@openclaw/fs-safe 0.6.0 → 0.7.1

package/dist/output-sibling.js

@@ -1,19 +1,7 @@
 import { randomUUID } from "node:crypto";
-import fsSync from "node:fs";
-import fs, {} from "node:fs/promises";
 import path from "node:path";
-import { createAsyncDirectoryGuard } from "./directory-guard.js";
-import { syncDirectoryBestEffort } from "./directory-durability.js";
-import { FsSafeError } from "./errors.js";
-import { sameFileIdentity, sameFileIdentityForCleanup } from "./file-identity.js";
-import { withAsyncDirectoryGuards } from "./guarded-mutation.js";
 import { sanitizeUntrustedFileName } from "./filename.js";
-import { registerTempPathForExit } from "./temp-cleanup.js";
-import { serializePathWrite } from "./write-queue.js";
-const OPEN_READ_WRITE_NOFOLLOW = fsSync.constants.O_RDWR |
-    (process.platform !== "win32" && typeof fsSync.constants.O_NOFOLLOW === "number"
-        ? fsSync.constants.O_NOFOLLOW
-        : 0);
+import { writeCallbackSibling } from "./sibling-staged-file.js";
 function safeFallbackFileName(fallbackFileName) {
     return sanitizeUntrustedFileName(fallbackFileName ?? "output.bin", "output.bin");
 }
@@ -21,103 +9,16 @@ function buildSiblingTempPath(targetPath, fallbackFileName) {
     const safeTail = sanitizeUntrustedFileName(path.basename(targetPath), safeFallbackFileName(fallbackFileName));
     return path.join(path.dirname(targetPath), `.fs-safe-output-${process.pid}-${randomUUID()}-${safeTail}.part`);
 }
-function assertStagedFile(pathname, opened, maxBytes) {
-    if (pathname.isSymbolicLink() || !pathname.isFile() || !opened.isFile()) {
-        throw new FsSafeError("not-file", "sibling-staged output must be a regular file");
-    }
-    if (!sameFileIdentity(pathname, opened)) {
-        throw new FsSafeError("path-mismatch", "sibling-staged output changed while opening");
-    }
-    if (opened.nlink > 1) {
-        throw new FsSafeError("hardlink", "hardlinked sibling-staged output not allowed");
-    }
-    if (maxBytes !== undefined && opened.size > maxBytes) {
-        throw new FsSafeError("too-large", `sibling-staged output exceeds maxBytes (${maxBytes})`);
-    }
-}
-async function openPinnedStagedFile(tempPath, maxBytes) {
-    const preview = await fs.lstat(tempPath);
-    if (preview.isSymbolicLink()) {
-        throw new FsSafeError("symlink", "symlink sibling-staged output not allowed");
-    }
-    const handle = await fs.open(tempPath, OPEN_READ_WRITE_NOFOLLOW);
-    try {
-        const identity = await handle.stat();
-        assertStagedFile(await fs.lstat(tempPath), identity, maxBytes);
-        return { handle, identity };
-    }
-    catch (error) {
-        await handle.close().catch(() => undefined);
-        throw error;
-    }
-}
-async function syncFile(handle) {
-    try {
-        await handle.sync();
-    }
-    catch (error) {
-        if (error.code !== "EPERM")
-            throw error;
-    }
-}
-async function cleanupTempPath(tempPath, identity) {
-    try {
-        const current = await fs.lstat(tempPath);
-        if (!identity || (!current.isSymbolicLink() && sameFileIdentityForCleanup(current, identity))) {
-            await fs.rm(tempPath, { force: true });
-        }
-        return true;
-    }
-    catch (error) {
-        return error.code === "ENOENT";
-    }
-}
 export async function writeExternalFileViaSibling(params) {
     const finalPath = path.resolve(params.finalPath);
-    const parentPath = path.dirname(finalPath);
-    const parentGuard = await createAsyncDirectoryGuard(parentPath);
-    const tempPath = buildSiblingTempPath(finalPath, params.fallbackFileName);
-    const unregisterTempPath = registerTempPathForExit(tempPath);
-    let stagedIdentity;
-    let renamed = false;
-    try {
-        const result = await params.write(tempPath);
-        const pinned = await openPinnedStagedFile(tempPath, params.maxBytes);
-        stagedIdentity = pinned.identity;
-        unregisterTempPath.setIdentity(await pinned.handle.stat({ bigint: true }));
-        try {
-            if (params.mode !== undefined) {
-                await pinned.handle.chmod(params.mode);
-            }
-            await syncFile(pinned.handle);
-            await serializePathWrite(finalPath, async () => {
-                await withAsyncDirectoryGuards([parentGuard], async () => {
-                    const currentIdentity = await pinned.handle.stat();
-                    assertStagedFile(await fs.lstat(tempPath), currentIdentity, params.maxBytes);
-                    if (!sameFileIdentity(currentIdentity, stagedIdentity)) {
-                        throw new FsSafeError("path-mismatch", "sibling-staged output changed before rename");
-                    }
-                    await fs.rename(tempPath, finalPath);
-                    renamed = true;
-                    const published = await fs.lstat(finalPath);
-                    if (published.isSymbolicLink() || !sameFileIdentity(published, currentIdentity)) {
-                        throw new FsSafeError("path-mismatch", "sibling-staged output changed during rename");
-                    }
-                });
-                await syncDirectoryBestEffort(parentPath);
-            });
-        }
-        finally {
-            await pinned.handle.close().catch(() => undefined);
-        }
-        return result;
-    }
-    finally {
-        let cleanupComplete = renamed;
-        if (!renamed) {
-            cleanupComplete = await cleanupTempPath(tempPath, stagedIdentity);
-        }
-        if (cleanupComplete)
-            unregisterTempPath();
-    }
+    const { result } = await writeCallbackSibling({
+        tempPath: buildSiblingTempPath(finalPath, params.fallbackFileName),
+        write: params.write,
+        resolveFinalPath: () => finalPath,
+        mode: params.mode,
+        maxBytes: params.maxBytes,
+        syncTempFile: true,
+        syncParentDir: true,
+    });
+    return result;
 }

package/dist/output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,wBAAwB,CAAC,CAAC,GAAG,IAAI,IAAI;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,CAAC,GAAG,IAAI,IAAI;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,CAAC,CAAC;CACX,CAAC;AAyDF,wBAAsB,2BAA2B,CAAC,CAAC,GAAG,IAAI,EACxD,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CA+CrC"}
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,wBAAwB,CAAC,CAAC,GAAG,IAAI,IAAI;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,CAAC,GAAG,IAAI,IAAI;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,CAAC,CAAC;CACX,CAAC;AAyDF,wBAAsB,2BAA2B,CAAC,CAAC,GAAG,IAAI,EACxD,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAgDrC"}

package/dist/output.js

@@ -1,4 +1,5 @@
 import path from "node:path";
+import { normalizeMaxBytes } from "./byte-budget.js";
 import { FsSafeError } from "./errors.js";
 import { sanitizeUntrustedFileName } from "./filename.js";
 import { isPathInside } from "./path.js";
@@ -48,6 +49,7 @@ function assertFileTargetPath(targetPath) {
     }
 }
 export async function writeExternalFileWithinRoot(options) {
+    const maxBytes = normalizeMaxBytes(options.maxBytes);
     const targetRoot = await root(options.rootDir);
     const requestedTargetPath = options.path;
     if (requestedTargetPath.length === 0) {
@@ -72,7 +74,7 @@ export async function writeExternalFileWithinRoot(options) {
             finalPath: siblingFinalPath,
             write: options.write,
             fallbackFileName: options.fallbackFileName,
-            maxBytes: options.maxBytes,
+            maxBytes,
             mode: options.mode,
         });
         return { path: siblingFinalPath, result };
@@ -84,7 +86,7 @@ export async function writeExternalFileWithinRoot(options) {
     try {
         const result = await options.write(staged.path);
         await targetRoot.copyIn(targetPath, staged.path, {
-            maxBytes: options.maxBytes,
+            maxBytes,
             mode: options.mode,
             mkdir: true,
             sourceHardlinks: "reject",

package/dist/pinned-open.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pinned-open.d.ts","sourceRoot":"","sources":["../src/pinned-open.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAMzB,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;AAEvE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,OAAO,EAAE,EACT,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CACpF,CAAC;AAYF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB,GAAG,oBAAoB,CA+EvB"}
+{"version":3,"file":"pinned-open.d.ts","sourceRoot":"","sources":["../src/pinned-open.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAMzB,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;AAEvE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,OAAO,EAAE,EACT,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CACpF,CAAC;AAQF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB,GAAG,oBAAoB,CAoDvB"}

package/dist/pinned-open.js

@@ -1,15 +1,12 @@
 import fs from "node:fs";
 import { isUnsafeDeviceReadPath } from "./device-path.js";
 import { FsSafeError } from "./errors.js";
-import { sameFileIdentity as hasSameFileIdentity } from "./file-identity.js";
+import { inspectFileIdentitySync } from "./strict-file-identity.js";
 import { resolveReadOpenFlags } from "./read-open-flags.js";
 function isExpectedPathError(error) {
     const code = typeof error === "object" && error !== null && "code" in error ? String(error.code) : "";
     return code === "ENOENT" || code === "ENOTDIR" || code === "ELOOP";
 }
-function sameFileIdentity(left, right) {
-    return hasSameFileIdentity(left, right);
-}
 export function openPinnedFileSync(params) {
     const ioFs = params.ioFs ?? fs;
     const allowedType = params.allowedType ?? "file";
@@ -29,53 +26,30 @@ export function openPinnedFileSync(params) {
         if (isUnsafeDeviceReadPath(realPath)) {
             return { ok: false, reason: "validation" };
         }
-        const preOpenStat = ioFs.lstatSync(realPath);
-        if (!isAllowedType(preOpenStat, allowedType)) {
-            return {
-                ok: false,
-                reason: "validation",
-                error: new FsSafeError("not-file", "path does not have the required file type"),
-            };
-        }
-        if (params.rejectHardlinks && preOpenStat.isFile() && preOpenStat.nlink > 1) {
-            return {
-                ok: false,
-                reason: "validation",
-                error: new FsSafeError("hardlink", "path must not be hardlinked"),
-            };
-        }
-        if (params.maxBytes !== undefined &&
-            preOpenStat.isFile() &&
-            preOpenStat.size > params.maxBytes) {
-            return { ok: false, reason: "validation" };
-        }
+        const preOpenStat = inspectFileIdentitySync(() => {
+            const stat = ioFs.lstatSync(realPath, { bigint: true });
+            assertAllowedStat(stat, allowedType, params);
+            return stat;
+        });
         fd = ioFs.openSync(realPath, openReadFlags);
         const openedStat = ioFs.fstatSync(fd);
-        if (!isAllowedType(openedStat, allowedType)) {
-            return {
-                ok: false,
-                reason: "validation",
-                error: new FsSafeError("not-file", "path does not have the required file type"),
-            };
-        }
-        if (params.rejectHardlinks && openedStat.isFile() && openedStat.nlink > 1) {
-            return {
-                ok: false,
-                reason: "validation",
-                error: new FsSafeError("hardlink", "path must not be hardlinked"),
-            };
-        }
-        if (params.maxBytes !== undefined && openedStat.isFile() && openedStat.size > params.maxBytes) {
-            return { ok: false, reason: "validation" };
-        }
-        if (!sameFileIdentity(preOpenStat, openedStat)) {
-            return { ok: false, reason: "validation" };
-        }
+        const identity = inspectFileIdentitySync(() => {
+            const stat = ioFs.fstatSync(fd, { bigint: true });
+            assertAllowedStat(stat, allowedType, params);
+            return stat;
+        }, preOpenStat);
+        inspectFileIdentitySync(() => {
+            const stat = ioFs.lstatSync(realPath, { bigint: true });
+            assertAllowedStat(stat, allowedType, params);
+            return stat;
+        }, identity);
         const opened = { ok: true, path: realPath, fd, stat: openedStat };
         fd = null;
         return opened;
     }
     catch (error) {
+        if (error instanceof FsSafeError)
+            return { ok: false, reason: "validation", error };
         if (isExpectedPathError(error)) {
             return { ok: false, reason: "path", error };
         }
@@ -87,9 +61,14 @@ export function openPinnedFileSync(params) {
         }
     }
 }
-function isAllowedType(stat, allowedType) {
-    if (allowedType === "directory") {
-        return stat.isDirectory();
+function assertAllowedStat(stat, allowedType, params) {
+    if (stat.isSymbolicLink() || !(allowedType === "directory" ? stat.isDirectory() : stat.isFile())) {
+        throw new FsSafeError("not-file", "path does not have the required file type");
+    }
+    if (params.rejectHardlinks && stat.isFile() && stat.nlink > 1n) {
+        throw new FsSafeError("hardlink", "path must not be hardlinked");
+    }
+    if (params.maxBytes !== undefined && stat.isFile() && stat.size > params.maxBytes) {
+        throw new FsSafeError("too-large", "file exceeds byte limit");
     }
-    return stat.isFile();
 }

package/dist/pinned-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pinned-write.d.ts","sourceRoot":"","sources":["../src/pinned-write.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAkE,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAGhI,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAU3D,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,CAAC;AAgEzC,MAAM,MAAM,4BAA4B,GAAG,OAAO,GAAG,gBAAgB,CAAC;AAEtE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,0BAA0B,CAAC;AAEzE,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE5E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,CAAC;IACxB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,wBAAwB,CAAC,EAAE,4BAA4B,CAAC;IAExD,eAAe,CAAC,EAAE,CAChB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,sBAAsB,EAChC,WAAW,EAAE,mBAAmB,KAC7B,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAe/F;AAED,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,iBAAiB,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC,GACA,OAAO,CAAC,gBAAgB,CAAC,CA2B3B"}
+{"version":3,"file":"pinned-write.d.ts","sourceRoot":"","sources":["../src/pinned-write.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAkE,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAGhI,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAW3D,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,CAAC;AAgEzC,MAAM,MAAM,4BAA4B,GAAG,OAAO,GAAG,gBAAgB,CAAC;AAEtE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,0BAA0B,CAAC;AAEzE,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE5E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,CAAC;IACxB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,wBAAwB,CAAC,EAAE,4BAA4B,CAAC;IAExD,eAAe,CAAC,EAAE,CAChB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,sBAAsB,EAChC,WAAW,EAAE,mBAAmB,KAC7B,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgB/F;AAED,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,iBAAiB,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC,GACA,OAAO,CAAC,gBAAgB,CAAC,CA2B3B"}

package/dist/pinned-write.js

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import fsSync from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
+import { normalizeMaxBytes } from "./byte-budget.js";
 import { createAsyncDirectoryGuard, createNearestExistingDirectoryGuard } from "./directory-guard.js";
 import { FsSafeError } from "./errors.js";
 import { syncDirectoryBestEffort } from "./fsync.js";
@@ -11,6 +12,7 @@ import { mkdirPathComponentsWithGuards } from "./guarded-mkdir.js";
 import { runPinnedWriteNative } from "./native-pinned-write.js";
 import { getNativeBinding } from "./native.js";
 import { validatePinnedOperationPayload } from "./pinned-operation.js";
+import { resolveReadOpenFlags } from "./read-open-flags.js";
 import { withSidecarLock } from "./sidecar-lock.js";
 import { getFsSafeTestHooks } from "./test-hooks.js";
 function byteLength(input, encoding) {
@@ -59,20 +61,21 @@ async function writeStreamToHandle(stream, handle, maxBytes) {
     }
 }
 export async function runPinnedWriteHelper(params) {
+    const normalizedParams = { ...params, maxBytes: normalizeMaxBytes(params.maxBytes) };
     assertSafeBasename(params.basename);
     validatePinnedOperationPayload({
         relativeParentPath: params.relativeParentPath,
     });
     // The explicit compatibility policy uses the guarded Node fallback, where
     // content verification can replace the strict post-rename inode check.
-    if (params.onRenameIdentityMismatch === "verify-content") {
-        return await runPinnedWriteFallback(params);
+    if (normalizedParams.onRenameIdentityMismatch === "verify-content") {
+        return await runPinnedWriteFallback(normalizedParams);
     }
     const native = getNativeBinding();
     if (native) {
-        return await runPinnedWriteNative(native, params);
+        return await runPinnedWriteNative(native, normalizedParams);
     }
-    return await runPinnedWriteFallback(params);
+    return await runPinnedWriteFallback(normalizedParams);
 }
 export async function runPinnedWriteWithRenamePolicy(params) {
     const { targetPath, renameIdentity, ...writeParams } = params;
@@ -153,7 +156,8 @@ async function runPinnedWriteFallback(params) {
             }
         }
     }
-    const tempPath = path.join(parentPath, `.${params.basename}.${randomUUID()}.fallback.tmp`);
+    // Private staging must not consume the destination basename's filename budget.
+    const tempPath = path.join(parentPath, `.fs-safe-${randomUUID()}.tmp`);
     const tempFlags = fsSync.constants.O_WRONLY |
         fsSync.constants.O_CREAT |
         fsSync.constants.O_EXCL |
@@ -209,11 +213,7 @@ async function runPinnedWriteFallback(params) {
                     throw new FsSafeError("path-mismatch", "fallback target changed during write");
                 }
                 const expectedHash = sha256Hex(params.input.data, params.input.encoding);
-                const readFlags = fsSync.constants.O_RDONLY |
-                    (process.platform !== "win32" && "O_NOFOLLOW" in fsSync.constants
-                        ? fsSync.constants.O_NOFOLLOW
-                        : 0);
-                readHandle = await fs.open(targetPath, readFlags);
+                readHandle = await fs.open(targetPath, resolveReadOpenFlags());
                 const readHandleStat = await readHandle.stat({ bigint: true });
                 const actualHash = sha256Hex(await readHandle.readFile());
                 if (actualHash !== expectedHash) {

package/dist/private-temp-workspace.d.ts

@@ -1,11 +1,13 @@
 import { type FileStore, type FileStoreSync } from "./file-store.js";
 import { type TempPathIdentityReceipt } from "./temp-cleanup.js";
-export type TempWorkspaceCleanupResult = "removed" | "missing" | "identity-mismatch";
+import { type TempWorkspaceCleanupResult, type TempWorkspaceCleanupSafety } from "./temp-workspace-owner.js";
+export type { TempWorkspaceCleanupResult, TempWorkspaceCleanupSafety, } from "./temp-workspace-owner.js";
 export type TempWorkspaceOptions = {
     rootDir: string;
     prefix: string;
     dirMode?: number;
     mode?: number;
+    cleanupSafety?: TempWorkspaceCleanupSafety;
 };
 export type TempWorkspace = {
     dir: string;

package/dist/private-temp-workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private-temp-workspace.d.ts","sourceRoot":"","sources":["../src/private-temp-workspace.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAUzB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAErF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/C,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,0BAA0B,CAAC;IACtC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;CAC1B,CAAC;AA+KF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,iBAAiB,CA8EnB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,CAAC,GACvC,CAAC,CAUH"}
+{"version":3,"file":"private-temp-workspace.d.ts","sourceRoot":"","sources":["../src/private-temp-workspace.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AASzB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAChC,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,0BAA0B,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/C,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,uBAAuB,CAAC;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,0BAA0B,CAAC;IACtC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;CAC1B,CAAC;AAuKF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,iBAAiB,CAgGnB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,CAAC,GACvC,CAAC,CAUH"}

package/dist/private-temp-workspace.js

@@ -4,11 +4,18 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { fileStore, fileStoreSync, } from "./file-store.js";
 import { FsSafeError } from "./errors.js";
-import { sameFileIdentityForCleanup } from "./file-identity.js";
 import { isNotFoundPathError } from "./path.js";
 import { throwFsSafeReadError } from "./read-error.js";
 import { matchRootFileOpenFailure, openRootFileSync, } from "./root-file.js";
 import { registerTempPathForExit, } from "./temp-cleanup.js";
+import { TempWorkspaceCleanupCapability, TempWorkspaceCleanupOwner, } from "./temp-workspace-owner.js";
+function resolveTempWorkspaceCleanupSafety(value) {
+    if (value === undefined || value === "compatible")
+        return "compatible";
+    if (value === "require-bounded")
+        return value;
+    throw new TypeError("cleanupSafety must be compatible or require-bounded");
+}
 function sanitizeTempPrefix(prefix) {
     const sanitized = prefix.trim().replace(/[^a-zA-Z0-9._-]/g, "-");
     if (!sanitized || sanitized === "." || sanitized === "..") {
@@ -79,52 +86,47 @@ function ensurePrivateDirectorySync(dir, mode) {
         // Best-effort on platforms that do not enforce POSIX modes.
     }
 }
-async function cleanupWorkspace(dir, identity) {
-    let current;
-    try {
-        current = await fs.lstat(dir, { bigint: true });
-    }
-    catch (error) {
-        return error.code === "ENOENT" ? "missing" : "identity-mismatch";
-    }
-    if (!sameFileIdentityForCleanup(current, identity)) {
-        return "identity-mismatch";
-    }
-    await fs.rm(dir, { recursive: true, force: true });
-    return "removed";
-}
-function cleanupWorkspaceSync(dir, identity) {
-    let current;
-    try {
-        current = fsSync.lstatSync(dir, { bigint: true });
-    }
-    catch (error) {
-        return error.code === "ENOENT" ? "missing" : "identity-mismatch";
-    }
-    if (!sameFileIdentityForCleanup(current, identity)) {
-        return "identity-mismatch";
-    }
-    fsSync.rmSync(dir, { recursive: true, force: true });
-    return "removed";
-}
 async function createTempWorkspace(options) {
     const dirMode = options.dirMode ?? 0o700;
     const mode = options.mode ?? 0o600;
+    const cleanupSafety = resolveTempWorkspaceCleanupSafety(options.cleanupSafety);
     const requestedRoot = path.resolve(options.rootDir);
     const root = await fs.realpath(requestedRoot).catch(() => requestedRoot);
     await ensurePrivateDirectory(root, dirMode);
-    const dir = await fs.mkdtemp(path.join(root, sanitizeTempPrefix(options.prefix)));
-    await fs.chmod(dir, dirMode).catch(() => undefined);
-    const stat = await fs.lstat(dir, { bigint: true });
-    if (stat.isSymbolicLink() || !stat.isDirectory()) {
-        throw new Error(`Temp workspace must be a directory: ${dir}`);
+    const capability = new TempWorkspaceCleanupCapability(root, cleanupSafety);
+    let dir;
+    let stat;
+    let cleanupOwner;
+    let unregisterTempDir;
+    try {
+        dir = await fs.mkdtemp(path.join(root, sanitizeTempPrefix(options.prefix)));
+        await fs.chmod(dir, dirMode).catch(() => undefined);
+        stat = await fs.lstat(dir, { bigint: true });
+        if (stat.isSymbolicLink() || !stat.isDirectory()) {
+            throw new Error(`Temp workspace must be a directory: ${dir}`);
+        }
+        if (capability.parent)
+            capability.assertCurrent();
+        cleanupOwner = new TempWorkspaceCleanupOwner(dir, stat, capability);
+        unregisterTempDir = registerTempPathForExit(dir, {
+            cleanupSync: () => cleanupOwner.cleanupSync(),
+        });
     }
+    catch (error) {
+        try {
+            if (cleanupOwner)
+                cleanupOwner.cleanupSync();
+            else
+                capability.close();
+        }
+        catch (cleanupError) {
+            throw new AggregateError([error, cleanupError], "temp workspace creation and cleanup both failed");
+        }
+        throw error;
+    }
+    const owner = cleanupOwner;
     const identity = { dev: Number(stat.dev), ino: Number(stat.ino) };
-    const cleanupIdentity = { dev: stat.dev, ino: stat.ino };
-    const unregisterTempDir = registerTempPathForExit(dir, {
-        recursive: true,
-        identity: cleanupIdentity,
-    });
+    // Once registered, even a store-construction failure remains exit-cleanable.
     const store = fileStore({ rootDir: dir, private: true, dirMode, mode });
     return {
         dir,
@@ -148,7 +150,7 @@ async function createTempWorkspace(options) {
         },
         cleanup: async () => {
             try {
-                return await cleanupWorkspace(dir, cleanupIdentity);
+                return await owner.cleanup();
             }
             finally {
                 unregisterTempDir();
@@ -156,7 +158,7 @@ async function createTempWorkspace(options) {
         },
         [Symbol.asyncDispose]: async () => {
             try {
-                await cleanupWorkspace(dir, cleanupIdentity);
+                await owner.cleanup();
             }
             finally {
                 unregisterTempDir();
@@ -182,6 +184,7 @@ export async function withTempWorkspace(options, run) {
 export function tempWorkspaceSync(options) {
     const dirMode = options.dirMode ?? 0o700;
     const mode = options.mode ?? 0o600;
+    const cleanupSafety = resolveTempWorkspaceCleanupSafety(options.cleanupSafety);
     const requestedRoot = path.resolve(options.rootDir);
     let root = requestedRoot;
     try {
@@ -191,23 +194,45 @@ export function tempWorkspaceSync(options) {
         root = requestedRoot;
     }
     ensurePrivateDirectorySync(root, dirMode);
-    const dir = fsSync.mkdtempSync(path.join(root, sanitizeTempPrefix(options.prefix)));
+    const capability = new TempWorkspaceCleanupCapability(root, cleanupSafety);
+    let dir;
+    let stat;
+    let cleanupOwner;
+    let unregisterTempDir;
     try {
-        fsSync.chmodSync(dir, dirMode);
+        dir = fsSync.mkdtempSync(path.join(root, sanitizeTempPrefix(options.prefix)));
+        try {
+            fsSync.chmodSync(dir, dirMode);
+        }
+        catch {
+            // Best-effort on platforms that do not enforce POSIX modes.
+        }
+        stat = fsSync.lstatSync(dir, { bigint: true });
+        if (stat.isSymbolicLink() || !stat.isDirectory()) {
+            throw new Error(`Temp workspace must be a directory: ${dir}`);
+        }
+        if (capability.parent)
+            capability.assertCurrent();
+        cleanupOwner = new TempWorkspaceCleanupOwner(dir, stat, capability);
+        unregisterTempDir = registerTempPathForExit(dir, {
+            cleanupSync: () => cleanupOwner.cleanupSync(),
+        });
     }
-    catch {
-        // Best-effort on platforms that do not enforce POSIX modes.
-    }
-    const stat = fsSync.lstatSync(dir, { bigint: true });
-    if (stat.isSymbolicLink() || !stat.isDirectory()) {
-        throw new Error(`Temp workspace must be a directory: ${dir}`);
+    catch (error) {
+        try {
+            if (cleanupOwner)
+                cleanupOwner.cleanupSync();
+            else
+                capability.close();
+        }
+        catch (cleanupError) {
+            throw new AggregateError([error, cleanupError], "temp workspace creation and cleanup both failed");
+        }
+        throw error;
     }
+    const owner = cleanupOwner;
     const identity = { dev: Number(stat.dev), ino: Number(stat.ino) };
-    const cleanupIdentity = { dev: stat.dev, ino: stat.ino };
-    const unregisterTempDir = registerTempPathForExit(dir, {
-        recursive: true,
-        identity: cleanupIdentity,
-    });
+    // Once registered, even a store-construction failure remains exit-cleanable.
     const store = fileStoreSync({ rootDir: dir, private: true, dirMode, mode });
     return {
         dir,
@@ -244,7 +269,7 @@ export function tempWorkspaceSync(options) {
         },
         cleanup: () => {
             try {
-                return cleanupWorkspaceSync(dir, cleanupIdentity);
+                return owner.cleanupSync();
             }
             finally {
                 unregisterTempDir();
@@ -252,7 +277,7 @@ export function tempWorkspaceSync(options) {
         },
         [Symbol.dispose]: () => {
             try {
-                cleanupWorkspaceSync(dir, cleanupIdentity);
+                owner.cleanupSync();
             }
             finally {
                 unregisterTempDir();

package/dist/publish-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish-file.d.ts","sourceRoot":"","sources":["../src/publish-file.ts"],"names":[],"mappings":"AACA,OAAe,EAAoB,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAI/D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAML,KAAK,qCAAqC,EAC3C,MAAM,2BAA2B,CAAC;AAGnC,YAAY,EACV,2BAA2B,EAC3B,wCAAwC,EACxC,kCAAkC,EAClC,gCAAgC,EAChC,qCAAqC,GACtC,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,4BAA4B,GACpC,cAAc,GACd,eAAe,GACf,kBAAkB,CAAC;AAEvB,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;IAC3D,QAAQ,EAAE,KAAK,CAAC;IAChB,aAAa,EAAE,oBAAoB,CAAC;CACrC,CAAC;AAkBF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE/D;AA2ND,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C,QAAQ,EAAE,4BAA4B,CAAC;IACvC,aAAa,CAAC,EAAE,qCAAqC,CAAC;IACtD,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA4MtC"}
+{"version":3,"file":"publish-file.d.ts","sourceRoot":"","sources":["../src/publish-file.ts"],"names":[],"mappings":"AACA,OAAe,EAAoB,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAI/D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAML,KAAK,qCAAqC,EAC3C,MAAM,2BAA2B,CAAC;AAGnC,YAAY,EACV,2BAA2B,EAC3B,wCAAwC,EACxC,kCAAkC,EAClC,gCAAgC,EAChC,qCAAqC,GACtC,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,4BAA4B,GACpC,cAAc,GACd,eAAe,GACf,kBAAkB,CAAC;AAEvB,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;IAC3D,QAAQ,EAAE,KAAK,CAAC;IAChB,aAAa,EAAE,oBAAoB,CAAC;CACrC,CAAC;AAkBF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE/D;AAsND,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C,QAAQ,EAAE,4BAA4B,CAAC;IACvC,aAAa,CAAC,EAAE,qCAAqC,CAAC;IACtD,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA4MtC"}

package/dist/publish-file.js

@@ -8,6 +8,7 @@ import { hashFileHandle } from "./file-hash.js";
 import { sameFileIdentity, sameFileIdentityForCleanup, } from "./file-identity.js";
 import { syncNativeFileBestEffort } from "./native-operations.js";
 import { getNativeBinding, requireNativeBinding } from "./native.js";
+import { resolveReadOpenFlags } from "./read-open-flags.js";
 import { directorySyncFailure, publicationFailure, rememberCreatedTarget, } from "./publish-file-failure.js";
 import { getFsSafeTestHooks } from "./test-hooks.js";
 const HARDLINK_FALLBACK_CODES = new Set([
@@ -29,10 +30,7 @@ export function isHardlinkFallbackError(error) {
     return HARDLINK_FALLBACK_CODES.has(error?.code ?? "");
 }
 function sourceOpenFlags() {
-    return (fsSync.constants.O_RDONLY |
-        (process.platform !== "win32" && typeof fsSync.constants.O_NOFOLLOW === "number"
-            ? fsSync.constants.O_NOFOLLOW
-            : 0));
+    return resolveReadOpenFlags();
 }
 function directoryOpenFlags() {
     return (fsSync.constants.O_RDONLY |

package/dist/read-opened-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read-opened-file.d.ts","sourceRoot":"","sources":["../src/read-opened-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAI7D,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,CAAC;CACb,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,CAAC;CACb,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,UAAU,CAAC,CAiBtB"}
+{"version":3,"file":"read-opened-file.d.ts","sourceRoot":"","sources":["../src/read-opened-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAI7D,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,CAAC;CACb,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,CAAC;CACb,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,UAAU,CAAC,CAkBtB"}