@openclaw/openshell-sandbox 2026.9.5 → 2026.9.6

package/node_modules/@openclaw/fs-safe/dist/regular-file.js

@@ -5,10 +5,10 @@ import { readFileDescriptorBoundedSync, readFileHandleBounded } from "./bounded-
 import { normalizeMaxBytes } from "./byte-budget.js";
 import { assertNoUnsafeDeviceReadPath } from "./device-path.js";
 import { FsSafeError } from "./errors.js";
-import { inspectFileIdentity, inspectFileIdentitySync } from "./strict-file-identity.js";
+import { inspectFileIdentitySync } from "./strict-file-identity.js";
 import { isNotFoundPathError } from "./path.js";
 import { resolveReadOpenFlags } from "./read-open-flags.js";
-import { assertNoSymlinkParents, assertNoSymlinkParentsSync } from "./symlink-parents.js";
+import { assertNoSymlinkParentsSync } from "./symlink-parents.js";
 import { getFsSafeTestHooks } from "./test-hooks.js";
 import { isNonRegularWriteOpenError, isNonRegularWriteOpenErrorSync, resolveNonblockingWriteFlag, } from "./write-open-flags.js";
 import { assertNoWindowsPathAlias, resolvePathPreservingWindowsRoot, } from "./windows-path-alias.js";
@@ -30,21 +30,7 @@ function translateBoundedReadOverflow(error, filePath, maxBytes) {
     throw error;
 }
 export async function statRegularFile(filePath) {
-    assertNoWindowsPathAlias(filePath, "filesystem", "file path uses a Windows filesystem namespace alias");
-    let stat;
-    try {
-        stat = fsSync.lstatSync(filePath);
-    }
-    catch (err) {
-        if (isNotFoundPathError(err)) {
-            return { missing: true };
-        }
-        throw err;
-    }
-    if (stat.isSymbolicLink() || !stat.isFile()) {
-        throw new Error("path must be a regular file");
-    }
-    return { missing: false, stat };
+    return statRegularFileSync(filePath);
 }
 export function statRegularFileSync(filePath) {
     assertNoWindowsPathAlias(filePath, "filesystem", "file path uses a Windows filesystem namespace alias");
@@ -64,18 +50,7 @@ export function statRegularFileSync(filePath) {
     return { missing: false, stat };
 }
 export async function readRegularFile(params) {
-    const maxBytes = normalizeMaxBytes(params.maxBytes);
-    const filePath = params.filePath;
-    assertNoWindowsPathAlias(filePath, "filesystem", "file path uses a Windows filesystem namespace alias");
-    assertNoUnsafeDeviceReadPath(filePath);
-    const before = await inspectFileIdentity(async () => {
-        const stat = fsSync.lstatSync(filePath, { bigint: true });
-        assertRegularReadStat(stat, filePath, true);
-        return stat;
-    }).catch((error) => throwReadPreviewError(error, filePath));
-    if (maxBytes !== undefined && before.size > maxBytes) {
-        throw regularFileTooLargeError(filePath, maxBytes);
-    }
+    const { filePath, maxBytes, before } = prepareRegularRead(params);
     let handle;
     try {
         handle = await fs.open(filePath, resolveReadOpenFlags());
@@ -87,28 +62,7 @@ export async function readRegularFile(params) {
         throw err;
     }
     try {
-        const stat = fsSync.fstatSync(handle.fd);
-        const identity = await inspectFileIdentity(async () => {
-            const exact = fsSync.fstatSync(handle.fd, { bigint: true });
-            assertRegularReadStat(exact, filePath);
-            return exact;
-        }, before);
-        try {
-            await inspectFileIdentity(async () => {
-                const current = fsSync.lstatSync(filePath, { bigint: true });
-                assertRegularReadStat(current, filePath);
-                return current;
-            }, identity);
-        }
-        catch (err) {
-            if (isNotFoundPathError(err)) {
-                throw new FsSafeError("path-mismatch", `File changed during read: ${filePath}`);
-            }
-            throw err;
-        }
-        if (maxBytes !== undefined && stat.size > maxBytes) {
-            throw regularFileTooLargeError(filePath, maxBytes);
-        }
+        const stat = inspectOpenedRegularRead(handle.fd, filePath, before, maxBytes);
         // With a byte cap, avoid readFile(): a raced file growth would allocate
         // the oversized content before the post-read check could reject it.
         let buffer;
@@ -141,47 +95,7 @@ function assertRegularReadStat(stat, filePath, preview = false) {
         throw new Error(preview ? "path must be a regular file" : `File is not a regular file: ${filePath}`);
     }
 }
-function readOpenedRegularFileSync(params) {
-    const stat = fsSync.fstatSync(params.fd);
-    const identity = inspectFileIdentitySync(() => {
-        const exact = fsSync.fstatSync(params.fd, { bigint: true });
-        assertRegularReadStat(exact, params.filePath);
-        return exact;
-    }, params.preOpenStat);
-    try {
-        inspectFileIdentitySync(() => {
-            const current = fsSync.lstatSync(params.filePath, { bigint: true });
-            assertRegularReadStat(current, params.filePath);
-            return current;
-        }, identity);
-    }
-    catch (error) {
-        if (isNotFoundPathError(error)) {
-            throw new FsSafeError("path-mismatch", `File changed during read: ${params.filePath}`);
-        }
-        throw error;
-    }
-    if (params.maxBytes !== undefined && stat.size > params.maxBytes) {
-        throw regularFileTooLargeError(params.filePath, params.maxBytes);
-    }
-    // Keep capped sync reads incremental for the same reason as async reads:
-    // readFileSync(fd) would buffer a raced oversized file before throwing.
-    let buffer;
-    try {
-        buffer =
-            params.maxBytes === undefined
-                ? fsSync.readFileSync(params.fd)
-                : readFileDescriptorBoundedSync(params.fd, params.maxBytes);
-    }
-    catch (error) {
-        if (params.maxBytes !== undefined) {
-            translateBoundedReadOverflow(error, params.filePath, params.maxBytes);
-        }
-        throw error;
-    }
-    return { buffer, stat };
-}
-export function readRegularFileSync(params) {
+function prepareRegularRead(params) {
     const maxBytes = normalizeMaxBytes(params.maxBytes);
     const filePath = params.filePath;
     assertNoWindowsPathAlias(filePath, "filesystem", "file path uses a Windows filesystem namespace alias");
@@ -200,6 +114,35 @@ export function readRegularFileSync(params) {
     if (maxBytes !== undefined && before.size > maxBytes) {
         throw regularFileTooLargeError(filePath, maxBytes);
     }
+    return { filePath, maxBytes, before };
+}
+function inspectOpenedRegularRead(fd, filePath, preOpenStat, maxBytes) {
+    const stat = fsSync.fstatSync(fd);
+    const identity = inspectFileIdentitySync(() => {
+        const exact = fsSync.fstatSync(fd, { bigint: true });
+        assertRegularReadStat(exact, filePath);
+        return exact;
+    }, preOpenStat);
+    try {
+        inspectFileIdentitySync(() => {
+            const current = fsSync.lstatSync(filePath, { bigint: true });
+            assertRegularReadStat(current, filePath);
+            return current;
+        }, identity);
+    }
+    catch (error) {
+        if (isNotFoundPathError(error)) {
+            throw new FsSafeError("path-mismatch", `File changed during read: ${filePath}`);
+        }
+        throw error;
+    }
+    if (maxBytes !== undefined && stat.size > maxBytes) {
+        throw regularFileTooLargeError(filePath, maxBytes);
+    }
+    return stat;
+}
+export function readRegularFileSync(params) {
+    const { filePath, maxBytes, before } = prepareRegularRead(params);
     let fd;
     try {
         fd = fsSync.openSync(filePath, resolveReadOpenFlags());
@@ -211,12 +154,21 @@ export function readRegularFileSync(params) {
         throw error;
     }
     try {
-        return readOpenedRegularFileSync({
-            fd,
-            filePath,
-            preOpenStat: before,
-            maxBytes,
-        });
+        const stat = inspectOpenedRegularRead(fd, filePath, before, maxBytes);
+        // Keep capped reads incremental so raced growth cannot allocate unbounded content.
+        let buffer;
+        try {
+            buffer = maxBytes === undefined
+                ? fsSync.readFileSync(fd)
+                : readFileDescriptorBoundedSync(fd, maxBytes);
+        }
+        catch (error) {
+            if (maxBytes !== undefined) {
+                translateBoundedReadOverflow(error, filePath, maxBytes);
+            }
+            throw error;
+        }
+        return { buffer, stat };
     }
     finally {
         fsSync.closeSync(fd);
@@ -237,12 +189,27 @@ function throwAppendIdentityError(error, filePath) {
     }
     throw error;
 }
-export async function appendRegularFile(options) {
+function captureAppendOptions(options) {
     const filePath = options.filePath;
     assertNoWindowsPathAlias(filePath, "filesystem", "file path uses a Windows filesystem namespace alias");
-    if (options.rejectSymlinkParents === true) {
+    return {
+        filePath, content: options.content, encoding: options.encoding ?? "utf8",
+        mode: options.mode ?? 0o600, maxFileBytes: options.maxFileBytes,
+        rejectSymlinkParents: options.rejectSymlinkParents,
+    };
+}
+function inspectAppendPath(filePath) {
+    const stat = fsSync.lstatSync(filePath, { bigint: true });
+    if (stat.isSymbolicLink())
+        throw new Error(`Refusing to append through symlink: ${filePath}`);
+    if (!stat.isFile())
+        throw new Error(`Refusing to append to non-file: ${filePath}`);
+    return stat;
+}
+function prepareRegularAppend(filePath, rejectSymlinkParents) {
+    if (rejectSymlinkParents === true) {
         const resolvedDir = resolvePathPreservingWindowsRoot(path.dirname(filePath));
-        await assertNoSymlinkParents({
+        assertNoSymlinkParentsSync({
             rootDir: path.parse(resolvedDir).root,
             targetPath: resolvedDir,
             allowMissing: false,
@@ -251,35 +218,45 @@ export async function appendRegularFile(options) {
             messagePrefix: "Refusing to append under",
         });
     }
-    let preOpenStat;
     try {
-        preOpenStat = await inspectFileIdentity(async () => {
-            const stat = fsSync.lstatSync(filePath, { bigint: true });
-            if (stat.isSymbolicLink()) {
-                throw new Error(`Refusing to append through symlink: ${filePath}`);
-            }
-            if (!stat.isFile()) {
-                throw new Error(`Refusing to append to non-file: ${filePath}`);
-            }
-            return stat;
-        });
+        return inspectFileIdentitySync(() => inspectAppendPath(filePath));
     }
     catch (error) {
         if (!isNotFoundPathError(error))
             throw error;
     }
-    const contentBytes = Buffer.isBuffer(options.content)
-        ? options.content.byteLength
-        : Buffer.byteLength(options.content, options.encoding ?? "utf8");
-    if (options.maxFileBytes !== undefined &&
-        Number(preOpenStat?.size ?? 0n) + contentBytes > options.maxFileBytes) {
+}
+function inspectOpenedRegularAppend(fd, filePath, preOpenStat) {
+    try {
+        const identity = inspectFileIdentitySync(() => {
+            const stat = fsSync.fstatSync(fd, { bigint: true });
+            assertRegularAppendStat(stat, filePath);
+            return stat;
+        }, preOpenStat);
+        inspectFileIdentitySync(() => {
+            const current = fsSync.lstatSync(filePath, { bigint: true });
+            assertRegularAppendStat(current, filePath);
+            return current;
+        }, identity);
+        return identity;
+    }
+    catch (error) {
+        throwAppendIdentityError(error, filePath);
+    }
+}
+export async function appendRegularFile(options) {
+    const { filePath, content, encoding, mode, maxFileBytes, rejectSymlinkParents } = captureAppendOptions(options);
+    const preOpenStat = prepareRegularAppend(filePath, rejectSymlinkParents);
+    const contentBytes = Buffer.isBuffer(content) ? content.byteLength : Buffer.byteLength(content, encoding);
+    if (maxFileBytes !== undefined &&
+        Number(preOpenStat?.size ?? 0n) + contentBytes > maxFileBytes) {
         return;
     }
     await getFsSafeTestHooks()?.beforeRegularFileAppendOpen?.(filePath);
     const flags = resolveRegularFileAppendFlags();
     let handle;
     try {
-        handle = await fs.open(filePath, flags, options.mode ?? 0o600);
+        handle = await fs.open(filePath, flags, mode);
     }
     catch (error) {
         if (await isNonRegularWriteOpenError(error, filePath, flags)) {
@@ -288,30 +265,14 @@ export async function appendRegularFile(options) {
         throw error;
     }
     try {
-        let identity;
-        try {
-            identity = await inspectFileIdentity(async () => {
-                const stat = fsSync.fstatSync(handle.fd, { bigint: true });
-                assertRegularAppendStat(stat, filePath);
-                return stat;
-            }, preOpenStat);
-            await inspectFileIdentity(async () => {
-                const current = fsSync.lstatSync(filePath, { bigint: true });
-                assertRegularAppendStat(current, filePath);
-                return current;
-            }, identity);
-        }
-        catch (error) {
-            throwAppendIdentityError(error, filePath);
-        }
-        if (options.maxFileBytes !== undefined &&
-            Number(identity.size) + contentBytes > options.maxFileBytes) {
+        const identity = inspectOpenedRegularAppend(handle.fd, filePath, preOpenStat);
+        if (maxFileBytes !== undefined &&
+            Number(identity.size) + contentBytes > maxFileBytes) {
             return;
         }
-        const mode = options.mode ?? 0o600;
         // Tighten before writing; restore explicit special bits only after content is complete.
         await handle.chmod(mode);
-        await handle.appendFile(options.content, options.encoding ?? "utf8");
+        await handle.appendFile(content, encoding);
         if (mode & 0o7000)
             await handle.chmod(mode);
     }
@@ -320,48 +281,18 @@ export async function appendRegularFile(options) {
     }
 }
 export function appendRegularFileSync(options) {
-    const filePath = options.filePath;
-    assertNoWindowsPathAlias(filePath, "filesystem", "file path uses a Windows filesystem namespace alias");
-    if (options.rejectSymlinkParents === true) {
-        const resolvedDir = resolvePathPreservingWindowsRoot(path.dirname(filePath));
-        assertNoSymlinkParentsSync({
-            rootDir: path.parse(resolvedDir).root,
-            targetPath: resolvedDir,
-            allowMissing: false,
-            allowRootChildSymlink: true,
-            requireDirectories: true,
-            messagePrefix: "Refusing to append under",
-        });
-    }
-    let preOpenStat;
-    try {
-        preOpenStat = inspectFileIdentitySync(() => {
-            const stat = fsSync.lstatSync(filePath, { bigint: true });
-            if (stat.isSymbolicLink()) {
-                throw new Error(`Refusing to append through symlink: ${filePath}`);
-            }
-            if (!stat.isFile()) {
-                throw new Error(`Refusing to append to non-file: ${filePath}`);
-            }
-            return stat;
-        });
-    }
-    catch (error) {
-        if (!isNotFoundPathError(error))
-            throw error;
-    }
-    const contentBuffer = typeof options.content === "string"
-        ? Buffer.from(options.content, options.encoding ?? "utf8")
-        : Buffer.from(options.content);
-    if (options.maxFileBytes !== undefined &&
-        Number(preOpenStat?.size ?? 0n) + contentBuffer.byteLength > options.maxFileBytes) {
+    const { filePath, content, encoding, mode, maxFileBytes, rejectSymlinkParents } = captureAppendOptions(options);
+    const preOpenStat = prepareRegularAppend(filePath, rejectSymlinkParents);
+    const contentBuffer = typeof content === "string" ? Buffer.from(content, encoding) : Buffer.from(content);
+    if (maxFileBytes !== undefined &&
+        Number(preOpenStat?.size ?? 0n) + contentBuffer.byteLength > maxFileBytes) {
         return;
     }
     getFsSafeTestHooks()?.beforeRegularFileAppendOpenSync?.(filePath);
     const flags = resolveRegularFileAppendFlags();
     let fd;
     try {
-        fd = fsSync.openSync(filePath, flags, options.mode ?? 0o600);
+        fd = fsSync.openSync(filePath, flags, mode);
     }
     catch (error) {
         if (isNonRegularWriteOpenErrorSync(error, filePath, flags)) {
@@ -370,27 +301,11 @@ export function appendRegularFileSync(options) {
         throw error;
     }
     try {
-        let identity;
-        try {
-            identity = inspectFileIdentitySync(() => {
-                const stat = fsSync.fstatSync(fd, { bigint: true });
-                assertRegularAppendStat(stat, filePath);
-                return stat;
-            }, preOpenStat);
-            inspectFileIdentitySync(() => {
-                const current = fsSync.lstatSync(filePath, { bigint: true });
-                assertRegularAppendStat(current, filePath);
-                return current;
-            }, identity);
-        }
-        catch (error) {
-            throwAppendIdentityError(error, filePath);
-        }
-        if (options.maxFileBytes !== undefined &&
-            Number(identity.size) + contentBuffer.byteLength > options.maxFileBytes) {
+        const identity = inspectOpenedRegularAppend(fd, filePath, preOpenStat);
+        if (maxFileBytes !== undefined &&
+            Number(identity.size) + contentBuffer.byteLength > maxFileBytes) {
             return;
         }
-        const mode = options.mode ?? 0o600;
         fsSync.fchmodSync(fd, mode);
         fsSync.appendFileSync(fd, contentBuffer);
         if (mode & 0o7000)

package/node_modules/@openclaw/fs-safe/dist/replace-directory.d.ts

@@ -4,4 +4,3 @@ export type ReplaceDirectoryAtomicOptions = {
     backupPrefix?: string;
 };
 export declare function replaceDirectoryAtomic(options: ReplaceDirectoryAtomicOptions): Promise<void>;
-//# sourceMappingURL=replace-directory.d.ts.map