@openclaw/fs-safe 0.5.2 → 0.5.4

package/dist/file-store.js

@@ -8,7 +8,8 @@ import { ensureParentInRoot, openWritableStoreRoot, writeStreamToTempSource, } f
 import { writeFileSyncAtomic } from "./file-store-sync-write.js";
 import { createJsonStore } from "./json-document-store.js";
 import { stringifyJsonDocument } from "./json-stringify.js";
-import { resolveSafeRelativePath } from "./path.js";
+import { isNotFoundPathError, resolveSafeRelativePath } from "./path.js";
+import { throwFsSafeReadError } from "./read-error.js";
 import { root } from "./root.js";
 import { DEFAULT_ROOT_MAX_BYTES } from "./root-impl.js";
 import { readRegularFile } from "./regular-file.js";
@@ -20,7 +21,19 @@ function assertRelativePath(relativePath) {
     if (!raw || raw !== relativePath) {
         throw new FsSafeError("invalid-path", "store key must be non-empty and unpadded");
     }
-    return assertNoDriveRelativePathSegments(raw.replaceAll("\\", "/"), "store key");
+    assertNoDriveRelativePathSegments(raw.replaceAll("\\", "/"), "store key");
+    const segments = raw.split("/");
+    const delegated = segments.includes("..") || raw.includes("\\") ||
+        path.posix.isAbsolute(raw) || path.win32.isAbsolute(raw) || raw.startsWith("//");
+    if (delegated)
+        return raw;
+    if (segments.every((segment) => segment.length === 0 || segment === ".") ||
+        segments.some((segment) => segment.length === 0 || segment === ".") ||
+        raw.normalize("NFC") !== raw ||
+        segments.some((segment) => /[ .]$/u.test(segment))) {
+        throw new FsSafeError("invalid-path", "store key must use one canonical relative spelling");
+    }
+    return raw;
 }
 function resolveStorePath(rootDir, relativePath) {
     return resolveSafeRelativePath(rootDir, assertRelativePath(relativePath));
@@ -31,13 +44,9 @@ function assertMaxBytes(size, maxBytes) {
     }
 }
 function isNotFound(error) {
-    if (!error) {
-        return false;
-    }
     return error instanceof FsSafeError
         ? error.code === "not-found"
-        : error.code === "ENOENT" ||
-            error.code === "ENOTDIR";
+        : isNotFoundPathError(error);
 }
 function handleSyncStoreReadOpenFailure(opened) {
     return matchRootFileOpenFailure(opened, {
@@ -50,12 +59,16 @@ function handleSyncStoreReadOpenFailure(opened) {
             });
         },
         validation: (failure) => {
+            if (failure.error instanceof FsSafeError) {
+                throw failure.error;
+            }
             // Validation failures mean the path existed but violated store policy
             // (directory, hardlink, symlink race). Do not report them as missing.
             throw new FsSafeError("path-mismatch", "store target failed read validation", {
                 cause: failure.error instanceof Error ? failure.error : undefined,
             });
         },
+        io: (failure) => throwFsSafeReadError(failure.error, "store"),
         fallback: (failure) => {
             throw new FsSafeError("path-mismatch", "store target changed during read", {
                 cause: failure.error instanceof Error ? failure.error : undefined,
@@ -68,9 +81,7 @@ async function readFileStoreCopySource(params) {
     if (sourceStat.isSymbolicLink() || !sourceStat.isFile()) {
         throw new FsSafeError("not-file", "source path is not a file");
     }
-    if (params.maxBytes !== undefined && sourceStat.size > params.maxBytes) {
-        throw new FsSafeError("too-large", `file exceeds maximum size of ${params.maxBytes} bytes`);
-    }
+    assertMaxBytes(sourceStat.size, params.maxBytes);
     try {
         return (await readRegularFile({ filePath: params.sourcePath, maxBytes: params.maxBytes }))
             .buffer;
@@ -230,7 +241,7 @@ export function fileStore(options) {
                 if (isNotFound(error)) {
                     return null;
                 }
-                throw error;
+                throwFsSafeReadError(error, "store");
             }
         },
         readJson: async (relativePath, readOptions) => {
@@ -246,7 +257,7 @@ export function fileStore(options) {
                 if (isNotFound(error)) {
                     return null;
                 }
-                throw error;
+                throwFsSafeReadError(error, "store");
             }
         },
         remove: async (relativePath) => {
@@ -321,10 +332,14 @@ export function fileStoreSync(options) {
             try {
                 assertMaxBytes(opened.stat.size, readOptions?.maxBytes ?? maxBytes);
                 const limit = readOptions?.maxBytes ?? maxBytes;
-                const raw = limit === undefined
-                    ? syncFs.readFileSync(opened.fd, "utf8")
-                    : readFileDescriptorBoundedSync(opened.fd, limit).toString("utf8");
-                return raw;
+                try {
+                    return limit === undefined
+                        ? syncFs.readFileSync(opened.fd, "utf8")
+                        : readFileDescriptorBoundedSync(opened.fd, limit).toString("utf8");
+                }
+                catch (error) {
+                    throwFsSafeReadError(error, "store");
+                }
             }
             finally {
                 syncFs.closeSync(opened.fd);

package/dist/move-path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"move-path.d.ts","sourceRoot":"","sources":["../src/move-path.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,+BAA+B,GAAG;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACrC,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,KAAK,sBAAsB,GAAG,cAAc,GAAG,uBAAuB,CAAC;AAEvE,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,EACd,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,sBAAsB,GAAG,SAAS,CASpC;AA6VD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CA2Df"}
+{"version":3,"file":"move-path.d.ts","sourceRoot":"","sources":["../src/move-path.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,+BAA+B,GAAG;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACrC,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,KAAK,sBAAsB,GAAG,cAAc,GAAG,uBAAuB,CAAC;AAEvE,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,EACd,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,sBAAsB,GAAG,SAAS,CASpC;AAiVD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CA2Df"}

package/dist/move-path.js

@@ -4,6 +4,7 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { FsSafeError } from "./errors.js";
 import { guardedRename } from "./guarded-mutation.js";
+import { resolveReadOpenFlags } from "./read-open-flags.js";
 import { registerTempPathForExit } from "./temp-cleanup.js";
 export function moveCopyFallbackReasonForRenameError(error, platform = process.platform) {
     const code = error?.code;
@@ -94,15 +95,6 @@ async function assertSourceStillMatches(sourcePath, identity) {
         throw sourceChangedError(sourcePath);
     }
 }
-function regularReadFlags() {
-    return (fsConstants.O_RDONLY |
-        (typeof fsConstants.O_NOFOLLOW === "number" && process.platform !== "win32"
-            ? fsConstants.O_NOFOLLOW
-            : 0) |
-        (typeof fsConstants.O_NONBLOCK === "number" && process.platform !== "win32"
-            ? fsConstants.O_NONBLOCK
-            : 0));
-}
 async function chmodDirectoryPinned(directoryPath, mode) {
     if (process.platform === "win32") {
         // Node cannot portably open a Windows directory for descriptor-bound
@@ -129,7 +121,7 @@ async function copyRegularFilePinned(params) {
     let destinationCreated = false;
     let sourceHandle;
     try {
-        sourceHandle = await fs.open(params.from, regularReadFlags());
+        sourceHandle = await fs.open(params.from, resolveReadOpenFlags());
     }
     catch (error) {
         const code = error?.code;

package/dist/pinned-open.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pinned-open.d.ts","sourceRoot":"","sources":["../src/pinned-open.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAIzB,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;AAEvE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,OAAO,EAAE,EACT,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CACpF,CAAC;AAYF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB,GAAG,oBAAoB,CAiEvB"}
+{"version":3,"file":"pinned-open.d.ts","sourceRoot":"","sources":["../src/pinned-open.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAMzB,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;AAEvE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,OAAO,EAAE,EACT,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CACpF,CAAC;AAYF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB,GAAG,oBAAoB,CA+EvB"}

package/dist/pinned-open.js

@@ -1,6 +1,8 @@
 import fs from "node:fs";
 import { isUnsafeDeviceReadPath } from "./device-path.js";
+import { FsSafeError } from "./errors.js";
 import { sameFileIdentity as hasSameFileIdentity } from "./file-identity.js";
+import { resolveReadOpenFlags } from "./read-open-flags.js";
 function isExpectedPathError(error) {
     const code = typeof error === "object" && error !== null && "code" in error ? String(error.code) : "";
     return code === "ENOENT" || code === "ENOTDIR" || code === "ELOOP";
@@ -11,8 +13,7 @@ function sameFileIdentity(left, right) {
 export function openPinnedFileSync(params) {
     const ioFs = params.ioFs ?? fs;
     const allowedType = params.allowedType ?? "file";
-    const openReadFlags = ioFs.constants.O_RDONLY |
-        (typeof ioFs.constants.O_NOFOLLOW === "number" ? ioFs.constants.O_NOFOLLOW : 0);
+    const openReadFlags = resolveReadOpenFlags({ constants: ioFs.constants });
     let fd = null;
     try {
         if (isUnsafeDeviceReadPath(params.filePath)) {
@@ -30,10 +31,18 @@ export function openPinnedFileSync(params) {
         }
         const preOpenStat = ioFs.lstatSync(realPath);
         if (!isAllowedType(preOpenStat, allowedType)) {
-            return { ok: false, reason: "validation" };
+            return {
+                ok: false,
+                reason: "validation",
+                error: new FsSafeError("not-file", "path does not have the required file type"),
+            };
         }
         if (params.rejectHardlinks && preOpenStat.isFile() && preOpenStat.nlink > 1) {
-            return { ok: false, reason: "validation" };
+            return {
+                ok: false,
+                reason: "validation",
+                error: new FsSafeError("hardlink", "path must not be hardlinked"),
+            };
         }
         if (params.maxBytes !== undefined &&
             preOpenStat.isFile() &&
@@ -43,10 +52,18 @@ export function openPinnedFileSync(params) {
         fd = ioFs.openSync(realPath, openReadFlags);
         const openedStat = ioFs.fstatSync(fd);
         if (!isAllowedType(openedStat, allowedType)) {
-            return { ok: false, reason: "validation" };
+            return {
+                ok: false,
+                reason: "validation",
+                error: new FsSafeError("not-file", "path does not have the required file type"),
+            };
         }
         if (params.rejectHardlinks && openedStat.isFile() && openedStat.nlink > 1) {
-            return { ok: false, reason: "validation" };
+            return {
+                ok: false,
+                reason: "validation",
+                error: new FsSafeError("hardlink", "path must not be hardlinked"),
+            };
         }
         if (params.maxBytes !== undefined && openedStat.isFile() && openedStat.size > params.maxBytes) {
             return { ok: false, reason: "validation" };

package/dist/private-temp-workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private-temp-workspace.d.ts","sourceRoot":"","sources":["../src/private-temp-workspace.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAErF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/C,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,0BAA0B,CAAC;IACtC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;CAC1B,CAAC;AA0IF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,iBAAiB,CAsEnB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,CAAC,GACvC,CAAC,CAUH"}
+{"version":3,"file":"private-temp-workspace.d.ts","sourceRoot":"","sources":["../src/private-temp-workspace.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAUzB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAErF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/C,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,0BAA0B,CAAC;IACtC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;CAC1B,CAAC;AA2KF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,iBAAiB,CA0EnB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,CAAC,GACvC,CAAC,CAUH"}

package/dist/private-temp-workspace.js

@@ -3,8 +3,11 @@ import fsSync from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { fileStore, fileStoreSync, } from "./file-store.js";
-import { openRootFileSync } from "./root-file.js";
+import { FsSafeError } from "./errors.js";
 import { sameFileIdentity } from "./file-identity.js";
+import { isNotFoundPathError } from "./path.js";
+import { throwFsSafeReadError } from "./read-error.js";
+import { matchRootFileOpenFailure, openRootFileSync, } from "./root-file.js";
 import { registerTempPathForExit, } from "./temp-cleanup.js";
 function sanitizeTempPrefix(prefix) {
     const sanitized = prefix.trim().replace(/[^a-zA-Z0-9._-]/g, "-");
@@ -29,6 +32,32 @@ function assertWorkspaceFileName(fileName) {
     }
     return value;
 }
+function throwTempWorkspaceOpenFailure(failure) {
+    return matchRootFileOpenFailure(failure, {
+        path: ({ error }) => {
+            if (isNotFoundPathError(error)) {
+                throw new FsSafeError("not-found", "temp workspace file not found", { cause: error });
+            }
+            throw new FsSafeError("path-mismatch", "temp workspace target changed during read", {
+                cause: error,
+            });
+        },
+        validation: ({ error }) => {
+            if (error instanceof FsSafeError) {
+                throw error;
+            }
+            throw new FsSafeError("path-mismatch", "temp workspace target failed read validation", {
+                cause: error,
+            });
+        },
+        io: ({ error }) => throwFsSafeReadError(error, "temp workspace"),
+        fallback: ({ error }) => {
+            throw new FsSafeError("path-mismatch", "temp workspace target changed during read", {
+                cause: error,
+            });
+        },
+    });
+}
 async function ensurePrivateDirectory(dir, mode) {
     await fs.mkdir(dir, { recursive: true, mode });
     const stat = await fs.stat(dir);
@@ -105,7 +134,14 @@ async function createTempWorkspace(options) {
             trailingNewline: writeOptions?.trailingNewline,
         }),
         copyIn: async (fileName, sourcePath) => await store.copyIn(assertWorkspaceFileName(fileName), sourcePath, { mode }),
-        read: async (fileName) => await store.readBytes(assertWorkspaceFileName(fileName)),
+        read: async (fileName) => {
+            try {
+                return await store.readBytes(assertWorkspaceFileName(fileName));
+            }
+            catch (error) {
+                throwFsSafeReadError(error, "temp workspace");
+            }
+        },
         cleanup: async () => {
             try {
                 return await cleanupWorkspace(dir, identity);
@@ -184,10 +220,15 @@ export function tempWorkspaceSync(options) {
                 rejectHardlinks: true,
             });
             if (!opened.ok) {
-                throw Object.assign(new Error(`File not found: ${fileName}`), { code: "ENOENT" });
+                throwTempWorkspaceOpenFailure(opened);
             }
             try {
-                return fsSync.readFileSync(opened.fd);
+                try {
+                    return fsSync.readFileSync(opened.fd);
+                }
+                catch (error) {
+                    throwFsSafeReadError(error, "temp workspace");
+                }
             }
             finally {
                 fsSync.closeSync(opened.fd);

package/dist/publish-file-failure.d.ts

@@ -18,6 +18,7 @@ export type PublishFailureState = {
     phase: PublishFileExclusiveFailurePhase;
     targetCreated: boolean;
     targetIdentity?: FileIdentityStat;
+    targetCleanupIdentity?: FileIdentityStat;
     preserveTarget: boolean;
     directorySync?: PublishFileExclusiveDirectorySyncFailure;
 };

package/dist/publish-file-failure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish-file-failure.d.ts","sourceRoot":"","sources":["../src/publish-file-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,MAAM,qCAAqC,GAAG,UAAU,GAAG,UAAU,CAAC;AAC5E,MAAM,MAAM,wCAAwC,GAAG;IACrD,MAAM,EAAE,QAAQ,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AACF,MAAM,MAAM,gCAAgC,GACxC,aAAa,GACb,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,eAAe,CAAC;AACpB,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAC9E,MAAM,MAAM,kCAAkC,GAAG;IAC/C,KAAK,EAAE,gCAAgC,CAAC;IACxC,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,OAAO,EAAE,2BAA2B,CAAC;IACrC,aAAa,CAAC,EAAE,wCAAwC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,gCAAgC,CAAC;IACxC,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,wCAAwC,CAAC;CAC1D,CAAC;AAEF,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,mBAAmB,EAC1B,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,gCAAgC,GACtC,IAAI,CAIN;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,2BAA2B,GACnC,WAAW,CAcb;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,wCAAwC,CAG1C"}
+{"version":3,"file":"publish-file-failure.d.ts","sourceRoot":"","sources":["../src/publish-file-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,MAAM,qCAAqC,GAAG,UAAU,GAAG,UAAU,CAAC;AAC5E,MAAM,MAAM,wCAAwC,GAAG;IACrD,MAAM,EAAE,QAAQ,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AACF,MAAM,MAAM,gCAAgC,GACxC,aAAa,GACb,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,eAAe,CAAC;AACpB,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAC9E,MAAM,MAAM,kCAAkC,GAAG;IAC/C,KAAK,EAAE,gCAAgC,CAAC;IACxC,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,OAAO,EAAE,2BAA2B,CAAC;IACrC,aAAa,CAAC,EAAE,wCAAwC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,gCAAgC,CAAC;IACxC,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,qBAAqB,CAAC,EAAE,gBAAgB,CAAC;IACzC,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,wCAAwC,CAAC;CAC1D,CAAC;AAEF,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,mBAAmB,EAC1B,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,gCAAgC,GACtC,IAAI,CAKN;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,2BAA2B,GACnC,WAAW,CAcb;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,wCAAwC,CAG1C"}

package/dist/publish-file-failure.js

@@ -1,7 +1,8 @@
 import { FsSafeError } from "./errors.js";
 export function rememberCreatedTarget(state, identity, phase) {
     state.targetCreated = true;
-    state.targetIdentity = { dev: identity.dev, ino: identity.ino };
+    state.targetIdentity = { dev: Number(identity.dev), ino: Number(identity.ino) };
+    state.targetCleanupIdentity = { dev: identity.dev, ino: identity.ino };
     state.phase = phase;
 }
 export function publicationFailure(error, state, cleanup) {

package/dist/publish-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish-file.d.ts","sourceRoot":"","sources":["../src/publish-file.ts"],"names":[],"mappings":"AACA,OAAe,EAAE,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAI7C,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG7E,OAAO,EAML,KAAK,qCAAqC,EAC3C,MAAM,2BAA2B,CAAC;AAGnC,YAAY,EACV,2BAA2B,EAC3B,wCAAwC,EACxC,kCAAkC,EAClC,gCAAgC,EAChC,qCAAqC,GACtC,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,4BAA4B,GACpC,cAAc,GACd,eAAe,GACf,kBAAkB,CAAC;AAEvB,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;IAC3D,QAAQ,EAAE,KAAK,CAAC;IAChB,aAAa,EAAE,oBAAoB,CAAC;CACrC,CAAC;AAkBF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE/D;AAoND,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C,QAAQ,EAAE,4BAA4B,CAAC;IACvC,aAAa,CAAC,EAAE,qCAAqC,CAAC;IACtD,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA8LtC"}
+{"version":3,"file":"publish-file.d.ts","sourceRoot":"","sources":["../src/publish-file.ts"],"names":[],"mappings":"AACA,OAAe,EAAoB,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAI/D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG7E,OAAO,EAML,KAAK,qCAAqC,EAC3C,MAAM,2BAA2B,CAAC;AAGnC,YAAY,EACV,2BAA2B,EAC3B,wCAAwC,EACxC,kCAAkC,EAClC,gCAAgC,EAChC,qCAAqC,GACtC,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,4BAA4B,GACpC,cAAc,GACd,eAAe,GACf,kBAAkB,CAAC;AAEvB,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;IAC3D,QAAQ,EAAE,KAAK,CAAC;IAChB,aAAa,EAAE,oBAAoB,CAAC;CACrC,CAAC;AAkBF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE/D;AA2ND,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C,QAAQ,EAAE,4BAA4B,CAAC;IACvC,aAAa,CAAC,EAAE,qCAAqC,CAAC;IACtD,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA4MtC"}

package/dist/publish-file.js

@@ -38,12 +38,12 @@ function directoryOpenFlags() {
     return (fsSync.constants.O_RDONLY |
         (typeof fsSync.constants.O_DIRECTORY === "number" ? fsSync.constants.O_DIRECTORY : 0));
 }
-async function openNativeParent(binding, filePath) {
+async function openNativeParent(filePath) {
     const parentPath = path.dirname(filePath);
     const handle = await fs.open(parentPath, directoryOpenFlags());
     try {
-        const pathname = await fs.lstat(parentPath);
-        const opened = binding.fstatIdentity(handle.fd);
+        const pathname = await fs.lstat(parentPath, { bigint: true });
+        const opened = await handle.stat({ bigint: true });
         if (pathname.isSymbolicLink() || !sameFileIdentity(pathname, opened)) {
             throw new FsSafeError("path-mismatch", "publication parent changed while opening");
         }
@@ -55,8 +55,10 @@ async function openNativeParent(binding, filePath) {
     }
 }
 async function assertPinnedSourceCurrent(params) {
-    const opened = await params.handle.stat();
-    const current = await fs.lstat(params.sourcePath);
+    // Windows file indexes can exceed Number.MAX_SAFE_INTEGER, so publication
+    // fences must compare bigint stats instead of rounded numeric identities.
+    const opened = await params.handle.stat({ bigint: true });
+    const current = await fs.lstat(params.sourcePath, { bigint: true });
     if (!opened.isFile() ||
         current.isSymbolicLink() ||
         !current.isFile() ||
@@ -90,13 +92,13 @@ async function copyPinnedSource(params) {
                 throw error;
             }
             let target;
-            const createdIdentity = params.native.fstatIdentity(nativeFd);
+            const createdIdentity = fsSync.fstatSync(nativeFd, { bigint: true });
             rememberCreatedTarget(params.failure, createdIdentity, "copy-verify");
             try {
                 await getFsSafeTestHooks()?.afterPublishTargetCreated?.("exclusive-copy", params.targetPath, createdIdentity);
-                const identity = await fs.lstat(params.targetPath);
+                const identity = await fs.lstat(params.targetPath, { bigint: true });
                 target = await fs.open(params.targetPath, sourceOpenFlags());
-                const opened = await target.stat();
+                const opened = await target.stat({ bigint: true });
                 if (identity.isSymbolicLink() ||
                     !identity.isFile() ||
                     !sameFileIdentity(createdIdentity, identity) ||
@@ -108,7 +110,7 @@ async function copyPinnedSource(params) {
                 nativeFd = undefined;
                 return {
                     handle: target,
-                    stat: await target.stat(),
+                    exactIdentity: opened,
                     digest: hashed.digest,
                     bytes: hashed.bytes,
                 };
@@ -124,10 +126,10 @@ async function copyPinnedSource(params) {
         }
     }
     const target = await fs.open(params.targetPath, "wx+", 0o600);
-    const identity = await target.stat();
-    rememberCreatedTarget(params.failure, identity, "copy-verify");
+    const exactIdentity = await target.stat({ bigint: true });
+    rememberCreatedTarget(params.failure, exactIdentity, "copy-verify");
     try {
-        await getFsSafeTestHooks()?.afterPublishTargetCreated?.("exclusive-copy", params.targetPath, identity);
+        await getFsSafeTestHooks()?.afterPublishTargetCreated?.("exclusive-copy", params.targetPath, exactIdentity);
         const hash = createHash("sha256");
         const buffer = Buffer.allocUnsafe(64 * 1024);
         let position = 0;
@@ -148,7 +150,7 @@ async function copyPinnedSource(params) {
             position += bytesRead;
         }
         await target.sync();
-        return { handle: target, stat: identity, digest: hash.digest("hex"), bytes: position };
+        return { handle: target, exactIdentity, digest: hash.digest("hex"), bytes: position };
     }
     catch (error) {
         await target.close().catch(() => undefined);
@@ -160,7 +162,7 @@ async function removeCreatedTargetIfUnchanged(targetPath, identity) {
         return "unknown";
     }
     try {
-        const current = await fs.lstat(targetPath);
+        const current = await fs.lstat(targetPath, { bigint: true });
         if (!current.isSymbolicLink() && sameFileIdentity(current, identity)) {
             await fs.rm(targetPath);
             return "removed";
@@ -209,31 +211,38 @@ export async function publishFileExclusive(params) {
             label: "publication parent",
         });
         const sourceIdentity = await source.stat();
-        if (!sameFileIdentity(sourcePathStat, sourceIdentity) ||
+        const sourceExactIdentity = await source.stat({ bigint: true });
+        const sourcePathExactIdentity = await fs.lstat(sourcePath, { bigint: true });
+        if (sourcePathExactIdentity.isSymbolicLink() ||
+            !sourcePathExactIdentity.isFile() ||
+            !sameFileIdentity(sourcePathExactIdentity, sourceExactIdentity) ||
             (params.expectedSourceIdentity &&
-                !sameFileIdentity(params.expectedSourceIdentity, sourceIdentity))) {
+                !sameFileIdentity(params.expectedSourceIdentity, typeof params.expectedSourceIdentity.dev === "bigint" ||
+                    typeof params.expectedSourceIdentity.ino === "bigint"
+                    ? sourceExactIdentity
+                    : sourceIdentity))) {
             throw new FsSafeError("path-mismatch", "publication source identity did not match");
         }
         await parent.assertCurrent();
-        await assertPinnedSourceCurrent({ sourcePath, handle: source, identity: sourceIdentity });
+        await assertPinnedSourceCurrent({ sourcePath, handle: source, identity: sourceExactIdentity });
         const native = params.strategy === "rename-noreplace"
             ? requireNativeBinding()
             : getNativeBinding();
         if (native) {
-            sourceNativeParent = await openNativeParent(native, sourcePath);
-            targetNativeParent = await openNativeParent(native, targetPath);
+            sourceNativeParent = await openNativeParent(sourcePath);
+            targetNativeParent = await openNativeParent(targetPath);
         }
         if (params.strategy === "rename-noreplace") {
             const binding = requireNativeBinding();
             binding.renameNoReplace(sourceNativeParent.handle.fd, sourceNativeParent.basename, targetNativeParent.handle.fd, targetNativeParent.basename);
-            rememberCreatedTarget(failure, sourceIdentity, "rename-verify");
+            rememberCreatedTarget(failure, sourceExactIdentity, "rename-verify");
             // A failed post-rename fence must not delete the only remaining name.
             failure.preserveTarget = true;
-            await getFsSafeTestHooks()?.afterPublishTargetCreated?.("rename-noreplace", targetPath, sourceIdentity);
-            const targetIdentity = await fs.lstat(targetPath);
-            if (targetIdentity.isSymbolicLink() ||
-                !targetIdentity.isFile() ||
-                !sameFileIdentity(targetIdentity, sourceIdentity)) {
+            await getFsSafeTestHooks()?.afterPublishTargetCreated?.("rename-noreplace", targetPath, sourceExactIdentity);
+            const targetExactIdentity = await fs.lstat(targetPath, { bigint: true });
+            if (targetExactIdentity.isSymbolicLink() ||
+                !targetExactIdentity.isFile() ||
+                !sameFileIdentity(targetExactIdentity, sourceExactIdentity)) {
                 throw new FsSafeError("path-mismatch", "no-replace publication target changed");
             }
             try {
@@ -246,6 +255,7 @@ export async function publishFileExclusive(params) {
                 }
             }
             syncNativeFileBestEffort(sourceNativeParent.handle.fd);
+            const targetIdentity = await fs.lstat(targetPath);
             return {
                 method: "rename-noreplace",
                 identity: targetIdentity,
@@ -264,15 +274,16 @@ export async function publishFileExclusive(params) {
             else {
                 await fs.link(sourcePath, targetPath);
             }
-            rememberCreatedTarget(failure, sourceIdentity, "hardlink-verify");
-            await getFsSafeTestHooks()?.afterPublishTargetCreated?.("hardlink", targetPath, sourceIdentity);
-            const targetIdentity = await fs.lstat(targetPath);
-            if (targetIdentity.isSymbolicLink() ||
-                !targetIdentity.isFile() ||
-                !sameFileIdentity(targetIdentity, sourceIdentity)) {
+            rememberCreatedTarget(failure, sourceExactIdentity, "hardlink-verify");
+            await getFsSafeTestHooks()?.afterPublishTargetCreated?.("hardlink", targetPath, sourceExactIdentity);
+            const targetExactIdentity = await fs.lstat(targetPath, { bigint: true });
+            if (targetExactIdentity.isSymbolicLink() ||
+                !targetExactIdentity.isFile() ||
+                !sameFileIdentity(targetExactIdentity, sourceExactIdentity)) {
                 throw new FsSafeError("path-mismatch", "hardlink publication target changed");
             }
-            await assertPinnedSourceCurrent({ sourcePath, handle: source, identity: sourceIdentity });
+            await assertPinnedSourceCurrent({ sourcePath, handle: source, identity: sourceExactIdentity });
+            const targetIdentity = await fs.lstat(targetPath);
             return {
                 method: "hardlink",
                 identity: targetIdentity,
@@ -303,19 +314,21 @@ export async function publishFileExclusive(params) {
                 failure,
             });
             target = copied.handle;
-            targetIdentity = copied.stat;
+            targetIdentity = await target.stat();
             const targetPathStat = await fs.lstat(targetPath);
+            const targetPathExactStat = await fs.lstat(targetPath, { bigint: true });
             const copiedBack = await hashFileHandle(target, native);
             const sourceAfter = await hashFileHandle(source, native);
             if (targetPathStat.isSymbolicLink() ||
-                !sameFileIdentity(targetPathStat, targetIdentity) ||
+                targetPathExactStat.isSymbolicLink() ||
+                !sameFileIdentity(targetPathExactStat, copied.exactIdentity) ||
                 copiedBack.bytes !== copied.bytes ||
                 copiedBack.digest !== copied.digest ||
                 sourceAfter.bytes !== copied.bytes ||
                 sourceAfter.digest !== copied.digest) {
                 throw new FsSafeError("path-mismatch", "exclusive publication copy failed content fencing");
             }
-            await assertPinnedSourceCurrent({ sourcePath, handle: source, identity: sourceIdentity });
+            await assertPinnedSourceCurrent({ sourcePath, handle: source, identity: sourceExactIdentity });
             const directorySync = await syncPublishedParent({
                 parent,
                 failure,
@@ -339,7 +352,7 @@ export async function publishFileExclusive(params) {
         const preserveSyncFailure = failure.phase === "directory-sync" && params.onSyncFailure === "preserve";
         const cleanup = failure.preserveTarget || preserveSyncFailure
             ? "preserved"
-            : await removeCreatedTargetIfUnchanged(targetPath, failure.targetIdentity);
+            : await removeCreatedTargetIfUnchanged(targetPath, failure.targetCleanupIdentity);
         throw publicationFailure(error, failure, cleanup);
     }
     finally {

package/dist/read-error.d.ts

@@ -0,0 +1,2 @@
+export declare function throwFsSafeReadError(error: unknown, label: string): never;
+//# sourceMappingURL=read-error.d.ts.map

package/dist/read-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-error.d.ts","sourceRoot":"","sources":["../src/read-error.ts"],"names":[],"mappings":"AAGA,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAQzE"}

package/dist/read-error.js

@@ -0,0 +1,11 @@
+import { FsSafeError } from "./errors.js";
+import { isNodeError } from "./path.js";
+export function throwFsSafeReadError(error, label) {
+    if (error instanceof FsSafeError) {
+        throw error;
+    }
+    if (isNodeError(error)) {
+        throw new FsSafeError("read-failed", `${label} target could not be read`, { cause: error });
+    }
+    throw error;
+}

package/dist/read-open-flags.d.ts

@@ -0,0 +1,8 @@
+import fs from "node:fs";
+type ReadOpenFlagConstants = Pick<typeof fs.constants, "O_RDONLY"> & Partial<Pick<typeof fs.constants, "O_NOFOLLOW" | "O_NONBLOCK">>;
+export declare function resolveReadOpenFlags(options?: {
+    constants?: ReadOpenFlagConstants;
+    followSymlinks?: boolean;
+}): number;
+export {};
+//# sourceMappingURL=read-open-flags.d.ts.map

package/dist/read-open-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-open-flags.d.ts","sourceRoot":"","sources":["../src/read-open-flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,KAAK,qBAAqB,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,GAChE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC;AAElE,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE;IAC7C,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,MAAM,CAaT"}

package/dist/read-open-flags.js

@@ -0,0 +1,13 @@
+import fs from "node:fs";
+export function resolveReadOpenFlags(options) {
+    const constants = options?.constants ?? fs.constants;
+    const noFollow = process.platform !== "win32" &&
+        options?.followSymlinks !== true &&
+        typeof constants.O_NOFOLLOW === "number"
+        ? constants.O_NOFOLLOW
+        : 0;
+    const nonBlocking = process.platform !== "win32" && typeof constants.O_NONBLOCK === "number"
+        ? constants.O_NONBLOCK
+        : 0;
+    return constants.O_RDONLY | noFollow | nonBlocking;
+}

package/dist/regular-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"regular-file.d.ts","sourceRoot":"","sources":["../src/regular-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,MAAM,MAAM,SAAS,CAAC;AAW7B,MAAM,MAAM,qBAAqB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC;AAExF,KAAK,8BAA8B,GAAG,IAAI,CACxC,OAAO,MAAM,CAAC,SAAS,EACvB,UAAU,GAAG,SAAS,GAAG,UAAU,CACpC,GACC,OAAO,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAEvD,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAC7B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,SAAS,GAAE,8BAAiD,GAC3D,MAAM,CAQR;AAsBD,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CActF;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,qBAAqB,CAc3E;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAyD3C;AA6DD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;CACb,CA6BA;AAmBD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDxF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CA2D7E"}
+{"version":3,"file":"regular-file.d.ts","sourceRoot":"","sources":["../src/regular-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,MAAM,MAAM,SAAS,CAAC;AAY7B,MAAM,MAAM,qBAAqB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC;AAExF,KAAK,8BAA8B,GAAG,IAAI,CACxC,OAAO,MAAM,CAAC,SAAS,EACvB,UAAU,GAAG,SAAS,GAAG,UAAU,CACpC,GACC,OAAO,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAEvD,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAC7B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,SAAS,GAAE,8BAAiD,GAC3D,MAAM,CAQR;AAaD,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CActF;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,qBAAqB,CAc3E;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAyD3C;AA6DD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;CACb,CA6BA;AAmBD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDxF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CA2D7E"}