Archives (@archive)

​

Subcommands

<tool_call name="@archive" args='{"cmd":"list","args":{"file":"bundle.tar.gz"}}' />
<tool_call name="@archive" args='{"cmd":"read","args":{"file":"bundle.zip","entry":"README.md"}}' />
<tool_call name="@archive" args='{"cmd":"extract","args":{"file":"bundle.zip","to":"./vendor-src"}}' />
<tool_call name="@archive" args='{"cmd":"create","args":{"file":"release.tar.gz","paths":["dist","README.md"]}}' />

​

Safety

• Zip-slip: absolute names, drive letters and .. escapes are refused; every destination is resolved after symlinks and must stay under to, including when an already-materialized ancestor is a symlink leading out.
• Links: symlink and hard-link entries whose target resolves outside to are refused.
• Limits are enforced on the bytes actually read, not on the declared size; a refused entry leaves nothing behind and the report says how far extraction got.
• Files are created with 0600/0700 and O_EXCL, so a race cannot turn a refusal into an overwrite.
• list/read are read-only; extract/create are mutations and go through the coder security gate.