node-liblzma 1.1.9 → 2.0.0

package/.claude/settings.local.json

@@ -0,0 +1,92 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(node:*)",
+      "WebSearch",
+      "Bash(npm run build:*)",
+      "Bash(pnpm install:*)",
+      "Bash(pnpm run:*)",
+      "Bash(pnpm add:*)",
+      "Bash(pnpm test:*)",
+      "Bash(xz:*)",
+      "Bash(pnpm exec:*)",
+      "Bash(pnpm lint:*)",
+      "Bash(pnpm check:write:*)",
+      "Bash(pnpm build:*)",
+      "Bash(pnpm type-check:*)",
+      "Bash(pnpm check:*)",
+      "Bash(pnpm format:write:*)",
+      "Bash(pnpm tsc:*)",
+      "Bash(sed:*)",
+      "Bash(grep:*)",
+      "WebFetch(domain:github.com)",
+      "Bash(git rm:*)",
+      "Bash(git add:*)",
+      "WebFetch(domain:api.github.com)",
+      "Bash(python3:*)",
+      "Bash(chmod:*)",
+      "WebFetch(domain:raw.githubusercontent.com)",
+      "Bash(cmake:*)",
+      "Bash(USE_GLOBAL=false RUNTIME_LINK=static ENABLE_THREAD_SUPPORT=yes pnpm install)",
+      "Bash(gh act:*)",
+      "Bash(npx node-gyp:*)",
+      "Bash(USE_GLOBAL=false RUNTIME_LINK=static ENABLE_THREAD_SUPPORT=no pnpm install --frozen-lockfile)",
+      "Bash(USE_GLOBAL=false RUNTIME_LINK=shared ENABLE_THREAD_SUPPORT=yes pnpm install --frozen-lockfile)",
+      "mcp__github__get_job_logs",
+      "Bash(XZ_VERSION=v5.4.0 python3 scripts/download_xz_from_github.py /tmp/test_xz.tar.gz /tmp/test_extract --verbose)",
+      "Bash(RUNTIME_LINK=shared node -p \"process.env.RUNTIME_LINK || ''static''\")",
+      "Bash(RUNTIME_LINK=shared rm -rf build/Release deps)",
+      "Bash(USE_GLOBAL=false RUNTIME_LINK=shared rm -rf build/Release deps prebuilds)",
+      "Bash(pnpm rebuild:*)",
+      "Bash(RUNTIME_LINK=shared ENABLE_THREAD_SUPPORT=yes python3 scripts/build_xz_with_cmake.py --help)",
+      "Bash(gh run view:*)",
+      "Bash(RUNTIME_LINK=shared ENABLE_THREAD_SUPPORT=yes python3 scripts/build_xz_with_cmake.py deps/xz build/liblzma_test --verbose)",
+      "Bash(USE_GLOBAL=true pnpm test)",
+      "Bash(RUNTIME_LINK=shared ENABLE_THREAD_SUPPORT=no USE_GLOBAL=false pnpm run build)",
+      "Bash(RUNTIME_LINK=shared ENABLE_THREAD_SUPPORT=yes USE_GLOBAL=false python3 scripts/build_xz_with_cmake.py /tmp/test_cmake /tmp/test_install --verbose)",
+      "Bash(npx tsc:*)",
+      "Bash(yamllint:*)",
+      "Bash(./test-ci-logic.sh:*)",
+      "Bash(find:*)",
+      "Read(/tmp/**)",
+      "Read(/tmp/**)",
+      "Read(/tmp/**)",
+      "Read(/tmp/**)",
+      "Bash(USE_GLOBAL=false RUNTIME_LINK=static ENABLE_THREAD_SUPPORT=yes pnpm install --frozen-lockfile)",
+      "Bash(USE_GLOBAL=false RUNTIME_LINK=static ENABLE_THREAD_SUPPORT=yes rm -rf build/Release deps)",
+      "Bash(USE_GLOBAL=false RUNTIME_LINK=static ENABLE_THREAD_SUPPORT=yes rm -rf build/Release)",
+      "Bash(USE_GLOBAL=false RUNTIME_LINK=static ENABLE_THREAD_SUPPORT=no rm -rf build/Release)",
+      "Bash(USE_GLOBAL=false RUNTIME_LINK=static ENABLE_THREAD_SUPPORT=no pnpm rebuild)",
+      "WebFetch(domain:www.npmjs.com)",
+      "Bash(xargs ls:*)",
+      "Bash(pnpm vitest run:*)",
+      "Bash(pnpm outdated:*)",
+      "Bash(pnpm audit:*)",
+      "Bash(pnpm test:coverage:*)",
+      "Bash(cat:*)",
+      "mcp__github__get_workflow_run",
+      "mcp__github__list_workflow_runs",
+      "mcp__github__list_workflows",
+      "Bash(gh run list:*)",
+      "Bash(node-gyp rebuild:*)",
+      "Bash(USE_GLOBAL=true RUNTIME_LINK=shared ENABLE_THREAD_SUPPORT=yes pnpm rebuild)",
+      "Bash(export USE_GLOBAL=true RUNTIME_LINK=shared ENABLE_THREAD_SUPPORT=yes)",
+      "Bash(npm:*)",
+      "Bash(pnpm list:*)",
+      "Read(//home/o2/.cache/node-gyp/22.15.0/include/node/**)",
+      "Bash(pkg-config:*)",
+      "Bash(g++:*)",
+      "Read(//home/o2/.cache/node-gyp/22.15.0/**)",
+      "Read(//tmp/**)",
+      "mcp__github__list_workflow_jobs",
+      "Bash(otool:*)",
+      "Bash(git log:*)",
+      "mcp__github__get_me",
+      "mcp__github__list_tags",
+      "mcp__github__get_commit",
+      "mcp__github__get_file_contents"
+    ],
+    "deny": [],
+    "ask": []
+  }
+}

package/.gitattributes

@@ -0,0 +1,3 @@
+* text=auto eol=lf
+*.{cmd,[cC][mM][dD]} text eol=crlf
+*.{bat,[bB][aA][tT]} text eol=crlf

package/.release-it.json

@@ -0,0 +1,6 @@
+{
+  "git": {
+    "requireBranch": "master",
+    "requireCleanWorkingDir": true
+  }
+}

package/CHANGELOG.md

@@ -0,0 +1,209 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+- **TypeScript Support**: Complete migration from CoffeeScript to TypeScript for better type safety and developer experience
+- **Promise APIs**: New async functions `xzAsync()` and `unxzAsync()` with Promise support
+- **Typed Error Classes**: 8 specialized error classes (`LZMAMemoryError`, `LZMADataError`, `LZMAFormatError`, etc.) with factory pattern for precise error handling
+- **Concurrency Control**: `LZMAPool` class with EventEmitter-based monitoring for production environments
+  - Automatic backpressure and queue management
+  - Configurable concurrency limits
+  - Real-time metrics (`active`, `queued`, `completed`, `failed`)
+  - Events: `queue`, `start`, `complete`, `error-task`, `metrics`
+- **File Helpers**: Simplified `xzFile()` and `unxzFile()` functions for file-based compression
+- **Modern Testing**: Migrated from Mocha to Vitest with improved performance and TypeScript integration
+- **100% Code Coverage**: Comprehensive test suite (320+ tests) covering all statements, branches, functions, and lines
+- **Enhanced Tooling**:
+  - [Biome](https://biomejs.dev/) for fast linting and formatting
+  - Pre-commit hooks with nano-staged and simple-git-hooks
+  - pnpm as package manager for better dependency management
+- **Security**:
+  - Fixed FunctionReference memory leak using smart pointers with custom deleter
+  - Added 512MB buffer size validation to prevent DoS attacks
+  - CodeQL workflow for continuous security scanning
+  - Dependabot configuration for automated dependency updates
+  - Enhanced tarball extraction with path validation and safety checks against path traversal
+- **Thread Support**: Multi-threaded compression with configurable thread count
+- **Automatic Filter Reordering**: LZMA2 filter automatically moved to end as required by liblzma
+- **Factory Functions**: `createXz()` and `createUnxz()` to avoid circular dependencies in ESM
+- **XZ Version Management**: Automated version tracking and update workflows for XZ Utils
+- **CI/CD Enhancements**:
+  - Unified CI pipeline with smart smoke/full test detection
+  - Conditional test execution based on PR vs push vs schedule
+  - Composite GitHub Actions for dependency installation and environment setup
+  - XZ source caching with GitHub token support
+  - Upgraded to setup-node v5 across all workflows
+  - GITHUB_TOKEN environment variable for authenticated downloads
+- **.gitattributes**: Line ending normalization for cross-platform consistency
+
+### Changed
+- **Breaking**: Requires Node.js >= 16 (updated from >= 12)
+- **Breaking**: Module is now ESM-only (`"type": "module"`)
+- **Build System**: Modernized to use CMake for XZ Utils compilation
+  - Environment variable configuration for runtime linking (`RUNTIME_LINK=static|shared`)
+  - Threading support configuration (`ENABLE_THREAD_SUPPORT=yes|no`)
+  - Global liblzma usage option (`USE_GLOBAL=true|false`)
+  - Disabled CLI tools to avoid libintl dependency on macOS
+- **XZ Utils**: Updated from 5.6.3 to 5.8.1 with complete CMake support
+- **macOS Support**: Enhanced dylib handling with proper RPATH configuration
+  - Smart install_name verification and fixing for shared libraries
+  - Proper linker flags via xcode_settings
+  - Only applies install_name fixes to shared library builds
+- **Windows Support**: Improved threading and DLL handling
+  - Thread support now works with both static and shared builds
+  - Fixed kernel32.lib linking for MSVC
+  - Automated library name fixing for binding.gyp compatibility
+  - Python-based DLL copying for better reliability
+- **Vitest Configuration**: Fork-based worker pool on macOS to avoid IPC channel errors
+- **CI Workflows**:
+  - Consolidated from 5 workflows to 1 unified pipeline
+  - Smoke tests and full tests are now mutually exclusive
+  - Proper handling of skipped job states in CI summary
+  - Enhanced caching strategy and matrix testing
+  - Path filters to avoid unnecessary runs
+- **Code Quality**: Simplified instance data management and improved buffer handling
+- Standardized error messages (removed "BUG?" prefixes) for production-ready error handling
+- Improved async callback handling and error management
+- Enhanced TypeScript configuration for better test reliability
+
+### Fixed
+- **macOS Build Issues**:
+  - Fixed dylib loading errors (`Library not loaded: @rpath/liblzma.5.dylib`)
+  - Resolved libintl dependency issues by disabling XZ CLI tools
+  - Fixed RPATH configuration in binding.gyp and CMake
+  - Corrected install_name verification for shared vs static builds
+- **Windows Build Issues**:
+  - Fixed NAPI_VERSION redefinition error
+  - Resolved DLL loading for shared library builds
+  - Fixed threading support configuration
+  - Corrected Windows library naming for compatibility
+- **CI/CD Issues**:
+  - Fixed pipeline failure when smoke test is skipped
+  - Fixed conditional check for global liblzma usage
+  - Removed unnecessary shell specifications
+  - Fixed caching strategy and matrix configuration
+- **Test Issues**:
+  - Skip negative threads test if threading not supported
+  - Fixed TypeScript error handling in tests
+- **Code Issues**:
+  - Resolved C++ exception handling with `NAPI_DISABLE_CPP_EXCEPTIONS`
+  - Corrected memory management in async operations (Ref/Unref balance)
+  - Fixed filter validation bug causing `LZMA_OPTIONS_ERROR` with multiple filters
+  - Fixed memory leak in FunctionReference lifecycle management
+  - Fixed memory leaks and race conditions in C++ bindings
+  - Fixed filters array mutation by cloning in LZMAOptions
+  - Fixed XzStream destructuring for clarity
+  - Fixed LZMA2 filter ordering to ensure it's always last
+- **General**:
+  - Fixed download script symbolic link safety checks
+  - Added `*.log` to .gitignore
+  - Fixed tsconfig formatting
+  - Improved code formatting consistency
+
+## [1.1.9] - Previous Release
+
+### Fixed
+- Fix building if no prebuilt binary found
+
+## [1.1.7]
+
+### Fixed
+- Fix build system
+- Fix release system
+- Fix documentation
+
+## [1.1.0]
+
+### Changed
+- Refactor to deprecate Nan in favor of N-API
+- Drop UBS building system to use standard `node-gyp`
+- Support building on Linux, MacOSX and Windows
+- Ability to build from preinstalled libraries as well as download from XZ website
+- Deprecate Travis CI and AppVeyor to use GitHub Workflows
+
+## [1.0.5]
+
+### Added
+- Added CI for OSX and Windows
+- Implemented use of node-pre-gyp instead of node-gyp
+
+### Fixed
+- Better build script, bug fixing
+
+## [1.0.3]
+
+### Changed
+- Updated to latest versions of dependencies
+
+### Added
+- NodeJS 6.x is now supported
+
+## [1.0.2]
+
+### Fixed
+- Fixed build.yml to work with new UBS 0.6.1
+
+## [1.0.1]
+
+### Fixed
+- Fixed minor bugs
+
+## [1.0.0]
+
+### Changed
+- JS Library has been renamed to `lzma`
+
+### Fixed
+- All known bugs have been fixed
+
+## [0.5.0]
+
+### Changed
+- Rewrote large parts with Nan so now it supports 0.12+, 3+, 4+
+
+### Fixed
+- Fixed syntax in XzStream.coffee
+
+### Removed
+- Apparently not anymore 0.10 support
+
+## [0.4.3]
+
+### Changed
+- Changes in build system (now using ubs to compile/run tests)
+
+### Fixed
+- Applied a fix for 'availInAfter' in stream callback, after [#6032](https://github.com/joyent/node/issues/6032)
+- Fixed bad variable init in binding module
+
+## [0.3.0]
+
+### Added
+- Added multithread support
+- ENABLE_MT is now available to compile with thread support
+- Added new test cases
+
+## [0.2.0]
+
+### Added
+- Full sync support
+- Added new test cases (sync/async)
+
+### Changed
+- Completed import of NodeJS Zlib API
+
+### Fixed
+- Bug fixes
+
+## [0.1.0] - Initial Release
+
+### Added
+- Initial version
+- C++ binding support ENCODE/DECODE
+- Async support

package/History.md

@@ -1,3 +1,23 @@
+# History.md
+
+> **Note**: This file is deprecated. Please see [CHANGELOG.md](./CHANGELOG.md) for the current changelog following the [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) format.
+
+# 2.0.0
+* **Breaking**: Modernized testing framework from Mocha to Vitest
+* **Breaking**: Modernized stack from Coffeescript to Typescript
+* **Feature**: Added 100% code coverage (51 tests covering all statements, branches, functions, and lines)
+* **Feature**: Implemented automatic filter reordering (LZMA2 filter automatically moved to end as required by liblzma)
+* **Fix**: Resolved C++ exception handling issues with NAPI_DISABLE_CPP_EXCEPTIONS for better performance
+* **Fix**: Corrected memory management in async operations (Ref/Unref balance)
+* **Fix**: Fixed filter validation bug causing LZMA_OPTIONS_ERROR with multiple filters
+* **CI**: Consolidated GitHub Actions workflows from 5 separate workflows to 1 unified pipeline
+* **CI**: Enhanced caching strategy and matrix testing with conditional execution
+* **CI**: Added path filters to avoid unnecessary CI runs for documentation-only changes
+* **CI**: Optimized XZ source downloading with single download shared across all jobs
+* **Performance**: Improved async callback handling and error management
+* **Testing**: Added comprehensive edge case coverage including malformed inputs and threading tests
+* **Testing**: Enhanced TypeScript configuration for better test reliability
+
 # 1.1.9
 * Fix building if no prebuilt binary found