piral-cli 1.10.0-beta.8476 → 1.10.0-beta.8493

package/lib/external/index.js

@@ -53579,7 +53579,7 @@ var MAX = 1e4;
 var cache = /* @__PURE__ */ new Set();
 var normalizeUnicode = (s) => {
   if (!cache.has(s)) {
-    normalizeCache[s] = s.normalize("NFD");
+    normalizeCache[s] = s.normalize("NFD").toLocaleLowerCase("en").toLocaleUpperCase("en");
   } else {
     cache.delete(s);
   }
@@ -53622,7 +53622,7 @@ var PathReservations = class {
   #running = /* @__PURE__ */ new Set();
   reserve(paths, fn) {
     paths = isWindows2 ? ["win32 parallelization disabled"] : paths.map((p) => {
-      return stripTrailingSlashes((0, import_node_path7.join)(normalizeUnicode(p))).toLowerCase();
+      return stripTrailingSlashes((0, import_node_path7.join)(normalizeUnicode(p)));
     });
     const dirs = new Set(paths.map((path10) => getDirs(path10)).reduce((a, b) => a.concat(b)));
     this.#reservations.set(fn, { dirs, paths });
@@ -53742,6 +53742,7 @@ var SYMLINK2 = Symbol("symlink");
 var HARDLINK2 = Symbol("hardlink");
 var UNSUPPORTED = Symbol("unsupported");
 var CHECKPATH = Symbol("checkPath");
+var STRIPABSOLUTEPATH = Symbol("stripAbsolutePath");
 var MKDIR = Symbol("mkdir");
 var ONERROR = Symbol("onError");
 var PENDING = Symbol("pending");
@@ -53869,6 +53870,31 @@ var Unpack = class extends Parser {
       this.emit("end");
     }
   }
+  // return false if we need to skip this file
+  // return true if the field was successfully sanitized
+  [STRIPABSOLUTEPATH](entry, field) {
+    const path10 = entry[field];
+    if (!path10 || this.preservePaths)
+      return true;
+    const parts = path10.split("/");
+    if (parts.includes("..") || /* c8 ignore next */
+    isWindows3 && /^[a-z]:\.\.$/i.test(parts[0] ?? "")) {
+      this.warn("TAR_ENTRY_ERROR", `${field} contains '..'`, {
+        entry,
+        [field]: path10
+      });
+      return false;
+    }
+    const [root, stripped] = stripAbsolutePath(path10);
+    if (root) {
+      entry[field] = String(stripped);
+      this.warn("TAR_ENTRY_INFO", `stripping ${root} from absolute ${field}`, {
+        entry,
+        [field]: path10
+      });
+    }
+    return true;
+  }
   [CHECKPATH](entry) {
     const p = normalizeWindowsPath(entry.path);
     const parts = p.split("/");
@@ -53896,23 +53922,8 @@ var Unpack = class extends Parser {
       });
       return false;
     }
-    if (!this.preservePaths) {
-      if (parts.includes("..") || /* c8 ignore next */
-      isWindows3 && /^[a-z]:\.\.$/i.test(parts[0] ?? "")) {
-        this.warn("TAR_ENTRY_ERROR", `path contains '..'`, {
-          entry,
-          path: p
-        });
-        return false;
-      }
-      const [root, stripped] = stripAbsolutePath(p);
-      if (root) {
-        entry.path = String(stripped);
-        this.warn("TAR_ENTRY_INFO", `stripping ${root} from absolute path`, {
-          entry,
-          path: p
-        });
-      }
+    if (!this[STRIPABSOLUTEPATH](entry, "path") || !this[STRIPABSOLUTEPATH](entry, "linkpath")) {
+      return false;
     }
     if (import_node_path8.default.isAbsolute(entry.path)) {
       entry.absolute = normalizeWindowsPath(import_node_path8.default.resolve(entry.path));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "piral-cli",
-  "version": "1.10.0-beta.8476",
+  "version": "1.10.0-beta.8493",
   "description": "The standard CLI for creating and building a Piral instance or a Pilet.",
   "keywords": [
     "portal",
@@ -78,5 +78,5 @@
     "open": "^10",
     "typescript": "^5"
   },
-  "gitHead": "3b6b976669e82114ce68347b9f34620fd38e5b23"
+  "gitHead": "69e45333683926a42dabaa8d3ee4e72ddc25829a"
 }