@openclaw/fs-safe 0.5.4 → 0.5.5

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.5 - 2026-08-12
+
+### Security and Correctness
+
+- Prevent nondeterministic Windows read failures with `path-mismatch` when path-based stat reports zero file identity through libuv's FindFirstFile fallback under antivirus or indexer contention; zero Windows inodes are now treated as unknown identity like zero device serials.
+
 ## 0.5.4 - 2026-08-10
 
 **Highlight:** two security fixes in the publication path. If you run fs-safe on

package/dist/file-identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-identity.d.ts","sourceRoot":"","sources":["../src/file-identity.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACtB,CAAC;AAUF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,CAAC,EAAE,cAAc,GAAG,MAAM,CAGlF;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,gBAAgB,EACvB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAWT"}
+{"version":3,"file":"file-identity.d.ts","sourceRoot":"","sources":["../src/file-identity.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACtB,CAAC;AAsBF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,CAAC,EAAE,cAAc,GAAG,MAAM,CAGlF;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,gBAAgB,EACvB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAQT"}

package/dist/file-identity.js

@@ -5,18 +5,20 @@ function isZero(value) {
 function sameStatValue(left, right) {
     return typeof left === typeof right ? left === right : BigInt(left) === BigInt(right);
 }
+function isStatValueProvablyDifferent(left, right, platform) {
+    if (sameStatValue(left, right)) {
+        return false;
+    }
+    return platform !== "win32" || (!isZero(left) && !isZero(right));
+}
 export function sha256Hex(data, encoding) {
     const buffer = typeof data === "string" ? Buffer.from(data, encoding ?? "utf8") : data;
     return createHash("sha256").update(buffer).digest("hex");
 }
 export function sameFileIdentity(left, right, platform = process.platform) {
-    if (!sameStatValue(left.ino, right.ino)) {
-        return false;
-    }
-    // On Windows, path-based stat calls can report dev=0 while fd-based stat
-    // reports a real volume serial; treat either-side dev=0 as "unknown device".
-    if (sameStatValue(left.dev, right.dev)) {
-        return true;
-    }
-    return platform === "win32" && (isZero(left.dev) || isZero(right.dev));
+    // When Windows cannot open a path for stat, libuv's FindFirstFile fallback reports dev=0 and
+    // ino=0. Treating either unknown value as a mismatch caused nondeterministic path-mismatch
+    // failures on legitimate reads under antivirus or indexer contention.
+    return (!isStatValueProvablyDifferent(left.dev, right.dev, platform) &&
+        !isStatValueProvablyDifferent(left.ino, right.ino, platform));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/fs-safe",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Capability-style filesystem roots for Node.js apps that handle untrusted relative paths.",
   "keywords": [
     "filesystem",