@lousy-agents/agent-shell 5.15.4 → 5.15.5

package/dist/index.js

@@ -2,7 +2,7 @@
 import { createRequire as __rspack_createRequire } from "node:module";
 const __rspack_createRequire_require = __rspack_createRequire(import.meta.url);
 var __webpack_modules__ = ({
-341(__unused_rspack_module, __unused_rspack___webpack_exports__, __webpack_require__) {
+818(__unused_rspack_module, __unused_rspack___webpack_exports__, __webpack_require__) {
 
 ;// CONCATENATED MODULE: external "node:child_process"
 const external_node_child_process_namespaceObject = __rspack_createRequire_require("node:child_process");
@@ -222,6 +222,7 @@ function hasNonEmptyString(value) {
 
 
 
+
 const NOT_FOUND_CODES = new Set(["ENOENT", "ENOTDIR"]);
 const SYMLINK_OPEN_CODES = new Set(["ELOOP", "EINVAL", "ENOTSUP"]);
 const POSIX_SEPARATOR_CHAR_CODE = 0x2f;
@@ -421,6 +422,29 @@ function directory_guard_createNearestExistingSyncDirectoryGuard(rootReal, targe
     return directory_guard_createSyncDirectoryGuard(root);
 }
 
+;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/fsync.js
+
+
+async function syncDirectoryBestEffort(dirPath) {
+    if (process.platform === "win32") {
+        return;
+    }
+    let handle;
+    try {
+        const flags = external_node_fs_namespaceObject.constants.O_RDONLY |
+            ("O_DIRECTORY" in external_node_fs_namespaceObject.constants ? external_node_fs_namespaceObject.constants.O_DIRECTORY : 0) |
+            ("O_NOFOLLOW" in external_node_fs_namespaceObject.constants ? external_node_fs_namespaceObject.constants.O_NOFOLLOW : 0);
+        handle = await promises_namespaceObject.open(dirPath, flags);
+        await handle.sync();
+    }
+    catch {
+        // Some filesystems reject directory handles; keep the write usable there.
+    }
+    finally {
+        await handle?.close().catch(() => undefined);
+    }
+}
+
 ;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/guarded-mkdir.js
 
 
@@ -1517,6 +1541,7 @@ async function runPinnedPathHelper(params) {
 
 
 
+
 function byteLength(input, encoding) {
     return typeof input === "string"
         ? Buffer.byteLength(input, encoding ?? "utf8")
@@ -1709,11 +1734,13 @@ async function runPinnedWriteFallback(params) {
             throw new errors_FsSafeError("path-mismatch", "fallback temp path changed during write");
         }
         const expectedTempStat = tempStat;
+        await handle.sync();
         await handle.close().catch(() => undefined);
         handle = undefined;
         await withAsyncDirectoryGuards([parentGuard], async () => {
             await promises_namespaceObject.rename(tempPath, targetPath);
             renamed = true;
+            await syncDirectoryBestEffort(parentPath);
             targetStat = await promises_namespaceObject.lstat(targetPath);
             if (targetStat.isSymbolicLink() || !file_identity_sameFileIdentity(targetStat, expectedTempStat)) {
                 throw new errors_FsSafeError("path-mismatch", "fallback target changed during write");
@@ -2387,6 +2414,197 @@ function path_policy_shortPath(value) {
     return value;
 }
 
+;// CONCATENATED MODULE: external "node:url"
+const external_node_url_namespaceObject = __rspack_createRequire_require("node:url");
+;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/local-file-access.js
+
+
+
+const ENCODED_FILE_URL_SEPARATOR_RE = /%(?:2f|5c)/i;
+function isLocalFileUrlHost(hostname) {
+    const normalized = normalizeLowercaseStringOrEmpty(hostname);
+    return normalized === "" || normalized === "localhost";
+}
+function hasEncodedFileUrlSeparator(pathname) {
+    return ENCODED_FILE_URL_SEPARATOR_RE.test(pathname);
+}
+function isWindowsNetworkPath(filePath, platform = process.platform) {
+    if (platform !== "win32") {
+        return false;
+    }
+    const normalized = filePath.replace(/\//g, "\\");
+    return normalized.startsWith("\\\\?\\UNC\\") || normalized.startsWith("\\\\");
+}
+function isWindowsDriveLetterPath(filePath, platform = process.platform) {
+    return platform === "win32" && /^[A-Za-z]:[\\/]/.test(filePath);
+}
+function assertNoWindowsNetworkPath(filePath, label = "Path") {
+    if (isWindowsNetworkPath(filePath)) {
+        throw new Error(`${label} cannot use Windows network paths: ${filePath}`);
+    }
+}
+function safeFileURLToPath(fileUrl) {
+    let parsed;
+    try {
+        parsed = new external_node_url_namespaceObject.URL(fileUrl);
+    }
+    catch {
+        throw new Error(`Invalid file:// URL: ${fileUrl}`);
+    }
+    if (parsed.protocol !== "file:") {
+        throw new Error(`Invalid file:// URL: ${fileUrl}`);
+    }
+    if (!isLocalFileUrlHost(parsed.hostname)) {
+        throw new Error(`file:// URLs with remote hosts are not allowed: ${fileUrl}`);
+    }
+    if (hasEncodedFileUrlSeparator(parsed.pathname)) {
+        throw new Error(`file:// URLs cannot encode path separators: ${fileUrl}`);
+    }
+    const filePath = (0,external_node_url_namespaceObject.fileURLToPath)(parsed);
+    assertNoWindowsNetworkPath(filePath, "Local file URL");
+    return filePath;
+}
+function trySafeFileURLToPath(fileUrl) {
+    try {
+        return safeFileURLToPath(fileUrl);
+    }
+    catch {
+        return undefined;
+    }
+}
+function basenameFromMediaSource(source) {
+    if (!source) {
+        return undefined;
+    }
+    if (source.startsWith("file://")) {
+        const filePath = trySafeFileURLToPath(source);
+        return filePath ? path.basename(filePath) || undefined : undefined;
+    }
+    if (/^https?:\/\//i.test(source)) {
+        try {
+            return path.basename(new URL(source).pathname) || undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return path.basename(source) || undefined;
+}
+
+;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/device-path.js
+
+
+
+const POSIX_BLOCKED_DEVICE_PATHS = new Set([
+    "/dev/zero",
+    "/dev/random",
+    "/dev/urandom",
+    "/dev/full",
+    "/dev/stdin",
+    "/dev/stdout",
+    "/dev/stderr",
+    "/dev/tty",
+    "/dev/console",
+]);
+const WINDOWS_RESERVED_DEVICE_NAMES = new Set([
+    "CON",
+    "PRN",
+    "AUX",
+    "NUL",
+    "CLOCK$",
+    "CONIN$",
+    "CONOUT$",
+    "COM1",
+    "COM2",
+    "COM3",
+    "COM4",
+    "COM5",
+    "COM6",
+    "COM7",
+    "COM8",
+    "COM9",
+    "COM¹",
+    "COM²",
+    "COM³",
+    "LPT1",
+    "LPT2",
+    "LPT3",
+    "LPT4",
+    "LPT5",
+    "LPT6",
+    "LPT7",
+    "LPT8",
+    "LPT9",
+    "LPT¹",
+    "LPT²",
+    "LPT³",
+]);
+function candidateReadPaths(filePath) {
+    if (!filePath.startsWith("file://")) {
+        return [filePath];
+    }
+    const parsed = trySafeFileURLToPath(filePath);
+    return parsed === undefined ? [filePath] : [filePath, parsed];
+}
+function normalizePosixPath(filePath, cwd) {
+    if (external_node_path_namespaceObject.posix.isAbsolute(filePath)) {
+        return external_node_path_namespaceObject.posix.normalize(filePath);
+    }
+    const base = cwd && external_node_path_namespaceObject.posix.isAbsolute(cwd) ? cwd : process.cwd();
+    return external_node_path_namespaceObject.posix.resolve(base, filePath);
+}
+function matchPosixDeviceReadPath(filePath, cwd) {
+    const normalized = normalizePosixPath(filePath, cwd);
+    if (POSIX_BLOCKED_DEVICE_PATHS.has(normalized)) {
+        return { path: normalized, reason: "posix-device" };
+    }
+    if (normalized === "/dev/fd" || normalized.startsWith("/dev/fd/")) {
+        return { path: normalized, reason: "posix-fd" };
+    }
+    if (/^\/proc\/(?:self|thread-self|\d+)\/fd(?:\/|$)/.test(normalized)) {
+        return { path: normalized, reason: "posix-fd" };
+    }
+    return undefined;
+}
+function normalizeWindowsDeviceBaseName(filePath) {
+    const normalized = filePath.replace(/\//g, "\\").replace(/[\\]+$/g, "");
+    const lastSegment = normalized.split("\\").filter(Boolean).at(-1) ?? normalized;
+    const withoutStream = lastSegment.split(":")[0] ?? lastSegment;
+    const withoutTrailingIgnoredChars = withoutStream.replace(/[ .]+$/g, "");
+    return (withoutTrailingIgnoredChars.split(".")[0] ?? withoutTrailingIgnoredChars).toUpperCase();
+}
+function matchWindowsDeviceReadPath(filePath) {
+    const normalized = filePath.replace(/\//g, "\\");
+    if (/^\\\\\.\\/.test(normalized) || /^\\\\\?\\GLOBALROOT\\Device\\/i.test(normalized)) {
+        return { path: normalized, reason: "windows-device" };
+    }
+    const baseName = normalizeWindowsDeviceBaseName(filePath);
+    if (WINDOWS_RESERVED_DEVICE_NAMES.has(baseName)) {
+        return { path: normalized, reason: "windows-device" };
+    }
+    return undefined;
+}
+function matchUnsafeDeviceReadPath(filePath, options = {}) {
+    const platform = options.platform ?? process.platform;
+    for (const candidate of candidateReadPaths(filePath)) {
+        const match = platform === "win32"
+            ? matchWindowsDeviceReadPath(candidate)
+            : matchPosixDeviceReadPath(candidate, options.cwd);
+        if (match) {
+            return match;
+        }
+    }
+    return undefined;
+}
+function isUnsafeDeviceReadPath(filePath, options) {
+    return matchUnsafeDeviceReadPath(filePath, options) !== undefined;
+}
+function assertNoUnsafeDeviceReadPath(filePath, options) {
+    if (matchUnsafeDeviceReadPath(filePath, options)) {
+        throw new errors_FsSafeError("device-path", `file reads from unsafe device paths are not allowed: ${filePath}`);
+    }
+}
+
 ;// CONCATENATED MODULE: ../../node_modules/@openclaw/fs-safe/dist/read-opened-file.js
 
 async function read_opened_file_readOpenedFileSafely(params) {
@@ -2738,6 +2956,7 @@ async function serializePathWrite(key, run) {
 
 
 
+
 
 
 function logWarn(message) {
@@ -2763,20 +2982,16 @@ const OPEN_APPEND_CREATE_FLAGS = external_node_fs_namespaceObject.constants.O_RD
     external_node_fs_namespaceObject.constants.O_EXCL |
     (SUPPORTS_NOFOLLOW ? external_node_fs_namespaceObject.constants.O_NOFOLLOW : 0);
 const DEFAULT_ROOT_MAX_BYTES = 16 * 1024 * 1024;
-function closeHandleForDispose(handle) {
-    return handle.close().catch(() => undefined);
-}
 function openResult(params) {
     return {
         handle: params.handle,
         realPath: params.realPath,
         stat: params.stat,
-        [Symbol.asyncDispose]: async () => {
-            await closeHandleForDispose(params.handle);
-        },
+        [Symbol.asyncDispose]: () => params.handle.close().catch(() => undefined),
     };
 }
 async function openVerifiedLocalFile(filePath, options) {
+    assertNoUnsafeDeviceReadPath(filePath);
     const fsSafeTestHooks = getFsSafeTestHooks();
     // Reject directories before opening so we never surface EISDIR to callers (e.g. tool
     // results that get sent to messaging channels). See openclaw/openclaw#31186.
@@ -3301,9 +3516,7 @@ async function openWritableFileInRoot(root, params) {
             createdForWrite,
             realPath,
             stat,
-            [Symbol.asyncDispose]: async () => {
-                await closeHandleForDispose(handle);
-            },
+            [Symbol.asyncDispose]: () => handle.close().catch(() => undefined),
         };
     }
     catch (err) {
@@ -3340,10 +3553,15 @@ async function appendFileInRoot(root, params) {
         }
         if (typeof params.data === "string") {
             await target.handle.appendFile(`${prefix}${params.data}`, params.encoding ?? "utf8");
-            return;
         }
-        const payload = prefix.length > 0 ? Buffer.concat([Buffer.from(prefix, "utf8"), params.data]) : params.data;
-        await target.handle.appendFile(payload);
+        else {
+            const payload = prefix.length > 0 ? Buffer.concat([Buffer.from(prefix, "utf8"), params.data]) : params.data;
+            await target.handle.appendFile(payload);
+        }
+        await target.handle.sync();
+        if (target.createdForWrite) {
+            await syncDirectoryBestEffort(external_node_path_namespaceObject.dirname(target.realPath));
+        }
     }
     finally {
         await target.handle.close().catch(() => { });
@@ -3400,42 +3618,45 @@ async function writeFileInRoot(root, params) {
     }
     const pinned = await resolvePinnedWriteTargetInRoot(root, params.relativePath, params.mode, params.denyMutations);
     await serializePathWrite(pinned.targetPath, async () => {
-        let identity;
-        try {
-            identity = await runPinnedWriteHelper({
-                rootPath: pinned.rootReal,
-                relativeParentPath: pinned.relativeParentPath,
-                basename: pinned.basename,
-                mkdir: params.mkdir !== false,
-                mode: params.mode ?? pinned.mode,
-                overwrite: params.overwrite,
-                input: {
-                    kind: "buffer",
-                    data: params.data,
-                    encoding: params.encoding,
-                },
-            });
-        }
-        catch (error) {
-            if (params.overwrite === false && isAlreadyExistsError(error)) {
-                throw new errors_FsSafeError("already-exists", "file already exists", {
-                    cause: error instanceof Error ? error : undefined,
-                });
-            }
-            throw normalizePinnedWriteError(error);
-        }
-        try {
-            await verifyAtomicWriteResult({
-                root,
-                targetPath: pinned.targetPath,
-                expectedIdentity: identity,
+        await commitPinnedWriteInRoot(root, pinned, params);
+    });
+}
+async function commitPinnedWriteInRoot(root, pinned, params) {
+    let identity;
+    try {
+        identity = await runPinnedWriteHelper({
+            rootPath: pinned.rootReal,
+            relativeParentPath: pinned.relativeParentPath,
+            basename: pinned.basename,
+            mkdir: params.mkdir !== false,
+            mode: params.mode ?? pinned.mode,
+            overwrite: params.overwrite,
+            input: {
+                kind: "buffer",
+                data: params.data,
+                encoding: params.encoding,
+            },
+        });
+    }
+    catch (error) {
+        if (params.overwrite === false && isAlreadyExistsError(error)) {
+            throw new errors_FsSafeError("already-exists", "file already exists", {
+                cause: error instanceof Error ? error : undefined,
             });
         }
-        catch (err) {
-            emitWriteBoundaryWarning(`post-write verification failed: ${String(err)}`);
-            throw err;
-        }
-    });
+        throw normalizePinnedWriteError(error);
+    }
+    try {
+        await verifyAtomicWriteResult({
+            root,
+            targetPath: pinned.targetPath,
+            expectedIdentity: identity,
+        });
+    }
+    catch (err) {
+        emitWriteBoundaryWarning(`post-write verification failed: ${String(err)}`);
+        throw err;
+    }
 }
 async function copyFileInRoot(root, params) {
     assertValidRootRelativePath(params.relativePath);
@@ -4591,7 +4812,7 @@ const regexes_base64 = /^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0
 const regexes_base64url = /^[A-Za-z0-9_-]*$/;
 // based on https://stackoverflow.com/questions/106179/regular-expression-to-match-dns-hostname-or-ip-address
 // export const hostname: RegExp = /^([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+$/;
-const hostname = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
+const regexes_hostname = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
 const domain = /^([a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/;
 const httpProtocol = /^https?$/;
 // https://blog.stevenlevithan.com/archives/validate-phone-number#r4-3 (regex sans spaces)
@@ -12775,8 +12996,6 @@ function hasProtoKey(value) {
 
 ;// CONCATENATED MODULE: external "node:module"
 const external_node_module_namespaceObject = __rspack_createRequire_require("node:module");
-;// CONCATENATED MODULE: external "node:url"
-const external_node_url_namespaceObject = __rspack_createRequire_require("node:url");
 ;// CONCATENATED MODULE: ./src/gateways/resolve-sdk.ts
 
 
@@ -15052,4 +15271,4 @@ if (installedChunkData !== 0) { // 0 means "already installed".'
 // module factories are used so entry inlining is disabled
 // startup
 // Load entry module and return exports
-var __webpack_exports__ = __webpack_require__(341);
+var __webpack_exports__ = __webpack_require__(818);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@lousy-agents/agent-shell",
-    "version": "5.15.4",
+    "version": "5.15.5",
     "description": "A flight recorder for npm script execution",
     "type": "module",
     "repository": {
@@ -36,11 +36,11 @@
         "build": "rspack build --config rspack.config.ts && chmod +x dist/index.js"
     },
     "dependencies": {
-        "@openclaw/fs-safe": "0.3.0",
+        "@openclaw/fs-safe": "0.4.0",
         "zod": "4.4.3"
     },
     "peerDependencies": {
-        "@github/copilot-sdk": "1.0.1"
+        "@github/copilot-sdk": "1.0.2"
     },
     "peerDependenciesMeta": {
         "@github/copilot-sdk": {