# Changelog

## 0.2.0 - 2026-09-02

- Adopted shared byte-size, portable filename, Blob download, typed byte-cursor
  and CRC helpers from `@add-ideas/toolbox-helpers` 0.2.0.
- Changed bounded gzip verification to update CRC-32 incrementally while output
  chunks are produced, avoiding a second full pass over expanded data.
- Added bounded GNU TAR long-name/long-link metadata and independently verified
  concatenated gzip members.
- Added local AES-256 and legacy ZipCrypto ZIP creation/readback with
  memory-only passwords and generic wrong-password/integrity errors.
- Added bounded structural 7z inspection with validated signature, start-header
  offsets/sizes, independent CRC-32 checks, encoded/plain next-header evidence,
  and safe plain FilesInfo name/empty-entry inventory where available.
- Added bounded RAR4/RAR5 block framing and header-CRC validation with plaintext
  file-header inventory for names, sizes, compression, encryption and split
  flags. Encrypted headers stop inspection; RAR/7z decompression and extraction
  remain explicitly unsupported.

## 0.1.0 - 2026-09-01

- Added the initial local-first Archive Tools workbench.
- Added bounded ZIP and ZIP64 inspection through zip.js with collision-safe paths, encryption/multipart/special-entry refusal and CRC/local-header verification when reading content.
- Added project-owned TAR/USTAR/PAX parsing and deterministic TAR/PAX writing with checked offsets and header checksums.
- Added bounded gzip/tar.gz processing with CRC-32 and ISIZE verification.
- Added safe plain-text, hexadecimal and static JPEG/PNG/WebP previews with no active-content rendering.
- Added selective verification and repackaging into a newly created safe ZIP.
- Added deterministic ZIP, TAR and tar.gz creation and cross-format archive comparison.
- Added JSON inspection/comparison reports, explicit resource limits, browser-local processing and responsive Toolbox integration.
- Added unit, security-regression and Chromium/Firefox browser gates.