@openclaw/openshell-sandbox 2026.9.4 → 2026.9.5

package/node_modules/@openclaw/fs-safe/dist/move-path.js

@@ -1,12 +1,17 @@
 import { randomUUID } from "node:crypto";
-import { constants as fsConstants } from "node:fs";
+import fsSync, { constants as fsConstants } from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
+import { createAsyncDirectoryGuard, inspectDirectoryIdentitySync } from "./directory-guard.js";
 import { FsSafeError } from "./errors.js";
 import { guardedRename } from "./guarded-mutation.js";
 import { assertSourceStillMatches, cleanupCopiedEntry, createCleanupCopiedEntryState, entryIdentity, sameIdentity, sourceChangedError, } from "./move-path-cleanup.js";
 import { resolveReadOpenFlags } from "./read-open-flags.js";
-import { registerTempPathForExit } from "./temp-cleanup.js";
+import { realpathSync } from "./realpath.js";
+import { cleanupPinnedFilePath } from "./replace-file-temp-owner.js";
+import { createMoveStageOwner } from "./move-path-stage.js";
+import { admitStandalonePublicationPath } from "./standalone-publication-path.js";
+import { assertNoWindowsPathAlias } from "./windows-path-alias.js";
 export function moveCopyFallbackReasonForRenameError(error, platform = process.platform) {
     const code = error?.code;
     if (code === "EXDEV") {
@@ -29,7 +34,7 @@ async function preflightSourceHardlinks(sourcePath) {
     let discovered = 1;
     while (pending.length > 0) {
         const current = pending.pop();
-        const stat = await fs.lstat(current);
+        const stat = fsSync.lstatSync(current);
         if (stat.isFile() && stat.nlink > 1) {
             throw hardlinkedSourceError(current);
         }
@@ -52,21 +57,19 @@ function isSameOrDescendant(parentPath, candidatePath) {
         (!path.isAbsolute(relative) && !relative.startsWith(`..${path.sep}`) && relative !== ".."));
 }
 async function assertCopyDestinationOutsideSource(sourcePath, targetPath, expectedIdentity) {
-    const sourceStat = await fs.lstat(sourcePath);
+    const sourceStat = fsSync.lstatSync(sourcePath);
     const sourceIdentity = entryIdentity(sourceStat);
     if (expectedIdentity && !sameIdentity(expectedIdentity, sourceIdentity)) {
         throw sourceChangedError(sourcePath);
     }
     const normalizedSource = path.resolve(sourcePath);
     const normalizedTarget = path.resolve(targetPath);
-    const [sourceParentReal, targetParentReal] = await Promise.all([
-        fs.realpath(path.dirname(normalizedSource)),
-        fs.realpath(path.dirname(normalizedTarget)),
-    ]);
+    const sourceParentReal = realpathSync.native(path.dirname(normalizedSource));
+    const targetParentReal = realpathSync.native(path.dirname(normalizedTarget));
     const sourceCandidate = path.join(sourceParentReal, path.basename(normalizedSource));
     const targetCandidate = path.join(targetParentReal, path.basename(normalizedTarget));
     const sourceBoundary = sourceStat.isDirectory()
-        ? await fs.realpath(sourcePath)
+        ? realpathSync.native(sourcePath)
         : sourceCandidate;
     const unsafeTarget = sourceStat.isDirectory()
         ? isSameOrDescendant(sourceBoundary, targetCandidate)
@@ -98,11 +101,13 @@ async function writeAll(handle, buffer, bytesRead) {
     let offset = 0;
     while (offset < bytesRead) {
         const { bytesWritten } = await handle.write(buffer, offset, bytesRead - offset);
+        if (bytesWritten <= 0)
+            throw new FsSafeError("helper-failed", "move copy made no progress");
         offset += bytesWritten;
     }
 }
 async function copyRegularFilePinned(params) {
-    let destinationCreated = false;
+    let openedIdentity;
     let sourceHandle;
     try {
         sourceHandle = await fs.open(params.from, resolveReadOpenFlags());
@@ -115,16 +120,30 @@ async function copyRegularFilePinned(params) {
         throw error;
     }
     try {
-        const openedStat = await sourceHandle.stat();
+        const openedStat = fsSync.fstatSync(sourceHandle.fd);
+        openedIdentity = entryIdentity(openedStat);
         if (params.rejectHardlinks && openedStat.nlink > 1) {
             throw hardlinkedSourceError(params.from);
         }
-        if (!openedStat.isFile() || !sameIdentity(params.identity, entryIdentity(openedStat))) {
+        const openAdvancedWindowsCtime = process.platform === "win32" &&
+            params.identity.dev === openedIdentity.dev &&
+            params.identity.ino === openedIdentity.ino &&
+            params.identity.mode === openedIdentity.mode &&
+            params.identity.nlink === openedIdentity.nlink &&
+            params.identity.size === openedIdentity.size &&
+            params.identity.mtimeMs === openedIdentity.mtimeMs &&
+            openedIdentity.ctimeMs >= params.identity.ctimeMs;
+        if (!openedStat.isFile() ||
+            (!sameIdentity(params.identity, openedIdentity) && !openAdvancedWindowsCtime)) {
             throw sourceChangedError(params.from);
         }
+        await assertSourceStillMatches(params.from, openedIdentity);
+        const parentGuard = await createAsyncDirectoryGuard(path.dirname(params.to), { bigint: true });
         const destinationHandle = await fs.open(params.to, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL, modeBits(params.mode) || 0o666);
-        destinationCreated = true;
+        let destinationIdentity;
         try {
+            destinationIdentity = fsSync.fstatSync(destinationHandle.fd, { bigint: true });
+            params.onCreated?.(destinationIdentity);
             const scratch = Buffer.allocUnsafe(64 * 1024);
             while (true) {
                 const { bytesRead } = await sourceHandle.read(scratch, 0, scratch.length, null);
@@ -135,44 +154,64 @@ async function copyRegularFilePinned(params) {
             }
             // Re-check the opened source before the staged tree can be committed. If
             // it changed while we copied, the caller should retry the move.
-            const finalSourceStat = await sourceHandle.stat();
+            const finalSourceStat = fsSync.fstatSync(sourceHandle.fd);
             if (params.rejectHardlinks && finalSourceStat.nlink > 1) {
                 throw hardlinkedSourceError(params.from);
             }
-            if (!sameIdentity(params.identity, entryIdentity(finalSourceStat))) {
+            if (!sameIdentity(openedIdentity, entryIdentity(finalSourceStat))) {
                 throw sourceChangedError(params.from);
             }
             await destinationHandle.chmod(modeBits(params.mode));
         }
+        catch (error) {
+            await cleanupPinnedFilePath({
+                pathname: params.to, handle: destinationHandle, identity: destinationIdentity, parentGuard,
+            });
+            throw error;
+        }
         finally {
             await destinationHandle.close();
         }
     }
+    finally {
+        await sourceHandle.close();
+    }
+    return openedIdentity;
+}
+function inspectSourceDirectory(sourcePath, expected) {
+    try {
+        return inspectDirectoryIdentitySync(sourcePath, expected);
+    }
     catch (error) {
-        if (destinationCreated) {
-            await fs.rm(params.to, { force: true }).catch(() => undefined);
+        const code = error?.code;
+        if (code === "ENOENT" || code === "ENOTDIR" ||
+            (error instanceof FsSafeError && (error.code === "path-mismatch" || error.code === "not-file"))) {
+            throw sourceChangedError(sourcePath);
         }
         throw error;
     }
-    finally {
-        await sourceHandle.close();
-    }
 }
 async function copyEntryWithManifest(from, to, options, expectedIdentity) {
-    const sourceStat = await fs.lstat(from);
+    const sourceStat = fsSync.lstatSync(from);
     const identity = entryIdentity(sourceStat);
     if (expectedIdentity && !sameIdentity(expectedIdentity, identity)) {
         throw sourceChangedError(from);
     }
     if (sourceStat.isSymbolicLink()) {
-        await fs.symlink(await fs.readlink(from), to);
+        const target = await fs.readlink(from);
+        const targetType = process.platform === "win32" && fsSync.statSync(from).isDirectory() ? "junction" : undefined;
+        await fs.symlink(target, to, targetType);
+        options.onCreated?.(fsSync.lstatSync(to, { bigint: true }));
         // readlink() is path-based; verify the symlink we copied is still the one
         // we inspected before letting the staged destination become visible.
         await assertSourceStillMatches(from, identity);
         return { ...identity, kind: "leaf" };
     }
     if (sourceStat.isDirectory()) {
+        const directoryStat = inspectSourceDirectory(from);
+        const directoryIdentity = Object.freeze({ dev: directoryStat.dev, ino: directoryStat.ino });
         await fs.mkdir(to, { mode: modeBits(sourceStat.mode) || 0o755 });
+        options.onCreated?.(fsSync.lstatSync(to, { bigint: true }));
         const children = [];
         const childNames = [];
         const directory = await fs.opendir(from);
@@ -185,16 +224,19 @@ async function copyEntryWithManifest(from, to, options, expectedIdentity) {
         for (const child of childNames) {
             children.push({
                 name: child,
-                manifest: await copyEntryWithManifest(path.join(from, child), path.join(to, child), options),
+                manifest: await copyEntryWithManifest(path.join(from, child), path.join(to, child), {
+                    sourceHardlinks: options.sourceHardlinks, budget: options.budget,
+                }),
             });
         }
         // Directory traversal is path-based in Node. Treat a changed parent as a
         // stale move before committing so swapped-in outside trees are not imported.
         await assertSourceStillMatches(from, identity);
+        inspectSourceDirectory(from, directoryIdentity);
         // mkdir() honors process umask. Restore the source mode before commit so
         // EXDEV fallback preserves directory permissions like fs.cp did.
         await chmodDirectoryPinned(to, modeBits(sourceStat.mode));
-        return { ...identity, children, kind: "directory" };
+        return { ...identity, children, directoryIdentity, kind: "directory" };
     }
     if (!sourceStat.isFile()) {
         throw new Error(`Refusing to move non-file path with copy fallback: ${from}`);
@@ -202,14 +244,15 @@ async function copyEntryWithManifest(from, to, options, expectedIdentity) {
     if (options.sourceHardlinks === "reject" && sourceStat.nlink > 1) {
         throw hardlinkedSourceError(from);
     }
-    await copyRegularFilePinned({
+    const copiedIdentity = await copyRegularFilePinned({
         from,
         identity,
         mode: sourceStat.mode,
         rejectHardlinks: options.sourceHardlinks === "reject",
         to,
+        onCreated: options.onCreated,
     });
-    return { ...identity, kind: "leaf" };
+    return { ...copiedIdentity, kind: "leaf" };
 }
 function assertSynchronousResult(returned, name) {
     if (returned !== undefined) {
@@ -219,6 +262,13 @@ function assertSynchronousResult(returned, name) {
     }
 }
 export async function movePathWithCopyFallback(options) {
+    const from = admitStandalonePublicationPath(options.from, "move source uses a Windows filesystem namespace alias");
+    const to = admitStandalonePublicationPath(options.to, "move destination uses a Windows filesystem namespace alias");
+    const sourcePath = path.resolve(from);
+    const targetPath = path.resolve(to);
+    assertNoWindowsPathAlias(sourcePath, "filesystem", "move source uses a Windows filesystem namespace alias");
+    assertNoWindowsPathAlias(targetPath, "filesystem", "move destination uses a Windows filesystem namespace alias");
+    const sourceHardlinks = options.sourceHardlinks;
     // Keep the initiating owner's callbacks across preparation and copy fallback.
     const callerRenameAssert = options.assertBeforeRename;
     const callerMutationAssert = options.assertBeforeMutation;
@@ -254,9 +304,7 @@ export async function movePathWithCopyFallback(options) {
             assertSynchronousResult(callerPublished?.(publicationReceipt), "onDestinationPublished");
         }
     };
-    const sourcePath = path.resolve(options.from);
-    const targetPath = path.resolve(options.to);
-    const rejectHardlinks = options.sourceHardlinks === "reject";
+    const rejectHardlinks = sourceHardlinks === "reject";
     if (rejectHardlinks) {
         await preflightSourceHardlinks(sourcePath);
     }
@@ -286,22 +334,24 @@ export async function movePathWithCopyFallback(options) {
     const sourceIdentity = await assertCopyDestinationOutsideSource(sourcePath, targetPath);
     const targetDir = path.dirname(targetPath);
     const staged = path.join(targetDir, `.fs-safe-move-${process.pid}-${randomUUID()}.tmp`);
-    const unregisterStaged = registerTempPathForExit(staged, { recursive: true });
+    const stage = await createMoveStageOwner(staged);
     try {
         const manifest = await copyEntryWithManifest(sourcePath, staged, {
             sourceHardlinks: rejectHardlinks ? "reject" : "allow",
+            onCreated: stage.record,
             ...(rejectHardlinks ? { budget: { discovered: 1 } } : {}),
         }, sourceIdentity);
         const cleanupState = createCleanupCopiedEntryState(sourcePath, manifest);
-        unregisterStaged.setIdentity(await fs.lstat(staged, { bigint: true }));
         await assertCopyDestinationOutsideSource(sourcePath, targetPath, manifest);
+        if (manifest.kind === "directory")
+            inspectSourceDirectory(sourcePath, manifest.directoryIdentity);
         await guardedRename({
             from: staged,
             to: targetPath,
-            assertBeforeRename,
+            assertBeforeRename: () => { assertBeforeRename(); stage.assertCurrent(); },
             onSourceInspected,
             onRenamed: () => {
-                unregisterStaged();
+                stage.published();
                 onRenamed();
             },
         });
@@ -312,23 +362,7 @@ export async function movePathWithCopyFallback(options) {
     }
     finally {
         if (!destinationPublished) {
-            try {
-                const stagedIdentity = await fs.lstat(staged, { bigint: true });
-                if (!stagedIdentity.isSymbolicLink())
-                    unregisterStaged.setIdentity(stagedIdentity);
-            }
-            catch (error) {
-                if (error.code === "ENOENT") {
-                    unregisterStaged();
-                }
-            }
-            try {
-                await fs.rm(staged, { recursive: true, force: true });
-                unregisterStaged();
-            }
-            catch {
-                // Keep the identity-bound exit cleanup registered for a later retry.
-            }
+            await stage.cleanup();
         }
     }
 }

package/node_modules/@openclaw/fs-safe/dist/mutation-authority.d.ts

@@ -0,0 +1,9 @@
+import { FsSafeError } from "./errors.js";
+export declare class MutationAuthorityError extends FsSafeError {
+    readonly rejection: unknown;
+    constructor(rejection: unknown);
+}
+export declare function assertSynchronousCallbackResult(returned: unknown, name: string): void;
+export declare function composeMutationAssertions(defaultAssertion?: () => void, callAssertion?: () => void): (() => void) | undefined;
+export declare function rethrowMutationAuthorityError(error: unknown): never;
+//# sourceMappingURL=mutation-authority.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/mutation-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutation-authority.d.ts","sourceRoot":"","sources":["../src/mutation-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,qBAAa,sBAAuB,SAAQ,WAAW;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO;IAAvC,YAAqB,SAAS,EAAE,OAAO,EAEtC;CACF;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAUrF;AAED,wBAAgB,yBAAyB,CACvC,gBAAgB,CAAC,EAAE,MAAM,IAAI,EAC7B,aAAa,CAAC,EAAE,MAAM,IAAI,GACzB,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAU1B;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAInE"}

package/node_modules/@openclaw/fs-safe/dist/mutation-authority.js

@@ -0,0 +1,36 @@
+import { FsSafeError } from "./errors.js";
+export class MutationAuthorityError extends FsSafeError {
+    rejection;
+    constructor(rejection) {
+        super("denied-path", "mutation authority rejected the operation", { cause: rejection });
+        this.rejection = rejection;
+    }
+}
+export function assertSynchronousCallbackResult(returned, name) {
+    if (returned !== null &&
+        (typeof returned === "object" || typeof returned === "function") &&
+        typeof returned.then === "function") {
+        // TypeScript permits async functions for () => void. Do not admit their work.
+        void Promise.resolve(returned).catch(() => undefined);
+        throw new TypeError(`${name} must be synchronous`);
+    }
+}
+export function composeMutationAssertions(defaultAssertion, callAssertion) {
+    if (!defaultAssertion && !callAssertion)
+        return undefined;
+    return () => {
+        try {
+            assertSynchronousCallbackResult(defaultAssertion?.(), "assertBeforeMutation");
+            assertSynchronousCallbackResult(callAssertion?.(), "assertBeforeMutation");
+        }
+        catch (error) {
+            throw new MutationAuthorityError(error);
+        }
+    };
+}
+export function rethrowMutationAuthorityError(error) {
+    if (error instanceof MutationAuthorityError)
+        throw error.rejection;
+    // Cleanup failures and indeterminate publication receipts must retain their context.
+    throw error;
+}

package/node_modules/@openclaw/fs-safe/dist/native-binding.d.ts

@@ -1,5 +1,6 @@
 import type { TarMeterLimits } from "./archive-limits.js";
 import type { ArchiveMemberKind } from "./archive-plan.js";
+import type { CopyCloneMode } from "./copy-policy.js";
 export interface NativeFileHash {
     bytes: number;
     digest: string;
@@ -14,6 +15,11 @@ export interface NativeFileIdentity {
     isDirectory: boolean;
     isSymbolicLink: boolean;
 }
+export interface NativeDirectoryObservation {
+    dev: bigint;
+    ino: bigint;
+    realPath: string;
+}
 export interface NativeArchiveEntry {
     index: number;
     path: string;
@@ -29,6 +35,12 @@ export interface NativeCopyResult {
     errorCode?: string;
     errorMessage?: string;
 }
+export interface NativeFileCopyResult {
+    fd: number;
+    method: "clone" | "copy-file-range" | "copy";
+    errorCode?: string;
+    errorMessage?: string;
+}
 export interface NativeOpenBeneathResult {
     fd: number;
     containment: "kernel-atomic" | "best-effort";
@@ -68,10 +80,45 @@ export interface NativeWindowsSecurityFacts {
     unsupportedAceTypes: number[];
     aces: NativeWindowsAccessControlEntry[];
 }
+export interface NativeWindowsDescriptorSecurityFacts {
+    /** Canonical lowercase 32-bit volume serial and 64-bit file-index projection used by Node. */
+    identity: string;
+    security: NativeWindowsSecurityFacts;
+}
+export interface NativeDarwinAclFacts {
+    state: "absent" | "empty" | "present";
+}
 export interface NativeBinding {
+    /** Internal: consumes only a descriptor returned by this binding. */
+    closeOwnedFd(fd: number): void;
+    /** Internal Darwin-only synchronous inspection; the caller retains its fd. */
+    inspectDarwinAcl?(fd: number): NativeDarwinAclFacts;
+    /** POSIX system canonicalization; confinement and identity policy stay with callers. */
+    canonicalizePath?(path: string, ordinary: boolean): {
+        path?: string;
+        errno?: number;
+    };
+    /** Internal: exact directory identity and canonical path from one no-follow handle. */
+    observeDirectory?(path: string): NativeDirectoryObservation;
+    /** Linux/Windows byte transfer; callers retain both admitted descriptors until settlement. */
+    copyFileContents?(sourceFd: number, targetFd: number, signal?: AbortSignal): Promise<void>;
+    /** Internal: same private, immutable input ownership as the ZIP buffer reader. */
+    openTarBufferNative(buffer: Buffer, kind: string, limits: TarMeterLimits, signal?: AbortSignal): Promise<{
+        readonly entries: NativeArchiveEntry[];
+        readEntry(index: number, maxBytes: number, signal?: AbortSignal): Promise<Buffer>;
+    }>;
+    /** Internal: input remains private, unpooled and immutable until the reader is released. */
+    openZipBufferNative(buffer: Buffer, limits: TarMeterLimits, signal?: AbortSignal): Promise<{
+        readonly entries: NativeArchiveEntry[];
+        readEntry(index: number, maxBytes: number, signal?: AbortSignal): Promise<Buffer>;
+    }>;
+    readCloneFileMetadata(paths: string[]): Promise<(Buffer | null)[]>;
+    probeTreeClone(parentFd: number): "apfs" | "btrfs" | "refs" | "xfs" | "zfs" | null;
+    cloneTree(sourceFd: number | null, parentFd: number, basename: string, concurrency: number, signal?: AbortSignal): Promise<void>;
     createStagedFile?(parentFd: number, basename: string): number;
     stagedFileMatches?(parentFd: number, basename: string, fileFd: number): boolean;
     removeStagedFile?(parentFd: number, basename: string, fileFd: number): "removed" | "name-absent" | "preserved";
+    copyFileExclusive?(sourceFd: number, parentFd: number, basename: string, clone: CopyCloneMode, maxBytes: number | undefined, signal: AbortSignal | undefined, sync: boolean): Promise<NativeFileCopyResult>;
     cloneFileExclusive(sourceFd: number, targetRootFd: number, targetRelPath: string): number;
     copyFileRangeExclusive(sourceFd: number, targetRootFd: number, targetRelPath: string): Promise<NativeCopyResult>;
     createPrivateDirectory(path: string): void;
@@ -79,15 +126,20 @@ export interface NativeBinding {
     fstatIdentity(fd: number): NativeFileIdentity;
     inspectArchiveNative(path: string, kind: string, limits: TarMeterLimits, signal: AbortSignal): Promise<NativeArchiveEntry[]>;
     linkBeneath(sourceRootFd: number, sourceRelPath: string, targetRootFd: number, targetRelPath: string): void;
+    /** Direct-child mkdir; true is receipt provenance only, never cleanup ownership. */
+    mkdirChildBeneath?(parentFd: number, basename: string, mode: number): boolean;
     mkdirBeneath(rootFd: number, relPath: string, mode: number): void;
     openBeneath(rootFd: number, relPath: string, flags: number): NativeOpenBeneathResult;
     readArchiveEntryNative(path: string, kind: string, requested: string, maxBytes: number, limits: TarMeterLimits, signal: AbortSignal): Promise<Buffer>;
     readOwnerAndDacl(path: string): NativeWindowsSecurityFacts;
+    /** Internal Windows-only inspection of the exact borrowed Node descriptor. */
+    inspectWindowsSecureFileHandle?(fd: number): NativeWindowsDescriptorSecurityFacts;
     ownedTreeRemovalAvailable?(parentFd: number): boolean;
     removeOwnedTree?(parentFd: number, basename: string, directoryFd: number): Promise<NativeOwnedTreeRemovalResult>;
     removeOwnedTreeSync?(parentFd: number, basename: string, directoryFd: number): NativeOwnedTreeRemovalResult;
     renameNoReplace(sourceRootFd: number, sourceRelPath: string, targetRootFd: number, targetRelPath: string): void;
     renameReplace(sourceRootFd: number, sourceRelPath: string, targetRootFd: number, targetRelPath: string): void;
-    sha256File(fd: number): Promise<NativeFileHash>;
+    sha256File(fd: number, maxBytes?: number, signal?: AbortSignal): Promise<NativeFileHash>;
 }
+export declare function captureNativeFdClose(binding: NativeBinding): (fd: number) => void;
 //# sourceMappingURL=native-binding.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/native-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-binding.d.ts","sourceRoot":"","sources":["../src/native-binding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;CAAG;AAErE,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,eAAe,GAAG,aAAa,CAAC;CAC9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,CAAC,EAAE,SAAS,GAAG,WAAW,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,CAAC;QACZ,aAAa,EAAE,OAAO,CAAC;QACvB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,kBAAkB,EAAE,OAAO,CAAC;QAC5B,WAAW,EAAE,OAAO,CAAC;QACrB,SAAS,EAAE,OAAO,CAAC;QACnB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,IAAI,EAAE,+BAA+B,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,aAAa;IAE5B,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9D,iBAAiB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAChF,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;IAC/G,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1F,sBAAsB,CACpB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,oBAAoB,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,sBAAsB,EAAE,EAC9B,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAC9C,oBAAoB,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACjC,WAAW,CACT,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACpB,IAAI,CAAC;IACR,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAClE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,uBAAuB,CAAC;IACrF,sBAAsB,CACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,CAAC;IAC3D,yBAAyB,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACtD,eAAe,CAAC,CACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACzC,mBAAmB,CAAC,CAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,4BAA4B,CAAC;IAChC,eAAe,CACb,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACpB,IAAI,CAAC;IACR,aAAa,CACX,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACpB,IAAI,CAAC;IACR,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACjD"}
+{"version":3,"file":"native-binding.d.ts","sourceRoot":"","sources":["../src/native-binding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;CAAG;AAErE,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,GAAG,iBAAiB,GAAG,MAAM,CAAC;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,eAAe,GAAG,aAAa,CAAC;CAC9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,CAAC,EAAE,SAAS,GAAG,WAAW,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,CAAC;QACZ,aAAa,EAAE,OAAO,CAAC;QACvB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,kBAAkB,EAAE,OAAO,CAAC;QAC5B,WAAW,EAAE,OAAO,CAAC;QACrB,SAAS,EAAE,OAAO,CAAC;QACnB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,IAAI,EAAE,+BAA+B,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,oCAAoC;IACnD,8FAA8F;IAC9F,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,0BAA0B,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,8EAA8E;IAC9E,gBAAgB,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB,CAAC;IACpD,wFAAwF;IACxF,gBAAgB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF,uFAAuF;IACvF,gBAAgB,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,CAAC;IAC5D,8FAA8F;IAC9F,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3F,kFAAkF;IAClF,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QACvG,QAAQ,CAAC,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACvC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KACnF,CAAC,CAAC;IACH,4FAA4F;IAC5F,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QACzF,QAAQ,CAAC,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACvC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KACnF,CAAC,CAAC;IACH,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;IACnF,SAAS,CACP,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9D,iBAAiB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAChF,gBAAgB,CAAC,CACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;IAC3C,iBAAiB,CAAC,CAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1F,sBAAsB,CACpB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,oBAAoB,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,sBAAsB,EAAE,EAC9B,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAC9C,oBAAoB,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACjC,WAAW,CACT,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACpB,IAAI,CAAC;IACR,oFAAoF;IACpF,iBAAiB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9E,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAClE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,uBAAuB,CAAC;IACrF,sBAAsB,CACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,CAAC;IAC3D,8EAA8E;IAC9E,8BAA8B,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,oCAAoC,CAAC;IAClF,yBAAyB,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACtD,eAAe,CAAC,CACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACzC,mBAAmB,CAAC,CAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,4BAA4B,CAAC;IAChC,eAAe,CACb,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACpB,IAAI,CAAC;IACR,aAAa,CACX,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACpB,IAAI,CAAC;IACR,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC1F;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,aAAa,GAAG,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAMjF"}

package/node_modules/@openclaw/fs-safe/dist/native-binding.js

@@ -1 +1,8 @@
-export {};
+import { FsSafeError } from "./errors.js";
+export function captureNativeFdClose(binding) {
+    if (typeof binding.closeOwnedFd !== "function") {
+        throw new FsSafeError("helper-unavailable", "native descriptor ownership is unavailable");
+    }
+    // Retained descriptors must remain disposable after native configuration changes.
+    return binding.closeOwnedFd.bind(binding);
+}

package/node_modules/@openclaw/fs-safe/dist/native-directory-observation.d.ts

@@ -0,0 +1,17 @@
+import { type NativeBinding } from "./native.js";
+import type { NativeDirectoryObservation } from "./native-binding.js";
+import type { ExactStatIdentity } from "./stat-observation.js";
+export type NativeDirectoryObservationBackend = NativeBinding & {
+    observeDirectory(pathname: string): NativeDirectoryObservation;
+};
+export type NativeDirectoryObservationGuard = NativeDirectoryObservation & {
+    dir: string;
+    identity: ExactStatIdentity;
+    nativeDirectoryObservation: true;
+};
+export declare function getNativeDirectoryObservationBackend(enabled?: boolean): NativeDirectoryObservationBackend | undefined;
+/** Exact identity, type, and canonical path captured from one retained handle. */
+export declare function inspectNativeDirectoryObservation(backend: NativeDirectoryObservationBackend, pathname: string, expected?: ExactStatIdentity, platform?: NodeJS.Platform): NativeDirectoryObservation;
+export declare function extendNativeDirectoryObservationGuard(observation: NativeDirectoryObservation, dir: string): NativeDirectoryObservationGuard;
+export declare function isNativeDirectoryObservationGuard(guard: unknown): guard is NativeDirectoryObservationGuard;
+//# sourceMappingURL=native-directory-observation.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/native-directory-observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-directory-observation.d.ts","sourceRoot":"","sources":["../src/native-directory-observation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,MAAM,iCAAiC,GAAG,aAAa,GAAG;IAC9D,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,0BAA0B,CAAC;CAChE,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG,0BAA0B,GAAG;IACzE,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,0BAA0B,EAAE,IAAI,CAAC;CAClC,CAAC;AAEF,wBAAgB,oCAAoC,CAClD,OAAO,UAAO,GACb,iCAAiC,GAAG,SAAS,CAM/C;AAeD,kFAAkF;AAClF,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,iCAAiC,EAC1C,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,0BAA0B,CAM5B;AAED,wBAAgB,qCAAqC,CACnD,WAAW,EAAE,0BAA0B,EACvC,GAAG,EAAE,MAAM,GACV,+BAA+B,CAMjC;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,+BAA+B,CAG1C"}

package/node_modules/@openclaw/fs-safe/dist/native-directory-observation.js

@@ -0,0 +1,37 @@
+import path from "node:path";
+import { FsSafeError } from "./errors.js";
+import { getNativeBinding } from "./native.js";
+import { inspectFileIdentitySync } from "./strict-file-identity.js";
+export function getNativeDirectoryObservationBackend(enabled = true) {
+    if (!enabled)
+        return undefined;
+    const binding = getNativeBinding();
+    return binding && typeof binding.observeDirectory === "function"
+        ? binding
+        : undefined;
+}
+function validateNativeDirectoryObservation(observation) {
+    if (!observation || typeof observation.dev !== "bigint" || observation.dev < 0n ||
+        typeof observation.ino !== "bigint" || observation.ino < 0n ||
+        typeof observation.realPath !== "string" ||
+        observation.realPath.includes("\0") ||
+        (!path.isAbsolute(observation.realPath) && !path.win32.isAbsolute(observation.realPath))) {
+        throw new FsSafeError("path-mismatch", "native directory observation is invalid");
+    }
+    return observation;
+}
+/** Exact identity, type, and canonical path captured from one retained handle. */
+export function inspectNativeDirectoryObservation(backend, pathname, expected, platform = process.platform) {
+    return inspectFileIdentitySync(() => validateNativeDirectoryObservation(backend.observeDirectory(pathname)), expected, platform);
+}
+export function extendNativeDirectoryObservationGuard(observation, dir) {
+    const guard = observation;
+    guard.dir = dir;
+    guard.identity = guard;
+    guard.nativeDirectoryObservation = true;
+    return guard;
+}
+export function isNativeDirectoryObservationGuard(guard) {
+    return typeof guard === "object" && guard !== null &&
+        guard.nativeDirectoryObservation === true;
+}

package/node_modules/@openclaw/fs-safe/dist/native-operations.d.ts

@@ -10,7 +10,7 @@ export type NativeFileHandle = {
 };
 export declare function nativeOpenFlags(flags: number): number;
 export declare function writeNativeFd(fd: number, data: Buffer): void;
-export declare function writeNativeInput(fd: number, input: PinnedWriteInput, maxBytes?: number): Promise<void>;
+export declare function writeNativeInput(fd: number, input: PinnedWriteInput, maxBytes?: number, assertBeforeMutation?: () => void): Promise<void>;
 export declare function removeNativeCreatedFileIfStillPinned(params: {
     parentPath: string;
     parentFd: number;

package/node_modules/@openclaw/fs-safe/dist/native-operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-operations.d.ts","sourceRoot":"","sources":["../src/native-operations.ts"],"names":[],"mappings":"AAAA,OAAe,EAAE,KAAK,WAAW,EAAE,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAG/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAI7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IACvB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5E,CAAC;AAEF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOrD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAS5D;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,gBAAgB,EACvB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAgBf;AAsBD,wBAAgB,oCAAoC,CAAC,MAAM,EAAE;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB,GAAG,IAAI,CAqBP;AAED,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAwDvC"}
+{"version":3,"file":"native-operations.d.ts","sourceRoot":"","sources":["../src/native-operations.ts"],"names":[],"mappings":"AAAA,OAAe,EAAE,KAAK,WAAW,EAAE,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAG/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAK7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAI1D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IACvB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5E,CAAC;AAEF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOrD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAS5D;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,gBAAgB,EACvB,QAAQ,CAAC,EAAE,MAAM,EACjB,oBAAoB,CAAC,EAAE,MAAM,IAAI,GAChC,OAAO,CAAC,IAAI,CAAC,CAoBf;AA0BD,wBAAgB,oCAAoC,CAAC,MAAM,EAAE;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB,GAAG,IAAI,CAqBP;AAED,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAyDvC"}

package/node_modules/@openclaw/fs-safe/dist/native-operations.js

@@ -4,6 +4,9 @@ import path from "node:path";
 import { FsSafeError } from "./errors.js";
 import { sameFileIdentityForCleanup } from "./file-identity.js";
 import { getNativeBinding } from "./native.js";
+import { captureNativeFdClose } from "./native-binding.js";
+import { writeAllToFile } from "./write-file-handle.js";
+import { writeCopyFileToFd } from "./copy-file-input.js";
 export function nativeOpenFlags(flags) {
     const closeOnExec = fsSync.constants.O_CLOEXEC;
     return (flags |
@@ -20,25 +23,29 @@ export function writeNativeFd(fd, data) {
         offset += written;
     }
 }
-export async function writeNativeInput(fd, input, maxBytes) {
+export async function writeNativeInput(fd, input, maxBytes, assertBeforeMutation) {
+    if (input.kind === "file") {
+        await writeCopyFileToFd(fd, input, maxBytes, assertBeforeMutation);
+        return;
+    }
     let bytes = 0;
-    const write = (data) => {
+    const write = async (data) => {
         bytes += data.byteLength;
         if (maxBytes !== undefined && bytes > maxBytes) {
             throw new FsSafeError("too-large", `file exceeds limit of ${maxBytes} bytes (got at least ${bytes})`);
         }
-        writeNativeFd(fd, data);
+        await writeAllToFile(fd, data, { assertBeforeMutation });
     };
     if (input.kind === "buffer") {
-        write(typeof input.data === "string" ? Buffer.from(input.data, input.encoding ?? "utf8") : input.data);
+        await write(typeof input.data === "string" ? Buffer.from(input.data, input.encoding ?? "utf8") : input.data);
     }
     else {
         for await (const chunk of input.stream) {
-            write(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+            await write(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
         }
     }
 }
-function wrapNativeFd(fd, containment) {
+function wrapNativeFd(fd, containment, closeFd) {
     let open = true;
     return {
         fd,
@@ -46,7 +53,7 @@ function wrapNativeFd(fd, containment) {
         async close() {
             if (open) {
                 open = false;
-                fsSync.closeSync(fd);
+                closeFd(fd);
             }
         },
         async stat() {
@@ -83,6 +90,7 @@ export async function createNativeExclusiveFile(targetPath, mode) {
     if (!binding) {
         return undefined;
     }
+    const closeFd = captureNativeFdClose(binding);
     const parentPath = path.dirname(targetPath);
     const basename = path.basename(targetPath);
     const parent = await fs.open(parentPath, fsSync.constants.O_RDONLY |
@@ -107,12 +115,12 @@ export async function createNativeExclusiveFile(targetPath, mode) {
         fd = opened.fd;
         fsSync.fchmodSync(fd, mode);
         created = fsSync.fstatSync(fd, { bigint: true });
-        return wrapNativeFd(fd, opened.containment);
+        return wrapNativeFd(fd, opened.containment, closeFd);
     }
     catch (error) {
         if (fd !== undefined) {
             try {
-                fsSync.closeSync(fd);
+                closeFd(fd);
             }
             catch {
                 // Preserve the original error.