@openclaw/matrix 2026.10.1-beta.2 → 2026.10.5-beta.1

package/node_modules/@matrix-org/matrix-sdk-crypto-wasm/pkg/matrix_sdk_crypto_wasm_bg.wasm.d.ts

@@ -12,6 +12,7 @@ export const __wbg_checkcode_free: (a: number, b: number) => void;
 export const __wbg_collectstrategy_free: (a: number, b: number) => void;
 export const __wbg_crosssigningbootstraprequests_free: (a: number, b: number) => void;
 export const __wbg_crosssigningkeyexport_free: (a: number, b: number) => void;
+export const __wbg_crosssigningstatus_free: (a: number, b: number) => void;
 export const __wbg_curve25519publickey_free: (a: number, b: number) => void;
 export const __wbg_curve25519secretkey_free: (a: number, b: number) => void;
 export const __wbg_decryptedroomevent_free: (a: number, b: number) => void;
@@ -34,14 +35,18 @@ export const __wbg_encryptedattachment_free: (a: number, b: number) => void;
 export const __wbg_encryptioninfo_free: (a: number, b: number) => void;
 export const __wbg_encryptionsettings_free: (a: number, b: number) => void;
 export const __wbg_establishedecies_free: (a: number, b: number) => void;
+export const __wbg_eventid_free: (a: number, b: number) => void;
 export const __wbg_get_backupkeys_backupVersion: (a: number) => [number, number];
 export const __wbg_get_backupkeys_decryptionKey: (a: number) => number;
 export const __wbg_get_backupsecretsbundle_backup_version: (a: number) => [number, number];
 export const __wbg_get_backupsecretsbundle_key: (a: number) => [number, number];
+export const __wbg_get_base64encodedpkmessage_ciphertext: (a: number) => [number, number];
 export const __wbg_get_base64encodedpkmessage_ephemeralKey: (a: number) => [number, number];
+export const __wbg_get_base64encodedpkmessage_mac: (a: number) => [number, number];
 export const __wbg_get_basemigrationdata_backupRecoveryKey: (a: number) => [number, number];
 export const __wbg_get_basemigrationdata_backupVersion: (a: number) => [number, number];
 export const __wbg_get_basemigrationdata_deviceId: (a: number) => number;
+export const __wbg_get_basemigrationdata_pickledAccount: (a: number) => [number, number];
 export const __wbg_get_basemigrationdata_privateCrossSigningMasterKey: (a: number) => [number, number];
 export const __wbg_get_basemigrationdata_privateCrossSigningSelfSigningKey: (a: number) => [number, number];
 export const __wbg_get_basemigrationdata_privateCrossSigningUserSigningKey: (a: number) => [number, number];
@@ -56,6 +61,8 @@ export const __wbg_get_decryptionsettings_sender_device_trust_requirement: (a: n
 export const __wbg_get_encryptioninfo_forwarder: (a: number) => number;
 export const __wbg_get_encryptioninfo_forwarderDevice: (a: number) => number;
 export const __wbg_get_encryptioninfo_sender: (a: number) => number;
+export const __wbg_get_encryptioninfo_senderClaimedEd25519Key: (a: number) => [number, number];
+export const __wbg_get_encryptioninfo_senderCurve25519Key: (a: number) => [number, number];
 export const __wbg_get_encryptioninfo_senderDevice: (a: number) => number;
 export const __wbg_get_encryptionsettings_algorithm: (a: number) => number;
 export const __wbg_get_encryptionsettings_encryptStateEvents: (a: number) => number;
@@ -66,16 +73,37 @@ export const __wbg_get_encryptionsettings_sharingStrategy: (a: number) => number
 export const __wbg_get_identitykeys_curve25519: (a: number) => number;
 export const __wbg_get_identitykeys_ed25519: (a: number) => number;
 export const __wbg_get_inboundcreationresult_channel: (a: number) => number;
+export const __wbg_get_inboundcreationresult_message: (a: number) => [number, number];
 export const __wbg_get_invalidtodeviceevent_rawEvent: (a: number) => any;
 export const __wbg_get_keysbackuprequest_body: (a: number) => any;
+export const __wbg_get_keysbackuprequest_id: (a: number) => any;
 export const __wbg_get_keysbackuprequest_version: (a: number) => any;
+export const __wbg_get_keysclaimrequest_body: (a: number) => any;
+export const __wbg_get_keysclaimrequest_id: (a: number) => any;
+export const __wbg_get_keysqueryrequest_body: (a: number) => any;
+export const __wbg_get_keysqueryrequest_id: (a: number) => any;
+export const __wbg_get_keysuploadrequest_body: (a: number) => any;
+export const __wbg_get_keysuploadrequest_id: (a: number) => any;
 export const __wbg_get_megolmdecryptionerror_code: (a: number) => number;
+export const __wbg_get_megolmdecryptionerror_description: (a: number) => any;
+export const __wbg_get_msc4108intentdata_rendezvousUrl: (a: number) => [number, number];
+export const __wbg_get_msc4108intentdata_serverName: (a: number) => [number, number];
+export const __wbg_get_msc4388intentdata_baseUrl: (a: number) => [number, number];
+export const __wbg_get_msc4388intentdata_rendezvousId: (a: number) => [number, number];
+export const __wbg_get_outboundcreationresult_channel: (a: number) => number;
+export const __wbg_get_outboundcreationresult_initial_message: (a: number) => [number, number];
 export const __wbg_get_pickledinboundgroupsession_backedUp: (a: number) => number;
 export const __wbg_get_pickledinboundgroupsession_imported: (a: number) => number;
+export const __wbg_get_pickledinboundgroupsession_pickle: (a: number) => [number, number];
 export const __wbg_get_pickledinboundgroupsession_roomId: (a: number) => number;
+export const __wbg_get_pickledinboundgroupsession_senderKey: (a: number) => [number, number];
+export const __wbg_get_pickledinboundgroupsession_senderSigningKey: (a: number) => [number, number];
 export const __wbg_get_pickledsession_createdUsingFallbackKey: (a: number) => number;
 export const __wbg_get_pickledsession_creationTime: (a: number) => any;
 export const __wbg_get_pickledsession_lastUseTime: (a: number) => any;
+export const __wbg_get_pickledsession_pickle: (a: number) => [number, number];
+export const __wbg_get_pickledsession_senderKey: (a: number) => [number, number];
+export const __wbg_get_plaintexttodeviceevent_rawEvent: (a: number) => any;
 export const __wbg_get_putdehydrateddevicerequest_body: (a: number) => any;
 export const __wbg_get_qrcodeintentdata_msc4108: (a: number) => number;
 export const __wbg_get_qrcodeintentdata_msc4388: (a: number) => number;
@@ -84,6 +112,10 @@ export const __wbg_get_roomkeycounts_total: (a: number) => number;
 export const __wbg_get_roomkeyimportresult_importedCount: (a: number) => number;
 export const __wbg_get_roomkeyimportresult_totalCount: (a: number) => number;
 export const __wbg_get_roommessagerequest_body: (a: number) => any;
+export const __wbg_get_roommessagerequest_event_type: (a: number) => any;
+export const __wbg_get_roommessagerequest_id: (a: number) => any;
+export const __wbg_get_roommessagerequest_room_id: (a: number) => any;
+export const __wbg_get_roommessagerequest_txn_id: (a: number) => any;
 export const __wbg_get_roomsettings_algorithm: (a: number) => number;
 export const __wbg_get_roomsettings_encryptStateEvents: (a: number) => number;
 export const __wbg_get_roomsettings_onlyAllowTrustedDevices: (a: number) => number;
@@ -91,30 +123,47 @@ export const __wbg_get_roomsettings_sessionRotationPeriodMessages: (a: number) =
 export const __wbg_get_roomsettings_sessionRotationPeriodMs: (a: number) => [number, number];
 export const __wbg_get_shieldstate_code: (a: number) => number;
 export const __wbg_get_shieldstate_color: (a: number) => number;
+export const __wbg_get_signatureuploadrequest_body: (a: number) => any;
 export const __wbg_get_signatureuploadrequest_id: (a: number) => any;
 export const __wbg_get_todeviceencryptioninfo_sender: (a: number) => number;
+export const __wbg_get_todeviceencryptioninfo_senderCurve25519Key: (a: number) => [number, number];
 export const __wbg_get_todeviceencryptioninfo_senderDevice: (a: number) => number;
+export const __wbg_get_todevicerequest_body: (a: number) => any;
+export const __wbg_get_todevicerequest_event_type: (a: number) => any;
+export const __wbg_get_todevicerequest_id: (a: number) => any;
+export const __wbg_get_todevicerequest_txn_id: (a: number) => any;
 export const __wbg_get_todeviceunabletodecryptinfo_reason: (a: number) => number;
+export const __wbg_get_uploadsigningkeysrequest_body: (a: number) => any;
+export const __wbg_get_utdtodeviceevent_rawEvent: (a: number) => any;
 export const __wbg_get_utdtodeviceevent_utdInfo: (a: number) => number;
+export const __wbg_get_versions_git_description: (a: number) => any;
+export const __wbg_get_versions_git_sha: (a: number) => any;
+export const __wbg_get_versions_matrix_sdk_crypto: (a: number) => any;
+export const __wbg_get_versions_vodozemac: (a: number) => any;
 export const __wbg_identitykeys_free: (a: number, b: number) => void;
 export const __wbg_inboundcreationresult_free: (a: number, b: number) => void;
 export const __wbg_inboundgroupsession_free: (a: number, b: number) => void;
 export const __wbg_invalidtodeviceevent_free: (a: number, b: number) => void;
 export const __wbg_keysbackuprequest_free: (a: number, b: number) => void;
 export const __wbg_keysclaimrequest_free: (a: number, b: number) => void;
+export const __wbg_keysqueryrequest_free: (a: number, b: number) => void;
+export const __wbg_keysuploadrequest_free: (a: number, b: number) => void;
 export const __wbg_maybesignature_free: (a: number, b: number) => void;
 export const __wbg_megolmdecryptionerror_free: (a: number, b: number) => void;
 export const __wbg_megolmv1backupkey_free: (a: number, b: number) => void;
+export const __wbg_migration_free: (a: number, b: number) => void;
 export const __wbg_msc4108intentdata_free: (a: number, b: number) => void;
 export const __wbg_msc4388intentdata_free: (a: number, b: number) => void;
 export const __wbg_olmmachine_free: (a: number, b: number) => void;
 export const __wbg_otheruseridentity_free: (a: number, b: number) => void;
+export const __wbg_outboundcreationresult_free: (a: number, b: number) => void;
 export const __wbg_ownuseridentity_free: (a: number, b: number) => void;
 export const __wbg_pickledinboundgroupsession_free: (a: number, b: number) => void;
 export const __wbg_pickledsession_free: (a: number, b: number) => void;
 export const __wbg_pkdecryption_free: (a: number, b: number) => void;
 export const __wbg_pkencryption_free: (a: number, b: number) => void;
 export const __wbg_pkmessage_free: (a: number, b: number) => void;
+export const __wbg_plaintexttodeviceevent_free: (a: number, b: number) => void;
 export const __wbg_putdehydrateddevicerequest_free: (a: number, b: number) => void;
 export const __wbg_qr_free: (a: number, b: number) => void;
 export const __wbg_qrcode_free: (a: number, b: number) => void;
@@ -122,6 +171,7 @@ export const __wbg_qrcodedata_free: (a: number, b: number) => void;
 export const __wbg_qrcodeintentdata_free: (a: number, b: number) => void;
 export const __wbg_qrcodescan_free: (a: number, b: number) => void;
 export const __wbg_rehydrateddevice_free: (a: number, b: number) => void;
+export const __wbg_roomid_free: (a: number, b: number) => void;
 export const __wbg_roomkeycounts_free: (a: number, b: number) => void;
 export const __wbg_roomkeyimportresult_free: (a: number, b: number) => void;
 export const __wbg_roomkeyinfo_free: (a: number, b: number) => void;
@@ -131,14 +181,18 @@ export const __wbg_roompendingkeybundledetails_free: (a: number, b: number) => v
 export const __wbg_roomsettings_free: (a: number, b: number) => void;
 export const __wbg_sas_free: (a: number, b: number) => void;
 export const __wbg_secretsbundle_free: (a: number, b: number) => void;
+export const __wbg_servername_free: (a: number, b: number) => void;
 export const __wbg_set_backupkeys_backupVersion: (a: number, b: number, c: number) => void;
 export const __wbg_set_backupkeys_decryptionKey: (a: number, b: number) => void;
 export const __wbg_set_backupsecretsbundle_backup_version: (a: number, b: number, c: number) => void;
 export const __wbg_set_backupsecretsbundle_key: (a: number, b: number, c: number) => void;
+export const __wbg_set_base64encodedpkmessage_ciphertext: (a: number, b: number, c: number) => void;
 export const __wbg_set_base64encodedpkmessage_ephemeralKey: (a: number, b: number, c: number) => void;
+export const __wbg_set_base64encodedpkmessage_mac: (a: number, b: number, c: number) => void;
 export const __wbg_set_basemigrationdata_backupRecoveryKey: (a: number, b: number, c: number) => void;
 export const __wbg_set_basemigrationdata_backupVersion: (a: number, b: number, c: number) => void;
 export const __wbg_set_basemigrationdata_deviceId: (a: number, b: number) => void;
+export const __wbg_set_basemigrationdata_pickledAccount: (a: number, b: number, c: number) => void;
 export const __wbg_set_basemigrationdata_privateCrossSigningMasterKey: (a: number, b: number, c: number) => void;
 export const __wbg_set_basemigrationdata_privateCrossSigningSelfSigningKey: (a: number, b: number, c: number) => void;
 export const __wbg_set_basemigrationdata_privateCrossSigningUserSigningKey: (a: number, b: number, c: number) => void;
@@ -147,6 +201,8 @@ export const __wbg_set_decryptionsettings_sender_device_trust_requirement: (a: n
 export const __wbg_set_encryptioninfo_forwarder: (a: number, b: number) => void;
 export const __wbg_set_encryptioninfo_forwarderDevice: (a: number, b: number) => void;
 export const __wbg_set_encryptioninfo_sender: (a: number, b: number) => void;
+export const __wbg_set_encryptioninfo_senderClaimedEd25519Key: (a: number, b: number, c: number) => void;
+export const __wbg_set_encryptioninfo_senderCurve25519Key: (a: number, b: number, c: number) => void;
 export const __wbg_set_encryptioninfo_senderDevice: (a: number, b: number) => void;
 export const __wbg_set_encryptionsettings_algorithm: (a: number, b: number) => void;
 export const __wbg_set_encryptionsettings_encryptStateEvents: (a: number, b: number) => void;
@@ -157,12 +213,24 @@ export const __wbg_set_encryptionsettings_sharingStrategy: (a: number, b: number
 export const __wbg_set_identitykeys_curve25519: (a: number, b: number) => void;
 export const __wbg_set_identitykeys_ed25519: (a: number, b: number) => void;
 export const __wbg_set_inboundcreationresult_channel: (a: number, b: number) => void;
+export const __wbg_set_inboundcreationresult_message: (a: number, b: number, c: number) => void;
+export const __wbg_set_msc4108intentdata_rendezvousUrl: (a: number, b: number, c: number) => void;
+export const __wbg_set_msc4108intentdata_serverName: (a: number, b: number, c: number) => void;
+export const __wbg_set_msc4388intentdata_baseUrl: (a: number, b: number, c: number) => void;
+export const __wbg_set_msc4388intentdata_rendezvousId: (a: number, b: number, c: number) => void;
+export const __wbg_set_outboundcreationresult_channel: (a: number, b: number) => void;
+export const __wbg_set_outboundcreationresult_initial_message: (a: number, b: number, c: number) => void;
 export const __wbg_set_pickledinboundgroupsession_backedUp: (a: number, b: number) => void;
 export const __wbg_set_pickledinboundgroupsession_imported: (a: number, b: number) => void;
+export const __wbg_set_pickledinboundgroupsession_pickle: (a: number, b: number, c: number) => void;
 export const __wbg_set_pickledinboundgroupsession_roomId: (a: number, b: number) => void;
+export const __wbg_set_pickledinboundgroupsession_senderKey: (a: number, b: number, c: number) => void;
+export const __wbg_set_pickledinboundgroupsession_senderSigningKey: (a: number, b: number, c: number) => void;
 export const __wbg_set_pickledsession_createdUsingFallbackKey: (a: number, b: number) => void;
 export const __wbg_set_pickledsession_creationTime: (a: number, b: any) => void;
 export const __wbg_set_pickledsession_lastUseTime: (a: number, b: any) => void;
+export const __wbg_set_pickledsession_pickle: (a: number, b: number, c: number) => void;
+export const __wbg_set_pickledsession_senderKey: (a: number, b: number, c: number) => void;
 export const __wbg_set_qrcodeintentdata_msc4108: (a: number, b: number) => void;
 export const __wbg_set_qrcodeintentdata_msc4388: (a: number, b: number) => void;
 export const __wbg_set_roomkeycounts_backedUp: (a: number, b: number) => void;
@@ -175,6 +243,7 @@ export const __wbg_set_roomsettings_sessionRotationPeriodMs: (a: number, b: numb
 export const __wbg_set_shieldstate_code: (a: number, b: number) => void;
 export const __wbg_set_shieldstate_color: (a: number, b: number) => void;
 export const __wbg_set_todeviceencryptioninfo_sender: (a: number, b: number) => void;
+export const __wbg_set_todeviceencryptioninfo_senderCurve25519Key: (a: number, b: number, c: number) => void;
 export const __wbg_set_todeviceencryptioninfo_senderDevice: (a: number, b: number) => void;
 export const __wbg_set_todeviceunabletodecryptinfo_reason: (a: number, b: number) => void;
 export const __wbg_shieldstate_free: (a: number, b: number) => void;
@@ -188,7 +257,9 @@ export const __wbg_todeviceencryptioninfo_free: (a: number, b: number) => void;
 export const __wbg_todevicerequest_free: (a: number, b: number) => void;
 export const __wbg_todeviceunabletodecryptinfo_free: (a: number, b: number) => void;
 export const __wbg_tracing_free: (a: number, b: number) => void;
+export const __wbg_uploadsigningkeysrequest_free: (a: number, b: number) => void;
 export const __wbg_userdevices_free: (a: number, b: number) => void;
+export const __wbg_userid_free: (a: number, b: number) => void;
 export const __wbg_utdtodeviceevent_free: (a: number, b: number) => void;
 export const __wbg_verificationrequest_free: (a: number, b: number) => void;
 export const __wbg_versions_free: (a: number, b: number) => void;
@@ -240,6 +311,7 @@ export const decryptedtodeviceevent_type: (a: number) => number;
 export const decryptionsettings_new: (a: number) => number;
 export const dehydrateddevice_keysForUpload: (a: number, b: any, c: number) => any;
 export const dehydrateddevicekey_createKeyFromArray: (a: any) => [number, number, number];
+export const dehydrateddevicekey_createRandomKey: () => number;
 export const dehydrateddevicekey_toBase64: (a: number) => any;
 export const dehydrateddevices_create: (a: number) => any;
 export const dehydrateddevices_deleteDehydratedDeviceKey: (a: number) => any;
@@ -308,6 +380,7 @@ export const establishedecies_public_key: (a: number) => number;
 export const eventid_localpart: (a: number) => [number, number];
 export const eventid_new: (a: number, b: number) => [number, number, number];
 export const eventid_serverName: (a: number) => number;
+export const eventid_toString: (a: number) => [number, number];
 export const getVersions: () => number;
 export const inboundgroupsession_hasBeenImported: (a: number) => number;
 export const inboundgroupsession_roomId: (a: number) => number;
@@ -318,7 +391,9 @@ export const keysbackuprequest_new: (a: any, b: any, c: any) => number;
 export const keysbackuprequest_type: (a: number) => number;
 export const keysclaimrequest_new: (a: any, b: any) => number;
 export const keysclaimrequest_type: (a: number) => number;
+export const keysqueryrequest_new: (a: any, b: any) => number;
 export const keysqueryrequest_type: (a: number) => number;
+export const keysuploadrequest_new: (a: any, b: any) => number;
 export const keysuploadrequest_type: (a: number) => number;
 export const maybesignature_invalidSignatureSource: (a: number) => [number, number];
 export const maybesignature_isInvalid: (a: number) => number;
@@ -486,6 +561,7 @@ export const qrcodedata_toBytes: (a: number) => [number, number];
 export const qrcodescan_fromBytes: (a: any) => [number, number, number];
 export const rehydrateddevice_receiveEvents: (a: number, b: number, c: number, d: number) => any;
 export const roomid_new: (a: number, b: number) => [number, number, number];
+export const roomid_toString: (a: number) => [number, number];
 export const roomkeyimportresult_keys: (a: number) => any;
 export const roomkeyinfo_algorithm: (a: number) => number;
 export const roomkeyinfo_roomId: (a: number) => number;
@@ -528,6 +604,7 @@ export const sas_timedOut: (a: number) => number;
 export const sas_userId: (a: number) => number;
 export const sas_weStarted: (a: number) => number;
 export const secretsbundle_backupBundle: (a: number) => number;
+export const ring_core_0_17_14__bn_mul_mont: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const secretsbundle_from_json: (a: any) => [number, number, number];
 export const secretsbundle_masterKey: (a: number) => [number, number];
 export const secretsbundle_selfSigningKey: (a: number) => [number, number];
@@ -568,6 +645,7 @@ export const tracing_new: (a: number) => [number, number, number];
 export const tracing_set_minLevel: (a: number, b: number) => [number, number];
 export const tracing_turnOff: (a: number) => [number, number];
 export const tracing_turnOn: (a: number) => [number, number];
+export const uploadsigningkeysrequest_new: (a: any) => number;
 export const userdevices_devices: (a: number) => any;
 export const userdevices_get: (a: number, b: number) => number;
 export const userdevices_isAnyVerified: (a: number) => number;
@@ -577,6 +655,7 @@ export const userid_isHistorical: (a: number) => number;
 export const userid_localpart: (a: number) => [number, number];
 export const userid_new: (a: number, b: number) => [number, number, number];
 export const userid_serverName: (a: number) => number;
+export const userid_toString: (a: number) => [number, number];
 export const utdtodeviceevent_type: (a: number) => number;
 export const verificationrequest_accept: (a: number) => [number, number, number];
 export const verificationrequest_acceptWithMethods: (a: number, b: number, c: number) => [number, number, number];
@@ -604,90 +683,11 @@ export const verificationrequest_theirSupportedMethods: (a: number) => [number,
 export const verificationrequest_timeRemainingMillis: (a: number) => number;
 export const verificationrequest_timedOut: (a: number) => number;
 export const verificationrequest_weStarted: (a: number) => number;
-export const ring_core_0_17_14__bn_mul_mont: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-export const uploadsigningkeysrequest_new: (a: any) => number;
-export const dehydrateddevicekey_createRandomKey: () => number;
-export const __wbg_get_base64encodedpkmessage_ciphertext: (a: number) => [number, number];
-export const __wbg_get_base64encodedpkmessage_mac: (a: number) => [number, number];
-export const __wbg_get_basemigrationdata_pickledAccount: (a: number) => [number, number];
-export const __wbg_get_encryptioninfo_senderCurve25519Key: (a: number) => [number, number];
-export const __wbg_get_inboundcreationresult_message: (a: number) => [number, number];
-export const __wbg_get_msc4108intentdata_rendezvousUrl: (a: number) => [number, number];
-export const __wbg_get_msc4388intentdata_baseUrl: (a: number) => [number, number];
-export const __wbg_get_msc4388intentdata_rendezvousId: (a: number) => [number, number];
-export const __wbg_get_outboundcreationresult_initial_message: (a: number) => [number, number];
-export const __wbg_get_pickledinboundgroupsession_pickle: (a: number) => [number, number];
-export const __wbg_get_pickledinboundgroupsession_senderKey: (a: number) => [number, number];
-export const __wbg_get_pickledsession_pickle: (a: number) => [number, number];
-export const __wbg_get_pickledsession_senderKey: (a: number) => [number, number];
-export const __wbg_get_todeviceencryptioninfo_senderCurve25519Key: (a: number) => [number, number];
-export const __wbg_set_outboundcreationresult_channel: (a: number, b: number) => void;
-export const __wbg_migration_free: (a: number, b: number) => void;
-export const __wbg_get_uploadsigningkeysrequest_body: (a: number) => any;
-export const __wbg_get_pickledinboundgroupsession_senderSigningKey: (a: number) => [number, number];
-export const __wbg_get_msc4108intentdata_serverName: (a: number) => [number, number];
-export const __wbg_get_encryptioninfo_senderClaimedEd25519Key: (a: number) => [number, number];
-export const __wbg_get_outboundcreationresult_channel: (a: number) => number;
-export const keysuploadrequest_new: (a: any, b: any) => number;
-export const keysqueryrequest_new: (a: any, b: any) => number;
-export const __wbg_set_pickledsession_pickle: (a: number, b: number, c: number) => void;
-export const __wbg_set_pickledinboundgroupsession_senderSigningKey: (a: number, b: number, c: number) => void;
-export const __wbg_set_pickledsession_senderKey: (a: number, b: number, c: number) => void;
-export const __wbg_set_pickledinboundgroupsession_pickle: (a: number, b: number, c: number) => void;
-export const __wbg_set_basemigrationdata_pickledAccount: (a: number, b: number, c: number) => void;
-export const __wbg_set_pickledinboundgroupsession_senderKey: (a: number, b: number, c: number) => void;
-export const __wbg_set_msc4108intentdata_serverName: (a: number, b: number, c: number) => void;
-export const __wbg_set_msc4108intentdata_rendezvousUrl: (a: number, b: number, c: number) => void;
-export const __wbg_set_msc4388intentdata_rendezvousId: (a: number, b: number, c: number) => void;
-export const __wbg_set_msc4388intentdata_baseUrl: (a: number, b: number, c: number) => void;
-export const __wbg_set_encryptioninfo_senderCurve25519Key: (a: number, b: number, c: number) => void;
-export const __wbg_set_encryptioninfo_senderClaimedEd25519Key: (a: number, b: number, c: number) => void;
-export const __wbg_set_todeviceencryptioninfo_senderCurve25519Key: (a: number, b: number, c: number) => void;
-export const __wbg_set_base64encodedpkmessage_mac: (a: number, b: number, c: number) => void;
-export const __wbg_set_base64encodedpkmessage_ciphertext: (a: number, b: number, c: number) => void;
-export const __wbg_set_inboundcreationresult_message: (a: number, b: number, c: number) => void;
-export const __wbg_set_outboundcreationresult_initial_message: (a: number, b: number, c: number) => void;
-export const __wbg_servername_free: (a: number, b: number) => void;
-export const __wbg_eventid_free: (a: number, b: number) => void;
-export const __wbg_get_versions_git_description: (a: number) => any;
-export const __wbg_get_versions_vodozemac: (a: number) => any;
-export const __wbg_get_utdtodeviceevent_rawEvent: (a: number) => any;
-export const __wbg_get_plaintexttodeviceevent_rawEvent: (a: number) => any;
-export const __wbg_get_versions_git_sha: (a: number) => any;
-export const __wbg_get_todevicerequest_id: (a: number) => any;
-export const __wbg_get_versions_matrix_sdk_crypto: (a: number) => any;
-export const __wbg_get_todevicerequest_body: (a: number) => any;
-export const __wbg_get_keysclaimrequest_id: (a: number) => any;
-export const __wbg_get_todevicerequest_event_type: (a: number) => any;
-export const __wbg_keysqueryrequest_free: (a: number, b: number) => void;
-export const __wbg_get_keysqueryrequest_id: (a: number) => any;
-export const __wbg_get_keysqueryrequest_body: (a: number) => any;
-export const __wbg_get_todevicerequest_txn_id: (a: number) => any;
-export const __wbg_get_keysbackuprequest_id: (a: number) => any;
-export const __wbg_get_keysclaimrequest_body: (a: number) => any;
-export const __wbg_keysuploadrequest_free: (a: number, b: number) => void;
-export const __wbg_get_keysuploadrequest_id: (a: number) => any;
-export const __wbg_get_keysuploadrequest_body: (a: number) => any;
-export const __wbg_get_roommessagerequest_txn_id: (a: number) => any;
-export const __wbg_get_roommessagerequest_room_id: (a: number) => any;
-export const __wbg_get_roommessagerequest_id: (a: number) => any;
-export const __wbg_get_roommessagerequest_event_type: (a: number) => any;
-export const __wbg_get_signatureuploadrequest_body: (a: number) => any;
-export const __wbg_uploadsigningkeysrequest_free: (a: number, b: number) => void;
-export const __wbg_get_megolmdecryptionerror_description: (a: number) => any;
-export const __wbg_crosssigningstatus_free: (a: number, b: number) => void;
-export const __wbg_plaintexttodeviceevent_free: (a: number, b: number) => void;
-export const userid_toString: (a: number) => [number, number];
-export const __wbg_userid_free: (a: number, b: number) => void;
-export const roomid_toString: (a: number) => [number, number];
-export const eventid_toString: (a: number) => [number, number];
-export const __wbg_roomid_free: (a: number, b: number) => void;
-export const __wbg_outboundcreationresult_free: (a: number, b: number) => void;
-export const wasm_bindgen_ff9af61e2d43a78a___convert__closures_____invoke___wasm_bindgen_ff9af61e2d43a78a___JsValue__core_ed718c3d60ebd546___result__Result_____wasm_bindgen_ff9af61e2d43a78a___JsError___true_: (a: number, b: number, c: any) => [number, number];
-export const wasm_bindgen_ff9af61e2d43a78a___convert__closures_____invoke___wasm_bindgen_ff9af61e2d43a78a___JsValue__core_ed718c3d60ebd546___result__Result_____wasm_bindgen_ff9af61e2d43a78a___JsError___true__2: (a: number, b: number, c: any) => [number, number];
-export const wasm_bindgen_ff9af61e2d43a78a___convert__closures_____invoke___js_sys_8badcad5ae9f3759___Function_fn_wasm_bindgen_ff9af61e2d43a78a___JsValue_____wasm_bindgen_ff9af61e2d43a78a___sys__Undefined___js_sys_8badcad5ae9f3759___Function_fn_wasm_bindgen_ff9af61e2d43a78a___JsValue_____wasm_bindgen_ff9af61e2d43a78a___sys__Undefined_______true_: (a: number, b: number, c: any, d: any) => void;
-export const wasm_bindgen_ff9af61e2d43a78a___convert__closures_____invoke___web_sys_4ec35d1b8222c725___features__gen_Event__Event______true_: (a: number, b: number, c: any) => void;
-export const wasm_bindgen_ff9af61e2d43a78a___convert__closures_____invoke_______true_: (a: number, b: number) => void;
+export const wasm_bindgen_49b719dbd852acb8___convert__closures_____invoke___js_sys_2784ec704a33ecc8___Function_fn_wasm_bindgen_49b719dbd852acb8___JsValue_____wasm_bindgen_49b719dbd852acb8___sys__Undefined___js_sys_2784ec704a33ecc8___Function_fn_wasm_bindgen_49b719dbd852acb8___JsValue_____wasm_bindgen_49b719dbd852acb8___sys__Undefined_______true_: (a: number, b: number, c: any, d: any) => void;
+export const wasm_bindgen_49b719dbd852acb8___convert__closures_____invoke___wasm_bindgen_49b719dbd852acb8___JsValue__core_ed718c3d60ebd546___result__Result_____wasm_bindgen_49b719dbd852acb8___JsError___true_: (a: number, b: number, c: any) => [number, number];
+export const wasm_bindgen_49b719dbd852acb8___convert__closures_____invoke___wasm_bindgen_49b719dbd852acb8___JsValue__core_ed718c3d60ebd546___result__Result_____wasm_bindgen_49b719dbd852acb8___JsError___true__590: (a: number, b: number, c: any) => [number, number];
+export const wasm_bindgen_49b719dbd852acb8___convert__closures_____invoke___web_sys_fe02f73cbd69cc6___features__gen_Event__Event______true_: (a: number, b: number, c: any) => void;
+export const wasm_bindgen_49b719dbd852acb8___convert__closures_____invoke_______true_: (a: number, b: number) => void;
 export const __wbindgen_malloc: (a: number, b: number) => number;
 export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
 export const __wbindgen_exn_store: (a: number) => void;

package/node_modules/@openclaw/fs-safe/CHANGELOG.md

@@ -2,6 +2,97 @@
 
 ## Unreleased
 
+## 0.25.0 - 2026-10-08
+
+### Highlights
+
+- **Faster synchronous plugin captures:** 16% faster than pre-change main on a measured 6,000-file tree; the new `createRootFileCopyBatchSync` API on `advanced` also reuses directory admissions across copies. ([#878](https://github.com/openclaw/fs-safe/pull/878), [#849](https://github.com/openclaw/fs-safe/pull/849))
+- **Guest workspace publication:** works on gVisor and other Linux filesystems that reject `RENAME_NOREPLACE`. ([#876](https://github.com/openclaw/fs-safe/pull/876))
+- **Root-backed sidecar locks:** native asynchronous release and exit cleanup no longer strand locks after their Root moves. ([#879](https://github.com/openclaw/fs-safe/pull/879))
+- **Guest cross-device moves:** preserve the admitted file permissions. ([#869](https://github.com/openclaw/fs-safe/pull/869))
+
+### Features
+
+- **Guarded copy batches:** `createRootFileCopyBatchSync` on `advanced` reuses directory admissions across synchronous copies on canonical POSIX paths while rechecking ancestor and file identities for every copy; single-file copies also reuse admission within the operation. ([#849](https://github.com/openclaw/fs-safe/pull/849))
+
+### Fixes
+
+- **Root-backed file locks:** native asynchronous release and exit cleanup follow the created lock's retained identity after its Root moves, preserving replacement files and reporting ownership mismatches. ([#879](https://github.com/openclaw/fs-safe/pull/879)) Thanks @axiom-ncis.
+- **Temp directory diagnostics:** name rejected roots and ancestors, explain ownership, mode, or symlink failures, and provide safe recovery guidance, including for root-run appliances. Thanks @joequant. ([#877](https://github.com/openclaw/fs-safe/pull/877))
+- **Guest directory publication:** publish staged workspaces when Linux filesystems reject `RENAME_NOREPLACE`, with checked file link/unlink fallback and directory rename that can only replace a concurrently created empty directory. ([#876](https://github.com/openclaw/fs-safe/pull/876)) Thanks @valkyriweb.
+- **Guest cross-device moves:** preserve the admitted source file's permissions instead of leaving the destination with a broader default mode. ([#869](https://github.com/openclaw/fs-safe/pull/869))
+- **Move receipts:** publication receipts capture the source identity after synchronous authorization callbacks return, so a source replaced during authorization is reported accurately. ([#868](https://github.com/openclaw/fs-safe/pull/868))
+- **Atomic copy fallback:** report a failed restoration as a failure even when the underlying error carries a restored receipt. ([#851](https://github.com/openclaw/fs-safe/pull/851))
+- **Archive read limits:** keep the validated entry-read byte limit fixed when callers mutate the options during a read. ([#852](https://github.com/openclaw/fs-safe/pull/852))
+- **Watch on macOS:** reconcile notifications for changes to the watched Root itself immediately instead of waiting for the periodic scan. ([#858](https://github.com/openclaw/fs-safe/pull/858))
+- **`pathScope` tilde names:** keep literal `~` directory names inside scoped file and existing-path lookups instead of expanding them. ([#856](https://github.com/openclaw/fs-safe/pull/856))
+
+### Performance
+
+- **Guarded file copies:** reuse checked canonical POSIX roots during initial path admission, reducing repeated path-resolution work in synchronous plugin source captures without changing per-file identity or race checks.
+- **Root walks:** reuse normalized directory prefixes, cutting a 50k-file walk by 5.6% and its sampled allocation by about 9% while keeping every filesystem and identity check. ([#870](https://github.com/openclaw/fs-safe/pull/870))
+- **Atomic writes:** non-durable async POSIX writes skip a redundant mode change when the staged file already has the requested permissions. ([#871](https://github.com/openclaw/fs-safe/pull/871))
+- **Guarded mutations:** fewer promise allocations around synchronous guard checks, with directory identity checks unchanged. ([#857](https://github.com/openclaw/fs-safe/pull/857))
+- **Archive publication:** fewer promise allocations in archive guard checks, without removing identity or containment checks. ([#864](https://github.com/openclaw/fs-safe/pull/864))
+- **Watch:** Linux and Windows watch passes skip macOS stream-path preparation. ([#860](https://github.com/openclaw/fs-safe/pull/860))
+- **Permission diagnostics:** bound escaping work for large error messages without changing the displayed excerpts. ([#859](https://github.com/openclaw/fs-safe/pull/859))
+
+## 0.24.2 - 2026-10-07
+
+### Fixes
+
+- **Linux exclusive publication:** `publishFileExclusive` with `rename-noreplace` uses the identity-checked link/unlink move fallback in native `auto` when `RENAME_NOREPLACE` is unsupported, consumes the source on success, and reports `fallback: "link-unlink"` plus precise partial-failure receipts; native `require` stays fail-closed. Link/unlink is not crash-atomic. ([#843](https://github.com/openclaw/fs-safe/pull/843), [openclaw#166246](https://github.com/openclaw/openclaw/issues/166246)) Thanks @MertBasar0.
+- **Native clone descriptors:** native file copies return read-write descriptors, so Linux clones can be read immediately and macOS clones can be written while preserving read-only source modes. ([#844](https://github.com/openclaw/fs-safe/pull/844))
+
+## 0.24.1 - 2026-10-06
+
+### Features
+
+- **Pinned source copies:** `copyRootFileSync` accepts `expectedSourceIdentity` to reject a replaced source before destination creation and returns the verified `sourceIdentity` for every copy method. This refines the `copyRootFileSync` API introduced in 0.24.0. ([#841](https://github.com/openclaw/fs-safe/pull/841))
+
+## 0.24.0 - 2026-10-06
+
+### Highlights
+
+- **No-replace moves on more Linux filesystems:** when filesystems reject `renameat2` with `RENAME_NOREPLACE`, including reported QNAP ZFS shares and some overlay mounts, `auto` falls back safely: directories use plain rename that can at most replace an empty directory, and files use identity-checked link/unlink that cannot overwrite a target. Native `require` fails closed. ([#838](https://github.com/openclaw/fs-safe/pull/838), fixes [openclaw#165617](https://github.com/openclaw/openclaw/issues/165617)) Thanks @StarGazer1995, original reporter @bbs2i58, and @MertBasar0.
+- **Synchronous guarded copies:** new `copyRootFileSync` on `advanced` supports APFS cloning, reflinks, `copy_file_range`, and guarded byte fallback, returning an owned destination descriptor for synchronous capture hashes. ([#839](https://github.com/openclaw/fs-safe/pull/839))
+- **Public capability classification:** new `isNoReplaceUnsupported(error)` identifies unavailable no-replace rename support without matching internal native error codes. ([#838](https://github.com/openclaw/fs-safe/pull/838))
+
+### Features
+
+- **Synchronous root-to-root copy:** `copyRootFileSync` exclusively creates an absent destination under its admitted root, bounds the copy with `maxBytes`, verifies source and destination identities, and returns a disposable descriptor with copy-method and byte-count receipts. ([#839](https://github.com/openclaw/fs-safe/pull/839))
+- **No-replace error classifier:** export `isNoReplaceUnsupported(error)` from the root package and `errors` subpath for stable `helper-unavailable` capability diagnostics. ([#838](https://github.com/openclaw/fs-safe/pull/838))
+
+### Fixes
+
+- **Linux no-replace moves:** `Root.move()` uses retained-parent file link/unlink or directory rename when `RENAME_NOREPLACE` is unsupported in `auto`, rejects file collisions, and preserves publication/source-removal details after partial failures. ([#838](https://github.com/openclaw/fs-safe/pull/838)) Thanks @StarGazer1995, @bbs2i58, and @MertBasar0.
+
+### Performance
+
+- **Synchronous copy acceleration:** reuse the native bounded copy engine for APFS clones, Linux reflinks, and `copy_file_range` before byte copying when `copyRootFileSync` is called with `clone: "auto"`. ([#839](https://github.com/openclaw/fs-safe/pull/839))
+
+### Compatibility
+
+- **Move fallback limits:** native `require` keeps refusing unsupported no-replace moves. In `auto`, the directory fallback can replace a concurrently created empty directory; nonempty directories and non-directory competitors reject. File fallback requires hard-link support and fails closed if links are denied or unsupported. ([#838](https://github.com/openclaw/fs-safe/pull/838))
+- **Synchronous copy contract:** `copyRootFileSync` defaults to `clone: "never"`, requires existing parents and an absent destination, and performs direct exclusive creation. Use a private capture directory; it does not promise atomic publication, crash durability, or a coherent snapshot of concurrent in-place edits. ([#839](https://github.com/openclaw/fs-safe/pull/839))
+
+## 0.23.1 - 2026-10-04
+
+### Highlights
+
+- **gVisor and 9p file creation:** `create()` and other no-replace publication fall back in `auto` mode on filesystems that reject `renameat2` with `RENAME_NOREPLACE`; `require` mode fails closed. ([#834](https://github.com/openclaw/fs-safe/pull/834), fixes [#828](https://github.com/openclaw/fs-safe/issues/828)) Thanks @vishnukool.
+- **Container copy compatibility:** seccomp or LSM policies denying `FICLONE` no longer break `clone: "auto"` copies, for both single files and `copyTree`. ([#829](https://github.com/openclaw/fs-safe/pull/829), [#835](https://github.com/openclaw/fs-safe/pull/835)) Thanks @Mohl, with co-author credit to @foxsky.
+- **macOS watching:** a FIFO at a watched name no longer freezes watching across the process. ([#830](https://github.com/openclaw/fs-safe/pull/830)) Thanks @SebTardif.
+
+### Fixes
+
+- **gVisor file creation:** fall back safely when the filesystem rejects native no-replace publication, clean unpublished stages, and report the missing capability in native-required mode. ([#834](https://github.com/openclaw/fs-safe/pull/834)) Thanks @vishnukool.
+- **ZIP collision checks:** reject directory and file names that differ only by case, Unicode normalization, or a trailing separator before extraction or bounded reads. ([#832](https://github.com/openclaw/fs-safe/pull/832)) Thanks @SebTardif.
+- **macOS entry watch:** prevent a FIFO at a watched name from blocking every watcher in the process. ([#830](https://github.com/openclaw/fs-safe/pull/830)) Thanks @SebTardif.
+- **Disk-full diagnostics:** preserve disk-full (`ENOSPC`) diagnostics and cleanup receipts through combined write and disposal failures instead of reporting a misleading file-type error. ([#833](https://github.com/openclaw/fs-safe/pull/833)) Thanks @steipete.
+- **Linux clone fallback:** copies with `clone: "auto"` fall back to guarded byte copying when container seccomp or LSM policy denies `FICLONE`; `clone: "always"` reports `unsupported-platform` and removes its stage. ([#829](https://github.com/openclaw/fs-safe/pull/829)) Thanks @Mohl, with co-author credit to @foxsky.
+- **Linux tree clone fallback:** `copyTree` with `clone: "auto"` copies bytes when XFS/ZFS file reflinks are unavailable or denied by container policy; `"always"` reports `unsupported-platform` after partial-tree cleanup. ([#835](https://github.com/openclaw/fs-safe/pull/835)) Thanks @steipete.
+
 ## 0.23.0 - 2026-10-02
 
 ### Highlights

package/node_modules/@openclaw/fs-safe/README.md

@@ -22,7 +22,7 @@ await fs.write("../escape.txt", "x");            // throws FsSafeError("outside-
 
 That's the whole pitch. `root()` is the product; the rest of the package — JSON stores, atomic writes, secret files, archive extraction, temp workspaces — is supporting cast for the same boundary.
 
-Full docs and reference at **[fs-safe.io](https://fs-safe.io)**.
+Full docs and reference at **[fs-safe.io](https://fs-safe.io)**. For synchronous plugin captures, [guarded file copies and batches](docs/copy.md#synchronous-guarded-file-copies) return owned destination descriptors while preserving per-file checks.
 
 ## Contents
 

package/node_modules/@openclaw/fs-safe/dist/advanced.d.ts

@@ -1,3 +1,4 @@
+export { copyRootFileSync, createRootFileCopyBatchSync, type RootFileCopyBatchSync, type CopyRootFileSyncOptions, type CopiedRootFileSync } from "./copy-root-file-sync.js";
 export { createAsyncLock } from "./async-lock.js";
 export { createDirectory, createDirectorySync, createFileSync, type CreateDirectoryOptions, type CreateFileOptions, type OwnedFileDescriptorSync, } from "./create.js";
 export { copyFileHandle, copyFileDescriptorSync, type CopyFileHandleOptions } from "./file-handle-transfer.js";

package/node_modules/@openclaw/fs-safe/dist/advanced.js

@@ -1,3 +1,4 @@
+export { copyRootFileSync, createRootFileCopyBatchSync } from "./copy-root-file-sync.js";
 // Advanced composition surface. These exports are less stable than the focused
 // public subpaths; prefer root/json/store/temp/archive unless you are building a
 // higher-level primitive.

package/node_modules/@openclaw/fs-safe/dist/archive-durability.js

@@ -65,7 +65,7 @@ export async function finalizeArchivePublication(params) {
     const check = () => params.deadline?.check();
     const assertGuards = async (guards) => {
         for (const guard of [params.destinationGuard, ...guards, params.sourceGuard]) {
-            await assertDirectoryIdentityGuard(guard);
+            assertDirectoryIdentityGuard(guard);
             check();
         }
     };

package/node_modules/@openclaw/fs-safe/dist/archive-entry.js

@@ -63,13 +63,17 @@ export function stripArchivePath(entryPath, stripComponents) {
 export function createArchiveOutputPathTracker() {
     const seen = new Set();
     return (entryPath, originalPath) => {
-        const normalized = path.posix.normalize(normalizeArchiveEntryPath(entryPath));
+        // Extraction passes stripArchivePath output. Native manifests and physical
+        // admission pass raw names, and path.posix.normalize keeps a directory's
+        // trailing slash, so "A/" and "a" would not share a key.
+        const canonical = stripArchivePath(entryPath, 0)
+            ?? path.posix.normalize(normalizeArchiveEntryPath(entryPath));
         // Archive policy must not depend on the destination volume's case or
         // Unicode-normalization behavior. Otherwise the JavaScript and native
         // writers can disagree about which of two colliding entries wins.
-        const collisionKey = lowerCaseNfc(normalized);
+        const collisionKey = lowerCaseNfc(canonical);
         if (seen.has(collisionKey)) {
-            throw new ArchiveSecurityError("entry-path", `archive entries collide at output path ${formatErrorDetail(normalized)}: ${formatErrorDetail(originalPath)}`);
+            throw new ArchiveSecurityError("entry-path", `archive entries collide at output path ${formatErrorDetail(canonical)}: ${formatErrorDetail(originalPath)}`);
         }
         seen.add(collisionKey);
     };

package/node_modules/@openclaw/fs-safe/dist/archive-merge.js

@@ -98,15 +98,15 @@ async function mergeTree(params, publication, durable = true, entryUmask = 0) {
             assertSourceDirectory(ancestor);
     };
     const assertGuards = async () => {
-        await assertDirectoryIdentityGuard(destinationGuard);
+        assertDirectoryIdentityGuard(destinationGuard);
         check();
         for (const ancestor of ancestors) {
-            await assertDirectoryIdentityGuard(ancestor.guard);
+            assertDirectoryIdentityGuard(ancestor.guard);
             check();
             await ancestor.owner.verify(check);
             check();
         }
-        await assertDirectoryIdentityGuard(sourceGuard);
+        assertDirectoryIdentityGuard(sourceGuard);
         check();
     };
     const walk = async (sourceDir) => {
@@ -184,7 +184,7 @@ async function mergeTree(params, publication, durable = true, entryUmask = 0) {
                                 await owner.apply(mode, { check, beforeChmod: async () => {
                                         await assertGuards();
                                         assertSourceAncestors();
-                                        await assertDirectoryIdentityGuard(guard);
+                                        assertDirectoryIdentityGuard(guard);
                                         check();
                                         await assertResolvedInsideDestination({
                                             destinationRealDir, targetPath: destinationPath, originalPath,

package/node_modules/@openclaw/fs-safe/dist/archive-read.js

@@ -213,7 +213,8 @@ async function readNativeBufferEntry(native, buffer, kind, requested, displayPat
     }
 }
 export async function readArchiveEntry(archivePath, entryPath, options) {
-    if (!Number.isSafeInteger(options.maxBytes) || options.maxBytes < 0) {
+    const maxBytes = options.maxBytes;
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0) {
         throw new RangeError("maxBytes must be a non-negative safe integer");
     }
     const kind = options.kind ?? resolveArchiveKind(archivePath);
@@ -228,7 +229,7 @@ export async function readArchiveEntry(archivePath, entryPath, options) {
         admitZipBuffer(buffer, resolveExtractLimits(), entry => { zipEntries.push(entry); });
     const native = getNativeBinding();
     if (native)
-        return await readNativeBufferEntry(native, buffer, kind, requestedEntry, entryPath, options.maxBytes, zipEntries);
-    return kind === "zip" ? await readZipEntry(buffer, requestedEntry, options.maxBytes, zipEntries)
-        : await readTarEntry(buffer, requestedEntry, options.maxBytes, kind);
+        return await readNativeBufferEntry(native, buffer, kind, requestedEntry, entryPath, maxBytes, zipEntries);
+    return kind === "zip" ? await readZipEntry(buffer, requestedEntry, maxBytes, zipEntries)
+        : await readTarEntry(buffer, requestedEntry, maxBytes, kind);
 }

package/node_modules/@openclaw/fs-safe/dist/archive-staging.d.ts

@@ -5,7 +5,7 @@ import { ArchiveSecurityError } from "./archive-errors.js";
 export type ArchiveDirectoryGuard = AsyncDirectoryGuard<BigIntStats>;
 export declare function createArchiveSymlinkTraversalError(originalPath: string): ArchiveSecurityError;
 export declare function createDirectoryIdentityGuard(dir: string): Promise<ArchiveDirectoryGuard>;
-export declare function assertDirectoryIdentityGuard(guard: ArchiveDirectoryGuard): Promise<void>;
+export declare function assertDirectoryIdentityGuard(guard: ArchiveDirectoryGuard): void;
 export declare function prepareArchiveDestinationGuard(destDir: string): Promise<ArchiveDirectoryGuard>;
 export declare function prepareArchiveDestinationDir(destDir: string): Promise<string>;
 export declare function assertResolvedInsideDestination(params: {