Class ContainerError

Minimal, hostile-input-hardened ZIP reader (DD-005 §4.4/§7, as amended).

In-memory only — never touches a filesystem. Zero dependencies: inflate uses the platform DecompressionStream('deflate-raw') (browsers, workers, and the pinned Node 22+ runtime; NOT Node 18). Enforced per amendment 3:

• per-entry CRC32 verification (streaming accumulation)
• central/local header agreement (name, sizes, method)
• encrypted-entry rejection
• duplicate canonical-name handling
• incremental expanded-byte caps (a lying header cannot balloon memory) Zip64 is detected and rejected with a structured error (v1 scope; .gcode.3mf payloads are far below 4 GB).