swarm-deploy 0.1.0 → 0.2.0

package/dist/tar-protocol/tree-manifest.js

@@ -0,0 +1,277 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TREE_TRANSFER_DOMAIN = void 0;
+exports.computeTreeTransferId = computeTreeTransferId;
+exports.buildTreeManifest = buildTreeManifest;
+exports.regenerateTreeTarSuffix = regenerateTreeTarSuffix;
+exports.treeMetadataFromManifest = treeMetadataFromManifest;
+exports.assertTreeMetadataTransferId = assertTreeMetadataTransferId;
+const b4a_1 = __importDefault(require("b4a"));
+const _fs_1 = __importDefault(require("#fs"));
+const _path_1 = __importDefault(require("#path"));
+const sodium_native_1 = __importDefault(require("sodium-native"));
+const abort_js_1 = require("../abort.js");
+const errors_js_1 = require("../errors.js");
+const files_js_1 = require("../files.js");
+const layout_js_1 = require("../storage/layout.js");
+const controls_js_1 = require("./controls.js");
+const hash_js_1 = require("./hash.js");
+const manifest_js_1 = require("./manifest.js");
+const tree_js_1 = require("./tree.js");
+const ustar_js_1 = require("./ustar.js");
+exports.TREE_TRANSFER_DOMAIN = 'swarm-deploy/direct-tree/v1';
+const READ_BYTES = 64 * 1024;
+function invalid(message, cause = null) {
+    return new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.PROTOCOL_INVALID, message, cause);
+}
+function assertClientKey(key) {
+    if (!b4a_1.default.isBuffer(key) || key.byteLength !== 32)
+        throw invalid('Invalid client public key');
+}
+function canonicalName(directoryPath) {
+    const name = (0, files_js_1.validateBasename)(_path_1.default.basename(_path_1.default.resolve(directoryPath)));
+    if ((0, files_js_1.isReservedHistoryName)(name)) {
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.INVALID_FILENAME, 'Reserved artifact name');
+    }
+    return name;
+}
+/**
+ * The authenticated identity of a directory offer. It is domain separated from
+ * the file transfer ID and commits to every metadata field plus the pinned USTAR
+ * constants and tree limits that shape the archive.
+ */
+function computeTreeTransferId(clientPublicKey, immutable) {
+    assertClientKey(clientPublicKey);
+    for (const [label, value] of [
+        ['tree entry count', immutable.entryCount],
+        ['tree payload size', immutable.payloadBytes],
+        ['TAR size', immutable.tarSize]
+    ]) {
+        if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0) {
+            throw invalid(`Invalid ${label}`);
+        }
+    }
+    if (!b4a_1.default.isBuffer(immutable.treeSha256) || immutable.treeSha256.byteLength !== 32) {
+        throw invalid('Invalid tree digest');
+    }
+    if (!b4a_1.default.isBuffer(immutable.tarSha256) || immutable.tarSha256.byteLength !== 32) {
+        throw invalid('Invalid TAR digest');
+    }
+    const hash = new hash_js_1.SodiumSha256();
+    (0, tree_js_1.hashField)(hash, 'domain', exports.TREE_TRANSFER_DOMAIN);
+    (0, tree_js_1.hashField)(hash, 'clientPublicKey', clientPublicKey);
+    (0, tree_js_1.hashField)(hash, 'kind', 'directory');
+    (0, tree_js_1.hashField)(hash, 'name', immutable.name);
+    if (immutable.sourceParent !== undefined) {
+        (0, controls_js_1.assertSourceParent)(immutable.sourceParent);
+        (0, tree_js_1.hashField)(hash, 'sourceParent', immutable.sourceParent);
+    }
+    (0, tree_js_1.hashField)(hash, 'entryCount', immutable.entryCount);
+    (0, tree_js_1.hashField)(hash, 'payloadBytes', immutable.payloadBytes);
+    (0, tree_js_1.hashField)(hash, 'treeSha256', immutable.treeSha256);
+    (0, tree_js_1.hashField)(hash, 'tarSize', immutable.tarSize);
+    (0, tree_js_1.hashField)(hash, 'tarSha256', immutable.tarSha256);
+    (0, tree_js_1.hashField)(hash, 'fileMode', ustar_js_1.TAR_MODE);
+    (0, tree_js_1.hashField)(hash, 'directoryMode', ustar_js_1.TAR_DIRECTORY_MODE);
+    (0, tree_js_1.hashField)(hash, 'uid', ustar_js_1.TAR_UID);
+    (0, tree_js_1.hashField)(hash, 'gid', ustar_js_1.TAR_GID);
+    (0, tree_js_1.hashField)(hash, 'mtimeMs', ustar_js_1.TAR_MTIME_MS);
+    (0, tree_js_1.hashField)(hash, 'uname', ustar_js_1.TAR_UNAME);
+    (0, tree_js_1.hashField)(hash, 'gname', ustar_js_1.TAR_GNAME);
+    (0, tree_js_1.hashField)(hash, 'maxDepth', tree_js_1.MAX_TREE_DEPTH);
+    (0, tree_js_1.hashField)(hash, 'maxEntries', tree_js_1.MAX_TREE_ENTRIES);
+    (0, tree_js_1.hashField)(hash, 'pax', 'none');
+    return hash.digest();
+}
+/** Streams one file's payload, proving it is the snapshotted inode at open and at the end. */
+async function* readEntryPayload(entry, signal) {
+    let handle = null;
+    try {
+        handle = await _fs_1.default.promises.open(entry.absolutePath, (0, layout_js_1.safeFileOpenFlags)('read'));
+        (0, tree_js_1.assertSameTreeIdentity)(entry.identity, await handle.stat(), 'Tree entry changed while opening');
+        let position = 0;
+        while (position < entry.size) {
+            (0, abort_js_1.throwIfAborted)(signal);
+            const chunk = b4a_1.default.alloc(Math.min(READ_BYTES, entry.size - position));
+            const read = await handle.read(chunk, 0, chunk.byteLength, position);
+            const count = typeof read === 'number' ? read : read.bytesRead;
+            if (count !== chunk.byteLength) {
+                throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.FILE_BUSY, 'Tree entry was truncated');
+            }
+            position += count;
+            yield chunk;
+        }
+        (0, tree_js_1.assertSameTreeIdentity)(entry.identity, await handle.stat(), 'Tree entry changed during TAR generation');
+    }
+    catch (error) {
+        if (error instanceof errors_js_1.SwarmDeployError)
+            throw error;
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.FILE_BUSY, 'Unable to safely read tree entry', error);
+    }
+    finally {
+        if (handle)
+            await handle.close().catch(() => { });
+    }
+}
+/** Yields the exact deterministic archive, hashing each entry payload in order. */
+async function* generateTreeTar(snapshot, digests, signal) {
+    for (const entry of snapshot.entries) {
+        (0, abort_js_1.throwIfAborted)(signal);
+        yield (0, ustar_js_1.canonicalUstarTreeHeader)((0, tree_js_1.tarEntryName)(entry), entry.kind, entry.size);
+        if (entry.kind === 'directory') {
+            digests.push({ entry: { kind: entry.kind, path: entry.path, size: 0 } });
+            continue;
+        }
+        const hash = new hash_js_1.SodiumSha256();
+        for await (const chunk of readEntryPayload(entry, signal)) {
+            hash.update(chunk);
+            yield chunk;
+        }
+        digests.push({
+            entry: { kind: entry.kind, path: entry.path, size: entry.size },
+            sha256: hash.digest()
+        });
+        const padding = (ustar_js_1.TAR_BLOCK_BYTES - (entry.size % ustar_js_1.TAR_BLOCK_BYTES)) % ustar_js_1.TAR_BLOCK_BYTES;
+        if (padding > 0)
+            yield b4a_1.default.alloc(padding);
+    }
+    yield b4a_1.default.alloc(2 * ustar_js_1.TAR_BLOCK_BYTES);
+}
+async function buildTreeManifest(directoryPath, clientPublicKey, { signal = null, includeSourceParent = true } = {}) {
+    assertClientKey(clientPublicKey);
+    const resolved = _path_1.default.resolve(directoryPath);
+    const name = canonicalName(resolved);
+    const sourceParent = includeSourceParent === false ? undefined : (0, manifest_js_1.deriveSourceParent)(resolved);
+    const snapshot = await (0, tree_js_1.snapshotTree)(resolved, { signal });
+    (0, tree_js_1.assertCanonicalTreeEntries)(snapshot.entries);
+    const digests = [];
+    const tarHash = new hash_js_1.SodiumSha256();
+    let tarSize = 0;
+    for await (const chunk of generateTreeTar(snapshot, digests, signal)) {
+        tarHash.update(chunk);
+        tarSize += chunk.byteLength;
+    }
+    await (0, tree_js_1.revalidateTreeSnapshot)(snapshot, { signal });
+    if (tarSize !== (0, ustar_js_1.deterministicTreeTarSize)(snapshot.entries)) {
+        throw invalid('Noncanonical deterministic TAR length');
+    }
+    const treeSha256 = (0, tree_js_1.treeDigest)(digests);
+    const tarSha256 = tarHash.digest();
+    const transferId = computeTreeTransferId(clientPublicKey, {
+        name,
+        ...(sourceParent === undefined ? {} : { sourceParent }),
+        entryCount: snapshot.entryCount,
+        payloadBytes: snapshot.payloadBytes,
+        treeSha256,
+        tarSize,
+        tarSha256
+    });
+    return {
+        kind: 'directory',
+        path: resolved,
+        name,
+        ...(sourceParent === undefined ? {} : { sourceParent }),
+        entryCount: snapshot.entryCount,
+        payloadBytes: snapshot.payloadBytes,
+        treeSha256,
+        tarSize,
+        tarSha256,
+        transferId,
+        snapshot
+    };
+}
+async function regenerateTreeTarSuffix(manifest, offset, write, { signal = null, expectedPrefixSha256 = null } = {}) {
+    if (!manifest || typeof manifest !== 'object')
+        throw invalid('Invalid tree manifest');
+    if (!Number.isSafeInteger(offset) || offset < 0 || offset > manifest.tarSize) {
+        throw invalid('Invalid TAR resume offset');
+    }
+    if (typeof write !== 'function')
+        throw invalid('Invalid TAR suffix writer');
+    if (expectedPrefixSha256 !== null &&
+        (!b4a_1.default.isBuffer(expectedPrefixSha256) || expectedPrefixSha256.byteLength !== 32)) {
+        throw invalid('Invalid expected prefix digest');
+    }
+    const digests = [];
+    const tarHash = new hash_js_1.SodiumSha256();
+    const prefixHash = new hash_js_1.SodiumSha256();
+    let position = 0;
+    let bytesSent = 0;
+    let prefixSha256 = offset === 0 ? prefixHash.digest() : null;
+    let resetRequired = prefixSha256 !== null &&
+        expectedPrefixSha256 !== null &&
+        !sodium_native_1.default.sodium_memcmp(prefixSha256, expectedPrefixSha256);
+    for await (const chunk of generateTreeTar(manifest.snapshot, digests, signal)) {
+        (0, abort_js_1.throwIfAborted)(signal);
+        tarHash.update(chunk);
+        const end = position + chunk.byteLength;
+        if (position < offset) {
+            const prefixEnd = Math.min(chunk.byteLength, offset - position);
+            prefixHash.update(chunk.subarray(0, prefixEnd));
+            if (end >= offset) {
+                prefixSha256 = prefixHash.digest();
+                if (expectedPrefixSha256 && !sodium_native_1.default.sodium_memcmp(prefixSha256, expectedPrefixSha256)) {
+                    resetRequired = true;
+                }
+                if (!resetRequired && prefixEnd < chunk.byteLength) {
+                    const suffix = chunk.subarray(prefixEnd);
+                    await write(suffix);
+                    bytesSent += suffix.byteLength;
+                }
+            }
+        }
+        else if (!resetRequired) {
+            await write(chunk);
+            bytesSent += chunk.byteLength;
+        }
+        position = end;
+    }
+    await (0, tree_js_1.revalidateTreeSnapshot)(manifest.snapshot, { signal });
+    if (position !== manifest.tarSize ||
+        (!resetRequired && bytesSent !== manifest.tarSize - offset)) {
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.FILE_BUSY, 'Regenerated TAR length changed');
+    }
+    if (!(0, hash_js_1.digestMatches)((0, tree_js_1.treeDigest)(digests), manifest.treeSha256) ||
+        !(0, hash_js_1.digestMatches)(tarHash.digest(), manifest.tarSha256)) {
+        throw new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.FILE_BUSY, 'Tree changed during TAR regeneration');
+    }
+    if (prefixSha256 === null)
+        throw invalid('Unable to hash TAR prefix');
+    if (resetRequired)
+        return { status: 'RESET_REQUIRED', prefixSha256, bytesSent: 0 };
+    return { status: 'MATCH', prefixSha256, bytesSent };
+}
+function treeMetadataFromManifest(manifest, reset = false) {
+    return {
+        v: controls_js_1.CONTROL_VERSION,
+        kind: 'directory',
+        name: manifest.name,
+        ...(manifest.sourceParent === undefined ? {} : { sourceParent: manifest.sourceParent }),
+        entryCount: manifest.entryCount,
+        payloadBytes: manifest.payloadBytes,
+        treeSha256: b4a_1.default.toString(manifest.treeSha256, 'hex'),
+        tarSize: manifest.tarSize,
+        tarSha256: b4a_1.default.toString(manifest.tarSha256, 'hex'),
+        transferId: b4a_1.default.toString(manifest.transferId, 'hex'),
+        reset
+    };
+}
+function assertTreeMetadataTransferId(clientPublicKey, offeredMetadata) {
+    const metadata = (0, controls_js_1.decodeTreeMetadataRecord)((0, controls_js_1.encodeTreeMetadataRecord)(offeredMetadata));
+    const expected = computeTreeTransferId(clientPublicKey, {
+        name: metadata.name,
+        ...(metadata.sourceParent === undefined ? {} : { sourceParent: metadata.sourceParent }),
+        entryCount: metadata.entryCount,
+        payloadBytes: metadata.payloadBytes,
+        treeSha256: b4a_1.default.from(metadata.treeSha256, 'hex'),
+        tarSize: metadata.tarSize,
+        tarSha256: b4a_1.default.from(metadata.tarSha256, 'hex')
+    });
+    if (!sodium_native_1.default.sodium_memcmp(expected, b4a_1.default.from(metadata.transferId, 'hex'))) {
+        throw invalid('Noncanonical tree transfer ID');
+    }
+}
+//# sourceMappingURL=tree-manifest.js.map

package/dist/tar-protocol/tree-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree-manifest.js","sourceRoot":"","sources":["../../src/tar-protocol/tree-manifest.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,8CAAqB;AACrB,8CAAoB;AACpB,kDAAwB;AACxB,kEAAkC;AAClC,0CAAkE;AAClE,4CAAuD;AACvD,0CAAqE;AACrE,oDAAwD;AACxD,+CAMsB;AACtB,uCAAuD;AACvD,+CAAwE;AACxE,uCAakB;AAClB,yCAWmB;AAEN,QAAA,oBAAoB,GAAG,6BAA6B,CAAA;AACjE,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAA;AA2B5B,SAAS,OAAO,CAAC,OAAe,EAAE,KAAK,GAAY,IAAI;IACrD,OAAO,IAAI,4BAAgB,CAAC,kBAAM,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;AACtE,CAAC;AAED,SAAS,eAAe,CAAC,GAAe;IACtC,IAAI,CAAC,aAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE;QAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;AAC7F,CAAC;AAED,SAAS,aAAa,CAAC,aAAqB;IAC1C,MAAM,IAAI,GAAG,IAAA,2BAAgB,EAAC,eAAI,CAAC,QAAQ,CAAC,eAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IACzE,IAAI,IAAA,gCAAqB,EAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,+BACE,eAA2B,EAC3B,SAQC;IAED,eAAe,CAAC,eAAe,CAAC,CAAA;IAChC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;QAC3B,CAAC,kBAAkB,EAAE,SAAS,CAAC,UAAU,CAAC;QAC1C,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC;QAC7C,CAAC,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC;KACvB,EAAE,CAAC;QACX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,OAAO,CAAC,WAAW,KAAK,EAAE,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,aAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAClF,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,CAAC,aAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAChF,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,sBAAY,EAAE,CAAA;IAC/B,IAAA,mBAAS,EAAC,IAAI,EAAE,QAAQ,EAAE,QAAA,oBAAoB,CAAC,CAAA;IAC/C,IAAA,mBAAS,EAAC,IAAI,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAA;IACnD,IAAA,mBAAS,EAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;IACpC,IAAA,mBAAS,EAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,IAAA,gCAAkB,EAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC1C,IAAA,mBAAS,EAAC,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,YAAY,CAAC,CAAA;IACzD,CAAC;IACD,IAAA,mBAAS,EAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IACnD,IAAA,mBAAS,EAAC,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,YAAY,CAAC,CAAA;IACvD,IAAA,mBAAS,EAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IACnD,IAAA,mBAAS,EAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC7C,IAAA,mBAAS,EAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IACjD,IAAA,mBAAS,EAAC,IAAI,EAAE,UAAU,EAAE,mBAAQ,CAAC,CAAA;IACrC,IAAA,mBAAS,EAAC,IAAI,EAAE,eAAe,EAAE,6BAAkB,CAAC,CAAA;IACpD,IAAA,mBAAS,EAAC,IAAI,EAAE,KAAK,EAAE,kBAAO,CAAC,CAAA;IAC/B,IAAA,mBAAS,EAAC,IAAI,EAAE,KAAK,EAAE,kBAAO,CAAC,CAAA;IAC/B,IAAA,mBAAS,EAAC,IAAI,EAAE,SAAS,EAAE,uBAAY,CAAC,CAAA;IACxC,IAAA,mBAAS,EAAC,IAAI,EAAE,OAAO,EAAE,oBAAS,CAAC,CAAA;IACnC,IAAA,mBAAS,EAAC,IAAI,EAAE,OAAO,EAAE,oBAAS,CAAC,CAAA;IACnC,IAAA,mBAAS,EAAC,IAAI,EAAE,UAAU,EAAE,wBAAc,CAAC,CAAA;IAC3C,IAAA,mBAAS,EAAC,IAAI,EAAE,YAAY,EAAE,0BAAgB,CAAC,CAAA;IAC/C,IAAA,mBAAS,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;AACtB,CAAC;AAED,8FAA8F;AAC9F,KAAK,SAAS,CAAC,CAAC,gBAAgB,CAC9B,KAAwB,EACxB,MAA0C;IAE1C,IAAI,MAAM,GAAkC,IAAI,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,IAAA,6BAAiB,EAAC,MAAM,CAAC,CAAC,CAAA;QAC9E,IAAA,gCAAsB,EAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,kCAAkC,CAAC,CAAA;QAC/F,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,OAAO,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;YACtB,MAAM,KAAK,GAAG,aAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAA;YACpE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;YACpE,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAA;YAC9D,IAAI,KAAK,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAA;YAC1E,CAAC;YACD,QAAQ,IAAI,KAAK,CAAA;YACjB,MAAM,KAAK,CAAA;QACb,CAAC;QACD,IAAA,gCAAsB,EACpB,KAAK,CAAC,QAAQ,EACd,MAAM,MAAM,CAAC,IAAI,EAAE,EACnB,0CAA0C,CAC3C,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,4BAAgB;YAAE,MAAM,KAAK,CAAA;QAClD,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,SAAS,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAAA;IACzF,CAAC;YAAS,CAAC;QACT,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAClD,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,KAAK,SAAS,CAAC,CAAC,eAAe,CAC7B,QAAsB,EACtB,OAA0B,EAC1B,MAA0C;IAE1C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;QACtB,MAAM,IAAA,mCAAwB,EAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;YACxE,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,sBAAY,EAAE,CAAA;QAC/B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAClB,MAAM,KAAK,CAAA;QACb,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;YAC/D,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;SACtB,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,CAAC,0BAAe,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,0BAAe,CAAC,CAAC,GAAG,0BAAe,CAAA;QACpF,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,aAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC3C,CAAC;IACD,MAAM,aAAG,CAAC,KAAK,CAAC,CAAC,GAAG,0BAAe,CAAC,CAAA;AACtC,CAAC;AAEM,KAAK,4BACV,aAAqB,EACrB,eAA2B,EAC3B,EAAE,MAAM,GAAG,IAAI,EAAE,mBAAmB,GAAG,IAAI,EAAE,GAAwB,EAAE;IAEvE,eAAe,CAAC,eAAe,CAAC,CAAA;IAChC,MAAM,QAAQ,GAAG,eAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IACpC,MAAM,YAAY,GAAG,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,gCAAkB,EAAC,QAAQ,CAAC,CAAA;IAC7F,MAAM,QAAQ,GAAG,MAAM,IAAA,sBAAY,EAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACzD,IAAA,oCAA0B,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAsB,EAAE,CAAA;IACrC,MAAM,OAAO,GAAG,IAAI,sBAAY,EAAE,CAAA;IAClC,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrB,OAAO,IAAI,KAAK,CAAC,UAAU,CAAA;IAC7B,CAAC;IACD,MAAM,IAAA,gCAAsB,EAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAClD,IAAI,OAAO,KAAK,IAAA,mCAAwB,EAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,MAAM,OAAO,CAAC,uCAAuC,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,oBAAU,EAAC,OAAO,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,UAAU,GAAG,qBAAqB,CAAC,eAAe,EAAE;QACxD,IAAI;QACJ,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,UAAU;QACV,OAAO;QACP,SAAS;KACV,CAAC,CAAA;IACF,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,UAAU;QACV,OAAO;QACP,SAAS;QACT,UAAU;QACV,QAAQ;KACT,CAAA;AACH,CAAC;AAEM,KAAK,kCACV,QAAsB,EACtB,MAAc,EACd,KAA8C,EAC9C,EAAE,MAAM,GAAG,IAAI,EAAE,oBAAoB,GAAG,IAAI,EAAE,GAAsB,EAAE;IAEtE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,MAAM,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACrF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC7E,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC5C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC3E,IACE,oBAAoB,KAAK,IAAI;QAC7B,CAAC,CAAC,aAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,CAAC,UAAU,KAAK,EAAE,CAAC,EAC/E,CAAC;QACD,MAAM,OAAO,CAAC,gCAAgC,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,OAAO,GAAsB,EAAE,CAAA;IACrC,MAAM,OAAO,GAAG,IAAI,sBAAY,EAAE,CAAA;IAClC,MAAM,UAAU,GAAG,IAAI,sBAAY,EAAE,CAAA;IACrC,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,YAAY,GAAkB,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3E,IAAI,aAAa,GACf,YAAY,KAAK,IAAI;QACrB,oBAAoB,KAAK,IAAI;QAC7B,CAAC,uBAAM,CAAC,aAAa,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;IAE3D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9E,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAA;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrB,MAAM,GAAG,GAAG,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAA;QACvC,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAA;YAC/D,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;YAC/C,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;gBAClB,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,CAAA;gBAClC,IAAI,oBAAoB,IAAI,CAAC,uBAAM,CAAC,aAAa,CAAC,YAAY,EAAE,oBAAoB,CAAC,EAAE,CAAC;oBACtF,aAAa,GAAG,IAAI,CAAA;gBACtB,CAAC;gBACD,IAAI,CAAC,aAAa,IAAI,SAAS,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;oBACnD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;oBACxC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;oBACnB,SAAS,IAAI,MAAM,CAAC,UAAU,CAAA;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;YAClB,SAAS,IAAI,KAAK,CAAC,UAAU,CAAA;QAC/B,CAAC;QACD,QAAQ,GAAG,GAAG,CAAA;IAChB,CAAC;IACD,MAAM,IAAA,gCAAsB,EAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC3D,IACE,QAAQ,KAAK,QAAQ,CAAC,OAAO;QAC7B,CAAC,CAAC,aAAa,IAAI,SAAS,KAAK,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAA;IAChF,CAAC;IACD,IACE,CAAC,IAAA,uBAAa,EAAC,IAAA,oBAAU,EAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC;QACxD,CAAC,IAAA,uBAAa,EAAC,OAAO,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,4BAAgB,CAAC,kBAAM,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,YAAY,KAAK,IAAI;QAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;IACrE,IAAI,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IAClF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;AACrD,CAAC;AAED,kCACE,QAAsB,EACtB,KAAK,GAAG,KAAK;IAEb,OAAO;QACL,CAAC,EAAE,6BAAe;QAClB,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;QACvF,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,UAAU,EAAE,aAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,aAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;QAClD,UAAU,EAAE,aAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;QACpD,KAAK;KACN,CAAA;AACH,CAAC;AAED,sCACE,eAA2B,EAC3B,eAAmC;IAEnC,MAAM,QAAQ,GAAG,IAAA,sCAAwB,EAAC,IAAA,sCAAwB,EAAC,eAAe,CAAC,CAAC,CAAA;IACpF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,eAAe,EAAE;QACtD,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;QACvF,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,UAAU,EAAE,aAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;QAChD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,aAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;KAC/C,CAAC,CAAA;IACF,IAAI,CAAC,uBAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAChD,CAAC;AACH,CAAC"}

package/dist/tar-protocol/tree-path.d.ts

@@ -0,0 +1,15 @@
+import type { ArtifactKind } from '../types.js';
+export declare const MAX_TREE_DEPTH = 32;
+export declare const MAX_TREE_ENTRIES = 10000;
+export declare const MAX_TREE_NAME_BYTES = 100;
+export interface TreePathEntryLike {
+    kind: ArtifactKind;
+    path: string;
+}
+/** The exact TAR name field for an entry: directories carry a trailing `/`. */
+export declare function tarEntryName(entry: Pick<TreePathEntryLike, 'kind' | 'path'>): string;
+export declare function assertTreeEntryPath(value: unknown, kind: ArtifactKind): string;
+/** Bytewise order. A parent is a proper prefix, so it always sorts first. */
+export declare function compareTreePaths(left: string, right: string): number;
+/** Normalizes a canonical TAR stored name to a tree entry path and validates components. */
+export declare function assertTreeStoredName(storedName: string, kind: ArtifactKind): string;

package/dist/tar-protocol/tree-path.js

@@ -0,0 +1,68 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_TREE_NAME_BYTES = exports.MAX_TREE_ENTRIES = exports.MAX_TREE_DEPTH = void 0;
+exports.tarEntryName = tarEntryName;
+exports.assertTreeEntryPath = assertTreeEntryPath;
+exports.compareTreePaths = compareTreePaths;
+exports.assertTreeStoredName = assertTreeStoredName;
+const b4a_1 = __importDefault(require("b4a"));
+const errors_js_1 = require("../errors.js");
+const files_js_1 = require("../files.js");
+exports.MAX_TREE_DEPTH = 32;
+exports.MAX_TREE_ENTRIES = 10_000;
+exports.MAX_TREE_NAME_BYTES = 100;
+function unsafeName(message) {
+    return new errors_js_1.SwarmDeployError(errors_js_1.ERRORS.INVALID_FILENAME, message);
+}
+/** The exact TAR name field for an entry: directories carry a trailing `/`. */
+function tarEntryName(entry) {
+    return entry.kind === 'directory' ? `${entry.path}/` : entry.path;
+}
+function assertTreeEntryPath(value, kind) {
+    if (typeof value !== 'string' || value.length === 0)
+        throw unsafeName('Invalid tree entry path');
+    if (value.includes('\\') || value.includes('\u0000'))
+        throw unsafeName('Invalid tree entry path');
+    const components = value.split('/');
+    if (components.length > exports.MAX_TREE_DEPTH)
+        throw unsafeName('Tree entry path is too deep');
+    for (const component of components) {
+        if (component.length === 0)
+            throw unsafeName('Invalid tree entry path');
+        (0, files_js_1.validateBasename)(component);
+        if ((0, files_js_1.isReservedHistoryName)(component))
+            throw unsafeName('Reserved tree entry path');
+    }
+    const stored = b4a_1.default.from(tarEntryName({ kind, path: value }));
+    if (stored.byteLength > exports.MAX_TREE_NAME_BYTES)
+        throw unsafeName('Tree entry path is too long');
+    return value;
+}
+/** Bytewise order. A parent is a proper prefix, so it always sorts first. */
+function compareTreePaths(left, right) {
+    return b4a_1.default.compare(b4a_1.default.from(left), b4a_1.default.from(right));
+}
+/** Normalizes a canonical TAR stored name to a tree entry path and validates components. */
+function assertTreeStoredName(storedName, kind) {
+    if (typeof storedName !== 'string')
+        throw unsafeName('Invalid tree entry path');
+    if (storedName.includes('\u0000') || storedName.includes('\\') || storedName.startsWith('/')) {
+        throw unsafeName('Invalid tree entry path');
+    }
+    const encoded = b4a_1.default.from(storedName);
+    if (encoded.byteLength === 0 || encoded.byteLength > exports.MAX_TREE_NAME_BYTES) {
+        throw unsafeName('Tree entry path is too long');
+    }
+    if (kind === 'directory') {
+        if (!storedName.endsWith('/'))
+            throw unsafeName('Invalid tree entry path');
+        return assertTreeEntryPath(storedName.slice(0, -1), 'directory');
+    }
+    if (storedName.endsWith('/'))
+        throw unsafeName('Invalid tree entry path');
+    return assertTreeEntryPath(storedName, 'file');
+}
+//# sourceMappingURL=tree-path.js.map

package/dist/tar-protocol/tree-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree-path.js","sourceRoot":"","sources":["../../src/tar-protocol/tree-path.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,8CAAqB;AACrB,4CAAuD;AACvD,0CAAqE;AAGxD,QAAA,cAAc,GAAG,EAAE,CAAA;AACnB,QAAA,gBAAgB,GAAG,MAAM,CAAA;AACzB,QAAA,mBAAmB,GAAG,GAAG,CAAA;AAEtC,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,IAAI,4BAAgB,CAAC,kBAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;AAC/D,CAAC;AAOD,+EAA+E;AAC/E,sBAA6B,KAA+C;IAC1E,OAAO,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;AACnE,CAAC;AAED,6BAAoC,KAAc,EAAE,IAAkB;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,UAAU,CAAC,yBAAyB,CAAC,CAAA;IAChG,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,UAAU,CAAC,yBAAyB,CAAC,CAAA;IACjG,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,UAAU,CAAC,MAAM,GAAG,QAAA,cAAc;QAAE,MAAM,UAAU,CAAC,6BAA6B,CAAC,CAAA;IACvF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,UAAU,CAAC,yBAAyB,CAAC,CAAA;QACvE,IAAA,2BAAgB,EAAC,SAAS,CAAC,CAAA;QAC3B,IAAI,IAAA,gCAAqB,EAAC,SAAS,CAAC;YAAE,MAAM,UAAU,CAAC,0BAA0B,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,MAAM,GAAG,aAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IAC5D,IAAI,MAAM,CAAC,UAAU,GAAG,QAAA,mBAAmB;QAAE,MAAM,UAAU,CAAC,6BAA6B,CAAC,CAAA;IAC5F,OAAO,KAAK,CAAA;AACd,CAAC;AAED,6EAA6E;AAC7E,0BAAiC,IAAY,EAAE,KAAa;IAC1D,OAAO,aAAG,CAAC,OAAO,CAAC,aAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,aAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;AACrD,CAAC;AAED,4FAA4F;AAC5F,8BAAqC,UAAkB,EAAE,IAAkB;IACzE,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,MAAM,UAAU,CAAC,yBAAyB,CAAC,CAAA;IAC/E,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7F,MAAM,UAAU,CAAC,yBAAyB,CAAC,CAAA;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,aAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACpC,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,QAAA,mBAAmB,EAAE,CAAC;QACzE,MAAM,UAAU,CAAC,6BAA6B,CAAC,CAAA;IACjD,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,UAAU,CAAC,yBAAyB,CAAC,CAAA;QAC1E,OAAO,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,UAAU,CAAC,yBAAyB,CAAC,CAAA;IACzE,OAAO,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;AAChD,CAAC"}

package/dist/tar-protocol/tree.d.ts

@@ -0,0 +1,68 @@
+import fs from '#fs';
+import { type AbortSignalLike } from '../abort.js';
+import { SwarmDeployError } from '../errors.js';
+import type { ArtifactKind } from '../types.js';
+import { SodiumSha256 } from './hash.js';
+export { assertTreeEntryPath, assertTreeStoredName, compareTreePaths, MAX_TREE_DEPTH, MAX_TREE_ENTRIES, MAX_TREE_NAME_BYTES, tarEntryName } from './tree-path.js';
+export declare const TREE_DIGEST_DOMAIN = "swarm-deploy/tree/v1";
+export interface TreeEntry {
+    kind: ArtifactKind;
+    /** Relative POSIX path inside the artifact, with no leading or trailing `/`. */
+    path: string;
+    /** Regular-file byte length; always `0` for a directory. */
+    size: number;
+}
+export interface TreeIdentity {
+    dev: number | bigint;
+    ino: number | bigint;
+    size: number;
+    mtimeMs: number;
+}
+export interface TreeSnapshotEntry extends TreeEntry {
+    absolutePath: string;
+    identity: TreeIdentity;
+}
+export interface TreeSnapshot {
+    rootPath: string;
+    root: TreeIdentity;
+    entries: TreeSnapshotEntry[];
+    entryCount: number;
+    payloadBytes: number;
+}
+export interface TreeDigestEntry {
+    entry: TreeEntry;
+    /** Required for a file entry and forbidden for a directory entry. */
+    sha256?: Uint8Array;
+}
+export interface TreeSnapshotOptions {
+    signal?: AbortSignalLike | null;
+}
+export declare function assertCanonicalTreeEntries(entries: readonly TreeEntry[]): void;
+/** Length-prefixed, labelled field framing shared by tree digests and tree transfer IDs. */
+export declare function hashField(hash: SodiumSha256, label: string, value: Uint8Array | string | number): void;
+export declare function treeDigest(entries: readonly TreeDigestEntry[]): Buffer;
+/** Minimal stat surface used to classify one tree member. */
+export interface TreeEntryStatLike {
+    isSymbolicLink(): boolean;
+    isDirectory(): boolean;
+    isFile(): boolean;
+    nlink?: number;
+}
+export declare function classifyTreeEntry(stat: TreeEntryStatLike): ArtifactKind;
+/** Stable error for unreadable directory listings during snapshot walks. */
+export declare function treeDirectoryReadError(): SwarmDeployError;
+/** Maps revalidation failures to FILE_BUSY while preserving ABORTED. */
+export declare function normalizeRevalidateFailure(error: unknown): never;
+/**
+ * Walks `rootPath` recursively and returns the canonical entry list with one
+ * snapshotted identity per entry. Any unsafe or non-regular member rejects the
+ * whole directory; nothing is ever silently dropped.
+ */
+export declare function snapshotTree(rootPath: string, { signal }?: TreeSnapshotOptions): Promise<TreeSnapshot>;
+export declare function assertSameTreeIdentity(expected: TreeIdentity, actual: fs.Stats, message: string): void;
+/**
+ * Reproves every snapshotted identity and re-walks the source tree before a resume
+ * regenerates the archive. Any mutation, disappearance, unreadable path, collision,
+ * limit breach, or newly unsafe member becomes FILE_BUSY; ABORTED is preserved.
+ */
+export declare function revalidateTreeSnapshot(snapshot: TreeSnapshot, { signal }?: TreeSnapshotOptions): Promise<void>;