@openclaw/fs-safe 0.11.0 → 0.13.0

package/dist/temp-workspace-owner.js

@@ -2,12 +2,11 @@ import { randomUUID } from "node:crypto";
 import fsSync from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
-import { createAsyncDirectoryGuard, createSyncDirectoryGuard } from "./directory-guard.js";
 import { FsSafeError } from "./errors.js";
+import { assertNoWindowsPathAlias, resolvePathPreservingWindowsRoot } from "./windows-path-alias.js";
 import { sameFileIdentityForCleanup } from "./file-identity.js";
-import { withAsyncDirectoryGuards, withSyncDirectoryGuards } from "./guarded-mutation.js";
 import { getNativeBinding } from "./native.js";
-import { assertStagedDirectoryCurrent, openStagedDirectory } from "./staged-directory.js";
+import { openTempWorkspaceCleanupParent, TempWorkspaceRetainedChild, } from "./temp-workspace-descriptor.js";
 import { getFsSafeTestHooks } from "./test-hooks.js";
 function isNativeCleanupBinding(binding) {
     return typeof binding?.renameNoReplace === "function" &&
@@ -25,9 +24,27 @@ function nativeRemovalError(result) {
 export class TempWorkspaceCleanupCapability {
     binding;
     parent;
+    #admission;
+    #safety;
     #ownedTreeRemovalAvailable;
-    #closed = false;
-    constructor(root, safety) {
+    #phase = "new";
+    constructor(root, safety, admission, dirMode) {
+        assertNoWindowsPathAlias(root, "filesystem");
+        const admittedRoot = admission.dir;
+        assertNoWindowsPathAlias(admittedRoot, "filesystem");
+        const resolvedRoot = resolvePathPreservingWindowsRoot(root);
+        assertNoWindowsPathAlias(resolvedRoot, "filesystem");
+        if (resolvedRoot !== resolvePathPreservingWindowsRoot(admittedRoot)) {
+            throw new FsSafeError("path-mismatch", "temp workspace cleanup parent differs from admitted root");
+        }
+        this.#admission = admission;
+        this.#safety = safety;
+        // POSIX enumeration reopens fd-relative ".", so retaining O_RDONLY before
+        // chmod cannot supply read/search authority that the final mode removes.
+        const childModeAllowsRemoval = process.platform === "win32" || (dirMode & 0o500) === 0o500;
+        if (safety === "require-bounded" && !childModeAllowsRemoval) {
+            throw new FsSafeError("helper-unavailable", "temp workspace owned-tree cleanup requires owner read and search in dirMode");
+        }
         let binding;
         try {
             binding = getNativeBinding();
@@ -39,47 +56,104 @@ export class TempWorkspaceCleanupCapability {
         this.binding = binding;
         let parent;
         try {
-            parent = openStagedDirectory(root);
-            assertStagedDirectoryCurrent(parent.receipt);
+            parent = openTempWorkspaceCleanupParent(root, admission);
         }
         catch {
             if (parent)
                 fsSync.closeSync(parent.fd);
             parent = undefined;
         }
-        this.parent = parent;
         let available = false;
-        if (parent && isNativeCleanupBinding(binding)) {
+        if (childModeAllowsRemoval && parent?.access === "read" && isNativeCleanupBinding(binding)) {
+            let probeReady = false;
+            try {
+                admission.prepareCleanupProbe(parent.fd);
+                probeReady = true;
+            }
+            catch (error) {
+                // A descriptor that cannot be associated even provisionally must not
+                // reach native code or remain available to compatible cleanup.
+                try {
+                    fsSync.closeSync(parent.fd);
+                }
+                catch (closeError) {
+                    throw new AggregateError([error, closeError], "temp workspace cleanup parent probe admission and close failed");
+                }
+                parent = undefined;
+            }
             try {
-                available = binding.ownedTreeRemovalAvailable(parent.fd) === true;
+                if (probeReady && parent) {
+                    available = binding.ownedTreeRemovalAvailable(parent.fd) === true;
+                }
             }
             catch {
                 // Runtime denial must select fallback or reject before child creation.
             }
         }
+        this.parent = parent;
         this.#ownedTreeRemovalAvailable = available;
-        if (safety === "require-bounded" && !this.canRemoveOwnedTree) {
+        if (safety === "require-bounded" && !this.#ownedTreeRemovalAvailable) {
             this.close();
             throw new FsSafeError("helper-unavailable", "temp workspace owned-tree cleanup is unavailable");
         }
     }
     get canRemoveOwnedTree() {
-        return !this.#closed && this.#ownedTreeRemovalAvailable;
+        return (this.#phase === "ready" || this.#phase === "sealed") &&
+            this.#ownedTreeRemovalAvailable;
     }
-    assertCurrent() {
-        if (this.#closed || !this.parent) {
+    prepareChildCreation() {
+        const replay = this.#phase === "ready";
+        if (this.#phase !== "new" && !replay) {
+            throw new FsSafeError("path-mismatch", "temp workspace cleanup parent is unavailable");
+        }
+        // A failed initial admission or receipt replay is terminal: no earlier
+        // authority may survive a partial revalidation.
+        this.#phase = "failed";
+        if (replay) {
+            if (this.parent)
+                this.#admission.associateAncestry(this.parent.fd);
+            else
+                this.#admission.assertAncestry();
+        }
+        else {
+            this.#admission.prepareChildCreation(this.parent?.fd);
+        }
+        // The retained descriptor cannot authorize cleanup until the complete
+        // ancestry and its exact descriptor association succeeded together.
+        this.#phase = "ready";
+    }
+    #assertCurrent(ancestry) {
+        if ((this.#phase !== "ready" && this.#phase !== "sealed") || !this.parent) {
+            throw new FsSafeError("path-mismatch", "temp workspace cleanup parent is unavailable");
+        }
+        if (ancestry)
+            this.#admission.associateAncestry(this.parent.fd);
+        else
+            this.#admission.associateCurrent(this.parent.fd);
+    }
+    admitChildDescriptor(canEnumerate) {
+        if (this.#phase !== "ready") {
             throw new FsSafeError("path-mismatch", "temp workspace cleanup parent is unavailable");
         }
-        assertStagedDirectoryCurrent(this.parent.receipt);
-        const current = fsSync.fstatSync(this.parent.fd, { bigint: true });
-        if (!sameFileIdentityForCleanup(current, this.parent.receipt.identity)) {
-            throw new FsSafeError("path-mismatch", "temp workspace cleanup parent changed");
+        // From this point the capability belongs to this successfully created
+        // child. Collision retries and further preparation must remain impossible.
+        this.#phase = "sealed";
+        const bounded = this.canRemoveOwnedTree && canEnumerate;
+        if (this.#safety === "require-bounded" && !bounded) {
+            throw new FsSafeError("helper-unavailable", "temp workspace owned-tree cleanup requires a readable child descriptor");
         }
+        return bounded;
+    }
+    assertCurrent() {
+        this.#assertCurrent(false);
+    }
+    assertAncestryCurrent() {
+        this.#assertCurrent(true);
     }
     close() {
-        if (this.#closed)
+        if (this.#phase === "closed")
             return;
-        this.#closed = true;
+        this.#phase = "closed";
         if (this.parent)
             fsSync.closeSync(this.parent.fd);
     }
@@ -94,21 +168,12 @@ export class TempWorkspaceCleanupOwner {
     #exitInterrupted = false;
     #result;
     #pending;
-    constructor(dir, identity, capability) {
-        this.#dir = dir;
-        this.#identity = { dev: identity.dev, ino: identity.ino };
+    constructor(retained, capability, retainDescriptor) {
+        const child = retained.transfer(retainDescriptor);
+        this.#dir = child.dir;
+        this.#identity = child.identity;
         this.#capability = capability;
-        let directory;
-        if (capability.canRemoveOwnedTree) {
-            directory = openStagedDirectory(dir);
-            const current = fsSync.fstatSync(directory.fd, { bigint: true });
-            if (!sameFileIdentityForCleanup(current, this.#identity)) {
-                fsSync.closeSync(directory.fd);
-                capability.close();
-                throw new FsSafeError("path-mismatch", "temp workspace changed while retaining cleanup authority");
-            }
-        }
-        this.#directory = directory;
+        this.#directory = child.directory;
     }
     #repeat() {
         return this.#result === "removed" ? "missing" : this.#result;
@@ -186,11 +251,10 @@ export class TempWorkspaceCleanupOwner {
                 this.#capability.binding.renameNoReplace(parent.fd, path.basename(this.#dir), parent.fd, name);
             }
             else {
-                const guard = createSyncDirectoryGuard(parent.receipt.path);
-                withSyncDirectoryGuards([guard], () => {
-                    this.#capability.assertCurrent();
-                    fsSync.renameSync(this.#dir, quarantinePath);
-                });
+                // The admitted receipt is exact and descriptor-associated. Reuse it as
+                // the pre/post parent fence instead of layering a numeric guard over it.
+                this.#capability.assertCurrent();
+                fsSync.renameSync(this.#dir, quarantinePath);
             }
             this.#capability.assertCurrent();
             const quarantined = fsSync.lstatSync(quarantinePath, { bigint: true });
@@ -232,17 +296,15 @@ export class TempWorkspaceCleanupOwner {
         }
         let removalError;
         try {
-            const guard = await createAsyncDirectoryGuard(this.#capability.parent.receipt.path);
-            await withAsyncDirectoryGuards([guard], async () => {
-                this.#assertQuarantine(quarantine);
-                try {
-                    await fs.rm(quarantine.path, { recursive: true, force: true });
-                }
-                catch (error) {
-                    removalError = error;
-                    throw error;
-                }
-            });
+            this.#assertQuarantine(quarantine);
+            try {
+                await fs.rm(quarantine.path, { recursive: true, force: true });
+            }
+            catch (error) {
+                removalError = error;
+                throw error;
+            }
+            this.#capability.assertCurrent();
             return "removed";
         }
         catch (error) {
@@ -258,17 +320,15 @@ export class TempWorkspaceCleanupOwner {
         }
         let removalError;
         try {
-            const guard = createSyncDirectoryGuard(this.#capability.parent.receipt.path);
-            withSyncDirectoryGuards([guard], () => {
-                this.#assertQuarantine(quarantine);
-                try {
-                    fsSync.rmSync(quarantine.path, { recursive: true, force: true });
-                }
-                catch (error) {
-                    removalError = error;
-                    throw error;
-                }
-            });
+            this.#assertQuarantine(quarantine);
+            try {
+                fsSync.rmSync(quarantine.path, { recursive: true, force: true });
+            }
+            catch (error) {
+                removalError = error;
+                throw error;
+            }
+            this.#capability.assertCurrent();
             return "removed";
         }
         catch (error) {

package/dist/temp-workspace-permissions.d.ts

@@ -0,0 +1,4 @@
+import type { BigIntStats, Stats } from "node:fs";
+export declare function validateTempWorkspaceDirMode(mode: number): void;
+export declare function assertTrustedTempWorkspaceDirectory(stat: Pick<BigIntStats, "uid" | "mode"> | Pick<Stats, "uid" | "mode">, uid: number | undefined, child?: boolean): void;
+//# sourceMappingURL=temp-workspace-permissions.d.ts.map

package/dist/temp-workspace-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temp-workspace-permissions.d.ts","sourceRoot":"","sources":["../src/temp-workspace-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAGlD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAO/D;AAED,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC,EACrE,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,KAAK,UAAQ,GACZ,IAAI,CAwBN"}

package/dist/temp-workspace-permissions.js

@@ -0,0 +1,32 @@
+import { FsSafeError } from "./errors.js";
+export function validateTempWorkspaceDirMode(mode) {
+    if (!Number.isInteger(mode) || mode < 0 || mode > 0o7777) {
+        throw new FsSafeError("insecure-permissions", "temp workspace dirMode must be permission bits");
+    }
+    if (process.platform !== "win32" && (mode & 0o022) !== 0) {
+        throw new FsSafeError("insecure-permissions", "temp workspace must not be group/world writable");
+    }
+}
+export function assertTrustedTempWorkspaceDirectory(stat, uid, child = false) {
+    if (uid === undefined)
+        return;
+    const ownedByUser = typeof stat.uid === "bigint" ? stat.uid === BigInt(uid) : stat.uid === uid;
+    const ownedByRoot = typeof stat.uid === "bigint" ? stat.uid === 0n : stat.uid === 0;
+    if (!ownedByUser && (child || !ownedByRoot)) {
+        throw new FsSafeError("not-owned", "temp workspace directory has an untrusted owner");
+    }
+    // A root/current-user-owned sticky directory protects children owned by us,
+    // including the usual shared system temp directory. Never chmod that parent.
+    const writable = typeof stat.mode === "bigint"
+        ? (stat.mode & 18n) !== 0n
+        : Number.isSafeInteger(stat.mode) && stat.mode >= 0 && (stat.mode & 0o022) !== 0;
+    const sticky = typeof stat.mode === "bigint"
+        ? (stat.mode & 512n) !== 0n
+        : Number.isSafeInteger(stat.mode) && stat.mode >= 0 && (stat.mode & 0o1000) !== 0;
+    if (typeof stat.mode !== "bigint" && (!Number.isSafeInteger(stat.mode) || stat.mode < 0)) {
+        throw new FsSafeError("insecure-permissions", "temp workspace directory permissions are invalid");
+    }
+    if (writable && (child || !sticky)) {
+        throw new FsSafeError("insecure-permissions", "temp workspace directory is group/world writable without sticky protection");
+    }
+}

package/dist/temp-workspace-types.d.ts

@@ -0,0 +1,40 @@
+import type { FileStore, FileStoreSync } from "./file-store.js";
+import type { TempPathIdentityReceipt } from "./temp-cleanup.js";
+import type { TempWorkspaceCleanupResult, TempWorkspaceCleanupSafety } from "./temp-workspace-owner.js";
+export type TempWorkspaceOptions = {
+    rootDir: string;
+    prefix: string;
+    dirMode?: number;
+    mode?: number;
+    cleanupSafety?: TempWorkspaceCleanupSafety;
+};
+export type TempWorkspace = {
+    dir: string;
+    identity: TempPathIdentityReceipt;
+    store: FileStore;
+    path(fileName: string): string;
+    write(fileName: string, data: string | Uint8Array): Promise<string>;
+    writeText(fileName: string, data: string): Promise<string>;
+    writeJson(fileName: string, data: unknown, options?: {
+        trailingNewline?: boolean;
+    }): Promise<string>;
+    copyIn(fileName: string, sourcePath: string): Promise<string>;
+    read(fileName: string): Promise<Buffer>;
+    cleanup(): Promise<TempWorkspaceCleanupResult>;
+    [Symbol.asyncDispose](): Promise<void>;
+};
+export type TempWorkspaceSync = {
+    dir: string;
+    identity: TempPathIdentityReceipt;
+    store: FileStoreSync;
+    path(fileName: string): string;
+    write(fileName: string, data: string | Uint8Array): string;
+    writeText(fileName: string, data: string): string;
+    writeJson(fileName: string, data: unknown, options?: {
+        trailingNewline?: boolean;
+    }): string;
+    read(fileName: string): Buffer;
+    cleanup(): TempWorkspaceCleanupResult;
+    [Symbol.dispose](): void;
+};
+//# sourceMappingURL=temp-workspace-types.d.ts.map

package/dist/temp-workspace-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temp-workspace-types.d.ts","sourceRoot":"","sources":["../src/temp-workspace-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAExG,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,0BAA0B,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/C,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,0BAA0B,CAAC;IACtC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;CAC1B,CAAC"}

package/dist/temp-workspace-types.js

@@ -0,0 +1 @@
+export {};

package/dist/temp.d.ts

@@ -1,4 +1,4 @@
 export { tempWorkspace, type TempWorkspace, type TempWorkspaceOptions, type TempWorkspaceCleanupResult, type TempWorkspaceCleanupSafety, tempWorkspaceSync, type TempWorkspaceSync, withTempWorkspace, withTempWorkspaceSync, } from "./private-temp-workspace.js";
 export type { TempPathIdentityReceipt } from "./temp-cleanup.js";
-export { resolveSecureTempRoot, type ResolveSecureTempRootOptions } from "./secure-temp-dir.js";
+export { resolveSecureTempRoot, type ResolveSecureTempRootOptions, type SecureTempRootDescriptorAdapter, } from "./secure-temp-dir.js";
 //# sourceMappingURL=temp.d.ts.map

package/dist/temp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"temp.d.ts","sourceRoot":"","sources":["../src/temp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"temp.d.ts","sourceRoot":"","sources":["../src/temp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,GACrC,MAAM,sBAAsB,CAAC"}

package/dist/temp.js

@@ -1,2 +1,2 @@
 export { tempWorkspace, tempWorkspaceSync, withTempWorkspace, withTempWorkspaceSync, } from "./private-temp-workspace.js";
-export { resolveSecureTempRoot } from "./secure-temp-dir.js";
+export { resolveSecureTempRoot, } from "./secure-temp-dir.js";

package/dist/test-hooks.d.ts

@@ -5,10 +5,17 @@ export type FsSafeTestHooks = {
     beforeOpen?: (filePath: string, flags: number) => Promise<void> | void;
     afterOpen?: (filePath: string, handle: FileHandle) => Promise<void> | void;
     afterOpenedPathIdentityCheck?: (filePath: string, handle: FileHandle) => Promise<void> | void;
+    afterRootReadPathResolution?: (filePath: string) => Promise<void> | void;
+    beforeRootReadFinalFence?: (filePath: string, handle: FileHandle) => Promise<void> | void;
+    afterRootReadFinalPathIdentityCheck?: (filePath: string, handle: FileHandle) => void;
     beforeArchiveOutputMutation?: (operation: "mkdir" | "chmod", targetPath: string) => Promise<void> | void;
     beforeFileStorePruneDescend?: (dirPath: string) => Promise<void> | void;
     beforeFileStoreSyncPrivateWrite?: (filePath: string) => void;
     beforeRootFallbackMutation?: (operation: "mkdir" | "move" | "remove", targetPath: string) => Promise<void> | void;
+    beforePinnedWriteParentAdmission?: (targetPath: string) => Promise<void> | void;
+    beforeRootStatObservation?: (targetPath: string) => Promise<void> | void;
+    beforeRootStatInitialObservation?: (targetPath: string) => Promise<void> | void;
+    beforeRootListObservation?: (directoryPath: string, withFileTypes: boolean) => Promise<void> | void;
     afterPinnedWriteFallbackRename?: (targetPath: string) => Promise<void> | void;
     beforeSiblingTempWrite?: (tempPath: string) => Promise<void> | void;
     beforeSidecarLockSnapshotOpen?: (lockPath: string) => Promise<void> | void;

package/dist/test-hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-hooks.d.ts","sourceRoot":"","sources":["../src/test-hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,MAAM,eAAe,GAAG;IAC5B,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/D,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3E,4BAA4B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9F,2BAA2B,CAAC,EAAE,CAC5B,SAAS,EAAE,OAAO,GAAG,OAAO,EAC5B,UAAU,EAAE,MAAM,KACf,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,2BAA2B,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7D,0BAA0B,CAAC,EAAE,CAC3B,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,EACtC,UAAU,EAAE,MAAM,KACf,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,8BAA8B,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9E,sBAAsB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACpE,6BAA6B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3E,2BAA2B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7D,gCAAgC,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACpF,oCAAoC,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IACxE,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,yBAAyB,CAAC,EAAE,CAC1B,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,EAC1D,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,gBAAgB,KACvB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,0BAA0B,CAAC,EAAE,CAC3B,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,EAC1D,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,gBAAgB,KACvB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC3B,CAAC;AAQF,wBAAgB,kBAAkB,IAAI,eAAe,GAAG,SAAS,CAEhE;AAED,wBAAgB,2BAA2B,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAKzE"}
+{"version":3,"file":"test-hooks.d.ts","sourceRoot":"","sources":["../src/test-hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,MAAM,eAAe,GAAG;IAC5B,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/D,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3E,4BAA4B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9F,2BAA2B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzE,wBAAwB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1F,mCAAmC,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IACrF,2BAA2B,CAAC,EAAE,CAC5B,SAAS,EAAE,OAAO,GAAG,OAAO,EAC5B,UAAU,EAAE,MAAM,KACf,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,2BAA2B,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7D,0BAA0B,CAAC,EAAE,CAC3B,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,EACtC,UAAU,EAAE,MAAM,KACf,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,gCAAgC,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAChF,yBAAyB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzE,gCAAgC,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAChF,yBAAyB,CAAC,EAAE,CAC1B,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,OAAO,KACnB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,8BAA8B,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9E,sBAAsB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACpE,6BAA6B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3E,2BAA2B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7D,gCAAgC,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACpF,oCAAoC,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IACxE,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,yBAAyB,CAAC,EAAE,CAC1B,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,EAC1D,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,gBAAgB,KACvB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,0BAA0B,CAAC,EAAE,CAC3B,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,EAC1D,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,gBAAgB,KACvB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC3B,CAAC;AAQF,wBAAgB,kBAAkB,IAAI,eAAe,GAAG,SAAS,CAEhE;AAED,wBAAgB,2BAA2B,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAKzE"}

package/dist/text-atomic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"text-atomic.d.ts","sourceRoot":"","sources":["../src/text-atomic.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAYf"}
+{"version":3,"file":"text-atomic.d.ts","sourceRoot":"","sources":["../src/text-atomic.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/text-atomic.js

@@ -1,9 +1,11 @@
 import { replaceFileAtomic } from "./replace-file.js";
+import { admitStandalonePublicationPath } from "./standalone-publication-path.js";
 export async function writeTextAtomic(filePath, content, options) {
+    const admittedPath = admitStandalonePublicationPath(filePath);
     const payload = options?.trailingNewline && !content.endsWith("\n") ? `${content}\n` : content;
     const durable = options?.durable ?? true;
     await replaceFileAtomic({
-        filePath,
+        filePath: admittedPath,
         content: payload,
         mode: options?.mode ?? 0o600,
         dirMode: options?.dirMode ?? (0o777 & ~process.umask()),

package/dist/trash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trash.d.ts","sourceRoot":"","sources":["../src/trash.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,sBAAsB,GAAG;IACnC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACjC,CAAC;AAkLF,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,MAAM,CAAC,CAcjB"}
+{"version":3,"file":"trash.d.ts","sourceRoot":"","sources":["../src/trash.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,sBAAsB,GAAG;IACnC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACjC,CAAC;AA8NF,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,MAAM,CAAC,CAgBjB"}

package/dist/trash.js

@@ -6,6 +6,7 @@ import { guardedRenameSync, guardedRmSync } from "./guarded-mutation.js";
 import { realpathSync } from "./realpath.js";
 import { recursiveMkdirPath } from "./recursive-mkdir-path.js";
 import { getFsSafeTestHooks } from "./test-hooks.js";
+import { hasWindowsPathAlias, resolvePathPreservingWindowsRoot, } from "./windows-path-alias.js";
 const TRASH_DESTINATION_COLLISION_CODES = new Set(["EEXIST", "ENOTEMPTY", "ERR_FS_CP_EEXIST"]);
 const TRASH_DESTINATION_RETRY_LIMIT = 4;
 function getFsErrorCode(error) {
@@ -22,32 +23,60 @@ function isTrashDestinationCollision(error) {
 function isSameOrChildPath(candidate, parent) {
     return candidate === parent || candidate.startsWith(parent.endsWith(path.sep) ? parent : `${parent}${path.sep}`);
 }
+function assertNoTrashPathAlias(value, label) {
+    if (hasWindowsPathAlias(value, "filesystem")) {
+        throw new Error(`Refusing to trash ${label} using a Windows filesystem namespace alias: ${value}`);
+    }
+}
+function collectAllowedTrashRoots(allowedRoots) {
+    const roots = [...(allowedRoots ?? [os.homedir(), os.tmpdir()])];
+    for (const root of roots)
+        assertNoTrashPathAlias(root, "allowed root");
+    return roots;
+}
 function resolveAllowedTrashRoots(allowedRoots) {
-    const roots = [...(allowedRoots ?? [os.homedir(), os.tmpdir()])].flatMap((root) => {
-        const lexicalRoot = path.resolve(root);
+    const roots = allowedRoots.flatMap((root) => {
+        assertNoTrashPathAlias(root, "allowed root");
+        const lexicalRoot = resolvePathPreservingWindowsRoot(root);
+        assertNoTrashPathAlias(lexicalRoot, "allowed root");
+        let realRoot;
         try {
             // Keep both spellings: broken symlink targets cannot be realpathed and
             // may only compare equal to the caller's lexical allowed root.
-            return [path.resolve(realpathSync.native(root)), lexicalRoot];
+            realRoot = realpathSync.native(root);
         }
         catch {
             return [lexicalRoot];
         }
+        assertNoTrashPathAlias(realRoot, "allowed root");
+        const resolvedRealRoot = resolvePathPreservingWindowsRoot(realRoot);
+        assertNoTrashPathAlias(resolvedRealRoot, "allowed root");
+        return [resolvedRealRoot, lexicalRoot];
     });
     return [...new Set(roots)];
 }
 function resolveTrashTargetPath(targetPath) {
+    assertNoTrashPathAlias(targetPath, "target path");
+    let realPath;
     try {
-        return { path: path.resolve(realpathSync.native(targetPath)), resolved: true };
+        realPath = realpathSync.native(targetPath);
     }
     catch {
         // Broken symlinks are valid trash targets. Fall back to the lexical path,
         // then rely on lstat identity so the move renames the symlink itself.
-        return { path: path.resolve(targetPath), resolved: false };
+        const lexicalPath = path.resolve(targetPath);
+        assertNoTrashPathAlias(lexicalPath, "target path");
+        return { path: lexicalPath, resolved: false };
     }
+    const resolvedPath = path.resolve(realPath);
+    assertNoTrashPathAlias(resolvedPath, "target path");
+    return { path: resolvedPath, resolved: true };
 }
 function assertAllowedTrashTarget(targetPath, allowedRoots) {
-    const stat = fs.lstatSync(path.resolve(targetPath));
+    assertNoTrashPathAlias(targetPath, "target path");
+    const lexicalTarget = path.resolve(targetPath);
+    assertNoTrashPathAlias(lexicalTarget, "target path");
+    const stat = fs.lstatSync(lexicalTarget);
     const resolvedTarget = resolveTrashTargetPath(targetPath);
     const resolvedTargetPath = resolvedTarget.path;
     const isAllowed = resolveAllowedTrashRoots(allowedRoots).some((root) => resolvedTargetPath !== root && isSameOrChildPath(resolvedTargetPath, root));
@@ -55,7 +84,7 @@ function assertAllowedTrashTarget(targetPath, allowedRoots) {
         throw new Error(`Refusing to trash path outside allowed roots: ${targetPath}`);
     }
     return {
-        path: path.resolve(targetPath),
+        path: lexicalTarget,
         realPath: resolvedTargetPath,
         realPathResolved: resolvedTarget.resolved,
         stat,
@@ -76,7 +105,9 @@ function assertTrashTargetGuard(guard) {
 }
 function resolveTrashDir() {
     const homeDir = os.homedir();
+    assertNoTrashPathAlias(homeDir, "home directory");
     const trashDir = path.join(homeDir, ".Trash");
+    assertNoTrashPathAlias(trashDir, "trash directory");
     fs.mkdirSync(recursiveMkdirPath(trashDir), { recursive: true, mode: 0o700 });
     const trashDirStat = fs.lstatSync(trashDir);
     if (!trashDirStat.isDirectory() || trashDirStat.isSymbolicLink()) {
@@ -84,13 +115,17 @@ function resolveTrashDir() {
     }
     const realHome = path.resolve(realpathSync.native(homeDir));
     const resolvedTrashDir = path.resolve(realpathSync.native(trashDir));
+    assertNoTrashPathAlias(realHome, "home directory");
+    assertNoTrashPathAlias(resolvedTrashDir, "trash directory");
     if (resolvedTrashDir === realHome || !isSameOrChildPath(resolvedTrashDir, realHome)) {
         throw new Error(`Trash directory escaped home directory: ${trashDir}`);
     }
     return resolvedTrashDir;
 }
 function trashBaseName(targetPath) {
+    assertNoTrashPathAlias(targetPath, "target path");
     const resolvedTargetPath = path.resolve(targetPath);
+    assertNoTrashPathAlias(resolvedTargetPath, "target path");
     if (resolvedTargetPath === path.parse(resolvedTargetPath).root) {
         throw new Error(`Refusing to trash root path: ${targetPath}`);
     }
@@ -101,18 +136,26 @@ function trashBaseName(targetPath) {
     return base;
 }
 function resolveContainedPath(root, leaf) {
+    assertNoTrashPathAlias(root, "destination root");
+    assertNoTrashPathAlias(leaf, "destination name");
     const resolvedRoot = path.resolve(root);
     const resolvedPath = path.resolve(resolvedRoot, leaf);
+    assertNoTrashPathAlias(resolvedRoot, "destination root");
+    assertNoTrashPathAlias(resolvedPath, "destination path");
     if (!isSameOrChildPath(resolvedPath, resolvedRoot) || resolvedPath === resolvedRoot) {
         throw new Error(`Trash destination escaped trash directory: ${resolvedPath}`);
     }
     return resolvedPath;
 }
 function reserveTrashDestination(trashDir, base, timestamp) {
+    assertNoTrashPathAlias(trashDir, "trash directory");
+    assertNoTrashPathAlias(base, "destination name");
     const containerPrefix = resolveContainedPath(trashDir, `.fs-safe-trash-${timestamp}-`);
     const container = fs.mkdtempSync(containerPrefix);
     const resolvedContainer = path.resolve(container);
     const resolvedTrashDir = path.resolve(trashDir);
+    assertNoTrashPathAlias(resolvedContainer, "destination container");
+    assertNoTrashPathAlias(resolvedTrashDir, "trash directory");
     if (resolvedContainer === resolvedTrashDir ||
         !isSameOrChildPath(resolvedContainer, resolvedTrashDir)) {
         throw new Error(`Trash destination escaped trash directory: ${container}`);
@@ -122,6 +165,7 @@ function reserveTrashDestination(trashDir, base, timestamp) {
 function copyTrashTargetSync(target, dest) {
     if (target.stat.isSymbolicLink()) {
         const linkTarget = fs.readlinkSync(target.path);
+        assertNoTrashPathAlias(linkTarget, "symlink target");
         assertTrashTargetGuard(target);
         fs.symlinkSync(linkTarget, dest);
         return;
@@ -159,8 +203,10 @@ function movePathToDestination(target, dest) {
 }
 export async function movePathToTrash(targetPath, options = {}) {
     // Avoid resolving external trash helpers through the service PATH during cleanup.
+    assertNoTrashPathAlias(targetPath, "target path");
+    const allowedRoots = collectAllowedTrashRoots(options.allowedRoots);
     const base = trashBaseName(targetPath);
-    const target = assertAllowedTrashTarget(targetPath, options.allowedRoots);
+    const target = assertAllowedTrashTarget(targetPath, allowedRoots);
     const trashDir = resolveTrashDir();
     const timestamp = Date.now();
     for (let attempt = 0; attempt < TRASH_DESTINATION_RETRY_LIMIT; attempt += 1) {

package/dist/walk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"walk.d.ts","sourceRoot":"","sources":["../src/walk.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAC;AAK7B,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IAGnB,UAAU,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACrC,CAAC;AAEF,KAAK,+BAA+B,GAAG,mBAAmB,GAAG;IAC3D,UAAU,EAAE,oBAAoB,EAAE,CAAC;CACpC,CAAC;AAgFF,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,oBAAyB,GACjC,+BAA+B,CAyDjC;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,+BAA+B,CAAC,CAyD1C"}
+{"version":3,"file":"walk.d.ts","sourceRoot":"","sources":["../src/walk.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAC;AAS7B,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IAGnB,UAAU,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACrC,CAAC;AAEF,KAAK,+BAA+B,GAAG,mBAAmB,GAAG;IAC3D,UAAU,EAAE,oBAAoB,EAAE,CAAC;CACpC,CAAC;AA+EF,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,oBAAyB,GACjC,+BAA+B,CA2DjC;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,+BAA+B,CAAC,CA2D1C"}