npm - @bastani/atomic - Versions diffs - 0.9.12 → 0.9.13-alpha.2 - Mend

@bastani/atomic 0.9.12 → 0.9.13-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1187) hide show

package/dist/core/tools/session-temp-cleanup.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"session-temp-cleanup.js","sourceRoot":"","sources":["../../../src/core/tools/session-temp-cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACN,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,UAAU,EACV,SAAS,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACN,aAAa,EACb,2BAA2B,EAC3B,cAAc,EACd,sBAAsB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,kEAAkE;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C,MAAM,CAAC,MAAM,yBAAyB,GAAG,2BAA2B,GAAG,UAAU,CAAC;AAElF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gCAAgC,GAAG,UAAU,CAAC;AAE3D,yEAAyE;AACzE,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjE,mFAAmF;AACnF,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD,6DAA6D;AAC7D,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAiBjD,yEAAyE;AACzE,MAAM,UAAU,qBAAqB;IACpC,OAAO,IAAI,CAAC,cAAc,EAAE,EAAE,sBAAsB,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,WAAoB;IACxE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,WAAW,IAAI,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAOD,SAAS,gBAAgB,CAAC,IAAkB,EAAE,KAAmB;IAChE,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AACzD,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAClD,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACzC,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,sEAAsE;IACvE,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,2EAA2E;AAC3E,SAAS,eAAe,CAAC,IAAY;IACpC,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB,EAAE,GAAW,EAAE,UAAkB;IACzE,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAMD,SAAS,kBAAkB,CAAC,IAAY,EAAE,QAAsB;IAC/D,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,QAAsB;IAC9D,IAAI,CAAC;QACJ,IAAI,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,oDAAoD;IACrD,CAAC;AACF,CAAC;AACD;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,QAAgB,EAAE,GAAW,EAAE,OAAe;IACzE,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACJ,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC;YACb,CAAC;YACD,IAAI,WAAmB,CAAC;YACxB,IAAI,CAAC;gBACJ,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACR,qEAAqE;gBACrE,SAAS;YACV,CAAC;YACD,IAAI,GAAG,GAAG,WAAW,GAAG,OAAO,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC;YACb,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACb,CAAC;YACD,SAAS;QACV,CAAC;QAED,IAAI,IAA6B,CAAC;QAClC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC;YAC7D,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,MAAM,GAAG,IAAI,CAAC;YACf,CAAC;iBAAM,CAAC;gBACP,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAClC,UAAU,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;oBACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAM,CAAC,KAAK,sBAAsB,EAAE,CAAC;wBACrF,MAAM,GAAG,IAAI,CAAC;oBACf,CAAC;gBACF,CAAC;gBACD,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;oBACtD,MAAM,GAAG,IAAI,CAAC;gBACf,CAAC;YACF,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACJ,SAAS,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7G,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAgB,EAAE,eAAuB;IAChE,MAAM,SAAS,GAAG,GAAG,QAAQ,UAAU,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,IAAI,CAAC;QACJ,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,qEAAqE;QACrE,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,CAAC;QACJ,kBAAkB,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,KAAK,eAAe,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACR,kBAAkB,GAAG,KAAK,CAAC;IAC5B,CAAC;IACD,IAAI,kBAAkB,EAAE,CAAC;QACxB,IAAI,CAAC;YACJ,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACR,iEAAiE;YACjE,qBAAqB;QACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACJ,UAAU,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,qCAAqC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAiB;IAC3D,IAAI,CAAC;QACJ,OAAO,CACN,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAClC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,KAAK;YAC9C,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,IAAiB;IAC9D,IAAI,CAAC;QACJ,IAAI,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3E,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,oEAAoE;QACpE,2BAA2B;IAC5B,CAAC;AACF,CAAC;AAED,qFAAqF;AACrF,SAAS,oBAAoB,CAAC,UAAkB,EAAE,GAAW;IAC5D,MAAM,QAAQ,GAAG,GAAG,UAAU,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACJ,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,QAAkC,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACJ,MAAM,WAAW,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,QAAQ,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3B,MAAM,GAAG,IAAI,CAAC;QACf,CAAC;aAAM,CAAC;YACP,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,UAAU,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;gBACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAM,CAAC,KAAK,sBAAsB,EAAE,CAAC;oBACrF,MAAM,GAAG,IAAI,CAAC;gBACf,CAAC;YACF,CAAC;YACD,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;gBAC9D,MAAM,GAAG,IAAI,CAAC;YACf,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACJ,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACJ,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAID;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,SAAiB,EAAE,MAAc,EAAE,KAAK,GAAG,CAAC;IAClE,IAAI,IAAkC,CAAC;IACvC,IAAI,CAAC;QACJ,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IACD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3E,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7B,YAAY,GAAG,IAAI,CAAC;QACrB,CAAC;IACF,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC3C,CAAC;AASD;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,UAAkB,EAAE,OAAqB,EAAE,IAAiC;IACpG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,gCAAgC,CAAC;IAC1E,IAAI,CAAC;QACJ,6EAA6E;QAC7E,gEAAgE;QAChE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACR,uEAAuE;QACvE,mDAAmD;QACnD,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACzD,IAAI,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;QAChD,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,GAAG,EAAE,kCAAkC,CAAC,CAAC;IACpF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACJ,IAAI,CAAC;YACJ,QAAQ,EAAE,GAAG,EAAE;gBACd,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;oBACtC,OAAO,IAAI,CAAC;gBACb,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,KAAK,CAAC;YACd,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,yBAAyB,CAAC;YAChE,cAAc,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YAClD,qEAAqE;YACrE,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;IACF,CAAC;YAAS,CAAC;QACV,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AACrC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACtC,OAAO,CACN,IAAI,KAAK,mBAAmB;QAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,mBAAmB,OAAO,CAAC;QAC9C,IAAI,KAAK,iBAAiB;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC;QACxC,IAAI,KAAK,sBAAsB,CAC/B,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAI,GAAW,cAAc,EAAE,EAAE,OAAO,GAAiB,EAAE;IAC/F,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAAiB;QACjC,GAAG,OAAO;QACV,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,2BAA2B,EAAE;KACvE,CAAC;IACF,OAAO,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;QAClD,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACJ,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACR,sEAAsE;YACtE,OAAO;QACR,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,SAAS;YACV,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,SAAS;YACV,CAAC;YACD,iEAAiE;YACjE,2BAA2B;YAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACtB,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,eAAe,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;gBACzD,IAAI,eAAe,KAAK,SAAS,IAAI,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;oBACxF,SAAS;gBACV,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;oBACtB,OAAO;gBACR,CAAC;gBACD,MAAM,aAAa,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;gBACvD,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,aAAa,CAAC,EAAE,CAAC;oBACtF,SAAS;gBACV,CAAC;gBACD,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACR,sDAAsD;YACvD,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,kBAAkB,CAAC,MAAc,EAAE,MAAc,EAAE,cAAmC;IAC9F,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzD,IAAI,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5E,OAAO;IACR,CAAC;IACD,IAAI,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;QACvD,OAAO;IACR,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAoB,EAAE,OAAO,GAAiB,EAAE;IACpF,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAAiB;QACjC,GAAG,OAAO;QACV,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,2BAA2B,EAAE;KACvE,CAAC;IACF,OAAO,eAAe,CAAC,oBAAoB,CAAC,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;QACrG,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACJ,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO;QACR,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzE,SAAS;YACV,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACtB,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBACJ,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACR,0EAA0E;YAC3E,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAAkB,EAAE,OAAO,GAAiB,EAAE;IACxF,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAAiB;QACjC,GAAG,OAAO;QACV,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,2BAA2B,EAAE;KACvE,CAAC;IACF,OAAO,eAAe,CAAC,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;QACnG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACtB,OAAO;QACR,CAAC;QACD,IAAI,CAAC;YACJ,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACR,eAAe;QAChB,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAWD,SAAS,iBAAiB;IACzB,IAAI,CAAC;QACJ,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,OAAO,GAA8B,EAAE;IAC5E,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IAC1E,IAAI,CAAC;QACJ,oBAAoB,CAAC,QAAQ,IAAI,cAAc,EAAE,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACR,eAAe;IAChB,CAAC;IACD,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,4BAA4B;IAC5B,KAAK,MAAM,IAAI,IAAI,aAAa,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC;YACJ,oBAAoB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACR,eAAe;QAChB,CAAC;IACF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC;YACJ,0BAA0B,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACR,eAAe;QAChB,CAAC;IACF,CAAC;AACF,CAAC;AAED,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAC7B,IAAI,YAAuD,CAAC;AAC5D,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;AACjD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE/C,8DAA8D;AAC9D,SAAS,qBAAqB,CAAC,OAAkC;IAChE,gBAAgB,GAAG,IAAI,CAAC;IACxB,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,6EAA6E;QAC7E,4EAA4E;QAC5E,oDAAoD;QACpD,MAAM,aAAa,GAAG,CAAC,GAAG,sBAAsB,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC;QAC9C,sBAAsB,CAAC,KAAK,EAAE,CAAC;QAC/B,oBAAoB,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,qBAAqB,CAAC;gBACrB,GAAG,OAAO;gBACV,aAAa,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa;gBAC/E,WAAW;aACX,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,YAAY,GAAG,SAAS,CAAC;YACzB,gBAAgB,GAAG,KAAK,CAAC;YACzB,IAAI,sBAAsB,CAAC,IAAI,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACtE,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACF,CAAC;IACF,CAAC,EAAE,6BAA6B,CAAC,CAAC;IAClC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAO,GAA8B,EAAE;IACjF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;QAChD,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC7C,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACtB,OAAO;IACR,CAAC;IACD,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,yCAAyC;IACxD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAChC,YAAY,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IACD,YAAY,GAAG,SAAS,CAAC;IACzB,gBAAgB,GAAG,KAAK,CAAC;IACzB,sBAAsB,CAAC,KAAK,EAAE,CAAC;IAC/B,oBAAoB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IAC1C,kBAAkB;IAClB,kBAAkB;CAClB,CAAC","sourcesContent":["/**\n * Age-based sweeper for tool-output storage.\n *\n * Three targets are reaped, all strictly scoped to tool output:\n *\n * - `<tmpdir>/<APP_NAME>-<owner>/` — the per-session temp trees created by\n * `session-temp-dir.ts`.\n * - `<sessionsRoot>/<project>/tool-results/` — persisted tool results under the\n * default, project-nested session roots.\n * - `<sessionDir>/tool-results/` — the same, for a custom session directory\n * chosen with `--session-dir`, `ATOMIC_CODING_AGENT_SESSION_DIR`, or the\n * `sessionDir` setting, where there is no project nesting to walk.\n *\n * Transcripts, `.jsonl` session files, and every other file under session\n * storage are out of scope: the walk only ever descends into a `tool-results`\n * directory, and only ever deletes inside it.\n *\n * The throttle/lock shape mirrors `packages/subagents/src/shared/artifacts.ts`:\n * a `.last-cleanup` marker skips the scan for a day, a `.cleanup.lock` exclusive\n * lock keeps concurrent sessions from racing, a stale lock left by a crashed\n * process is broken, and lock ownership is rechecked before every destructive\n * step. Those two names are required, but the subagents sweep already owns them\n * inside the default sessions roots, so session-storage scans keep their\n * marker/lock pair in a coding-agent control root keyed by target instead of\n * writing into the scanned directory. The temp root, which nothing else owns,\n * carries its pair directly.\n *\n * Symlinks are never followed. A scan root or a `tool-results` entry that is a\n * symlink is skipped rather than read or deleted, because `readdirSync` and\n * `rmSync` resolve links and would otherwise reach outside the target.\n */\n\nimport { createHash } from \"node:crypto\";\nimport {\n\tcloseSync,\n\tfchmodSync,\n\tfstatSync,\n\tlstatSync,\n\topenSync,\n\treaddirSync,\n\treadFileSync,\n\trenameSync,\n\trmSync,\n\tstatSync,\n\tunlinkSync,\n\twriteSync,\n} from \"node:fs\";\nimport { join } from \"node:path\";\nimport { getAgentConfigPaths } from \"../../config.ts\";\nimport { getErrnoCode } from \"./errno.ts\";\nimport {\n\tensureTempDir,\n\tgetProtectedSessionTempDirs,\n\tgetTempRootDir,\n\tSESSION_TEMP_FILE_MODE,\n} from \"./session-temp-dir.ts\";\nimport { TOOL_RESULTS_SUBDIR } from \"./tool-limits.js\";\n\nconst MS_PER_DAY = 24 * 60 * 60 * 1000;\n\n/** How long a tool-output tree survives without being touched. */\nexport const SESSION_TEMP_RETENTION_DAYS = 30;\nexport const SESSION_TEMP_RETENTION_MS = SESSION_TEMP_RETENTION_DAYS * MS_PER_DAY;\n\n/** Minimum interval between two sweeps of the same root. */\nexport const SESSION_TEMP_CLEANUP_INTERVAL_MS = MS_PER_DAY;\n\n/** A lock older than this belonged to a process that died holding it. */\nexport const SESSION_TEMP_CLEANUP_LOCK_STALE_MS = 60 * 60 * 1000;\n\n/** How long after startup the sweep runs, so it never sits on the startup path. */\nexport const SESSION_TEMP_CLEANUP_DELAY_MS = 10_000;\n\n/** Deepest directory nesting the mtime walk will descend. */\nconst MAX_SCAN_DEPTH = 32;\n\nexport const CLEANUP_MARKER_FILE = \".last-cleanup\";\nexport const CLEANUP_LOCK_FILE = \".cleanup.lock\";\n\n/**\n * Control root for session-storage scans, inside the owner-scoped temp root.\n * A session id can never sanitize to this name (leading dots are stripped), so\n * it cannot collide with a session temp tree.\n */\nexport const CLEANUP_CONTROL_SUBDIR = \".cleanup\";\n\nexport type SweepOutcome = \"swept\" | \"throttled\" | \"locked\" | \"missing\";\n\nexport interface SweepOptions {\n\t/** Clock override for tests. */\n\tnow?: number;\n\t/** Age past which an untouched entry is reaped. */\n\tretentionMs?: number;\n\t/** Minimum interval between sweeps of this root. */\n\tthrottleMs?: number;\n\t/** Directories that must survive regardless of age. */\n\tprotectedPaths?: Iterable<string>;\n\t/** Parent of the per-target control directories. Defaults to `<tempRoot>/.cleanup`. */\n\tcontrolRoot?: string;\n}\n\n/** Default parent for the marker/lock pair of a session-storage scan. */\nexport function getCleanupControlRoot(): string {\n\treturn join(getTempRootDir(), CLEANUP_CONTROL_SUBDIR);\n}\n\n/**\n * Control directory for one scan target: `<controlRoot>/<digest-of-target>`.\n * Keyed by the target path so two roots never share throttle state.\n */\nexport function getCleanupControlDir(target: string, controlRoot?: string): string {\n\tconst key = createHash(\"sha256\").update(target).digest(\"hex\").slice(0, 16);\n\treturn join(controlRoot ?? getCleanupControlRoot(), key);\n}\n\ninterface FileIdentity {\n\tdev: bigint;\n\tino: bigint;\n}\n\nfunction sameFileIdentity(left: FileIdentity, right: FileIdentity): boolean {\n\treturn left.dev === right.dev && left.ino === right.ino;\n}\n\nfunction realDirectoryIdentity(path: string): FileIdentity | undefined {\n\ttry {\n\t\tconst stat = lstatSync(path, { bigint: true });\n\t\tif (stat.isDirectory() && !stat.isSymbolicLink()) {\n\t\t\treturn { dev: stat.dev, ino: stat.ino };\n\t\t}\n\t} catch {\n\t\t// Missing, unreadable, and changing paths are not cleanup candidates.\n\t}\n\treturn undefined;\n}\n\n/** An existing real directory — not a symlink, not a file, not missing. */\nfunction isRealDirectory(path: string): boolean {\n\treturn realDirectoryIdentity(path) !== undefined;\n}\n\nfunction markerIsFresh(markerPath: string, now: number, throttleMs: number): boolean {\n\ttry {\n\t\tconst stat = lstatSync(markerPath);\n\t\treturn stat.isFile() && !stat.isSymbolicLink() && now - stat.mtimeMs < throttleMs;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\ninterface CleanupLock extends FileIdentity {\n\ttoken: string;\n}\n\nfunction pathIdentifiesFile(path: string, identity: FileIdentity): boolean {\n\ttry {\n\t\tconst stat = lstatSync(path, { bigint: true });\n\t\treturn stat.isFile() && !stat.isSymbolicLink() && sameFileIdentity(stat, identity);\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nfunction removeCreatedFile(path: string, identity: FileIdentity): void {\n\ttry {\n\t\tif (pathIdentifiesFile(path, identity)) {\n\t\t\tunlinkSync(path);\n\t\t}\n\t} catch {\n\t\t// Best effort. An uncertain path is left untouched.\n\t}\n}\n/**\n * Take an exclusive lock so two sessions never scan the same target at once.\n *\n * `wx` creation is the exclusivity primitive. Returns an ownership token; a lock\n * left behind by a crashed process is broken once stale, and release only\n * removes a lock that still carries the caller's token.\n */\nfunction acquireCleanupLock(lockPath: string, now: number, staleMs: number): CleanupLock | null {\n\tconst token = `${process.pid}.${now}.${Math.random().toString(36).slice(2)}`;\n\tfor (let attempt = 0; attempt < 2; attempt++) {\n\t\tlet fd: number;\n\t\ttry {\n\t\t\tfd = openSync(lockPath, \"wx+\", SESSION_TEMP_FILE_MODE);\n\t\t} catch (error) {\n\t\t\tif (getErrnoCode(error) !== \"EEXIST\") {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tlet lockMtimeMs: number;\n\t\t\ttry {\n\t\t\t\tlockMtimeMs = statSync(lockPath).mtimeMs;\n\t\t\t} catch {\n\t\t\t\t// The holder released between the failed create and the stat; retry.\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (now - lockMtimeMs < staleMs) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tif (!breakStaleLock(lockPath, lockMtimeMs)) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\n\t\tlet lock: CleanupLock | undefined;\n\t\tlet failed = false;\n\t\ttry {\n\t\t\tconst createdStat = fstatSync(fd, { bigint: true });\n\t\t\tlock = { token, dev: createdStat.dev, ino: createdStat.ino };\n\t\t\tif (!createdStat.isFile()) {\n\t\t\t\tfailed = true;\n\t\t\t} else {\n\t\t\t\tif (process.platform !== \"win32\") {\n\t\t\t\t\tfchmodSync(fd, SESSION_TEMP_FILE_MODE);\n\t\t\t\t\tconst modeStat = fstatSync(fd, { bigint: true });\n\t\t\t\t\tif (!modeStat.isFile() || Number(modeStat.mode & 0o777n) !== SESSION_TEMP_FILE_MODE) {\n\t\t\t\t\t\tfailed = true;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif (!failed && writeSync(fd, token) !== token.length) {\n\t\t\t\t\tfailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t} catch {\n\t\t\tfailed = true;\n\t\t}\n\t\ttry {\n\t\t\tcloseSync(fd);\n\t\t} catch {\n\t\t\tfailed = true;\n\t\t}\n\t\tif (failed || lock === undefined || !pathIdentifiesFile(lockPath, lock) || !ownsCleanupLock(lockPath, lock)) {\n\t\t\tif (lock !== undefined) {\n\t\t\t\tremoveCreatedFile(lockPath, lock);\n\t\t\t}\n\t\t\treturn null;\n\t\t}\n\t\treturn lock;\n\t}\n\treturn null;\n}\n\n/**\n * Claim a stale lock via rename, then verify it is still the lock observed\n * during stale detection. A lock that changed identity in between belongs to a\n * new holder: hand it back and treat the takeover as contention.\n */\nfunction breakStaleLock(lockPath: string, observedMtimeMs: number): boolean {\n\tconst breakPath = `${lockPath}.break.${process.pid}.${Math.random().toString(36).slice(2)}`;\n\ttry {\n\t\trenameSync(lockPath, breakPath);\n\t} catch {\n\t\t// Another sweep released or broke it first; contend again on create.\n\t\treturn false;\n\t}\n\tlet displacedFreshLock = false;\n\ttry {\n\t\tdisplacedFreshLock = statSync(breakPath).mtimeMs !== observedMtimeMs;\n\t} catch {\n\t\tdisplacedFreshLock = false;\n\t}\n\tif (displacedFreshLock) {\n\t\ttry {\n\t\t\trenameSync(breakPath, lockPath);\n\t\t} catch {\n\t\t\t// Best-effort hand-back; the displaced holder aborts at its next\n\t\t\t// ownership recheck.\n\t\t}\n\t\treturn false;\n\t}\n\ttry {\n\t\tunlinkSync(breakPath);\n\t} catch {\n\t\t// A leftover break file is harmless.\n\t}\n\treturn true;\n}\n\nfunction ownsCleanupLock(lockPath: string, lock: CleanupLock): boolean {\n\ttry {\n\t\treturn (\n\t\t\tpathIdentifiesFile(lockPath, lock) &&\n\t\t\treadFileSync(lockPath, \"utf-8\") === lock.token &&\n\t\t\tpathIdentifiesFile(lockPath, lock)\n\t\t);\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nfunction releaseCleanupLock(lockPath: string, lock: CleanupLock): void {\n\ttry {\n\t\tif (ownsCleanupLock(lockPath, lock) && pathIdentifiesFile(lockPath, lock)) {\n\t\t\tunlinkSync(lockPath);\n\t\t}\n\t} catch {\n\t\t// Release is best-effort: an unreleased lock only goes stale and is\n\t\t// broken by a later sweep.\n\t}\n}\n\n/** Publish the throttle marker without ever opening or unlinking its destination. */\nfunction publishCleanupMarker(markerPath: string, now: number): boolean {\n\tconst tempPath = `${markerPath}.tmp.${process.pid}.${Math.random().toString(36).slice(2)}`;\n\tconst timestamp = String(now);\n\tlet fd: number;\n\ttry {\n\t\tfd = openSync(tempPath, \"wx+\", SESSION_TEMP_FILE_MODE);\n\t} catch {\n\t\treturn false;\n\t}\n\n\tlet identity: FileIdentity | undefined;\n\tlet failed = false;\n\ttry {\n\t\tconst createdStat = fstatSync(fd, { bigint: true });\n\t\tidentity = { dev: createdStat.dev, ino: createdStat.ino };\n\t\tif (!createdStat.isFile()) {\n\t\t\tfailed = true;\n\t\t} else {\n\t\t\tif (process.platform !== \"win32\") {\n\t\t\t\tfchmodSync(fd, SESSION_TEMP_FILE_MODE);\n\t\t\t\tconst modeStat = fstatSync(fd, { bigint: true });\n\t\t\t\tif (!modeStat.isFile() || Number(modeStat.mode & 0o777n) !== SESSION_TEMP_FILE_MODE) {\n\t\t\t\t\tfailed = true;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (!failed && writeSync(fd, timestamp) !== timestamp.length) {\n\t\t\t\tfailed = true;\n\t\t\t}\n\t\t}\n\t} catch {\n\t\tfailed = true;\n\t}\n\ttry {\n\t\tcloseSync(fd);\n\t} catch {\n\t\tfailed = true;\n\t}\n\tif (failed || identity === undefined || !pathIdentifiesFile(tempPath, identity)) {\n\t\tif (identity !== undefined) {\n\t\t\tremoveCreatedFile(tempPath, identity);\n\t\t}\n\t\treturn false;\n\t}\n\n\ttry {\n\t\trenameSync(tempPath, markerPath);\n\t} catch {\n\t\tremoveCreatedFile(tempPath, identity);\n\t\treturn false;\n\t}\n\treturn pathIdentifiesFile(markerPath, identity);\n}\n\ntype ScanFreshness = \"fresh\" | \"stale\" | \"unknown\";\n\n/**\n * Classify whether `entryPath` has a fresh descendant, is fully stale, or could\n * not be scanned completely.\n *\n * Only `stale` authorizes deletion. Symlinks, unreadable entries, and the depth\n * bound fail closed as `unknown`; `ENOENT` is stale because the entry vanished.\n * The walk still exits on its first fresh descendant.\n */\nfunction scanFreshness(entryPath: string, cutoff: number, depth = 0): ScanFreshness {\n\tlet stat: ReturnType<typeof lstatSync>;\n\ttry {\n\t\tstat = lstatSync(entryPath);\n\t} catch (error) {\n\t\treturn getErrnoCode(error) === \"ENOENT\" ? \"stale\" : \"unknown\";\n\t}\n\tif (stat.isSymbolicLink()) {\n\t\treturn \"unknown\";\n\t}\n\tif (stat.mtimeMs >= cutoff) {\n\t\treturn \"fresh\";\n\t}\n\tif (!stat.isDirectory()) {\n\t\treturn \"stale\";\n\t}\n\tif (depth >= MAX_SCAN_DEPTH) {\n\t\treturn \"unknown\";\n\t}\n\tlet children: string[];\n\ttry {\n\t\tchildren = readdirSync(entryPath);\n\t} catch (error) {\n\t\treturn getErrnoCode(error) === \"ENOENT\" ? \"stale\" : \"unknown\";\n\t}\n\tlet foundUnknown = false;\n\tfor (const child of children) {\n\t\tconst freshness = scanFreshness(join(entryPath, child), cutoff, depth + 1);\n\t\tif (freshness === \"fresh\") {\n\t\t\treturn \"fresh\";\n\t\t}\n\t\tif (freshness === \"unknown\") {\n\t\t\tfoundUnknown = true;\n\t\t}\n\t}\n\treturn foundUnknown ? \"unknown\" : \"stale\";\n}\n\ninterface CleanupGate {\n\t/** Whether this sweep still owns the lock; false means another holder took over. */\n\townsLock(): boolean;\n\tcutoff: number;\n\tprotectedPaths: ReadonlySet<string>;\n}\n\n/**\n * Run `scan` under the marker/lock protocol for one target.\n *\n * `controlDir` holds the `.last-cleanup`/`.cleanup.lock` pair; it may be the\n * scanned directory itself (temp root) or a coding-agent-owned directory outside\n * it (session storage).\n */\nfunction withCleanupGate(controlDir: string, options: SweepOptions, scan: (gate: CleanupGate) => void): SweepOutcome {\n\tconst now = options.now ?? Date.now();\n\tconst throttleMs = options.throttleMs ?? SESSION_TEMP_CLEANUP_INTERVAL_MS;\n\ttry {\n\t\t// The control root lives under the owner temp root, so create it through the\n\t\t// same validated, non-recursive path the spill directories use.\n\t\tensureTempDir(controlDir);\n\t} catch {\n\t\t// Without a control directory there is nowhere to record the throttle;\n\t\t// skip rather than sweep unthrottled and unlocked.\n\t\treturn \"locked\";\n\t}\n\tconst markerPath = join(controlDir, CLEANUP_MARKER_FILE);\n\tif (markerIsFresh(markerPath, now, throttleMs)) {\n\t\treturn \"throttled\";\n\t}\n\tconst lockPath = join(controlDir, CLEANUP_LOCK_FILE);\n\tconst token = acquireCleanupLock(lockPath, now, SESSION_TEMP_CLEANUP_LOCK_STALE_MS);\n\tif (token === null) {\n\t\treturn \"locked\";\n\t}\n\tlet aborted = false;\n\ttry {\n\t\tscan({\n\t\t\townsLock: () => {\n\t\t\t\tif (aborted) {\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t\tif (ownsCleanupLock(lockPath, token)) {\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\taborted = true;\n\t\t\t\treturn false;\n\t\t\t},\n\t\t\tcutoff: now - (options.retentionMs ?? SESSION_TEMP_RETENTION_MS),\n\t\t\tprotectedPaths: new Set(options.protectedPaths ?? []),\n\t\t});\n\t\tif (!aborted && ownsCleanupLock(lockPath, token)) {\n\t\t\t// Failing to publish the marker only means the sweep repeats sooner.\n\t\t\tpublishCleanupMarker(markerPath, now);\n\t\t}\n\t} finally {\n\t\treleaseCleanupLock(lockPath, token);\n\t}\n\treturn aborted ? \"locked\" : \"swept\";\n}\n\nfunction isCleanupArtifact(name: string): boolean {\n\treturn (\n\t\tname === CLEANUP_MARKER_FILE ||\n\t\tname.startsWith(`${CLEANUP_MARKER_FILE}.tmp.`) ||\n\t\tname === CLEANUP_LOCK_FILE ||\n\t\tname.startsWith(`${CLEANUP_LOCK_FILE}.`) ||\n\t\tname === CLEANUP_CONTROL_SUBDIR\n\t);\n}\n\n/**\n * Reap per-session temp trees under `<tmpdir>/<APP_NAME>-<owner>/`.\n *\n * A tree is removed only when nothing at any depth inside it is newer than the\n * retention cutoff, and never when it belongs to a session this process\n * registered as live. A symlinked root is refused outright.\n */\nexport function sweepSessionTempRoot(root: string = getTempRootDir(), options: SweepOptions = {}): SweepOutcome {\n\tif (!isRealDirectory(root)) {\n\t\treturn \"missing\";\n\t}\n\tconst gateOptions: SweepOptions = {\n\t\t...options,\n\t\tprotectedPaths: options.protectedPaths ?? getProtectedSessionTempDirs(),\n\t};\n\treturn withCleanupGate(root, gateOptions, (gate) => {\n\t\tlet entries: string[];\n\t\ttry {\n\t\t\tentries = readdirSync(root);\n\t\t} catch {\n\t\t\t// Cleanup is best-effort housekeeping; an unreadable root is skipped.\n\t\t\treturn;\n\t\t}\n\t\tfor (const entry of entries) {\n\t\t\tif (isCleanupArtifact(entry)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst entryPath = join(root, entry);\n\t\t\tif (gate.protectedPaths.has(entryPath)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\t// A holder displaced by a stale-lock takeover must stop deleting\n\t\t\t// alongside the new owner.\n\t\t\tif (!gate.ownsLock()) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tconst initialIdentity = realDirectoryIdentity(entryPath);\n\t\t\t\tif (initialIdentity === undefined || scanFreshness(entryPath, gate.cutoff) !== \"stale\") {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tif (!gate.ownsLock()) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tconst finalIdentity = realDirectoryIdentity(entryPath);\n\t\t\t\tif (finalIdentity === undefined || !sameFileIdentity(initialIdentity, finalIdentity)) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\trmSync(entryPath, { recursive: true, force: true });\n\t\t\t} catch {\n\t\t\t\t// One bad entry must not block the rest of the sweep.\n\t\t\t}\n\t\t}\n\t});\n}\n\n/**\n * Reap one `<parent>/tool-results` directory.\n *\n * A symlinked (or otherwise non-directory) `tool-results` is skipped entirely —\n * neither descended into nor deleted — because `readdirSync`/`rmSync` resolve\n * links and would reach the outside directory the link points at.\n *\n * A directory a live session registered is skipped whatever its age. Age alone\n * is not enough here: replaying a persisted result reuses the existing file\n * without touching its mtime, so a month-old file can be advertised to the model\n * this very turn.\n *\n * Otherwise the directory's newest entry decides its fate, exactly as it does for\n * a session temp tree: one fresh descendant keeps the entire tree, stale siblings\n * included.\n */\nfunction reapToolResultsDir(parent: string, cutoff: number, protectedPaths: ReadonlySet<string>): void {\n\tconst toolResultsDir = join(parent, TOOL_RESULTS_SUBDIR);\n\tif (protectedPaths.has(toolResultsDir) || !isRealDirectory(toolResultsDir)) {\n\t\treturn;\n\t}\n\tif (scanFreshness(toolResultsDir, cutoff) !== \"stale\") {\n\t\treturn;\n\t}\n\trmSync(toolResultsDir, { recursive: true, force: true });\n}\n\n/**\n * Reap stale `tool-results` directories under one project-nested sessions root.\n * Only `<sessionsRoot>/<project>/tool-results` is touched — never the sibling\n * `.jsonl` transcripts.\n */\nexport function sweepToolResultsRoot(sessionsRoot: string, options: SweepOptions = {}): SweepOutcome {\n\tif (!isRealDirectory(sessionsRoot)) {\n\t\treturn \"missing\";\n\t}\n\tconst gateOptions: SweepOptions = {\n\t\t...options,\n\t\tprotectedPaths: options.protectedPaths ?? getProtectedSessionTempDirs(),\n\t};\n\treturn withCleanupGate(getCleanupControlDir(sessionsRoot, options.controlRoot), gateOptions, (gate) => {\n\t\tlet entries: string[];\n\t\ttry {\n\t\t\tentries = readdirSync(sessionsRoot);\n\t\t} catch {\n\t\t\treturn;\n\t\t}\n\t\tfor (const entry of entries) {\n\t\t\tconst projectDir = join(sessionsRoot, entry);\n\t\t\tif (!isRealDirectory(projectDir) || gate.protectedPaths.has(projectDir)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (!gate.ownsLock()) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treapToolResultsDir(projectDir, gate.cutoff, gate.protectedPaths);\n\t\t\t} catch {\n\t\t\t\t// Keep going so one unreadable project directory does not block the rest.\n\t\t\t}\n\t\t}\n\t});\n}\n\n/**\n * Reap `<sessionDir>/tool-results` for a directly chosen session directory.\n *\n * A custom `--session-dir` has no project nesting: session files live in the\n * directory itself, so only its own `tool-results` child is in scope and its\n * siblings — including transcripts — are never touched.\n */\nexport function sweepSessionDirToolResults(sessionDir: string, options: SweepOptions = {}): SweepOutcome {\n\tif (!isRealDirectory(sessionDir)) {\n\t\treturn \"missing\";\n\t}\n\tconst gateOptions: SweepOptions = {\n\t\t...options,\n\t\tprotectedPaths: options.protectedPaths ?? getProtectedSessionTempDirs(),\n\t};\n\treturn withCleanupGate(getCleanupControlDir(sessionDir, options.controlRoot), gateOptions, (gate) => {\n\t\tif (!gate.ownsLock()) {\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\treapToolResultsDir(sessionDir, gate.cutoff, gate.protectedPaths);\n\t\t} catch {\n\t\t\t// Best effort.\n\t\t}\n\t});\n}\n\nexport interface SessionTempCleanupOptions extends SweepOptions {\n\t/** Temp root override; defaults to the owner-scoped root. */\n\ttempRoot?: string;\n\t/** Project-nested sessions roots; defaults to the configured agent session roots. */\n\tsessionsRoots?: readonly string[];\n\t/** Directly chosen session directories (custom `--session-dir` and friends). */\n\tsessionDirs?: readonly string[];\n}\n\nfunction safeSessionsRoots(): readonly string[] {\n\ttry {\n\t\treturn getAgentConfigPaths(\"sessions\");\n\t} catch {\n\t\treturn [];\n\t}\n}\n\n/** Run every sweep once. Each failure is swallowed: cleanup is housekeeping. */\nexport function runSessionTempCleanup(options: SessionTempCleanupOptions = {}): void {\n\tconst { tempRoot, sessionsRoots, sessionDirs, ...sweepOptions } = options;\n\ttry {\n\t\tsweepSessionTempRoot(tempRoot ?? getTempRootDir(), sweepOptions);\n\t} catch {\n\t\t// Best effort.\n\t}\n\t// Session storage carries the same protection as the temp trees: a live\n\t// session registers its own `tool-results` directory, and a replayed result\n\t// reuses an old file without refreshing its mtime, so age alone cannot keep\n\t// an advertised path alive.\n\tfor (const root of sessionsRoots ?? safeSessionsRoots()) {\n\t\ttry {\n\t\t\tsweepToolResultsRoot(root, sweepOptions);\n\t\t} catch {\n\t\t\t// Best effort.\n\t\t}\n\t}\n\tfor (const dir of sessionDirs ?? []) {\n\t\ttry {\n\t\t\tsweepSessionDirToolResults(dir, sweepOptions);\n\t\t} catch {\n\t\t\t// Best effort.\n\t\t}\n\t}\n}\n\nlet cleanupScheduled = false;\nlet cleanupTimer: ReturnType<typeof setTimeout> | undefined;\nconst scheduledSessionsRoots = new Set<string>();\nconst scheduledSessionDirs = new Set<string>();\n\n/** Arm one deferred sweep for the roots currently pending. */\nfunction armSessionTempCleanup(options: SessionTempCleanupOptions): void {\n\tcleanupScheduled = true;\n\tcleanupTimer = setTimeout(() => {\n\t\t// Drain before the sweep. A session discovered while cleanup is running adds\n\t\t// to the now-empty sets and is rearmed in `finally`, rather than being lost\n\t\t// or starting a second callback alongside this one.\n\t\tconst sessionsRoots = [...scheduledSessionsRoots];\n\t\tconst sessionDirs = [...scheduledSessionDirs];\n\t\tscheduledSessionsRoots.clear();\n\t\tscheduledSessionDirs.clear();\n\t\ttry {\n\t\t\trunSessionTempCleanup({\n\t\t\t\t...options,\n\t\t\t\tsessionsRoots: sessionsRoots.length > 0 ? sessionsRoots : options.sessionsRoots,\n\t\t\t\tsessionDirs,\n\t\t\t});\n\t\t} finally {\n\t\t\tcleanupTimer = undefined;\n\t\t\tcleanupScheduled = false;\n\t\t\tif (scheduledSessionsRoots.size > 0 || scheduledSessionDirs.size > 0) {\n\t\t\t\tarmSessionTempCleanup(options);\n\t\t\t}\n\t\t}\n\t}, SESSION_TEMP_CLEANUP_DELAY_MS);\n\tcleanupTimer.unref?.();\n}\n\n/**\n * Schedule one deferred sweep for the current pending batch.\n *\n * Calls made before or during a sweep merge their targets into sets. The active\n * callback drains one snapshot, remains marked active while it runs, then rearms\n * one new unref'd timer only when later roots arrived.\n */\nexport function scheduleSessionTempCleanup(options: SessionTempCleanupOptions = {}): void {\n\tfor (const root of options.sessionsRoots ?? []) {\n\t\tscheduledSessionsRoots.add(root);\n\t}\n\tfor (const dir of options.sessionDirs ?? []) {\n\t\tscheduledSessionDirs.add(dir);\n\t}\n\tif (cleanupScheduled) {\n\t\treturn;\n\t}\n\tarmSessionTempCleanup(options);\n}\n\n/** Test seam: cancel pending work and forget scheduler state. */\nexport function resetSessionTempCleanupScheduleForTesting(): void {\n\tif (cleanupTimer !== undefined) {\n\t\tclearTimeout(cleanupTimer);\n\t}\n\tcleanupTimer = undefined;\n\tcleanupScheduled = false;\n\tscheduledSessionsRoots.clear();\n\tscheduledSessionDirs.clear();\n}\n\n/** Narrow lock seam for descriptor-mode and release tests. */\nexport const sessionTempCleanupTestHooks = {\n\tacquireCleanupLock,\n\treleaseCleanupLock,\n};\n"]}

package/dist/core/tools/session-temp-dir.d.ts ADDED Viewed

@@ -0,0 +1,116 @@
+/**
+ * Owner- and session-scoped temp storage for tool output files.
+ *
+ * Every file a tool spills to the system temp directory (bash overflow logs,
+ * async bash logs, `OutputAccumulator` spill files, and the in-memory-session
+ * tool-result fallback) lands under:
+ *
+ * ```text
+ * <tmpdir>/<APP_NAME>-<owner>/<sanitized-session-id>/
+ * ```
+ *
+ * The owner segment mirrors the upstream Claude Code `claude-{uid}` convention
+ * (mehmoodosman/claude-code): a shared multi-user temp directory must never let
+ * one account write into (or read) another account's tree. The session segment
+ * makes the tree reapable as a unit by the age-based sweeper in
+ * `session-temp-cleanup.ts` once the session is long gone.
+ */
+/** Directory mode for every directory this module creates (owner-only). */
+export declare const SESSION_TEMP_DIR_MODE = 448;
+/** File mode for persisted tool-output files (owner-only). */
+export declare const SESSION_TEMP_FILE_MODE = 384;
+/**
+ * Reduce a value to a single safe path component.
+ *
+ * Disallowed characters collapse to `_`; leading `.`/`_` and trailing `.`/`_`
+ * are stripped so the result can never be `.`, `..`, a hidden sweeper marker
+ * file name, or anything that escapes the parent directory. Trimming uses a
+ * linear scan rather than a `/^[._]+|[._]+$/` regex to avoid polynomial-time
+ * backtracking on adversarial ids (CodeQL js/polynomial-redos).
+ */
+export declare function sanitizeTempPathComponent(value: string, fallback: string): string;
+/**
+ * Derive the owner component for a named (non-uid) account.
+ *
+ * Sanitizing a name to a safe path component is lossy, and two distinct
+ * accounts can reduce to the same component (`aliceé` and `aliceø` both yield
+ * `alice_`). Where the system temp directory is machine-wide and
+ * shared-accessible, that would put two accounts in one tree. Appending a short
+ * digest of the raw identity keeps distinct accounts on distinct roots, with
+ * the readable component in front so the directory stays recognizable.
+ *
+ * This prevents collision; it is not owner verification. Ownership is proven
+ * separately by `verifyOwnedDirectory` — a uid check on POSIX, an owner-SID
+ * and DACL check on Windows.
+ *
+ * Exported as a pure function so the collision property can be tested directly:
+ * its only caller reaches this branch on Windows, which a POSIX test host
+ * cannot enter.
+ */
+export declare function deriveOwnerComponent(rawIdentity: string): string;
+/**
+ * Assemble the account identity used where there is no uid.
+ *
+ * `userInfo().username` returns the bare account name, so `CONTOSO\Alice` and
+ * `FABRIKAM\Alice` would otherwise be one identity and share a tree. Exported
+ * for tests: its caller only reaches this branch on Windows.
+ */
+export declare function windowsPrincipal(name: string | undefined): string;
+/** `<tmpdir>/<APP_NAME>-<owner>` — the root every session temp tree lives under. */
+export declare function getTempRootDir(): string;
+/**
+ * The temp directory path for a session, without creating it.
+ *
+ * Falls back to the process-scoped component when no session id is available,
+ * so a tool running outside a transcript session still writes inside the
+ * owner-scoped root instead of directly into the system temp directory.
+ */
+export declare function resolveSessionTempDirPath(sessionId?: string): string;
+/** Raised when a temp directory cannot be created or trusted; callers degrade to no spill file. */
+export declare class TempDirRefusedError extends Error {
+    constructor(path: string, reason: string);
+}
+/**
+ * Create `dir` with owner-only permissions, validating every component below the
+ * system temp directory.
+ *
+ * Temp children always revalidate the canonical owner root and every later
+ * component, even after a cache hit. A system temp reaper can delete a session
+ * tree, and an attacker must not turn a memoized path into a symlink bypass.
+ * Caller-owned paths outside the temp base may use the memo after confirming
+ * the leaf is still a real directory.
+ *
+ * Throws {@link TempDirRefusedError} when a component cannot be trusted. Every
+ * caller treats that as "no spill file", never as a fatal error: failing closed
+ * loses a convenience artifact, while failing open writes tool output into a
+ * directory someone else controls.
+ */
+export declare function ensureTempDir(dir: string): string;
+/**
+ * Resolve and create the temp directory for a session.
+ *
+ * Pass an already-resolved directory to reuse a caller-provided path (still
+ * created lazily with the same mode).
+ */
+export declare function getSessionTempDir(sessionId?: string): string;
+/** Create `explicitDir` when supplied, otherwise the active session's temp directory. */
+export declare function ensureSessionTempDir(explicitDir?: string): string;
+/** A protection claim held by one owner; releasing twice is a no-op. */
+export interface ProtectedPathLease {
+    release(): void;
+}
+/** Protect `paths` until the returned lease is released. */
+export declare function acquireProtectedPaths(paths: readonly string[]): ProtectedPathLease;
+/**
+ * Make `sessionId` the default target for writers without a session handle.
+ *
+ * Deliberately separate from protection: a disposed session must stop protecting
+ * its tree, but whichever session ran last still names where an unattached
+ * writer spills.
+ */
+export declare function setActiveSessionTempId(sessionId: string): string;
+/** Directories this process must not reap: session temp trees and live tool-results. */
+export declare function getProtectedSessionTempDirs(): ReadonlySet<string>;
+/** Test seam: forget the process-level active/protected session state. */
+export declare function resetSessionTempDirStateForTesting(): void;
+//# sourceMappingURL=session-temp-dir.d.ts.map

package/dist/core/tools/session-temp-dir.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"session-temp-dir.d.ts","sourceRoot":"","sources":["../../../src/core/tools/session-temp-dir.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAaH,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB,MAAQ,CAAC;AAE3C,8DAA8D;AAC9D,eAAO,MAAM,sBAAsB,MAAQ,CAAC;AAQ5C;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAYjF;AAID;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAUhE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQjE;AAwDD,oFAAoF;AACpF,wBAAgB,cAAc,IAAI,MAAM,CAGvC;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAGpE;AAcD,mGAAmG;AACnG,qBAAa,mBAAoB,SAAQ,KAAK;IAC7C,YAAY,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAGvC;CACD;AA+GD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAyBjD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAEjE;AAgBD,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IAClC,OAAO,IAAI,IAAI,CAAC;CAChB;AAED,4DAA4D;AAC5D,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,CAsBlF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGhE;AAED,wFAAwF;AACxF,wBAAgB,2BAA2B,IAAI,WAAW,CAAC,MAAM,CAAC,CAEjE;AAED,0EAA0E;AAC1E,wBAAgB,kCAAkC,IAAI,IAAI,CAOzD"}

package/dist/core/tools/session-temp-dir.js ADDED Viewed

@@ -0,0 +1,409 @@
+/**
+ * Owner- and session-scoped temp storage for tool output files.
+ *
+ * Every file a tool spills to the system temp directory (bash overflow logs,
+ * async bash logs, `OutputAccumulator` spill files, and the in-memory-session
+ * tool-result fallback) lands under:
+ *
+ * ```text
+ * <tmpdir>/<APP_NAME>-<owner>/<sanitized-session-id>/
+ * ```
+ *
+ * The owner segment mirrors the upstream Claude Code `claude-{uid}` convention
+ * (mehmoodosman/claude-code): a shared multi-user temp directory must never let
+ * one account write into (or read) another account's tree. The session segment
+ * makes the tree reapable as a unit by the age-based sweeper in
+ * `session-temp-cleanup.ts` once the session is long gone.
+ */
+import { createHash } from "node:crypto";
+import { chmodSync, lstatSync, mkdirSync, realpathSync, rmSync } from "node:fs";
+import { tmpdir, userInfo } from "node:os";
+import { dirname, join, sep } from "node:path";
+import { APP_NAME } from "../../config.js";
+import { getErrnoCode } from "./errno.js";
+import { resetWindowsDirectorySecurityStateForTesting, verifyWindowsDirectorySecurity, } from "./windows-directory-security.js";
+/** Directory mode for every directory this module creates (owner-only). */
+export const SESSION_TEMP_DIR_MODE = 0o700;
+/** File mode for persisted tool-output files (owner-only). */
+export const SESSION_TEMP_FILE_MODE = 0o600;
+/** Longest path component this module will emit for a sanitized value. */
+const MAX_PATH_COMPONENT_LENGTH = 64;
+const FALLBACK_SESSION_COMPONENT = "session";
+const FALLBACK_OWNER_COMPONENT = "user";
+/**
+ * Reduce a value to a single safe path component.
+ *
+ * Disallowed characters collapse to `_`; leading `.`/`_` and trailing `.`/`_`
+ * are stripped so the result can never be `.`, `..`, a hidden sweeper marker
+ * file name, or anything that escapes the parent directory. Trimming uses a
+ * linear scan rather than a `/^[._]+|[._]+$/` regex to avoid polynomial-time
+ * backtracking on adversarial ids (CodeQL js/polynomial-redos).
+ */
+export function sanitizeTempPathComponent(value, fallback) {
+    const collapsed = value.replace(/[^a-zA-Z0-9._-]+/g, "_");
+    let start = 0;
+    let end = collapsed.length;
+    while (start < end && (collapsed[start] === "_" || collapsed[start] === ".")) {
+        start++;
+    }
+    while (end > start && (collapsed[end - 1] === "_" || collapsed[end - 1] === ".")) {
+        end--;
+    }
+    const sanitized = collapsed.slice(start, end).slice(0, MAX_PATH_COMPONENT_LENGTH);
+    return sanitized.length > 0 ? sanitized : fallback;
+}
+let cachedOwnerComponent;
+/**
+ * Derive the owner component for a named (non-uid) account.
+ *
+ * Sanitizing a name to a safe path component is lossy, and two distinct
+ * accounts can reduce to the same component (`aliceé` and `aliceø` both yield
+ * `alice_`). Where the system temp directory is machine-wide and
+ * shared-accessible, that would put two accounts in one tree. Appending a short
+ * digest of the raw identity keeps distinct accounts on distinct roots, with
+ * the readable component in front so the directory stays recognizable.
+ *
+ * This prevents collision; it is not owner verification. Ownership is proven
+ * separately by `verifyOwnedDirectory` — a uid check on POSIX, an owner-SID
+ * and DACL check on Windows.
+ *
+ * Exported as a pure function so the collision property can be tested directly:
+ * its only caller reaches this branch on Windows, which a POSIX test host
+ * cannot enter.
+ */
+export function deriveOwnerComponent(rawIdentity) {
+    // Windows account names are case-insensitive, so `Alice` and `alice` are one
+    // account and must resolve to one root. Normalize before both the readable
+    // component and the digest: normalizing only the digest would still emit two
+    // spellings of one directory, which NTFS then treats as the same path while
+    // the sweeper's bookkeeping sees two.
+    const normalized = rawIdentity.toLowerCase();
+    const readable = sanitizeTempPathComponent(normalized, FALLBACK_OWNER_COMPONENT);
+    const digest = createHash("sha256").update(normalized).digest("hex").slice(0, 8);
+    return `${readable}-${digest}`;
+}
+/**
+ * Assemble the account identity used where there is no uid.
+ *
+ * `userInfo().username` returns the bare account name, so `CONTOSO\Alice` and
+ * `FABRIKAM\Alice` would otherwise be one identity and share a tree. Exported
+ * for tests: its caller only reaches this branch on Windows.
+ */
+export function windowsPrincipal(name) {
+    const account = name || process.env.USERNAME || process.env.USER || "";
+    // USERDOMAIN is the NetBIOS domain and is set for both domain and local
+    // accounts; USERDNSDOMAIN appears only on domain-joined hosts and
+    // distinguishes two forests that share a NetBIOS name. Neither is
+    // authoritative on its own, so both take part in the identity.
+    const domain = process.env.USERDNSDOMAIN || process.env.USERDOMAIN || "";
+    return domain ? `${domain}\\${account}` : account;
+}
+/**
+ * Identify the account that owns the temp tree.
+ *
+ * POSIX uses the numeric uid, which is already collision-free. Windows has no
+ * `process.getuid`, so the domain-qualified principal stands in.
+ */
+function ownerComponent() {
+    if (cachedOwnerComponent !== undefined) {
+        return cachedOwnerComponent;
+    }
+    const uid = typeof process.getuid === "function" ? process.getuid() : undefined;
+    if (typeof uid === "number" && Number.isFinite(uid)) {
+        cachedOwnerComponent = String(uid);
+        return cachedOwnerComponent;
+    }
+    let name;
+    try {
+        name = userInfo().username;
+    }
+    catch {
+        // A container without a passwd entry cannot name the account; the env
+        // fallback inside windowsPrincipal still separates the common case.
+        name = undefined;
+    }
+    cachedOwnerComponent = deriveOwnerComponent(windowsPrincipal(name));
+    return cachedOwnerComponent;
+}
+let cachedBaseTempDirs;
+/**
+ * Preserve the OS-provided temp spelling for returned paths while caching a
+ * canonical form for internal component checks (macOS `/var` → `/private/var`,
+ * for example). Nothing below the base is resolved through `realpath`.
+ */
+function baseTempDirs() {
+    const raw = tmpdir();
+    if (cachedBaseTempDirs?.raw === raw) {
+        return cachedBaseTempDirs;
+    }
+    let canonical = raw;
+    try {
+        canonical = realpathSync(raw);
+    }
+    catch {
+        // An unresolvable temp directory is checked as given.
+    }
+    cachedBaseTempDirs = { raw, canonical };
+    return cachedBaseTempDirs;
+}
+/** `<tmpdir>/<APP_NAME>-<owner>` — the root every session temp tree lives under. */
+export function getTempRootDir() {
+    const app = sanitizeTempPathComponent(APP_NAME, "atomic");
+    return join(baseTempDirs().raw, `${app}-${ownerComponent()}`);
+}
+/**
+ * The temp directory path for a session, without creating it.
+ *
+ * Falls back to the process-scoped component when no session id is available,
+ * so a tool running outside a transcript session still writes inside the
+ * owner-scoped root instead of directly into the system temp directory.
+ */
+export function resolveSessionTempDirPath(sessionId) {
+    const id = sessionId ?? activeSessionId ?? `pid-${process.pid}`;
+    return join(getTempRootDir(), sanitizeTempPathComponent(id, FALLBACK_SESSION_COMPONENT));
+}
+const ensuredDirs = new Set();
+/** An existing real directory — not a symlink, not a file, not missing. */
+function isRealDirectory(path) {
+    try {
+        const stat = lstatSync(path);
+        return stat.isDirectory() && !stat.isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}
+/** Raised when a temp directory cannot be created or trusted; callers degrade to no spill file. */
+export class TempDirRefusedError extends Error {
+    constructor(path, reason) {
+        super(`Refusing to use temp directory ${path}: ${reason}`);
+        this.name = "TempDirRefusedError";
+    }
+}
+/**
+ * Confirm one existing component is a directory this account owns, at mode 0700.
+ *
+ * A looser mode is tightened and re-checked; a component owned by another
+ * account, or one whose mode cannot be tightened, is refused rather than used.
+ *
+ * Windows has no uid or POSIX mode, so the proof comes from the security
+ * descriptor instead: the owner SID must be a trusted principal and the DACL
+ * must grant access to trusted principals only
+ * (see `windows-directory-security.ts`). Node exposes neither — `lstatSync`
+ * reports uid/gid 0 on Windows — so the read goes through a PowerShell
+ * `Get-Acl` subprocess. Successful verifications are cached per path per
+ * process, keyed to the directory's metadata identity so a swapped directory
+ * or an in-place DACL edit forces a fresh read. Domain-qualifying the
+ * principal (see `windowsPrincipal`) stops two accounts *colliding* by
+ * accident, which is a different problem and is not a substitute for this
+ * verification.
+ */
+function verifyOwnedDirectory(path, known) {
+    let stat = known ?? lstatSync(path);
+    if (stat.isSymbolicLink()) {
+        throw new TempDirRefusedError(path, "it is a symbolic link");
+    }
+    if (!stat.isDirectory()) {
+        throw new TempDirRefusedError(path, "it is not a directory");
+    }
+    if (process.platform === "win32") {
+        const refusal = verifyWindowsDirectorySecurity(path);
+        if (refusal !== undefined) {
+            throw new TempDirRefusedError(path, refusal);
+        }
+        return;
+    }
+    const uid = typeof process.getuid === "function" ? process.getuid() : undefined;
+    if (typeof uid === "number" && stat.uid !== uid) {
+        throw new TempDirRefusedError(path, "it is owned by another account");
+    }
+    if ((stat.mode & 0o777) === SESSION_TEMP_DIR_MODE) {
+        return;
+    }
+    try {
+        chmodSync(path, SESSION_TEMP_DIR_MODE);
+        stat = lstatSync(path);
+    }
+    catch {
+        throw new TempDirRefusedError(path, "its permissions could not be tightened");
+    }
+    if ((stat.mode & 0o777) !== SESSION_TEMP_DIR_MODE) {
+        throw new TempDirRefusedError(path, "its permissions could not be tightened");
+    }
+}
+/**
+ * Create or adopt one path component, never following a link to get there.
+ *
+ * Creation is non-recursive on purpose: `mkdir -p` resolves an existing symlink
+ * on the way down, which is how a link planted at the predictable owner root
+ * redirects every later write outside the tree.
+ */
+function ensureOwnedDirectory(path) {
+    let stat;
+    try {
+        stat = lstatSync(path);
+    }
+    catch {
+        stat = undefined;
+    }
+    if (stat === undefined) {
+        try {
+            mkdirSync(path, { recursive: false, mode: SESSION_TEMP_DIR_MODE });
+        }
+        catch (error) {
+            // A concurrent creator winning the race is fine; anything else is not.
+            if (getErrnoCode(error) !== "EEXIST") {
+                throw new TempDirRefusedError(path, "it could not be created");
+            }
+        }
+        verifyOwnedDirectory(path);
+        return;
+    }
+    verifyOwnedDirectory(path, stat);
+}
+/**
+ * Adopt the final component, replacing something that is not a directory.
+ *
+ * Only the leaf gets this treatment: a stale file or link left where a session
+ * directory belongs is ours to clear, and removing a symlink removes the link
+ * alone. A parent — above all the owner root — is refused instead, because
+ * deleting it would be acting on a directory this process does not own.
+ */
+function ensureLeafDirectory(dir) {
+    try {
+        if (!lstatSync(dir).isDirectory()) {
+            rmSync(dir, { force: true });
+        }
+    }
+    catch {
+        // Nothing at the path yet, or it cannot be inspected; creation decides.
+    }
+    ensureOwnedDirectory(dir);
+}
+/** Map a lexical temp child to the same path below the canonical temp base. */
+function canonicalTempChild(dir, base) {
+    for (const candidate of [base.raw, base.canonical]) {
+        const prefix = `${candidate}${sep}`;
+        if (dir.startsWith(prefix)) {
+            return join(base.canonical, dir.slice(prefix.length));
+        }
+    }
+    return undefined;
+}
+/**
+ * Create `dir` with owner-only permissions, validating every component below the
+ * system temp directory.
+ *
+ * Temp children always revalidate the canonical owner root and every later
+ * component, even after a cache hit. A system temp reaper can delete a session
+ * tree, and an attacker must not turn a memoized path into a symlink bypass.
+ * Caller-owned paths outside the temp base may use the memo after confirming
+ * the leaf is still a real directory.
+ *
+ * Throws {@link TempDirRefusedError} when a component cannot be trusted. Every
+ * caller treats that as "no spill file", never as a fatal error: failing closed
+ * loses a convenience artifact, while failing open writes tool output into a
+ * directory someone else controls.
+ */
+export function ensureTempDir(dir) {
+    const base = baseTempDirs();
+    const checkedDir = canonicalTempChild(dir, base);
+    if (checkedDir !== undefined) {
+        const prefix = `${base.canonical}${sep}`;
+        const parts = checkedDir
+            .slice(prefix.length)
+            .split(sep)
+            .filter((part) => part.length > 0);
+        let current = base.canonical;
+        for (const part of parts.slice(0, -1)) {
+            current = join(current, part);
+            ensureOwnedDirectory(current);
+        }
+        ensureLeafDirectory(checkedDir);
+    }
+    else {
+        // A caller-supplied directory outside the system temp base (a session
+        // directory, for instance) is the caller's to own; only the leaf is ours.
+        if (!(ensuredDirs.has(dir) && isRealDirectory(dir))) {
+            mkdirSync(dirname(dir), { recursive: true, mode: SESSION_TEMP_DIR_MODE });
+            ensureLeafDirectory(dir);
+        }
+    }
+    ensuredDirs.add(dir);
+    return dir;
+}
+/**
+ * Resolve and create the temp directory for a session.
+ *
+ * Pass an already-resolved directory to reuse a caller-provided path (still
+ * created lazily with the same mode).
+ */
+export function getSessionTempDir(sessionId) {
+    return ensureTempDir(resolveSessionTempDirPath(sessionId));
+}
+/** Create `explicitDir` when supplied, otherwise the active session's temp directory. */
+export function ensureSessionTempDir(explicitDir) {
+    return ensureTempDir(explicitDir ?? resolveSessionTempDirPath());
+}
+let activeSessionId;
+/**
+ * Refcounted protection for directories the sweeper must not reap.
+ *
+ * A count rather than a set, because protection has more than one holder and
+ * more than one lifetime: a session protects its own tree, an async spill writer
+ * outlives the session object it started under, and one session can be replaced
+ * by another wrapping the same paths. Releasing one holder must not unprotect a
+ * directory another is still writing to, and a session that is gone must stop
+ * protecting a tree the startup sweep exists to collect.
+ */
+const protectedPathCounts = new Map();
+/** Protect `paths` until the returned lease is released. */
+export function acquireProtectedPaths(paths) {
+    const claimed = paths.filter((path) => path.length > 0);
+    for (const path of claimed) {
+        protectedPathCounts.set(path, (protectedPathCounts.get(path) ?? 0) + 1);
+    }
+    let released = false;
+    return {
+        release() {
+            if (released) {
+                return;
+            }
+            released = true;
+            for (const path of claimed) {
+                const remaining = (protectedPathCounts.get(path) ?? 0) - 1;
+                if (remaining > 0) {
+                    protectedPathCounts.set(path, remaining);
+                }
+                else {
+                    protectedPathCounts.delete(path);
+                }
+            }
+        },
+    };
+}
+/**
+ * Make `sessionId` the default target for writers without a session handle.
+ *
+ * Deliberately separate from protection: a disposed session must stop protecting
+ * its tree, but whichever session ran last still names where an unattached
+ * writer spills.
+ */
+export function setActiveSessionTempId(sessionId) {
+    activeSessionId = sessionId;
+    return resolveSessionTempDirPath(sessionId);
+}
+/** Directories this process must not reap: session temp trees and live tool-results. */
+export function getProtectedSessionTempDirs() {
+    return new Set(protectedPathCounts.keys());
+}
+/** Test seam: forget the process-level active/protected session state. */
+export function resetSessionTempDirStateForTesting() {
+    activeSessionId = undefined;
+    protectedPathCounts.clear();
+    ensuredDirs.clear();
+    cachedOwnerComponent = undefined;
+    cachedBaseTempDirs = undefined;
+    resetWindowsDirectorySecurityStateForTesting();
+}
+//# sourceMappingURL=session-temp-dir.js.map