shortcutxl 0.3.76 → 0.3.78

package/xll/python/Lib/site-packages/pip/_vendor/distlib/__init__.py

@@ -6,7 +6,7 @@
 #
 import logging
 
-__version__ = '0.4.0'
+__version__ = '0.4.2'
 
 
 class DistlibException(Exception):

package/xll/python/Lib/site-packages/pip/_vendor/distlib/compat.py

@@ -1,6 +1,6 @@
 # -*- coding: utf-8 -*-
 #
-# Copyright (C) 2013-2017 Vinay Sajip.
+# Copyright (C) 2013-2026 Vinay Sajip.
 # Licensed to the Python Software Foundation under a contributor agreement.
 # See LICENSE.txt and CONTRIBUTORS.txt.
 #
@@ -24,8 +24,8 @@ if sys.version_info[0] < 3:  # pragma: no cover
     import __builtin__ as builtins
     import ConfigParser as configparser
     from urlparse import urlparse, urlunparse, urljoin, urlsplit, urlunsplit
-    from urllib import (urlretrieve, quote as _quote, unquote, url2pathname,
-                        pathname2url, ContentTooShortError, splittype)
+    from urllib import (urlretrieve, quote as _quote, unquote, url2pathname, pathname2url, ContentTooShortError,
+                        splittype)
 
     def quote(s):
         if isinstance(s, unicode):
@@ -33,8 +33,7 @@ if sys.version_info[0] < 3:  # pragma: no cover
         return _quote(s)
 
     import urllib2
-    from urllib2 import (Request, urlopen, URLError, HTTPError,
-                         HTTPBasicAuthHandler, HTTPPasswordMgr, HTTPHandler,
+    from urllib2 import (Request, urlopen, URLError, HTTPError, HTTPBasicAuthHandler, HTTPPasswordMgr, HTTPHandler,
                          HTTPRedirectHandler, build_opener)
     if ssl:
         from urllib2 import HTTPSHandler
@@ -67,12 +66,9 @@ else:  # pragma: no cover
     from io import TextIOWrapper as file_type
     import builtins
     import configparser
-    from urllib.parse import (urlparse, urlunparse, urljoin, quote, unquote,
-                              urlsplit, urlunsplit, splittype)
-    from urllib.request import (urlopen, urlretrieve, Request, url2pathname,
-                                pathname2url, HTTPBasicAuthHandler,
-                                HTTPPasswordMgr, HTTPHandler,
-                                HTTPRedirectHandler, build_opener)
+    from urllib.parse import (urlparse, urlunparse, urljoin, quote, unquote, urlsplit, urlunsplit, splittype)
+    from urllib.request import (urlopen, urlretrieve, Request, url2pathname, pathname2url, HTTPBasicAuthHandler,
+                                HTTPPasswordMgr, HTTPHandler, HTTPRedirectHandler, build_opener)
     if ssl:
         from urllib.request import HTTPSHandler
     from urllib.error import HTTPError, URLError, ContentTooShortError
@@ -111,8 +107,7 @@ except ImportError:  # pragma: no cover
             # than one wildcard per fragment.  A survey of established
             # policy among SSL implementations showed it to be a
             # reasonable choice.
-            raise CertificateError(
-                "too many wildcards in certificate DNS name: " + repr(dn))
+            raise CertificateError('Too many wildcards in certificate DNS name: %r' % dn)
 
         # speed up common case w/o wildcards
         if not wildcards:
@@ -174,12 +169,10 @@ except ImportError:  # pragma: no cover
                         dnsnames.append(value)
         if len(dnsnames) > 1:
             raise CertificateError("hostname %r "
-                                   "doesn't match either of %s" %
-                                   (hostname, ', '.join(map(repr, dnsnames))))
+                                   "doesn't match either of %s" % (hostname, ', '.join(map(repr, dnsnames))))
         elif len(dnsnames) == 1:
             raise CertificateError("hostname %r "
-                                   "doesn't match %r" %
-                                   (hostname, dnsnames[0]))
+                                   "doesn't match %r" % (hostname, dnsnames[0]))
         else:
             raise CertificateError("no appropriate commonName or "
                                    "subjectAltName fields were found")
@@ -348,8 +341,7 @@ except AttributeError:  # pragma: no cover
         elif isinstance(filename, text_type):
             return filename.encode(_fsencoding, _fserrors)
         else:
-            raise TypeError("expect bytes or str, not %s" %
-                            type(filename).__name__)
+            raise TypeError("expect bytes or str, not %s" % type(filename).__name__)
 
     def fsdecode(filename):
         if isinstance(filename, text_type):
@@ -357,8 +349,7 @@ except AttributeError:  # pragma: no cover
         elif isinstance(filename, bytes):
             return filename.decode(_fsencoding, _fserrors)
         else:
-            raise TypeError("expect bytes or str, not %s" %
-                            type(filename).__name__)
+            raise TypeError("expect bytes or str, not %s" % type(filename).__name__)
 
 
 try:
@@ -433,18 +424,16 @@ except ImportError:  # pragma: no cover
                 if filename is None:
                     msg = "unknown encoding: " + encoding
                 else:
-                    msg = "unknown encoding for {!r}: {}".format(
-                        filename, encoding)
+                    msg = "unknown encoding for {!r}: {}".format(filename, encoding)
                 raise SyntaxError(msg)
 
             if bom_found:
                 if codec.name != 'utf-8':
                     # This behaviour mimics the Python interpreter
                     if filename is None:
-                        msg = 'encoding problem: utf-8'
+                        msg = 'Encoding problem: utf-8'
                     else:
-                        msg = 'encoding problem for {!r}: utf-8'.format(
-                            filename)
+                        msg = 'Encoding problem for %r: utf-8' % filename
                     raise SyntaxError(msg)
                 encoding += '-sig'
             return encoding
@@ -515,8 +504,7 @@ except ImportError:  # pragma: no cover
                 wrapper.__module__ = getattr(user_function, '__module__')
                 wrapper.__doc__ = getattr(user_function, '__doc__')
                 wrapper.__name__ = getattr(user_function, '__name__')
-                wrapper.__annotations__ = getattr(user_function,
-                                                  '__annotations__', {})
+                wrapper.__annotations__ = getattr(user_function, '__annotations__', {})
                 return wrapper
 
             return decorating_function
@@ -547,19 +535,16 @@ except ImportError:  # pragma: no cover
         def __getitem__(self, key):
             for mapping in self.maps:
                 try:
-                    return mapping[
-                        key]  # can't use 'key in mapping' with defaultdict
+                    return mapping[key]  # can't use 'key in mapping' with defaultdict
                 except KeyError:
                     pass
-            return self.__missing__(
-                key)  # support subclasses that define __missing__
+            return self.__missing__(key)  # support subclasses that define __missing__
 
         def get(self, key, default=None):
             return self[key] if key in self else default
 
         def __len__(self):
-            return len(set().union(
-                *self.maps))  # reuses stored hash values if possible
+            return len(set().union(*self.maps))  # reuses stored hash values if possible
 
         def __iter__(self):
             return iter(set().union(*self.maps))
@@ -572,8 +557,7 @@ except ImportError:  # pragma: no cover
 
         @_recursive_repr()
         def __repr__(self):
-            return '{0.__class__.__name__}({1})'.format(
-                self, ', '.join(map(repr, self.maps)))
+            return '{0.__class__.__name__}({1})'.format(self, ', '.join(map(repr, self.maps)))
 
         @classmethod
         def fromkeys(cls, iterable, *args):
@@ -602,8 +586,7 @@ except ImportError:  # pragma: no cover
             try:
                 del self.maps[0][key]
             except KeyError:
-                raise KeyError(
-                    'Key not found in the first mapping: {!r}'.format(key))
+                raise KeyError('Key not found in the first mapping: {!r}'.format(key))
 
         def popitem(self):
             'Remove and return an item pair from maps[0]. Raise KeyError is maps[0] is empty.'
@@ -617,8 +600,7 @@ except ImportError:  # pragma: no cover
             try:
                 return self.maps[0].pop(key, *args)
             except KeyError:
-                raise KeyError(
-                    'Key not found in the first mapping: {!r}'.format(key))
+                raise KeyError('Key not found in the first mapping: {!r}'.format(key))
 
         def clear(self):
             'Clear maps[0], leaving maps[1:] intact.'
@@ -629,7 +611,7 @@ try:
     from importlib.util import cache_from_source  # Python >= 3.4
 except ImportError:  # pragma: no cover
 
-    def cache_from_source(path, debug_override=None):
+    def cache_from_source(path, debug_override=None, optimization=None):
         assert path.endswith('.py')
         if debug_override is None:
             debug_override = __debug__
@@ -676,8 +658,7 @@ except ImportError:  # pragma: no cover
 
             '''
             if len(args) > 1:
-                raise TypeError('expected at most 1 arguments, got %d' %
-                                len(args))
+                raise TypeError('expected at most 1 arguments, got %d' % len(args))
             try:
                 self.__root
             except AttributeError:
@@ -885,8 +866,7 @@ except ImportError:  # pragma: no cover
 
             '''
             if isinstance(other, OrderedDict):
-                return len(self) == len(
-                    other) and self.items() == other.items()
+                return len(self) == len(other) and self.items() == other.items()
             return dict.__eq__(self, other)
 
         def __ne__(self, other):
@@ -936,8 +916,7 @@ except ImportError:  # pragma: no cover
             # If the converted value is different, save for next time
             if value is not result:
                 self[key] = result
-                if type(result) in (ConvertingDict, ConvertingList,
-                                    ConvertingTuple):
+                if type(result) in (ConvertingDict, ConvertingList, ConvertingTuple):
                     result.parent = self
                     result.key = key
             return result
@@ -948,8 +927,7 @@ except ImportError:  # pragma: no cover
             # If the converted value is different, save for next time
             if value is not result:
                 self[key] = result
-                if type(result) in (ConvertingDict, ConvertingList,
-                                    ConvertingTuple):
+                if type(result) in (ConvertingDict, ConvertingList, ConvertingTuple):
                     result.parent = self
                     result.key = key
             return result
@@ -958,8 +936,7 @@ except ImportError:  # pragma: no cover
         value = dict.pop(self, key, default)
         result = self.configurator.convert(value)
         if value is not result:
-            if type(result) in (ConvertingDict, ConvertingList,
-                                ConvertingTuple):
+            if type(result) in (ConvertingDict, ConvertingList, ConvertingTuple):
                 result.parent = self
                 result.key = key
         return result
@@ -973,8 +950,7 @@ except ImportError:  # pragma: no cover
             # If the converted value is different, save for next time
             if value is not result:
                 self[key] = result
-                if type(result) in (ConvertingDict, ConvertingList,
-                                    ConvertingTuple):
+                if type(result) in (ConvertingDict, ConvertingList, ConvertingTuple):
                     result.parent = self
                     result.key = key
             return result
@@ -983,8 +959,7 @@ except ImportError:  # pragma: no cover
             value = list.pop(self, idx)
             result = self.configurator.convert(value)
             if value is not result:
-                if type(result) in (ConvertingDict, ConvertingList,
-                                    ConvertingTuple):
+                if type(result) in (ConvertingDict, ConvertingList, ConvertingTuple):
                     result.parent = self
             return result
 
@@ -995,8 +970,7 @@ except ImportError:  # pragma: no cover
             value = tuple.__getitem__(self, key)
             result = self.configurator.convert(value)
             if value is not result:
-                if type(result) in (ConvertingDict, ConvertingList,
-                                    ConvertingTuple):
+                if type(result) in (ConvertingDict, ConvertingList, ConvertingTuple):
                     result.parent = self
                     result.key = key
             return result
@@ -1073,9 +1047,7 @@ except ImportError:  # pragma: no cover
                                 d = d[idx]
                             else:
                                 try:
-                                    n = int(
-                                        idx
-                                    )  # try as number first (most likely)
+                                    n = int(idx)  # try as number first (most likely)
                                     d = d[n]
                                 except TypeError:
                                     d = d[idx]
@@ -1093,12 +1065,10 @@ except ImportError:  # pragma: no cover
             replaced by their converting alternatives. Strings are checked to
             see if they have a conversion format and are converted if they do.
             """
-            if not isinstance(value, ConvertingDict) and isinstance(
-                    value, dict):
+            if not isinstance(value, ConvertingDict) and isinstance(value, dict):
                 value = ConvertingDict(value)
                 value.configurator = self
-            elif not isinstance(value, ConvertingList) and isinstance(
-                    value, list):
+            elif not isinstance(value, ConvertingList) and isinstance(value, list):
                 value = ConvertingList(value)
                 value.configurator = self
             elif not isinstance(value, ConvertingTuple) and isinstance(value, tuple):

package/xll/python/Lib/site-packages/pip/_vendor/distlib/resources.py

@@ -1,6 +1,6 @@
 # -*- coding: utf-8 -*-
 #
-# Copyright (C) 2013-2017 Vinay Sajip.
+# Copyright (C) 2013-2026 Vinay Sajip.
 # Licensed to the Python Software Foundation under a contributor agreement.
 # See LICENSE.txt and CONTRIBUTORS.txt.
 #
@@ -20,11 +20,11 @@ from .util import cached_property, get_cache_base, Cache
 
 logger = logging.getLogger(__name__)
 
-
-cache = None    # created when needed
+cache = None  # created when needed
 
 
 class ResourceCache(Cache):
+
     def __init__(self, base=None):
         if base is None:
             # Use native string to avoid issues on 2.x: see Python #20140.
@@ -69,6 +69,7 @@ class ResourceCache(Cache):
 
 
 class ResourceBase(object):
+
     def __init__(self, finder, name):
         self.finder = finder
         self.name = name
@@ -80,7 +81,7 @@ class Resource(ResourceBase):
     not normally instantiated by user code, but rather by a
     :class:`ResourceFinder` which manages the resource.
     """
-    is_container = False        # Backwards compatibility
+    is_container = False  # Backwards compatibility
 
     def as_stream(self):
         """
@@ -108,7 +109,7 @@ class Resource(ResourceBase):
 
 
 class ResourceContainer(ResourceBase):
-    is_container = True     # Backwards compatibility
+    is_container = True  # Backwards compatibility
 
     @cached_property
     def resources(self):
@@ -133,17 +134,31 @@ class ResourceFinder(object):
     def _adjust_path(self, path):
         return os.path.realpath(path)
 
+    def _is_in_base(self, path):
+        base = self._adjust_path(self.base)
+        if path == base:
+            return True
+        if not base.endswith(os.sep):
+            base = base + os.sep
+        return path.startswith(base)
+
     def _make_path(self, resource_name):
         # Issue #50: need to preserve type of path on Python 2.x
         # like os.path._get_sep
-        if isinstance(resource_name, bytes):    # should only happen on 2.x
+        if isinstance(resource_name, bytes):  # should only happen on 2.x
             sep = b'/'
         else:
             sep = '/'
         parts = resource_name.split(sep)
         parts.insert(0, self.base)
         result = os.path.join(*parts)
-        return self._adjust_path(result)
+        result = self._adjust_path(result)
+        # Confine the resolved resource to the package base so a resource
+        # name containing '..' cannot read files outside the package.
+        if not self._is_in_base(result):
+            raise DistlibException('Resource name escapes package: '
+                                   '%r' % resource_name)
+        return result
 
     def _find(self, path):
         return os.path.exists(path)
@@ -174,9 +189,10 @@ class ResourceFinder(object):
         return os.path.getsize(resource.path)
 
     def get_resources(self, resource):
+
         def allowed(f):
-            return (f != '__pycache__' and not
-                    f.endswith(self.skipped_extensions))
+            return (f != '__pycache__' and not f.endswith(self.skipped_extensions))
+
         return set([f for f in os.listdir(resource.path) if allowed(f)])
 
     def is_container(self, resource):
@@ -209,6 +225,7 @@ class ZipResourceFinder(ResourceFinder):
     """
     Resource finder for resources in .zip files.
     """
+
     def __init__(self, module):
         super(ZipResourceFinder, self).__init__(module)
         archive = self.loader.archive
@@ -267,7 +284,7 @@ class ZipResourceFinder(ResourceFinder):
             if not self.index[i].startswith(path):
                 break
             s = self.index[i][plen:]
-            result.add(s.split(os.sep, 1)[0])   # only immediate children
+            result.add(s.split(os.sep, 1)[0])  # only immediate children
             i += 1
         return result
 
@@ -283,10 +300,7 @@ class ZipResourceFinder(ResourceFinder):
         return result
 
 
-_finder_registry = {
-    type(None): ResourceFinder,
-    zipimport.zipimporter: ZipResourceFinder
-}
+_finder_registry = {type(None): ResourceFinder, zipimport.zipimporter: ZipResourceFinder}
 
 try:
     # In Python 3.6, _frozen_importlib -> _frozen_importlib_external

package/xll/python/Lib/site-packages/pip/_vendor/distlib/scripts.py

@@ -1,6 +1,6 @@
 # -*- coding: utf-8 -*-
 #
-# Copyright (C) 2013-2023 Vinay Sajip.
+# Copyright (C) 2013-2026 Vinay Sajip.
 # Licensed to the Python Software Foundation under a contributor agreement.
 # See LICENSE.txt and CONTRIBUTORS.txt.
 #
@@ -13,9 +13,11 @@ import sys
 import time
 from zipfile import ZipInfo
 
+from . import DistlibException
 from .compat import sysconfig, detect_encoding, ZipFile
 from .resources import finder
-from .util import (FileOperator, get_export_entry, convert_path, get_executable, get_platform, in_venv)
+from .util import (FileOperator, get_export_entry, convert_path, get_executable, get_platform, in_venv,
+                   is_in_directory)
 
 logger = logging.getLogger(__name__)
 
@@ -277,7 +279,9 @@ class ScriptMaker(object):
             zip_data = stream.getvalue()
             script_bytes = launcher + shebang + zip_data
         for name in names:
-            outname = os.path.join(self.target_dir, name)
+            outname = os.path.abspath(os.path.join(self.target_dir, name))
+            if not is_in_directory(outname, self.target_dir):
+                raise DistlibException('Attempt to escape script directory')
             if use_launcher:  # pragma: no cover
                 n, e = os.path.splitext(outname)
                 if e.startswith('.py'):

package/xll/python/Lib/site-packages/pip/_vendor/distlib/util.py

@@ -1,5 +1,5 @@
 #
-# Copyright (C) 2012-2023 The Python Software Foundation.
+# Copyright (C) 2012-2026 The Python Software Foundation.
 # See LICENSE.txt and CONTRIBUTORS.txt.
 #
 import codecs
@@ -589,7 +589,11 @@ class FileOperator(object):
                 self.dirs_created.add(path)
 
     def byte_compile(self, path, optimize=False, force=False, prefix=None, hashed_invalidation=False):
-        dpath = cache_from_source(path, not optimize)
+        if not optimize:
+            optimization = ''
+        else:
+            optimization = '1'
+        dpath = cache_from_source(path, optimization=optimization)
         logger.info('Byte-compiling %s to %s', path, dpath)
         if not self.dry_run:
             if force or self.newer(path, dpath):
@@ -703,8 +707,8 @@ class ExportEntry(object):
         if not isinstance(other, ExportEntry):
             result = False
         else:
-            result = (self.name == other.name and self.prefix == other.prefix and self.suffix == other.suffix and
-                      self.flags == other.flags)
+            result = (self.name == other.name and self.prefix == other.prefix and self.suffix == other.suffix
+                      and self.flags == other.flags)
         return result
 
     __hash__ = object.__hash__
@@ -1223,13 +1227,31 @@ ARCHIVE_EXTENSIONS = ('.tar.gz', '.tar.bz2', '.tar', '.zip', '.tgz', '.tbz', '.w
 
 def unarchive(archive_filename, dest_dir, format=None, check=True):
 
-    def check_path(path):
+    def check_path(path, base=None):
         if not isinstance(path, text_type):
             path = path.decode('utf-8')
-        p = os.path.abspath(os.path.join(dest_dir, path))
+        if base is None:
+            base = dest_dir
+        p = os.path.abspath(os.path.join(base, path))
         if not p.startswith(dest_dir) or p[plen] != os.sep:
             raise ValueError('path outside destination: %r' % p)
 
+    def check_link(member):
+        # A symlink/hardlink member's name is validated like any other
+        # member, but its target (linkname) is not covered by extractall's
+        # name-based handling. An unchecked target lets a later member be
+        # written through the link to a location outside dest_dir. Validate
+        # the resolved target stays within dest_dir. Symlink targets are
+        # relative to the member's own directory; hardlink targets are
+        # relative to the archive root (i.e. dest_dir).
+        if not (member.issym() or member.islnk()):
+            return
+        if member.issym():
+            link_base = os.path.dirname(os.path.join(dest_dir, member.name))
+        else:
+            link_base = dest_dir
+        check_path(member.linkname, base=link_base)
+
     dest_dir = os.path.abspath(dest_dir)
     plen = len(dest_dir)
     archive = None
@@ -1257,9 +1279,9 @@ def unarchive(archive_filename, dest_dir, format=None, check=True):
         else:
             archive = tarfile.open(archive_filename, mode)
             if check:
-                names = archive.getnames()
-                for name in names:
-                    check_path(name)
+                for member in archive.getmembers():
+                    check_path(member.name)
+                    check_link(member)
         if format != 'zip' and sys.version_info[0] < 3:
             # See Python issue 17153. If the dest path contains Unicode,
             # tarfile extraction fails on Python 2.x if a member path name
@@ -1455,6 +1477,7 @@ if ssl:
     # HTTPSConnection which verifies certificates/matches domains
     #
 
+
     class HTTPSConnection(httplib.HTTPSConnection):
         ca_certs = None  # set this to the path to the certs file (.pem)
         check_domain = True  # only used if ca_certs is not None
@@ -1776,8 +1799,13 @@ class SubprocessMixin(object):
 
 def normalize_name(name):
     """Normalize a python package name a la PEP 503"""
-    # https://www.python.org/dev/peps/pep-0503/#normalized-names
-    return re.sub('[-_.]+', '-', name).lower()
+    # https://peps.python.org/pep-0503/#normalized-names
+    # Emulates re.sub(r"[-_.]+", "-", name).lower()
+    # Much faster than re, and even faster than str.translate
+    value = name.lower().replace("_", "-").replace(".", "-")
+    while "--" in value:
+        value = value.replace("--", "-")
+    return value
 
 
 # def _get_pypirc_command():
@@ -1982,3 +2010,12 @@ def get_platform():
     if cross_compilation_target not in _TARGET_TO_PLAT:
         return get_host_platform()
     return _TARGET_TO_PLAT[cross_compilation_target]
+
+
+def is_in_directory(path, target):
+    """
+    Check if a path is inside a target directory. This doesn't check case (might be an issue on Windows)
+    """
+    path = os.path.abspath(path)
+    target = os.path.abspath(target)
+    return path == target or path.startswith(target + os.sep)

package/xll/python/Lib/site-packages/pip/_vendor/idna/LICENSE.md

@@ -1,6 +1,6 @@
 BSD 3-Clause License
 
-Copyright (c) 2013-2025, Kim Davies and contributors.
+Copyright (c) 2013-2026, Kim Davies and contributors.
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without

package/xll/python/Lib/site-packages/pip/_vendor/idna/__main__.py

@@ -0,0 +1,6 @@
+import sys
+
+from .cli import main
+
+if __name__ == "__main__":
+    sys.exit(main())