Read one entry (random access)

Added value: +{
+  "default": "auto",
+  "description": "'auto' (default): in memory, and a zipPath above 1073741824 bytes by byte ranges. 'range': always by byte ranges over the sandbox file (never a URL; memory ≈ the central directory). 'memory': always buffered (INPUT_TOO_LARGE above the cap).",
+  "enum": [
+    "auto",
+    "memory",
+    "range"
+  ],
+  "type": "string"
+}

Previous value: -"Dot-path projection applied after verbosity (e.g. ['entryCount', 'entries.name']); array segments map over elements; unmatched paths are reported in _meta.unmatchedFields."New value: +"Dot-paths to keep, after verbosity (e.g. ['entryCount', 'entries.name']); unmatched ones are listed in _meta.unmatchedFields."

Added value: +"^(?!(?:[^.]*\\.)*(?:__proto__|constructor|prototype)(?:\\.|$)).+$"

Added value: +{
+  "default": false,
+  "description": "Add the entry's `extendedTimestamps` (zipnative getExtendedTimestamps: UT, then NTFS, then the DOS fields; ISO-8601, UTC).",
+  "type": "boolean"
+}

Added value: +{
+  "default": false,
+  "description": "Add the entry's `unixIds` (zipnative getUnixIds: the Info-ZIP ux uid / gid, or null).",
+  "type": "boolean"
+}

Previous value: -"Override zipnative's named security bounds for this call (CWE-400 / CWE-409 guards). Every key is optional; absent keys keep the engine defaults (maxEntries 100000, maxEntryUncompressedSize 1 GiB, maxTotalUncompressedSize 8 GiB, maxCompressionRatio 1024, maxNameBytes 4096, maxExtraFieldBytes 65535, maxCommentBytes 65535, maxCentralDirectoryBytes 256 MiB). Values above the operator ceilings (ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES, ZIPNATIVE_MCP_MAX_ENTRIES) are refused with LIMIT_CEILING_EXCEEDED. Raise a bound for trusted input only."New value: +"Per-call override of zipnative's security bounds (CWE-400/409); absent keys keep the engine defaults (describe_engine.defaultLimits). A value above its operator ceiling is LIMIT_CEILING_EXCEEDED. Raise only for trusted input."

Previous value: -"Maximum central-directory size in bytes."New value: +"Bytes."

Previous value: -"Maximum comment length in bytes."New value: +"Bytes."

Previous value: -"Maximum declared uncompressed/compressed ratio for entries >= 1 KiB compressed (zip-bomb guard)."New value: +"Declared ratio (entries ≥ 1 KiB compressed)."

Previous value: -"Maximum central-directory entry count."New value: +"Entries."

Added value: +{
+  "description": "Bytes, one compressed payload fetched by the byte-range reader (access range).",
+  "minimum": 1,
+  "type": "integer"
+}

Previous value: -"Maximum decompressed size of one entry, bytes."New value: +"Bytes, one entry decompressed."

Previous value: -"Maximum extra-field block length in bytes."New value: +"Bytes."

Previous value: -"Maximum entry-name length in bytes."New value: +"Bytes."

Previous value: -"Maximum total decompressed size across an extraction, bytes."New value: +"Bytes, all entries decompressed."

Previous value: -"Escalate the first engine diagnostic (prepended data, duplicate name, name mismatch, …) to a ZIP_STRICT_DIAGNOSTIC error instead of reporting it."New value: +"Turn the first engine diagnostic into a ZIP_STRICT_DIAGNOSTIC error."

Previous value: -"'summary' returns only the scalar verdict fields (drops arrays and payloads) — the token-frugal form."New value: +"'summary': scalar verdict fields only (the token-frugal form)."

Previous value: -"The archive bytes as base64 (exactly once; a data: URI prefix is tolerated). Exclusive with zipPath. Decoded size ≤ 128 MiB."New value: +"Archive bytes, base64 (≤ 128 MiB decoded). Exclusive with zipPath."

Previous value: -"Relative path of an archive inside the ZIPNATIVE_MCP_OUTPUT_DIR sandbox (no absolute paths, no '..'; container extensions only: .zip .jar .docx .epub …). Exclusive with zipBase64. Lets a create/modify → verify/extract chain avoid re-sending the bytes."New value: +"Archive path relative to the ZIPNATIVE_MCP_OUTPUT_DIR sandbox (container extensions: .zip .jar .docx .epub …). Exclusive with zipBase64; saves re-sending bytes between calls."

Added value: +{
+  "description": "Present when the archive was read by byte ranges (access 'range', or a zipPath above the in-memory cap).",
+  "enum": [
+    "range"
+  ],
+  "type": "string"
+}

Previous value: -"Number of diagnostics received per code (counts every occurrence, including de-duplicated ones)."New value: +"Occurrences per code, duplicates included."

Previous value: -"Non-fatal conformance concerns the engine raised while parsing or writing (de-duplicated by code + entry, at most 200). Empty for a clean archive. Codes: ZIP_PREPENDED_DATA, ZIP_MULTIPLE_EOCD, ZIP_NAME_MISMATCH, ZIP_UNICODE_PATH_CONFLICT, ZIP_INVALID_UTF8_NAME, ZIP_DUPLICATE_NAME, ZIP_EXTRA_FIELD_MALFORMED, ZIP_ZIP64_EXTRA_IGNORED, ZIP_TIMESTAMP_NOT_PINNED, ZIP_NONDETERMINISTIC_CODEC, ZIP_DEAD_BYTES_RATIO."New value: +"Non-fatal engine concerns (de-duplicated by code + entry, ≤ 200; codes in describe_engine.diagnosticCodes). Empty for a clean archive."

Previous value: -"Present (true) when more than 200 distinct diagnostics were dropped from `diagnostics`."New value: +"true when rows beyond 200 were dropped."

Added value: +{
+  "additionalProperties": false,
+  "description": "With includeExtendedTimestamps: modification / access / creation instants (ISO-8601, UTC) from the UT (0x5455) extra, else the NTFS (0x000a) extra, else the DOS fields (source names which); a missing one is null.",
+  "properties": {
+    "atime": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "ctime": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "mtime": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "source": {
+      "enum": [
+        "ut",
+        "ntfs",
+        "dos"
+      ],
+      "type": "string"
+    }
+  },
+  "type": "object"
+}

Previous value: -[
-  "utf-8",
-  "cp437"
-]New value: +[
+  "utf-8",
+  "cp437",
+  "custom"
+]

Added value: +{
+  "additionalProperties": false,
+  "description": "With includeUnixIds: the Unix owner uid / gid from the Info-ZIP ux (0x7875) extra; null when the archive carries none.",
+  "properties": {
+    "gid": {
+      "minimum": 0,
+      "type": "integer"
+    },
+    "uid": {
+      "minimum": 0,
+      "type": "integer"
+    }
+  },
+  "type": [
+    "object",
+    "null"
+  ]
+}

Added value: +"The local header agrees with the central directory — cross-checked for every entry, encrypted ones included (zipnative 1.1.0)."

Added value: +{
+  "description": "Why the payload was not verified; absent when it was.",
+  "enum": [
+    "encrypted",
+    "stream-only-codec",
+    "unsupported-method"
+  ],
+  "type": "string"
+}