: Arch, resourcesDir: string) {\n  const runtimeArch = targetArch === Arch.armv7l ? \"arm32\" : targetArch === Arch.arm64 ? \"arm64\" : targetArch === Arch.ia32 ? \"ia32\" : \"x64\"\n\n  // Static-runtime layout: tools at root, runtimes/ subdir, lib/{arch}/ subdir\n  const getPaths = (artifactPath: string) => ({\n    mksquashfs: path.resolve(artifactPath, \"mksquashfs\"),\n    desktopFileValidate: path.resolve(artifactPath, \"desktop-file-validate\"),\n    runtime: path.resolve(artifactPath, \"runtimes\", `runtime-${runtimeArch}`),\n    runtimeLibraries: path.resolve(artifactPath, \"lib\", runtimeArch),\n  })\n\n  // FUSE2 layout: tools under a host-platform subdir; runtime files at root with target-arch suffix\n  const getFuse2Paths = (artifactPath: string) => {\n    // mksquashfs/desktop-file-validate are HOST binaries — use process.arch, not targetArch\n    const hostArch = process.arch === \"arm\" ? \"arm32\" : process.arch === \"arm64\" ? \"arm64\" : process.arch === \"ia32\" ? \"ia32\" : \"x64\"\n    const toolRoot = process.platform === \"linux\" ? `linux-${hostArch}` : \"darwin\"\n    // Runtime files live at root; armv7l target uses \"armv7l\" filename, not the internal \"arm32\" alias\n    const runtimeSuffix = targetArch === Arch.armv7l ? \"armv7l\" : runtimeArch\n    // FUSE2 tree only ships lib/ia32 and lib/x64; arm targets fall back to x64 here\n    const libArch = targetArch === Arch.ia32 ? \"ia32\" : \"x64\"\n    return {\n      mksquashfs: path.resolve(artifactPath, toolRoot, \"mksquashfs\"),\n      desktopFileValidate: path.resolve(artifactPath, toolRoot, \"desktop-file-validate\"),\n      runtime: path.resolve(artifactPath, `runtime-${runtimeSuffix}`),\n      runtimeLibraries: path.resolve(artifactPath, \"lib\", libArch),\n    }\n  }\n\n  // null → modern default \"1.0.3\"\n  const isFuse2 = (toolset ?? \"1.0.3\") === \"0.0.0\"\n\n  if (isFuse2) {\n    const filenameWithExt = \"appimage-12.0.1.7z\"\n    const artifactPath = await downloadBuilderToolset({\n      releaseName: \"appimage-12.0.1\",\n      filenameWithExt,\n      checksums: { [filenameWithExt]: appimageChecksums[\"0.0.0\"][filenameWithExt] },\n      githubOrgRepo: \"electron-userland/electron-builder-binaries\",\n    })\n    return getFuse2Paths(artifactPath)\n  }\n\n  if (typeof toolset === \"object\" && toolset != null) {\n    const vendorPath = await getCustomToolsetPath(toolset, resourcesDir)\n    return getPaths(vendorPath)\n  }\n\n  const effectiveVersion = (toolset ?? \"1.0.3\") as \"1.0.2\" | \"1.0.3\"\n  const filenameWithExt = \"appimage-tools-runtime-20251108.tar.gz\"\n  const artifactPath = await downloadBuilderToolset({\n    releaseName: `appimage@${effectiveVersion}`,\n    filenameWithExt,\n    checksums: { [filenameWithExt]: appimageChecksums[effectiveVersion][filenameWithExt] },\n    githubOrgRepo: \"electron-userland/electron-builder-binaries\",\n  })\n  return getPaths(artifactPath)\n}\n"]}

package/dist/toolsets/custom.d.ts

@@ -0,0 +1,5 @@
+import { ToolsetCustom } from "../configuration.js";
+export declare function getCustomToolsetPath(custom: ToolsetCustom, resourcesDir: string): Promise<string>;
+export declare function hashUrlSafe(input: string, length?: number): string;
+export declare function extractArchive(file: string, dir: string): Promise<void>;
+//# sourceMappingURL=custom.d.ts.map

package/dist/toolsets/custom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.d.ts","sourceRoot":"","sources":["../../src/toolsets/custom.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAsCnD,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkCvG;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,MAAM,CAQ7D;AA8CD,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,iBAmE7D"}

package/dist/toolsets/custom.js

@@ -0,0 +1,200 @@
+import { exec, exists, log, sanitizeDirPath, to7zaOutputSwitch, validateSecuredUrl } from "builder-util";
+import { createReadStream, createWriteStream } from "fs";
+import * as fs from "fs/promises";
+import { mkdir, rmdir, stat } from "fs/promises";
+import * as path from "path";
+import * as lockfile from "proper-lockfile";
+import { pipeline } from "stream/promises";
+import * as tar from "tar";
+import * as unzipper from "unzipper";
+import { downloadBuilderToolset, getCacheDirectory } from "../util/electronGet.js";
+import { getPath7za } from "./7zip.js";
+async function validateCustomToolset(custom, resourcesDir) {
+    const url = custom.url.trim();
+    try {
+        const parsed = validateSecuredUrl(url);
+        if (parsed.pathname.endsWith("/")) {
+            throw new Error(`URL must point to a file, but got ${parsed.href}`);
+        }
+        return { toolset: custom, type: "url" };
+    }
+    catch {
+        // Ignore. If the URL is invalid, validate it as a file path
+    }
+    if (url.startsWith("file://")) {
+        const p = url.slice("file://".length);
+        const isWithinResources = path.normalize(p).startsWith(path.normalize(resourcesDir + path.sep));
+        const isValid = path.isAbsolute(p) || isWithinResources;
+        const type = isValid &&
+            (await exists(p)) &&
+            (await stat(p)
+                .then(s => (s.isDirectory() ? "directory" : s.isFile() ? "file" : false))
+                .catch(() => false));
+        if (type) {
+            return { toolset: custom, type };
+        }
+    }
+    throw new Error(`Invalid custom toolset: ${url}. Must be a valid https:// URL or a file:// path.`);
+}
+// Strip the file:// prefix and sanitize the path against resourcesDir (relative paths must be within it)
+function resolveFilePath(url, resourcesDir) {
+    const p = url.startsWith("file://") ? url.slice("file://".length) : url;
+    return path.isAbsolute(p) ? sanitizeDirPath(p) : sanitizeDirPath(p, resourcesDir);
+}
+export async function getCustomToolsetPath(custom, resourcesDir) {
+    const { type, toolset } = await validateCustomToolset(custom, resourcesDir);
+    if (type !== "directory" && !toolset.checksum) {
+        throw new Error(`ToolsetCustom.checksum is required for ${type} toolsets (url: ${toolset.url})`);
+    }
+    const binaryVersion = toolset.version ?? toolset.checksum.substring(0, 8);
+    const releaseName = `${binaryVersion}-${hashUrlSafe(toolset.url)}`;
+    if (type === "url") {
+        return downloadBuilderToolset({
+            releaseName: releaseName,
+            filenameWithExt: path.basename(toolset.url),
+            checksums: { [path.basename(toolset.url)]: toolset.checksum },
+            overrideUrl: toolset.url,
+        });
+    }
+    else if (type === "file") {
+        const cacheDir = getCacheDirectory({ isAvoidSystemOnWindows: true, allowEnvVarOverride: true });
+        const customToolsetDir = path.join(cacheDir, "custom-toolsets");
+        await mkdir(customToolsetDir, { recursive: true });
+        // wipe first to ensure idempotent extraction if the source file changed since last extraction
+        const toolsetTarget = path.join(customToolsetDir, releaseName);
+        if (await exists(toolsetTarget)) {
+            await rmdir(toolsetTarget, { recursive: true });
+        }
+        await extractArchive(resolveFilePath(toolset.url, resourcesDir), toolsetTarget);
+        return toolsetTarget;
+    }
+    else if (type === "directory") {
+        return resolveFilePath(toolset.url, resourcesDir);
+    }
+    else {
+        throw new Error(`Unsupported custom toolset type: ${type}`);
+    }
+}
+export function hashUrlSafe(input, length = 6) {
+    let hash = 5381;
+    for (let i = 0; i < input.length; i++) {
+        hash = ((hash << 5) + hash) ^ input.charCodeAt(i);
+    }
+    hash >>>= 0;
+    const out = hash.toString(36);
+    return out.length >= length ? out.slice(0, length) : out.padStart(length, "0");
+}
+async function extractZipStreaming(file, dir) {
+    // Pass 1: read central directory once to collect Unix modes (one seek to EOF)
+    const zipDir = await unzipper.Open.file(file);
+    const entryModes = new Map();
+    for (const entry of zipDir.files) {
+        const mode = (entry.externalFileAttributes >> 16) & 0xffff;
+        if (mode > 0) {
+            entryModes.set(entry.path, mode);
+        }
+    }
+    const isSymlink = (mode) => (mode & 0o170000) === 0o120000;
+    // Pass 2: stream from byte 0 — no per-entry seeks, no Docker hang
+    const entries = createReadStream(file).pipe(unzipper.Parse({ forceStream: true }));
+    for await (const entry of entries) {
+        const destPath = path.resolve(dir, entry.path);
+        if (!destPath.startsWith(dir + path.sep) && destPath !== dir) {
+            throw new Error(`Path traversal blocked: ${entry.path}`);
+        }
+        const mode = entryModes.get(entry.path) ?? 0;
+        if (mode > 0 && isSymlink(mode)) {
+            const target = (await entry.buffer()).toString();
+            if (path.isAbsolute(target)) {
+                throw new Error(`Absolute symlink target blocked: ${target}`);
+            }
+            const resolvedTarget = path.resolve(path.dirname(destPath), target);
+            if (!resolvedTarget.startsWith(dir + path.sep) && resolvedTarget !== dir) {
+                throw new Error(`Symlink target escapes extraction dir: ${target}`);
+            }
+            await fs.mkdir(path.dirname(destPath), { recursive: true });
+            await fs.symlink(target, destPath);
+        }
+        else if (entry.type === "Directory") {
+            await fs.mkdir(destPath, { recursive: true });
+            entry.autodrain();
+        }
+        else {
+            await fs.mkdir(path.dirname(destPath), { recursive: true });
+            await pipeline(entry, createWriteStream(destPath));
+            if (mode > 0) {
+                await fs.chmod(destPath, mode & 0o7777);
+            }
+        }
+    }
+}
+export async function extractArchive(file, dir) {
+    const tmpDir = `${dir}.tmp`;
+    await fs.mkdir(tmpDir, { recursive: true });
+    const release = await lockfile.lock(tmpDir, {
+        retries: { retries: 100, minTimeout: 1000, maxTimeout: 5000 },
+        stale: 120000,
+    });
+    try {
+        await fs.rm(tmpDir, { recursive: true, force: true });
+        await fs.mkdir(tmpDir, { recursive: true });
+        // Guard against transient window in @electron/get's non-atomic putFileInCache (remove → move).
+        for (let i = 0; !(await exists(file)); i++) {
+            if (i >= 4) {
+                throw Object.assign(new Error(`Source archive not found after retries: ${file}`), { code: "ENOENT", path: file });
+            }
+            log.warn({ file, attempt: i + 1 }, "source archive transiently missing, retrying");
+            await new Promise(r => setTimeout(r, 300 * (i + 1)));
+        }
+        if (file.endsWith(".tar.gz") || file.endsWith(".tgz")) {
+            await tar.extract({ file, cwd: tmpDir, strip: 1 });
+        }
+        else if (file.endsWith(".tar.xz") || file.endsWith(".txz")) {
+            const cmd7za = await getPath7za();
+            const xzOutDir = `${tmpDir}.xz`;
+            await fs.rm(xzOutDir, { recursive: true, force: true });
+            await fs.mkdir(xzOutDir, { recursive: true });
+            try {
+                await exec(cmd7za, ["x", "-bd", file, to7zaOutputSwitch(sanitizeDirPath(xzOutDir)), "-y"]);
+                const innerTar = (await fs.readdir(xzOutDir)).find(f => f.endsWith(".tar"));
+                if (innerTar == null) {
+                    throw new Error(`xz decompression of ${path.basename(file)} produced no .tar archive`);
+                }
+                await tar.extract({ file: path.join(xzOutDir, innerTar), cwd: tmpDir, strip: 1 });
+            }
+            finally {
+                await fs.rm(xzOutDir, { recursive: true, force: true });
+            }
+        }
+        else if (file.endsWith(".zip")) {
+            await extractZipStreaming(file, tmpDir);
+        }
+        else if (file.endsWith(".7z")) {
+            const cmd7za = await getPath7za();
+            try {
+                await exec(cmd7za, ["x", "-bd", file, to7zaOutputSwitch(sanitizeDirPath(tmpDir)), "-y"]);
+            }
+            catch (e) {
+                const files = await fs.readdir(tmpDir);
+                if (files.length === 0) {
+                    log.warn({ file, tmpDir, error: e.message }, "7z extraction produced no output");
+                    throw new Error(`7z extraction failed for ${file}: ${e.message}`);
+                }
+                log.warn({ error: e.message, filesExtracted: files.length }, "7z reported error but extracted files");
+            }
+        }
+        else {
+            throw new Error(`Unsupported archive format: ${path.basename(file)}`);
+        }
+        const extractedFiles = await fs.readdir(tmpDir);
+        if (extractedFiles.length === 0) {
+            throw new Error(`Extraction of ${path.basename(file)} produced no files`);
+        }
+        await fs.rm(dir, { recursive: true, force: true });
+        await fs.rename(tmpDir, dir);
+    }
+    finally {
+        await release().catch(err => log.warn({ err }, "failed to release lockfile"));
+    }
+}
+//# sourceMappingURL=custom.js.map

package/dist/toolsets/custom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.js","sourceRoot":"","sources":["../../src/toolsets/custom.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACxG,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,KAAK,GAAG,MAAM,KAAK,CAAA;AAC1B,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAA;AAEpC,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,KAAK,UAAU,qBAAqB,CAAC,MAAqB,EAAE,YAAoB;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACrC,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/F,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAA;QACvD,MAAM,IAAI,GACR,OAAO;YACP,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;iBACX,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;iBACxE,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;QACxB,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QAClC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,mDAAmD,CAAC,CAAA;AACpG,CAAC;AAED,yGAAyG;AACzG,SAAS,eAAe,CAAC,GAAW,EAAE,YAAoB;IACxD,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IACvE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAqB,EAAE,YAAoB;IACpF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAE3E,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,mBAAmB,OAAO,CAAC,GAAG,GAAG,CAAC,CAAA;IAClG,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1E,MAAM,WAAW,GAAG,GAAG,aAAa,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA;IAElE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,sBAAsB,CAAC;YAC5B,WAAW,EAAE,WAAW;YACxB,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;YAC3C,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAS,EAAE;YAC9D,WAAW,EAAE,OAAO,CAAC,GAAG;SACzB,CAAC,CAAA;IACJ,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/F,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAA;QAC/D,MAAM,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAElD,8FAA8F;QAC9F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAA;QAC9D,IAAI,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,CAAC;QACD,MAAM,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,CAAA;QAC/E,OAAO,aAAa,CAAA;IACtB,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IACnD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAM,GAAG,CAAC;IACnD,IAAI,IAAI,GAAG,IAAI,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,CAAA;IACX,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC7B,OAAO,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAChF,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAW;IAC1D,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,GAAG,MAAM,CAAA;QAC1D,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,QAAQ,CAAA;IAElE,kEAAkE;IAClE,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAClF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAwC,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QAC1D,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,IAAI,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;YAChD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,EAAE,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;YACnE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,KAAK,GAAG,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,EAAE,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3D,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACpC,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7C,KAAK,CAAC,SAAS,EAAE,CAAA;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3D,MAAM,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAA;YAClD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBACb,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,GAAW;IAC5D,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAA;IAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE;QAC1C,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC7D,KAAK,EAAE,MAAM;KACd,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,+FAA+F;QAC/F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACnH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,8CAA8C,CAAC,CAAA;YAClF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;YACjC,MAAM,QAAQ,GAAG,GAAG,MAAM,KAAK,CAAA;YAC/B,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACvD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;gBAC1F,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;gBAC3E,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;gBACxF,CAAC;gBACD,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YACnF,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACzD,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;YACjC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;YAC1F,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,kCAAkC,CAAC,CAAA;oBAChF,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;gBACnE,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAA;YACvG,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvE,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC3E,CAAC;QAED,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAA;IAC/E,CAAC;AACH,CAAC","sourcesContent":["import { exec, exists, log, sanitizeDirPath, to7zaOutputSwitch, validateSecuredUrl } from \"builder-util\"\nimport { createReadStream, createWriteStream } from \"fs\"\nimport * as fs from \"fs/promises\"\nimport { mkdir, rmdir, stat } from \"fs/promises\"\nimport * as path from \"path\"\nimport * as lockfile from \"proper-lockfile\"\nimport { pipeline } from \"stream/promises\"\nimport * as tar from \"tar\"\nimport * as unzipper from \"unzipper\"\nimport { ToolsetCustom } from \"../configuration.js\"\nimport { downloadBuilderToolset, getCacheDirectory } from \"../util/electronGet.js\"\nimport { getPath7za } from \"./7zip.js\"\n\nasync function validateCustomToolset(custom: ToolsetCustom, resourcesDir: string) {\n  const url = custom.url.trim()\n  try {\n    const parsed = validateSecuredUrl(url)\n    if (parsed.pathname.endsWith(\"/\")) {\n      throw new Error(`URL must point to a file, but got ${parsed.href}`)\n    }\n    return { toolset: custom, type: \"url\" }\n  } catch {\n    // Ignore. If the URL is invalid, validate it as a file path\n  }\n  if (url.startsWith(\"file://\")) {\n    const p = url.slice(\"file://\".length)\n    const isWithinResources = path.normalize(p).startsWith(path.normalize(resourcesDir + path.sep))\n    const isValid = path.isAbsolute(p) || isWithinResources\n    const type =\n      isValid &&\n      (await exists(p)) &&\n      (await stat(p)\n        .then(s => (s.isDirectory() ? \"directory\" : s.isFile() ? \"file\" : false))\n        .catch(() => false))\n    if (type) {\n      return { toolset: custom, type }\n    }\n  }\n  throw new Error(`Invalid custom toolset: ${url}. Must be a valid https:// URL or a file:// path.`)\n}\n\n// Strip the file:// prefix and sanitize the path against resourcesDir (relative paths must be within it)\nfunction resolveFilePath(url: string, resourcesDir: string): string {\n  const p = url.startsWith(\"file://\") ? url.slice(\"file://\".length) : url\n  return path.isAbsolute(p) ? sanitizeDirPath(p) : sanitizeDirPath(p, resourcesDir)\n}\n\nexport async function getCustomToolsetPath(custom: ToolsetCustom, resourcesDir: string): Promise<string> {\n  const { type, toolset } = await validateCustomToolset(custom, resourcesDir)\n\n  if (type !== \"directory\" && !toolset.checksum) {\n    throw new Error(`ToolsetCustom.checksum is required for ${type} toolsets (url: ${toolset.url})`)\n  }\n\n  const binaryVersion = toolset.version ?? toolset.checksum!.substring(0, 8)\n  const releaseName = `${binaryVersion}-${hashUrlSafe(toolset.url)}`\n\n  if (type === \"url\") {\n    return downloadBuilderToolset({\n      releaseName: releaseName,\n      filenameWithExt: path.basename(toolset.url),\n      checksums: { [path.basename(toolset.url)]: toolset.checksum! },\n      overrideUrl: toolset.url,\n    })\n  } else if (type === \"file\") {\n    const cacheDir = getCacheDirectory({ isAvoidSystemOnWindows: true, allowEnvVarOverride: true })\n    const customToolsetDir = path.join(cacheDir, \"custom-toolsets\")\n    await mkdir(customToolsetDir, { recursive: true })\n\n    // wipe first to ensure idempotent extraction if the source file changed since last extraction\n    const toolsetTarget = path.join(customToolsetDir, releaseName)\n    if (await exists(toolsetTarget)) {\n      await rmdir(toolsetTarget, { recursive: true })\n    }\n    await extractArchive(resolveFilePath(toolset.url, resourcesDir), toolsetTarget)\n    return toolsetTarget\n  } else if (type === \"directory\") {\n    return resolveFilePath(toolset.url, resourcesDir)\n  } else {\n    throw new Error(`Unsupported custom toolset type: ${type}`)\n  }\n}\n\nexport function hashUrlSafe(input: string, length = 6): string {\n  let hash = 5381\n  for (let i = 0; i < input.length; i++) {\n    hash = ((hash << 5) + hash) ^ input.charCodeAt(i)\n  }\n  hash >>>= 0\n  const out = hash.toString(36)\n  return out.length >= length ? out.slice(0, length) : out.padStart(length, \"0\")\n}\n\nasync function extractZipStreaming(file: string, dir: string): Promise<void> {\n  // Pass 1: read central directory once to collect Unix modes (one seek to EOF)\n  const zipDir = await unzipper.Open.file(file)\n  const entryModes = new Map<string, number>()\n  for (const entry of zipDir.files) {\n    const mode = (entry.externalFileAttributes >> 16) & 0xffff\n    if (mode > 0) {\n      entryModes.set(entry.path, mode)\n    }\n  }\n  const isSymlink = (mode: number) => (mode & 0o170000) === 0o120000\n\n  // Pass 2: stream from byte 0 — no per-entry seeks, no Docker hang\n  const entries = createReadStream(file).pipe(unzipper.Parse({ forceStream: true }))\n  for await (const entry of entries as AsyncIterable<unzipper.Entry>) {\n    const destPath = path.resolve(dir, entry.path)\n    if (!destPath.startsWith(dir + path.sep) && destPath !== dir) {\n      throw new Error(`Path traversal blocked: ${entry.path}`)\n    }\n    const mode = entryModes.get(entry.path) ?? 0\n    if (mode > 0 && isSymlink(mode)) {\n      const target = (await entry.buffer()).toString()\n      if (path.isAbsolute(target)) {\n        throw new Error(`Absolute symlink target blocked: ${target}`)\n      }\n      const resolvedTarget = path.resolve(path.dirname(destPath), target)\n      if (!resolvedTarget.startsWith(dir + path.sep) && resolvedTarget !== dir) {\n        throw new Error(`Symlink target escapes extraction dir: ${target}`)\n      }\n      await fs.mkdir(path.dirname(destPath), { recursive: true })\n      await fs.symlink(target, destPath)\n    } else if (entry.type === \"Directory\") {\n      await fs.mkdir(destPath, { recursive: true })\n      entry.autodrain()\n    } else {\n      await fs.mkdir(path.dirname(destPath), { recursive: true })\n      await pipeline(entry, createWriteStream(destPath))\n      if (mode > 0) {\n        await fs.chmod(destPath, mode & 0o7777)\n      }\n    }\n  }\n}\n\nexport async function extractArchive(file: string, dir: string) {\n  const tmpDir = `${dir}.tmp`\n  await fs.mkdir(tmpDir, { recursive: true })\n\n  const release = await lockfile.lock(tmpDir, {\n    retries: { retries: 100, minTimeout: 1000, maxTimeout: 5000 },\n    stale: 120000,\n  })\n\n  try {\n    await fs.rm(tmpDir, { recursive: true, force: true })\n    await fs.mkdir(tmpDir, { recursive: true })\n\n    // Guard against transient window in @electron/get's non-atomic putFileInCache (remove → move).\n    for (let i = 0; !(await exists(file)); i++) {\n      if (i >= 4) {\n        throw Object.assign(new Error(`Source archive not found after retries: ${file}`), { code: \"ENOENT\", path: file })\n      }\n      log.warn({ file, attempt: i + 1 }, \"source archive transiently missing, retrying\")\n      await new Promise(r => setTimeout(r, 300 * (i + 1)))\n    }\n\n    if (file.endsWith(\".tar.gz\") || file.endsWith(\".tgz\")) {\n      await tar.extract({ file, cwd: tmpDir, strip: 1 })\n    } else if (file.endsWith(\".tar.xz\") || file.endsWith(\".txz\")) {\n      const cmd7za = await getPath7za()\n      const xzOutDir = `${tmpDir}.xz`\n      await fs.rm(xzOutDir, { recursive: true, force: true })\n      await fs.mkdir(xzOutDir, { recursive: true })\n      try {\n        await exec(cmd7za, [\"x\", \"-bd\", file, to7zaOutputSwitch(sanitizeDirPath(xzOutDir)), \"-y\"])\n        const innerTar = (await fs.readdir(xzOutDir)).find(f => f.endsWith(\".tar\"))\n        if (innerTar == null) {\n          throw new Error(`xz decompression of ${path.basename(file)} produced no .tar archive`)\n        }\n        await tar.extract({ file: path.join(xzOutDir, innerTar), cwd: tmpDir, strip: 1 })\n      } finally {\n        await fs.rm(xzOutDir, { recursive: true, force: true })\n      }\n    } else if (file.endsWith(\".zip\")) {\n      await extractZipStreaming(file, tmpDir)\n    } else if (file.endsWith(\".7z\")) {\n      const cmd7za = await getPath7za()\n      try {\n        await exec(cmd7za, [\"x\", \"-bd\", file, to7zaOutputSwitch(sanitizeDirPath(tmpDir)), \"-y\"])\n      } catch (e: any) {\n        const files = await fs.readdir(tmpDir)\n        if (files.length === 0) {\n          log.warn({ file, tmpDir, error: e.message }, \"7z extraction produced no output\")\n          throw new Error(`7z extraction failed for ${file}: ${e.message}`)\n        }\n        log.warn({ error: e.message, filesExtracted: files.length }, \"7z reported error but extracted files\")\n      }\n    } else {\n      throw new Error(`Unsupported archive format: ${path.basename(file)}`)\n    }\n\n    const extractedFiles = await fs.readdir(tmpDir)\n    if (extractedFiles.length === 0) {\n      throw new Error(`Extraction of ${path.basename(file)} produced no files`)\n    }\n\n    await fs.rm(dir, { recursive: true, force: true })\n    await fs.rename(tmpDir, dir)\n  } finally {\n    await release().catch(err => log.warn({ err }, \"failed to release lockfile\"))\n  }\n}\n"]}

package/dist/toolsets/fpm.d.ts

@@ -0,0 +1,3 @@
+import { ToolsetConfig } from "../configuration.js";
+export declare function getFpmPath(toolset: ToolsetConfig["fpm"], resourcesDir: string): Promise<string>;
+//# sourceMappingURL=fpm.d.ts.map

package/dist/toolsets/fpm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fpm.d.ts","sourceRoot":"","sources":["../../src/toolsets/fpm.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAenD,wBAAsB,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,MAAM,mBAoCnF"}