@openclaw/openshell-sandbox 2026.9.5 → 2026.9.6

package/node_modules/@openclaw/fs-safe/dist/file-cleanup.js

@@ -0,0 +1,81 @@
+import syncFs, {} from "node:fs";
+import fs, {} from "node:fs/promises";
+import { assertAsyncDirectoryGuard } from "./directory-guard.js";
+import { FsSafeError } from "./errors.js";
+import { sameFileIdentityForCleanup } from "./file-identity.js";
+export function readErrorCode(error) {
+    if ((typeof error !== "object" || error === null) && typeof error !== "function") {
+        return undefined;
+    }
+    try {
+        return Reflect.get(error, "code");
+    }
+    catch {
+        return undefined;
+    }
+}
+export function hasErrorCode(error, expected) {
+    return readErrorCode(error) === expected;
+}
+export async function removeOwnedPath(params) {
+    if (!params.identity)
+        return "preserved";
+    try {
+        const current = params.fsModule === fs
+            ? syncFs.lstatSync(params.pathname, { bigint: true })
+            : await params.fsModule.lstat(params.pathname, { bigint: true });
+        if (current.isSymbolicLink() ||
+            !current.isFile() ||
+            current.nlink !== 1n ||
+            !sameFileIdentityForCleanup(current, params.identity)) {
+            return "preserved";
+        }
+        await params.fsModule.unlink(params.pathname);
+        return "removed";
+    }
+    catch (error) {
+        if (hasErrorCode(error, "ENOENT"))
+            return "name-absent";
+        throw error;
+    }
+}
+// Borrowed handle: the caller retains it until guarded cleanup finishes.
+export async function cleanupPinnedFilePath(params) {
+    if (!params.identity)
+        return "preserved";
+    try {
+        const guard = params.parentGuard;
+        if ([guard.stat.dev, guard.stat.ino].some((value) => typeof value === "number" && !Number.isSafeInteger(value)))
+            return "preserved";
+        await assertAsyncDirectoryGuard(guard);
+        const parent = syncFs.lstatSync(guard.dir, { bigint: true });
+        if (parent.isSymbolicLink() || !parent.isDirectory() ||
+            !sameFileIdentityForCleanup(parent, guard.stat))
+            return "preserved";
+        const opened = syncFs.fstatSync(params.handle.fd, { bigint: true });
+        if (!opened.isFile() || opened.nlink !== 1n ||
+            !sameFileIdentityForCleanup(opened, params.identity))
+            return "preserved";
+    }
+    catch (error) {
+        // Unverifiable authority must preserve the path and the original write failure.
+        if (params.throwOnCleanupError &&
+            !(error instanceof FsSafeError && error.category === "policy") &&
+            !hasErrorCode(error, "ENOENT") && !hasErrorCode(error, "ENOTDIR") &&
+            !hasErrorCode(error, "ELOOP"))
+            throw error;
+        return "preserved";
+    }
+    try {
+        return await removeOwnedPath({
+            fsModule: fs,
+            pathname: params.pathname,
+            identity: params.identity,
+        });
+    }
+    catch (error) {
+        if (params.throwOnCleanupError)
+            throw error;
+        return "preserved";
+    }
+}

package/node_modules/@openclaw/fs-safe/dist/file-contents.d.ts

@@ -0,0 +1,5 @@
+export type SameFileContentsOptions = {
+    maxBytes?: number;
+};
+/** Compares borrowed regular files from offset zero without moving or closing either descriptor. */
+export declare function sameFileContentsSync(leftFd: number, rightFd: number, options?: SameFileContentsOptions): boolean;

package/node_modules/@openclaw/fs-safe/dist/file-contents.js

@@ -0,0 +1,40 @@
+import fs from "node:fs";
+import { normalizeMaxBytes } from "./byte-budget.js";
+import { FsSafeError } from "./errors.js";
+import { readFileWindowFullySync } from "./positional-read.js";
+/** Compares borrowed regular files from offset zero without moving or closing either descriptor. */
+export function sameFileContentsSync(leftFd, rightFd, options = {}) {
+    const maxBytes = normalizeMaxBytes(options.maxBytes) ?? Infinity;
+    const limit = Math.min(maxBytes, Number.MAX_SAFE_INTEGER);
+    const tooLarge = () => new FsSafeError("too-large", `file comparison exceeds ${limit} bytes`);
+    for (const fd of [leftFd, rightFd]) {
+        const stat = fs.fstatSync(fd, { bigint: true });
+        if (!stat.isFile()) {
+            throw new FsSafeError("not-file", "file comparison requires regular-file descriptors");
+        }
+        if (stat.size > BigInt(limit))
+            throw tooLarge();
+    }
+    const left = Buffer.allocUnsafe(Math.min(1024 * 1024, Math.max(1, limit)));
+    const right = Buffer.allocUnsafe(left.length);
+    let position = 0;
+    while (true) {
+        const length = Math.min(left.length, limit - position);
+        if (length === 0) {
+            // Probe EOF at the limit without forming an unsafe exclusive window end.
+            const leftExtra = fs.readSync(leftFd, left, 0, 1, position);
+            const rightExtra = fs.readSync(rightFd, right, 0, 1, position);
+            if (leftExtra !== 0 || rightExtra !== 0)
+                throw tooLarge();
+            return true;
+        }
+        const leftRead = readFileWindowFullySync(leftFd, left.subarray(0, length), position);
+        const rightRead = readFileWindowFullySync(rightFd, right.subarray(0, length), position);
+        if (leftRead !== rightRead || !left.subarray(0, leftRead).equals(right.subarray(0, rightRead))) {
+            return false;
+        }
+        if (leftRead < length)
+            return true;
+        position += leftRead;
+    }
+}

package/node_modules/@openclaw/fs-safe/dist/file-handle-transfer.d.ts

@@ -5,10 +5,11 @@ export type CopyFileHandleOptions = {
     onChunk?: (chunk: Uint8Array) => void;
     assertBeforeMutation?: () => void;
 };
+/** Copies caller-owned regular-file descriptors without moving either cursor. */
+export declare function copyFileDescriptorSync(sourceFd: number, targetFd: number, options?: CopyFileHandleOptions): number;
 /** Copies caller-owned regular files from offset zero without moving either cursor. */
 export declare function copyFileHandle(source: FileHandle, target: FileHandle, options?: CopyFileHandleOptions): Promise<number>;
 export declare function transferFileHandle(source: FileHandle, target: FileHandle | number, options: CopyFileHandleOptions & {
     sizeHint: number;
     targetPosition?: number;
 }): Promise<number>;
-//# sourceMappingURL=file-handle-transfer.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/file-handle-transfer.js

@@ -1,9 +1,64 @@
+import fs from "node:fs";
 import { normalizeMaxBytes } from "./byte-budget.js";
 import { FsSafeError } from "./errors.js";
 import { assertSynchronousCallbackResult, composeMutationAssertions, rethrowMutationAuthorityError, } from "./mutation-authority.js";
 import { writeAllToFile } from "./write-file-handle.js";
-import { inspectFileIdentity } from "./strict-file-identity.js";
+import { inspectFileIdentity, inspectFileIdentitySync } from "./strict-file-identity.js";
 const NO_CALLBACK_ARGUMENTS = Object.freeze([]);
+function createTransferBuffer(sizeHint, limit) {
+    return Buffer.allocUnsafe(Math.min(512 * 1024, Math.max(64 * 1024, sizeHint), limit + 1));
+}
+/** Copies caller-owned regular-file descriptors without moving either cursor. */
+export function copyFileDescriptorSync(sourceFd, targetFd, options = {}) {
+    const signal = options.signal;
+    signal?.throwIfAborted();
+    const maxBytes = normalizeMaxBytes(options.maxBytes);
+    const onChunk = options.onChunk;
+    const assertBeforeMutation = options.assertBeforeMutation;
+    const sourceStat = inspectFileIdentitySync(() => {
+        signal?.throwIfAborted();
+        return fs.fstatSync(sourceFd, { bigint: true });
+    });
+    if (!sourceStat.isFile())
+        throw new FsSafeError("not-file", "copy source descriptor must be a regular file");
+    if (maxBytes !== undefined && Number.isFinite(maxBytes) && sourceStat.size > BigInt(maxBytes)) {
+        throw new FsSafeError("too-large", `file exceeds limit of ${maxBytes} bytes`);
+    }
+    const targetStat = inspectFileIdentitySync(() => {
+        signal?.throwIfAborted();
+        return fs.fstatSync(targetFd, { bigint: true });
+    });
+    if (!targetStat.isFile())
+        throw new FsSafeError("not-file", "copy target descriptor must be a regular file");
+    if (sourceStat.dev === targetStat.dev && sourceStat.ino === targetStat.ino) {
+        throw new FsSafeError("path-alias", "copy source and target descriptors refer to the same file");
+    }
+    const limit = maxBytes ?? Infinity;
+    const buffer = createTransferBuffer(Number(sourceStat.size), limit);
+    let position = 0;
+    while (true) {
+        signal?.throwIfAborted();
+        const bytesRead = fs.readSync(sourceFd, buffer, 0, Math.min(buffer.length, limit - position + 1), position);
+        if (bytesRead > limit - position) {
+            throw new FsSafeError("too-large", `file exceeds limit of ${limit} bytes`);
+        }
+        if (bytesRead === 0)
+            return position;
+        const chunk = buffer.subarray(0, bytesRead);
+        assertSynchronousCallbackResult(onChunk?.(chunk), "onChunk");
+        let offset = 0;
+        while (offset < bytesRead) {
+            signal?.throwIfAborted();
+            assertSynchronousCallbackResult(assertBeforeMutation?.(), "assertBeforeMutation");
+            signal?.throwIfAborted();
+            const written = fs.writeSync(targetFd, chunk, offset, bytesRead - offset, position + offset);
+            if (written <= 0)
+                throw new FsSafeError("helper-failed", "file write made no progress");
+            offset += written;
+        }
+        position += bytesRead;
+    }
+}
 function defineReceiverValue(receiver, key, value) {
     Object.defineProperty(receiver, key, {
         value, enumerable: true, writable: true, configurable: true,
@@ -110,7 +165,7 @@ export function transferFileHandle(source, target, options) {
 }
 async function transferFileHandleCore(source, target, sizeHint, maxBytes, targetPosition, signal, onChunk, beforeWrite, callbackThis) {
     const limit = maxBytes ?? Infinity;
-    const buffer = Buffer.allocUnsafe(Math.min(512 * 1024, Math.max(64 * 1024, sizeHint), limit + 1));
+    const buffer = createTransferBuffer(sizeHint, limit);
     let position = 0;
     while (true) {
         signal?.throwIfAborted();

package/node_modules/@openclaw/fs-safe/dist/file-hash.d.ts

@@ -14,4 +14,3 @@ export declare function hashFileHandle(handle: FileHandle, native?: NativeBindin
 export declare function sha256File(input: Sha256FileInput, options?: Sha256FileOptions): Promise<Sha256FileResult>;
 /** Hash synchronously from offset zero, retaining ownership and position of a borrowed fd. */
 export declare function sha256FileSync(input: Sha256FileSyncInput, options?: Sha256FileOptions): Sha256FileResult;
-//# sourceMappingURL=file-hash.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/file-hash.js

@@ -1,3 +1,55 @@
+var __addDisposableResource = (this && this.__addDisposableResource) || function (env, value, async) {
+    if (value !== null && value !== void 0) {
+        if (typeof value !== "object" && typeof value !== "function") throw new TypeError("Object expected.");
+        var dispose, inner;
+        if (async) {
+            if (!Symbol.asyncDispose) throw new TypeError("Symbol.asyncDispose is not defined.");
+            dispose = value[Symbol.asyncDispose];
+        }
+        if (dispose === void 0) {
+            if (!Symbol.dispose) throw new TypeError("Symbol.dispose is not defined.");
+            dispose = value[Symbol.dispose];
+            if (async) inner = dispose;
+        }
+        if (typeof dispose !== "function") throw new TypeError("Object not disposable.");
+        if (inner) dispose = function() { try { inner.call(this); } catch (e) { return Promise.reject(e); } };
+        env.stack.push({ value: value, dispose: dispose, async: async });
+    }
+    else if (async) {
+        env.stack.push({ async: true });
+    }
+    return value;
+};
+var __disposeResources = (this && this.__disposeResources) || (function (SuppressedError) {
+    return function (env) {
+        function fail(e) {
+            env.error = env.hasError ? new SuppressedError(e, env.error, "An error was suppressed during disposal.") : e;
+            env.hasError = true;
+        }
+        var r, s = 0;
+        function next() {
+            while (r = env.stack.pop()) {
+                try {
+                    if (!r.async && s === 1) return s = 0, env.stack.push(r), Promise.resolve().then(next);
+                    if (r.dispose) {
+                        var result = r.dispose.call(r.value);
+                        if (r.async) return s |= 2, Promise.resolve(result).then(next, function(e) { fail(e); return next(); });
+                    }
+                    else s |= 1;
+                }
+                catch (e) {
+                    fail(e);
+                }
+            }
+            if (s === 1) return env.hasError ? Promise.reject(env.error) : Promise.resolve();
+            if (env.hasError) throw env.error;
+        }
+        return next();
+    };
+})(typeof SuppressedError === "function" ? SuppressedError : function (error, suppressed, message) {
+    var e = new Error(message);
+    return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
+});
 import { createHash } from "node:crypto";
 import fsSync from "node:fs";
 import fs from "node:fs/promises";
@@ -7,58 +59,99 @@ import { getNativeBinding } from "./native.js";
 import { resolveReadOpenFlags } from "./read-open-flags.js";
 import { inspectFileIdentity, inspectFileIdentitySync } from "./strict-file-identity.js";
 import { assertNoWindowsPathAlias } from "./windows-path-alias.js";
-export async function hashFileHandle(handle, native = getNativeBinding(), { maxBytes = Infinity, signal } = {}) {
-    signal?.throwIfAborted();
-    const stat = fsSync.fstatSync(handle.fd);
-    if (!stat.isFile()) {
-        throw new FsSafeError("not-file", "SHA-256 input is not a regular file");
+// Idle storage is bounded independently of caller concurrency. A pending read
+// retains its exclusive borrow until the async hasher settles.
+const hashScratchBuffers = [];
+function takeHashScratch(size) {
+    const index = hashScratchBuffers.findIndex((buffer) => buffer.length >= size);
+    return index < 0 ? Buffer.allocUnsafe(size) : hashScratchBuffers.splice(index, 1)[0];
+}
+class HashScratch {
+    #storage;
+    buffer;
+    constructor(size) {
+        this.#storage = takeHashScratch(size);
+        this.buffer = this.#storage.subarray(0, size);
     }
-    if (stat.size > maxBytes) {
-        throw new FsSafeError("too-large", `SHA-256 input exceeds ${maxBytes} bytes`);
+    grow(size) {
+        const storage = takeHashScratch(size);
+        this[Symbol.dispose]();
+        this.#storage = storage;
+        return this.buffer = storage.subarray(0, size);
     }
-    if (native) {
-        // A completed N-API task can mask later aborts on the same signal.
-        const nativeSignal = signal ? AbortSignal.any([signal]) : undefined;
-        try {
-            const result = await native.sha256File(handle.fd, Number.isFinite(maxBytes) ? maxBytes : undefined, nativeSignal);
-            signal?.throwIfAborted();
-            return result;
-        }
-        catch (error) {
-            // N-API settles only after compute stops; never race descriptor cleanup.
-            signal?.throwIfAborted();
-            if (error?.code === "too-large") {
-                throw new FsSafeError("too-large", `SHA-256 input exceeds ${maxBytes} bytes`, { cause: error });
-            }
-            throw error;
-        }
-        finally {
-            // Node retains composite signals while N-API's abort listener is attached.
-            if (nativeSignal)
-                nativeSignal.onabort = null;
-        }
+    [Symbol.dispose]() {
+        // Clear the used view before retention; a larger unused tail was cleared
+        // by its previous borrower, without making tiny hashes clear large buffers.
+        this.buffer.fill(0);
+        hashScratchBuffers.push(this.#storage);
+        hashScratchBuffers.sort((left, right) => left.length - right.length);
+        if (hashScratchBuffers.length > 4)
+            hashScratchBuffers.shift();
     }
-    const hash = createHash("sha256");
-    let buffer = Buffer.allocUnsafe(Math.min(256 * 1024, Math.max(1, stat.size + 1), maxBytes + 1));
-    let position = 0;
-    while (true) {
-        signal?.throwIfAborted();
-        const length = Math.min(buffer.length, maxBytes - position + 1);
-        const { bytesRead } = await handle.read(buffer, 0, length, position);
+}
+export async function hashFileHandle(handle, native = getNativeBinding(), { maxBytes = Infinity, signal } = {}) {
+    const env_1 = { stack: [], error: void 0, hasError: false };
+    try {
         signal?.throwIfAborted();
-        if (bytesRead > maxBytes - position) {
+        const stat = fsSync.fstatSync(handle.fd);
+        if (!stat.isFile()) {
+            throw new FsSafeError("not-file", "SHA-256 input is not a regular file");
+        }
+        if (stat.size > maxBytes) {
             throw new FsSafeError("too-large", `SHA-256 input exceeds ${maxBytes} bytes`);
         }
-        if (bytesRead === 0) {
-            return { bytes: position, digest: hash.digest("hex") };
+        if (native) {
+            // A completed N-API task can mask later aborts on the same signal.
+            const nativeSignal = signal ? AbortSignal.any([signal]) : undefined;
+            try {
+                const result = await native.sha256File(handle.fd, Number.isFinite(maxBytes) ? maxBytes : undefined, nativeSignal);
+                signal?.throwIfAborted();
+                return result;
+            }
+            catch (error) {
+                // N-API settles only after compute stops; never race descriptor cleanup.
+                signal?.throwIfAborted();
+                if (error?.code === "too-large") {
+                    throw new FsSafeError("too-large", `SHA-256 input exceeds ${maxBytes} bytes`, { cause: error });
+                }
+                throw error;
+            }
+            finally {
+                // Node retains composite signals while N-API's abort listener is attached.
+                if (nativeSignal)
+                    nativeSignal.onabort = null;
+            }
         }
-        hash.update(buffer.subarray(0, bytesRead));
-        position += bytesRead;
-        // A full small buffer can mean growth or a virtual file with an unhelpful size.
-        if (bytesRead === buffer.length && buffer.length < 64 * 1024) {
-            buffer = Buffer.allocUnsafe(Math.min(64 * 1024, maxBytes + 1));
+        const hash = createHash("sha256");
+        const scratch = __addDisposableResource(env_1, new HashScratch(Math.min(256 * 1024, Math.max(1, stat.size + 1), maxBytes + 1)), false);
+        let buffer = scratch.buffer;
+        let position = 0;
+        while (true) {
+            signal?.throwIfAborted();
+            const length = Math.min(buffer.length, maxBytes - position + 1);
+            const { bytesRead } = await handle.read(buffer, 0, length, position);
+            signal?.throwIfAborted();
+            if (bytesRead > maxBytes - position) {
+                throw new FsSafeError("too-large", `SHA-256 input exceeds ${maxBytes} bytes`);
+            }
+            if (bytesRead === 0) {
+                return { bytes: position, digest: hash.digest("hex") };
+            }
+            hash.update(buffer.subarray(0, bytesRead));
+            position += bytesRead;
+            // A full small buffer can mean growth or a virtual file with an unhelpful size.
+            if (bytesRead === buffer.length && buffer.length < 64 * 1024) {
+                buffer = scratch.grow(Math.min(64 * 1024, maxBytes + 1));
+            }
         }
     }
+    catch (e_1) {
+        env_1.error = e_1;
+        env_1.hasError = true;
+    }
+    finally {
+        __disposeResources(env_1);
+    }
 }
 function hashPathIdentity(filePath, afterOpen = false) {
     const stat = fsSync.lstatSync(filePath, { bigint: true });
@@ -99,14 +192,20 @@ async function hashPath(filePath, options) {
     catch (error) {
         rethrowHashOpenError(error);
     }
+    let completed = false;
     try {
         options.signal?.throwIfAborted();
         const opened = await inspectFileIdentity(() => hashDescriptorIdentity(handle.fd), before);
         await inspectFileIdentity(() => hashPathIdentity(filePath, true), opened);
-        return await hashFileHandle(handle, getNativeBinding(), options);
+        const result = await hashFileHandle(handle, getNativeBinding(), options);
+        completed = true;
+        return result;
     }
     finally {
-        await handle.close().catch(() => undefined);
+        if (completed)
+            await handle.close();
+        else
+            await handle.close().catch(() => undefined);
     }
 }
 export async function sha256File(input, options = {}) {
@@ -117,34 +216,45 @@ export async function sha256File(input, options = {}) {
         : await hashFileHandle(input, getNativeBinding(), normalized);
 }
 function hashDescriptorSync(fd, { maxBytes = Infinity, signal }) {
-    signal?.throwIfAborted();
-    const stat = fsSync.fstatSync(fd);
-    if (!stat.isFile()) {
-        throw new FsSafeError("not-file", "SHA-256 input is not a regular file");
-    }
-    if (stat.size > maxBytes) {
-        throw new FsSafeError("too-large", `SHA-256 input exceeds ${maxBytes} bytes`);
-    }
-    const hash = createHash("sha256");
-    let buffer = Buffer.allocUnsafe(Math.min(256 * 1024, Math.max(1, stat.size + 1), maxBytes + 1));
-    let position = 0;
-    while (true) {
-        signal?.throwIfAborted();
-        const length = Math.min(buffer.length, maxBytes - position + 1);
-        const bytesRead = fsSync.readSync(fd, buffer, 0, length, position);
+    const env_2 = { stack: [], error: void 0, hasError: false };
+    try {
         signal?.throwIfAborted();
-        if (bytesRead > maxBytes - position) {
-            throw new FsSafeError("too-large", `SHA-256 input exceeds ${maxBytes} bytes`);
+        const stat = fsSync.fstatSync(fd);
+        if (!stat.isFile()) {
+            throw new FsSafeError("not-file", "SHA-256 input is not a regular file");
         }
-        if (bytesRead === 0) {
-            return { bytes: position, digest: hash.digest("hex") };
+        if (stat.size > maxBytes) {
+            throw new FsSafeError("too-large", `SHA-256 input exceeds ${maxBytes} bytes`);
         }
-        hash.update(buffer.subarray(0, bytesRead));
-        position += bytesRead;
-        if (bytesRead === buffer.length && buffer.length < 64 * 1024) {
-            buffer = Buffer.allocUnsafe(Math.min(64 * 1024, maxBytes + 1));
+        const hash = createHash("sha256");
+        const scratch = __addDisposableResource(env_2, new HashScratch(Math.min(256 * 1024, Math.max(1, stat.size + 1), maxBytes + 1)), false);
+        let buffer = scratch.buffer;
+        let position = 0;
+        while (true) {
+            signal?.throwIfAborted();
+            const length = Math.min(buffer.length, maxBytes - position + 1);
+            const bytesRead = fsSync.readSync(fd, buffer, 0, length, position);
+            signal?.throwIfAborted();
+            if (bytesRead > maxBytes - position) {
+                throw new FsSafeError("too-large", `SHA-256 input exceeds ${maxBytes} bytes`);
+            }
+            if (bytesRead === 0) {
+                return { bytes: position, digest: hash.digest("hex") };
+            }
+            hash.update(buffer.subarray(0, bytesRead));
+            position += bytesRead;
+            if (bytesRead === buffer.length && buffer.length < 64 * 1024) {
+                buffer = scratch.grow(Math.min(64 * 1024, maxBytes + 1));
+            }
         }
     }
+    catch (e_2) {
+        env_2.error = e_2;
+        env_2.hasError = true;
+    }
+    finally {
+        __disposeResources(env_2);
+    }
 }
 function hashPathSync(filePath, options) {
     assertNoWindowsPathAlias(filePath, "filesystem", "SHA-256 path uses a Windows filesystem namespace alias");
@@ -157,17 +267,23 @@ function hashPathSync(filePath, options) {
     catch (error) {
         rethrowHashOpenError(error);
     }
+    let completed = false;
     try {
         options.signal?.throwIfAborted();
         const opened = inspectFileIdentitySync(() => hashDescriptorIdentity(fd), before);
         inspectFileIdentitySync(() => hashPathIdentity(filePath, true), opened);
-        return hashDescriptorSync(fd, options);
+        const result = hashDescriptorSync(fd, options);
+        completed = true;
+        return result;
     }
     finally {
         try {
             fsSync.closeSync(fd);
         }
-        catch { /* Preserve the hashing outcome. */ }
+        catch (error) {
+            if (completed)
+                throw error;
+        }
     }
 }
 /** Hash synchronously from offset zero, retaining ownership and position of a borrowed fd. */

package/node_modules/@openclaw/fs-safe/dist/file-identity.d.ts

@@ -5,4 +5,3 @@ export type FileIdentityStat = {
 export declare function sha256Hex(data: string | Buffer, encoding?: BufferEncoding): string;
 export declare function sameFileIdentity(left: FileIdentityStat, right: FileIdentityStat, platform?: NodeJS.Platform): boolean;
 export declare function sameFileIdentityForCleanup(left: FileIdentityStat, right: FileIdentityStat, platform?: NodeJS.Platform): boolean;
-//# sourceMappingURL=file-identity.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/file-identity.js

@@ -23,12 +23,26 @@ export function sameFileIdentity(left, right, platform = process.platform) {
         !isStatValueProvablyDifferent(left.ino, right.ino, platform));
 }
 export function sameFileIdentityForCleanup(left, right, platform = process.platform) {
+    if (platform !== "win32") {
+        return sameStatValue(left.dev, right.dev) && sameStatValue(left.ino, right.ino);
+    }
     // A zero Windows device or inode is unknown, not proof that a pathname still
     // names the object we created. Cleanup must fail closed rather than delete a
     // replacement that happens to share the known half of the identity.
-    if (platform === "win32" &&
-        (isZero(left.dev) || isZero(left.ino) || isZero(right.dev) || isZero(right.ino))) {
+    // Capture each potentially adapter-backed observation once. This strengthens
+    // the fence against changing accessors; exact legacy getter traces are not a
+    // compatibility contract.
+    const leftDev = left.dev;
+    if (isZero(leftDev))
         return false;
-    }
-    return sameStatValue(left.dev, right.dev) && sameStatValue(left.ino, right.ino);
+    const leftIno = left.ino;
+    if (isZero(leftIno))
+        return false;
+    const rightDev = right.dev;
+    if (isZero(rightDev))
+        return false;
+    const rightIno = right.ino;
+    if (isZero(rightIno))
+        return false;
+    return sameStatValue(leftDev, rightDev) && sameStatValue(leftIno, rightIno);
 }

package/node_modules/@openclaw/fs-safe/dist/file-lock-sync-acquisition.d.ts

@@ -0,0 +1,22 @@
+import type { FileLockSyncHandle } from "./file-lock-sync.js";
+import type { SidecarLockCompromisedInfo, SidecarLockRetryOptions } from "./sidecar-lock-types.js";
+/** Owns local arbitration and retry state, independently of filesystem authority. */
+export declare class SyncLockAcquisition {
+    #private;
+    readonly lockPath: string;
+    readonly normalizedTargetPath: string;
+    private readonly retry;
+    private readonly timeoutMs;
+    constructor(lockPath: string, normalizedTargetPath: string, retry: SidecarLockRetryOptions, timeoutMs: number | undefined);
+    get owns(): boolean;
+    hasToken(): boolean;
+    assert(): void;
+    reserve(): void;
+    release(): void;
+    run<T>(callback: () => T): T;
+    waitForRetry(): void;
+    retryDenial(error: unknown): boolean;
+    monitor(held: {
+        timer?: NodeJS.Timeout;
+    }, handle: FileLockSyncHandle, callback: ((info: SidecarLockCompromisedInfo) => void) | undefined, interval: number | undefined, receiver: object, recordTimer?: (timer: NodeJS.Timeout) => void): void;
+}