@openclaw/openshell-sandbox 2026.9.5 → 2026.9.7

package/node_modules/@openclaw/fs-safe/dist/move-path.js

@@ -2,16 +2,15 @@ import { randomUUID } from "node:crypto";
 import fsSync, { constants as fsConstants } from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
-import { createAsyncDirectoryGuard, inspectDirectoryIdentitySync } from "./directory-guard.js";
+import { assertSyncDirectoryGuard, createAsyncDirectoryGuard } from "./directory-guard.js";
 import { FsSafeError } from "./errors.js";
 import { guardedRename } from "./guarded-mutation.js";
-import { assertSourceStillMatches, cleanupCopiedEntry, createCleanupCopiedEntryState, entryIdentity, sameIdentity, sourceChangedError, } from "./move-path-cleanup.js";
+import { assertSourceStillMatches, cleanupCopiedEntry, createCleanupCopiedEntryState, entryIdentity, inspectSourceDirectory, inspectSourceEntry, sameIdentity, sourceChangedError, } from "./move-path-cleanup.js";
 import { resolveReadOpenFlags } from "./read-open-flags.js";
 import { realpathSync } from "./realpath.js";
-import { cleanupPinnedFilePath } from "./replace-file-temp-owner.js";
+import { cleanupPinnedFilePath } from "./file-cleanup.js";
 import { createMoveStageOwner } from "./move-path-stage.js";
-import { admitStandalonePublicationPath } from "./standalone-publication-path.js";
-import { assertNoWindowsPathAlias } from "./windows-path-alias.js";
+import { admitStandalonePublicationPath, assertNoWindowsPathAlias } from "./windows-path-alias.js";
 export function moveCopyFallbackReasonForRenameError(error, platform = process.platform) {
     const code = error?.code;
     if (code === "EXDEV") {
@@ -57,7 +56,7 @@ function isSameOrDescendant(parentPath, candidatePath) {
         (!path.isAbsolute(relative) && !relative.startsWith(`..${path.sep}`) && relative !== ".."));
 }
 async function assertCopyDestinationOutsideSource(sourcePath, targetPath, expectedIdentity) {
-    const sourceStat = fsSync.lstatSync(sourcePath);
+    const sourceStat = inspectSourceEntry(sourcePath, () => fsSync.lstatSync(sourcePath, { bigint: true }));
     const sourceIdentity = entryIdentity(sourceStat);
     if (expectedIdentity && !sameIdentity(expectedIdentity, sourceIdentity)) {
         throw sourceChangedError(sourcePath);
@@ -80,7 +79,7 @@ async function assertCopyDestinationOutsideSource(sourcePath, targetPath, expect
     return sourceIdentity;
 }
 function modeBits(mode) {
-    return mode & 0o777;
+    return Number(mode & 511n);
 }
 async function chmodDirectoryPinned(directoryPath, mode) {
     if (process.platform === "win32") {
@@ -120,21 +119,25 @@ async function copyRegularFilePinned(params) {
         throw error;
     }
     try {
-        const openedStat = fsSync.fstatSync(sourceHandle.fd);
+        const inspectOpenedSource = () => inspectSourceEntry(params.from, () => {
+            const stat = fsSync.fstatSync(sourceHandle.fd, { bigint: true });
+            if (params.rejectHardlinks && stat.nlink > 1n)
+                throw hardlinkedSourceError(params.from);
+            if (!stat.isFile())
+                throw sourceChangedError(params.from);
+            return stat;
+        });
+        const openedStat = inspectOpenedSource();
         openedIdentity = entryIdentity(openedStat);
-        if (params.rejectHardlinks && openedStat.nlink > 1) {
-            throw hardlinkedSourceError(params.from);
-        }
         const openAdvancedWindowsCtime = process.platform === "win32" &&
             params.identity.dev === openedIdentity.dev &&
             params.identity.ino === openedIdentity.ino &&
             params.identity.mode === openedIdentity.mode &&
             params.identity.nlink === openedIdentity.nlink &&
             params.identity.size === openedIdentity.size &&
-            params.identity.mtimeMs === openedIdentity.mtimeMs &&
-            openedIdentity.ctimeMs >= params.identity.ctimeMs;
-        if (!openedStat.isFile() ||
-            (!sameIdentity(params.identity, openedIdentity) && !openAdvancedWindowsCtime)) {
+            params.identity.mtimeNs === openedIdentity.mtimeNs &&
+            openedIdentity.ctimeNs >= params.identity.ctimeNs;
+        if (!sameIdentity(params.identity, openedIdentity) && !openAdvancedWindowsCtime) {
             throw sourceChangedError(params.from);
         }
         await assertSourceStillMatches(params.from, openedIdentity);
@@ -154,11 +157,7 @@ async function copyRegularFilePinned(params) {
             }
             // Re-check the opened source before the staged tree can be committed. If
             // it changed while we copied, the caller should retry the move.
-            const finalSourceStat = fsSync.fstatSync(sourceHandle.fd);
-            if (params.rejectHardlinks && finalSourceStat.nlink > 1) {
-                throw hardlinkedSourceError(params.from);
-            }
-            if (!sameIdentity(openedIdentity, entryIdentity(finalSourceStat))) {
+            if (!sameIdentity(openedIdentity, inspectOpenedSource())) {
                 throw sourceChangedError(params.from);
             }
             await destinationHandle.chmod(modeBits(params.mode));
@@ -178,21 +177,8 @@ async function copyRegularFilePinned(params) {
     }
     return openedIdentity;
 }
-function inspectSourceDirectory(sourcePath, expected) {
-    try {
-        return inspectDirectoryIdentitySync(sourcePath, expected);
-    }
-    catch (error) {
-        const code = error?.code;
-        if (code === "ENOENT" || code === "ENOTDIR" ||
-            (error instanceof FsSafeError && (error.code === "path-mismatch" || error.code === "not-file"))) {
-            throw sourceChangedError(sourcePath);
-        }
-        throw error;
-    }
-}
 async function copyEntryWithManifest(from, to, options, expectedIdentity) {
-    const sourceStat = fsSync.lstatSync(from);
+    const sourceStat = inspectSourceEntry(from, () => fsSync.lstatSync(from, { bigint: true }));
     const identity = entryIdentity(sourceStat);
     if (expectedIdentity && !sameIdentity(expectedIdentity, identity)) {
         throw sourceChangedError(from);
@@ -208,8 +194,7 @@ async function copyEntryWithManifest(from, to, options, expectedIdentity) {
         return { ...identity, kind: "leaf" };
     }
     if (sourceStat.isDirectory()) {
-        const directoryStat = inspectSourceDirectory(from);
-        const directoryIdentity = Object.freeze({ dev: directoryStat.dev, ino: directoryStat.ino });
+        const directoryIdentity = Object.freeze({ dev: sourceStat.dev, ino: sourceStat.ino });
         await fs.mkdir(to, { mode: modeBits(sourceStat.mode) || 0o755 });
         options.onCreated?.(fsSync.lstatSync(to, { bigint: true }));
         const children = [];
@@ -226,6 +211,7 @@ async function copyEntryWithManifest(from, to, options, expectedIdentity) {
                 name: child,
                 manifest: await copyEntryWithManifest(path.join(from, child), path.join(to, child), {
                     sourceHardlinks: options.sourceHardlinks, budget: options.budget,
+                    aliases: options.aliases,
                 }),
             });
         }
@@ -241,9 +227,13 @@ async function copyEntryWithManifest(from, to, options, expectedIdentity) {
     if (!sourceStat.isFile()) {
         throw new Error(`Refusing to move non-file path with copy fallback: ${from}`);
     }
-    if (options.sourceHardlinks === "reject" && sourceStat.nlink > 1) {
+    if (options.sourceHardlinks === "reject" && sourceStat.nlink > 1n) {
         throw hardlinkedSourceError(from);
     }
+    const aliasKey = options.aliases && identity.nlink > 1n ? `${identity.dev}:${identity.ino}` : undefined;
+    const alias = aliasKey ? options.aliases.get(aliasKey) : undefined;
+    if (alias && !sameIdentity(alias, identity))
+        throw sourceChangedError(from);
     const copiedIdentity = await copyRegularFilePinned({
         from,
         identity,
@@ -252,7 +242,14 @@ async function copyEntryWithManifest(from, to, options, expectedIdentity) {
         to,
         onCreated: options.onCreated,
     });
-    return { ...copiedIdentity, kind: "leaf" };
+    // A permitted Windows open advances every name's ctime. Share its receipt
+    // only after the preceding fingerprint and this complete copy were verified.
+    if (alias)
+        return Object.assign(alias, copiedIdentity);
+    const manifest = { ...copiedIdentity, kind: "leaf" };
+    if (aliasKey)
+        options.aliases.set(aliasKey, manifest);
+    return manifest;
 }
 function assertSynchronousResult(returned, name) {
     if (returned !== undefined) {
@@ -275,13 +272,13 @@ export async function movePathWithCopyFallback(options) {
     const callerPublished = options.onDestinationPublished;
     let assertionRejected = false;
     let destinationPublished = false;
-    const assertBeforeMutation = () => {
-        assertSynchronousResult(callerMutationAssert?.(), "assertBeforeMutation");
+    const assertBeforeMutation = callerMutationAssert == null ? undefined : () => {
+        assertSynchronousResult(callerMutationAssert(), "assertBeforeMutation");
     };
     const assertBeforeRename = () => {
         try {
             assertSynchronousResult(callerRenameAssert?.(), "assertBeforeRename");
-            assertBeforeMutation();
+            assertBeforeMutation?.();
         }
         catch (error) {
             assertionRejected = true;
@@ -332,6 +329,29 @@ export async function movePathWithCopyFallback(options) {
         // never become the published target; the copy loop fences nlink again.
     }
     const sourceIdentity = await assertCopyDestinationOutsideSource(sourcePath, targetPath);
+    const sourceParentPath = path.dirname(sourcePath);
+    const sourceParent = assertBeforeMutation || callerRenameAssert || callerPublished
+        ? await createAsyncDirectoryGuard(realpathSync.native(sourceParentPath), { bigint: true })
+        : undefined;
+    const assertSourceParent = sourceParent ? () => {
+        try {
+            if (realpathSync.native(sourceParentPath) !== sourceParent.realPath)
+                throw sourceChangedError(sourcePath);
+            assertSyncDirectoryGuard(sourceParent);
+        }
+        catch (error) {
+            const code = error?.code;
+            if (code === "ENOENT" || code === "ENOTDIR" || code === "ELOOP" ||
+                (error instanceof FsSafeError && (error.code === "path-mismatch" || error.code === "not-file"))) {
+                throw sourceChangedError(sourcePath);
+            }
+            throw error;
+        }
+    } : undefined;
+    const assertBeforeCleanup = assertSourceParent ? () => {
+        assertBeforeMutation?.();
+        assertSourceParent();
+    } : undefined;
     const targetDir = path.dirname(targetPath);
     const staged = path.join(targetDir, `.fs-safe-move-${process.pid}-${randomUUID()}.tmp`);
     const stage = await createMoveStageOwner(staged);
@@ -339,6 +359,7 @@ export async function movePathWithCopyFallback(options) {
         const manifest = await copyEntryWithManifest(sourcePath, staged, {
             sourceHardlinks: rejectHardlinks ? "reject" : "allow",
             onCreated: stage.record,
+            ...(!rejectHardlinks && process.platform === "win32" ? { aliases: new Map() } : {}),
             ...(rejectHardlinks ? { budget: { discovered: 1 } } : {}),
         }, sourceIdentity);
         const cleanupState = createCleanupCopiedEntryState(sourcePath, manifest);
@@ -355,7 +376,8 @@ export async function movePathWithCopyFallback(options) {
                 onRenamed();
             },
         });
-        const cleanupResult = await cleanupCopiedEntry(sourcePath, manifest, cleanupState, assertBeforeMutation);
+        assertSourceParent?.();
+        const cleanupResult = await cleanupCopiedEntry(sourcePath, manifest, cleanupState, assertBeforeCleanup);
         if (cleanupResult === "stale") {
             throw sourceChangedError(sourcePath);
         }

package/node_modules/@openclaw/fs-safe/dist/mutation-authority.d.ts

@@ -6,4 +6,3 @@ export declare class MutationAuthorityError extends FsSafeError {
 export declare function assertSynchronousCallbackResult(returned: unknown, name: string): void;
 export declare function composeMutationAssertions(defaultAssertion?: () => void, callAssertion?: () => void): (() => void) | undefined;
 export declare function rethrowMutationAuthorityError(error: unknown): never;
-//# sourceMappingURL=mutation-authority.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/mutation-authority.js

@@ -1,3 +1,4 @@
+import { types } from "node:util";
 import { FsSafeError } from "./errors.js";
 export class MutationAuthorityError extends FsSafeError {
     rejection;
@@ -14,6 +15,10 @@ export function assertSynchronousCallbackResult(returned, name) {
         void Promise.resolve(returned).catch(() => undefined);
         throw new TypeError(`${name} must be synchronous`);
     }
+    // A generator returns its iterator before running the callback body.
+    if (types.isGeneratorObject(returned)) {
+        throw new TypeError(`${name} must be synchronous`);
+    }
 }
 export function composeMutationAssertions(defaultAssertion, callAssertion) {
     if (!defaultAssertion && !callAssertion)

package/node_modules/@openclaw/fs-safe/dist/native-binding.d.ts

@@ -1,6 +1,15 @@
+import type { RetainedFileResult } from "./retained-file-types.js";
+export interface NativeRetainedFile {
+    readonly admission: RetainedFileResult | {
+        status: "retained";
+        identity: string;
+    };
+    settle(remove: boolean): RetainedFileResult;
+}
 import type { TarMeterLimits } from "./archive-limits.js";
 import type { ArchiveMemberKind } from "./archive-plan.js";
 import type { CopyCloneMode } from "./copy-policy.js";
+import type { WindowsAceFlags } from "./owner-dacl.js";
 export interface NativeFileHash {
     bytes: number;
     digest: string;
@@ -20,6 +29,10 @@ export interface NativeDirectoryObservation {
     ino: bigint;
     realPath: string;
 }
+export interface NativeDirectoryFdObservation extends NativeDirectoryObservation {
+    mode: bigint;
+    nlink: bigint;
+}
 export interface NativeArchiveEntry {
     index: number;
     path: string;
@@ -54,16 +67,7 @@ export interface NativeWindowsAccessControlEntry {
     sid: string;
     mask: number;
     aceType: string;
-    flags: {
-        raw: number;
-        objectInherit: boolean;
-        containerInherit: boolean;
-        noPropagateInherit: boolean;
-        inheritOnly: boolean;
-        inherited: boolean;
-        successfulAccess: boolean;
-        failedAccess: boolean;
-    };
+    flags: WindowsAceFlags;
 }
 export interface NativeWindowsSecurityFacts {
     ownerSid: string;
@@ -85,14 +89,49 @@ export interface NativeWindowsDescriptorSecurityFacts {
     identity: string;
     security: NativeWindowsSecurityFacts;
 }
+export interface NativeWindowsDirectoryReceipt {
+    /** Canonical 64-bit volume serial and all 128 file-ID bits, in Windows byte order. */
+    identity: string;
+}
 export interface NativeDarwinAclFacts {
     state: "absent" | "empty" | "present";
 }
+type NativeTwoPathArgs = [
+    sourceRootFd: number,
+    sourceRelPath: string,
+    targetRootFd: number,
+    targetRelPath: string
+];
 export interface NativeBinding {
+    /** Windows-only, private handle custody; no borrowed/runtime descriptors. */
+    retainWindowsFile?(directory: string, basename: string, parentDev: bigint, parentIno: bigint, dev: bigint, ino: bigint, size: bigint, mtimeNs: bigint, ctimeNs: bigint, sha256: string, maxBytes: number): NativeRetainedFile;
+    watchRegister?(root: string, limit: number, callback: (batch: import("./watch-native.js").NativeWatchWireBatch) => void, persistent: boolean): number;
+    watchConfigure?(id: number, anchors: string[], exclusions: string[]): void;
+    watchAdd?(id: number, directory: {
+        root: string;
+        relative: string;
+        rootDev: bigint;
+        rootIno: bigint;
+        dev: bigint;
+        ino: bigint;
+    }): void;
+    watchTestEvent?(id: number, path: string, flags: number): void;
+    watchUnregister?(id: number): void;
+    watchThreadCount?(): number;
+    watchMemoryStats?(): {
+        registrations: number;
+        pendingSets: number;
+        payloadsLive: number;
+        payloadsCreated: number;
+        payloadsDestroyed: number;
+        threadsafeFunctionsLive: number;
+        threadsafeFunctionsCreated: number;
+        threadsafeFunctionsDestroyed: number;
+    };
     /** Internal: consumes only a descriptor returned by this binding. */
     closeOwnedFd(fd: number): void;
     /** Internal Darwin-only synchronous inspection; the caller retains its fd. */
-    inspectDarwinAcl?(fd: number): NativeDarwinAclFacts;
+    inspectDarwinAcl?(fd: number, inheritanceTarget?: "file" | "directory"): NativeDarwinAclFacts;
     /** POSIX system canonicalization; confinement and identity policy stay with callers. */
     canonicalizePath?(path: string, ordinary: boolean): {
         path?: string;
@@ -100,6 +139,8 @@ export interface NativeBinding {
     };
     /** Internal: exact directory identity and canonical path from one no-follow handle. */
     observeDirectory?(path: string): NativeDirectoryObservation;
+    /** Internal POSIX-only exact name/descriptor observation; the caller retains its fd. */
+    observeDirectoryFd?(fd: number, expectedPath: string): NativeDirectoryFdObservation;
     /** Linux/Windows byte transfer; callers retain both admitted descriptors until settlement. */
     copyFileContents?(sourceFd: number, targetFd: number, signal?: AbortSignal): Promise<void>;
     /** Internal: same private, immutable input ownership as the ZIP buffer reader. */
@@ -115,6 +156,11 @@ export interface NativeBinding {
     readCloneFileMetadata(paths: string[]): Promise<(Buffer | null)[]>;
     probeTreeClone(parentFd: number): "apfs" | "btrfs" | "refs" | "xfs" | "zfs" | null;
     cloneTree(sourceFd: number | null, parentFd: number, basename: string, concurrency: number, signal?: AbortSignal): Promise<void>;
+    openStagedSymlink?(parentFd: number, basename: string): number;
+    stagedSymlinkTarget?(parentFd: number, basename: string, linkFd: number): string;
+    stagedSymlinkMatches?(parentFd: number, basename: string, linkFd: number): boolean;
+    publishStagedSymlink?(parentFd: number, basename: string, linkFd: number, destination: string): void;
+    removeStagedSymlink?(parentFd: number, basename: string, linkFd: number): "removed" | "name-absent" | "preserved";
     createStagedFile?(parentFd: number, basename: string): number;
     stagedFileMatches?(parentFd: number, basename: string, fileFd: number): boolean;
     removeStagedFile?(parentFd: number, basename: string, fileFd: number): "removed" | "name-absent" | "preserved";
@@ -122,10 +168,16 @@ export interface NativeBinding {
     cloneFileExclusive(sourceFd: number, targetRootFd: number, targetRelPath: string): number;
     copyFileRangeExclusive(sourceFd: number, targetRootFd: number, targetRelPath: string): Promise<NativeCopyResult>;
     createPrivateDirectory(path: string): void;
+    /** Internal Windows creation receipts use full FILE_ID_INFO, never Node's projection. */
+    inspectWindowsDirectory?(path: string, requirePrivate: boolean): NativeWindowsDirectoryReceipt;
+    createPrivateDirectoryWithParentIdentity?(path: string, expectedParentIdentity: string): NativeWindowsDirectoryReceipt;
+    /** Protects an already-private borrowed Node file; descriptor ownership stays with Node. */
+    protectPrivateWindowsFile?(fd: number, path: string, expectedParentIdentity: string): NativeWindowsDirectoryReceipt;
+    verifyPrivateWindowsFile?(fd: number, path: string, expectedFileIdentity: string, expectedParentIdentity: string, expectedLinks: number): void;
     extractArchiveNative(path: string, kind: string, rootFd: number, plan: NativeArchivePlanEntry[], limits: TarMeterLimits, signal: AbortSignal): Promise<void>;
     fstatIdentity(fd: number): NativeFileIdentity;
     inspectArchiveNative(path: string, kind: string, limits: TarMeterLimits, signal: AbortSignal): Promise<NativeArchiveEntry[]>;
-    linkBeneath(sourceRootFd: number, sourceRelPath: string, targetRootFd: number, targetRelPath: string): void;
+    linkBeneath(...args: NativeTwoPathArgs): void;
     /** Direct-child mkdir; true is receipt provenance only, never cleanup ownership. */
     mkdirChildBeneath?(parentFd: number, basename: string, mode: number): boolean;
     mkdirBeneath(rootFd: number, relPath: string, mode: number): void;
@@ -137,9 +189,11 @@ export interface NativeBinding {
     ownedTreeRemovalAvailable?(parentFd: number): boolean;
     removeOwnedTree?(parentFd: number, basename: string, directoryFd: number): Promise<NativeOwnedTreeRemovalResult>;
     removeOwnedTreeSync?(parentFd: number, basename: string, directoryFd: number): NativeOwnedTreeRemovalResult;
-    renameNoReplace(sourceRootFd: number, sourceRelPath: string, targetRootFd: number, targetRelPath: string): void;
-    renameReplace(sourceRootFd: number, sourceRelPath: string, targetRootFd: number, targetRelPath: string): void;
+    renameNoReplace(...args: NativeTwoPathArgs): void;
+    /** Identity-fenced retained-directory rename capability. */
+    renameNoReplaceWithIdentity?(...args: [...paths: NativeTwoPathArgs, expectedSourceDev: bigint, expectedSourceIno: bigint]): void;
+    renameReplace(...args: NativeTwoPathArgs): void;
     sha256File(fd: number, maxBytes?: number, signal?: AbortSignal): Promise<NativeFileHash>;
 }
 export declare function captureNativeFdClose(binding: NativeBinding): (fd: number) => void;
-//# sourceMappingURL=native-binding.d.ts.map
+export {};

package/node_modules/@openclaw/fs-safe/dist/native-config.d.ts

@@ -14,4 +14,3 @@ export declare function configureFsSafeNative(config: Partial<FsSafeNativeConfig
 export declare function configureFsSafePython(config: Partial<FsSafePythonConfig>): void;
 export declare function getFsSafeNativeConfig(): FsSafeNativeConfig;
 export declare function __resetFsSafeNativeConfigForTest(): void;
-//# sourceMappingURL=native-config.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/native-directory-observation.d.ts

@@ -14,4 +14,3 @@ export declare function getNativeDirectoryObservationBackend(enabled?: boolean):
 export declare function inspectNativeDirectoryObservation(backend: NativeDirectoryObservationBackend, pathname: string, expected?: ExactStatIdentity, platform?: NodeJS.Platform): NativeDirectoryObservation;
 export declare function extendNativeDirectoryObservationGuard(observation: NativeDirectoryObservation, dir: string): NativeDirectoryObservationGuard;
 export declare function isNativeDirectoryObservationGuard(guard: unknown): guard is NativeDirectoryObservationGuard;
-//# sourceMappingURL=native-directory-observation.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/native-fallback-warning.d.ts

@@ -0,0 +1,3 @@
+/** Warn once per capability, without including caller paths or native error text. */
+export declare function warnNativeFallback(feature: string, limitation: string): void;
+export declare function __resetNativeFallbackWarningsForTest(): void;

package/node_modules/@openclaw/fs-safe/dist/native-fallback-warning.js

@@ -0,0 +1,11 @@
+const warnedFeatures = new Set();
+/** Warn once per capability, without including caller paths or native error text. */
+export function warnNativeFallback(feature, limitation) {
+    if (warnedFeatures.has(feature))
+        return;
+    warnedFeatures.add(feature);
+    process.emitWarning(`${feature} is using its portable fallback because native support is unavailable or disabled. ${limitation}`, { code: "FS_SAFE_NATIVE_FALLBACK", type: "FsSafeWarning" });
+}
+export function __resetNativeFallbackWarningsForTest() {
+    warnedFeatures.clear();
+}

package/node_modules/@openclaw/fs-safe/dist/native-operations.d.ts

@@ -1,16 +1,11 @@
-import { type BigIntStats, type Stats } from "node:fs";
-import type { ContainmentGuarantee } from "./containment.js";
-import type { PinnedWriteInput } from "./pinned-write.js";
+import { type BigIntStats } from "node:fs";
 export type NativeFileHandle = {
     readonly fd: number;
-    readonly containment: ContainmentGuarantee;
     close(): Promise<void>;
-    stat(): Promise<Stats>;
     writeFile(data: string | Buffer, encoding?: BufferEncoding): Promise<void>;
 };
 export declare function nativeOpenFlags(flags: number): number;
 export declare function writeNativeFd(fd: number, data: Buffer): void;
-export declare function writeNativeInput(fd: number, input: PinnedWriteInput, maxBytes?: number, assertBeforeMutation?: () => void): Promise<void>;
 export declare function removeNativeCreatedFileIfStillPinned(params: {
     parentPath: string;
     parentFd: number;
@@ -18,4 +13,3 @@ export declare function removeNativeCreatedFileIfStillPinned(params: {
     created?: BigIntStats;
 }): void;
 export declare function createNativeExclusiveFile(targetPath: string, mode: number): Promise<NativeFileHandle | undefined>;
-//# sourceMappingURL=native-operations.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/native-operations.js

@@ -1,12 +1,9 @@
 import fsSync, {} from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
-import { FsSafeError } from "./errors.js";
 import { sameFileIdentityForCleanup } from "./file-identity.js";
 import { getNativeBinding } from "./native.js";
 import { captureNativeFdClose } from "./native-binding.js";
-import { writeAllToFile } from "./write-file-handle.js";
-import { writeCopyFileToFd } from "./copy-file-input.js";
 export function nativeOpenFlags(flags) {
     const closeOnExec = fsSync.constants.O_CLOEXEC;
     return (flags |
@@ -23,42 +20,16 @@ export function writeNativeFd(fd, data) {
         offset += written;
     }
 }
-export async function writeNativeInput(fd, input, maxBytes, assertBeforeMutation) {
-    if (input.kind === "file") {
-        await writeCopyFileToFd(fd, input, maxBytes, assertBeforeMutation);
-        return;
-    }
-    let bytes = 0;
-    const write = async (data) => {
-        bytes += data.byteLength;
-        if (maxBytes !== undefined && bytes > maxBytes) {
-            throw new FsSafeError("too-large", `file exceeds limit of ${maxBytes} bytes (got at least ${bytes})`);
-        }
-        await writeAllToFile(fd, data, { assertBeforeMutation });
-    };
-    if (input.kind === "buffer") {
-        await write(typeof input.data === "string" ? Buffer.from(input.data, input.encoding ?? "utf8") : input.data);
-    }
-    else {
-        for await (const chunk of input.stream) {
-            await write(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-        }
-    }
-}
-function wrapNativeFd(fd, containment, closeFd) {
+function wrapNativeFd(fd, closeFd) {
     let open = true;
     return {
         fd,
-        containment,
         async close() {
             if (open) {
                 open = false;
                 closeFd(fd);
             }
         },
-        async stat() {
-            return fsSync.fstatSync(fd);
-        },
         async writeFile(data, encoding) {
             writeNativeFd(fd, Buffer.isBuffer(data) ? data : Buffer.from(data, encoding ?? "utf8"));
         },
@@ -115,7 +86,7 @@ export async function createNativeExclusiveFile(targetPath, mode) {
         fd = opened.fd;
         fsSync.fchmodSync(fd, mode);
         created = fsSync.fstatSync(fd, { bigint: true });
-        return wrapNativeFd(fd, opened.containment, closeFd);
+        return wrapNativeFd(fd, closeFd);
     }
     catch (error) {
         if (fd !== undefined) {

package/node_modules/@openclaw/fs-safe/dist/native-parent-admission.d.ts

@@ -6,6 +6,7 @@ import { describeStagedDirectory } from "./staged-directory.js";
 type RootIdentity = Pick<FileIdentityStat, "dev" | "ino">;
 export type NativeRootAdmission = {
     exactRoot: boolean;
+    reportCloseErrors?: boolean;
     operation: string;
     root: FileHandle;
     rootPath: string;
@@ -25,8 +26,9 @@ export declare function openNativeRootAdmission(binding: NativeBinding, params:
     rootPath: string;
     rootIdentity?: RootIdentity;
     operation?: string;
+    reportCloseErrors?: boolean;
 }): Promise<NativeRootAdmission>;
-export declare function openNativeParentAdmission(binding: NativeBinding, rootAdmission: NativeRootAdmission, relativeParentPath: string): Promise<NativeParentAdmission>;
-export declare function closeNativeParentAdmission(admission: NativeParentAdmission | undefined): void;
+export declare function openNativeParentAdmission(binding: NativeBinding, rootAdmission: Omit<NativeRootAdmission, "root"> & {
+    root: Pick<FileHandle, "fd">;
+}, relativeParentPath: string, observation?: "native-directory"): Promise<NativeParentAdmission>;
 export {};
-//# sourceMappingURL=native-parent-admission.d.ts.map

package/node_modules/@openclaw/fs-safe/dist/native-parent-admission.js

@@ -1,7 +1,8 @@
 import fsSync, {} from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
-import { inspectDirectoryIdentity } from "./directory-guard.js";
+import { inspectDirectoryIdentity, inspectDirectoryIdentitySync } from "./directory-guard.js";
+import { inspectNativeDirectoryObservation } from "./native-directory-observation.js";
 import { FsSafeError } from "./errors.js";
 import { captureNativeFdClose } from "./native-binding.js";
 import { realpathSync } from "./realpath.js";
@@ -50,6 +51,7 @@ export async function openNativeRootAdmission(binding, params) {
         }
         return {
             exactRoot,
+            reportCloseErrors: params.reportCloseErrors,
             operation: params.operation ?? "native admission",
             root,
             rootPath: params.rootPath,
@@ -61,14 +63,14 @@ export async function openNativeRootAdmission(binding, params) {
         }
         catch (closeError) {
             // Windows admission keeps the typed boundary failure primary.
-            if (process.platform !== "win32") {
+            if (process.platform !== "win32" || params.reportCloseErrors) {
                 throw createSuppressedError(closeError, error, "native root admission and close failed");
             }
         }
         throw error;
     }
 }
-export async function openNativeParentAdmission(binding, rootAdmission, relativeParentPath) {
+export async function openNativeParentAdmission(binding, rootAdmission, relativeParentPath, observation) {
     assertParentAdmissionAvailable(binding);
     const closeFd = captureNativeFdClose(binding);
     const directoryFlags = fsSync.constants.O_RDONLY | (fsSync.constants.O_DIRECTORY ?? 0);
@@ -82,6 +84,27 @@ export async function openNativeParentAdmission(binding, rootAdmission, relative
         const parentInput = relativeParentPath
             ? path.join(rootAdmission.rootPath, ...relativeParentPath.split("/"))
             : rootAdmission.rootPath;
+        if (observation === "native-directory" && process.platform === "win32" && rootAdmission.exactRoot &&
+            typeof binding.observeDirectory === "function") {
+            const stat = inspectFileIdentitySync(() => fsSync.fstatSync(parentFd, { bigint: true }));
+            let observed;
+            try {
+                observed = inspectNativeDirectoryObservation(binding, parentInput, stat);
+            }
+            catch (error) {
+                if (error?.code !== "OBSERVATION_UNAVAILABLE")
+                    throw error;
+            }
+            if (observed) {
+                assertNoWindowsPathAlias(observed.realPath, "filesystem", "native parent uses a Windows filesystem namespace alias");
+                inspectDirectoryIdentitySync(observed.realPath, stat, stat);
+                return {
+                    fd: parentFd,
+                    close: () => closeFd(parentFd),
+                    guard: { dir: observed.realPath, realPath: observed.realPath, stat },
+                };
+            }
+        }
         const parentPath = realpathSync.native(pathForWindowsFilesystem(parentInput));
         assertNoWindowsPathAlias(parentPath, "filesystem", "native parent uses a Windows filesystem namespace alias");
         const stagedDirectory = process.platform === "win32"
@@ -115,13 +138,10 @@ export async function openNativeParentAdmission(binding, rootAdmission, relative
             closeFd(parentFd);
         }
         catch (closeError) {
-            if (process.platform !== "win32") {
+            if (process.platform !== "win32" || rootAdmission.reportCloseErrors) {
                 throw createSuppressedError(closeError, error, "native parent admission and close failed");
             }
         }
         throw error;
     }
 }
-export function closeNativeParentAdmission(admission) {
-    admission?.close();
-}

package/node_modules/@openclaw/fs-safe/dist/native-pinned-write-windows.d.ts

@@ -1,7 +1,6 @@
 import type { FileHandle } from "node:fs/promises";
-import type { AnyAsyncDirectoryGuard } from "./directory-guard.js";
+import { type AnyAsyncDirectoryGuard } from "./directory-guard.js";
 import type { FileIdentityStat } from "./file-identity.js";
 import type { NativeBinding } from "./native.js";
-import type { PinnedWriteParams } from "./pinned-write.js";
+import type { PinnedWriteParams } from "./pinned-write-types.js";
 export declare function runPinnedWriteWindows(binding: NativeBinding, params: PinnedWriteParams, root: FileHandle, parentFd: number, parentGuard: AnyAsyncDirectoryGuard): Promise<FileIdentityStat>;
-//# sourceMappingURL=native-pinned-write-windows.d.ts.map