@openclaw/fs-safe 0.5.1 → 0.5.3

package/dist/permissions.js

@@ -1,52 +1,6 @@
-import { execFile } from "node:child_process";
 import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { promisify } from "node:util";
-import { normalizeLowercaseStringOrEmpty } from "./string-coerce.js";
-import { inspectWindowsPermissionsNative } from "./windows-permissions-native.js";
-import { resolveWindowsSystemCommand } from "./windows-command.js";
-import { inspectWindowsOwner, resolveWindowsCurrentUserSid, resolveWindowsPrincipalSids, } from "./windows-owner.js";
-const execFileAsync = promisify(execFile);
-const INHERIT_FLAGS = new Set(["I", "OI", "CI", "IO", "NP"]);
-const WORLD_PRINCIPALS = new Set(["everyone", "users", "builtin\\users", "authenticated users", "nt authority\\authenticated users", "anonymous logon", "nt authority\\anonymous logon", "guests", "builtin\\guests", "interactive", "nt authority\\interactive", "network", "nt authority\\network", "local"]);
-const TRUSTED_BASE = new Set([
-    "nt authority\\system",
-    "system",
-    "builtin\\administrators",
-    "creator owner",
-    "autorite nt\\système",
-    "nt-autorität\\system",
-    "autoridad nt\\system",
-    "autoridade nt\\system",
-]);
-const WORLD_SUFFIXES = ["\\users", "\\authenticated users"];
-const SID_RE = /^\*?s-\d+-\d+(-\d+)+$/i;
-const TRUSTED_SIDS = new Set([
-    "s-1-5-18",
-    "s-1-5-32-544",
-    "s-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464",
-]);
-const WORLD_SIDS = new Set(["s-1-1-0", "s-1-5-11", "s-1-5-32-545", "s-1-5-7", "s-1-5-32-546", "s-1-5-4", "s-1-2-0", "s-1-5-2"]);
-const STATUS_PREFIXES = [
-    "successfully processed",
-    "processed",
-    "failed processing",
-    "no mapping between account names",
-];
-function stripDiacritics(value) {
-    return value.normalize("NFD").replace(/[\u0300-\u036f]/g, "");
-}
-const TRUSTED_BASE_ASCII = new Set([...TRUSTED_BASE].map(stripDiacritics));
-const normalize = (value) => normalizeLowercaseStringOrEmpty(value);
-const defaultWindowsUserInfo = () => os.userInfo();
-function defaultPermissionExec(command, args) {
-    return execFileAsync(command, args, {
-        encoding: "utf8",
-        windowsHide: true,
-        maxBuffer: 1024 * 1024,
-    });
-}
+import { formatIcaclsResetCommand, inspectWindowsPermissions, } from "./permissions-windows.js";
+export { createIcaclsResetCommand, formatIcaclsResetCommand, formatWindowsAclSummary, inspectWindowsAcl, parseIcaclsOutput, resolveWindowsUserPrincipal, summarizeWindowsAcl, } from "./permissions-windows.js";
 export async function safeStat(targetPath) {
     try {
         const lst = await fs.lstat(targetPath);
@@ -103,58 +57,14 @@ export async function inspectPathPermissions(targetPath, opts) {
     const bits = modeBits(effectiveMode);
     const platform = opts?.platform ?? process.platform;
     if (platform === "win32") {
-        const native = inspectWindowsPermissionsNative({
-            targetPath, stat: st, effectiveIsDir, effectiveMode, bits,
-        });
-        if (native)
-            return native;
-        const owner = await inspectWindowsOwner({
+        return await inspectWindowsPermissions({
             targetPath,
-            env: opts?.env,
-            exec: opts?.exec ?? defaultPermissionExec,
-        });
-        const acl = await inspectWindowsAcl(targetPath, {
-            env: opts?.env,
-            exec: opts?.exec,
-            currentUserSid: owner.currentUserSid,
-            principalSids: owner.principalSids,
-            principalTranslationFailed: owner.principalTranslationFailed,
-        });
-        const ownerFields = {
-            ...(owner.sid ? { ownerSid: owner.sid } : {}),
-            ...(owner.trusted !== undefined ? { ownerTrusted: owner.trusted } : {}),
-            ...(owner.error ? { ownerError: owner.error } : {}),
-        };
-        if (!acl.ok) {
-            return {
-                ok: true,
-                isSymlink: st.isSymlink,
-                isDir: effectiveIsDir,
-                mode: effectiveMode,
-                bits,
-                source: "unknown",
-                worldWritable: false,
-                groupWritable: false,
-                worldReadable: false,
-                groupReadable: false,
-                ...ownerFields,
-                error: acl.error,
-            };
-        }
-        return {
-            ok: true,
-            isSymlink: st.isSymlink,
-            isDir: effectiveIsDir,
-            mode: effectiveMode,
+            stat: st,
+            effectiveIsDir,
+            effectiveMode,
             bits,
-            source: "windows-acl",
-            worldWritable: acl.untrustedWorld.some((entry) => entry.canWrite),
-            groupWritable: acl.untrustedGroup.some((entry) => entry.canWrite),
-            worldReadable: acl.untrustedWorld.some((entry) => entry.canRead),
-            groupReadable: acl.untrustedGroup.some((entry) => entry.canRead),
-            ...ownerFields,
-            aclSummary: formatWindowsAclSummary(acl),
-        };
+            opts,
+        });
     }
     return {
         ok: true,
@@ -182,7 +92,15 @@ export function formatPermissionRemediation(params) {
             env: params.env,
         });
     }
-    return `chmod ${params.posixMode.toString(8).padStart(3, "0")} ${params.targetPath}`;
+    const optionSeparator = params.targetPath.startsWith("-") ? "-- " : "";
+    return (`chmod ${params.posixMode.toString(8).padStart(3, "0")} ${optionSeparator}` +
+        formatPosixShellArgument(params.targetPath));
+}
+function formatPosixShellArgument(value) {
+    if (value && /^[A-Za-z0-9_@%+=:,./-]+$/.test(value)) {
+        return value;
+    }
+    return `'${value.replaceAll("'", `'\\''`)}'`;
 }
 export function modeBits(mode) {
     return mode == null ? null : mode & 0o777;
@@ -202,232 +120,3 @@ export function isWorldReadable(bits) {
 export function isGroupReadable(bits) {
     return bits != null && (bits & 0o040) !== 0;
 }
-function normalizeSid(value) {
-    const normalized = normalize(value);
-    return normalized.startsWith("*") ? normalized.slice(1) : normalized;
-}
-export function resolveWindowsUserPrincipal(env, userInfo = defaultWindowsUserInfo) {
-    const username = env?.USERNAME?.trim() || userInfo().username?.trim();
-    if (!username) {
-        return null;
-    }
-    const domain = env?.USERDOMAIN?.trim();
-    return domain ? `${domain}\\${username}` : username;
-}
-function buildTrustedPrincipals(env) {
-    const trusted = new Set(TRUSTED_BASE);
-    const principal = resolveWindowsUserPrincipal(env);
-    if (principal) {
-        trusted.add(normalize(principal));
-        const userOnly = principal.split("\\").at(-1);
-        if (userOnly) {
-            trusted.add(normalize(userOnly));
-        }
-    }
-    const userSid = normalizeSid(env?.USERSID ?? "");
-    if (userSid && SID_RE.test(userSid) && !WORLD_SIDS.has(userSid)) {
-        trusted.add(userSid);
-    }
-    return trusted;
-}
-function classifyPrincipal(principal, trustedPrincipals) {
-    const normalized = normalize(principal);
-    if (SID_RE.test(normalized)) {
-        const sid = normalizeSid(normalized);
-        if (WORLD_SIDS.has(sid))
-            return "world";
-        if (TRUSTED_SIDS.has(sid) || trustedPrincipals.has(sid))
-            return "trusted";
-        return "group";
-    }
-    if (trustedPrincipals.has(normalized) || TRUSTED_BASE.has(normalized)) {
-        return "trusted";
-    }
-    if (WORLD_PRINCIPALS.has(normalized) ||
-        WORLD_SUFFIXES.some((suffix) => normalized.endsWith(suffix))) {
-        return "world";
-    }
-    const stripped = stripDiacritics(normalized);
-    if (stripped !== normalized && TRUSTED_BASE_ASCII.has(stripped)) {
-        return "trusted";
-    }
-    return "group";
-}
-function rightsFromTokens(tokens) {
-    const upper = tokens.join("").toUpperCase();
-    return {
-        canWrite: upper.includes("F") || upper.includes("M") || upper.includes("W") || upper.includes("D"),
-        canRead: upper.includes("F") || upper.includes("M") || upper.includes("R"),
-    };
-}
-function stripTargetPrefix(params) {
-    if (params.lowerLine.startsWith(params.lowerTarget)) {
-        return params.trimmedLine.slice(params.normalizedTarget.length).trim();
-    }
-    if (params.lowerLine.startsWith(params.quotedLower)) {
-        return params.trimmedLine.slice(params.quotedTarget.length).trim();
-    }
-    return params.trimmedLine;
-}
-function parseAceEntry(entry) {
-    if (!entry.includes("("))
-        return null;
-    const idx = entry.indexOf(":");
-    if (idx === -1)
-        return null;
-    const principal = entry.slice(0, idx).trim();
-    const rawRights = entry.slice(idx + 1).trim();
-    const tokens = rawRights
-        .match(/\(([^)]+)\)/g)
-        ?.map((token) => token.slice(1, -1).trim())
-        .filter(Boolean) ?? [];
-    if (tokens.some((token) => token.toUpperCase() === "DENY"))
-        return null;
-    const rights = tokens.filter((token) => !INHERIT_FLAGS.has(token.toUpperCase()));
-    if (rights.length === 0)
-        return null;
-    const normalizedPrincipal = normalizeSid(principal);
-    return {
-        principal,
-        ...(SID_RE.test(normalizedPrincipal) ? { sid: normalizedPrincipal } : {}),
-        rights,
-        rawRights,
-        ...rightsFromTokens(rights),
-    };
-}
-export function parseIcaclsOutput(output, targetPath) {
-    const entries = [];
-    const normalizedTarget = targetPath.trim();
-    const lowerTarget = normalizedTarget.toLowerCase();
-    const quotedTarget = `"${normalizedTarget}"`;
-    const quotedLower = quotedTarget.toLowerCase();
-    for (const rawLine of output.split(/\r?\n/)) {
-        const line = rawLine.trimEnd();
-        if (!line.trim())
-            continue;
-        const trimmed = line.trim();
-        const lower = trimmed.toLowerCase();
-        if (STATUS_PREFIXES.some((prefix) => lower.startsWith(prefix)))
-            continue;
-        const parsed = parseAceEntry(stripTargetPrefix({
-            trimmedLine: trimmed,
-            lowerLine: lower,
-            normalizedTarget,
-            lowerTarget,
-            quotedTarget,
-            quotedLower,
-        }));
-        if (parsed)
-            entries.push(parsed);
-    }
-    return entries;
-}
-export function summarizeWindowsAcl(entries, env) {
-    const trustedPrincipals = buildTrustedPrincipals(env);
-    const trusted = [];
-    const untrustedWorld = [];
-    const untrustedGroup = [];
-    for (const entry of entries) {
-        const classification = classifyPrincipal(entry.sid ?? entry.principal, trustedPrincipals);
-        if (classification === "trusted")
-            trusted.push(entry);
-        else if (classification === "world")
-            untrustedWorld.push(entry);
-        else
-            untrustedGroup.push(entry);
-    }
-    return { trusted, untrustedWorld, untrustedGroup };
-}
-export async function inspectWindowsAcl(targetPath, opts) {
-    const exec = opts?.exec ?? defaultPermissionExec;
-    try {
-        if (opts?.principalTranslationFailed) {
-            throw new Error("Windows ACL principal SID translation failed");
-        }
-        const { stdout, stderr } = await exec(resolveWindowsSystemCommand("icacls.exe", opts?.env), [
-            targetPath,
-        ]);
-        let entries = parseIcaclsOutput(`${stdout}\n${stderr}`.trim(), targetPath);
-        const unresolvedPrincipals = entries
-            .filter((entry) => !entry.sid)
-            .map((entry) => entry.principal);
-        const principalSids = await resolveWindowsPrincipalSids({
-            principals: unresolvedPrincipals,
-            known: opts?.principalSids,
-            env: opts?.env,
-            exec,
-        });
-        entries = entries.map((entry) => {
-            const sid = entry.sid ?? principalSids[entry.principal.toLowerCase()];
-            if (!sid) {
-                throw new Error(`Windows ACL principal SID could not be verified: ${entry.principal}`);
-            }
-            return { ...entry, sid };
-        });
-        let currentUserSid = normalizeSid(opts?.currentUserSid ?? "");
-        let effectiveEnv = currentUserSid ? { USERSID: currentUserSid } : undefined;
-        let { trusted, untrustedWorld, untrustedGroup } = summarizeWindowsAcl(entries, effectiveEnv);
-        const needsUserSidResolution = !currentUserSid && untrustedGroup.some((entry) => entry.sid && !TRUSTED_SIDS.has(entry.sid));
-        if (needsUserSidResolution) {
-            currentUserSid =
-                (await resolveWindowsCurrentUserSid({ exec, env: opts?.env })) ?? "";
-            if (currentUserSid) {
-                effectiveEnv = { USERSID: currentUserSid };
-                ({ trusted, untrustedWorld, untrustedGroup } = summarizeWindowsAcl(entries, effectiveEnv));
-            }
-        }
-        return { ok: true, entries, trusted, untrustedWorld, untrustedGroup };
-    }
-    catch (err) {
-        return {
-            ok: false,
-            entries: [],
-            trusted: [],
-            untrustedWorld: [],
-            untrustedGroup: [],
-            error: String(err),
-        };
-    }
-}
-export function formatWindowsAclSummary(summary) {
-    if (!summary.ok)
-        return "unknown";
-    const untrusted = [...summary.untrustedWorld, ...summary.untrustedGroup];
-    return untrusted.length === 0
-        ? "trusted-only"
-        : untrusted.map((entry) => `${entry.principal}:${entry.rawRights}`).join(", ");
-}
-export function formatIcaclsResetCommand(targetPath, opts) {
-    const command = resolveWindowsSystemCommand("icacls.exe", opts.env);
-    const user = resolveWindowsUserPrincipal(opts.env, opts.userInfo) ?? "%USERNAME%";
-    const grant = opts.isDir ? "(OI)(CI)F" : "F";
-    return [
-        command,
-        `"${targetPath}"`,
-        "/inheritance:r",
-        "/grant:r",
-        `"${user}:${grant}"`,
-        "/grant:r",
-        `"*S-1-5-18:${grant}"`,
-    ].join(" ");
-}
-export function createIcaclsResetCommand(targetPath, opts) {
-    const user = resolveWindowsUserPrincipal(opts.env, opts.userInfo);
-    if (!user) {
-        return null;
-    }
-    const grant = opts.isDir ? "(OI)(CI)F" : "F";
-    const args = [
-        targetPath,
-        "/inheritance:r",
-        "/grant:r",
-        `${user}:${grant}`,
-        "/grant:r",
-        `*S-1-5-18:${grant}`,
-    ];
-    return {
-        command: resolveWindowsSystemCommand("icacls.exe", opts.env),
-        args,
-        display: formatIcaclsResetCommand(targetPath, opts),
-    };
-}

package/dist/pinned-open.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pinned-open.d.ts","sourceRoot":"","sources":["../src/pinned-open.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAIzB,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;AAEvE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,OAAO,EAAE,EACT,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CACpF,CAAC;AAYF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB,GAAG,oBAAoB,CAiEvB"}
+{"version":3,"file":"pinned-open.d.ts","sourceRoot":"","sources":["../src/pinned-open.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAKzB,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;AAEvE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,OAAO,EAAE,EACT,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CACpF,CAAC;AAYF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB,GAAG,oBAAoB,CAiFvB"}

package/dist/pinned-open.js

@@ -1,5 +1,6 @@
 import fs from "node:fs";
 import { isUnsafeDeviceReadPath } from "./device-path.js";
+import { FsSafeError } from "./errors.js";
 import { sameFileIdentity as hasSameFileIdentity } from "./file-identity.js";
 function isExpectedPathError(error) {
     const code = typeof error === "object" && error !== null && "code" in error ? String(error.code) : "";
@@ -30,10 +31,18 @@ export function openPinnedFileSync(params) {
         }
         const preOpenStat = ioFs.lstatSync(realPath);
         if (!isAllowedType(preOpenStat, allowedType)) {
-            return { ok: false, reason: "validation" };
+            return {
+                ok: false,
+                reason: "validation",
+                error: new FsSafeError("not-file", "path does not have the required file type"),
+            };
         }
         if (params.rejectHardlinks && preOpenStat.isFile() && preOpenStat.nlink > 1) {
-            return { ok: false, reason: "validation" };
+            return {
+                ok: false,
+                reason: "validation",
+                error: new FsSafeError("hardlink", "path must not be hardlinked"),
+            };
         }
         if (params.maxBytes !== undefined &&
             preOpenStat.isFile() &&
@@ -43,10 +52,18 @@ export function openPinnedFileSync(params) {
         fd = ioFs.openSync(realPath, openReadFlags);
         const openedStat = ioFs.fstatSync(fd);
         if (!isAllowedType(openedStat, allowedType)) {
-            return { ok: false, reason: "validation" };
+            return {
+                ok: false,
+                reason: "validation",
+                error: new FsSafeError("not-file", "path does not have the required file type"),
+            };
         }
         if (params.rejectHardlinks && openedStat.isFile() && openedStat.nlink > 1) {
-            return { ok: false, reason: "validation" };
+            return {
+                ok: false,
+                reason: "validation",
+                error: new FsSafeError("hardlink", "path must not be hardlinked"),
+            };
         }
         if (params.maxBytes !== undefined && openedStat.isFile() && openedStat.size > params.maxBytes) {
             return { ok: false, reason: "validation" };

package/dist/pinned-write.js

@@ -69,7 +69,7 @@ export async function runPinnedWriteHelper(params) {
         return await runPinnedWriteFallback(params);
     }
     const native = getNativeBinding();
-    if (native && params.overwrite === false) {
+    if (native) {
         return await runPinnedWriteNative(native, params);
     }
     return await runPinnedWriteFallback(params);
@@ -107,6 +107,7 @@ async function runPinnedWriteFallback(params) {
         parentPath = await mkdirPathComponentsWithGuards({
             rootReal: params.rootPath,
             targetPath: parentPath,
+            beforeComponent: async (componentPath) => await getFsSafeTestHooks()?.beforeRootFallbackMutation?.("mkdir", componentPath),
         });
     }
     const parentGuard = params.mkdir

package/dist/private-temp-workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private-temp-workspace.d.ts","sourceRoot":"","sources":["../src/private-temp-workspace.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAErF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/C,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,0BAA0B,CAAC;IACtC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;CAC1B,CAAC;AA0IF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,iBAAiB,CAsEnB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,CAAC,GACvC,CAAC,CAUH"}
+{"version":3,"file":"private-temp-workspace.d.ts","sourceRoot":"","sources":["../src/private-temp-workspace.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAUzB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAErF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/C,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,0BAA0B,CAAC;IACtC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;CAC1B,CAAC;AA2KF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,iBAAiB,CA0EnB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,CAAC,GACvC,CAAC,CAUH"}

package/dist/private-temp-workspace.js

@@ -3,8 +3,11 @@ import fsSync from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { fileStore, fileStoreSync, } from "./file-store.js";
-import { openRootFileSync } from "./root-file.js";
+import { FsSafeError } from "./errors.js";
 import { sameFileIdentity } from "./file-identity.js";
+import { isNotFoundPathError } from "./path.js";
+import { throwFsSafeReadError } from "./read-error.js";
+import { matchRootFileOpenFailure, openRootFileSync, } from "./root-file.js";
 import { registerTempPathForExit, } from "./temp-cleanup.js";
 function sanitizeTempPrefix(prefix) {
     const sanitized = prefix.trim().replace(/[^a-zA-Z0-9._-]/g, "-");
@@ -29,6 +32,32 @@ function assertWorkspaceFileName(fileName) {
     }
     return value;
 }
+function throwTempWorkspaceOpenFailure(failure) {
+    return matchRootFileOpenFailure(failure, {
+        path: ({ error }) => {
+            if (isNotFoundPathError(error)) {
+                throw new FsSafeError("not-found", "temp workspace file not found", { cause: error });
+            }
+            throw new FsSafeError("path-mismatch", "temp workspace target changed during read", {
+                cause: error,
+            });
+        },
+        validation: ({ error }) => {
+            if (error instanceof FsSafeError) {
+                throw error;
+            }
+            throw new FsSafeError("path-mismatch", "temp workspace target failed read validation", {
+                cause: error,
+            });
+        },
+        io: ({ error }) => throwFsSafeReadError(error, "temp workspace"),
+        fallback: ({ error }) => {
+            throw new FsSafeError("path-mismatch", "temp workspace target changed during read", {
+                cause: error,
+            });
+        },
+    });
+}
 async function ensurePrivateDirectory(dir, mode) {
     await fs.mkdir(dir, { recursive: true, mode });
     const stat = await fs.stat(dir);
@@ -105,7 +134,14 @@ async function createTempWorkspace(options) {
             trailingNewline: writeOptions?.trailingNewline,
         }),
         copyIn: async (fileName, sourcePath) => await store.copyIn(assertWorkspaceFileName(fileName), sourcePath, { mode }),
-        read: async (fileName) => await store.readBytes(assertWorkspaceFileName(fileName)),
+        read: async (fileName) => {
+            try {
+                return await store.readBytes(assertWorkspaceFileName(fileName));
+            }
+            catch (error) {
+                throwFsSafeReadError(error, "temp workspace");
+            }
+        },
         cleanup: async () => {
             try {
                 return await cleanupWorkspace(dir, identity);
@@ -184,10 +220,15 @@ export function tempWorkspaceSync(options) {
                 rejectHardlinks: true,
             });
             if (!opened.ok) {
-                throw Object.assign(new Error(`File not found: ${fileName}`), { code: "ENOENT" });
+                throwTempWorkspaceOpenFailure(opened);
             }
             try {
-                return fsSync.readFileSync(opened.fd);
+                try {
+                    return fsSync.readFileSync(opened.fd);
+                }
+                catch (error) {
+                    throwFsSafeReadError(error, "temp workspace");
+                }
             }
             finally {
                 fsSync.closeSync(opened.fd);

package/dist/read-error.d.ts

@@ -0,0 +1,2 @@
+export declare function throwFsSafeReadError(error: unknown, label: string): never;
+//# sourceMappingURL=read-error.d.ts.map

package/dist/read-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-error.d.ts","sourceRoot":"","sources":["../src/read-error.ts"],"names":[],"mappings":"AAGA,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAQzE"}

package/dist/read-error.js

@@ -0,0 +1,11 @@
+import { FsSafeError } from "./errors.js";
+import { isNodeError } from "./path.js";
+export function throwFsSafeReadError(error, label) {
+    if (error instanceof FsSafeError) {
+        throw error;
+    }
+    if (isNodeError(error)) {
+        throw new FsSafeError("read-failed", `${label} target could not be read`, { cause: error });
+    }
+    throw error;
+}

package/dist/regular-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"regular-file.d.ts","sourceRoot":"","sources":["../src/regular-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,MAAM,MAAM,SAAS,CAAC;AAW7B,MAAM,MAAM,qBAAqB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC;AAExF,KAAK,8BAA8B,GAAG,IAAI,CACxC,OAAO,MAAM,CAAC,SAAS,EACvB,UAAU,GAAG,SAAS,GAAG,UAAU,CACpC,GACC,OAAO,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAEvD,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAC7B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,SAAS,GAAE,8BAAiD,GAC3D,MAAM,CAQR;AAsBD,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CActF;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,qBAAqB,CAc3E;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAyD3C;AAoDD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;CACb,CAqBA;AAmBD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDxF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CA2D7E"}
+{"version":3,"file":"regular-file.d.ts","sourceRoot":"","sources":["../src/regular-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,MAAM,MAAM,SAAS,CAAC;AAW7B,MAAM,MAAM,qBAAqB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC;AAExF,KAAK,8BAA8B,GAAG,IAAI,CACxC,OAAO,MAAM,CAAC,SAAS,EACvB,UAAU,GAAG,SAAS,GAAG,UAAU,CACpC,GACC,OAAO,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAEvD,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAC7B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,SAAS,GAAE,8BAAiD,GAC3D,MAAM,CAQR;AAsBD,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CActF;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,qBAAqB,CAc3E;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAyD3C;AA6DD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;CACb,CA6BA;AAmBD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDxF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CA2D7E"}

package/dist/regular-file.js

@@ -133,9 +133,19 @@ function verifyStableReadTarget(params) {
 }
 function readOpenedRegularFileSync(params) {
     const stat = fsSync.fstatSync(params.fd);
+    let pathStat;
+    try {
+        pathStat = fsSync.lstatSync(params.filePath);
+    }
+    catch (error) {
+        if (isNotFoundPathError(error)) {
+            throw new FsSafeError("path-mismatch", `File changed during read: ${params.filePath}`);
+        }
+        throw error;
+    }
     verifyStableReadTarget({
         filePath: params.filePath,
-        pathStat: fsSync.lstatSync(params.filePath),
+        pathStat,
         postOpenStat: stat,
         preOpenStat: params.preOpenStat,
     });
@@ -168,7 +178,16 @@ export function readRegularFileSync(params) {
     if (params.maxBytes !== undefined && result.stat.size > params.maxBytes) {
         throw regularFileTooLargeError(params.filePath, params.maxBytes);
     }
-    const fd = fsSync.openSync(params.filePath, resolveRegularFileReadFlags());
+    let fd;
+    try {
+        fd = fsSync.openSync(params.filePath, resolveRegularFileReadFlags());
+    }
+    catch (error) {
+        if (isNotFoundPathError(error)) {
+            throw new FsSafeError("path-mismatch", `File changed during read: ${params.filePath}`);
+        }
+        throw error;
+    }
     try {
         return readOpenedRegularFileSync({
             fd,

package/dist/replace-directory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"replace-directory.d.ts","sourceRoot":"","sources":["../src/replace-directory.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAiCf"}
+{"version":3,"file":"replace-directory.d.ts","sourceRoot":"","sources":["../src/replace-directory.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/replace-directory.js

@@ -1,11 +1,20 @@
+import { randomUUID } from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { guardedRename, guardedRm } from "./guarded-mutation.js";
+import { assertSafePathPrefix } from "./safe-path-segment.js";
+import { serializePathWrite } from "./write-queue.js";
 export async function replaceDirectoryAtomic(options) {
     const targetDir = path.resolve(options.targetDir);
+    await serializePathWrite(targetDir, async () => {
+        await replaceDirectoryAtomicUnserialized(options, targetDir);
+    });
+}
+async function replaceDirectoryAtomicUnserialized(options, targetDir) {
     const stagedDir = path.resolve(options.stagedDir);
     const parentDir = path.dirname(targetDir);
-    const backupDir = path.join(parentDir, `${options.backupPrefix ?? ".fs-safe-dir-backup-"}${process.pid}-${Date.now()}`);
+    const backupPrefix = assertSafePathPrefix(options.backupPrefix ?? ".fs-safe-dir-backup-", { label: "atomic directory backup prefix" });
+    const backupDir = path.join(parentDir, `${backupPrefix}${process.pid}-${randomUUID()}`);
     let backupCreated = false;
     await fs.mkdir(parentDir, { recursive: true });
     try {

package/dist/replace-file-copy-fallback.d.ts

@@ -21,6 +21,7 @@ export declare function copyFallbackReplace(params: {
     destinationHardlinks?: ReplaceFileDestinationHardlinkPolicy;
     restore: ReplaceFileCopyFallbackRestorePolicy;
     maxRestoreBytes?: number;
+    sync: boolean;
 }): Promise<void>;
 export declare function copyFallbackReplaceSync(params: {
     fsModule: SyncFallbackFs;
@@ -29,6 +30,8 @@ export declare function copyFallbackReplaceSync(params: {
     destinationHardlinks?: ReplaceFileDestinationHardlinkPolicy;
     restore: ReplaceFileCopyFallbackRestorePolicy;
     maxRestoreBytes?: number;
+    fchmodSync?: (fd: number, mode: number) => void;
+    sync: boolean;
 }): void;
 export {};
 //# sourceMappingURL=replace-file-copy-fallback.d.ts.map

package/dist/replace-file-copy-fallback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"replace-file-copy-fallback.d.ts","sourceRoot":"","sources":["../src/replace-file-copy-fallback.ts"],"names":[],"mappings":"AAAA,OAAO,MAAsB,MAAM,SAAS,CAAC;AAK7C,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CAAC;AAC5D,MAAM,MAAM,oCAAoC,GAAG,kBAAkB,GAAG,MAAM,CAAC;AAC/E,MAAM,MAAM,+BAA+B,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAC5E,MAAM,MAAM,sCAAsC,GAAG;IACnD,OAAO,EAAE,+BAA+B,CAAC;CAC1C,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,KAAK,EAAE,cAAc,kBAAkB,EAAE,KAAK,CAAC;IAC/C,IAAI,EAAE,cAAc,kBAAkB,EAAE,IAAI,CAAC;IAC7C,EAAE,EAAE,cAAc,kBAAkB,EAAE,EAAE,CAAC;IACzC,MAAM,EAAE,cAAc,kBAAkB,EAAE,MAAM,CAAC;CAClD,CAAC;AAEF,KAAK,cAAc,GAAG,IAAI,CACxB,OAAO,MAAM,EACX,WAAW,GACX,WAAW,GACX,WAAW,GACX,eAAe,GACf,WAAW,GACX,UAAU,GACV,UAAU,GACV,QAAQ,GACR,YAAY,GACZ,WAAW,CACd,CAAC;AAuFF,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,oCAAoC,GAC5C,IAAI,CAwBN;AA0HD,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAChD,QAAQ,EAAE,eAAe,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,CAAC,EAAE,oCAAoC,CAAC;IAC5D,OAAO,EAAE,oCAAoC,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDhB;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,CAAC,EAAE,oCAAoC,CAAC;IAC5D,OAAO,EAAE,oCAAoC,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,IAAI,CA4EP"}
+{"version":3,"file":"replace-file-copy-fallback.d.ts","sourceRoot":"","sources":["../src/replace-file-copy-fallback.ts"],"names":[],"mappings":"AAAA,OAAO,MAAsB,MAAM,SAAS,CAAC;AAK7C,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CAAC;AAC5D,MAAM,MAAM,oCAAoC,GAAG,kBAAkB,GAAG,MAAM,CAAC;AAC/E,MAAM,MAAM,+BAA+B,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAC5E,MAAM,MAAM,sCAAsC,GAAG;IACnD,OAAO,EAAE,+BAA+B,CAAC;CAC1C,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,KAAK,EAAE,cAAc,kBAAkB,EAAE,KAAK,CAAC;IAC/C,IAAI,EAAE,cAAc,kBAAkB,EAAE,IAAI,CAAC;IAC7C,EAAE,EAAE,cAAc,kBAAkB,EAAE,EAAE,CAAC;IACzC,MAAM,EAAE,cAAc,kBAAkB,EAAE,MAAM,CAAC;CAClD,CAAC;AAEF,KAAK,cAAc,GAAG,IAAI,CACxB,OAAO,MAAM,EACX,WAAW,GACX,WAAW,GACX,WAAW,GACX,eAAe,GACf,WAAW,GACX,UAAU,GACV,UAAU,GACV,QAAQ,GACR,YAAY,GACZ,WAAW,CACd,CAAC;AAuFF,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,oCAAoC,GAC5C,IAAI,CAwBN;AAmID,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAChD,QAAQ,EAAE,eAAe,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,CAAC,EAAE,oCAAoC,CAAC;IAC5D,OAAO,EAAE,oCAAoC,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,OAAO,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CA+DhB;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,CAAC,EAAE,oCAAoC,CAAC;IAC5D,OAAO,EAAE,oCAAoC,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,IAAI,EAAE,OAAO,CAAC;CACf,GAAG,IAAI,CA6EP"}