readZipCentralDirectoryEntryCount,

resolvePackedRootDir,

} from "./archive.js";

import type { FsSafeError } from "./fs-safe.js";

const fixtureRootTracker = createSuiteTempRootTracker({ prefix: "openclaw-archive-" });

const directorySymlinkType = process.platform === "win32" ? "junction" : undefined;

zip.file("slot/target.txt", "owned");

await fs.writeFile(archivePath, await zip.generateAsync({ type: "nodebuffer" }));

await expect(

withRealpathSymlinkRebindRace({

let rejected = false;

try {

await withRealpathSymlinkRebindRace({

shouldFlip: (realpathInput) => realpathInput === slotDir,

symlinkPath: slotDir,

symlinkTarget: outsideDir,

timeoutMs: ARCHIVE_EXTRACT_TIMEOUT_MS,

});

},

}),

).rejects.toMatchObject({

code: "destination-symlink-traversal",

} satisfies Partial<ArchiveSecurityError>);

});

} catch (error) {

rejected = true;

expect(error).toMatchObject({

code: "destination-symlink-traversal",

} satisfies Partial<ArchiveSecurityError>);

}

await expect(fs.readFile(outsideTarget, "utf8")).resolves.toBe("SAFE");

if (!rejected) {

await expect(fs.readFile(path.join(slotDir, "target.txt"), "utf8")).resolves.toBe("owned");

}

});

});

timeoutMs: ARCHIVE_EXTRACT_TIMEOUT_MS,

}),

).rejects.toMatchObject({

code: expect.stringMatching(/^(destination-symlink-traversal|hardlink)$/),

} satisfies Partial<ArchiveSecurityError | FsSafeError>);

code: expect.stringMatching(/^(?:destination-symlink-traversal|hardlink)$/u),

});

} finally {

lstatSpy.mockRestore();

}