@openclaw/fs-safe 0.11.0 → 0.13.0

package/dist/root-remove-receipt.js

@@ -0,0 +1,37 @@
+import path from "node:path";
+import { isPathInside } from "./path.js";
+// Private to a single nonrecursive removal. No observations are shared across
+// operations, and a lexical observation never stands in for an unvisited alias
+// target on the final canonical chain.
+export class RemovalPathReceipts {
+    rootStat;
+    directories;
+    observeRoot = (stat) => { this.rootStat = stat; };
+    observeDirectory(dir, stat) {
+        // Retain the first object if raw traversal revisits the same spelling.
+        const directories = this.directories ??= new Map();
+        if (!directories.has(dir))
+            directories.set(dir, { path: dir, stat });
+    }
+    complete(rootReal, targetPath) {
+        const parentPath = path.dirname(targetPath);
+        if (!this.rootStat || !isPathInside(rootReal, parentPath))
+            return undefined;
+        const directories = [];
+        let current = parentPath;
+        while (current !== rootReal) {
+            // Exact spelling is intentional: case/namespace aliases and symlink hops
+            // that did not visit the complete canonical chain use fresh admission.
+            const directory = this.directories?.get(current);
+            if (!directory)
+                return undefined;
+            directories.push(directory);
+            const parent = path.dirname(current);
+            if (parent === current)
+                return undefined;
+            current = parent;
+        }
+        directories.reverse();
+        return { rootStat: this.rootStat, parent: directories.at(-1), directories };
+    }
+}

package/dist/root-remove.d.ts

@@ -1,5 +1,6 @@
 import { type RootContext } from "./root-context.js";
 import type { RootRemoveOptions } from "./root-options.js";
+import type { RemovalPathReceipts } from "./root-remove-receipt.js";
 export declare function validateRemoveOptions(options: RootRemoveOptions): void;
-export declare function removePathInRootFallback(root: RootContext, targetPath: string, options: RootRemoveOptions): Promise<void>;
+export declare function removePathInRootFallback(root: RootContext, targetPath: string, options: RootRemoveOptions, receipts?: RemovalPathReceipts): Promise<void>;
 //# sourceMappingURL=root-remove.d.ts.map

package/dist/root-remove.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root-remove.d.ts","sourceRoot":"","sources":["../src/root-remove.ts"],"names":[],"mappings":"AAeA,OAAO,EAA6B,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAS3D,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAgBtE;AA0CD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,WAAW,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CA6Lf"}
+{"version":3,"file":"root-remove.d.ts","sourceRoot":"","sources":["../src/root-remove.ts"],"names":[],"mappings":"AAeA,OAAO,EAA6B,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAM3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AASpE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAgBtE;AAsOD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,WAAW,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,OAAO,CAAC,IAAI,CAAC,CA6Lf"}

package/dist/root-remove.js

@@ -1,7 +1,7 @@
 import fsSync from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
-import { assertAsyncDirectoryGuard, assertSyncDirectoryGuard, createAsyncDirectoryGuard, } from "./directory-guard.js";
+import { assertSyncDirectoryGuard, createAsyncDirectoryGuard, inspectDirectoryIdentitySync, } from "./directory-guard.js";
 import { assertMutationNotDenied } from "./deny-mutations.js";
 import { FsSafeError } from "./errors.js";
 import { sameFileIdentityForCleanup } from "./file-identity.js";
@@ -9,6 +9,7 @@ import { MutationAuthorityError } from "./mutation-authority.js";
 import { isNotFoundPathError, isPathInside } from "./path.js";
 import { assertRootIdentityCurrent } from "./root-context.js";
 import { normalizeRemoveGuardError, normalizeRemovePathError, rootPathChangedError } from "./root-errors.js";
+import { assertRemovalDirectoryCurrent, createRemovalDirectoryAssertion, } from "./root-remove-identity.js";
 import { assertFinalSymlinkRejected } from "./root-symlink-policy.js";
 import { inspectFileIdentitySync } from "./strict-file-identity.js";
 import { createSuppressedError } from "./suppressed-error.js";
@@ -41,22 +42,178 @@ function assertNotAborted(signal) {
         throw new MutationAuthorityError(error);
     }
 }
-async function removeOne(root, targetPath, options) {
-    let guard;
+function removalAncestorChanged(error) {
+    return new FsSafeError("path-mismatch", "removal ancestor changed during operation", {
+        cause: error instanceof Error ? error : undefined,
+    });
+}
+function sameCanonicalDirectory(left, right) {
+    return left === right || (isPathInside(left, right) && isPathInside(right, left));
+}
+function assertExactRemovalReceiptPrefixCurrent(rootGuard, intermediates) {
+    try {
+        assertSyncDirectoryGuard(rootGuard);
+        for (const receipt of intermediates) {
+            inspectDirectoryIdentitySync(receipt.path, receipt);
+        }
+    }
+    catch (error) {
+        // force tolerates a vanished leaf, never a lost traversal boundary.
+        throw removalAncestorChanged(error);
+    }
+}
+async function assertMissingRemovalPrefixCurrent(rootGuard, intermediates) {
+    if (intermediates.length === 0) {
+        assertExactRemovalReceiptPrefixCurrent(rootGuard, intermediates);
+        return;
+    }
+    const deepest = intermediates[intermediates.length - 1];
+    assertExactRemovalReceiptPrefixCurrent(rootGuard, intermediates.slice(0, -1));
+    let deepestGuard;
+    try {
+        deepestGuard = await createAsyncDirectoryGuard(deepest.path, { bigint: true });
+    }
+    catch (error) {
+        throw removalAncestorChanged(error);
+    }
+    if (!sameFileIdentityForCleanup(deepestGuard.stat, deepest) ||
+        !sameCanonicalDirectory(deepestGuard.realPath, deepest.path)) {
+        throw removalAncestorChanged();
+    }
+}
+async function captureNonrecursiveRemovalAdmission(root, targetPath, options, receipts) {
+    const parentPath = path.dirname(targetPath);
+    if (!isPathInside(root.rootReal, parentPath)) {
+        throw new FsSafeError("path-mismatch", "removal parent is outside the retained root");
+    }
+    const retained = receipts?.complete(root.rootReal, targetPath);
+    let rootGuard;
     try {
-        guard = await createAsyncDirectoryGuard(path.dirname(targetPath));
+        // A complete, exactly spelled parent canonicalization below also proves
+        // Root's canonical route. Retain Root's earlier exact identity either way.
+        rootGuard = retained && parentPath !== root.rootReal
+            ? { dir: root.rootReal, realPath: root.rootReal, stat: retained.rootStat }
+            : await createAsyncDirectoryGuard(root.rootReal, { bigint: true, initial: retained?.rootStat });
     }
     catch (error) {
-        if (options.force && isNotFoundPathError(error)) {
+        // force may tolerate a missing target or parent, never a missing Root.
+        if (options.force && isNotFoundPathError(error))
             await assertRootIdentityCurrent(root);
+        throw normalizeRemoveGuardError(error);
+    }
+    if (!sameFileIdentityForCleanup(rootGuard.stat, root.rootIdentity))
+        throw rootPathChangedError();
+    if (parentPath === root.rootReal) {
+        const rootAssertion = createRemovalDirectoryAssertion(rootGuard.dir, rootGuard.stat, rootGuard.realPath);
+        return Object.freeze({
+            assertAfterMutation() {
+                // Here Root is also the immediate parent, so retain its established
+                // post-dispatch error classification while checking it only once.
+                assertRemovalDirectoryCurrent(rootAssertion);
+            },
+            assertCurrent() {
+                try {
+                    assertRemovalDirectoryCurrent(rootAssertion);
+                }
+                catch (error) {
+                    throw removalAncestorChanged(error);
+                }
+            },
+        });
+    }
+    const intermediates = [];
+    const retainedDirectories = retained?.directories;
+    const freshSegments = retainedDirectories
+        ? undefined
+        : path.relative(root.rootReal, parentPath).split(path.sep).filter(Boolean).slice(0, -1);
+    const intermediateCount = retainedDirectories ? Math.max(0, retainedDirectories.length - 1) : freshSegments.length;
+    let freshAncestor = root.rootReal;
+    for (let index = 0; index < intermediateCount; index += 1) {
+        const retainedDirectory = retainedDirectories?.[index];
+        const ancestor = retainedDirectory?.path ?? (freshAncestor = path.join(freshAncestor, freshSegments[index]));
+        try {
+            const stat = inspectDirectoryIdentitySync(ancestor, undefined, retainedDirectory?.stat);
+            intermediates.push(createRemovalDirectoryAssertion(ancestor, stat));
+        }
+        catch (error) {
+            if (isNotFoundPathError(error)) {
+                await assertMissingRemovalPrefixCurrent(rootGuard, intermediates);
+                assertNotAborted(options.signal);
+                if (options.force)
+                    return undefined;
+            }
+            throw normalizeRemoveGuardError(error);
+        }
+    }
+    let parentGuard;
+    try {
+        parentGuard = await createAsyncDirectoryGuard(retained?.parent?.path ?? parentPath, {
+            bigint: true,
+            initial: retained?.parent?.stat,
+        });
+    }
+    catch (error) {
+        if (isNotFoundPathError(error)) {
+            await assertMissingRemovalPrefixCurrent(rootGuard, intermediates);
             assertNotAborted(options.signal);
-            return;
+            if (options.force)
+                return undefined;
         }
         throw normalizeRemoveGuardError(error);
     }
+    if (!sameCanonicalDirectory(parentGuard.realPath, parentPath)) {
+        throw removalAncestorChanged();
+    }
+    const canonicalParentCoversRoot = retained !== undefined && parentGuard.realPath === parentPath;
+    if (retained && !canonicalParentCoversRoot) {
+        try {
+            rootGuard = await createAsyncDirectoryGuard(root.rootReal, { bigint: true, initial: retained.rootStat });
+        }
+        catch (error) {
+            if (options.force && isNotFoundPathError(error))
+                await assertRootIdentityCurrent(root);
+            throw normalizeRemoveGuardError(error);
+        }
+    }
+    const rootAssertion = createRemovalDirectoryAssertion(rootGuard.dir, rootGuard.stat, canonicalParentCoversRoot ? undefined : rootGuard.realPath);
+    const parentAssertion = createRemovalDirectoryAssertion(parentGuard.dir, parentGuard.stat, parentGuard.realPath);
+    const assertPrefixCurrent = () => {
+        try {
+            assertRemovalDirectoryCurrent(rootAssertion);
+            for (const assertion of intermediates)
+                assertRemovalDirectoryCurrent(assertion);
+        }
+        catch (error) {
+            throw removalAncestorChanged(error);
+        }
+    };
+    return Object.freeze({
+        assertAfterMutation() {
+            assertPrefixCurrent();
+            // Preserve the established nonrecursive post-dispatch mapping for the
+            // immediate parent: disappearance is `not-found`, while replacements
+            // retain their directory-guard classification. Earlier lost ancestry
+            // remains a fail-closed `path-mismatch`.
+            assertRemovalDirectoryCurrent(parentAssertion);
+        },
+        assertCurrent() {
+            assertPrefixCurrent();
+            try {
+                assertRemovalDirectoryCurrent(parentAssertion);
+            }
+            catch (error) {
+                throw removalAncestorChanged(error);
+            }
+        },
+    });
+}
+async function removeOne(root, targetPath, options, receipts) {
+    const admission = await captureNonrecursiveRemovalAdmission(root, targetPath, options, receipts);
+    if (!admission)
+        return;
     try {
         await getFsSafeTestHooks()?.beforeRootFallbackMutation?.("remove", targetPath);
-        await assertAsyncDirectoryGuard(guard);
+        admission.assertCurrent();
     }
     catch (error) {
         throw normalizeRemoveGuardError(error);
@@ -72,13 +229,18 @@ async function removeOne(root, targetPath, options) {
         if (!(options.force && isNotFoundPathError(error)))
             throw normalizeRemovePathError(error);
     }
-    await assertAsyncDirectoryGuard(guard).catch(error => { throw normalizeRemoveGuardError(error); });
+    try {
+        admission.assertAfterMutation();
+    }
+    catch (error) {
+        throw normalizeRemoveGuardError(error);
+    }
     assertNotAborted(options.signal);
 }
-export async function removePathInRootFallback(root, targetPath, options) {
+export async function removePathInRootFallback(root, targetPath, options, receipts) {
     assertNotAborted(options.signal);
     if (!options.recursive) {
-        await removeOne(root, targetPath, options);
+        await removeOne(root, targetPath, options, receipts);
         return;
     }
     const maxEntries = options.maxEntries ?? DEFAULT_MAX_ENTRIES;

package/dist/root-walk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root-walk.d.ts","sourceRoot":"","sources":["../src/root-walk.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAClG,OAAO,KAAK,EAAY,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGrD,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,oBAAoB,CAAC;AAClE,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,OAAO,CAAC;AACzD,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,iBAAiB,CAAC;AACzE,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,MAAM,GAAG,cAAc,CAAC;AAC5E,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;AACnE,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,GAAG,iBAAiB,GAAG,WAAW,CAAC;AAExF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GACpD;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/E,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,yBAAyB,CAAC;AAE1F,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;IAChC,aAAa,EAAE,qBAAqB,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,gBAAgB,CAAC,EAAE,8BAA8B,CAAC;CACnD,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CACF,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClC,CAAC;AAqBF,wBAAuB,QAAQ,CAC7B,IAAI,EAAE,kBAAkB,EACxB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,eAAe,GACvB,cAAc,CAAC,aAAa,CAAC,CAqK/B"}
+{"version":3,"file":"root-walk.d.ts","sourceRoot":"","sources":["../src/root-walk.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAClG,OAAO,KAAK,EAAY,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGrD,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,oBAAoB,CAAC;AAClE,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,OAAO,CAAC;AACzD,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,iBAAiB,CAAC;AACzE,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,MAAM,GAAG,cAAc,CAAC;AAC5E,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;AACnE,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,GAAG,iBAAiB,GAAG,WAAW,CAAC;AAExF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GACpD;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/E,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,yBAAyB,CAAC;AAE1F,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;IAChC,aAAa,EAAE,qBAAqB,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,gBAAgB,CAAC,EAAE,8BAA8B,CAAC;CACnD,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CACF,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClC,CAAC;AAqBF,wBAAuB,QAAQ,CAC7B,IAAI,EAAE,kBAAkB,EACxB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,eAAe,GACvB,cAAc,CAAC,aAAa,CAAC,CAsK/B"}

package/dist/root-walk.js

@@ -98,6 +98,7 @@ export async function* walkRoot(root, relativePath, options) {
         let failed = false;
         let operationError;
         try {
+            const relativeDirectory = directory.split(path.sep).join(path.posix.sep);
             while (true) {
                 let next;
                 try {
@@ -112,7 +113,7 @@ export async function* walkRoot(root, relativePath, options) {
                     return;
                 const name = next.kind === "entry" ? next.entry.name : next.name;
                 const child = directory
-                    ? path.posix.join(directory.split(path.sep).join(path.posix.sep), name)
+                    ? path.posix.join(relativeDirectory, name)
                     : name;
                 if (next.kind === "limit") {
                     yield onLimit(child);

package/dist/root-write-admission.d.ts

@@ -0,0 +1,68 @@
+import type { BigIntStats } from "node:fs";
+import { type DenyMutationPolicy } from "./deny-mutations.js";
+import { type AnyAsyncDirectoryGuard } from "./directory-guard.js";
+import type { PinnedWriteMutationAdmission } from "./pinned-write.js";
+import type { RootContext } from "./root-context.js";
+import { resolvePathInRoot } from "./root-context.js";
+import { type MutationSymlinkPolicy } from "./root-symlink-policy.js";
+import { type PreparedRootWriteParent } from "./root-write-complete-parent.js";
+export type PinnedWriteTarget = Readonly<{
+    rootReal: string;
+    targetPath: string;
+    relativeParentPath: string;
+    basename: string;
+    mode: number;
+    mutationAdmission?: PinnedWriteMutationAdmission;
+}>;
+export type GuardedWritePath = Awaited<ReturnType<typeof resolvePathInRoot>>;
+export type SelectedRootWriteTargetAdmission = Readonly<{
+    authorize(selectedTargetPath: string): Promise<void>;
+}>;
+export type GuardedRootWriteTarget = Readonly<{
+    resolvedPath: GuardedWritePath;
+    targetPath: string;
+    mutationAdmission?: PinnedWriteMutationAdmission;
+    selectedTargetAdmission?: SelectedRootWriteTargetAdmission;
+}>;
+export type RootWritePathSelection = Readonly<{
+    mutationAdmission: PinnedWriteMutationAdmission;
+    selectedTargetAdmission: SelectedRootWriteTargetAdmission;
+    operationTargetPath: string;
+    selectedPath: string;
+    parentGuard: AnyAsyncDirectoryGuard;
+}>;
+export type RetainedRootWriteSelection = RootWritePathSelection & Readonly<{
+    identity: Readonly<Pick<BigIntStats, "dev" | "ino">>;
+}>;
+export declare function retainRootWriteSelection(owner: object, selection: RetainedRootWriteSelection): void;
+export declare function createRootWriteSelectionForFd(selection: RootWritePathSelection, fd: number): RetainedRootWriteSelection;
+export declare function takeRootWriteSelection(owner: object): RetainedRootWriteSelection | undefined;
+export declare function assertRootWritePathSelectionSync(root: RootContext, selection: RootWritePathSelection): void;
+export declare function assertRootWriteSelectionSync(root: RootContext, selection: RetainedRootWriteSelection, verifyBinding: boolean, fd?: number): void;
+export declare function prepareRootWritePathSelection(params: Omit<RootWritePathSelection, "parentGuard"> & Readonly<{
+    preparedParent?: PreparedRootWriteParent;
+}>): Promise<RootWritePathSelection>;
+export declare function prepareGuardedRootWritePathSelection(guarded: {
+    mutationAdmission?: PinnedWriteMutationAdmission;
+    selectedTargetAdmission?: SelectedRootWriteTargetAdmission;
+} | undefined, selectedPath: string, operationTargetPath?: string, preparedParent?: PreparedRootWriteParent): Promise<RootWritePathSelection | undefined>;
+export declare function refreshRootWritePathSelection(selection: RootWritePathSelection): Promise<void>;
+/**
+ * Re-authorize a retained shared-JavaScript destination without recapturing
+ * either its pathname binding or its exact parent fence.
+ */
+export declare function refreshRootWriteSelection(root: RootContext, selection: RetainedRootWriteSelection, verifyBinding: boolean, fd?: number): Promise<void>;
+export declare function refreshRetainedRootWriteAdmission(root: RootContext, selection: RetainedRootWriteSelection, verifyBinding: boolean, fd?: number): Promise<void>;
+type GuardedWritePathOptions = {
+    relativePath: string;
+    denyMutations?: DenyMutationPolicy;
+    mutationSymlinks?: MutationSymlinkPolicy;
+    allowFinalSymlink?: boolean;
+    protectDeniedAncestors?: boolean;
+    shouldAssertNoPathAlias?: (resolved: GuardedWritePath) => Promise<boolean> | boolean;
+};
+export declare function resolveGuardedWritePathInRoot(root: RootContext, params: GuardedWritePathOptions): Promise<GuardedWritePath>;
+export declare function resolveGuardedWriteTargetInRoot(root: RootContext, params: GuardedWritePathOptions): Promise<GuardedRootWriteTarget>;
+export declare function resolvePinnedWriteTargetInRoot(root: RootContext, relativePath: string, requestedMode?: number, denyMutations?: DenyMutationPolicy, overwrite?: boolean, mutationSymlinks?: MutationSymlinkPolicy): Promise<PinnedWriteTarget>;
+export {};
+//# sourceMappingURL=root-write-admission.d.ts.map

package/dist/root-write-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-write-admission.d.ts","sourceRoot":"","sources":["../src/root-write-admission.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;AAE7E,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,SAAS,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD,CAAC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,YAAY,EAAE,gBAAgB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;IACjD,uBAAuB,CAAC,EAAE,gCAAgC,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,iBAAiB,EAAE,4BAA4B,CAAC;IAChD,uBAAuB,EAAE,gCAAgC,CAAC;IAC1D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,sBAAsB,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,sBAAsB,GAAG,QAAQ,CAAC;IACzE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;CACtD,CAAC,CAAC;AAIH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,0BAA0B,GACpC,IAAI,CAEN;AAED,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,sBAAsB,EACjC,EAAE,EAAE,MAAM,GACT,0BAA0B,CAM5B;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS,CAI5F;AAqED,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,sBAAsB,GAChC,IAAI,CAkBN;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,0BAA0B,EACrC,aAAa,EAAE,OAAO,EACtB,EAAE,CAAC,EAAE,MAAM,GACV,IAAI,CAGN;AAsBD,wBAAsB,6BAA6B,CAAC,MAAM,EAAE,IAAI,CAC9D,sBAAsB,EACtB,aAAa,CACd,GAAG,QAAQ,CAAC;IACX,cAAc,CAAC,EAAE,uBAAuB,CAAC;CAC1C,CAAC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA4BnC;AAED,wBAAsB,oCAAoC,CACxD,OAAO,EAAE;IACP,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;IACjD,uBAAuB,CAAC,EAAE,gCAAgC,CAAC;CAC5D,GAAG,SAAS,EACb,YAAY,EAAE,MAAM,EACpB,mBAAmB,SAAe,EAClC,cAAc,CAAC,EAAE,uBAAuB,GACvC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAU7C;AAED,wBAAsB,6BAA6B,CACjD,SAAS,EAAE,sBAAsB,GAChC,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,0BAA0B,EACrC,aAAa,EAAE,OAAO,EACtB,EAAE,CAAC,EAAE,MAAM,GACV,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,0BAA0B,EACrC,aAAa,EAAE,OAAO,EACtB,EAAE,CAAC,EAAE,MAAM,GACV,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,KAAK,uBAAuB,GAAG;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACtF,CAAC;AAEF,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CA0B3B;AAED,wBAAsB,+BAA+B,CACnD,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,sBAAsB,CAAC,CAkDjC;AAED,wBAAsB,8BAA8B,CAClD,IAAI,EAAE,WAAW,EACjB,YAAY,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,MAAM,EACtB,aAAa,CAAC,EAAE,kBAAkB,EAClC,SAAS,UAAO,EAChB,gBAAgB,CAAC,EAAE,qBAAqB,GACvC,OAAO,CAAC,iBAAiB,CAAC,CA8D5B"}