@coderifts/agent-guard 12.0.0 → 14.0.0

package/README.md

@@ -236,7 +236,7 @@ outside the returned table — residual `calls_outside_guarded_path_invisible`.
 
 The `withCodeRifts` example above is the **entry point** (absent profile: freshness and
 conditional-write stay opt-in). For production, lock the fail-closed conjunction with
-`profile: 'ENFORCING_STRICT'` (shipped guard@8.1.0; current package 8.3.0). Construction
+`profile: 'ENFORCING_STRICT'` (shipped guard@8.1.0; current package 13.0.0). Construction
 **aborts** if you opt down any locked flag, omit `resolvePriorContent`, or omit the execution
 chain (`executionGrant: { enabled: true }`, required since 9.8.0).
 

package/dist/cjs/atomic-profile.d.ts

@@ -0,0 +1,61 @@
+/**
+ * ENFORCING_ATOMIC_V1 — versioned profile (roadmap 1090).
+ *
+ * STRICT_V1 is frozen and is not edited. ATOMIC is a NEW profile: construction
+ * aborts with ATOMIC_PROFILE_UNSATISFIED when the invariant conjunction is not
+ * wired. Executor behaviour (nonce consume-once, CAS, read-back, attestation)
+ * is still observed per call; construction only demands the wiring.
+ */
+export declare const PROFILE_ENFORCING_ATOMIC_V1: "ENFORCING_ATOMIC_V1";
+export declare const GUARD_ATOMIC_WIRE_VALUE: "ENFORCING_ATOMIC";
+export type AtomicProfileSpelling = 'ENFORCING_ATOMIC' | 'ENFORCING_ATOMIC_V1';
+export declare const ATOMIC_PROFILE_UNSATISFIED: "ATOMIC_PROFILE_UNSATISFIED";
+export type AtomicOutcome = 'AUTHORIZED_COMMITTED' | 'REFUSED' | 'INDETERMINATE';
+/** Frozen invariant names — adding one is ATOMIC_V2, not an edit here. */
+export declare const ATOMIC_INVARIANTS: readonly ["verified_receipt", "verified_grant_v2", "exact_executor", "exact_target", "after_payload_hash", "fresh_nonce", "nonce_consumed_once", "target_CAS", "read_back", "executor_attestation", "credential_boundary"];
+export type MutatorRegister = {
+    registerMutator: (name: string) => MutatorRegister;
+    has: (name: string) => boolean;
+    list: () => readonly string[];
+};
+export declare function createMutatorRegister(): MutatorRegister;
+export declare function isEnforcingAtomic(profile: unknown): boolean;
+export type AtomicConstructionInput = {
+    executionGrant?: {
+        enabled?: boolean;
+        resolveStateNonce?: unknown;
+        grantVersion?: string;
+    } | null;
+    executorId?: string;
+    adapterId?: string;
+    targetUri?: string;
+    executorAttestation?: {
+        registry?: unknown;
+    } | null;
+    mutatorRegister?: MutatorRegister | null;
+    casAdapter?: unknown;
+    readBack?: unknown;
+    credentialBoundary?: unknown;
+};
+export declare function atomicConstructionProblems(input: AtomicConstructionInput): string[];
+export declare function throwAtomicUnsatisfied(problems: string[]): never;
+/**
+ * Per-call outcome union. Host-claimed commit never AUTHORIZED_COMMITTED.
+ */
+export declare function atomicOutcome(input: {
+    receiptVerified: boolean;
+    grantV2Valid: boolean;
+    executorMatch: boolean;
+    targetMatch: boolean;
+    nonceFresh: boolean;
+    nonceConsumedOnce: boolean;
+    casCommitted: boolean;
+    readBackOk: boolean;
+    executorAttested: boolean;
+    mutatorRegistered: boolean;
+    authUnavailable?: boolean;
+    nonceStoreUnavailable?: boolean;
+    readBackUnavailable?: boolean;
+    signerUnavailableAfterCommit?: boolean;
+}): AtomicOutcome;
+//# sourceMappingURL=atomic-profile.d.ts.map

package/dist/cjs/atomic-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-profile.d.ts","sourceRoot":"","sources":["../../src/atomic-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,EAAG,qBAA8B,CAAC;AAC1E,eAAO,MAAM,uBAAuB,EAAG,kBAA2B,CAAC;AACnE,MAAM,MAAM,qBAAqB,GAAG,kBAAkB,GAAG,qBAAqB,CAAC;AAE/E,eAAO,MAAM,0BAA0B,EAAG,4BAAqC,CAAC;AAEhF,MAAM,MAAM,aAAa,GAAG,sBAAsB,GAAG,SAAS,GAAG,eAAe,CAAC;AAEjF,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,4NAYnB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG;IAC5B,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,eAAe,CAAC;IACnD,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/B,IAAI,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,wBAAgB,qBAAqB,IAAI,eAAe,CAkBvD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,cAAc,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACpD,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,EAAE,CAsCnF;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAOhE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACxC,GAAG,aAAa,CAahB"}

package/dist/cjs/atomic-profile.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ATOMIC_INVARIANTS = exports.ATOMIC_PROFILE_UNSATISFIED = exports.GUARD_ATOMIC_WIRE_VALUE = exports.PROFILE_ENFORCING_ATOMIC_V1 = void 0;
+exports.createMutatorRegister = createMutatorRegister;
+exports.isEnforcingAtomic = isEnforcingAtomic;
+exports.atomicConstructionProblems = atomicConstructionProblems;
+exports.throwAtomicUnsatisfied = throwAtomicUnsatisfied;
+exports.atomicOutcome = atomicOutcome;
+/**
+ * ENFORCING_ATOMIC_V1 — versioned profile (roadmap 1090).
+ *
+ * STRICT_V1 is frozen and is not edited. ATOMIC is a NEW profile: construction
+ * aborts with ATOMIC_PROFILE_UNSATISFIED when the invariant conjunction is not
+ * wired. Executor behaviour (nonce consume-once, CAS, read-back, attestation)
+ * is still observed per call; construction only demands the wiring.
+ */
+exports.PROFILE_ENFORCING_ATOMIC_V1 = 'ENFORCING_ATOMIC_V1';
+exports.GUARD_ATOMIC_WIRE_VALUE = 'ENFORCING_ATOMIC';
+exports.ATOMIC_PROFILE_UNSATISFIED = 'ATOMIC_PROFILE_UNSATISFIED';
+/** Frozen invariant names — adding one is ATOMIC_V2, not an edit here. */
+exports.ATOMIC_INVARIANTS = Object.freeze([
+    'verified_receipt',
+    'verified_grant_v2',
+    'exact_executor',
+    'exact_target',
+    'after_payload_hash',
+    'fresh_nonce',
+    'nonce_consumed_once',
+    'target_CAS',
+    'read_back',
+    'executor_attestation',
+    'credential_boundary',
+]);
+function createMutatorRegister() {
+    const names = new Set();
+    const api = {
+        registerMutator(name) {
+            if (typeof name !== 'string' || name.trim() === '') {
+                throw new Error('registerMutator: non-empty name required');
+            }
+            names.add(name);
+            return api;
+        },
+        has(name) {
+            return names.has(name);
+        },
+        list() {
+            return Object.freeze([...names]);
+        },
+    };
+    return api;
+}
+function isEnforcingAtomic(profile) {
+    return profile === 'ENFORCING_ATOMIC' || profile === exports.PROFILE_ENFORCING_ATOMIC_V1;
+}
+function atomicConstructionProblems(input) {
+    const problems = [];
+    const grant = input.executionGrant;
+    if (!(grant && grant.enabled === true)) {
+        problems.push('verified_grant_v2: executionGrant.enabled must be true');
+    }
+    if (!(grant && grant.grantVersion === 'v2')) {
+        problems.push('verified_grant_v2: executionGrant.grantVersion must be \'v2\'');
+    }
+    if (typeof grant?.resolveStateNonce !== 'function') {
+        problems.push('fresh_nonce: executionGrant.resolveStateNonce required');
+    }
+    if (typeof input.executorId !== 'string' || input.executorId.length === 0) {
+        problems.push('exact_executor: executorId required');
+    }
+    if (typeof input.targetUri !== 'string' || input.targetUri.length === 0) {
+        problems.push('exact_target: targetUri required');
+    }
+    if (typeof input.adapterId !== 'string' || input.adapterId.length === 0) {
+        problems.push('after_payload_hash: adapterId required (payload bind surface)');
+    }
+    if (!(input.executorAttestation && input.executorAttestation.registry)) {
+        problems.push('executor_attestation: executorAttestation.registry required');
+    }
+    if (!input.mutatorRegister || typeof input.mutatorRegister.registerMutator !== 'function'
+        || input.mutatorRegister.list().length === 0) {
+        problems.push('credential_boundary: mutatorRegister with ≥1 registerMutator required');
+    }
+    if (input.casAdapter == null) {
+        problems.push('target_CAS: casAdapter required');
+    }
+    if (typeof input.readBack !== 'function') {
+        problems.push('read_back: readBack function required');
+    }
+    if (input.credentialBoundary !== true && typeof input.credentialBoundary !== 'object') {
+        problems.push('credential_boundary: credentialBoundary assertion required');
+    }
+    return problems;
+}
+function throwAtomicUnsatisfied(problems) {
+    const err = new Error(`withCodeRifts: ${exports.ATOMIC_PROFILE_UNSATISFIED} — ${problems.length} condition(s):\n`
+        + problems.map((p) => `  - ${p}`).join('\n'));
+    err.code = exports.ATOMIC_PROFILE_UNSATISFIED;
+    throw err;
+}
+/**
+ * Per-call outcome union. Host-claimed commit never AUTHORIZED_COMMITTED.
+ */
+function atomicOutcome(input) {
+    if (input.authUnavailable || input.nonceStoreUnavailable || input.readBackUnavailable) {
+        return 'INDETERMINATE';
+    }
+    if (input.signerUnavailableAfterCommit && input.casCommitted) {
+        return 'INDETERMINATE';
+    }
+    const ok = input.receiptVerified && input.grantV2Valid && input.executorMatch
+        && input.targetMatch && input.nonceFresh && input.nonceConsumedOnce
+        && input.casCommitted && input.readBackOk && input.executorAttested
+        && input.mutatorRegistered;
+    if (ok && input.executorAttested)
+        return 'AUTHORIZED_COMMITTED';
+    return 'REFUSED';
+}
+//# sourceMappingURL=atomic-profile.js.map

package/dist/cjs/atomic-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-profile.js","sourceRoot":"","sources":["../../src/atomic-profile.ts"],"names":[],"mappings":";;;AAqCA,sDAkBC;AAED,8CAEC;AAcD,gEAsCC;AAED,wDAOC;AAKD,sCA4BC;AAzJD;;;;;;;GAOG;AACU,QAAA,2BAA2B,GAAG,qBAA8B,CAAC;AAC7D,QAAA,uBAAuB,GAAG,kBAA2B,CAAC;AAGtD,QAAA,0BAA0B,GAAG,4BAAqC,CAAC;AAIhF,0EAA0E;AAC7D,QAAA,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,cAAc;IACd,oBAAoB;IACpB,aAAa;IACb,qBAAqB;IACrB,YAAY;IACZ,WAAW;IACX,sBAAsB;IACtB,qBAAqB;CACb,CAAC,CAAC;AAQZ,SAAgB,qBAAqB;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,GAAG,GAAoB;QAC3B,eAAe,CAAC,IAAY;YAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,OAAO,GAAG,CAAC;QACb,CAAC;QACD,GAAG,CAAC,IAAY;YACd,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,IAAI;YACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,iBAAiB,CAAC,OAAgB;IAChD,OAAO,OAAO,KAAK,kBAAkB,IAAI,OAAO,KAAK,mCAA2B,CAAC;AACnF,CAAC;AAcD,SAAgB,0BAA0B,CAAC,KAA8B;IACvE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC;IACnC,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,KAAK,EAAE,iBAAiB,KAAK,UAAU,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,OAAO,KAAK,CAAC,eAAe,CAAC,eAAe,KAAK,UAAU;WAClF,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QACtF,QAAQ,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,sBAAsB,CAAC,QAAkB;IACvD,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,kBAAkB,kCAA0B,MAAM,QAAQ,CAAC,MAAM,kBAAkB;UACjF,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7C,CAAC;IACD,GAAgC,CAAC,IAAI,GAAG,kCAA0B,CAAC;IACpE,MAAM,GAAG,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,KAe7B;IACC,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,qBAAqB,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QACtF,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,CAAC,4BAA4B,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7D,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,aAAa;WACxE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,iBAAiB;WAChE,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,gBAAgB;WAChE,KAAK,CAAC,iBAAiB,CAAC;IAC7B,IAAI,EAAE,IAAI,KAAK,CAAC,gBAAgB;QAAE,OAAO,sBAAsB,CAAC;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/cjs/cas-adapters/fs-default-wire.d.ts

@@ -1,4 +1,6 @@
 import type { ExecuteIfUnchangedOutcome } from '../conditional-write.js';
+import type { VersionToken } from '../conditional-write.js';
+import type { FsObjectIdentity } from './fs.js';
 /** Unambiguous fs target: a non-empty `path` string on tool arguments (Write convention). */
 export declare function inferFsPathFromArgs(args: unknown): string | null;
 /**
@@ -6,20 +8,48 @@ export declare function inferFsPathFromArgs(args: unknown): string | null;
  * is not an Edit (no old_string/new_string). Fragments are not a whole-file CAS.
  */
 export declare function inferFullFileWriteContent(args: unknown): string | null;
+/**
+ * Options carrying the AUTHORIZATION-TIME measurement into the write.
+ */
+export type FsCasWireOptions = {
+    /**
+     * Token of the state the AUTHORIZATION examined, measured at T1 by the runner — before preflight,
+     * not at write time. This is the whole fix: see the note on wrapWriteWithFsCas.
+     */
+    expected_token?: VersionToken | null;
+    /** Identity (dev+ino) of that same T1 object. Catches an inode swap the token cannot see. */
+    expected_identity?: FsObjectIdentity | null;
+};
+/** The pair a runner measures at T1. Both halves describe the SAME observation. */
+export type FsAuthorizationMeasurement = {
+    expected_token: VersionToken;
+    expected_identity: FsObjectIdentity | null;
+};
 /**
  * Wire the FS adapter when path + full-file contents are both present.
  * Otherwise run the host write unchanged. If the host already returned an
  * ExecuteIfUnchangedOutcome, pass it through (do not wrap again).
  *
- * KNOWN-OPEN RESIDUAL — the expected token is SELF-FETCHED, not authorization-bound.
- * createFsVersionToken runs HERE, inside executeFactory: after preflight (T1) and after the T2
- * execution-time recheck. So the token describes whatever state the file holds at write time, not
- * the state the authorization examined. The CAS then asks "did this change since I read it a
- * microsecond ago", which is a real check of a vacuous window: a writer that lands between T2 and
- * this read has its state adopted as the legitimate starting point, and the outcome still reports
- * status:'committed'. Measured, not inferred — see guard.ts's "no observed_token_at_commit CAS".
- * Closing it means threading a token measured at authorization into this call rather than reading
- * one here; that is a behavioural change with its own proof and is deliberately NOT done here.
+ * THE TOKEN MUST COME FROM T1. This function used to call createFsVersionToken HERE, inside
+ * executeFactory — after preflight (T1) and after the T2 recheck — and then condition the write on
+ * that self-fetched value. Measured on 12.0.0: with a writer landing between T2 and that read, the
+ * CAS adopted the interfering state as its legitimate starting point and still reported
+ * status:'committed' with enforced:true. It was a real check of a vacuous window — it asked whether
+ * the state had changed since a read a microsecond earlier, which is a question whose answer is
+ * always no and which says nothing about the state the authorization actually examined.
+ *
+ * Now the expected token is supplied by the caller from the T1 measurement. When it is ABSENT we do
+ * NOT fall back to self-fetching, because that is precisely the vacuous claim: the write runs
+ * unwrapped and the guarantee is NON_ATOMIC, which is the honest thing to report and which
+ * requireConditionalWrite will refuse. A weaker guarantee is reportable; a false one is not.
+ */
+export declare function wrapWriteWithFsCas<T>(args: unknown, write: () => Promise<T> | T, opts?: FsCasWireOptions): Promise<T | ExecuteIfUnchangedOutcome<unknown>>;
+/**
+ * The T1 measurement itself — call this in the RUNNER, before preflight, and pass the result to
+ * wrapWriteWithFsCas. Returns null when this call is not an inferable full-file FS write, or when
+ * the path is unsafe / unreadable (a token we could not measure is not a token we may claim).
  */
-export declare function wrapWriteWithFsCas<T>(args: unknown, write: () => Promise<T> | T): Promise<T | ExecuteIfUnchangedOutcome<unknown>>;
+export declare function measureFsAuthorization(args: unknown): Promise<FsAuthorizationMeasurement | null>;
+/** Convenience: the token half only. */
+export declare function measureFsAuthorizationToken(args: unknown): Promise<VersionToken | null>;
 //# sourceMappingURL=fs-default-wire.d.ts.map

package/dist/cjs/cas-adapters/fs-default-wire.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs-default-wire.d.ts","sourceRoot":"","sources":["../../../src/cas-adapters/fs-default-wire.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAGzE,6FAA6F;AAC7F,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQhE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQtE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC1B,OAAO,CAAC,CAAC,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAmBjD"}
+{"version":3,"file":"fs-default-wire.d.ts","sourceRoot":"","sources":["../../../src/cas-adapters/fs-default-wire.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAGhD,6FAA6F;AAC7F,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQhE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQtE;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;OAGG;IACH,cAAc,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,6FAA6F;IAC7F,iBAAiB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC7C,CAAC;AAEF,mFAAmF;AACnF,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,EAAE,YAAY,CAAC;IAC7B,iBAAiB,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC5C,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAC3B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,CAAC,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAgBjD;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAetG;AAED,wCAAwC;AACxC,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAG7F"}

package/dist/cjs/cas-adapters/fs-default-wire.js

@@ -15,6 +15,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.inferFsPathFromArgs = inferFsPathFromArgs;
 exports.inferFullFileWriteContent = inferFullFileWriteContent;
 exports.wrapWriteWithFsCas = wrapWriteWithFsCas;
+exports.measureFsAuthorization = measureFsAuthorization;
+exports.measureFsAuthorizationToken = measureFsAuthorizationToken;
 const cas_attestation_js_1 = require("../cas-attestation.js");
 const fs_js_1 = require("./fs.js");
 /** Unambiguous fs target: a non-empty `path` string on tool arguments (Write convention). */
@@ -51,31 +53,29 @@ function inferFullFileWriteContent(args) {
  * Otherwise run the host write unchanged. If the host already returned an
  * ExecuteIfUnchangedOutcome, pass it through (do not wrap again).
  *
- * KNOWN-OPEN RESIDUAL — the expected token is SELF-FETCHED, not authorization-bound.
- * createFsVersionToken runs HERE, inside executeFactory: after preflight (T1) and after the T2
- * execution-time recheck. So the token describes whatever state the file holds at write time, not
- * the state the authorization examined. The CAS then asks "did this change since I read it a
- * microsecond ago", which is a real check of a vacuous window: a writer that lands between T2 and
- * this read has its state adopted as the legitimate starting point, and the outcome still reports
- * status:'committed'. Measured, not inferred — see guard.ts's "no observed_token_at_commit CAS".
- * Closing it means threading a token measured at authorization into this call rather than reading
- * one here; that is a behavioural change with its own proof and is deliberately NOT done here.
+ * THE TOKEN MUST COME FROM T1. This function used to call createFsVersionToken HERE, inside
+ * executeFactory — after preflight (T1) and after the T2 recheck — and then condition the write on
+ * that self-fetched value. Measured on 12.0.0: with a writer landing between T2 and that read, the
+ * CAS adopted the interfering state as its legitimate starting point and still reported
+ * status:'committed' with enforced:true. It was a real check of a vacuous window — it asked whether
+ * the state had changed since a read a microsecond earlier, which is a question whose answer is
+ * always no and which says nothing about the state the authorization actually examined.
+ *
+ * Now the expected token is supplied by the caller from the T1 measurement. When it is ABSENT we do
+ * NOT fall back to self-fetching, because that is precisely the vacuous claim: the write runs
+ * unwrapped and the guarantee is NON_ATOMIC, which is the honest thing to report and which
+ * requireConditionalWrite will refuse. A weaker guarantee is reportable; a false one is not.
  */
-async function wrapWriteWithFsCas(args, write) {
+async function wrapWriteWithFsCas(args, write, opts) {
     const filePath = inferFsPathFromArgs(args);
     const content = inferFullFileWriteContent(args);
-    if (filePath && content != null) {
-        let expected;
-        try {
-            expected = await (0, fs_js_1.createFsVersionToken)(filePath);
-        }
-        catch {
-            return write();
-        }
+    const expected = opts && typeof opts.expected_token === 'string' ? opts.expected_token : null;
+    if (filePath && content != null && expected !== null) {
         return (0, fs_js_1.writeFileIfUnchanged)({
             path: filePath,
             expected_token: expected,
             content,
+            ...(opts && 'expected_identity' in opts ? { expected_identity: opts.expected_identity ?? null } : {}),
         });
     }
     const raw = await write();
@@ -83,4 +83,32 @@ async function wrapWriteWithFsCas(args, write) {
         return raw;
     return raw;
 }
+/**
+ * The T1 measurement itself — call this in the RUNNER, before preflight, and pass the result to
+ * wrapWriteWithFsCas. Returns null when this call is not an inferable full-file FS write, or when
+ * the path is unsafe / unreadable (a token we could not measure is not a token we may claim).
+ */
+async function measureFsAuthorization(args) {
+    const filePath = inferFsPathFromArgs(args);
+    const content = inferFullFileWriteContent(args);
+    if (!filePath || content == null)
+        return null;
+    try {
+        const target = await (0, fs_js_1.assertSafeCasPath)(filePath);
+        // Identity FIRST, then the token: both must describe the same observation, and taking identity
+        // first means a swap between them makes the token the newer of the two, which the pre-rename
+        // re-check then catches rather than silently accepting.
+        const expected_identity = await (0, fs_js_1.fsObjectIdentity)(target);
+        const expected_token = await (0, fs_js_1.createFsVersionToken)(target);
+        return { expected_token, expected_identity };
+    }
+    catch {
+        return null;
+    }
+}
+/** Convenience: the token half only. */
+async function measureFsAuthorizationToken(args) {
+    const m = await measureFsAuthorization(args);
+    return m ? m.expected_token : null;
+}
 //# sourceMappingURL=fs-default-wire.js.map

package/dist/cjs/cas-adapters/fs-default-wire.js.map

@@ -1 +1 @@
-{"version":3,"file":"fs-default-wire.js","sourceRoot":"","sources":["../../../src/cas-adapters/fs-default-wire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,YAAY,CAAC;;AAOb,kDAQC;AAMD,8DAQC;AAiBD,gDAsBC;AAlED,8DAAoE;AAEpE,mCAAqE;AAErE,6FAA6F;AAC7F,SAAgB,mBAAmB,CAAC,IAAa;IAC/C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,IAAI,GAAI,IAA2B,CAAC,IAAI,CAAC;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,IAAa;IACrD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;IACtD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QAClF,OAAO,CAAC,CAAC,OAAO,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,kBAAkB,CACtC,IAAa,EACb,KAA2B;IAE3B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,QAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QAChC,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAA,4BAAoB,EAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,IAAA,4BAAoB,EAAC;YAC1B,IAAI,EAAE,QAAQ;YACd,cAAc,EAAE,QAAQ;YACxB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC;IAC1B,IAAI,IAAA,gDAA2B,EAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"fs-default-wire.js","sourceRoot":"","sources":["../../../src/cas-adapters/fs-default-wire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,YAAY,CAAC;;AASb,kDAQC;AAMD,8DAQC;AAuCD,gDAoBC;AAOD,wDAeC;AAGD,kEAGC;AApHD,8DAAoE;AAIpE,mCAA0G;AAE1G,6FAA6F;AAC7F,SAAgB,mBAAmB,CAAC,IAAa;IAC/C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,IAAI,GAAI,IAA2B,CAAC,IAAI,CAAC;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,IAAa;IACrD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;IACtD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QAClF,OAAO,CAAC,CAAC,OAAO,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAqBD;;;;;;;;;;;;;;;;;GAiBG;AACI,KAAK,UAAU,kBAAkB,CACtC,IAAa,EACb,KAA2B,EAC3B,IAAuB;IAEvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9F,IAAI,QAAQ,IAAI,OAAO,IAAI,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACrD,OAAO,IAAA,4BAAoB,EAAC;YAC1B,IAAI,EAAE,QAAQ;YACd,cAAc,EAAE,QAAQ;YACxB,OAAO;YACP,GAAG,CAAC,IAAI,IAAI,mBAAmB,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtG,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC;IAC1B,IAAI,IAAA,gDAA2B,EAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,sBAAsB,CAAC,IAAa;IACxD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAiB,EAAC,QAAQ,CAAC,CAAC;QACjD,+FAA+F;QAC/F,6FAA6F;QAC7F,wDAAwD;QACxD,MAAM,iBAAiB,GAAG,MAAM,IAAA,wBAAgB,EAAC,MAAM,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,MAAM,IAAA,4BAAoB,EAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,wCAAwC;AACjC,KAAK,UAAU,2BAA2B,CAAC,IAAa;IAC7D,MAAM,CAAC,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC"}

package/dist/cjs/cas-adapters/fs.d.ts

@@ -21,6 +21,46 @@ export declare const FS_VERSION_TOKEN_PREFIX = "fs:v1:";
 export declare const FS_ABSENT_TOKEN: VersionToken;
 /** Extract content-hash segment from an fs:v1 token (null if absent/malformed). */
 export declare function fsTokenContentHash(token: VersionToken | null | undefined): string | null;
+/**
+ * Refuse a path this adapter must not treat as a CAS target.
+ *
+ * MEASURED ABSENT before this existed (2026-08-27): `..` was silently resolved and the write landed
+ * outside the intended directory, and a symlinked target was followed by stat/readFile while the
+ * rename replaced the LINK — so the check and the write referred to DIFFERENT objects. That object
+ * mismatch is the other half of the TOCTOU: a path interpreted twice can have a symlink swapped in
+ * between the two interpretations.
+ *
+ * Three refusals, each for a different escape:
+ *   - a literal `..` segment in the caller's own path (traversal, judged BEFORE resolution),
+ *   - a symlinked final component (lstat — the object we would check is not the one we would write).
+ *
+ * The parent directory is CANONICALISED rather than rejected. Requiring realpath(dir) === dir was
+ * written first and measured wrong within the hour: on macOS /var is itself a symlink, so every
+ * path under a normal temp directory was refused. A symlinked ancestor is not the danger — an
+ * ancestor that CHANGES between the check and the write is, and that is closed by the inode/device
+ * identity re-check in writeFileIfUnchanged, not by refusing ordinary filesystems. Resolving the
+ * parent once and building the target from it means both the check and the write name one object.
+ */
+export declare class UnsafeCasPathError extends Error {
+    readonly reason: 'path_traversal' | 'symlink_target';
+    readonly casPath: string;
+    constructor(reason: 'path_traversal' | 'symlink_target', casPath: string);
+}
+export declare function assertSafeCasPath(filePath: string): Promise<string>;
+/** Filesystem identity of the object a token was measured on. Evidence, not a comparison key. */
+export type FsObjectIdentity = {
+    dev: number;
+    ino: number;
+};
+/**
+ * Identity of the object CURRENTLY at a path, read through a FILE DESCRIPTOR.
+ *
+ * Opening once and fstat-ing the handle is what makes this an identity rather than another path
+ * interpretation: the fd names the object, so a symlink swapped in afterwards cannot redirect it.
+ * null when the path does not exist.
+ */
+export declare function fsObjectIdentity(filePath: string): Promise<FsObjectIdentity | null>;
+export declare function identitiesEqual(a: FsObjectIdentity | null | undefined, b: FsObjectIdentity | null | undefined): boolean;
 /**
  * Build a VersionToken from path: mtime (ms) + sha256 of file bytes.
  * Throws on I/O errors other than callers may catch. ENOENT → returns FS_ABSENT_TOKEN
@@ -36,6 +76,13 @@ export type WriteFileIfUnchangedArgs = {
     path: string;
     /** Token measured before the host decided to write (from createFsVersionToken). */
     expected_token: VersionToken;
+    /**
+     * Identity (dev+ino) of the object the AUTHORIZATION examined, from fsObjectIdentity at T1.
+     * Optional, and when omitted no identity claim is made. Supplying it is strictly stronger than
+     * the token alone: an inode swapped in carrying identical bytes and mtime produces an IDENTICAL
+     * token, so content equality cannot see it. null means "absent at T1" (create-if-absent).
+     */
+    expected_identity?: FsObjectIdentity | null;
     /** Full new file contents (utf8 string or Buffer). */
     content: string | Buffer;
 };
@@ -59,6 +106,8 @@ export declare function writeFileIfUnchanged(args: WriteFileIfUnchangedArgs): Pr
     path: string;
     bytes: number;
     written_content_hash: string;
+    checked_identity: FsObjectIdentity | null;
+    committed_identity: FsObjectIdentity | null;
 }>>;
 /**
  * Opt-in PriorContentResolver that reads a file path from tool arguments.

package/dist/cjs/cas-adapters/fs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../../src/cas-adapters/fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,EAGL,WAAW,EACX,KAAK,yBAAyB,EAC9B,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,WAAW,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,YAA6B,CAAC;AAM5D,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAQxF;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAmBlF;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAOnF;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,cAAc,EAAE,YAAY,CAAC;IAC7B,sDAAsD;IACtD,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,yBAAyB,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAsDnG;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,CAAC,EAAE;IACrD;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACrE,GAAG,oBAAoB,CAoBvB;AAED,0FAA0F;AAC1F,OAAO,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../../src/cas-adapters/fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,EAGL,WAAW,EACX,KAAK,yBAAyB,EAC9B,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,WAAW,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,YAA6B,CAAC;AAM5D,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAQxF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBACb,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,OAAO,EAAE,MAAM;CAMzE;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmCzE;AAED,iGAAiG;AACjG,MAAM,MAAM,gBAAgB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAazF;AAED,wBAAgB,eAAe,CAC7B,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,EACtC,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GACrC,OAAO,CAGT;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA2BlF;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAOnF;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,cAAc,EAAE,YAAY,CAAC;IAC7B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC5C,sDAAsD;IACtD,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,yBAAyB,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC1C,kBAAkB,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC7C,CAAC,CAAC,CAgGF;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,CAAC,EAAE;IACrD;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACrE,GAAG,oBAAoB,CAoBvB;AAED,0FAA0F;AAC1F,OAAO,EAAE,WAAW,EAAE,CAAC"}