@openclaw/fs-safe 0.1.1 → 0.2.0

package/dist/move-path.js

@@ -1,7 +1,186 @@
+import { randomUUID } from "node:crypto";
+import { constants as fsConstants } from "node:fs";
 import fs from "node:fs/promises";
+import path from "node:path";
+import { guardedRename } from "./guarded-mutation.js";
+function entryIdentity(stat) {
+    return {
+        ctimeMs: stat.ctimeMs,
+        dev: stat.dev,
+        ino: stat.ino,
+        mode: stat.mode,
+        mtimeMs: stat.mtimeMs,
+        size: stat.size,
+    };
+}
+function sameIdentity(a, b) {
+    return (a.dev === b.dev &&
+        a.ino === b.ino &&
+        a.mode === b.mode &&
+        a.size === b.size &&
+        a.mtimeMs === b.mtimeMs &&
+        a.ctimeMs === b.ctimeMs);
+}
+function sameDirectoryNode(a, b) {
+    return a.dev === b.dev && a.ino === b.ino;
+}
+function modeBits(mode) {
+    return mode & 0o777;
+}
+function sourceChangedError(sourcePath) {
+    return Object.assign(new Error(`Source changed during move fallback: ${sourcePath}`), {
+        code: "ESTALE",
+    });
+}
+async function assertSourceStillMatches(sourcePath, identity) {
+    if (!sameIdentity(identity, entryIdentity(await fs.lstat(sourcePath)))) {
+        throw sourceChangedError(sourcePath);
+    }
+}
+function regularReadFlags() {
+    return (fsConstants.O_RDONLY |
+        (typeof fsConstants.O_NOFOLLOW === "number" && process.platform !== "win32"
+            ? fsConstants.O_NOFOLLOW
+            : 0));
+}
+async function writeAll(handle, buffer, bytesRead) {
+    let offset = 0;
+    while (offset < bytesRead) {
+        const { bytesWritten } = await handle.write(buffer, offset, bytesRead - offset);
+        offset += bytesWritten;
+    }
+}
+async function copyRegularFilePinned(params) {
+    let destinationCreated = false;
+    let sourceHandle;
+    try {
+        sourceHandle = await fs.open(params.from, regularReadFlags());
+    }
+    catch (error) {
+        const code = error?.code;
+        if (code === "ELOOP" || code === "ENOENT" || code === "ENOTDIR") {
+            throw sourceChangedError(params.from);
+        }
+        throw error;
+    }
+    try {
+        const openedStat = await sourceHandle.stat();
+        if (!openedStat.isFile() || !sameIdentity(params.identity, entryIdentity(openedStat))) {
+            throw sourceChangedError(params.from);
+        }
+        const destinationHandle = await fs.open(params.to, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL, modeBits(params.mode) || 0o666);
+        destinationCreated = true;
+        try {
+            const scratch = Buffer.allocUnsafe(64 * 1024);
+            while (true) {
+                const { bytesRead } = await sourceHandle.read(scratch, 0, scratch.length, null);
+                if (bytesRead === 0) {
+                    break;
+                }
+                await writeAll(destinationHandle, scratch, bytesRead);
+            }
+        }
+        finally {
+            await destinationHandle.close();
+        }
+        // Re-check the opened handle before the staged tree can be committed. If
+        // the source changed while we copied, the caller should retry the move.
+        if (!sameIdentity(params.identity, entryIdentity(await sourceHandle.stat()))) {
+            throw sourceChangedError(params.from);
+        }
+        await fs.chmod(params.to, modeBits(params.mode)).catch(() => undefined);
+    }
+    catch (error) {
+        if (destinationCreated) {
+            await fs.rm(params.to, { force: true }).catch(() => undefined);
+        }
+        throw error;
+    }
+    finally {
+        await sourceHandle.close();
+    }
+}
+async function copyEntryWithManifest(from, to, options) {
+    const sourceStat = await fs.lstat(from);
+    const identity = entryIdentity(sourceStat);
+    if (sourceStat.isSymbolicLink()) {
+        await fs.symlink(await fs.readlink(from), to);
+        // readlink() is path-based; verify the symlink we copied is still the one
+        // we inspected before letting the staged destination become visible.
+        await assertSourceStillMatches(from, identity);
+        return { ...identity, kind: "leaf" };
+    }
+    if (sourceStat.isDirectory()) {
+        await fs.mkdir(to, { mode: modeBits(sourceStat.mode) || 0o755 });
+        const children = [];
+        for (const child of await fs.readdir(from)) {
+            children.push({
+                name: child,
+                manifest: await copyEntryWithManifest(path.join(from, child), path.join(to, child), options),
+            });
+        }
+        // Directory traversal is path-based in Node. Treat a changed parent as a
+        // stale move before committing so swapped-in outside trees are not imported.
+        await assertSourceStillMatches(from, identity);
+        // mkdir() honors process umask. Restore the source mode before commit so
+        // EXDEV fallback preserves directory permissions like fs.cp did.
+        await fs.chmod(to, modeBits(sourceStat.mode));
+        return { ...identity, children, kind: "directory" };
+    }
+    if (!sourceStat.isFile()) {
+        throw new Error(`Refusing to move non-file path with copy fallback: ${from}`);
+    }
+    if (options.sourceHardlinks === "reject" && sourceStat.nlink > 1) {
+        throw new Error(`Refusing to move hardlinked file with copy fallback: ${from}`);
+    }
+    await copyRegularFilePinned({ from, identity, mode: sourceStat.mode, to });
+    return { ...identity, kind: "leaf" };
+}
+function mergeCleanupResults(a, b) {
+    return a === "stale" || b === "stale" ? "stale" : "removed";
+}
+async function cleanupCopiedEntry(sourcePath, manifest) {
+    let currentStat;
+    try {
+        currentStat = await fs.lstat(sourcePath);
+    }
+    catch (error) {
+        if (error?.code === "ENOENT") {
+            return "removed";
+        }
+        throw error;
+    }
+    if (manifest.kind === "directory") {
+        if (!currentStat.isDirectory() || !sameDirectoryNode(manifest, entryIdentity(currentStat))) {
+            return "stale";
+        }
+        // A same-inode directory can gain unrelated children after commit. Still
+        // clean manifest children so the fallback does not duplicate copied files.
+        let result = "removed";
+        for (const child of manifest.children) {
+            result = mergeCleanupResults(result, await cleanupCopiedEntry(path.join(sourcePath, child.name), child.manifest));
+        }
+        try {
+            await fs.rmdir(sourcePath);
+        }
+        catch (error) {
+            const code = error?.code;
+            if (code === "ENOTEMPTY" || code === "EEXIST") {
+                return "stale";
+            }
+            throw error;
+        }
+        return result;
+    }
+    if (!sameIdentity(manifest, entryIdentity(currentStat))) {
+        return "stale";
+    }
+    await fs.unlink(sourcePath);
+    return "removed";
+}
 export async function movePathWithCopyFallback(options) {
     try {
-        await fs.rename(options.from, options.to);
+        await guardedRename({ from: options.from, to: options.to });
         return;
     }
     catch (error) {
@@ -9,10 +188,19 @@ export async function movePathWithCopyFallback(options) {
             throw error;
         }
     }
-    await fs.cp(options.from, options.to, {
-        recursive: true,
-        force: true,
-        dereference: false,
-    });
-    await fs.rm(options.from, { recursive: true, force: true });
+    const targetDir = path.dirname(path.resolve(options.to));
+    const staged = path.join(targetDir, `.fs-safe-move-${process.pid}-${randomUUID()}.tmp`);
+    try {
+        const manifest = await copyEntryWithManifest(options.from, staged, {
+            sourceHardlinks: options.sourceHardlinks ?? "allow",
+        });
+        await guardedRename({ from: staged, to: options.to });
+        const cleanupResult = await cleanupCopiedEntry(options.from, manifest);
+        if (cleanupResult === "stale") {
+            throw sourceChangedError(options.from);
+        }
+    }
+    finally {
+        await fs.rm(staged, { recursive: true, force: true }).catch(() => undefined);
+    }
 }

package/dist/output.d.ts

@@ -0,0 +1,13 @@
+export type ExternalFileWriteOptions<T = void> = {
+    rootDir: string;
+    path: string;
+    write: (filePath: string) => Promise<T>;
+    maxBytes?: number;
+    mode?: number;
+};
+export type ExternalFileWriteResult<T = void> = {
+    path: string;
+    result: T;
+};
+export declare function writeExternalFileWithinRoot<T = void>(options: ExternalFileWriteOptions<T>): Promise<ExternalFileWriteResult<T>>;
+//# sourceMappingURL=output.d.ts.map

package/dist/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,wBAAwB,CAAC,CAAC,GAAG,IAAI,IAAI;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,CAAC,GAAG,IAAI,IAAI;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,CAAC,CAAC;CACX,CAAC;AA6CF,wBAAsB,2BAA2B,CAAC,CAAC,GAAG,IAAI,EACxD,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CA8BrC"}

package/dist/output.js

@@ -0,0 +1,69 @@
+import path from "node:path";
+import { FsSafeError } from "./errors.js";
+import { sanitizeUntrustedFileName } from "./filename.js";
+import { isPathInside } from "./path.js";
+import { root } from "./root.js";
+import { tempFile } from "./temp-target.js";
+function tempFileNameForTarget(targetPath) {
+    return sanitizeUntrustedFileName(path.basename(targetPath), "output.bin");
+}
+function ensureTrailingSep(value) {
+    return value.endsWith(path.sep) ? value : `${value}${path.sep}`;
+}
+function toRootPathInput(params) {
+    if (!path.isAbsolute(params.targetPath)) {
+        return params.targetPath;
+    }
+    const absoluteTarget = path.resolve(params.targetPath);
+    const rootDir = path.resolve(params.rootDir);
+    if (isPathInside(ensureTrailingSep(rootDir), absoluteTarget)) {
+        return path.relative(rootDir, absoluteTarget);
+    }
+    if (isPathInside(ensureTrailingSep(params.rootReal), absoluteTarget)) {
+        return path.relative(params.rootReal, absoluteTarget);
+    }
+    return params.targetPath;
+}
+function assertFileTargetPath(targetPath) {
+    const basename = path.basename(targetPath);
+    if (!targetPath ||
+        targetPath === "." ||
+        targetPath.endsWith("/") ||
+        targetPath.endsWith("\\") ||
+        !basename ||
+        basename === "." ||
+        basename === "..") {
+        throw new FsSafeError("invalid-path", "target path must name a file");
+    }
+}
+export async function writeExternalFileWithinRoot(options) {
+    const targetRoot = await root(options.rootDir);
+    const requestedTargetPath = options.path;
+    if (requestedTargetPath.length === 0) {
+        throw new FsSafeError("invalid-path", "target path is required");
+    }
+    const targetPath = toRootPathInput({
+        rootDir: targetRoot.rootDir,
+        rootReal: targetRoot.rootReal,
+        targetPath: requestedTargetPath,
+    });
+    assertFileTargetPath(targetPath);
+    const finalPath = await targetRoot.resolve(targetPath);
+    const staged = await tempFile({
+        prefix: "fs-safe-output",
+        fileName: tempFileNameForTarget(targetPath),
+    });
+    try {
+        const result = await options.write(staged.path);
+        await targetRoot.copyIn(targetPath, staged.path, {
+            maxBytes: options.maxBytes,
+            mode: options.mode,
+            mkdir: true,
+            sourceHardlinks: "reject",
+        });
+        return { path: finalPath, result };
+    }
+    finally {
+        await staged.cleanup();
+    }
+}

package/dist/path-stat.d.ts

@@ -0,0 +1,4 @@
+import type { Stats } from "node:fs";
+import type { PathStat } from "./types.js";
+export declare function pathStatFromStats(stat: Stats): PathStat;
+//# sourceMappingURL=path-stat.d.ts.map

package/dist/path-stat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-stat.d.ts","sourceRoot":"","sources":["../src/path-stat.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,KAAK,GAAG,QAAQ,CAcvD"}

package/dist/path-stat.js

@@ -0,0 +1,15 @@
+export function pathStatFromStats(stat) {
+    return {
+        dev: Number(stat.dev),
+        gid: Number(stat.gid),
+        ino: Number(stat.ino),
+        isDirectory: stat.isDirectory(),
+        isFile: stat.isFile(),
+        isSymbolicLink: stat.isSymbolicLink(),
+        mode: stat.mode,
+        mtimeMs: stat.mtimeMs,
+        nlink: stat.nlink,
+        size: stat.size,
+        uid: stat.uid,
+    };
+}

package/dist/path.d.ts

@@ -2,6 +2,7 @@ import fs from "node:fs";
 export declare function normalizeWindowsPathForComparison(input: string): string;
 export declare function isNodeError(value: unknown): value is NodeJS.ErrnoException;
 export declare function hasNodeErrorCode(value: unknown, code: string): boolean;
+export declare function assertNoNulPathInput(filePath: string, message?: string): void;
 export declare function isNotFoundPathError(value: unknown): boolean;
 export declare function isSymlinkOpenError(value: unknown): boolean;
 export declare function isPathInside(root: string, target: string): boolean;

package/dist/path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../src/path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAWzB,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CASvE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,cAAc,CAI1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE1D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CA0BlE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAExE;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAa/F;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAChE,OAAO,CAUT;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,EAAE,CAAC,KAAK,GAAG,IAAI,CAMhE;AAED,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAyBpE;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAOrF"}
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../src/path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAWzB,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CASvE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,cAAc,CAI1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,SAA6B,GAAG,IAAI,CAIjG;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE1D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CA0BlE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAExE;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAa/F;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAChE,OAAO,CAUT;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,EAAE,CAAC,KAAK,GAAG,IAAI,CAMhE;AAED,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAuBpE;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAOrF"}

package/dist/path.js

@@ -22,6 +22,11 @@ export function isNodeError(value) {
 export function hasNodeErrorCode(value, code) {
     return isNodeError(value) && value.code === code;
 }
+export function assertNoNulPathInput(filePath, message = "path contains a NUL byte") {
+    if (filePath.includes("\0")) {
+        throw new FsSafeError("invalid-path", message);
+    }
+}
 export function isNotFoundPathError(value) {
     return isNodeError(value) && typeof value.code === "string" && NOT_FOUND_CODES.has(value.code);
 }
@@ -94,9 +99,7 @@ export function splitSafeRelativePath(relativePath) {
     if (relativePath.length === 0 || relativePath === ".") {
         return [];
     }
-    if (relativePath.includes("\0")) {
-        throw new FsSafeError("invalid-path", "relative path contains a NUL byte");
-    }
+    assertNoNulPathInput(relativePath, "relative path contains a NUL byte");
     if (relativePath.includes("\\")) {
         throw new FsSafeError("invalid-path", "relative path must use forward slashes");
     }

package/dist/pinned-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pinned-write.d.ts","sourceRoot":"","sources":["../src/pinned-write.ts"],"names":[],"mappings":"AAGA,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAQ3D,KAAK,gBAAgB,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,CAAC;AAuFzC,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,CAAC;CACzB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuC5B;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,gBAAgB,CAAC;CAClC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoB5B"}
+{"version":3,"file":"pinned-write.d.ts","sourceRoot":"","sources":["../src/pinned-write.ts"],"names":[],"mappings":"AAIA,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAS3D,KAAK,gBAAgB,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,CAAC;AAuFzC,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,CAAC;CACzB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuC5B;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,gBAAgB,CAAC;CAClC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoB5B"}

package/dist/pinned-write.js

@@ -1,9 +1,12 @@
+import { randomUUID } from "node:crypto";
 import fsSync from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
+import { createNearestExistingDirectoryGuard } from "./directory-guard.js";
 import { FsSafeError } from "./errors.js";
+import { withAsyncDirectoryGuards } from "./guarded-mutation.js";
 import { canFallbackFromPythonError, getFsSafePythonConfig } from "./pinned-python-config.js";
 import { assertPinnedPythonOperationAvailable, runPinnedPythonOperation, validatePinnedOperationPayload, } from "./pinned-python.js";
 function byteLength(input, encoding) {
@@ -67,13 +70,13 @@ async function inputToBase64(input, maxBytes) {
     return Buffer.concat(chunks, bytes).toString("base64");
 }
 export async function runPinnedWriteHelper(params) {
-    if (getFsSafePythonConfig().mode === "off") {
-        return await runPinnedWriteFallback(params);
-    }
     assertSafeBasename(params.basename);
     validatePinnedOperationPayload({
         relativeParentPath: params.relativeParentPath,
     });
+    if (getFsSafePythonConfig().mode === "off") {
+        return await runPinnedWriteFallback(params);
+    }
     if (params.input.kind === "stream") {
         try {
             assertPinnedPythonOperationAvailable();
@@ -133,12 +136,21 @@ async function runPinnedWriteFallback(params) {
     const parentPath = params.relativeParentPath
         ? path.join(params.rootPath, ...params.relativeParentPath.split("/"))
         : params.rootPath;
+    const parentGuard = await createNearestExistingDirectoryGuard(params.rootPath, parentPath);
     if (params.mkdir) {
-        await fs.mkdir(parentPath, { recursive: true });
+        await withAsyncDirectoryGuards([parentGuard], async () => {
+            await fs.mkdir(parentPath, { recursive: true });
+        });
     }
     const targetPath = path.join(parentPath, params.basename);
     if (params.overwrite === false) {
-        const handle = await fs.open(targetPath, fsSync.constants.O_WRONLY | fsSync.constants.O_CREAT | fsSync.constants.O_EXCL, params.mode);
+        let handle = await withAsyncDirectoryGuards([parentGuard], async () => await fs.open(targetPath, fsSync.constants.O_WRONLY | fsSync.constants.O_CREAT | fsSync.constants.O_EXCL, params.mode), {
+            onPostGuardFailure: async (openedHandle) => {
+                // The parent failed verification, so targetPath may now resolve
+                // somewhere else. Close the fd, but do not clean up by path.
+                await openedHandle.close().catch(() => undefined);
+            },
+        });
         let created = true;
         try {
             if (params.input.kind === "buffer") {
@@ -164,32 +176,45 @@ async function runPinnedWriteFallback(params) {
             }
         }
     }
-    const tempPath = path.join(parentPath, `.${params.basename}.fallback.tmp`);
+    const tempPath = path.join(parentPath, `.${params.basename}.${randomUUID()}.fallback.tmp`);
+    const tempFlags = fsSync.constants.O_WRONLY |
+        fsSync.constants.O_CREAT |
+        fsSync.constants.O_EXCL |
+        (process.platform !== "win32" && "O_NOFOLLOW" in fsSync.constants
+            ? fsSync.constants.O_NOFOLLOW
+            : 0);
+    let handle;
+    let handleClosedByStream = false;
     try {
+        handle = await fs.open(tempPath, tempFlags, params.mode);
         if (params.input.kind === "buffer") {
             assertWithinMaxBytes(byteLength(params.input.data, params.input.encoding), params.maxBytes);
             if (typeof params.input.data === "string") {
-                await fs.writeFile(tempPath, params.input.data, {
-                    encoding: params.input.encoding ?? "utf8",
-                    mode: params.mode,
-                });
+                await handle.writeFile(params.input.data, params.input.encoding ?? "utf8");
             }
             else {
-                await fs.writeFile(tempPath, params.input.data, { mode: params.mode });
+                await handle.writeFile(params.input.data);
             }
         }
         else {
-            const handle = await fs.open(tempPath, "w", params.mode);
-            try {
-                await pipelineWithMaxBytes(params.input.stream, handle.createWriteStream(), params.maxBytes);
-            }
-            finally {
-                await handle.close().catch(() => { });
-            }
+            const writable = handle.createWriteStream();
+            writable.once("close", () => {
+                handleClosedByStream = true;
+            });
+            await pipelineWithMaxBytes(params.input.stream, writable, params.maxBytes);
+        }
+        if (!handleClosedByStream) {
+            await handle.close().catch(() => undefined);
+            handle = undefined;
         }
-        await fs.rename(tempPath, targetPath);
+        await withAsyncDirectoryGuards([parentGuard], async () => {
+            await fs.rename(tempPath, targetPath);
+        });
     }
     catch (error) {
+        if (handle && !handleClosedByStream) {
+            await handle.close().catch(() => undefined);
+        }
         await fs.rm(tempPath, { force: true }).catch(() => undefined);
         throw error;
     }

package/dist/private-file-store.d.ts

@@ -1,18 +1,16 @@
-import { type FileStore } from "./file-store.js";
-export type PrivateStateStoreOptions = {
+export type PrivateFileStore = {
     rootDir: string;
-};
-export type PrivateStateStore = Omit<FileStore, "readText" | "readJson" | "writeText" | "writeJson"> & {
+    path(relativePath: string): string;
     readText(relativePath: string, options?: {
         maxBytes?: number;
     }): Promise<string | null>;
     readJson<T = unknown>(relativePath: string, options?: {
         maxBytes?: number;
     }): Promise<T | null>;
-    writeText(relativePath: string, content: string | Uint8Array): Promise<string>;
+    writeText(relativePath: string, content: string | Uint8Array): Promise<void>;
     writeJson(relativePath: string, value: unknown, options?: {
         trailingNewline?: boolean;
-    }): Promise<string>;
+    }): Promise<void>;
 };
 export declare function writePrivateTextAtomic(params: {
     rootDir: string;
@@ -56,5 +54,5 @@ export declare function writePrivateJsonAtomicSync(params: {
     value: unknown;
     trailingNewline?: boolean;
 }): void;
-export declare function privateStateStore(options: PrivateStateStoreOptions): PrivateStateStore;
+export declare function privateFileStore(rootDir: string): PrivateFileStore;
 //# sourceMappingURL=private-file-store.d.ts.map

package/dist/private-file-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private-file-store.d.ts","sourceRoot":"","sources":["../src/private-file-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAM5D,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;IACrG,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxF,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAChG,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3G,CAAC;AAgBF,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;CAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhB;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBzB;AAoBD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,GAAG,IAAI,CAiBhB;AAED,wBAAsB,eAAe,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAGpB;AAED,wBAAgB,mBAAmB,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,CAAC,GAAG,IAAI,CAGX;AAoCD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;CAC9B,GAAG,IAAI,CA4CP;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,IAAI,CAOP;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CA2CtF"}
+{"version":3,"file":"private-file-store.d.ts","sourceRoot":"","sources":["../src/private-file-store.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxF,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAChG,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzG,CAAC;AAgBF,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;CAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhB;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBzB;AAoBD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,GAAG,IAAI,CAiBhB;AAED,wBAAsB,eAAe,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAGpB;AAED,wBAAgB,mBAAmB,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,CAAC,GAAG,IAAI,CAGX;AAoCD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;CAC9B,GAAG,IAAI,CA4CP;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,IAAI,CAOP;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAiClE"}

package/dist/private-file-store.js

@@ -2,11 +2,10 @@ import { randomUUID } from "node:crypto";
 import path from "node:path";
 import fs from "node:fs";
 import { FsSafeError } from "./errors.js";
-import { fileStore } from "./file-store.js";
 import { isPathInside } from "./path.js";
 import { readRegularFileSync } from "./regular-file.js";
 import { root } from "./root.js";
-import { writeSecretFileAtomic } from "./secret-file.js";
+import { writePrivateSecretFileAtomic } from "./secret-file.js";
 function resolvePrivateStorePath(rootDir, relativePath) {
     const root = path.resolve(rootDir);
     const raw = relativePath.trim();
@@ -21,7 +20,7 @@ function resolvePrivateStorePath(rootDir, relativePath) {
     return resolved;
 }
 export async function writePrivateTextAtomic(params) {
-    await writeSecretFileAtomic(params);
+    await writePrivateSecretFileAtomic(params);
 }
 export async function readPrivateText(params) {
     const rootDir = path.resolve(params.rootDir);
@@ -173,7 +172,7 @@ export function writePrivateTextAtomicSync(params) {
 }
 export async function writePrivateJsonAtomic(params) {
     const json = JSON.stringify(params.value, null, 2);
-    await writeSecretFileAtomic({
+    await writePrivateSecretFileAtomic({
         rootDir: params.rootDir,
         filePath: params.filePath,
         content: params.trailingNewline && !json.endsWith("\n") ? `${json}\n` : json,
@@ -187,47 +186,35 @@ export function writePrivateJsonAtomicSync(params) {
         content: params.trailingNewline && !json.endsWith("\n") ? `${json}\n` : json,
     });
 }
-export function privateStateStore(options) {
-    const rootDir = path.resolve(options.rootDir);
-    const store = fileStore({ rootDir, private: true });
+export function privateFileStore(rootDir) {
+    const root = path.resolve(rootDir);
     return {
-        ...store,
-        rootDir,
-        path: (relativePath) => resolvePrivateStorePath(rootDir, relativePath),
-        readText: async (relativePath, options) => {
-            const safePath = resolvePrivateStorePath(rootDir, relativePath);
-            return await readPrivateText({
-                rootDir,
-                filePath: safePath,
-                maxBytes: options?.maxBytes,
-            });
-        },
-        readJson: async (relativePath, options) => {
-            const safePath = resolvePrivateStorePath(rootDir, relativePath);
-            return await readPrivateJson({
-                rootDir,
-                filePath: safePath,
-                maxBytes: options?.maxBytes,
-            });
-        },
+        rootDir: root,
+        path: (relativePath) => resolvePrivateStorePath(root, relativePath),
+        readText: async (relativePath, options) => await readPrivateText({
+            rootDir: root,
+            filePath: resolvePrivateStorePath(root, relativePath),
+            maxBytes: options?.maxBytes,
+        }),
+        readJson: async (relativePath, options) => await readPrivateJson({
+            rootDir: root,
+            filePath: resolvePrivateStorePath(root, relativePath),
+            maxBytes: options?.maxBytes,
+        }),
         writeText: async (relativePath, content) => {
-            const safePath = resolvePrivateStorePath(rootDir, relativePath);
             await writePrivateTextAtomic({
-                rootDir,
-                filePath: safePath,
+                rootDir: root,
+                filePath: resolvePrivateStorePath(root, relativePath),
                 content,
             });
-            return safePath;
         },
         writeJson: async (relativePath, value, options) => {
-            const safePath = resolvePrivateStorePath(rootDir, relativePath);
             await writePrivateJsonAtomic({
-                rootDir,
-                filePath: safePath,
+                rootDir: root,
+                filePath: resolvePrivateStorePath(root, relativePath),
                 value,
                 trailingNewline: options?.trailingNewline,
             });
-            return safePath;
         },
     };
 }

package/dist/private-temp-workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private-temp-workspace.d.ts","sourceRoot":"","sources":["../src/private-temp-workspace.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,IAAI,CAAC;IAChB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;CAC1B,CAAC;AAuGF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,iBAAiB,CA4DnB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,CAAC,GACvC,CAAC,CAUH"}
+{"version":3,"file":"private-temp-workspace.d.ts","sourceRoot":"","sources":["../src/private-temp-workspace.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,IAAI,CAAC;IAChB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;CAC1B,CAAC;AAsGF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,iBAAiB,CAwEnB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,CAAC,GACvC,CAAC,CAUH"}