app-builder-lib 26.9.1 → 26.10.0

package/out/util/NodeModuleCopyHelper.js.map

@@ -1 +1 @@
-{"version":3,"file":"NodeModuleCopyHelper.js","sourceRoot":"","sources":["../../src/util/NodeModuleCopyHelper.ts"],"names":[],"mappings":";;;AAAA,+CAA6D;AAC7D,2BAAiC;AACjC,uCAAoD;AACpD,6BAA4B;AAC5B,qDAAuC;AACvC,gDAA2D;AAE3D,mDAAgD;AAEhD,uCAA2C;AAE3C,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B;IACE,WAAW;IACX,cAAc,CAAC,0BAA0B;IACzC,cAAc;IACd,WAAW;IACX,cAAc;IACd,cAAc;IACd,WAAW;IACX,aAAa;IACb,YAAY;IACZ,eAAe;CAChB,CAAC,MAAM,CAAC,2BAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CACnC,CAAA;AAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe;IACf,gBAAgB;IAChB,WAAW;IACX,iBAAiB;IACjB,QAAQ;IACR,WAAW;IACX,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;IACP,WAAW;IACX,cAAc;IACd,SAAS;IACT,UAAU;IACV,MAAM;CACP,CAAC,CAAA;AAEF,gBAAgB;AAChB,MAAa,oBAAqB,SAAQ,8BAAc;IACtD,YAAY,OAAoB,EAAE,QAAkB;QAClD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC7E,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,UAA0B,EAAE,sBAAqC,EAAE,WAAmB;;QAC7G,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAE9B,MAAM,gBAAgB,GAAG,MAAM,IAAA,yBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;QAErI,MAAM,MAAM,GAA8B,EAAE,CAAA;QAC5C,MAAM,KAAK,GAAkB,EAAE,CAAA;QAC/B,MAAM,SAAS,GAAgB,IAAI,GAAG,EAAE,CAAA;QACxC,MAAM,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAA;QACnD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAA;QAC9B,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAA;QAClC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;QAChB,6FAA6F;QAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAA;QAElB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAG,CAAA;YAE5B,MAAM,UAAU,GAAG,MAAM,IAAA,kBAAO,EAAC,OAAO,CAAC,CAAA;YACzC,UAAU,CAAC,IAAI,EAAE,CAAA;YAEjB,MAAM,UAAU,GAAG,OAAO,KAAK,OAAO,CAAA;YACtC,MAAM,IAAI,GAAkB,EAAE,CAAA;YAC9B,mHAAmH;YACnH,MAAM,eAAe,GAAG,MAAM,IAAA,yBAAS,EAAC,gCAAiB,EAAE,UAAU,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;gBAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;gBAEzC,MAAM,aAAa,GAAG,gBAAgB,IAAI,IAAI,IAAI,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;gBAE9E,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrD,OAAO,IAAI,CAAA;gBACb,CAAC;gBAED,kGAAkG;gBAClG,MAAM,WAAW,GAAG,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,IAAA,oBAAS,EAAC,OAAO,CAAC,CAAC,CAAA;gBACzE,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,EAAE,CAAC;oBACxF,KAAK,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;wBACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;4BACvB,OAAO,IAAI,CAAA;wBACb,CAAC;oBACH,CAAC;oBAED,uCAAuC;oBACvC,IAAI,UAAU,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,YAAY,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChJ,OAAO,IAAI,CAAA;oBACb,CAAC;oBAED,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC9B,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;4BACnI,OAAO,IAAI,CAAA;wBACb,CAAC;oBACH,CAAC;yBAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;wBACtF,OAAO,IAAI,CAAA;oBACb,CAAC;yBAAM,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;wBACjG,OAAO,IAAI,CAAA;oBACb,CAAC;yBAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;wBACpF,OAAO,IAAI,CAAA;oBACb,CAAC;gBACH,CAAC;gBAED,OAAO,IAAA,gBAAK,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAiB,EAAE,EAAE;oBAChD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;oBAC5B,IAAI,CAAC,cAAc,GAAG,WAAW,CAAA;oBACjC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;oBAClF,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;wBAC9C,OAAO,IAAI,CAAA;oBACb,CAAC;oBAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;wBACxB,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;oBAC9B,CAAC;oBACD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;oBAC/D,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;wBAC3B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;4BACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;4BACf,OAAO,IAAI,CAAA;wBACb,CAAC;6BAAM,CAAC;4BACN,OAAO,QAAQ,CAAA;wBACjB,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;4BAC9B,uDAAuD;4BACvD,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gCAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gCACf,OAAO,IAAI,CAAA;4BACb,CAAC;iCAAM,CAAC;gCACN,OAAO,QAAQ,CAAA;4BACjB,CAAC;wBACH,CAAC,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YAEF,IAAI,OAAO,GAAG,IAAI,CAAA;YAClB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;gBACpC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;oBAClB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBAClB,IAAI,MAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,0CAAE,cAAc,EAAE,EAAE,CAAC;wBAC/C,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;oBAC5C,CAAC;oBACD,OAAO,GAAG,KAAK,CAAA;gBACjB,CAAC;YACH,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACxB,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAA;YACX,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,IAAA,iBAAY,EAAC,IAAI,CAAC,CAAA;YACvC,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChC,+CAA+C;gBAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,CAAA;IAC9D,CAAC;CACF;AAlID,oDAkIC","sourcesContent":["import { FilterStats, MAX_FILE_REQUESTS } from \"builder-util\"\nimport { realpathSync } from \"fs\"\nimport { lstat, lstatSync, readdir } from \"fs-extra\"\nimport * as path from \"path\"\nimport asyncPool from \"tiny-async-pool\"\nimport { excludedNames, FileMatcher } from \"../fileMatcher\"\nimport { Packager } from \"../packager\"\nimport { FileCopyHelper } from \"./AppFileWalker\"\nimport { NodeModuleInfo } from \"./packageDependencies\"\nimport { resolveFunction } from \"./resolve\"\n\nconst excludedFiles = new Set(\n  [\n    \".DS_Store\",\n    \"node_modules\" /* already in the queue */,\n    \"CHANGELOG.md\",\n    \"ChangeLog\",\n    \"changelog.md\",\n    \"Changelog.md\",\n    \"Changelog\",\n    \"binding.gyp\",\n    \".npmignore\",\n    \"node_gyp_bins\",\n  ].concat(excludedNames.split(\",\"))\n)\n\nconst topLevelExcludedFiles = new Set([\n  \"karma.conf.js\",\n  \".coveralls.yml\",\n  \"README.md\",\n  \"readme.markdown\",\n  \"README\",\n  \"readme.md\",\n  \"Readme.md\",\n  \"Readme\",\n  \"readme\",\n  \"test\",\n  \"tests\",\n  \"__tests__\",\n  \"powered-test\",\n  \"example\",\n  \"examples\",\n  \".bin\",\n])\n\n/** @internal */\nexport class NodeModuleCopyHelper extends FileCopyHelper {\n  constructor(matcher: FileMatcher, packager: Packager) {\n    super(matcher, matcher.isEmpty() ? null : matcher.createFilter(), packager)\n  }\n\n  async collectNodeModules(moduleInfo: NodeModuleInfo, nodeModuleExcludedExts: Array<string>, destination: string): Promise<Array<string>> {\n    const filter = this.filter\n    const metadata = this.metadata\n\n    const onNodeModuleFile = await resolveFunction(this.packager.appInfo.type, this.packager.config.onNodeModuleFile, \"onNodeModuleFile\")\n\n    const result: Array<string | undefined> = []\n    const queue: Array<string> = []\n    const emptyDirs: Set<string> = new Set()\n    const symlinkFiles: Map<string, number> = new Map()\n    const tmpPath = moduleInfo.dir\n    const moduleName = moduleInfo.name\n    queue.length = 1\n    // The path should be corrected in Windows that when the moduleName is Scoped packages named.\n    const depPath = path.normalize(tmpPath)\n    queue[0] = depPath\n\n    while (queue.length > 0) {\n      const dirPath = queue.pop()!\n\n      const childNames = await readdir(dirPath)\n      childNames.sort()\n\n      const isTopLevel = dirPath === depPath\n      const dirs: Array<string> = []\n      // our handler is async, but we should add sorted files, so, we add file to result not in the mapper, but after map\n      const sortedFilePaths = await asyncPool(MAX_FILE_REQUESTS, childNames, async name => {\n        const filePath = path.join(dirPath, name)\n\n        const forceIncluded = onNodeModuleFile != null && !!onNodeModuleFile(filePath)\n\n        if (excludedFiles.has(name) || name.startsWith(\"._\")) {\n          return null\n        }\n\n        // check if filematcher matches the files array as more important than the default excluded files.\n        const fileMatched = filter != null && filter(dirPath, lstatSync(dirPath))\n        if (!fileMatched || !forceIncluded || !!this.packager.config.disableDefaultIgnoredFiles) {\n          for (const ext of nodeModuleExcludedExts) {\n            if (name.endsWith(ext)) {\n              return null\n            }\n          }\n\n          // noinspection SpellCheckingInspection\n          if (isTopLevel && (topLevelExcludedFiles.has(name) || (moduleName === \"libui-node\" && (name === \"build\" || name === \"docs\" || name === \"src\")))) {\n            return null\n          }\n\n          if (dirPath.endsWith(\"build\")) {\n            if (name === \"gyp-mac-tool\" || name === \"Makefile\" || name.endsWith(\".mk\") || name.endsWith(\".gypi\") || name.endsWith(\".Makefile\")) {\n              return null\n            }\n          } else if (dirPath.endsWith(\"Release\") && (name === \".deps\" || name === \"obj.target\")) {\n            return null\n          } else if (name === \"src\" && (dirPath.endsWith(\"keytar\") || dirPath.endsWith(\"keytar-prebuild\"))) {\n            return null\n          } else if (dirPath.endsWith(\"lzma-native\") && (name === \"build\" || name === \"deps\")) {\n            return null\n          }\n        }\n\n        return lstat(filePath).then((stat: FilterStats) => {\n          stat.moduleName = moduleName\n          stat.moduleRootPath = destination\n          stat.moduleFullFilePath = path.join(destination, path.relative(depPath, filePath))\n          if (filter != null && !filter(filePath, stat)) {\n            return null\n          }\n\n          if (!stat.isDirectory()) {\n            metadata.set(filePath, stat)\n          }\n          const consumerResult = this.handleFile(filePath, dirPath, stat)\n          if (consumerResult == null) {\n            if (stat.isDirectory()) {\n              dirs.push(name)\n              return null\n            } else {\n              return filePath\n            }\n          } else {\n            return consumerResult.then(it => {\n              // asarUtil can return modified stat (symlink handling)\n              if ((it == null ? stat : it).isDirectory()) {\n                dirs.push(name)\n                return null\n              } else {\n                return filePath\n              }\n            })\n          }\n        })\n      })\n\n      let isEmpty = true\n      for (const child of sortedFilePaths) {\n        if (child != null) {\n          result.push(child)\n          if (this.metadata.get(child)?.isSymbolicLink()) {\n            symlinkFiles.set(child, result.length - 1)\n          }\n          isEmpty = false\n        }\n      }\n\n      if (isEmpty) {\n        emptyDirs.add(dirPath)\n      }\n\n      dirs.sort()\n      for (const child of dirs) {\n        queue.push(dirPath + path.sep + child)\n      }\n    }\n\n    for (const [file, index] of symlinkFiles) {\n      const resolvedPath = realpathSync(file)\n      if (emptyDirs.has(resolvedPath)) {\n        // delete symlink file if target is a empty dir\n        result[index] = undefined\n      }\n    }\n    return result.filter((it): it is string => it !== undefined)\n  }\n}\n"]}
+{"version":3,"file":"NodeModuleCopyHelper.js","sourceRoot":"","sources":["../../src/util/NodeModuleCopyHelper.ts"],"names":[],"mappings":";;;AAAA,+CAA6D;AAC7D,2BAAiC;AACjC,uCAAoD;AACpD,6BAA4B;AAC5B,qDAAuC;AACvC,gDAA2D;AAE3D,mDAAgD;AAEhD,uCAA2C;AAE3C,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B;IACE,WAAW;IACX,cAAc,CAAC,0BAA0B;IACzC,cAAc;IACd,WAAW;IACX,cAAc;IACd,cAAc;IACd,WAAW;IACX,aAAa;IACb,YAAY;IACZ,eAAe;CAChB,CAAC,MAAM,CAAC,2BAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CACnC,CAAA;AAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe;IACf,gBAAgB;IAChB,WAAW;IACX,iBAAiB;IACjB,QAAQ;IACR,WAAW;IACX,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;IACP,WAAW;IACX,cAAc;IACd,SAAS;IACT,UAAU;IACV,MAAM;CACP,CAAC,CAAA;AAEF,gBAAgB;AAChB,MAAa,oBAAqB,SAAQ,8BAAc;IACtD,YAAY,OAAoB,EAAE,QAAkB;QAClD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC7E,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,UAA0B,EAAE,sBAAqC,EAAE,WAAmB;;QAC7G,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAE9B,MAAM,gBAAgB,GAAG,MAAM,IAAA,yBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAA;QAE7K,MAAM,MAAM,GAA8B,EAAE,CAAA;QAC5C,MAAM,KAAK,GAAkB,EAAE,CAAA;QAC/B,MAAM,SAAS,GAAgB,IAAI,GAAG,EAAE,CAAA;QACxC,MAAM,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAA;QACnD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAA;QAC9B,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAA;QAClC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;QAChB,6FAA6F;QAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAA;QAElB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAG,CAAA;YAE5B,MAAM,UAAU,GAAG,MAAM,IAAA,kBAAO,EAAC,OAAO,CAAC,CAAA;YACzC,UAAU,CAAC,IAAI,EAAE,CAAA;YAEjB,MAAM,UAAU,GAAG,OAAO,KAAK,OAAO,CAAA;YACtC,MAAM,IAAI,GAAkB,EAAE,CAAA;YAC9B,mHAAmH;YACnH,MAAM,eAAe,GAAG,MAAM,IAAA,yBAAS,EAAC,gCAAiB,EAAE,UAAU,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;gBAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;gBAEzC,MAAM,aAAa,GAAG,gBAAgB,IAAI,IAAI,IAAI,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;gBAE9E,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrD,OAAO,IAAI,CAAA;gBACb,CAAC;gBAED,kGAAkG;gBAClG,MAAM,WAAW,GAAG,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,IAAA,oBAAS,EAAC,OAAO,CAAC,CAAC,CAAA;gBACzE,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,EAAE,CAAC;oBACxF,KAAK,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;wBACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;4BACvB,OAAO,IAAI,CAAA;wBACb,CAAC;oBACH,CAAC;oBAED,uCAAuC;oBACvC,IAAI,UAAU,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,YAAY,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChJ,OAAO,IAAI,CAAA;oBACb,CAAC;oBAED,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC9B,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;4BACnI,OAAO,IAAI,CAAA;wBACb,CAAC;oBACH,CAAC;yBAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;wBACtF,OAAO,IAAI,CAAA;oBACb,CAAC;yBAAM,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;wBACjG,OAAO,IAAI,CAAA;oBACb,CAAC;yBAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;wBACpF,OAAO,IAAI,CAAA;oBACb,CAAC;gBACH,CAAC;gBAED,OAAO,IAAA,gBAAK,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAiB,EAAE,EAAE;oBAChD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;oBAC5B,IAAI,CAAC,cAAc,GAAG,WAAW,CAAA;oBACjC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;oBAClF,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;wBAC9C,OAAO,IAAI,CAAA;oBACb,CAAC;oBAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;wBACxB,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;oBAC9B,CAAC;oBACD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;oBAC/D,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;wBAC3B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;4BACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;4BACf,OAAO,IAAI,CAAA;wBACb,CAAC;6BAAM,CAAC;4BACN,OAAO,QAAQ,CAAA;wBACjB,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;4BAC9B,uDAAuD;4BACvD,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gCAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gCACf,OAAO,IAAI,CAAA;4BACb,CAAC;iCAAM,CAAC;gCACN,OAAO,QAAQ,CAAA;4BACjB,CAAC;wBACH,CAAC,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YAEF,IAAI,OAAO,GAAG,IAAI,CAAA;YAClB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;gBACpC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;oBAClB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBAClB,IAAI,MAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,0CAAE,cAAc,EAAE,EAAE,CAAC;wBAC/C,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;oBAC5C,CAAC;oBACD,OAAO,GAAG,KAAK,CAAA;gBACjB,CAAC;YACH,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACxB,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAA;YACX,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,IAAA,iBAAY,EAAC,IAAI,CAAC,CAAA;YACvC,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChC,+CAA+C;gBAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,CAAA;IAC9D,CAAC;CACF;AAlID,oDAkIC","sourcesContent":["import { FilterStats, MAX_FILE_REQUESTS } from \"builder-util\"\nimport { realpathSync } from \"fs\"\nimport { lstat, lstatSync, readdir } from \"fs-extra\"\nimport * as path from \"path\"\nimport asyncPool from \"tiny-async-pool\"\nimport { excludedNames, FileMatcher } from \"../fileMatcher\"\nimport { Packager } from \"../packager\"\nimport { FileCopyHelper } from \"./AppFileWalker\"\nimport { NodeModuleInfo } from \"./packageDependencies\"\nimport { resolveFunction } from \"./resolve\"\n\nconst excludedFiles = new Set(\n  [\n    \".DS_Store\",\n    \"node_modules\" /* already in the queue */,\n    \"CHANGELOG.md\",\n    \"ChangeLog\",\n    \"changelog.md\",\n    \"Changelog.md\",\n    \"Changelog\",\n    \"binding.gyp\",\n    \".npmignore\",\n    \"node_gyp_bins\",\n  ].concat(excludedNames.split(\",\"))\n)\n\nconst topLevelExcludedFiles = new Set([\n  \"karma.conf.js\",\n  \".coveralls.yml\",\n  \"README.md\",\n  \"readme.markdown\",\n  \"README\",\n  \"readme.md\",\n  \"Readme.md\",\n  \"Readme\",\n  \"readme\",\n  \"test\",\n  \"tests\",\n  \"__tests__\",\n  \"powered-test\",\n  \"example\",\n  \"examples\",\n  \".bin\",\n])\n\n/** @internal */\nexport class NodeModuleCopyHelper extends FileCopyHelper {\n  constructor(matcher: FileMatcher, packager: Packager) {\n    super(matcher, matcher.isEmpty() ? null : matcher.createFilter(), packager)\n  }\n\n  async collectNodeModules(moduleInfo: NodeModuleInfo, nodeModuleExcludedExts: Array<string>, destination: string): Promise<Array<string>> {\n    const filter = this.filter\n    const metadata = this.metadata\n\n    const onNodeModuleFile = await resolveFunction(this.packager.appInfo.type, this.packager.config.onNodeModuleFile, \"onNodeModuleFile\", await this.packager.getWorkspaceRoot())\n\n    const result: Array<string | undefined> = []\n    const queue: Array<string> = []\n    const emptyDirs: Set<string> = new Set()\n    const symlinkFiles: Map<string, number> = new Map()\n    const tmpPath = moduleInfo.dir\n    const moduleName = moduleInfo.name\n    queue.length = 1\n    // The path should be corrected in Windows that when the moduleName is Scoped packages named.\n    const depPath = path.normalize(tmpPath)\n    queue[0] = depPath\n\n    while (queue.length > 0) {\n      const dirPath = queue.pop()!\n\n      const childNames = await readdir(dirPath)\n      childNames.sort()\n\n      const isTopLevel = dirPath === depPath\n      const dirs: Array<string> = []\n      // our handler is async, but we should add sorted files, so, we add file to result not in the mapper, but after map\n      const sortedFilePaths = await asyncPool(MAX_FILE_REQUESTS, childNames, async name => {\n        const filePath = path.join(dirPath, name)\n\n        const forceIncluded = onNodeModuleFile != null && !!onNodeModuleFile(filePath)\n\n        if (excludedFiles.has(name) || name.startsWith(\"._\")) {\n          return null\n        }\n\n        // check if filematcher matches the files array as more important than the default excluded files.\n        const fileMatched = filter != null && filter(dirPath, lstatSync(dirPath))\n        if (!fileMatched || !forceIncluded || !!this.packager.config.disableDefaultIgnoredFiles) {\n          for (const ext of nodeModuleExcludedExts) {\n            if (name.endsWith(ext)) {\n              return null\n            }\n          }\n\n          // noinspection SpellCheckingInspection\n          if (isTopLevel && (topLevelExcludedFiles.has(name) || (moduleName === \"libui-node\" && (name === \"build\" || name === \"docs\" || name === \"src\")))) {\n            return null\n          }\n\n          if (dirPath.endsWith(\"build\")) {\n            if (name === \"gyp-mac-tool\" || name === \"Makefile\" || name.endsWith(\".mk\") || name.endsWith(\".gypi\") || name.endsWith(\".Makefile\")) {\n              return null\n            }\n          } else if (dirPath.endsWith(\"Release\") && (name === \".deps\" || name === \"obj.target\")) {\n            return null\n          } else if (name === \"src\" && (dirPath.endsWith(\"keytar\") || dirPath.endsWith(\"keytar-prebuild\"))) {\n            return null\n          } else if (dirPath.endsWith(\"lzma-native\") && (name === \"build\" || name === \"deps\")) {\n            return null\n          }\n        }\n\n        return lstat(filePath).then((stat: FilterStats) => {\n          stat.moduleName = moduleName\n          stat.moduleRootPath = destination\n          stat.moduleFullFilePath = path.join(destination, path.relative(depPath, filePath))\n          if (filter != null && !filter(filePath, stat)) {\n            return null\n          }\n\n          if (!stat.isDirectory()) {\n            metadata.set(filePath, stat)\n          }\n          const consumerResult = this.handleFile(filePath, dirPath, stat)\n          if (consumerResult == null) {\n            if (stat.isDirectory()) {\n              dirs.push(name)\n              return null\n            } else {\n              return filePath\n            }\n          } else {\n            return consumerResult.then(it => {\n              // asarUtil can return modified stat (symlink handling)\n              if ((it == null ? stat : it).isDirectory()) {\n                dirs.push(name)\n                return null\n              } else {\n                return filePath\n              }\n            })\n          }\n        })\n      })\n\n      let isEmpty = true\n      for (const child of sortedFilePaths) {\n        if (child != null) {\n          result.push(child)\n          if (this.metadata.get(child)?.isSymbolicLink()) {\n            symlinkFiles.set(child, result.length - 1)\n          }\n          isEmpty = false\n        }\n      }\n\n      if (isEmpty) {\n        emptyDirs.add(dirPath)\n      }\n\n      dirs.sort()\n      for (const child of dirs) {\n        queue.push(dirPath + path.sep + child)\n      }\n    }\n\n    for (const [file, index] of symlinkFiles) {\n      const resolvedPath = realpathSync(file)\n      if (emptyDirs.has(resolvedPath)) {\n        // delete symlink file if target is a empty dir\n        result[index] = undefined\n      }\n    }\n    return result.filter((it): it is string => it !== undefined)\n  }\n}\n"]}

package/out/util/electronGet.d.ts

@@ -0,0 +1,56 @@
+import { ElectronPlatformArtifactDetails, MirrorOptions } from "@electron/get";
+import { ElectronPlatformName } from "../electron/ElectronFramework";
+export type ElectronGetOptions = Omit<ElectronPlatformArtifactDetails, "platform" | "arch" | "version" | "artifactName" | "artifactSuffix" | "customFilename" | "tempDirectory" | "downloader" | "cacheMode" | "cacheRoot" | "downloadOptions" | "isGeneric" | "mirrorOptions"> & {
+    mirrorOptions?: Omit<MirrorOptions, "customDir" | "customFilename" | "customVersion">;
+};
+export type ArtifactDownloadOptions = {
+    electronDownload?: ElectronGetOptions | ElectronDownloadOptions | null;
+    artifactName: string;
+    platformName: string;
+    arch: string;
+    version: string;
+    cacheDir?: string;
+};
+export interface ElectronDownloadOptions {
+    version?: string;
+    /**
+     * The [cache location](https://github.com/electron-userland/electron-download#cache-location).
+     */
+    cache?: string | null;
+    /**
+     * The mirror.
+     */
+    mirror?: string | null;
+    /** @private */
+    customDir?: string | null;
+    /** @private */
+    customFilename?: string | null;
+    strictSSL?: boolean;
+    isVerifyChecksum?: boolean;
+    platform?: ElectronPlatformName;
+    arch?: string;
+}
+export declare function getCacheDirectory(isAvoidSystemOnWindows?: boolean): string;
+export declare function extractArchive(file: string, dir: string): Promise<void>;
+/**
+ * Downloads a generic artifact (.tar.gz or .zip) from a GitHub release.
+ * Used for electron-builder-binaries tools (appimage, etc.).
+ */
+export declare function downloadBuilderToolset(options: {
+    releaseName: string;
+    filenameWithExt: string;
+    checksums?: Record<string, string>;
+    githubOrgRepo?: string;
+    overrideUrl?: string;
+}): Promise<string>;
+/**
+ * Downloads the electron artifact zip via @electron/get (with caching) and returns the zip file path.
+ * Use when you need to extract the zip yourself (e.g. directly to appOutDir to preserve empty dirs and symlinks).
+ */
+export declare function downloadElectronArtifactZip(options: ArtifactDownloadOptions): Promise<string>;
+export declare function downloadElectronArtifact(options: ArtifactDownloadOptions): Promise<string>;
+/**
+ * Get the binaries mirror URL from environment variables.
+ * Supports various npm config formats and falls back to GitHub.
+ */
+export declare function getBinariesMirrorUrl(githubOrgRepo: string): string;

package/out/util/electronGet.js

@@ -0,0 +1,330 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCacheDirectory = getCacheDirectory;
+exports.extractArchive = extractArchive;
+exports.downloadBuilderToolset = downloadBuilderToolset;
+exports.downloadElectronArtifactZip = downloadElectronArtifactZip;
+exports.downloadElectronArtifact = downloadElectronArtifact;
+exports.getBinariesMirrorUrl = getBinariesMirrorUrl;
+const get = require("@electron/get");
+const get_1 = require("@electron/get");
+const builder_util_1 = require("builder-util");
+const multiProgress_1 = require("electron-publish/out/multiProgress");
+const fs_1 = require("fs");
+const fs = require("fs/promises");
+const os = require("os");
+const path = require("path");
+const lockfile = require("proper-lockfile");
+const promises_1 = require("stream/promises");
+const tar = require("tar");
+const unzipper = require("unzipper");
+function hashUrlSafe(input, length = 6) {
+    let hash = 5381;
+    for (let i = 0; i < input.length; i++) {
+        hash = ((hash << 5) + hash) ^ input.charCodeAt(i);
+    }
+    hash >>>= 0;
+    const out = hash.toString(36);
+    return out.length >= length ? out.slice(0, length) : out.padStart(length, "0");
+}
+function getCacheDirectory(isAvoidSystemOnWindows = false) {
+    var _a, _b, _c, _d, _e;
+    const env = (_a = process.env.ELECTRON_BUILDER_CACHE) === null || _a === void 0 ? void 0 : _a.trim();
+    if (env && path.parse(env).root) {
+        return env;
+    }
+    const appName = "electron-builder";
+    const platform = os.platform();
+    const homeDir = os.homedir();
+    if (platform === "darwin") {
+        return path.join(homeDir, "Library", "Caches", appName);
+    }
+    if (platform === "win32") {
+        const localAppData = (_b = process.env.LOCALAPPDATA) === null || _b === void 0 ? void 0 : _b.trim();
+        const username = (_d = (_c = process.env.USERNAME) === null || _c === void 0 ? void 0 : _c.trim()) === null || _d === void 0 ? void 0 : _d.toLowerCase();
+        const isSystemUser = isAvoidSystemOnWindows && (((_e = localAppData === null || localAppData === void 0 ? void 0 : localAppData.toLowerCase()) === null || _e === void 0 ? void 0 : _e.includes("\\windows\\system32\\")) || username === "system");
+        if (!localAppData || isSystemUser) {
+            return path.join(os.tmpdir(), `${appName}-cache`);
+        }
+        return path.join(localAppData, appName, "Cache");
+    }
+    const xdgCache = process.env.XDG_CACHE_HOME;
+    return xdgCache && path.parse(xdgCache).root ? path.join(xdgCache, appName) : path.join(homeDir, ".cache", appName);
+}
+function resolveCacheMode() {
+    var _a;
+    const varName = "ELECTRON_DOWNLOAD_CACHE_MODE";
+    const cacheOverride = (_a = process.env[varName]) === null || _a === void 0 ? void 0 : _a.trim();
+    if (cacheOverride && Number(cacheOverride) in get_1.ElectronDownloadCacheMode) {
+        const mode = Number(cacheOverride);
+        builder_util_1.log.debug({ mode }, `cache mode overridden via env var ${varName}`);
+        return mode;
+    }
+    return get_1.ElectronDownloadCacheMode.ReadWrite;
+}
+async function extractZipStreaming(file, dir) {
+    var _a;
+    // Pass 1: read central directory once to collect Unix modes (one seek to EOF)
+    const zipDir = await unzipper.Open.file(file);
+    const entryModes = new Map();
+    for (const entry of zipDir.files) {
+        const mode = (entry.externalFileAttributes >> 16) & 0xffff;
+        if (mode > 0) {
+            entryModes.set(entry.path, mode);
+        }
+    }
+    const isSymlink = (mode) => (mode & 0o170000) === 0o120000;
+    // Pass 2: stream from byte 0 — no per-entry seeks, no Docker hang
+    const entries = (0, fs_1.createReadStream)(file).pipe(unzipper.Parse({ forceStream: true }));
+    for await (const entry of entries) {
+        const destPath = path.resolve(dir, entry.path);
+        if (!destPath.startsWith(dir + path.sep) && destPath !== dir) {
+            throw new Error(`Path traversal blocked: ${entry.path}`);
+        }
+        const mode = (_a = entryModes.get(entry.path)) !== null && _a !== void 0 ? _a : 0;
+        if (mode > 0 && isSymlink(mode)) {
+            const target = (await entry.buffer()).toString();
+            if (path.isAbsolute(target)) {
+                throw new Error(`Absolute symlink target blocked: ${target}`);
+            }
+            const resolvedTarget = path.resolve(path.dirname(destPath), target);
+            if (!resolvedTarget.startsWith(dir + path.sep) && resolvedTarget !== dir) {
+                throw new Error(`Symlink target escapes extraction dir: ${target}`);
+            }
+            await fs.mkdir(path.dirname(destPath), { recursive: true });
+            await fs.symlink(target, destPath);
+        }
+        else if (entry.type === "Directory") {
+            await fs.mkdir(destPath, { recursive: true });
+            entry.autodrain();
+        }
+        else {
+            await fs.mkdir(path.dirname(destPath), { recursive: true });
+            await (0, promises_1.pipeline)(entry, (0, fs_1.createWriteStream)(destPath));
+            if (mode > 0) {
+                await fs.chmod(destPath, mode & 0o7777);
+            }
+        }
+    }
+}
+async function extractArchive(file, dir) {
+    const tmpDir = `${dir}.tmp`;
+    await fs.mkdir(tmpDir, { recursive: true });
+    const release = await lockfile.lock(tmpDir, {
+        retries: { retries: 5, minTimeout: 1000, maxTimeout: 5000 },
+        stale: 60000,
+    });
+    try {
+        // rm + mkdir happen AFTER acquiring the lock so no concurrent caller can clear our tmpDir mid-extraction
+        await fs.rm(tmpDir, { recursive: true, force: true });
+        await fs.mkdir(tmpDir, { recursive: true });
+        if (file.endsWith(".tar.gz") || file.endsWith(".tgz")) {
+            await tar.extract({ file, cwd: tmpDir, strip: 1 });
+        }
+        else if (file.endsWith(".zip")) {
+            await extractZipStreaming(file, tmpDir);
+        }
+        else if (file.endsWith(".7z")) {
+            await (0, builder_util_1.exec)(await (0, builder_util_1.getPath7za)(), ["x", "-bd", file, `-o${tmpDir}`, "-y"]);
+        }
+        else {
+            throw new Error(`Unsupported archive format: ${path.basename(file)}`);
+        }
+        await fs.rm(dir, { recursive: true, force: true });
+        await fs.rename(tmpDir, dir);
+    }
+    finally {
+        await release().catch(err => builder_util_1.log.warn({ err }, "failed to release lockfile"));
+    }
+}
+async function downloadArtifactToFile(config, label) {
+    const progress = process.stdout.isTTY ? new multiProgress_1.MultiProgress() : null;
+    const progressBar = progress === null || progress === void 0 ? void 0 : progress.createBar(`${" ".repeat(builder_util_1.PADDING + 2)}[:bar] :percent | ${label}`, { total: 100 });
+    progressBar === null || progressBar === void 0 ? void 0 : progressBar.render();
+    let lastLoggedMilestone = -1;
+    const downloadOptions = {
+        timeout: { request: 10 * 60 * 1000 }, // prevent indefinite hang on stalled connections
+        ...config.downloadOptions,
+        getProgressCallback: info => {
+            const pct = info.percent != null ? Math.floor(info.percent * 100) : 0;
+            if (progressBar) {
+                progressBar.update(pct);
+            }
+            else {
+                // log every 25% milestone for non-TTY environments (e.g. CI logs) to provide some visibility into download progress without overwhelming logs with too many updates
+                const percentCompleted = info.transferred && info.total ? Math.floor((info.transferred / info.total) * 100) : Math.floor(pct / 25) * 25;
+                if (percentCompleted > lastLoggedMilestone && percentCompleted > 0) {
+                    lastLoggedMilestone = percentCompleted;
+                    builder_util_1.log.info({ label, progress: `${percentCompleted}%` }, percentCompleted !== 100 ? "downloading" : "downloaded");
+                }
+            }
+            return Promise.resolve();
+        },
+    };
+    builder_util_1.log.info({ label }, "downloading");
+    const configWithProgress = { ...config, downloadOptions };
+    try {
+        let filePath;
+        try {
+            filePath = await get.downloadArtifact(configWithProgress);
+        }
+        catch (err) {
+            if (typeof (err === null || err === void 0 ? void 0 : err.message) === "string" && err.message.includes("dest already exists")) {
+                filePath = await get.downloadArtifact(configWithProgress);
+            }
+            else {
+                throw err;
+            }
+        }
+        if (!(await (0, builder_util_1.exists)(filePath))) {
+            builder_util_1.log.warn({ filePath, label }, "cached artifact missing from disk; retrying with cache write");
+            filePath = await get.downloadArtifact({ ...configWithProgress, cacheMode: get_1.ElectronDownloadCacheMode.WriteOnly });
+        }
+        return filePath;
+    }
+    finally {
+        progressBar === null || progressBar === void 0 ? void 0 : progressBar.update(100);
+        progressBar === null || progressBar === void 0 ? void 0 : progressBar.terminate();
+    }
+}
+/**
+ * Core download + extract engine. Handles lockfile, cache-hit short-circuit,
+ * progress bar, extraction (.zip or .tar.gz), and completion marker.
+ * Both public download functions delegate here after building their respective configs.
+ */
+async function downloadAndExtract(config, extractDir, label) {
+    const completeMarker = `${extractDir}.complete`;
+    const isCached = async () => (0, builder_util_1.exists)(completeMarker);
+    await fs.mkdir(extractDir, { recursive: true });
+    if (await isCached()) {
+        builder_util_1.log.debug({ file: label, path: extractDir }, "using cached artifact - skipping download/extract");
+        return extractDir;
+    }
+    const release = await lockfile.lock(extractDir, {
+        retries: { retries: 5, minTimeout: 1000, maxTimeout: 5000 },
+        stale: 60000,
+    });
+    let downloadedFile = null;
+    try {
+        // Re-check after acquiring lock: another worker may have completed while we waited.
+        if (await isCached()) {
+            builder_util_1.log.debug({ file: label, path: extractDir }, "using cached artifact - skipping download/extract");
+            return extractDir;
+        }
+        downloadedFile = await downloadArtifactToFile(config, label);
+    }
+    finally {
+        await release().catch(err => builder_util_1.log.warn({ err }, "failed to release lockfile"));
+    }
+    await extractArchive(downloadedFile, extractDir);
+    await fs.writeFile(completeMarker, "");
+    return extractDir;
+}
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Downloads a generic artifact (.tar.gz or .zip) from a GitHub release.
+ * Used for electron-builder-binaries tools (appimage, etc.).
+ */
+async function downloadBuilderToolset(options) {
+    const { releaseName, filenameWithExt, checksums, githubOrgRepo = "electron-userland/electron-builder-binaries", overrideUrl } = options;
+    const baseUrl = getBinariesMirrorUrl(githubOrgRepo);
+    const hashInput = overrideUrl ? `${overrideUrl}/${filenameWithExt}` : `${baseUrl}${releaseName}/${filenameWithExt}`;
+    const suffix = hashUrlSafe(hashInput, 5);
+    const folderName = `${filenameWithExt.replace(/\.(tar\.gz|tgz|zip|7z)$/, "")}-${suffix}`;
+    const extractDir = path.join(getCacheDirectory(), releaseName, folderName);
+    const mirrorOptions = overrideUrl
+        ? { resolveAssetURL: async () => Promise.resolve(`${overrideUrl}/${filenameWithExt}`) }
+        : {
+            // `${mirror}${customDir}/${customFilename}`
+            mirror: baseUrl,
+            customDir: releaseName,
+            customFilename: filenameWithExt,
+        };
+    const config = {
+        version: "9.9.9", // must be >1.3.2 to bypass @electron/get validation shortcut
+        artifactName: filenameWithExt,
+        cacheRoot: path.resolve(getCacheDirectory(), "downloads"),
+        cacheMode: resolveCacheMode(),
+        ...(checksums != null ? { checksums } : { unsafelyDisableChecksums: true }),
+        mirrorOptions,
+        isGeneric: true,
+    };
+    return downloadAndExtract(config, extractDir, filenameWithExt);
+}
+// Keys present in ElectronGetOptions but absent from ElectronDownloadOptions.
+// Used to discriminate between the two config shapes at runtime.
+const ELECTRON_GET_EXCLUSIVE_KEYS = ["mirrorOptions", "force", "unsafelyDisableChecksums"];
+function isElectronGetOptions(dl) {
+    return ELECTRON_GET_EXCLUSIVE_KEYS.some(k => Object.hasOwnProperty.call(dl, k));
+}
+/**
+ * Downloads and extracts an electron platform artifact (e.g. ffmpeg) using @electron/get.
+ * Deduplicates concurrent calls for the same artifact within the same process.
+ */
+function buildElectronArtifactConfig(options) {
+    const { electronDownload, arch, version, platformName: platform, artifactName, cacheDir: cacheRoot } = options;
+    let artifactConfig = { cacheRoot, platform, arch, version, artifactName };
+    if (electronDownload != null) {
+        if (isElectronGetOptions(electronDownload)) {
+            const { mirrorOptions, ...rest } = electronDownload;
+            artifactConfig = { ...artifactConfig, ...rest, cacheRoot, mirrorOptions };
+        }
+        else {
+            const { mirror, customDir, cache, customFilename, isVerifyChecksum, strictSSL, platform: overridePlatform, arch: overrideArch } = electronDownload;
+            artifactConfig = {
+                ...artifactConfig,
+                unsafelyDisableChecksums: isVerifyChecksum === false,
+                cacheRoot: cache !== null && cache !== void 0 ? cache : cacheRoot,
+                mirrorOptions: {
+                    mirror: mirror || undefined,
+                    customDir: customDir || undefined,
+                    customFilename: customFilename || undefined,
+                },
+                ...(strictSSL === false ? { downloadOptions: { https: { rejectUnauthorized: false } } } : {}),
+            };
+            if (overridePlatform != null) {
+                artifactConfig.platform = overridePlatform;
+            }
+            if (overrideArch != null) {
+                artifactConfig.arch = overrideArch;
+            }
+        }
+    }
+    artifactConfig.cacheMode = resolveCacheMode();
+    return artifactConfig;
+}
+/**
+ * Downloads the electron artifact zip via @electron/get (with caching) and returns the zip file path.
+ * Use when you need to extract the zip yourself (e.g. directly to appOutDir to preserve empty dirs and symlinks).
+ */
+function downloadElectronArtifactZip(options) {
+    const config = buildElectronArtifactConfig(options);
+    return downloadArtifactToFile(config, config.artifactName);
+}
+async function downloadElectronArtifact(options) {
+    const { arch, version, platformName: platform, artifactName } = options;
+    const artifactConfig = buildElectronArtifactConfig(options);
+    const suffix = hashUrlSafe(JSON.stringify(artifactConfig), 5);
+    const folderName = `${artifactName}-v${version}-${platform}-${arch}-${suffix}`;
+    const extractDir = path.join(getCacheDirectory(), `${artifactName}-v${version}`, folderName);
+    return downloadAndExtract(artifactConfig, extractDir, artifactName);
+}
+/**
+ * Get the binaries mirror URL from environment variables.
+ * Supports various npm config formats and falls back to GitHub.
+ */
+function getBinariesMirrorUrl(githubOrgRepo) {
+    for (const envVar of [
+        "NPM_CONFIG_ELECTRON_BUILDER_BINARIES_MIRROR",
+        "npm_config_electron_builder_binaries_mirror",
+        "npm_package_config_electron_builder_binaries_mirror",
+        "ELECTRON_BUILDER_BINARIES_MIRROR",
+    ]) {
+        const url = (0, builder_util_1.parseValidEnvVarUrl)(envVar);
+        if (url) {
+            return url.endsWith("/") ? url : `${url}/`;
+        }
+    }
+    return `https://github.com/${githubOrgRepo}/releases/download/`;
+}
+//# sourceMappingURL=electronGet.js.map

package/out/util/electronGet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"electronGet.js","sourceRoot":"","sources":["../../src/util/electronGet.ts"],"names":[],"mappings":";;AAsFA,8CAyBC;AAyDD,wCA4BC;AA8FD,wDAkCC;AAqDD,kEAGC;AAED,4DASC;AAMD,oDAaC;AA1ZD,qCAAoC;AACpC,uCAOsB;AACtB,+CAA0F;AAC1F,sEAAkE;AAClE,2BAAwD;AACxD,kCAAiC;AACjC,yBAAwB;AACxB,6BAA4B;AAC5B,4CAA2C;AAC3C,8CAA0C;AAC1C,2BAA0B;AAC1B,qCAAoC;AA0DpC,SAAS,WAAW,CAAC,KAAa,EAAE,MAAM,GAAG,CAAC;IAC5C,IAAI,IAAI,GAAG,IAAI,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,CAAA;IACX,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC7B,OAAO,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAChF,CAAC;AAED,SAAgB,iBAAiB,CAAC,sBAAsB,GAAG,KAAK;;IAC9D,MAAM,GAAG,GAAG,MAAA,OAAO,CAAC,GAAG,CAAC,sBAAsB,0CAAE,IAAI,EAAE,CAAA;IACtD,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAA;IAClC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAE5B,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,GAAG,CAAC,YAAY,0CAAE,IAAI,EAAE,CAAA;QACrD,MAAM,QAAQ,GAAG,MAAA,MAAA,OAAO,CAAC,GAAG,CAAC,QAAQ,0CAAE,IAAI,EAAE,0CAAE,WAAW,EAAE,CAAA;QAC5D,MAAM,YAAY,GAAG,sBAAsB,IAAI,CAAC,CAAA,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,WAAW,EAAE,0CAAE,QAAQ,CAAC,uBAAuB,CAAC,KAAI,QAAQ,KAAK,QAAQ,CAAC,CAAA;QACxI,IAAI,CAAC,YAAY,IAAI,YAAY,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,QAAQ,CAAC,CAAA;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IAC3C,OAAO,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AACrH,CAAC;AAED,SAAS,gBAAgB;;IACvB,MAAM,OAAO,GAAG,8BAA8B,CAAA;IAC9C,MAAM,aAAa,GAAG,MAAA,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,0CAAE,IAAI,EAAE,CAAA;IAClD,IAAI,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,+BAAyB,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAA8B,CAAA;QAC/D,kBAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,qCAAqC,OAAO,EAAE,CAAC,CAAA;QACnE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,+BAAyB,CAAC,SAAS,CAAA;AAC5C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAW;;IAC1D,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,GAAG,MAAM,CAAA;QAC1D,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,QAAQ,CAAA;IAElE,kEAAkE;IAClE,MAAM,OAAO,GAAG,IAAA,qBAAgB,EAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAClF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAwC,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QAC1D,CAAC;QACD,MAAM,IAAI,GAAG,MAAA,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAI,CAAC,CAAA;QAC5C,IAAI,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;YAChD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,EAAE,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;YACnE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,KAAK,GAAG,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,EAAE,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3D,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACpC,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7C,KAAK,CAAC,SAAS,EAAE,CAAA;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3D,MAAM,IAAA,mBAAQ,EAAC,KAAK,EAAE,IAAA,sBAAiB,EAAC,QAAQ,CAAC,CAAC,CAAA;YAClD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBACb,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,GAAW;IAC5D,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAA;IAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE;QAC1C,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC3D,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,yGAAyG;QACzG,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAA,mBAAI,EAAC,MAAM,IAAA,yBAAU,GAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;QACzE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvE,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAA;IAC/E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,MAAkD,EAAE,KAAa;IACrG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,6BAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAClE,MAAM,WAAW,GAAG,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,sBAAO,GAAG,CAAC,CAAC,qBAAqB,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAC/G,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,MAAM,EAAE,CAAA;IAErB,IAAI,mBAAmB,GAAG,CAAC,CAAC,CAAA;IAC5B,MAAM,eAAe,GAAyB;QAC5C,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,iDAAiD;QACvF,GAAG,MAAM,CAAC,eAAe;QACzB,mBAAmB,EAAE,IAAI,CAAC,EAAE;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACrE,IAAI,WAAW,EAAE,CAAC;gBAChB,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACzB,CAAC;iBAAM,CAAC;gBACN,oKAAoK;gBACpK,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,CAAA;gBACvI,IAAI,gBAAgB,GAAG,mBAAmB,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;oBACnE,mBAAmB,GAAG,gBAAgB,CAAA;oBACtC,kBAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,gBAAgB,GAAG,EAAE,EAAE,gBAAgB,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;gBAChH,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;IAED,kBAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,aAAa,CAAC,CAAA;IAClC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,CAAA;IACzD,IAAI,CAAC;QACH,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAA;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,GAAW,aAAX,GAAG,uBAAH,GAAG,CAAU,OAAO,CAAA,KAAK,QAAQ,IAAK,GAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACtG,QAAQ,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAA;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAA,qBAAM,EAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9B,kBAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,8DAA8D,CAAC,CAAA;YAC7F,QAAQ,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,kBAAkB,EAAE,SAAS,EAAE,+BAAyB,CAAC,SAAS,EAAE,CAAC,CAAA;QAClH,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;YAAS,CAAC;QACT,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,MAAM,CAAC,GAAG,CAAC,CAAA;QACxB,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,SAAS,EAAE,CAAA;IAC1B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAAkD,EAAE,UAAkB,EAAE,KAAa;IACrH,MAAM,cAAc,GAAG,GAAG,UAAU,WAAW,CAAA;IAC/C,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE,CAAC,IAAA,qBAAM,EAAC,cAAc,CAAC,CAAA;IAEnD,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE/C,IAAI,MAAM,QAAQ,EAAE,EAAE,CAAC;QACrB,kBAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,mDAAmD,CAAC,CAAA;QACjG,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE;QAC9C,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC3D,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;IACF,IAAI,cAAc,GAAkB,IAAI,CAAA;IACxC,IAAI,CAAC;QACH,oFAAoF;QACpF,IAAI,MAAM,QAAQ,EAAE,EAAE,CAAC;YACrB,kBAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,mDAAmD,CAAC,CAAA;YACjG,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,cAAc,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC9D,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,cAAc,CAAC,cAAc,EAAE,UAAU,CAAC,CAAA;IAChD,MAAM,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IACtC,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACI,KAAK,UAAU,sBAAsB,CAAC,OAM5C;IACC,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,GAAG,6CAA6C,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAEvI,MAAM,OAAO,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,WAAW,IAAI,eAAe,EAAE,CAAA;IACnH,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAA;IACxF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;IAE1E,MAAM,aAAa,GAAkB,WAAW;QAC9C,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,WAAW,IAAI,eAAe,EAAE,CAAC,EAAE;QACvF,CAAC,CAAC;YACE,4CAA4C;YAC5C,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,WAAW;YACtB,cAAc,EAAE,eAAe;SAChC,CAAA;IAEL,MAAM,MAAM,GAAmF;QAC7F,OAAO,EAAE,OAAO,EAAE,6DAA6D;QAC/E,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,WAAW,CAAC;QACzD,SAAS,EAAE,gBAAgB,EAAE;QAC7B,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC;QAC3E,aAAa;QACb,SAAS,EAAE,IAAI;KAChB,CAAA;IACD,OAAO,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,eAAe,CAAC,CAAA;AAChE,CAAC;AAED,8EAA8E;AAC9E,iEAAiE;AACjE,MAAM,2BAA2B,GAAsB,CAAC,eAAe,EAAE,OAAO,EAAE,0BAA0B,CAAC,CAAA;AAE7G,SAAS,oBAAoB,CAAC,EAAgD;IAC5E,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;AACjF,CAAC;AAED;;;GAGG;AACH,SAAS,2BAA2B,CAAC,OAAgC;IACnE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAE9G,IAAI,cAAc,GAAoC,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAA;IAE1G,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,oBAAoB,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,gBAAgB,CAAA;YACnD,cAAc,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA;QAC3E,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAA;YAClJ,cAAc,GAAG;gBACf,GAAG,cAAc;gBACjB,wBAAwB,EAAE,gBAAgB,KAAK,KAAK;gBACpD,SAAS,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,SAAS;gBAC7B,aAAa,EAAE;oBACb,MAAM,EAAE,MAAM,IAAI,SAAS;oBAC3B,SAAS,EAAE,SAAS,IAAI,SAAS;oBACjC,cAAc,EAAE,cAAc,IAAI,SAAS;iBAC5C;gBACD,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9F,CAAA;YACD,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;gBAC7B,cAAc,CAAC,QAAQ,GAAG,gBAAgB,CAAA;YAC5C,CAAC;YACD,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;gBACzB,cAAc,CAAC,IAAI,GAAG,YAAY,CAAA;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,cAAc,CAAC,SAAS,GAAG,gBAAgB,EAAE,CAAA;IAC7C,OAAO,cAAc,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,SAAgB,2BAA2B,CAAC,OAAgC;IAC1E,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAA;IACnD,OAAO,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;AAC5D,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAAC,OAAgC;IAC7E,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IACvE,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAA;IAE3D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7D,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,OAAO,IAAI,QAAQ,IAAI,IAAI,IAAI,MAAM,EAAE,CAAA;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,GAAG,YAAY,KAAK,OAAO,EAAE,EAAE,UAAU,CAAC,CAAA;IAE5F,OAAO,kBAAkB,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;AACrE,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,aAAqB;IACxD,KAAK,MAAM,MAAM,IAAI;QACnB,6CAA6C;QAC7C,6CAA6C;QAC7C,qDAAqD;QACrD,kCAAkC;KACnC,EAAE,CAAC;QACF,MAAM,GAAG,GAAG,IAAA,kCAAmB,EAAC,MAAM,CAAC,CAAA;QACvC,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,sBAAsB,aAAa,qBAAqB,CAAA;AACjE,CAAC","sourcesContent":["import * as get from \"@electron/get\"\nimport {\n  ElectronDownloadCacheMode,\n  ElectronDownloadRequest,\n  ElectronDownloadRequestOptions,\n  ElectronPlatformArtifactDetails,\n  GotDownloaderOptions,\n  MirrorOptions,\n} from \"@electron/get\"\nimport { exec, exists, getPath7za, log, PADDING, parseValidEnvVarUrl } from \"builder-util\"\nimport { MultiProgress } from \"electron-publish/out/multiProgress\"\nimport { createReadStream, createWriteStream } from \"fs\"\nimport * as fs from \"fs/promises\"\nimport * as os from \"os\"\nimport * as path from \"path\"\nimport * as lockfile from \"proper-lockfile\"\nimport { pipeline } from \"stream/promises\"\nimport * as tar from \"tar\"\nimport * as unzipper from \"unzipper\"\nimport { ElectronPlatformName } from \"../electron/ElectronFramework\"\n\nexport type ElectronGetOptions = Omit<\n  ElectronPlatformArtifactDetails,\n  | \"platform\"\n  | \"arch\"\n  | \"version\"\n  | \"artifactName\"\n  | \"artifactSuffix\"\n  | \"customFilename\"\n  | \"tempDirectory\"\n  | \"downloader\"\n  | \"cacheMode\"\n  | \"cacheRoot\"\n  | \"downloadOptions\"\n  | \"isGeneric\"\n  | \"mirrorOptions\" // to be added below\n> & {\n  mirrorOptions?: Omit<MirrorOptions, \"customDir\" | \"customFilename\" | \"customVersion\">\n}\n\nexport type ArtifactDownloadOptions = {\n  electronDownload?: ElectronGetOptions | ElectronDownloadOptions | null\n  artifactName: string\n  platformName: string\n  arch: string\n  version: string\n  cacheDir?: string\n}\n\nexport interface ElectronDownloadOptions {\n  // https://github.com/electron-userland/electron-builder/issues/3077\n  // must be optional\n  version?: string\n\n  /**\n   * The [cache location](https://github.com/electron-userland/electron-download#cache-location).\n   */\n  cache?: string | null\n\n  /**\n   * The mirror.\n   */\n  mirror?: string | null\n\n  /** @private */\n  customDir?: string | null\n  /** @private */\n  customFilename?: string | null\n\n  strictSSL?: boolean\n  isVerifyChecksum?: boolean\n\n  platform?: ElectronPlatformName\n  arch?: string\n}\n\nfunction hashUrlSafe(input: string, length = 6): string {\n  let hash = 5381\n  for (let i = 0; i < input.length; i++) {\n    hash = ((hash << 5) + hash) ^ input.charCodeAt(i)\n  }\n  hash >>>= 0\n  const out = hash.toString(36)\n  return out.length >= length ? out.slice(0, length) : out.padStart(length, \"0\")\n}\n\nexport function getCacheDirectory(isAvoidSystemOnWindows = false): string {\n  const env = process.env.ELECTRON_BUILDER_CACHE?.trim()\n  if (env && path.parse(env).root) {\n    return env\n  }\n\n  const appName = \"electron-builder\"\n  const platform = os.platform()\n  const homeDir = os.homedir()\n\n  if (platform === \"darwin\") {\n    return path.join(homeDir, \"Library\", \"Caches\", appName)\n  }\n  if (platform === \"win32\") {\n    const localAppData = process.env.LOCALAPPDATA?.trim()\n    const username = process.env.USERNAME?.trim()?.toLowerCase()\n    const isSystemUser = isAvoidSystemOnWindows && (localAppData?.toLowerCase()?.includes(\"\\\\windows\\\\system32\\\\\") || username === \"system\")\n    if (!localAppData || isSystemUser) {\n      return path.join(os.tmpdir(), `${appName}-cache`)\n    }\n    return path.join(localAppData, appName, \"Cache\")\n  }\n\n  const xdgCache = process.env.XDG_CACHE_HOME\n  return xdgCache && path.parse(xdgCache).root ? path.join(xdgCache, appName) : path.join(homeDir, \".cache\", appName)\n}\n\nfunction resolveCacheMode(): ElectronDownloadCacheMode {\n  const varName = \"ELECTRON_DOWNLOAD_CACHE_MODE\"\n  const cacheOverride = process.env[varName]?.trim()\n  if (cacheOverride && Number(cacheOverride) in ElectronDownloadCacheMode) {\n    const mode = Number(cacheOverride) as ElectronDownloadCacheMode\n    log.debug({ mode }, `cache mode overridden via env var ${varName}`)\n    return mode\n  }\n  return ElectronDownloadCacheMode.ReadWrite\n}\n\nasync function extractZipStreaming(file: string, dir: string): Promise<void> {\n  // Pass 1: read central directory once to collect Unix modes (one seek to EOF)\n  const zipDir = await unzipper.Open.file(file)\n  const entryModes = new Map<string, number>()\n  for (const entry of zipDir.files) {\n    const mode = (entry.externalFileAttributes >> 16) & 0xffff\n    if (mode > 0) {\n      entryModes.set(entry.path, mode)\n    }\n  }\n  const isSymlink = (mode: number) => (mode & 0o170000) === 0o120000\n\n  // Pass 2: stream from byte 0 — no per-entry seeks, no Docker hang\n  const entries = createReadStream(file).pipe(unzipper.Parse({ forceStream: true }))\n  for await (const entry of entries as AsyncIterable<unzipper.Entry>) {\n    const destPath = path.resolve(dir, entry.path)\n    if (!destPath.startsWith(dir + path.sep) && destPath !== dir) {\n      throw new Error(`Path traversal blocked: ${entry.path}`)\n    }\n    const mode = entryModes.get(entry.path) ?? 0\n    if (mode > 0 && isSymlink(mode)) {\n      const target = (await entry.buffer()).toString()\n      if (path.isAbsolute(target)) {\n        throw new Error(`Absolute symlink target blocked: ${target}`)\n      }\n      const resolvedTarget = path.resolve(path.dirname(destPath), target)\n      if (!resolvedTarget.startsWith(dir + path.sep) && resolvedTarget !== dir) {\n        throw new Error(`Symlink target escapes extraction dir: ${target}`)\n      }\n      await fs.mkdir(path.dirname(destPath), { recursive: true })\n      await fs.symlink(target, destPath)\n    } else if (entry.type === \"Directory\") {\n      await fs.mkdir(destPath, { recursive: true })\n      entry.autodrain()\n    } else {\n      await fs.mkdir(path.dirname(destPath), { recursive: true })\n      await pipeline(entry, createWriteStream(destPath))\n      if (mode > 0) {\n        await fs.chmod(destPath, mode & 0o7777)\n      }\n    }\n  }\n}\n\nexport async function extractArchive(file: string, dir: string) {\n  const tmpDir = `${dir}.tmp`\n  await fs.mkdir(tmpDir, { recursive: true })\n\n  const release = await lockfile.lock(tmpDir, {\n    retries: { retries: 5, minTimeout: 1000, maxTimeout: 5000 },\n    stale: 60000,\n  })\n\n  try {\n    // rm + mkdir happen AFTER acquiring the lock so no concurrent caller can clear our tmpDir mid-extraction\n    await fs.rm(tmpDir, { recursive: true, force: true })\n    await fs.mkdir(tmpDir, { recursive: true })\n\n    if (file.endsWith(\".tar.gz\") || file.endsWith(\".tgz\")) {\n      await tar.extract({ file, cwd: tmpDir, strip: 1 })\n    } else if (file.endsWith(\".zip\")) {\n      await extractZipStreaming(file, tmpDir)\n    } else if (file.endsWith(\".7z\")) {\n      await exec(await getPath7za(), [\"x\", \"-bd\", file, `-o${tmpDir}`, \"-y\"])\n    } else {\n      throw new Error(`Unsupported archive format: ${path.basename(file)}`)\n    }\n    await fs.rm(dir, { recursive: true, force: true })\n    await fs.rename(tmpDir, dir)\n  } finally {\n    await release().catch(err => log.warn({ err }, \"failed to release lockfile\"))\n  }\n}\n\nasync function downloadArtifactToFile(config: Parameters<typeof get.downloadArtifact>[0], label: string): Promise<string> {\n  const progress = process.stdout.isTTY ? new MultiProgress() : null\n  const progressBar = progress?.createBar(`${\" \".repeat(PADDING + 2)}[:bar] :percent | ${label}`, { total: 100 })\n  progressBar?.render()\n\n  let lastLoggedMilestone = -1\n  const downloadOptions: GotDownloaderOptions = {\n    timeout: { request: 10 * 60 * 1000 }, // prevent indefinite hang on stalled connections\n    ...config.downloadOptions,\n    getProgressCallback: info => {\n      const pct = info.percent != null ? Math.floor(info.percent * 100) : 0\n      if (progressBar) {\n        progressBar.update(pct)\n      } else {\n        // log every 25% milestone for non-TTY environments (e.g. CI logs) to provide some visibility into download progress without overwhelming logs with too many updates\n        const percentCompleted = info.transferred && info.total ? Math.floor((info.transferred / info.total) * 100) : Math.floor(pct / 25) * 25\n        if (percentCompleted > lastLoggedMilestone && percentCompleted > 0) {\n          lastLoggedMilestone = percentCompleted\n          log.info({ label, progress: `${percentCompleted}%` }, percentCompleted !== 100 ? \"downloading\" : \"downloaded\")\n        }\n      }\n      return Promise.resolve()\n    },\n  }\n\n  log.info({ label }, \"downloading\")\n  const configWithProgress = { ...config, downloadOptions }\n  try {\n    let filePath: string\n    try {\n      filePath = await get.downloadArtifact(configWithProgress)\n    } catch (err) {\n      if (typeof (err as any)?.message === \"string\" && (err as any).message.includes(\"dest already exists\")) {\n        filePath = await get.downloadArtifact(configWithProgress)\n      } else {\n        throw err\n      }\n    }\n    if (!(await exists(filePath))) {\n      log.warn({ filePath, label }, \"cached artifact missing from disk; retrying with cache write\")\n      filePath = await get.downloadArtifact({ ...configWithProgress, cacheMode: ElectronDownloadCacheMode.WriteOnly })\n    }\n    return filePath\n  } finally {\n    progressBar?.update(100)\n    progressBar?.terminate()\n  }\n}\n\n/**\n * Core download + extract engine. Handles lockfile, cache-hit short-circuit,\n * progress bar, extraction (.zip or .tar.gz), and completion marker.\n * Both public download functions delegate here after building their respective configs.\n */\nasync function downloadAndExtract(config: Parameters<typeof get.downloadArtifact>[0], extractDir: string, label: string): Promise<string> {\n  const completeMarker = `${extractDir}.complete`\n  const isCached = async () => exists(completeMarker)\n\n  await fs.mkdir(extractDir, { recursive: true })\n\n  if (await isCached()) {\n    log.debug({ file: label, path: extractDir }, \"using cached artifact - skipping download/extract\")\n    return extractDir\n  }\n\n  const release = await lockfile.lock(extractDir, {\n    retries: { retries: 5, minTimeout: 1000, maxTimeout: 5000 },\n    stale: 60000,\n  })\n  let downloadedFile: string | null = null\n  try {\n    // Re-check after acquiring lock: another worker may have completed while we waited.\n    if (await isCached()) {\n      log.debug({ file: label, path: extractDir }, \"using cached artifact - skipping download/extract\")\n      return extractDir\n    }\n\n    downloadedFile = await downloadArtifactToFile(config, label)\n  } finally {\n    await release().catch(err => log.warn({ err }, \"failed to release lockfile\"))\n  }\n  await extractArchive(downloadedFile, extractDir)\n  await fs.writeFile(completeMarker, \"\")\n  return extractDir\n}\n\n// ─── Public API ───────────────────────────────────────────────────────────────\n\n/**\n * Downloads a generic artifact (.tar.gz or .zip) from a GitHub release.\n * Used for electron-builder-binaries tools (appimage, etc.).\n */\nexport async function downloadBuilderToolset(options: {\n  releaseName: string\n  filenameWithExt: string\n  checksums?: Record<string, string>\n  githubOrgRepo?: string\n  overrideUrl?: string\n}): Promise<string> {\n  const { releaseName, filenameWithExt, checksums, githubOrgRepo = \"electron-userland/electron-builder-binaries\", overrideUrl } = options\n\n  const baseUrl = getBinariesMirrorUrl(githubOrgRepo)\n  const hashInput = overrideUrl ? `${overrideUrl}/${filenameWithExt}` : `${baseUrl}${releaseName}/${filenameWithExt}`\n  const suffix = hashUrlSafe(hashInput, 5)\n  const folderName = `${filenameWithExt.replace(/\\.(tar\\.gz|tgz|zip|7z)$/, \"\")}-${suffix}`\n  const extractDir = path.join(getCacheDirectory(), releaseName, folderName)\n\n  const mirrorOptions: MirrorOptions = overrideUrl\n    ? { resolveAssetURL: async () => Promise.resolve(`${overrideUrl}/${filenameWithExt}`) }\n    : {\n        // `${mirror}${customDir}/${customFilename}`\n        mirror: baseUrl,\n        customDir: releaseName,\n        customFilename: filenameWithExt,\n      }\n\n  const config: ElectronDownloadRequest & ElectronDownloadRequestOptions & { isGeneric: true } = {\n    version: \"9.9.9\", // must be >1.3.2 to bypass @electron/get validation shortcut\n    artifactName: filenameWithExt,\n    cacheRoot: path.resolve(getCacheDirectory(), \"downloads\"),\n    cacheMode: resolveCacheMode(),\n    ...(checksums != null ? { checksums } : { unsafelyDisableChecksums: true }),\n    mirrorOptions,\n    isGeneric: true,\n  }\n  return downloadAndExtract(config, extractDir, filenameWithExt)\n}\n\n// Keys present in ElectronGetOptions but absent from ElectronDownloadOptions.\n// Used to discriminate between the two config shapes at runtime.\nconst ELECTRON_GET_EXCLUSIVE_KEYS: readonly string[] = [\"mirrorOptions\", \"force\", \"unsafelyDisableChecksums\"]\n\nfunction isElectronGetOptions(dl: ElectronGetOptions | ElectronDownloadOptions): dl is ElectronGetOptions {\n  return ELECTRON_GET_EXCLUSIVE_KEYS.some(k => Object.hasOwnProperty.call(dl, k))\n}\n\n/**\n * Downloads and extracts an electron platform artifact (e.g. ffmpeg) using @electron/get.\n * Deduplicates concurrent calls for the same artifact within the same process.\n */\nfunction buildElectronArtifactConfig(options: ArtifactDownloadOptions): ElectronPlatformArtifactDetails {\n  const { electronDownload, arch, version, platformName: platform, artifactName, cacheDir: cacheRoot } = options\n\n  let artifactConfig: ElectronPlatformArtifactDetails = { cacheRoot, platform, arch, version, artifactName }\n\n  if (electronDownload != null) {\n    if (isElectronGetOptions(electronDownload)) {\n      const { mirrorOptions, ...rest } = electronDownload\n      artifactConfig = { ...artifactConfig, ...rest, cacheRoot, mirrorOptions }\n    } else {\n      const { mirror, customDir, cache, customFilename, isVerifyChecksum, strictSSL, platform: overridePlatform, arch: overrideArch } = electronDownload\n      artifactConfig = {\n        ...artifactConfig,\n        unsafelyDisableChecksums: isVerifyChecksum === false,\n        cacheRoot: cache ?? cacheRoot,\n        mirrorOptions: {\n          mirror: mirror || undefined,\n          customDir: customDir || undefined,\n          customFilename: customFilename || undefined,\n        },\n        ...(strictSSL === false ? { downloadOptions: { https: { rejectUnauthorized: false } } } : {}),\n      }\n      if (overridePlatform != null) {\n        artifactConfig.platform = overridePlatform\n      }\n      if (overrideArch != null) {\n        artifactConfig.arch = overrideArch\n      }\n    }\n  }\n\n  artifactConfig.cacheMode = resolveCacheMode()\n  return artifactConfig\n}\n\n/**\n * Downloads the electron artifact zip via @electron/get (with caching) and returns the zip file path.\n * Use when you need to extract the zip yourself (e.g. directly to appOutDir to preserve empty dirs and symlinks).\n */\nexport function downloadElectronArtifactZip(options: ArtifactDownloadOptions): Promise<string> {\n  const config = buildElectronArtifactConfig(options)\n  return downloadArtifactToFile(config, config.artifactName)\n}\n\nexport async function downloadElectronArtifact(options: ArtifactDownloadOptions): Promise<string> {\n  const { arch, version, platformName: platform, artifactName } = options\n  const artifactConfig = buildElectronArtifactConfig(options)\n\n  const suffix = hashUrlSafe(JSON.stringify(artifactConfig), 5)\n  const folderName = `${artifactName}-v${version}-${platform}-${arch}-${suffix}`\n  const extractDir = path.join(getCacheDirectory(), `${artifactName}-v${version}`, folderName)\n\n  return downloadAndExtract(artifactConfig, extractDir, artifactName)\n}\n\n/**\n * Get the binaries mirror URL from environment variables.\n * Supports various npm config formats and falls back to GitHub.\n */\nexport function getBinariesMirrorUrl(githubOrgRepo: string): string {\n  for (const envVar of [\n    \"NPM_CONFIG_ELECTRON_BUILDER_BINARIES_MIRROR\",\n    \"npm_config_electron_builder_binaries_mirror\",\n    \"npm_package_config_electron_builder_binaries_mirror\",\n    \"ELECTRON_BUILDER_BINARIES_MIRROR\",\n  ]) {\n    const url = parseValidEnvVarUrl(envVar)\n    if (url) {\n      return url.endsWith(\"/\") ? url : `${url}/`\n    }\n  }\n  return `https://github.com/${githubOrgRepo}/releases/download/`\n}\n"]}

package/out/util/resolve.d.ts

@@ -1,2 +1,2 @@
 export declare function resolveModule<T>(type: string | undefined, name: string): Promise<T>;
-export declare function resolveFunction<T>(type: string | undefined, executor: T | string, name: string): Promise<T>;
+export declare function resolveFunction<T>(type: string | undefined, executor: T | string, name: string, rootSearchDir: string): Promise<T>;

package/out/util/resolve.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveModule = resolveModule;
 exports.resolveFunction = resolveFunction;
+const builder_util_1 = require("builder-util");
 const log_1 = require("builder-util/out/log");
 const debug_1 = require("debug");
 const path = require("path");
@@ -16,7 +17,7 @@ async function resolveModule(type, name) {
         throw error;
     }
 }
-async function resolveFunction(type, executor, name) {
+async function resolveFunction(type, executor, name, rootSearchDir) {
     if (executor == null || typeof executor !== "string") {
         // is already function or explicitly ignored by user
         return executor;
@@ -24,6 +25,10 @@ async function resolveFunction(type, executor, name) {
     let p = executor;
     if (p.startsWith(".")) {
         p = path.resolve(p);
+        const relative = path.relative(rootSearchDir, p);
+        if (relative.startsWith("..") || path.isAbsolute(relative)) {
+            throw new builder_util_1.InvalidConfigurationError(`Hook module path "${executor}" resolves outside the workspace root ("${rootSearchDir}")`);
+        }
     }
     try {
         p = require.resolve(p);

package/out/util/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/util/resolve.ts"],"names":[],"mappings":";;AAKA,sCAOC;AAED,0CAyBC;AAvCD,8CAA0C;AAC1C,iCAAyB;AACzB,6BAA4B;AAC5B,6DAA4D;AAErD,KAAK,UAAU,aAAa,CAAI,IAAwB,EAAE,IAAY;;IAC3E,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAC9C,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,SAAG,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAA,KAAK,CAAC,OAAO,mCAAI,KAAK,CAAC,KAAK,EAAE,EAAE,6CAA6C,CAAC,CAAA;QACrH,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CAAI,IAAwB,EAAE,QAAoB,EAAE,IAAY;IACnG,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrD,oDAAoD;QACpD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,IAAI,CAAC,GAAG,QAAkB,CAAA;IAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,CAAC;IAED,IAAI,CAAC;QACH,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAA,eAAK,EAAC,CAAC,CAAC,CAAA;QACR,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,CAAC;IAED,MAAM,CAAC,GAAQ,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAA;IACvB,CAAC;SAAM,CAAC;QACN,OAAO,WAAW,CAAA;IACpB,CAAC;AACH,CAAC","sourcesContent":["import { log } from \"builder-util/out/log\"\nimport debug from \"debug\"\nimport * as path from \"path\"\nimport * as requireMaybe from \"../../helpers/dynamic-import\"\n\nexport async function resolveModule<T>(type: string | undefined, name: string): Promise<T> {\n  try {\n    return requireMaybe.dynamicImportMaybe(name)\n  } catch (error: any) {\n    log.error({ moduleName: name, message: error.message ?? error.stack }, \"Unable to dynamically `import` or `require`\")\n    throw error\n  }\n}\n\nexport async function resolveFunction<T>(type: string | undefined, executor: T | string, name: string): Promise<T> {\n  if (executor == null || typeof executor !== \"string\") {\n    // is already function or explicitly ignored by user\n    return executor\n  }\n\n  let p = executor as string\n  if (p.startsWith(\".\")) {\n    p = path.resolve(p)\n  }\n\n  try {\n    p = require.resolve(p)\n  } catch (e: any) {\n    debug(e)\n    p = path.resolve(p)\n  }\n\n  const m: any = await resolveModule(type, p)\n  const namedExport = m[name]\n  if (namedExport == null) {\n    return m.default || m\n  } else {\n    return namedExport\n  }\n}\n"]}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/util/resolve.ts"],"names":[],"mappings":";;AAMA,sCAOC;AAED,0CA6BC;AA5CD,+CAAwD;AACxD,8CAA0C;AAC1C,iCAAyB;AACzB,6BAA4B;AAC5B,6DAA4D;AAErD,KAAK,UAAU,aAAa,CAAI,IAAwB,EAAE,IAAY;;IAC3E,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAC9C,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,SAAG,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAA,KAAK,CAAC,OAAO,mCAAI,KAAK,CAAC,KAAK,EAAE,EAAE,6CAA6C,CAAC,CAAA;QACrH,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CAAI,IAAwB,EAAE,QAAoB,EAAE,IAAY,EAAE,aAAqB;IAC1H,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrD,oDAAoD;QACpD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,IAAI,CAAC,GAAG,QAAkB,CAAA;IAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QAChD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,wCAAyB,CAAC,qBAAqB,QAAQ,2CAA2C,aAAa,IAAI,CAAC,CAAA;QAChI,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAA,eAAK,EAAC,CAAC,CAAC,CAAA;QACR,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,CAAC;IAED,MAAM,CAAC,GAAQ,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAA;IACvB,CAAC;SAAM,CAAC;QACN,OAAO,WAAW,CAAA;IACpB,CAAC;AACH,CAAC","sourcesContent":["import { InvalidConfigurationError } from \"builder-util\"\nimport { log } from \"builder-util/out/log\"\nimport debug from \"debug\"\nimport * as path from \"path\"\nimport * as requireMaybe from \"../../helpers/dynamic-import\"\n\nexport async function resolveModule<T>(type: string | undefined, name: string): Promise<T> {\n  try {\n    return requireMaybe.dynamicImportMaybe(name)\n  } catch (error: any) {\n    log.error({ moduleName: name, message: error.message ?? error.stack }, \"Unable to dynamically `import` or `require`\")\n    throw error\n  }\n}\n\nexport async function resolveFunction<T>(type: string | undefined, executor: T | string, name: string, rootSearchDir: string): Promise<T> {\n  if (executor == null || typeof executor !== \"string\") {\n    // is already function or explicitly ignored by user\n    return executor\n  }\n\n  let p = executor as string\n  if (p.startsWith(\".\")) {\n    p = path.resolve(p)\n    const relative = path.relative(rootSearchDir, p)\n    if (relative.startsWith(\"..\") || path.isAbsolute(relative)) {\n      throw new InvalidConfigurationError(`Hook module path \"${executor}\" resolves outside the workspace root (\"${rootSearchDir}\")`)\n    }\n  }\n\n  try {\n    p = require.resolve(p)\n  } catch (e: any) {\n    debug(e)\n    p = path.resolve(p)\n  }\n\n  const m: any = await resolveModule(type, p)\n  const namedExport = m[name]\n  if (namedExport == null) {\n    return m.default || m\n  } else {\n    return namedExport\n  }\n}\n"]}

package/out/version.d.ts

@@ -1 +1 @@
-export declare const PACKAGE_VERSION = "26.9.1";
+export declare const PACKAGE_VERSION = "26.10.0";

package/out/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PACKAGE_VERSION = void 0;
-exports.PACKAGE_VERSION = "26.9.1";
+exports.PACKAGE_VERSION = "26.10.0";
 //# sourceMappingURL=version.js.map

package/out/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":";;;AAAa,QAAA,eAAe,GAAG,QAAQ,CAAA","sourcesContent":["export const PACKAGE_VERSION = \"26.9.1\"\n"]}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":";;;AAAa,QAAA,eAAe,GAAG,SAAS,CAAA","sourcesContent":["export const PACKAGE_VERSION = \"26.10.0\"\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "app-builder-lib",
   "description": "electron-builder lib",
-  "version": "26.9.1",
+  "version": "26.10.0",
   "main": "out/index.js",
   "files": [
     "out",
@@ -53,7 +53,7 @@
     "@electron/get": "^3.0.0",
     "@electron/notarize": "2.5.0",
     "@electron/osx-sign": "1.3.3",
-    "@electron/rebuild": "^4.0.3",
+    "@electron/rebuild": "4.0.3",
     "@electron/universal": "2.0.3",
     "@malept/flatpak-bundler": "^0.4.0",
     "@types/fs-extra": "9.0.13",
@@ -79,10 +79,11 @@
     "tar": "^7.5.7",
     "temp-file": "^3.4.0",
     "tiny-async-pool": "1.3.0",
+    "unzipper": "^0.12.3",
     "which": "^5.0.0",
-    "builder-util": "26.9.0",
+    "builder-util": "26.10.0",
     "builder-util-runtime": "9.6.0",
-    "electron-publish": "26.9.0"
+    "electron-publish": "26.10.0"
   },
   "///": "babel in devDependencies for proton tests",
   "devDependencies": {
@@ -113,14 +114,15 @@
     "@types/proper-lockfile": "^4.1.4",
     "@types/semver": "7.7.1",
     "@types/tiny-async-pool": "^1",
+    "@types/unzipper": "^0.10.11",
     "@types/which": "^3.0.4",
     "toml": "^3.0.0",
-    "dmg-builder": "26.9.1",
-    "electron-builder-squirrel-windows": "26.9.1"
+    "dmg-builder": "26.10.0",
+    "electron-builder-squirrel-windows": "26.10.0"
   },
   "peerDependencies": {
-    "dmg-builder": "26.9.1",
-    "electron-builder-squirrel-windows": "26.9.1"
+    "dmg-builder": "26.10.0",
+    "electron-builder-squirrel-windows": "26.10.0"
   },
   "//": "electron-builder-squirrel-windows and dmg-builder added as dev dep for tests (as otherwise `require` doesn't work using Yarn 2)",
   "typings": "./out/index.d.ts"