omnius 1.0.699 → 1.0.701

package/dist/api/py-embed.js

@@ -244748,6 +244748,145 @@ init_process_lifecycle();
 // packages/execution/dist/tools/desktop-control.js
 init_system_deps();
 
+// packages/execution/dist/tools/archive-extract.js
+init_process_async();
+var EXTRACT = String.raw`
+import json, os, re, stat, sys, tarfile, zipfile
+source, stage = sys.argv[1:3]
+limits = json.loads(sys.argv[3])
+seen, kinds, preview = set(), {}, []
+entries = files = total = 0
+root = os.open(stage, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW)
+
+def path_parts(name, kind):
+    if not isinstance(name, str) or not name or '\x00' in name or '\\' in name or name.startswith('/') or re.match(r'^[a-zA-Z]:', name):
+        raise ValueError('unsafe absolute or invalid archive path')
+    raw = name.split('/')
+    if '..' in raw:
+        raise ValueError('archive path traversal rejected')
+    parts = [part for part in raw if part not in ('', '.')]
+    key = '/'.join(parts)
+    if not parts and kind != 'directory':
+        raise ValueError('invalid empty file path')
+    if key in seen:
+        raise ValueError('duplicate archive path rejected')
+    seen.add(key)
+    for index in range(1, len(parts)):
+        parent = '/'.join(parts[:index])
+        if kinds.get(parent) == 'file':
+            raise ValueError('archive file/directory collision rejected')
+        kinds[parent] = 'directory'
+    if key in kinds and (kind != 'directory' or kinds[key] != 'directory'):
+        raise ValueError('archive path collision rejected')
+    if key:
+        kinds[key] = kind
+    return parts
+
+def parent_fd(parts):
+    fd = os.dup(root)
+    try:
+        for part in parts:
+            try:
+                os.mkdir(part, 0o700, dir_fd=fd)
+            except FileExistsError:
+                pass
+            child = os.open(part, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW, dir_fd=fd)
+            os.close(fd)
+            fd = child
+        return fd
+    except BaseException:
+        os.close(fd)
+        raise
+
+def member(name, kind, declared, opener):
+    global entries, files, total
+    entries += 1
+    if limits.get('maxEntries') is not None and entries > limits['maxEntries']:
+        raise ValueError('explicit maxEntries limit exceeded')
+    parts = path_parts(name, kind)
+    if kind == 'directory':
+        fd = parent_fd(parts)
+        os.close(fd)
+    else:
+        if declared < 0:
+            raise ValueError('invalid archive file size')
+        if limits.get('maxOutputBytes') is not None and total + declared > limits['maxOutputBytes']:
+            raise ValueError('explicit maxOutputBytes limit exceeded')
+        fd = parent_fd(parts[:-1])
+        try:
+            output = os.open(parts[-1], os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o600, dir_fd=fd)
+        finally:
+            os.close(fd)
+        written = 0
+        with os.fdopen(output, 'wb') as target, opener() as input_file:
+            while True:
+                chunk = input_file.read(1024 * 1024)
+                if not chunk:
+                    break
+                if limits.get('maxOutputBytes') is not None and total + len(chunk) > limits['maxOutputBytes']:
+                    raise ValueError('explicit maxOutputBytes limit exceeded')
+                target.write(chunk)
+                written += len(chunk)
+                total += len(chunk)
+        if written != declared:
+            raise ValueError('archive member length mismatch')
+        files += 1
+    if len(preview) < 40:
+        preview.append({'path': '/'.join(parts)[:512], 'kind': kind, 'bytes': declared if kind == 'file' else 0})
+
+try:
+    if zipfile.is_zipfile(source):
+        archive_format = 'zip'
+        with zipfile.ZipFile(source) as archive:
+            for info in archive.infolist():
+                mode = stat.S_IFMT(info.external_attr >> 16)
+                if mode not in (0, stat.S_IFREG, stat.S_IFDIR):
+                    raise ValueError('archive links, devices and special entries are not allowed')
+                kind = 'directory' if info.is_dir() or mode == stat.S_IFDIR else 'file'
+                member(info.orig_filename, kind, info.file_size, lambda info=info: archive.open(info, 'r'))
+    else:
+        archive_format = 'tar'
+        with tarfile.open(source, 'r|*') as archive:
+            for info in archive:
+                if not (info.isdir() or info.isreg()):
+                    raise ValueError('archive links, devices and special entries are not allowed')
+                member(info.name, 'directory' if info.isdir() else 'file', info.size, lambda info=info: archive.extractfile(info))
+    print(json.dumps({'format': archive_format, 'entries': entries, 'files': files,
+        'directories': sum(kind == 'directory' for kind in kinds.values()), 'bytes': total,
+        'preview': preview, 'previewOmitted': max(0, entries - len(preview))}))
+except BaseException as error:
+    # Exception messages from standard readers can contain untrusted filenames;
+    # report a bounded JSON string, never executable or control-sequence output.
+    print(json.dumps({'error': str(error)[:600]}), file=sys.stderr)
+    sys.exit(1)
+finally:
+    os.close(root)
+`;
+var PUBLISH = String.raw`
+import ctypes, errno, json, os, stat, sys
+parent, stage, target, dev, ino = sys.argv[1:]
+try:
+    fd = os.open(parent, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW)
+    entry = os.stat(stage, dir_fd=fd, follow_symlinks=False)
+    if not stat.S_ISDIR(entry.st_mode) or entry.st_dev != int(dev) or entry.st_ino != int(ino):
+        raise ValueError('staging ownership changed before publication')
+    libc = ctypes.CDLL(None, use_errno=True)
+    rename = getattr(libc, 'renameat2', None)
+    if rename is None:
+        raise ValueError('atomic no-replace directory publication is unavailable on this platform')
+    rename.argtypes = [ctypes.c_int, ctypes.c_char_p, ctypes.c_int, ctypes.c_char_p, ctypes.c_uint]
+    rename.restype = ctypes.c_int
+    if rename(fd, os.fsencode(stage), fd, os.fsencode(target), 1) != 0:
+        code = ctypes.get_errno()
+        if code == errno.EEXIST:
+            raise ValueError('destination already exists; nothing was overwritten')
+        raise OSError(code, os.strerror(code))
+    os.close(fd)
+except BaseException as error:
+    print(json.dumps({'error': str(error)[:600]}), file=sys.stderr)
+    sys.exit(1)
+`;
+
 // packages/execution/dist/tools/change-log.js
 import { randomBytes } from "node:crypto";
 var _sessionId = `session-${Date.now()}-${randomBytes(3).toString("hex")}`;