@ganglion/xacpx 0.17.0-beta.2 → 0.17.0-beta.3

package/dist/cli.js

@@ -33889,6 +33889,7 @@ class WorkspaceFs {
         path: rel,
         content: binary ? "" : slice.toString("utf8"),
         size: info.size,
+        mtimeMs: info.mtimeMs,
         truncated: info.size > FILE_READ_CAP,
         binary
       };
@@ -33896,6 +33897,23 @@ class WorkspaceFs {
       await fh.close();
     }
   }
+  async writeFile(workspace3, relPath, content, expected) {
+    const { abs, rel } = await this.resolve(workspace3, relPath);
+    const info = await stat3(abs);
+    if (!info.isFile())
+      throw new Error("not-a-file");
+    if (info.size > FILE_READ_CAP)
+      throw new Error("file-too-large");
+    if (content.includes("\x00"))
+      throw new Error("is-binary");
+    if (Buffer.byteLength(content, "utf8") > FILE_READ_CAP)
+      throw new Error("file-too-large");
+    if (info.mtimeMs !== expected.mtimeMs || info.size !== expected.size)
+      throw new Error("stale-write");
+    await import_write_file_atomic3.default(abs, content);
+    const after = await stat3(abs);
+    return { path: rel, mtimeMs: after.mtimeMs, size: after.size };
+  }
   async search(workspace3, opts) {
     const { root, abs: base, rel: scopeRel } = await this.resolve(workspace3, opts.path);
     const query = opts.query.trim();
@@ -34276,8 +34294,9 @@ function globToRegExp(glob) {
     return /$^/;
   }
 }
-var execFileAsync, MAX_ENTRIES = 2000, FILE_READ_CAP, DIFF_CAP, GIT_MAX_BUFFER, SEARCH_MAX_RESULTS = 200, SEARCH_MAX_SCAN = 20000, SEARCH_SKIP_DIRS, SEARCH_CONTENT_MAX_HITS = 500, SEARCH_CONTENT_MAX_FILE, LINE_MATCH_CAP = 2000, DOWNLOAD_MAX, GIT_TIMEOUT_MS = 1e4, SEARCH_DEADLINE_MS = 4000, MIME_BY_EXT;
+var import_write_file_atomic3, execFileAsync, MAX_ENTRIES = 2000, FILE_READ_CAP, DIFF_CAP, GIT_MAX_BUFFER, SEARCH_MAX_RESULTS = 200, SEARCH_MAX_SCAN = 20000, SEARCH_SKIP_DIRS, SEARCH_CONTENT_MAX_HITS = 500, SEARCH_CONTENT_MAX_FILE, LINE_MATCH_CAP = 2000, DOWNLOAD_MAX, GIT_TIMEOUT_MS = 1e4, SEARCH_DEADLINE_MS = 4000, MIME_BY_EXT;
 var init_workspace_fs = __esm(() => {
+  import_write_file_atomic3 = __toESM(require_lib(), 1);
   execFileAsync = promisify(execFile);
   FILE_READ_CAP = 256 * 1024;
   DIFF_CAP = 512 * 1024;
@@ -34348,6 +34367,11 @@ class ControlService {
       throw new Error("files-write-disabled");
     return this.workspaceFs.duplicate(workspace3, path16);
   }
+  async fsWrite(workspace3, path16, content, expected) {
+    if (!this.deps.filesWriteEnabled())
+      throw new Error("files-write-disabled");
+    return this.workspaceFs.writeFile(workspace3, path16, content, expected);
+  }
   async fsDownload(workspace3, path16) {
     return this.workspaceFs.readFileBytes(workspace3, path16);
   }

package/dist/control/control-service.d.ts

@@ -152,6 +152,14 @@ export declare class ControlService {
     fsCopy(workspace: string, path: string): Promise<{
         path: string;
     }>;
+    fsWrite(workspace: string, path: string, content: string, expected: {
+        mtimeMs: number;
+        size: number;
+    }): Promise<{
+        path: string;
+        mtimeMs: number;
+        size: number;
+    }>;
     fsDownload(workspace: string, path: string): Promise<{
         path: string;
         base64: string;

package/dist/control/workspace-fs.d.ts

@@ -19,6 +19,7 @@ export interface FileContent {
     path: string;
     content: string;
     size: number;
+    mtimeMs: number;
     truncated: boolean;
     binary: boolean;
 }
@@ -109,6 +110,18 @@ export declare class WorkspaceFs {
      *  "nothing ignored". Never throws. */
     private gitCheckIgnore;
     readFile(workspace: string, relPath: string): Promise<FileContent>;
+    /** Overwrite an EXISTING file's content, guarded by a stale-write token. The target must
+     *  resolve inside the workspace (realpath containment), be a regular file, and match the
+     *  caller's `{mtimeMs,size}` token — otherwise `stale-write`. Content must be UTF-8 text
+     *  (no NUL) and within the read cap. Writes atomically. Returns a fresh token. */
+    writeFile(workspace: string, relPath: string, content: string, expected: {
+        mtimeMs: number;
+        size: number;
+    }): Promise<{
+        path: string;
+        mtimeMs: number;
+        size: number;
+    }>;
     /** Find files by name (default) or content. Name mode walks relative paths
      *  breadth-first, skipping `.git`/`node_modules` and never following symlinks (so it
      *  stays contained), applying the query plus any include/exclude globs. Content mode

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ganglion/xacpx",
-  "version": "0.17.0-beta.2",
+  "version": "0.17.0-beta.3",
   "description": "随时随地通过聊天频道（微信 / 飞书 / 元宝等）远程控制 `acpx` 上的 Claude Code、Codex 等 Agents。",
   "keywords": [
     "acpx",