@openclaw/openshell-sandbox 2026.9.4 → 2026.9.5

package/node_modules/@openclaw/fs-safe/dist/permissions-windows.js

@@ -1,9 +1,11 @@
 import os from "node:os";
 import { getNativeBinding } from "./native.js";
-import { executePermissionCommand, formatPermissionErrorDetail, getPermissionCommandFailure, } from "./permission-exec.js";
+import { executePermissionCommand } from "./permission-exec.js";
+import { safeStat } from "./permissions.js";
 import { normalizeLowercaseStringOrEmpty } from "./string-coerce.js";
 import { resolveWindowsSystemCommand } from "./windows-command.js";
-import { inspectWindowsOwner, resolveWindowsCurrentUserSid, resolveWindowsPrincipalSids, } from "./windows-owner.js";
+import { inspectWindowsOwner } from "./windows-owner.js";
+import { hasWindowsPathAlias } from "./windows-path-alias.js";
 const INHERIT_FLAGS = new Set(["I", "OI", "CI", "IO", "NP"]);
 const WORLD_PRINCIPALS = new Set(["everyone", "users", "builtin\\users", "authenticated users", "nt authority\\authenticated users", "anonymous logon", "nt authority\\anonymous logon", "guests", "builtin\\guests", "interactive", "nt authority\\interactive", "network", "nt authority\\network", "local"]);
 const TRUSTED_BASE = new Set([
@@ -68,9 +70,6 @@ function inspectWindowsPermissionsNative(params) {
     }
 }
 export async function inspectWindowsPermissions(params) {
-    const native = inspectWindowsPermissionsNative(params);
-    if (native)
-        return native;
     const unverified = {
         ok: true,
         isSymlink: params.stat.isSymlink,
@@ -83,6 +82,15 @@ export async function inspectWindowsPermissions(params) {
         worldReadable: false,
         groupReadable: false,
     };
+    if (hasWindowsPathAlias(params.targetPath, "filesystem", "win32")) {
+        return {
+            ...unverified,
+            error: "Path uses a Windows filesystem namespace alias",
+        };
+    }
+    const native = inspectWindowsPermissionsNative(params);
+    if (native)
+        return native;
     const owner = await inspectWindowsOwner({
         targetPath: params.targetPath,
         env: params.opts?.env,
@@ -92,13 +100,7 @@ export async function inspectWindowsPermissions(params) {
         const error = `Windows owner inspection failed: ${owner.error}`;
         return { ...unverified, ownerError: owner.error, error, errorDetail: owner.errorDetail, errorCause: owner.errorCause };
     }
-    const acl = await inspectWindowsAcl(params.targetPath, {
-        env: params.opts?.env,
-        exec: params.opts?.exec,
-        currentUserSid: owner.currentUserSid,
-        principalSids: owner.principalSids,
-        principalTranslationFailed: owner.principalTranslationFailed,
-    });
+    const acl = summarizeWindowsOwnerAcl(owner);
     const ownerFields = {
         ...(owner.sid ? { ownerSid: owner.sid } : {}),
         ...(owner.trusted !== undefined ? { ownerTrusted: owner.trusted } : {}),
@@ -132,8 +134,18 @@ export function resolveWindowsUserPrincipal(env, userInfo = defaultWindowsUserIn
     const domain = env?.USERDOMAIN?.trim();
     return domain ? `${domain}\\${username}` : username;
 }
+function buildTrustedSidPrincipals(env) {
+    const trusted = new Set();
+    const userSid = normalizeSid(env?.USERSID ?? "");
+    if (userSid && SID_RE.test(userSid) && !WORLD_SIDS.has(userSid))
+        trusted.add(userSid);
+    return trusted;
+}
 function buildTrustedPrincipals(env) {
-    const trusted = new Set(TRUSTED_BASE);
+    const trusted = new Set([
+        ...TRUSTED_BASE,
+        ...buildTrustedSidPrincipals(env),
+    ]);
     const principal = resolveWindowsUserPrincipal(env);
     if (principal) {
         trusted.add(normalize(principal));
@@ -141,9 +153,6 @@ function buildTrustedPrincipals(env) {
         if (userOnly)
             trusted.add(normalize(userOnly));
     }
-    const userSid = normalizeSid(env?.USERSID ?? "");
-    if (userSid && SID_RE.test(userSid) && !WORLD_SIDS.has(userSid))
-        trusted.add(userSid);
     return trusted;
 }
 function classifyPrincipal(principal, trustedPrincipals) {
@@ -215,7 +224,11 @@ export function parseIcaclsOutput(output, targetPath) {
     return entries;
 }
 export function summarizeWindowsAcl(entries, env) {
-    const trustedPrincipals = buildTrustedPrincipals(env);
+    // Canonical SID entries cannot match account names. Classify them directly
+    // so structured descriptor facts do not depend on a separate user lookup.
+    const trustedPrincipals = entries.every((entry) => SID_RE.test(normalize(entry.sid ?? entry.principal)))
+        ? buildTrustedSidPrincipals(env)
+        : buildTrustedPrincipals(env);
     const trusted = [];
     const untrustedWorld = [];
     const untrustedGroup = [];
@@ -230,49 +243,79 @@ export function summarizeWindowsAcl(entries, env) {
     }
     return { trusted, untrustedWorld, untrustedGroup };
 }
-export async function inspectWindowsAcl(targetPath, opts) {
-    let command = "";
-    let startedAt = performance.now();
-    const exec = async (file, args) => {
-        command = file;
-        startedAt = performance.now();
-        return await (opts?.exec ?? defaultPermissionExec)(file, args);
-    };
-    try {
-        if (opts?.principalTranslationFailed)
-            throw new Error("Windows ACL principal SID translation failed");
-        const { stdout, stderr } = await exec(resolveWindowsSystemCommand("icacls.exe", opts?.env), [targetPath]);
-        let entries = parseIcaclsOutput(`${stdout}\n${stderr}`.trim(), targetPath);
-        if (!entries.length)
-            throw new Error("Windows ACL output could not be verified");
-        const unresolvedPrincipals = entries.filter((entry) => !entry.sid).map((entry) => entry.principal);
-        const principalSids = await resolveWindowsPrincipalSids({ principals: unresolvedPrincipals, known: opts?.principalSids, env: opts?.env, exec });
-        entries = entries.map((entry) => {
-            const sid = entry.sid ?? principalSids[entry.principal.toLowerCase()];
-            if (!sid)
-                throw new Error(`Windows ACL principal SID could not be verified: ${entry.principal}`);
-            return { ...entry, sid };
-        });
-        let currentUserSid = normalizeSid(opts?.currentUserSid ?? "");
-        let effectiveEnv = currentUserSid ? { USERSID: currentUserSid } : undefined;
-        let { trusted, untrustedWorld, untrustedGroup } = summarizeWindowsAcl(entries, effectiveEnv);
-        if (!currentUserSid && untrustedGroup.some((entry) => entry.sid && !TRUSTED_SIDS.has(entry.sid))) {
-            currentUserSid = (await resolveWindowsCurrentUserSid({ exec, env: opts?.env })) ?? "";
-            if (currentUserSid) {
-                effectiveEnv = { USERSID: currentUserSid };
-                ({ trusted, untrustedWorld, untrustedGroup } = summarizeWindowsAcl(entries, effectiveEnv));
-            }
-        }
-        return { ok: true, entries, trusted, untrustedWorld, untrustedGroup };
-    }
-    catch (err) {
+const MASK_RIGHTS = [
+    [0x1000_0000, "GA"], [0x8000_0000, "GR"], [0x4000_0000, "GW"], [0x2000_0000, "GE"],
+    [0x0001_0000, "D"], [0x0002_0000, "RC"], [0x0004_0000, "WDAC"], [0x0008_0000, "WO"],
+    [0x0010_0000, "S"], [0x0001, "RD"], [0x0002, "WD"], [0x0004, "AD"],
+    [0x0008, "REA"], [0x0010, "WEA"], [0x0020, "X"], [0x0040, "DC"], [0x0080, "RA"], [0x0100, "WA"],
+];
+function summarizeWindowsOwnerAcl(owner) {
+    const error = owner.error ?? owner.aclError;
+    if (error || owner.daclPresent === undefined || !owner.aces || !owner.currentUserSid) {
         return {
             ok: false, entries: [], trusted: [], untrustedWorld: [], untrustedGroup: [],
-            error: formatPermissionErrorDetail(String(err)),
-            errorDetail: getPermissionCommandFailure(err, command, performance.now() - startedAt),
-            errorCause: err,
+            error: error ?? "Windows ACL query returned incomplete descriptor data",
+            errorDetail: owner.errorDetail, errorCause: owner.errorCause,
         };
     }
+    // A null DACL grants everyone full access; an empty DACL grants nothing.
+    const grants = owner.daclPresent ? owner.aces : [{ sid: "s-1-1-0", mask: 0x001f_01ff, deny: false, inheritOnly: false }];
+    const entries = grants.filter(ace => !ace.deny && !ace.inheritOnly).map(ace => {
+        const rights = ace.mask === 0x001f_01ff ? ["F"] : MASK_RIGHTS.filter(([mask]) => (ace.mask & mask) !== 0).map(([, name]) => name);
+        return {
+            principal: ace.sid, sid: ace.sid, rights, rawRights: "(" + rights.join(",") + ")",
+            // Retain the coarse policy's conservative treatment of read-control and
+            // mutation rights. Denies do not subtract grants or claim effective access.
+            canRead: (ace.mask & 0x9002_0089) !== 0,
+            canWrite: (ace.mask & 0x500d_0156) !== 0,
+        };
+    });
+    return { ok: true, entries, ...summarizeWindowsAcl(entries, { USERSID: owner.currentUserSid }) };
+}
+export async function inspectWindowsAcl(targetPath, opts) {
+    if (opts?.principalTranslationFailed) {
+        const error = new Error("Windows ACL principal SID translation failed");
+        return summarizeWindowsOwnerAcl({ error: String(error), errorCause: error });
+    }
+    if (hasWindowsPathAlias(targetPath, "filesystem", "win32")) {
+        const error = new Error("Path uses a Windows filesystem namespace alias");
+        return summarizeWindowsOwnerAcl({ error: String(error), errorCause: error });
+    }
+    let owner;
+    if (process.platform === "win32" && opts?.env === undefined && opts?.exec === undefined) {
+        try {
+            const native = getNativeBinding();
+            const stat = native && await safeStat(targetPath);
+            // Keep the named-query behavior for leaf links; the native reader follows them.
+            const facts = stat?.ok && !stat.isSymlink ? native?.readOwnerAndDacl(targetPath) : undefined;
+            if (facts && !facts.fallbackRequired && facts.isLocal && facts.aceListComplete && facts.unsupportedAceTypes.length === 0 &&
+                facts.aces.every(ace => ace.flags.inherited && ace.mask !== 0)) {
+                // .NET normalizes explicit ACEs, but retains nonzero inherited ACEs in
+                // their original order without merging them. Other forms keep its query.
+                // Adapt descriptor facts only: the public summary owns its SID and rights
+                // classification, which differs from the native secure-read policy.
+                owner = {
+                    daclPresent: facts.daclPresent,
+                    currentUserSid: facts.currentUserSid,
+                    aces: facts.aces.map(ace => ({
+                        sid: ace.sid,
+                        mask: ace.mask,
+                        deny: ace.aceType === "deny",
+                        inheritOnly: ace.flags.inheritOnly,
+                    })),
+                };
+            }
+        }
+        catch {
+            // Preserve this inspector's structured fallback and command diagnostics
+            // when the optional helper or native descriptor query is unavailable.
+        }
+    }
+    owner ??= await inspectWindowsOwner({ targetPath, env: opts?.env, exec: opts?.exec ?? defaultPermissionExec });
+    return summarizeWindowsOwnerAcl({
+        ...owner,
+        currentUserSid: normalizeSid(opts?.currentUserSid ?? "") || owner.currentUserSid,
+    });
 }
 export function formatWindowsAclSummary(summary) {
     if (!summary.ok)

package/node_modules/@openclaw/fs-safe/dist/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;IAC5C,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC,sFAAsF;IACtF,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,EAAE,cAAc,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAGF,wBAAsB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAsB1E;AAED,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,eAAe,CAAC,CAuD1B;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,MAAM,CAKzF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,eAAe,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,MAAM,CAYT;AASD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAE3D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAEvD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAE5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAE5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAE5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAE5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAKlC,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;IAC5C,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC,sFAAsF;IACtF,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,EAAE,cAAc,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AA8BF,wBAAsB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAK1E;AAED,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,eAAe,CAAC,CA0E1B;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,MAAM,CAKzF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,eAAe,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,MAAM,CAYT;AASD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAE3D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAEvD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAE5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAE5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAE5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAE5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/node_modules/@openclaw/fs-safe/dist/permissions.js

@@ -1,9 +1,21 @@
-import fs from "node:fs/promises";
+import fsSync from "node:fs";
 import { formatIcaclsResetCommand, inspectWindowsPermissions, } from "./permissions-windows.js";
+import { hasWindowsPathAlias, pathForWindowsFilesystem, } from "./windows-path-alias.js";
 export { createIcaclsResetCommand, formatIcaclsResetCommand, formatWindowsAclSummary, inspectWindowsAcl, parseIcaclsOutput, resolveWindowsUserPrincipal, summarizeWindowsAcl, } from "./permissions-windows.js";
-export async function safeStat(targetPath) {
+function failedSafeStat(error) {
+    return {
+        ok: false,
+        isSymlink: false,
+        isDir: false,
+        mode: null,
+        uid: null,
+        gid: null,
+        error,
+    };
+}
+async function safeStatAdmitted(targetPath) {
     try {
-        const lst = await fs.lstat(targetPath);
+        const lst = fsSync.lstatSync(pathForWindowsFilesystem(targetPath));
         return {
             ok: true,
             isSymlink: lst.isSymbolicLink(),
@@ -14,19 +26,36 @@ export async function safeStat(targetPath) {
         };
     }
     catch (err) {
+        return failedSafeStat(String(err));
+    }
+}
+export async function safeStat(targetPath) {
+    if (hasWindowsPathAlias(targetPath, "filesystem")) {
+        return failedSafeStat("Path uses a Windows filesystem namespace alias");
+    }
+    return await safeStatAdmitted(targetPath);
+}
+export async function inspectPathPermissions(targetPath, opts) {
+    const admissionPlatform = process.platform === "win32"
+        ? process.platform
+        : (opts?.platform ?? process.platform);
+    if (hasWindowsPathAlias(targetPath, "filesystem", admissionPlatform)) {
+        const st = failedSafeStat("Path uses a Windows filesystem namespace alias");
         return {
             ok: false,
             isSymlink: false,
             isDir: false,
             mode: null,
-            uid: null,
-            gid: null,
-            error: String(err),
+            bits: null,
+            source: "unknown",
+            worldWritable: false,
+            groupWritable: false,
+            worldReadable: false,
+            groupReadable: false,
+            error: st.error,
         };
     }
-}
-export async function inspectPathPermissions(targetPath, opts) {
-    const st = await safeStat(targetPath);
+    const st = await safeStatAdmitted(targetPath);
     if (!st.ok) {
         return {
             ok: false,
@@ -46,7 +75,7 @@ export async function inspectPathPermissions(targetPath, opts) {
     let effectiveIsDir = st.isDir;
     if (st.isSymlink) {
         try {
-            const target = await fs.stat(targetPath);
+            const target = fsSync.statSync(targetPath);
             effectiveMode = typeof target.mode === "number" ? target.mode : st.mode;
             effectiveIsDir = target.isDirectory();
         }

package/node_modules/@openclaw/fs-safe/dist/pinned-mutation-admission.d.ts

@@ -0,0 +1,25 @@
+import { type DenyMutationPolicy } from "./deny-mutations.js";
+import { type RootBoundaryIdentity } from "./root-boundary.js";
+import type { PinnedWriteMutationAdmission } from "./pinned-write.js";
+import type { MutationSymlinkPolicy } from "./root-symlink-policy.js";
+export type PinnedMutationPolicySnapshot = Readonly<{
+    denyMutations?: DenyMutationPolicy;
+    mutationSymlinks?: MutationSymlinkPolicy;
+}>;
+export declare function snapshotPinnedMutationPolicy(denyMutations: DenyMutationPolicy | undefined, mutationSymlinks: MutationSymlinkPolicy | undefined): PinnedMutationPolicySnapshot | undefined;
+export declare function preparePinnedWriteMutationAdmission(params: {
+    rootReal: string;
+    rootWithSep: string;
+    rootIdentity?: RootBoundaryIdentity;
+    resolvedTargetPath: string;
+    defaultRelativeParentPath: string;
+    originalPath?: string;
+    policy: PinnedMutationPolicySnapshot | undefined;
+    resolveCurrent(): Promise<{
+        resolved: string;
+    }>;
+}): Promise<{
+    relativeParentPath: string;
+    mutationAdmission?: PinnedWriteMutationAdmission;
+}>;
+//# sourceMappingURL=pinned-mutation-admission.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/pinned-mutation-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned-mutation-admission.d.ts","sourceRoot":"","sources":["../src/pinned-mutation-admission.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGvF,OAAO,EAAuB,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,KAAK,EAKV,4BAA4B,EAC7B,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAgCtE,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAClD,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;CAC1C,CAAC,CAAC;AAEH,wBAAgB,4BAA4B,CAC1C,aAAa,EAAE,kBAAkB,GAAG,SAAS,EAC7C,gBAAgB,EAAE,qBAAqB,GAAG,SAAS,GAClD,4BAA4B,GAAG,SAAS,CAO1C;AAuJD,wBAAsB,mCAAmC,CAAC,MAAM,EAAE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yBAAyB,EAAE,MAAM,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACjD,cAAc,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD,GAAG,OAAO,CAAC;IACV,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;CAClD,CAAC,CAsQD"}