@superblocksteam/workspace-sync 0.0.0-stage → 2.0.178-next.1

package/dist/list-dir.d.ts

@@ -0,0 +1,31 @@
+export interface LocalDirEntryFile {
+    type: "-";
+    executable: boolean;
+    name: string;
+    localPath: string;
+    contents: Buffer;
+}
+export interface LocalDirEntryDirectory {
+    type: "d";
+    name: string;
+    localPath: string;
+}
+export interface LocalDirEntrySymLink {
+    type: "l";
+    name: string;
+    localPath: string;
+    target: string;
+}
+export type LocalDirEntry = LocalDirEntryFile | LocalDirEntryDirectory | LocalDirEntrySymLink;
+/**
+ * Lists the contents of a local directory. The function will load the contents of files into memory, but as it is a generator, this
+ * will happen lazily, so only one file will be loaded into memory at a time. The function will also ignore files in the directories
+ * listed in `codeModeSyncExcludedDirectories` and files matched by `isCodeModeExcludedFile`.
+ *
+ * @param localDirectoryPath - The path to the local directory to list.
+ * @returns An async generator that yields the contents of the directory.
+ */
+export declare function listLocalDirectory(localDirectoryPath: string, rootDirectoryPath?: string, limits?: {
+    maxFileBytes: number;
+}): AsyncGenerator<LocalDirEntry, void, void>;
+//# sourceMappingURL=list-dir.d.ts.map

package/dist/list-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-dir.d.ts","sourceRoot":"","sources":["../src/list-dir.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,GAAG,CAAC;IACV,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,GAAG,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,GAAG,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,sBAAsB,GACtB,oBAAoB,CAAC;AAezB;;;;;;;GAOG;AACH,wBAAuB,kBAAkB,CACvC,kBAAkB,EAAE,MAAM,EAC1B,iBAAiB,SAAqB,EACtC,MAAM,CAAC,EAAE;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,GAChC,cAAc,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAyI3C"}

package/dist/list-dir.js

@@ -0,0 +1,153 @@
+import * as fsp from "node:fs/promises";
+import * as path from "node:path";
+import { codeModeSyncExcludedDirectories } from "@superblocksteam/shared";
+import { getSyncLogger } from "./logger.js";
+import { SafeDirectoryReader } from "./safe-directory-reader.js";
+import { isCodeModeExcludedFile, isPersistedChecklistPathOrAncestor, isPersistedSuperblocksFile, isSnapshotExcludedName, NATIVE_SYSTEM_SKILLS_ROOT, NPM_TO_PNPM_STATE_RELATIVE_PATH, PRIVATE_REGISTRY_MIGRATION_SENTINEL_RELATIVE_PATH, TEMPLATE_DEPENDENCIES_STATE_RELATIVE_PATH, } from "./sync-paths.js";
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+async function pathExists(targetPath) {
+    try {
+        await fsp.access(targetPath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Lists the contents of a local directory. The function will load the contents of files into memory, but as it is a generator, this
+ * will happen lazily, so only one file will be loaded into memory at a time. The function will also ignore files in the directories
+ * listed in `codeModeSyncExcludedDirectories` and files matched by `isCodeModeExcludedFile`.
+ *
+ * @param localDirectoryPath - The path to the local directory to list.
+ * @returns An async generator that yields the contents of the directory.
+ */
+export async function* listLocalDirectory(localDirectoryPath, rootDirectoryPath = localDirectoryPath, limits) {
+    const logger = getSyncLogger();
+    let localDirHandle;
+    try {
+        localDirHandle = await fsp.opendir(localDirectoryPath);
+    }
+    catch (error) {
+        // A nested directory can vanish mid-scan (the migration deletes `scratch`
+        // while a snapshot walks the tree). A missing root is not a race: callers
+        // rely on that rejection to fail the sync instead of uploading nothing.
+        const isNestedDirectory = path.resolve(localDirectoryPath) !== path.resolve(rootDirectoryPath);
+        if (isNestedDirectory && isNodeError(error) && error.code === "ENOENT") {
+            logger.warn(`Directory was deleted during directory scan, skipping: ${localDirectoryPath}`);
+            return;
+        }
+        throw error;
+    }
+    for await (const localDirEntry of localDirHandle) {
+        const name = localDirEntry.name
+            // On macOS, filenames in the filesystem are typically stored in decomposed form from a Unicode normalization perspective
+            // (i.e. NFD). We need to convert it to precomposed form (i.e. NFC) to match what everything else uses and expects.
+            .normalize("NFC");
+        const localFilePath = `${localDirectoryPath}/${name}`;
+        const relativePath = path.relative(rootDirectoryPath, localFilePath);
+        const normalizedRelativePath = relativePath.split(path.sep).join("/");
+        if (name !== ".superblocks" && isSnapshotExcludedName(name))
+            continue;
+        if (normalizedRelativePath === NATIVE_SYSTEM_SKILLS_ROOT)
+            continue;
+        if (codeModeSyncExcludedDirectories.includes(name) &&
+            !(localDirEntry.isDirectory() &&
+                isPersistedChecklistPathOrAncestor(normalizedRelativePath))) {
+            if (!localDirEntry.isDirectory()) {
+                logger.debug(`[sync-service] dbfs upload: excluding non-directory entry "${name}" at ${localFilePath}`);
+            }
+            continue;
+        }
+        if (localDirEntry.isFile()) {
+            if (normalizedRelativePath.startsWith(".superblocks/") &&
+                !isPersistedSuperblocksFile(normalizedRelativePath)) {
+                continue;
+            }
+            if (isCodeModeExcludedFile(name)) {
+                continue;
+            }
+            try {
+                const file = await SafeDirectoryReader.readLocalFile(localFilePath, limits?.maxFileBytes ?? Number.MAX_SAFE_INTEGER);
+                yield {
+                    type: "-",
+                    executable: file.executable,
+                    name,
+                    localPath: localFilePath,
+                    contents: file.content,
+                };
+            }
+            catch (error) {
+                if (isNodeError(error) && error.code === "ENOENT") {
+                    logger.warn(`File was deleted during directory scan, skipping: ${localFilePath}`);
+                    continue;
+                }
+                throw error;
+            }
+        }
+        else if (localDirEntry.isDirectory()) {
+            if (normalizedRelativePath.startsWith(".superblocks/") &&
+                !isPersistedChecklistPathOrAncestor(normalizedRelativePath)) {
+                continue;
+            }
+            if (normalizedRelativePath === ".superblocks") {
+                // `.superblocks/` is excluded from sync wholesale unless it carries
+                // an allowlisted persisted file (see `isPersistedSuperblocksFile`).
+                // Probe every allowlisted descendant before skipping; otherwise a
+                // workspace whose ONLY persisted artifact is the private-registry
+                // sentinel (brownfield migration before any AI session has written
+                // a checklist) would lose the sentinel on every upload, defeating
+                // cross-pod persistence.
+                const checklistPath = path.join(localFilePath, "ai", "checklist.json");
+                const persistedFiles = [
+                    PRIVATE_REGISTRY_MIGRATION_SENTINEL_RELATIVE_PATH,
+                    NPM_TO_PNPM_STATE_RELATIVE_PATH,
+                    TEMPLATE_DEPENDENCIES_STATE_RELATIVE_PATH,
+                ].map((file) => path.join(rootDirectoryPath, file));
+                let hasPersistedDescendant = await pathExists(checklistPath);
+                for (const file of persistedFiles) {
+                    hasPersistedDescendant ||= await pathExists(file);
+                }
+                if (!hasPersistedDescendant) {
+                    continue;
+                }
+            }
+            if (normalizedRelativePath === ".superblocks/ai") {
+                const checklistPath = path.join(localFilePath, "checklist.json");
+                if (!(await pathExists(checklistPath))) {
+                    continue;
+                }
+            }
+            yield {
+                type: "d",
+                name,
+                localPath: localFilePath,
+            };
+        }
+        else if (localDirEntry.isSymbolicLink()) {
+            try {
+                const target = await fsp.readlink(localFilePath);
+                yield {
+                    type: "l",
+                    name,
+                    localPath: localFilePath,
+                    target,
+                };
+            }
+            catch (error) {
+                if (isNodeError(error) && error.code === "ENOENT") {
+                    logger.warn(`Symlink was deleted during directory scan, skipping: ${localFilePath}`);
+                    continue;
+                }
+                throw error;
+            }
+        }
+        else {
+            // ignore files of other types
+            continue;
+        }
+    }
+}
+//# sourceMappingURL=list-dir.js.map

package/dist/list-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-dir.js","sourceRoot":"","sources":["../src/list-dir.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAC;AACxC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACL,sBAAsB,EACtB,kCAAkC,EAClC,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,+BAA+B,EAC/B,iDAAiD,EACjD,yCAAyC,GAC1C,MAAM,iBAAiB,CAAC;AA4BzB,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,UAAkB;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,kBAAkB,CACvC,kBAA0B,EAC1B,iBAAiB,GAAG,kBAAkB,EACtC,MAAiC;IAEjC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,cAAuD,CAAC;IAC5D,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,iBAAiB,GACrB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACvE,IAAI,iBAAiB,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CACT,0DAA0D,kBAAkB,EAAE,CAC/E,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,EAAE,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI;YAC7B,yHAAyH;YACzH,mHAAmH;aAClH,SAAS,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,aAAa,GAAG,GAAG,kBAAkB,IAAI,IAAI,EAAE,CAAC;QACtD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACrE,MAAM,sBAAsB,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtE,IAAI,IAAI,KAAK,cAAc,IAAI,sBAAsB,CAAC,IAAI,CAAC;YAAE,SAAS;QACtE,IAAI,sBAAsB,KAAK,yBAAyB;YAAE,SAAS;QACnE,IACE,+BAA+B,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC9C,CAAC,CACC,aAAa,CAAC,WAAW,EAAE;gBAC3B,kCAAkC,CAAC,sBAAsB,CAAC,CAC3D,EACD,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;gBACjC,MAAM,CAAC,KAAK,CACV,8DAA8D,IAAI,QAAQ,aAAa,EAAE,CAC1F,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3B,IACE,sBAAsB,CAAC,UAAU,CAAC,eAAe,CAAC;gBAClD,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,EACnD,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,aAAa,CAClD,aAAa,EACb,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,gBAAgB,CAChD,CAAC;gBACF,MAAM;oBACJ,IAAI,EAAE,GAAG;oBACT,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,IAAI;oBACJ,SAAS,EAAE,aAAa;oBACxB,QAAQ,EAAE,IAAI,CAAC,OAAO;iBACvB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClD,MAAM,CAAC,IAAI,CACT,qDAAqD,aAAa,EAAE,CACrE,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;YACvC,IACE,sBAAsB,CAAC,UAAU,CAAC,eAAe,CAAC;gBAClD,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,EAC3D,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,sBAAsB,KAAK,cAAc,EAAE,CAAC;gBAC9C,oEAAoE;gBACpE,oEAAoE;gBACpE,kEAAkE;gBAClE,kEAAkE;gBAClE,mEAAmE;gBACnE,kEAAkE;gBAClE,yBAAyB;gBACzB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACvE,MAAM,cAAc,GAAG;oBACrB,iDAAiD;oBACjD,+BAA+B;oBAC/B,yCAAyC;iBAC1C,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC;gBACpD,IAAI,sBAAsB,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC;gBAC7D,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;oBAClC,sBAAsB,KAAK,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;gBACpD,CAAC;gBACD,IAAI,CAAC,sBAAsB,EAAE,CAAC;oBAC5B,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,sBAAsB,KAAK,iBAAiB,EAAE,CAAC;gBACjD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;gBACjE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS;gBACX,CAAC;YACH,CAAC;YACD,MAAM;gBACJ,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,SAAS,EAAE,aAAa;aACzB,CAAC;QACJ,CAAC;aAAM,IAAI,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBACjD,MAAM;oBACJ,IAAI,EAAE,GAAG;oBACT,IAAI;oBACJ,SAAS,EAAE,aAAa;oBACxB,MAAM;iBACP,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClD,MAAM,CAAC,IAAI,CACT,wDAAwD,aAAa,EAAE,CACxE,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;aAAM,CAAC;YACN,8BAA8B;YAC9B,SAAS;QACX,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The narrow logger this package writes to. The host process binds its own
+ * logger with {@link setSyncLoggerProvider}; until it does, messages go to the
+ * console.
+ */
+export interface SyncLogger {
+    debug: (...messages: unknown[]) => void;
+    warn: (...messages: unknown[]) => void;
+}
+/**
+ * Binds the logger this package uses. The provider is called on every log
+ * call, so a host whose own default logger changes later is followed.
+ */
+export declare function setSyncLoggerProvider(next: () => SyncLogger): void;
+export declare function getSyncLogger(): SyncLogger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,CAAC,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IACxC,IAAI,EAAE,CAAC,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;CACxC;AASD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,UAAU,GAAG,IAAI,CAElE;AAED,wBAAgB,aAAa,IAAI,UAAU,CAE1C"}

package/dist/logger.js

@@ -0,0 +1,16 @@
+const consoleSyncLogger = {
+    debug: (...messages) => console.debug(...messages),
+    warn: (...messages) => console.warn(...messages),
+};
+let provider = () => consoleSyncLogger;
+/**
+ * Binds the logger this package uses. The provider is called on every log
+ * call, so a host whose own default logger changes later is followed.
+ */
+export function setSyncLoggerProvider(next) {
+    provider = next;
+}
+export function getSyncLogger() {
+    return provider();
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAUA,MAAM,iBAAiB,GAAe;IACpC,KAAK,EAAE,CAAC,GAAG,QAAmB,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,QAAmB,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;CAC5D,CAAC;AAEF,IAAI,QAAQ,GAAqB,GAAG,EAAE,CAAC,iBAAiB,CAAC;AAEzD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAsB;IAC1D,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC"}

package/dist/native-draft-session.d.ts

@@ -0,0 +1,28 @@
+import type { DraftJournalPhase, DraftJournalStore } from "./draft-journal-store.js";
+/**
+ * The recovery journal for one native execution session: what the tracked
+ * files held before the session, and the originals the draft markers are
+ * rebuilt from. Persistence goes through a {@link DraftJournalStore}; a
+ * directory, or nothing, selects the {@link FileDraftJournalStore} beside the
+ * application root.
+ */
+export declare class NativeDraftJournal {
+    private readonly root;
+    private readonly scope;
+    private readonly store;
+    constructor(root: string, scope: string, store?: DraftJournalStore | string);
+    exists(): Promise<boolean>;
+    /** The stored session's phase, or undefined when there is none. */
+    phase(): Promise<DraftJournalPhase | undefined>;
+    capture(): Promise<void>;
+    reconcile(finalize: boolean): Promise<{
+        changedPaths: string[];
+        hash?: string;
+    } | undefined>;
+    retireUploaded(hash: string): Promise<void>;
+    clear(): Promise<void>;
+    private validate;
+    private read;
+    private snapshot;
+}
+//# sourceMappingURL=native-draft-session.d.ts.map

package/dist/native-draft-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-draft-session.d.ts","sourceRoot":"","sources":["../src/native-draft-session.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,iBAAiB,EAEjB,iBAAiB,EAClB,MAAM,0BAA0B,CAAC;AAWlC;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAI3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAJxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;IAE1C,YACmB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EAC9B,KAAK,GAAE,iBAAiB,GAAG,MAA2C,EAMvE;IAEK,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAE/B;IAED,mEAAmE;IAC7D,KAAK,IAAI,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAEpD;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CA4B7B;IAEK,SAAS,CACb,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAmChE;IAEK,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhD;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAED,OAAO,CAAC,QAAQ;YAuBF,IAAI;YAaJ,QAAQ;CAwBvB"}

package/dist/native-draft-session.js

@@ -0,0 +1,154 @@
+import { randomUUID } from "node:crypto";
+import * as fs from "node:fs/promises";
+import path from "node:path";
+import { DraftMarkers, getDraftInfo } from "./draft-helpers.js";
+import { defaultDraftJournalDirectory, FileDraftJournalStore, } from "./file-draft-journal-store.js";
+import { listLocalDirectory } from "./list-dir.js";
+import { snapshotLocalDirectoryWithDrafts } from "./snapshot/take-snapshot.js";
+const MAX_BYTES = 32 * 1024 * 1024;
+const MAX_ENTRIES = 2000;
+/**
+ * The recovery journal for one native execution session: what the tracked
+ * files held before the session, and the originals the draft markers are
+ * rebuilt from. Persistence goes through a {@link DraftJournalStore}; a
+ * directory, or nothing, selects the {@link FileDraftJournalStore} beside the
+ * application root.
+ */
+export class NativeDraftJournal {
+    root;
+    scope;
+    store;
+    constructor(root, scope, store = defaultDraftJournalDirectory(root)) {
+        this.root = root;
+        this.scope = scope;
+        this.store =
+            typeof store === "string"
+                ? new FileDraftJournalStore(root, store)
+                : store;
+    }
+    async exists() {
+        return (await this.read()) !== undefined;
+    }
+    /** The stored session's phase, or undefined when there is none. */
+    async phase() {
+        return (await this.read())?.phase;
+    }
+    async capture() {
+        const pending = await this.read();
+        const markers = new DraftMarkers(this.root);
+        await markers.prepare();
+        const before = await this.snapshot();
+        const info = await getDraftInfo(this.root);
+        const targets = [
+            ...new Set([
+                ...before.keys(),
+                ...info.additions,
+                ...info.edits,
+                ...info.deletions,
+            ]),
+        ];
+        const originals = await markers.originals(targets, before, MAX_BYTES, MAX_ENTRIES * 5);
+        await this.store.write({
+            root: await fs.realpath(this.root),
+            scope: this.scope,
+            id: randomUUID(),
+            phase: "running",
+            before: pending?.before ?? before,
+            originals,
+        });
+    }
+    async reconcile(finalize) {
+        const journal = await this.read();
+        if (!journal)
+            return undefined;
+        const { before, originals } = journal;
+        const after = await this.snapshot();
+        const candidates = new Set([
+            ...before.keys(),
+            ...originals.keys(),
+            ...after.keys(),
+        ]);
+        const changedPaths = [];
+        const markers = new DraftMarkers(this.root);
+        for (const relative of candidates) {
+            await markers.reconcile(relative, originals.get(relative), after.get(relative));
+            const previous = before.get(relative);
+            const current = after.get(relative);
+            if (previous === undefined
+                ? current !== undefined
+                : current === undefined || !previous.equals(current))
+                changedPaths.push(relative);
+        }
+        if (!finalize)
+            return { changedPaths };
+        if (changedPaths.length === 0) {
+            await this.clear();
+            return { changedPaths };
+        }
+        const { hash } = await snapshotLocalDirectoryWithDrafts(this.root);
+        await this.store.write({ ...journal, phase: "complete", hash });
+        return { changedPaths, hash };
+    }
+    async retireUploaded(hash) {
+        const journal = await this.read();
+        if (journal?.phase === "complete" && journal.hash === hash)
+            await this.clear();
+    }
+    async clear() {
+        await this.store.clear();
+    }
+    validate(files) {
+        let bytes = 0;
+        let entries = 0;
+        for (const [relative, content] of files) {
+            const normalized = path.relative(this.root, path.resolve(this.root, relative));
+            if (!normalized ||
+                normalized !== relative ||
+                normalized === ".." ||
+                normalized.startsWith(`..${path.sep}`) ||
+                path.isAbsolute(normalized))
+                throw new Error("Invalid native draft journal path");
+            bytes += content.length;
+            if (bytes > MAX_BYTES || entries >= MAX_ENTRIES)
+                throw new Error("Native draft journal exceeds its snapshot limit");
+            entries++;
+        }
+    }
+    async read() {
+        const journal = await this.store.read();
+        if (!journal)
+            return undefined;
+        if (journal.root !== (await fs.realpath(this.root)) ||
+            journal.scope !== this.scope)
+            throw new Error("Native draft journal belongs to another application");
+        this.validate(journal.before);
+        this.validate(journal.originals);
+        return journal;
+    }
+    async snapshot() {
+        const files = new Map();
+        let bytes = 0;
+        let entries = 0;
+        const visit = async (directory) => {
+            for await (const entry of listLocalDirectory(directory, this.root, {
+                maxFileBytes: MAX_BYTES - bytes,
+            })) {
+                if (++entries > MAX_ENTRIES)
+                    throw new Error("Native draft snapshot exceeds its entry limit");
+                if (entry.type === "l")
+                    throw new Error("Native draft snapshots cannot track symbolic links");
+                if (entry.type === "d")
+                    await visit(entry.localPath);
+                else {
+                    bytes += entry.contents.length;
+                    if (bytes > MAX_BYTES)
+                        throw new Error("Native draft snapshot exceeds its byte limit");
+                    files.set(path.relative(this.root, entry.localPath), entry.contents);
+                }
+            }
+        };
+        await visit(this.root);
+        return files;
+    }
+}
+//# sourceMappingURL=native-draft-session.js.map

package/dist/native-draft-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-draft-session.js","sourceRoot":"","sources":["../src/native-draft-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMhE,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAE/E,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACnC,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IAIV,IAAI;IACJ,KAAK;IAJP,KAAK,CAAoB;IAE1C,YACmB,IAAY,EACZ,KAAa,EAC9B,KAAK,GAA+B,4BAA4B,CAAC,IAAI,CAAC;oBAFrD,IAAI;qBACJ,KAAK;QAGtB,IAAI,CAAC,KAAK;YACR,OAAO,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,IAAI,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC;gBACxC,CAAC,CAAC,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,SAAS,CAAC;IAC3C,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,KAAK;QACT,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG;YACd,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,MAAM,CAAC,IAAI,EAAE;gBAChB,GAAG,IAAI,CAAC,SAAS;gBACjB,GAAG,IAAI,CAAC,KAAK;gBACb,GAAG,IAAI,CAAC,SAAS;aAClB,CAAC;SACH,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CACvC,OAAO,EACP,MAAM,EACN,SAAS,EACT,WAAW,GAAG,CAAC,CAChB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YACrB,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,EAAE,EAAE,UAAU,EAAE;YAChB,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,MAAM;YACjC,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CACb,QAAiB;QAEjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;YACzB,GAAG,MAAM,CAAC,IAAI,EAAE;YAChB,GAAG,SAAS,CAAC,IAAI,EAAE;YACnB,GAAG,KAAK,CAAC,IAAI,EAAE;SAChB,CAAC,CAAC;QACH,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,OAAO,CAAC,SAAS,CACrB,QAAQ,EACR,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EACvB,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CACpB,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,IACE,QAAQ,KAAK,SAAS;gBACpB,CAAC,CAAC,OAAO,KAAK,SAAS;gBACvB,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;gBAEtD,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QACvC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1B,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,OAAO,EAAE,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;YACxD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,QAAQ,CAAC,KAAkC;QACjD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAC9B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAClC,CAAC;YACF,IACE,CAAC,UAAU;gBACX,UAAU,KAAK,QAAQ;gBACvB,UAAU,KAAK,IAAI;gBACnB,UAAU,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;gBACtC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAE3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;YACxB,IAAI,KAAK,GAAG,SAAS,IAAI,OAAO,IAAI,WAAW;gBAC7C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,IACE,OAAO,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;YAE5B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;YACvD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE;gBACjE,YAAY,EAAE,SAAS,GAAG,KAAK;aAChC,CAAC,EAAE,CAAC;gBACH,IAAI,EAAE,OAAO,GAAG,WAAW;oBACzB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG;oBACpB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG;oBAAE,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;qBAChD,CAAC;oBACJ,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC/B,IAAI,KAAK,GAAG,SAAS;wBACnB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;oBAClE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/rpc-client.d.ts

@@ -0,0 +1,7 @@
+import type { ISocketClient, ServerMethods } from "@superblocksteam/shared";
+/**
+ * The server RPC client the DBFS helpers call. Same type as
+ * `StdISocketRPCClient` in `vite-plugin-file-sync/src/server-rpc/client.ts`.
+ */
+export type StdISocketRPCClient = ISocketClient<ServerMethods>;
+//# sourceMappingURL=rpc-client.d.ts.map

package/dist/rpc-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-client.d.ts","sourceRoot":"","sources":["../src/rpc-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE5E;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC"}

package/dist/rpc-client.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rpc-client.js.map

package/dist/rpc-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-client.js","sourceRoot":"","sources":["../src/rpc-client.ts"],"names":[],"mappings":""}

package/dist/safe-directory-reader.d.ts

@@ -0,0 +1,28 @@
+type DirectoryEntry = {
+    type: "directory";
+    entries: string[];
+} | {
+    type: "file";
+    content: Buffer;
+};
+export declare class SafeDirectoryReader {
+    private readonly root;
+    private readonly handle;
+    private constructor();
+    static open(root: string): Promise<SafeDirectoryReader>;
+    close(): Promise<void>;
+    static readLocalFile(filePath: string, maxBytes: number): Promise<{
+        content: Buffer;
+        executable: boolean;
+    }>;
+    readEntry(relative: string, maxBytes: number): Promise<DirectoryEntry | undefined>;
+    readFile(relative: string, maxBytes: number): Promise<Buffer | undefined>;
+    private static get openFlags();
+    private withHandle;
+    private openRelative;
+    private assertUnchanged;
+    private static readRegularFile;
+    private static exceedsLimit;
+}
+export {};
+//# sourceMappingURL=safe-directory-reader.d.ts.map

package/dist/safe-directory-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-directory-reader.d.ts","sourceRoot":"","sources":["../src/safe-directory-reader.ts"],"names":[],"mappings":"AAKA,KAAK,cAAc,GACf;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFzB,OAAO,eAGH;IAEJ,OAAa,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAY5D;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAED,OAAa,aAAa,CACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,CAAC,CAanD;IAEK,SAAS,CACb,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAiBrC;IAEK,QAAQ,CACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAI7B;IAED,OAAO,CAAC,MAAM,KAAK,SAAS,GAK3B;YAEa,UAAU;YAcV,YAAY;YA6CZ,eAAe;mBAcR,eAAe;IAsBpC,OAAO,CAAC,MAAM,CAAC,YAAY;CAK5B"}

package/dist/safe-directory-reader.js

@@ -0,0 +1,136 @@
+import { constants } from "node:fs";
+import * as fs from "node:fs/promises";
+import path from "node:path";
+export class SafeDirectoryReader {
+    root;
+    handle;
+    constructor(root, handle) {
+        this.root = root;
+        this.handle = handle;
+    }
+    static async open(root) {
+        if (process.platform !== "linux" && process.platform !== "darwin")
+            throw new Error("Native draft snapshots require Linux or macOS");
+        const canonical = path.join(await fs.realpath(path.dirname(root)), path.basename(root));
+        const handle = await fs.open(canonical, this.openFlags | constants.O_DIRECTORY);
+        return new SafeDirectoryReader(canonical, handle);
+    }
+    async close() {
+        await this.handle.close();
+    }
+    static async readLocalFile(filePath, maxBytes) {
+        const handle = await fs.open(filePath, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        try {
+            return {
+                executable: ((await handle.stat()).mode & constants.S_IXUSR) !== 0,
+                content: await this.readRegularFile(handle, maxBytes),
+            };
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    async readEntry(relative, maxBytes) {
+        return this.withHandle(relative, async (handle) => {
+            const stats = await handle.stat();
+            if (stats.isDirectory()) {
+                const directory = process.platform === "linux"
+                    ? `/proc/self/fd/${handle.fd}`
+                    : path.join(this.root, relative);
+                const entries = await fs.readdir(directory);
+                await this.assertUnchanged(relative, handle);
+                return { type: "directory", entries };
+            }
+            return {
+                type: "file",
+                content: await SafeDirectoryReader.readRegularFile(handle, maxBytes),
+            };
+        });
+    }
+    async readFile(relative, maxBytes) {
+        return this.withHandle(relative, (handle) => SafeDirectoryReader.readRegularFile(handle, maxBytes));
+    }
+    static get openFlags() {
+        // Darwin's O_NOFOLLOW_ANY rejects symlinks in every path component.
+        const noFollow = process.platform === "darwin" ? 0x20000000 : constants.O_NOFOLLOW;
+        return constants.O_RDONLY | constants.O_NONBLOCK | noFollow;
+    }
+    async withHandle(relative, read) {
+        const handle = await this.openRelative(relative);
+        if (!handle)
+            return undefined;
+        try {
+            await this.assertUnchanged(relative, handle);
+            return await read(handle);
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    async openRelative(relative) {
+        if (!relative ||
+            path.isAbsolute(relative) ||
+            relative
+                .split(path.sep)
+                .some((segment) => !segment || segment === ".." || segment === "."))
+            throw new Error("Native draft snapshot path is outside its root");
+        const parents = [];
+        try {
+            if (process.platform === "darwin")
+                return await fs.open(path.join(this.root, relative), SafeDirectoryReader.openFlags);
+            let parent = this.handle;
+            const segments = relative.split(path.sep);
+            for (let index = 0; index < segments.length; index++) {
+                const last = index === segments.length - 1;
+                const child = await fs.open(`/proc/self/fd/${parent.fd}/${segments[index]}`, SafeDirectoryReader.openFlags | (last ? 0 : constants.O_DIRECTORY));
+                if (last)
+                    return child;
+                parents.push(child);
+                parent = child;
+            }
+            throw new Error("Native draft snapshot path is empty");
+        }
+        catch (error) {
+            const code = error instanceof Error && "code" in error ? error.code : undefined;
+            if (code === "ENOENT")
+                return undefined;
+            if (code === "ELOOP" || code === "ENOTDIR")
+                throw new Error("Native filesystem mutation cannot traverse symbolic links");
+            throw error;
+        }
+        finally {
+            await Promise.all(parents.map((parent) => parent.close()));
+        }
+    }
+    async assertUnchanged(relative, handle) {
+        const [opened, current] = await Promise.all([
+            handle.stat(),
+            fs.lstat(path.join(this.root, relative)),
+        ]);
+        if (opened.dev !== current.dev || opened.ino !== current.ino)
+            throw new Error("Native filesystem mutation path changed during snapshot");
+    }
+    static async readRegularFile(handle, maxBytes) {
+        const stats = await handle.stat();
+        if (!stats.isFile())
+            throw new Error("Native filesystem mutation path must contain regular files");
+        if (stats.size > maxBytes)
+            this.exceedsLimit();
+        const chunks = [];
+        let bytes = 0;
+        while (true) {
+            const buffer = Buffer.alloc(Math.min(64 * 1024, maxBytes - bytes + 1));
+            const { bytesRead } = await handle.read(buffer);
+            if (!bytesRead)
+                return Buffer.concat(chunks);
+            bytes += bytesRead;
+            if (bytes > maxBytes)
+                this.exceedsLimit();
+            chunks.push(buffer.subarray(0, bytesRead));
+        }
+    }
+    static exceedsLimit() {
+        throw new Error("Native filesystem mutation exceeds the draft snapshot limit");
+    }
+}
+//# sourceMappingURL=safe-directory-reader.js.map

package/dist/safe-directory-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-directory-reader.js","sourceRoot":"","sources":["../src/safe-directory-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAM7B,MAAM,OAAO,mBAAmB;IAEX,IAAI;IACJ,MAAM;IAFzB,YACmB,IAAY,EACZ,MAAkB;oBADlB,IAAI;sBACJ,MAAM;IACtB,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAY;QAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC/D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpB,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAC1B,SAAS,EACT,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,WAAW,CACvC,CAAC;QACF,OAAO,IAAI,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,aAAa,CACxB,QAAgB,EAChB,QAAgB;QAEhB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAC1B,QAAQ,EACR,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CACjE,CAAC;QACF,IAAI,CAAC;YACH,OAAO;gBACL,UAAU,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;gBAClE,OAAO,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC;aACtD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,QAAgB,EAChB,QAAgB;QAEhB,OAAO,IAAI,CAAC,UAAU,CAAiB,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAChE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,SAAS,GACb,OAAO,CAAC,QAAQ,KAAK,OAAO;oBAC1B,CAAC,CAAC,iBAAiB,MAAM,CAAC,EAAE,EAAE;oBAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACrC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC5C,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC7C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;YACxC,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,MAAM,mBAAmB,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC;aACrE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,QAAgB;QAEhB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAC1C,mBAAmB,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CACtD,CAAC;IACJ,CAAC;IAEO,MAAM,KAAK,SAAS;QAC1B,oEAAoE;QACpE,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;QACpE,OAAO,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,QAAQ,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,QAAgB,EAChB,IAAwC;QAExC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,QAAgB;QAEhB,IACE,CAAC,QAAQ;YACT,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACzB,QAAQ;iBACL,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;iBACf,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC;YAErE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAC/B,OAAO,MAAM,EAAE,CAAC,IAAI,CAClB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAC9B,mBAAmB,CAAC,SAAS,CAC9B,CAAC;YACJ,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC3C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CACzB,iBAAiB,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,EAC/C,mBAAmB,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CACnE,CAAC;gBACF,IAAI,IAAI;oBAAE,OAAO,KAAK,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GACR,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACxC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS;gBACxC,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;YACJ,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,QAAgB,EAChB,MAAkB;QAElB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1C,MAAM,CAAC,IAAI,EAAE;YACb,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YAC1D,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;IACN,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,eAAe,CAClC,MAAkB,EAClB,QAAgB;QAEhB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YACjB,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;QACJ,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7C,KAAK,IAAI,SAAS,CAAC;YACnB,IAAI,KAAK,GAAG,QAAQ;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,YAAY;QACzB,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;CACF"}