@openclaw/openshell-sandbox 2026.9.5 → 2026.9.7

package/node_modules/@openclaw/fs-safe/dist/watch-hints.js

@@ -0,0 +1,93 @@
+import path from "node:path";
+function below(parent, child) {
+    return parent === "" ? child !== "" : child.startsWith(parent + path.sep);
+}
+function distance(parent, child) {
+    return (parent === "" ? child : child.slice(parent.length + 1)).split(path.sep).length;
+}
+export function excludedWatchPath(snapshot, name) {
+    const exclusions = snapshot?.excluded;
+    if (exclusions?.has(name))
+        return true;
+    while (name) {
+        const parent = path.dirname(name);
+        name = parent === "." ? "" : parent;
+        if (exclusions?.get(name) === "directory")
+            return true;
+    }
+    return false;
+}
+export function scopedChanges(scopes, change) {
+    const result = new Map();
+    for (const scope of scopes) {
+        if (scope.path === change.path || (scope.kind === "tree" && below(scope.path, change.path) && distance(scope.path, change.path) <= scope.depth)) {
+            result.set(change.path, change);
+        }
+        else if (below(change.path, scope.path)) {
+            // A changed ancestor invalidates the requested target, not authority outside it.
+            result.set(scope.path, { path: scope.path, type: "structural" });
+        }
+    }
+    return [...result.values()];
+}
+export function nativeChanges(scopes, snapshot, batch, limit = 256, after) {
+    if (batch.overflow)
+        return undefined;
+    const result = new Map();
+    for (const hint of batch.hints) {
+        const name = hint.name;
+        // Backend filenames are untrusted hints. Never resolve or perform I/O on them.
+        if (typeof name !== "string" || !name || name === "." || name === ".." || name.includes("\0") || name.includes("/") || (process.platform === "win32" && /[\\:]/.test(name)))
+            return undefined;
+        const relative = hint.directory ? path.join(hint.directory, name) : name;
+        if (excludedWatchPath(snapshot, relative) || excludedWatchPath(after, relative))
+            continue;
+        for (const change of scopedChanges(scopes, {
+            path: relative,
+            type: hint.event === "change" && snapshot?.entries.get(relative)?.startsWith("file:") ? "content" : "structural",
+        })) {
+            if (!result.has(change.path) && result.size >= limit)
+                return undefined;
+            const prior = result.get(change.path);
+            result.set(change.path, prior?.type === "structural" ? prior : change);
+        }
+    }
+    return [...result.values()];
+}
+export function changedEntries(before, after, limit) {
+    if (!before)
+        return undefined;
+    const changes = [];
+    for (const name of new Set([...before.entries.keys(), ...after.entries.keys()])) {
+        const left = before.entries.get(name);
+        const right = after.entries.get(name);
+        if (left === right)
+            continue;
+        if (changes.length >= limit)
+            return undefined;
+        const sameFile = left?.startsWith("file:") && right?.startsWith("file:") &&
+            left.split(":").slice(0, 3).join(":") === right.split(":").slice(0, 3).join(":");
+        changes.push(Object.freeze({ path: name, type: sameFile ? "content" : "structural" }));
+    }
+    return changes;
+}
+/** Backend names never establish authority to publish a pathname. */
+export function guardedHintChanges(scopes, before, after, hints, observed, limit) {
+    if (!hints || !observed)
+        return undefined;
+    const result = new Map(observed.map(change => [change.path, change]));
+    for (const hint of hints) {
+        // Only publish an independently observed name (including a deletion from
+        // the previous guarded snapshot), or a target explicitly supplied by caller.
+        // A stale/misdirected inode watch may report outside names: erase its detail.
+        if (!before?.entries.has(hint.path) && !after.entries.has(hint.path) && !scopes.some(scope => scope.path === hint.path))
+            return undefined;
+        // Equal snapshots cannot exclude an intermediate change and restoration (ABA).
+        // Preserve admitted hints, including setup activity delivered after ready.
+        if (!result.has(hint.path) && result.size >= limit)
+            return undefined;
+        const prior = result.get(hint.path);
+        result.set(hint.path, Object.freeze(prior?.type === "structural" ? prior : hint));
+    }
+    return [...result.values()];
+}

package/node_modules/@openclaw/fs-safe/dist/watch-native.d.ts

@@ -0,0 +1,36 @@
+import { type NativeBinding } from "./native.js";
+import type { RootContext } from "./root-context.js";
+import type { DirectoryIdentity } from "./watch-scan.js";
+import type { WatchStreamPaths } from "./watch-stream.js";
+export type NativeWatchHint = {
+    directory: string;
+    name: string;
+    event: "rename" | "change";
+};
+export type NativeWatchBatch = {
+    hints: NativeWatchHint[];
+    overflow: boolean;
+    error?: string;
+};
+export type NativeWatchWireBatch = {
+    hints: {
+        directory: string;
+        name: string;
+        structural: boolean;
+        flags?: number;
+    }[];
+    overflow: boolean;
+    error?: string;
+};
+export declare function watchBinding(mode: "auto" | "events" | "poll"): NativeBinding | undefined;
+export declare class NativeWatchBackend {
+    private binding;
+    private root;
+    private id;
+    private streamPaths;
+    constructor(binding: NativeBinding, root: RootContext, callback: (batch: NativeWatchBatch) => void, limit: number, persistent: boolean);
+    add(name: string, identity: DirectoryIdentity): void;
+    testEvent(path: string, flags: number): void;
+    configure(paths: WatchStreamPaths): boolean;
+    close(): void;
+}

package/node_modules/@openclaw/fs-safe/dist/watch-native.js

@@ -0,0 +1,73 @@
+import { FsSafeError } from "./errors.js";
+import { getNativeBinding } from "./native.js";
+import { getFsSafeNativeConfig } from "./native-config.js";
+export function watchBinding(mode) {
+    if (mode === "poll")
+        return;
+    const binding = getNativeBinding(); // Preserves require + missing-addon failure.
+    // Bun TSFN teardown remains unqualified; guarded native scans remain usable.
+    if (binding?.watchRegister && (process.platform !== "darwin" || binding.watchConfigure) && !process.versions.bun && !process.versions.deno && ["linux", "darwin", "win32"].includes(process.platform))
+        return binding;
+    if (mode === "events" || getFsSafeNativeConfig().mode === "require") {
+        throw new FsSafeError("helper-unavailable", "native watch events are unavailable", { details: { operation: "watch" } });
+    }
+}
+export class NativeWatchBackend {
+    binding;
+    root;
+    id;
+    streamPaths;
+    constructor(binding, root, callback, limit, persistent) {
+        this.binding = binding;
+        this.root = root;
+        this.streamPaths = JSON.stringify({ anchors: [root.rootReal], exclusions: [] });
+        try {
+            this.id = binding.watchRegister(root.rootReal, limit, batch => {
+                if (this.id !== undefined)
+                    callback({ overflow: batch.overflow, error: batch.error, hints: batch.hints.map(hint => ({
+                            directory: hint.directory, name: hint.name, event: hint.structural ? "rename" : "change",
+                        })) });
+            }, persistent);
+        }
+        catch (cause) {
+            throw watchError(cause);
+        }
+    }
+    add(name, identity) {
+        try {
+            this.binding.watchAdd(this.id, { root: this.root.rootReal, relative: name,
+                rootDev: BigInt(this.root.rootIdentity.dev), rootIno: BigInt(this.root.rootIdentity.ino), ...identity });
+        }
+        catch (cause) {
+            throw watchError(cause);
+        }
+    }
+    testEvent(path, flags) { this.binding.watchTestEvent(this.id, path, flags); }
+    configure(paths) {
+        if (process.platform !== "darwin")
+            return false;
+        const key = JSON.stringify(paths);
+        if (this.streamPaths === key)
+            return false;
+        try {
+            this.binding.watchConfigure(this.id, paths.anchors, paths.exclusions);
+        }
+        catch (cause) {
+            throw watchError(cause);
+        }
+        this.streamPaths = key;
+        return true;
+    }
+    close() {
+        const id = this.id;
+        this.id = undefined; // Fence queued TSFN callbacks before synchronous native join.
+        if (id !== undefined)
+            this.binding.watchUnregister(id);
+    }
+}
+function watchError(cause) {
+    const code = cause?.code;
+    return new FsSafeError(code === "ENOTSUP" ? "helper-unavailable" : ["ESTALE", "ENOTDIR", "ELOOP"].includes(code ?? "") ? "path-mismatch" : code === "ENOENT" ? "not-found" : "helper-failed", "native watch registration failed", {
+        cause, details: { operation: "watch", code },
+    });
+}

package/node_modules/@openclaw/fs-safe/dist/watch-scan.d.ts

@@ -0,0 +1,28 @@
+import { type RootContext } from "./root-context.js";
+import { type RootDirectoryObservationGuard } from "./root-directory-list.js";
+import type { WatchEntry, WatchOptions, WatchScope } from "./watch-types.js";
+export type DirectoryIdentity = Readonly<{
+    dev: bigint;
+    ino: bigint;
+}>;
+export type WatchSnapshot = {
+    entries: Map<string, string>;
+    excluded?: Map<string, WatchEntry["kind"]>;
+    excludedDirectories?: Map<string, string>;
+    directoryPaths?: Map<string, string>;
+    directories: Map<string, DirectoryIdentity>;
+    targets: Map<string, DirectoryIdentity>;
+    scanned: number;
+    structural?: Set<string>;
+    overflow?: boolean;
+};
+export declare function watchScopes(input: readonly WatchScope[]): readonly WatchScope[];
+/** A descendant's unavailable metadata never grants it authority or retires the Root. */
+export declare function isWatchPathError(error: unknown): boolean;
+export declare function scanWatch(root: RootContext, scopes: readonly WatchScope[], options: Pick<WatchOptions, "exclude"> & {
+    maxEntries: number;
+    maxDirectories: number;
+    maxPendingPaths: number;
+    admitting: boolean;
+    previous?: WatchSnapshot;
+}, signal: AbortSignal, register: (name: string, identity: DirectoryIdentity, guard: RootDirectoryObservationGuard) => Promise<void>, onCleanupFailure?: (error: unknown) => void): Promise<WatchSnapshot>;

package/node_modules/@openclaw/fs-safe/dist/watch-scan.js

@@ -0,0 +1,300 @@
+import path from "node:path";
+import { isWindowsReservedDeviceName } from "./device-path.js";
+import { isNotFoundPathError } from "./path.js";
+import { FsSafeError } from "./errors.js";
+import { assertSynchronousCallbackResult } from "./mutation-authority.js";
+import { validatePinnedRelativePath } from "./pinned-operation.js";
+import { assertRootIdentityCurrent, assertValidRootRelativePath, resolvePathInRoot } from "./root-context.js";
+import { createRootDirectoryObservationGuard, assertRootDirectoryObservationGuard, openRootDirectoryListing, pathStatFromStats } from "./root-directory-list.js";
+import { createSuppressedError } from "./suppressed-error.js";
+import { lookupRootDirectoryEntry } from "./root-directory-entry.js";
+export function watchScopes(input) {
+    if (!Array.isArray(input) || input.length > 128)
+        throw new RangeError("watch accepts at most 128 scopes");
+    return Object.freeze(input.map(scope => {
+        const { path: suppliedPath, kind: suppliedKind, depth: suppliedDepth } = scope;
+        if (typeof suppliedPath !== "string" || path.isAbsolute(suppliedPath))
+            throw new FsSafeError("invalid-path", "watch scopes must be relative");
+        validatePinnedRelativePath(suppliedPath);
+        assertValidRootRelativePath(suppliedPath);
+        if (process.platform === "win32" && suppliedPath.split(/[\\/]/).some(component => component !== "." &&
+            (component.endsWith(".") || component.endsWith(" ") || isWindowsReservedDeviceName(component)))) {
+            throw new FsSafeError("invalid-path", "watch scopes must use literal Windows names");
+        }
+        if (suppliedKind !== "entry" && suppliedKind !== "tree")
+            throw new TypeError("invalid watch scope kind");
+        const depth = suppliedDepth ?? 32;
+        if (!Number.isSafeInteger(depth) || depth < 0 || depth > 128)
+            throw new RangeError("watch depth must be between 0 and 128");
+        // Normalize only admitted input, then remove the separator normalize preserves.
+        const spelling = path.normalize(suppliedPath);
+        const normalized = spelling.endsWith(path.sep) ? spelling.slice(0, -1) : spelling;
+        return Object.freeze({ path: normalized === "." ? "" : normalized, kind: suppliedKind, depth });
+    }));
+}
+function kind(entry) {
+    return entry.isSymbolicLink ? "symlink" : entry.isDirectory ? "directory" : entry.isFile ? "file" : "other";
+}
+function fingerprint(entry, identity) {
+    const { dev, ino } = identity;
+    // Metadata is advisory; identity bits are never rounded through PathStat. Directory size/mtime
+    // reflect children, not changes to an entry-only scope.
+    return entry.isDirectory
+        ? [kind(entry), dev, ino, entry.mode].join(":")
+        : [kind(entry), dev, ino, entry.size, entry.mtimeMs, entry.mode].join(":");
+}
+/** A descendant's unavailable metadata never grants it authority or retires the Root. */
+export function isWatchPathError(error) {
+    if (isNotFoundPathError(error))
+        return true;
+    if (error instanceof FsSafeError) {
+        if (error.details?.operation === "watch" && ["EACCES", "EPERM", "EBUSY"].includes(String(error.details.code)))
+            return true;
+        return ["not-found", "path-mismatch", "not-file", "symlink", "outside-workspace", "path-alias"].includes(error.code);
+    }
+    return ["ENOTDIR", "EACCES", "EPERM", "EBUSY", "ESTALE", "EIO", "ELOOP"].includes(error?.code ?? "");
+}
+export async function scanWatch(root, scopes, options, signal, register, onCleanupFailure) {
+    const exclusions = new Map();
+    const excludedDirectories = new Map(), directoryPaths = new Map();
+    const result = { entries: new Map(), excluded: exclusions, excludedDirectories, directoryPaths, directories: new Map(), targets: new Map(), scanned: 0 };
+    const attempts = new Map();
+    const guards = new Map();
+    const walked = new Map();
+    const structural = new Set();
+    result.structural = structural;
+    const invalidate = (relative) => {
+        if (structural.size < options.maxPendingPaths)
+            structural.add(relative);
+        else
+            result.overflow = true;
+        // Discard partially observed names when their enclosing directory lost admission.
+        const below = (name) => name === relative || !relative || name.startsWith(relative + path.sep);
+        for (const map of [result.entries, exclusions, excludedDirectories, directoryPaths, result.targets, result.directories, guards, walked]) {
+            for (const name of map.keys())
+                if (below(name))
+                    map.delete(name);
+        }
+    };
+    const recover = async (relative, error) => {
+        signal.throwIfAborted();
+        await assertRootIdentityCurrent(root);
+        const code = error instanceof FsSafeError ? error.details?.code ?? error.code : error?.code;
+        if (!isWatchPathError(error) || (!relative && (code === "EACCES" || code === "EPERM")))
+            throw error;
+        invalidate(relative);
+    };
+    const examined = () => {
+        if (++result.scanned > options.maxEntries)
+            throw new FsSafeError("too-large", "watch entry budget exceeded", { details: { operation: "scan" } });
+    };
+    const excluded = async (name, entry) => {
+        let value;
+        try {
+            value = options.exclude?.({ path: name, kind: kind(entry) });
+            assertSynchronousCallbackResult(value, "watch exclude");
+        }
+        catch (cause) {
+            throw new FsSafeError("helper-failed", "watch exclusion callback failed", { cause, details: { operation: "callback" } });
+        }
+        signal.throwIfAborted();
+        if (value) {
+            exclusions.set(name, kind(entry));
+            if (process.platform === "darwin" && entry.isDirectory && !entry.isSymbolicLink) {
+                try {
+                    const resolved = await resolvePathInRoot(root, "./" + name, { rejectSymlinks: true });
+                    const guard = await createRootDirectoryObservationGuard(root, resolved.resolved);
+                    await assertRootDirectoryObservationGuard(root, guard);
+                    excludedDirectories.set(name, guard.realPath);
+                }
+                catch (error) {
+                    signal.throwIfAborted();
+                    await assertRootIdentityCurrent(root);
+                    if (!isWatchPathError(error))
+                        throw error;
+                }
+            }
+        }
+        return value;
+    };
+    const directory = async (relative) => {
+        signal.throwIfAborted();
+        const prior = guards.get(relative);
+        if (prior) {
+            try {
+                await assertRootDirectoryObservationGuard(root, prior);
+                return prior;
+            }
+            catch (error) {
+                await recover(relative, error);
+            }
+        }
+        if (!attempts.has(relative) && attempts.size >= options.maxDirectories) {
+            throw new FsSafeError("too-large", "watch directory budget exceeded", { details: { operation: "scan" } });
+        }
+        let registrationError;
+        while ((attempts.get(relative) ?? 0) < 3) {
+            attempts.set(relative, (attempts.get(relative) ?? 0) + 1);
+            try {
+                const resolved = await resolvePathInRoot(root, relative ? "./" + relative : ".", { rejectSymlinks: true });
+                const guard = await createRootDirectoryObservationGuard(root, resolved.resolved);
+                const identity = { dev: guard.stat.dev, ino: guard.stat.ino };
+                result.directories.set(relative, identity);
+                directoryPaths.set(relative, guard.realPath);
+                await register(relative, identity, guard);
+                signal.throwIfAborted();
+                await assertRootDirectoryObservationGuard(root, guard);
+                guards.set(relative, guard);
+                return guard;
+            }
+            catch (error) {
+                registrationError = error;
+                await recover(relative, error);
+            }
+        }
+        if (!relative)
+            throw new FsSafeError("helper-failed", "watch Root registration could not be established", {
+                cause: registrationError, details: { operation: "watch", code: "registration-failed" },
+            });
+        throw new FsSafeError("path-mismatch", "watch directory changed during registration");
+    };
+    const tree = async (relative, depth) => {
+        if ((walked.get(relative) ?? 0) >= depth)
+            return;
+        walked.set(relative, depth);
+        let guard;
+        let listing;
+        for (let attempt = 0; attempt < 3; attempt++) {
+            try {
+                guard = await directory(relative);
+                listing = await openRootDirectoryListing(root, guard.realPath, {
+                    order: "filesystem", snapshot: false, signal, exactIdentity: true, skipVanished: true, onCleanupFailure, admitEntry: () => { examined(); return true; },
+                });
+                // The listing has its own guard. Both identities must agree before reading names.
+                await assertRootDirectoryObservationGuard(root, guard);
+                break;
+            }
+            catch (error) {
+                await listing?.[Symbol.asyncDispose]();
+                listing = undefined;
+                await recover(relative, error);
+            }
+        }
+        if (!listing)
+            return;
+        let failed = false;
+        let operationError;
+        try {
+            while (true) {
+                const next = await listing.next();
+                signal.throwIfAborted();
+                if (!next)
+                    break;
+                if (next.kind === "limit")
+                    throw new FsSafeError("too-large", "watch entry budget exceeded");
+                if (!next.identity)
+                    throw new FsSafeError("path-mismatch", "watch listing lacks exact identity");
+                const entry = next.entry;
+                const name = relative ? path.join(relative, entry.name) : entry.name;
+                if (await excluded(name, entry))
+                    continue;
+                result.entries.set(name, fingerprint(entry, next.identity));
+                if (entry.isDirectory && !entry.isSymbolicLink && depth > 1)
+                    await tree(name, depth - 1);
+            }
+            await listing.assertCurrent();
+        }
+        catch (error) {
+            failed = true;
+            operationError = error;
+            await recover(relative, error);
+        }
+        finally {
+            try {
+                await listing[Symbol.asyncDispose]();
+            }
+            catch (closeError) {
+                if (failed)
+                    throw createSuppressedError(closeError, operationError, "watch scan and directory disposal both failed");
+                throw closeError;
+            }
+        }
+        try {
+            await assertRootDirectoryObservationGuard(root, guard);
+        }
+        catch (error) {
+            await recover(relative, error);
+        }
+    };
+    await assertRootIdentityCurrent(root);
+    for (const scope of scopes) {
+        signal.throwIfAborted();
+        if (!scope.path) {
+            const guard = await directory("");
+            result.entries.set("", fingerprint({ name: "", ...pathStatFromStats(guard.stat) }, guard.stat));
+            if (scope.kind === "tree" && scope.depth > 0)
+                await tree("", scope.depth);
+            continue;
+        }
+        const segments = scope.path.split(path.sep);
+        let relative = "";
+        try {
+            for (let i = 0; i < segments.length; i++) {
+                const guard = await directory(relative);
+                examined();
+                // Filesystem lookup, not lowercase/prefix matching, owns case, Unicode and
+                // short-name aliases. It also preserves case-sensitive Windows directories.
+                const found = await lookupRootDirectoryEntry(root, guard, segments[i]);
+                signal.throwIfAborted();
+                if (!found)
+                    break;
+                const name = relative ? path.join(relative, segments[i]) : segments[i];
+                if (await excluded(name, found.entry))
+                    break;
+                if (i === segments.length - 1) {
+                    result.entries.set(name, fingerprint(found.entry, found.identity));
+                    result.targets.set(name, found.identity);
+                    if (scope.kind === "tree" && found.entry.isDirectory && !found.entry.isSymbolicLink && scope.depth > 0)
+                        await tree(name, scope.depth);
+                    break;
+                }
+                if (found.entry.isSymbolicLink) {
+                    if (options.admitting)
+                        throw new FsSafeError("symlink", "watch scope traverses a symbolic link; admit its target separately", { details: { operation: "scope" } });
+                    invalidate(name);
+                    break;
+                }
+                if (!found.entry.isDirectory)
+                    break;
+                relative = name;
+            }
+        }
+        catch (error) {
+            if (error instanceof FsSafeError && error.details?.operation === "scope")
+                throw error;
+            await recover(relative, error);
+        }
+    }
+    for (const [relative, guard] of guards) {
+        try {
+            await assertRootDirectoryObservationGuard(root, guard);
+        }
+        catch (error) {
+            await recover(relative, error);
+        }
+    }
+    await assertRootIdentityCurrent(root);
+    signal.throwIfAborted();
+    // Native deletion hints can arrive after a later scan. Keep bounded tombstones
+    // until the name is admitted again; they never grant authority to publish it.
+    for (const [name, kind] of options.previous?.excluded ?? []) {
+        if (exclusions.size >= options.maxEntries)
+            break;
+        if (!result.entries.has(name) && !result.directories.has(name) && !exclusions.has(name))
+            exclusions.set(name, kind);
+        const priorPath = options.previous?.excludedDirectories?.get(name);
+        if (kind === "directory" && exclusions.get(name) === "directory" && priorPath && !excludedDirectories.has(name))
+            excludedDirectories.set(name, priorPath);
+    }
+    return result;
+}

package/node_modules/@openclaw/fs-safe/dist/watch-stream.d.ts

@@ -0,0 +1,8 @@
+import type { WatchSnapshot } from "./watch-scan.js";
+import type { WatchScope } from "./watch-types.js";
+export type WatchStreamPaths = {
+    anchors: string[];
+    exclusions: string[];
+};
+/** Canonical names come only from guarded directory observations, never backend hints. */
+export declare function watchStreamPaths(snapshot: WatchSnapshot, scopes: readonly WatchScope[]): WatchStreamPaths;

package/node_modules/@openclaw/fs-safe/dist/watch-stream.js

@@ -0,0 +1,32 @@
+import path from "node:path";
+function shallowest(paths, limit) {
+    const result = [];
+    const sorted = [...new Set(paths)].sort((a, b) => a.split(path.sep).length - b.split(path.sep).length || a.localeCompare(b));
+    for (const name of sorted) {
+        if (result.some(parent => name.startsWith(parent.endsWith(path.sep) ? parent : parent + path.sep)))
+            continue;
+        result.push(name);
+        if (result.length === limit)
+            break;
+    }
+    return result;
+}
+/** Canonical names come only from guarded directory observations, never backend hints. */
+export function watchStreamPaths(snapshot, scopes) {
+    const anchors = [];
+    for (const scope of scopes) {
+        let name = scope.kind === "tree" && scope.depth !== 0 ? scope.path : path.dirname(scope.path);
+        if (name === ".")
+            name = "";
+        while (!snapshot.directoryPaths?.has(name)) {
+            if (!name)
+                break;
+            const parent = path.dirname(name);
+            name = parent === "." ? "" : parent;
+        }
+        const canonical = snapshot.directoryPaths?.get(name);
+        if (canonical)
+            anchors.push(canonical);
+    }
+    return { anchors: shallowest(anchors, 128), exclusions: shallowest(snapshot.excludedDirectories?.values() ?? [], 8) };
+}

package/node_modules/@openclaw/fs-safe/dist/watch-types.d.ts

@@ -0,0 +1,60 @@
+/** Literal Root-relative names. Trees include their entry; depth defaults to 32 (max 128). */
+export type WatchScope = Readonly<{
+    path: string;
+    kind: "entry" | "tree";
+    depth?: number;
+}>;
+export type WatchEntry = Readonly<{
+    path: string;
+    kind: "file" | "directory" | "symlink" | "other";
+}>;
+export type WatchChange = Readonly<{
+    path: string;
+    type: "content" | "structural";
+}>;
+export type WatchInvalidation = Readonly<{
+    reason: "event" | "reconcile" | "overflow";
+    /** Bounded advisory detail. undefined => invalidate every configured scope. */
+    changes?: readonly WatchChange[];
+}>;
+export type WatchFailure = Readonly<{
+    operation: "watch" | "scan" | "callback" | "close";
+    code?: string;
+    error: unknown;
+}>;
+export type WatchHealth = Readonly<{
+    state: "starting" | "ready" | "reconciling" | "unavailable" | "closed";
+    mode: "events" | "poll";
+    /** Directories currently observed, for pressure warnings. */
+    directories: number;
+    failure?: WatchFailure;
+}>;
+export type WatchOptions = {
+    scopes: readonly WatchScope[];
+    /** Required. auto selects events when available, otherwise poll. */
+    mode: "auto" | "events" | "poll";
+    /** Keep the Node event loop alive while open. Defaults to true. */
+    persistent?: boolean;
+    /** Guarded reconciliation interval: events 30000, poll 1000; minimum 20 ms. */
+    intervalMs?: number;
+    /** Polling transport interval; overrides intervalMs in poll mode or auto fallback. Minimum 20 ms. */
+    pollIntervalMs?: number;
+    exclude?: (entry: WatchEntry) => boolean;
+    maxDirectories?: number;
+    maxEntries?: number;
+    maxPendingPaths?: number;
+    onInvalidate: (invalidation: WatchInvalidation) => void;
+    onHealth?: (health: WatchHealth) => void;
+    signal?: AbortSignal;
+};
+export type WatchSubscription = {
+    readonly ready: Promise<void>;
+    /** Immediately fences the old generation. Superseded calls reject AbortError. */
+    setScopes(scopes: readonly WatchScope[]): Promise<void>;
+    /** Completes a pass started after this call; concurrent pending requests coalesce. */
+    reconcile(): Promise<void>;
+    health(): WatchHealth;
+    /** Terminal, idempotent, joined; rejects only retirement failures. */
+    close(): Promise<void>;
+    [Symbol.asyncDispose](): Promise<void>;
+};

package/node_modules/@openclaw/fs-safe/dist/watch-types.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@openclaw/fs-safe/dist/watch.d.ts

@@ -0,0 +1,5 @@
+import type { Root } from "./root.js";
+import type { WatchOptions, WatchSubscription } from "./watch-types.js";
+export type * from "./watch-types.js";
+/** Advisory observation only. Hints never grant filesystem authority. */
+export declare function watch(root: Root, input: WatchOptions): WatchSubscription;