@openclaw/openshell-sandbox 2026.9.3 → 2026.9.5

package/node_modules/@openclaw/fs-safe/dist/file-store.js

@@ -5,35 +5,20 @@ import { normalizeMaxBytes } from "./byte-budget.js";
 import { readFileDescriptorBoundedSync } from "./bounded-read.js";
 import { FsSafeError } from "./errors.js";
 import { assertFileStoreMaxBytes } from "./file-store-limit.js";
+import { assertRelativePath, resolveStorePath } from "./file-store-path.js";
 import { pruneExpiredStoreEntries } from "./file-store-prune.js";
 import { ensureParentInRoot, openPrivateStoreLockRoot, openWritableStoreRoot, writeStreamToTempSource, } from "./file-store-boundary.js";
 import { writeFileSyncAtomic } from "./file-store-sync-write.js";
 import { createJsonStore } from "./json-document-store.js";
 import { stringifyJsonDocument } from "./json-stringify.js";
-import { isNotFoundPathError, resolveSafeRelativePath, splitSafeRelativePath } from "./path.js";
+import { isNotFoundPathError } from "./path.js";
 import { throwFsSafeReadError } from "./root-errors.js";
 import { root } from "./root.js";
 import { DEFAULT_ROOT_MAX_BYTES } from "./root-impl.js";
-import { readRegularFile } from "./regular-file.js";
 import { matchRootFileOpenFailure, openRootFileSync } from "./root-file.js";
 import { writeSecretFileAtomic } from "./secret-file.js";
-function assertRelativePath(relativePath) {
-    const raw = relativePath.trim();
-    if (!raw || raw !== relativePath) {
-        throw new FsSafeError("invalid-path", "store key must be non-empty and unpadded");
-    }
-    const segments = splitSafeRelativePath(raw);
-    if (segments.length === 0 ||
-        segments.join("/") !== raw ||
-        raw.normalize("NFC") !== raw ||
-        segments.some((segment) => /[ .]$/u.test(segment))) {
-        throw new FsSafeError("invalid-path", "store key must use one canonical relative spelling");
-    }
-    return raw;
-}
-function resolveStorePath(rootDir, relativePath) {
-    return resolveSafeRelativePath(rootDir, assertRelativePath(relativePath));
-}
+import { assertNoWindowsPathAlias, resolvePathPreservingWindowsRoot, } from "./windows-path-alias.js";
+import { readFileStoreCopySource } from "./file-store-copy-source.js";
 function isNotFound(error) {
     return error instanceof FsSafeError ? error.code === "not-found" : isNotFoundPathError(error);
 }
@@ -65,34 +50,10 @@ function handleSyncStoreReadOpenFailure(opened) {
         },
     });
 }
-async function readFileStoreCopySource(params) {
-    const sourceStat = syncFs.lstatSync(params.sourcePath);
-    if (sourceStat.isSymbolicLink() || !sourceStat.isFile()) {
-        throw new FsSafeError("not-file", "source path is not a file");
-    }
-    assertFileStoreMaxBytes(sourceStat.size, params.maxBytes);
-    try {
-        return (await readRegularFile({ filePath: params.sourcePath, maxBytes: params.maxBytes }))
-            .buffer;
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        if (message.includes("regular file") || message.includes("not a regular file")) {
-            throw new FsSafeError("not-file", "source path is not a file", {
-                cause: error instanceof Error ? error : undefined,
-            });
-        }
-        if (params.maxBytes !== undefined && message.includes(`exceeds ${params.maxBytes} bytes`)) {
-            throw new FsSafeError("too-large", `file exceeds maximum size of ${params.maxBytes} bytes`, {
-                cause: error instanceof Error ? error : undefined,
-            });
-        }
-        throw error;
-    }
-}
 async function copyIntoRoot(params) {
     const relativePath = assertRelativePath(params.relativePath);
     const destination = resolveStorePath(params.rootDir, relativePath);
+    assertNoWindowsPathAlias(params.sourcePath, "filesystem", "source path uses a Windows filesystem namespace alias");
     const sourceStat = syncFs.lstatSync(params.sourcePath);
     if (sourceStat.isSymbolicLink() || !sourceStat.isFile()) {
         throw new FsSafeError("not-file", "source path is not a file");
@@ -106,6 +67,7 @@ async function copyIntoRoot(params) {
     });
     await ensureParentInRoot(scopedRoot, relativePath, dirMode);
     await scopedRoot.copyIn(relativePath, params.sourcePath, {
+        durable: params.durable,
         maxBytes: params.maxBytes,
         mkdir: false,
         mode: params.mode ?? 0o600,
@@ -113,10 +75,14 @@ async function copyIntoRoot(params) {
     return destination;
 }
 export function fileStore(options) {
-    const rootDir = path.resolve(options.rootDir);
+    const rootDirInput = options.rootDir;
+    assertNoWindowsPathAlias(rootDirInput, "filesystem", "store root uses a Windows filesystem namespace alias");
+    const rootDir = resolvePathPreservingWindowsRoot(rootDirInput);
+    assertNoWindowsPathAlias(rootDir, "filesystem", "store root uses a Windows filesystem namespace alias");
     const privateMode = options.private ?? false;
     const dirMode = options.dirMode ?? 0o700;
     const mode = options.mode ?? 0o600;
+    const durable = options.durable ?? true;
     const maxBytes = normalizeMaxBytes(options.maxBytes);
     async function openRoot() {
         return await root(rootDir, { hardlinks: "reject", maxBytes });
@@ -132,6 +98,7 @@ export function fileStore(options) {
                 rootDir,
                 filePath: destination,
                 content,
+                durable: writeOptions?.durable ?? durable,
                 dirMode: writeOptions?.dirMode ?? dirMode,
                 mode: writeOptions?.mode ?? mode,
             });
@@ -147,6 +114,7 @@ export function fileStore(options) {
         await scopedRoot.write(safeRelativePath, content, {
             mkdir: false,
             mode: writeOptions?.mode ?? mode,
+            durable: writeOptions?.durable ?? durable,
         });
         return destination;
     }
@@ -173,6 +141,7 @@ export function fileStore(options) {
                     rootDir,
                     filePath: destination,
                     content: Buffer.concat(chunks),
+                    durable: writeOptions?.durable ?? durable,
                     dirMode: writeOptions?.dirMode ?? dirMode,
                     mode: writeOptions?.mode ?? mode,
                 });
@@ -188,6 +157,7 @@ export function fileStore(options) {
                     rootDir,
                     relativePath: safeRelativePath,
                     sourcePath: staged.path,
+                    durable: writeOptions?.durable ?? durable,
                     maxBytes: limit,
                     mode: writeOptions?.mode ?? mode,
                     tempPrefix: writeOptions?.tempPrefix,
@@ -212,6 +182,7 @@ export function fileStore(options) {
                 rootDir,
                 relativePath,
                 sourcePath,
+                durable: writeOptions?.durable ?? durable,
                 dirMode: writeOptions?.dirMode ?? dirMode,
                 maxBytes: configuredLimit,
                 mode: writeOptions?.mode ?? mode,
@@ -283,7 +254,7 @@ export function fileStore(options) {
                 readRequired: async () => await (await openRoot()).readJson(assertRelativePath(relativePath)),
                 write: async (value, options) => {
                     const json = stringifyJsonDocument(value, null, 2);
-                    await write(relativePath, options?.trailingNewline === false ? json : `${json}\n`);
+                    await write(relativePath, options?.trailingNewline === false ? json : `${json}\n`, { durable: options?.durable });
                 },
             }, jsonOptions);
         },
@@ -293,10 +264,14 @@ export function fileStore(options) {
     };
 }
 export function fileStoreSync(options) {
-    const rootDir = path.resolve(options.rootDir);
+    const rootDirInput = options.rootDir;
+    assertNoWindowsPathAlias(rootDirInput, "filesystem", "store root uses a Windows filesystem namespace alias");
+    const rootDir = resolvePathPreservingWindowsRoot(rootDirInput);
+    assertNoWindowsPathAlias(rootDir, "filesystem", "store root uses a Windows filesystem namespace alias");
     const privateMode = options.private ?? false;
     const dirMode = options.dirMode ?? 0o700;
     const mode = options.mode ?? 0o600;
+    const durable = options.durable ?? true;
     const maxBytes = normalizeMaxBytes(options.maxBytes);
     function write(relativePath, data, writeOptions) {
         const destination = resolveStorePath(rootDir, relativePath);
@@ -308,6 +283,7 @@ export function fileStoreSync(options) {
             filePath: destination,
             content,
             privateMode,
+            durable: writeOptions?.durable ?? durable,
             dirMode: writeOptions?.dirMode ?? dirMode,
             mode: writeOptions?.mode ?? mode,
         });

package/node_modules/@openclaw/fs-safe/dist/filename.d.ts

@@ -1,3 +1,4 @@
+export declare function suffixWindowsReservedDeviceName(fileName: string): string;
 /** Keeps short names exact and trims only the filename tail of a composite temp name. */
 export declare function fitFileNameToPortableComponent(params: {
     prefix: string;

package/node_modules/@openclaw/fs-safe/dist/filename.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filename.d.ts","sourceRoot":"","sources":["../src/filename.ts"],"names":[],"mappings":"AAqCA,yFAAyF;AACzF,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CA8BT;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAgCxF"}
+{"version":3,"file":"filename.d.ts","sourceRoot":"","sources":["../src/filename.ts"],"names":[],"mappings":"AA0BA,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAexE;AA+CD,yFAAyF;AACzF,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CA8BT;AAiCD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAMxF"}

package/node_modules/@openclaw/fs-safe/dist/filename.js

@@ -1,8 +1,16 @@
 import path from "node:path";
 import { WINDOWS_RESERVED_DEVICE_NAMES } from "./device-path.js";
-const WINDOWS_INVALID_FILE_NAME_CHARACTERS = new Set('<>:"/\\|?*');
-function trimWindowsIgnoredSuffix(value) {
-    let end = value.length;
+import { maxNormalizedUtf8Bytes } from "./unicode-path.js";
+const INVALID_FILE_NAME_CHARACTERS = /[\u0000-\u001f\u007f-\u009f<>:"/\\|?*]/g;
+const HAS_INVALID_FILE_NAME_CHARACTER = /[\u0000-\u001f\u007f-\u009f<>:"/\\|?*]/;
+const HAS_RETAINED_FILE_NAME_CHARACTER = /[^\u0000-\u001f\u007f-\u009f<>:"/\\|?*\s]/;
+function canStartWindowsDeviceName(character) {
+    const folded = character | 0x20;
+    return folded === 0x61 || folded === 0x63 || folded === 0x6c ||
+        folded === 0x6e || folded === 0x70;
+}
+function windowsDeviceStemEnd(value, stemEnd) {
+    let end = stemEnd;
     while (end > 0) {
         const character = value.charCodeAt(end - 1);
         if (character !== 0x20 && character !== 0x2e) {
@@ -10,21 +18,60 @@ function trimWindowsIgnoredSuffix(value) {
         }
         end -= 1;
     }
-    return end === value.length ? value : value.slice(0, end);
+    return end;
 }
-function suffixWindowsReservedDeviceName(fileName) {
+export function suffixWindowsReservedDeviceName(fileName) {
+    if (!canStartWindowsDeviceName(fileName.charCodeAt(0))) {
+        return fileName;
+    }
     const extensionIndex = fileName.indexOf(".");
     const baseNameEnd = extensionIndex < 0 ? fileName.length : extensionIndex;
-    const baseName = fileName.slice(0, baseNameEnd);
-    const deviceBaseName = trimWindowsIgnoredSuffix(baseName);
-    if (!WINDOWS_RESERVED_DEVICE_NAMES.has(deviceBaseName.toUpperCase())) {
+    const deviceBaseNameEnd = windowsDeviceStemEnd(fileName, baseNameEnd);
+    if (deviceBaseNameEnd === 0 ||
+        deviceBaseNameEnd > 7 ||
+        !WINDOWS_RESERVED_DEVICE_NAMES.has(fileName.slice(0, deviceBaseNameEnd).toUpperCase())) {
         return fileName;
     }
-    return `${baseName}_${fileName.slice(baseNameEnd)}`;
+    return `${fileName.slice(0, baseNameEnd)}_${fileName.slice(baseNameEnd)}`;
 }
 const PORTABLE_FILE_NAME_BYTES = 255;
+const SANITIZED_FILE_NAME_CODE_UNITS = 200;
+const SAFE_FALLBACK_FILE_NAME = "file";
+/**
+ * Uses native string and regexp operations to recognize the full sanitizer's
+ * bounded fixed points. The separate non-global regexp keeps this predicate
+ * stateless, and the authoritative device-name transform remains the final
+ * admission check.
+ */
+function isBoundedSanitizedFileName(fileName, trimmedFileName) {
+    return typeof fileName === "string" &&
+        fileName.length > 0 &&
+        fileName.length <= SANITIZED_FILE_NAME_CODE_UNITS &&
+        fileName !== "." &&
+        fileName !== ".." &&
+        trimmedFileName === fileName &&
+        !HAS_INVALID_FILE_NAME_CHARACTER.test(fileName) &&
+        suffixWindowsReservedDeviceName(fileName) === fileName;
+}
+function hasWindowsDrivePrefix(value) {
+    if (value.length < 2 || value.charCodeAt(1) !== 0x3a)
+        return false;
+    const firstCodeUnit = value.charCodeAt(0);
+    return (firstCodeUnit >= 0x41 && firstCodeUnit <= 0x5a) ||
+        (firstCodeUnit >= 0x61 && firstCodeUnit <= 0x7a);
+}
 function normalizedFileNameBytes(value) {
-    return Math.max(Buffer.byteLength(value.normalize("NFC"), "utf8"), Buffer.byteLength(value.normalize("NFD"), "utf8"));
+    return maxNormalizedUtf8Bytes(value, true);
+}
+function truncateCodeUnitsWithoutSplittingSurrogate(value, limit) {
+    if (value.length <= limit)
+        return value;
+    let truncated = value.slice(0, limit);
+    const trailingCodeUnit = truncated.charCodeAt(truncated.length - 1);
+    if (trailingCodeUnit >= 0xd800 && trailingCodeUnit <= 0xdbff) {
+        truncated = truncated.slice(0, -1);
+    }
+    return truncated;
 }
 /** Keeps short names exact and trims only the filename tail of a composite temp name. */
 export function fitFileNameToPortableComponent(params) {
@@ -58,34 +105,40 @@ export function fitFileNameToPortableComponent(params) {
     }
     return `${codePoints.slice(0, low).join("")}${tailSuffix}`;
 }
-export function sanitizeUntrustedFileName(fileName, fallbackName) {
-    const trimmed = typeof fileName === "string" ? fileName.trim() : "";
-    if (!trimmed) {
-        return fallbackName;
-    }
-    let base = path.posix.basename(trimmed);
-    base = path.win32.basename(base);
-    let cleaned = "";
-    for (let i = 0; i < base.length; i++) {
-        const code = base.charCodeAt(i);
-        if (code < 0x20 ||
-            (code >= 0x7f && code <= 0x9f) ||
-            WINDOWS_INVALID_FILE_NAME_CHARACTERS.has(base[i])) {
-            continue;
-        }
-        cleaned += base[i];
+function sanitizeFileNameCandidate(fileName) {
+    if (typeof fileName !== "string")
+        return undefined;
+    const trimmed = fileName.trim();
+    if (!trimmed)
+        return undefined;
+    if (isBoundedSanitizedFileName(fileName, trimmed))
+        return fileName;
+    // Basename selection cannot manufacture a character, and the complete
+    // sanitizer removes this same invalid set before its final trim.
+    if (!HAS_RETAINED_FILE_NAME_CHARACTER.test(trimmed))
+        return undefined;
+    let base = trimmed;
+    if (base.includes("/"))
+        base = path.posix.basename(base);
+    if (base.includes("\\") || hasWindowsDrivePrefix(base)) {
+        base = path.win32.basename(base);
     }
-    base = cleaned.trim();
+    base = base.replace(INVALID_FILE_NAME_CHARACTERS, "").trim();
     if (!base || base === "." || base === "..") {
-        return fallbackName;
+        return undefined;
     }
-    base = suffixWindowsReservedDeviceName(base);
-    if (base.length > 200) {
-        base = base.slice(0, 200);
-        const trailingCodeUnit = base.charCodeAt(base.length - 1);
-        if (trailingCodeUnit >= 0xd800 && trailingCodeUnit <= 0xdbff) {
-            base = base.slice(0, -1);
-        }
+    base = truncateCodeUnitsWithoutSplittingSurrogate(base, SANITIZED_FILE_NAME_CODE_UNITS);
+    let safeBase = suffixWindowsReservedDeviceName(base);
+    if (safeBase.length > SANITIZED_FILE_NAME_CODE_UNITS) {
+        // The safety suffix is the final invariant. Shorten the unsuffixed tail so
+        // truncation cannot turn a padded reserved stem back into a device name.
+        base = truncateCodeUnitsWithoutSplittingSurrogate(base, SANITIZED_FILE_NAME_CODE_UNITS - 1);
+        safeBase = suffixWindowsReservedDeviceName(base);
     }
-    return base;
+    return safeBase;
+}
+export function sanitizeUntrustedFileName(fileName, fallbackName) {
+    return (sanitizeFileNameCandidate(fileName) ??
+        sanitizeFileNameCandidate(fallbackName) ??
+        SAFE_FALLBACK_FILE_NAME);
 }

package/node_modules/@openclaw/fs-safe/dist/fs.js

@@ -1,5 +1,5 @@
 import fs from "node:fs";
-import fsp from "node:fs/promises";
+import { pathForWindowsFilesystem } from "./windows-path-alias.js";
 /**
  * Returns true when `fs.stat()` can stat the path.
  *
@@ -8,7 +8,7 @@ import fsp from "node:fs/promises";
  */
 export async function pathExists(filePath) {
     try {
-        await fsp.stat(filePath);
+        fs.statSync(pathForWindowsFilesystem(filePath));
         return true;
     }
     catch {
@@ -21,7 +21,7 @@ export async function pathExists(filePath) {
  */
 export function pathExistsSync(filePath) {
     try {
-        fs.statSync(filePath);
+        fs.statSync(pathForWindowsFilesystem(filePath));
         return true;
     }
     catch {

package/node_modules/@openclaw/fs-safe/dist/guarded-mkdir.d.ts

@@ -1,3 +1,6 @@
+import { type RootBoundaryIdentity } from "./root-boundary.js";
+import { type MutationDirectoryObservation } from "./pinned-mutation-observation.js";
+import type { PinnedCreatedDirectoryReceipt, PinnedMutationAdmissionReceipt, PinnedMutationAuthorizationToken } from "./pinned-write.js";
 /**
  * Creates each missing path component from `rootReal` down to `targetPath`,
  * guarding every step. Returns the real (symlink-resolved) path of the final
@@ -8,7 +11,15 @@ export declare function mkdirPathComponentsWithGuards(params: {
     rootReal: string;
     targetPath: string;
     beforeComponent?: (componentPath: string) => Promise<void> | void;
+    beforeCreateComponent?: (componentPath: string, prospectiveTargetPath: string, retainedTargetPath: string | undefined, parent: MutationDirectoryObservation) => Promise<PinnedMutationAdmissionReceipt | undefined> | PinnedMutationAdmissionReceipt | undefined;
+    beforeUseComponent?: (componentPath: string, prospectiveTargetPath: string, retainedTargetPath: string | undefined) => Promise<void> | void;
+    afterCreateComponent?: (receipt: PinnedCreatedDirectoryReceipt) => PinnedMutationAuthorizationToken | undefined;
+    assertBeforeMutation?: () => void;
     mode?: number;
     rejectSymlinks?: boolean;
+    revalidateParentAfterBeforeComponent?: boolean;
+    synchronousAuthorizationIncludesFence?: boolean;
+    retainedTargetPath?: string;
+    rootIdentity?: RootBoundaryIdentity;
 }): Promise<string>;
 //# sourceMappingURL=guarded-mkdir.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/guarded-mkdir.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guarded-mkdir.d.ts","sourceRoot":"","sources":["../src/guarded-mkdir.ts"],"names":[],"mappings":"AA0BA;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAuDlB"}
+{"version":3,"file":"guarded-mkdir.d.ts","sourceRoot":"","sources":["../src/guarded-mkdir.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAuB,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAA4B,KAAK,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAC/G,OAAO,KAAK,EACV,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EACjC,MAAM,mBAAmB,CAAC;AAuG3B;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClE,qBAAqB,CAAC,EAAE,CACtB,aAAa,EAAE,MAAM,EACrB,qBAAqB,EAAE,MAAM,EAC7B,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,MAAM,EAAE,4BAA4B,KACjC,OAAO,CAAC,8BAA8B,GAAG,SAAS,CAAC,GAAG,8BAA8B,GAAG,SAAS,CAAC;IACtG,kBAAkB,CAAC,EAAE,CACnB,aAAa,EAAE,MAAM,EACrB,qBAAqB,EAAE,MAAM,EAC7B,kBAAkB,EAAE,MAAM,GAAG,SAAS,KACnC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,oBAAoB,CAAC,EAAE,CACrB,OAAO,EAAE,6BAA6B,KACnC,gCAAgC,GAAG,SAAS,CAAC;IAClD,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oCAAoC,CAAC,EAAE,OAAO,CAAC;IAC/C,qCAAqC,CAAC,EAAE,OAAO,CAAC;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC,GAAG,OAAO,CAAC,MAAM,CAAC,CAyMlB"}