Function unzip_and_install

ci/compiler/platformio_cache.py:579–654

Enhanced unzip and install with manifest validation and cleanup.

(
    cached_zip_path: Path,
    cache_manager: PlatformIOCache,
    is_framework: bool,
    env_section: str,
)

def unzip_and_install(
    cached_zip_path: Path,
    cache_manager: PlatformIOCache,
    is_framework: bool,
    env_section: str,
) -> bool:
    """
    Enhanced unzip and install with manifest validation and cleanup.
    """
    cached_zip_path_obj = cached_zip_path
    # Extract to a directory alongside the zip file
    artifact_dir = cached_zip_path_obj.parent
    extracted_dir = artifact_dir / "extracted"
    temp_unzip_dir = artifact_dir / "temp_extract"

    try:
        # Clean extraction directory
        if temp_unzip_dir.exists():
            shutil.rmtree(temp_unzip_dir)
        temp_unzip_dir.mkdir(parents=True)

        print(f"Extracting {cached_zip_path_obj} to {temp_unzip_dir}")

        # Extract with better error handling
        try:
            with zipfile.ZipFile(cached_zip_path_obj, "r") as zip_ref:
                # Check for zip bombs (basic protection)
                total_size = sum(info.file_size for info in zip_ref.infolist())
                if total_size > 500 * 1024 * 1024:  # 500MB limit
                    raise ValueError("Archive too large, possible zip bomb")

                zip_ref.extractall(temp_unzip_dir)
            print("Extraction completed successfully")

        except zipfile.BadZipFile:
            logger.error(f"Invalid zip file: {cached_zip_path_obj}")
            return False
        except KeyboardInterrupt as ki:
            handle_keyboard_interrupt(ki)
            raise
        except Exception as e:
            logger.error(f"Extraction failed: {e}")
            return False

        # Find content directory (handle nested structures like GitHub archives)
        content_items = list(temp_unzip_dir.iterdir())
        if len(content_items) == 1 and content_items[0].is_dir():
            # Single root directory (common with GitHub/GitLab archives) - use it
            unzipped_content_path = content_items[0]
            print(f"Found nested directory structure: {content_items[0].name}")
        else:
            # Multiple items at root - use temp dir
            unzipped_content_path = temp_unzip_dir
            print("Using flat directory structure")

        # Validate manifest files and auto-detect type
        manifest_result = validate_and_detect_manifest(unzipped_content_path)
        if not manifest_result.is_valid: