@openclaw/fs-safe 0.18.0 → 0.18.2

package/dist/temp-workspace-identity.d.ts

@@ -1,14 +0,0 @@
-import { type BigIntStats, type Stats } from "node:fs";
-export type TempWorkspaceIdentity = Readonly<{
-    dev: bigint;
-    ino: bigint;
-}>;
-export type TempWorkspaceNumericIdentity = Readonly<{
-    dev: number;
-    ino: number;
-}>;
-export type TempWorkspaceIdentityStat = BigIntStats | Stats;
-export declare const TEMP_WORKSPACE_NUMERIC_IDENTITY_REPLAY: boolean;
-export declare function projectTempWorkspaceNumericIdentity(identity: TempWorkspaceIdentity): TempWorkspaceNumericIdentity | undefined;
-export declare function inspectTempWorkspaceDescriptorIdentitySync(fd: number, expected: TempWorkspaceIdentity, numeric: TempWorkspaceNumericIdentity | undefined): TempWorkspaceIdentityStat;
-export declare function inspectTempWorkspaceDirectoryIdentitySync(dir: string, expected: TempWorkspaceIdentity, numeric: TempWorkspaceNumericIdentity | undefined): TempWorkspaceIdentityStat;

package/dist/temp-workspace-identity.js

@@ -1,41 +0,0 @@
-import fsSync, {} from "node:fs";
-import { observeDirectoryIdentitySync } from "./directory-guard.js";
-import { FsSafeError } from "./errors.js";
-import { recordFileObservationFailure } from "./file-observation.js";
-import { inspectFileIdentitySync } from "./strict-file-identity.js";
-export const TEMP_WORKSPACE_NUMERIC_IDENTITY_REPLAY = process.platform === "linux" || process.platform === "darwin";
-export function projectTempWorkspaceNumericIdentity(identity) {
-    const dev = Number(identity.dev);
-    const ino = Number(identity.ino);
-    if (!Number.isSafeInteger(dev) || dev < 0 || BigInt(dev) !== identity.dev ||
-        !Number.isSafeInteger(ino) || ino < 0 || BigInt(ino) !== identity.ino) {
-        return undefined;
-    }
-    return Object.freeze({ dev, ino });
-}
-function identityMismatch() {
-    const error = new FsSafeError("path-mismatch", "file identity changed or could not be verified");
-    recordFileObservationFailure(error, "identity");
-    throw error;
-}
-function inspectNumericIdentity(current, expected) {
-    if (!Number.isSafeInteger(current.dev) || current.dev < 0 || current.dev !== expected.dev ||
-        !Number.isSafeInteger(current.ino) || current.ino < 0 || current.ino !== expected.ino) {
-        identityMismatch();
-    }
-    return current;
-}
-export function inspectTempWorkspaceDescriptorIdentitySync(fd, expected, numeric) {
-    // A malformed or mismatched numeric observation is definite and never
-    // retried. Unsafe receipts and other platforms retain exact replay.
-    if (TEMP_WORKSPACE_NUMERIC_IDENTITY_REPLAY && numeric) {
-        return inspectNumericIdentity(fsSync.fstatSync(fd), numeric);
-    }
-    return inspectFileIdentitySync(() => fsSync.fstatSync(fd, { bigint: true }), expected);
-}
-export function inspectTempWorkspaceDirectoryIdentitySync(dir, expected, numeric) {
-    if (TEMP_WORKSPACE_NUMERIC_IDENTITY_REPLAY && numeric) {
-        return inspectNumericIdentity(observeDirectoryIdentitySync(dir), numeric);
-    }
-    return inspectFileIdentitySync(() => observeDirectoryIdentitySync(dir, { bigint: true }), expected);
-}

package/dist/temp-workspace-permissions.d.ts

@@ -1,3 +0,0 @@
-import type { BigIntStats, Stats } from "node:fs";
-export declare function validateTempWorkspaceDirMode(mode: number): void;
-export declare function assertTrustedTempWorkspaceDirectory(stat: Pick<BigIntStats, "uid" | "mode"> | Pick<Stats, "uid" | "mode">, uid: number | undefined, child?: boolean): void;

package/dist/temp-workspace-permissions.js

@@ -1,32 +0,0 @@
-import { FsSafeError } from "./errors.js";
-export function validateTempWorkspaceDirMode(mode) {
-    if (!Number.isInteger(mode) || mode < 0 || mode > 0o7777) {
-        throw new FsSafeError("insecure-permissions", "temp workspace dirMode must be permission bits");
-    }
-    if (process.platform !== "win32" && (mode & 0o022) !== 0) {
-        throw new FsSafeError("insecure-permissions", "temp workspace must not be group/world writable");
-    }
-}
-export function assertTrustedTempWorkspaceDirectory(stat, uid, child = false) {
-    if (uid === undefined)
-        return;
-    const ownedByUser = typeof stat.uid === "bigint" ? stat.uid === BigInt(uid) : stat.uid === uid;
-    const ownedByRoot = typeof stat.uid === "bigint" ? stat.uid === 0n : stat.uid === 0;
-    if (!ownedByUser && (child || !ownedByRoot)) {
-        throw new FsSafeError("not-owned", "temp workspace directory has an untrusted owner");
-    }
-    // A root/current-user-owned sticky directory protects children owned by us,
-    // including the usual shared system temp directory. Never chmod that parent.
-    const writable = typeof stat.mode === "bigint"
-        ? (stat.mode & 18n) !== 0n
-        : Number.isSafeInteger(stat.mode) && stat.mode >= 0 && (stat.mode & 0o022) !== 0;
-    const sticky = typeof stat.mode === "bigint"
-        ? (stat.mode & 512n) !== 0n
-        : Number.isSafeInteger(stat.mode) && stat.mode >= 0 && (stat.mode & 0o1000) !== 0;
-    if (typeof stat.mode !== "bigint" && (!Number.isSafeInteger(stat.mode) || stat.mode < 0)) {
-        throw new FsSafeError("insecure-permissions", "temp workspace directory permissions are invalid");
-    }
-    if (writable && (child || !sticky)) {
-        throw new FsSafeError("insecure-permissions", "temp workspace directory is group/world writable without sticky protection");
-    }
-}