@tickernelz/wardmote-plugin-daytona 0.0.0 → 2026.1108.1

package/dist/file-sync-diagnostics.test.js

@@ -0,0 +1,117 @@
+import { promises as fs } from "node:fs";
+import { execFileSync } from "node:child_process";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, expect, it, vi } from "vitest";
+import { environmentSyncErrorData, withEnvironmentSyncErrorCapture, readEnvironmentSyncErrorDiagnostic } from "@tickernelz/wardmote-plugin-sdk";
+vi.mock("./plugin.js", async () => {
+    const { NOOP_PLUGIN_TRACER } = await import("@tickernelz/wardmote-plugin-sdk");
+    return { getPluginTracer: () => NOOP_PLUGIN_TRACER };
+});
+import { performSyncOut } from "./file-sync.js";
+const dirs = [];
+afterEach(async () => { await Promise.all(dirs.splice(0).map(dir => fs.rm(dir, { recursive: true, force: true }))); });
+it.each([
+    ["guard", "sandbox_guard", "command_failed", 42],
+    ["create", "archive_create", "command_failed", 2],
+    ["download", "archive_download", "download_failed", undefined],
+    ["missing", "archive_download", "download_missing", undefined],
+    ["file", "file_download", "download_failed", undefined],
+    ["file-missing", "file_download", "download_missing", undefined],
+])("records producer evidence for %s without copying output or paths", async (failure, step, kind, exitCode) => {
+    const dir = await fs.mkdtemp(path.join(os.tmpdir(), "daytona-diagnostic-"));
+    dirs.push(dir);
+    const sandbox = {
+        process: { executeCommand: async (command) => ({
+                exitCode: failure === "guard" ? 42 : failure === "create" && command.includes("tar -c") ? 2 : 0,
+                result: "private-command-output",
+            }) },
+        fs: {
+            downloadFiles: async (requests) => failure.endsWith("missing") ? []
+                : requests.map(request => ({ source: request.source, error: "private-download-error" })),
+            deleteFile: async () => undefined,
+        },
+    };
+    await withEnvironmentSyncErrorCapture(async () => {
+        let caught;
+        try {
+            await performSyncOut({ sandbox: sandbox, remoteDir: "/workspace", timeoutSeconds: 30,
+                operations: [{ operationId: "fixture", files: [{
+                                sourcePath: "/workspace/private-path", targetPath: path.join(dir, "target"), kind: failure.startsWith("file") ? "file" : "directory",
+                            }] }], });
+        }
+        catch (error) {
+            caught = error;
+        }
+        expect(caught).toBeInstanceOf(Error);
+        const diagnostic = readEnvironmentSyncErrorDiagnostic({ data: environmentSyncErrorData(caught) });
+        expect(diagnostic).toEqual({ errorCode: "unknown", transferStep: step, transferFailureKind: kind,
+            ...(exitCode !== undefined ? { exitCode } : {}),
+        });
+        expect(JSON.stringify(diagnostic)).not.toContain("private-");
+        expect(caught).not.toHaveProperty("transferStep");
+        expect(caught).not.toHaveProperty("exitCode");
+    });
+});
+it("keeps a thrown download exception identical and its nested safe code", async () => {
+    const original = Object.freeze(new Error("private-download-error", { cause: { code: "ECONNRESET", token: "private-token" } }));
+    const sandbox = {
+        process: { executeCommand: async () => ({ exitCode: 0 }) },
+        fs: { downloadFiles: async () => { throw original; }, deleteFile: async () => undefined },
+    };
+    await withEnvironmentSyncErrorCapture(async () => {
+        await expect(performSyncOut({ sandbox: sandbox, remoteDir: "/workspace", timeoutSeconds: 30,
+            operations: [{ operationId: "fixture", files: [{ sourcePath: "/workspace/private-path", targetPath: "/unused", kind: "directory" }] }], })).rejects.toBe(original);
+        expect(readEnvironmentSyncErrorDiagnostic({ data: environmentSyncErrorData(original) })).toEqual({
+            errorCode: "ECONNRESET", transferStep: "archive_download",
+        });
+    });
+});
+it.each(["file_finalize", "archive_validate", "archive_extract"])("identifies the host-side %s failure without relaxing confinement", async (step) => {
+    const dir = await fs.mkdtemp(path.join(os.tmpdir(), "daytona-host-diagnostic-"));
+    dirs.push(dir);
+    const target = path.join(dir, "target");
+    const archive = path.join(dir, "safe.tar");
+    if (step === "archive_extract") {
+        await fs.writeFile(path.join(dir, "safe.txt"), "fixture");
+        execFileSync("tar", ["-cf", archive, "-C", dir, "safe.txt"]);
+        await fs.writeFile(target, "preserve target");
+    }
+    const sandbox = {
+        process: { executeCommand: async () => ({ exitCode: 0 }) },
+        fs: {
+            downloadFiles: async (requests) => {
+                for (const request of requests) {
+                    if (step === "archive_validate")
+                        await fs.writeFile(request.destination, "invalid private archive");
+                    if (step === "archive_extract")
+                        await fs.copyFile(archive, request.destination);
+                }
+                return requests.map(request => ({ source: request.source }));
+            },
+            deleteFile: async () => undefined,
+        },
+    };
+    await withEnvironmentSyncErrorCapture(async () => {
+        let caught;
+        try {
+            await performSyncOut({ sandbox: sandbox, remoteDir: "/workspace", timeoutSeconds: 30,
+                operations: [{ operationId: "fixture", files: [{ sourcePath: "/workspace/private-path", targetPath: target,
+                                kind: step === "file_finalize" ? "file" : "directory" }] }], });
+        }
+        catch (error) {
+            caught = error;
+        }
+        expect(caught).toBeInstanceOf(Error);
+        const diagnostic = readEnvironmentSyncErrorDiagnostic({ data: environmentSyncErrorData(caught) });
+        expect(diagnostic?.transferStep).toBe(step);
+        expect(JSON.stringify(diagnostic)).not.toContain("private");
+        if (step === "file_finalize")
+            expect(diagnostic?.errorCode).toBe("ENOENT");
+        if (step === "archive_validate")
+            expect(diagnostic?.transferFailureKind).toBe("command_failed");
+        if (step === "archive_extract")
+            expect(await fs.readFile(target, "utf8")).toBe("preserve target");
+    });
+});
+//# sourceMappingURL=file-sync-diagnostics.test.js.map

package/dist/file-sync-diagnostics.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-sync-diagnostics.test.js","sourceRoot":"","sources":["../src/file-sync-diagnostics.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AAChJ,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;IAChC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC/E,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;AACvD,CAAC,CAAC,CAAC;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,IAAI,GAAa,EAAE,CAAC;AAC1B,SAAS,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEvH,EAAE,CAAC,IAAI,CAAC;IACN,CAAC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,CAAC;IAChD,CAAC,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjD,CAAC,UAAU,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,CAAC;IAC9D,CAAC,SAAS,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,CAAC;IAC9D,CAAC,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,CAAC;IACvD,CAAC,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,SAAS,CAAC;CACxD,CAAC,CAAC,kEAAkE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IACtH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC;gBACrD,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/F,MAAM,EAAE,wBAAwB;aACjC,CAAC,EAAE;QACJ,EAAE,EAAE;YACF,aAAa,EAAE,KAAK,EAAE,QAAmC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC5F,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1F,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;SAClC;KACF,CAAC;IACF,MAAM,+BAA+B,CAAC,KAAK,IAAI,EAAE;QAC/C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE;gBAC3F,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;gCAC7C,UAAU,EAAE,yBAAyB,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW;6BACrI,CAAC,EAAE,CAAC,GACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;QAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,kCAAkC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI;YAC9F,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/H,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE;QAC1D,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE;KAC1F,CAAC;IACF,MAAM,+BAA+B,CAAC,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE;YAClG,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,yBAAyB,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,GACvI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/F,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,kBAAkB;SAC1D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAGH,EAAE,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,CAAU,CAAC,CAAC,kEAAkE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAC5J,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1D,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE;QAC1D,EAAE,EAAE;YACF,aAAa,EAAE,KAAK,EAAE,QAAwD,EAAE,EAAE;gBAChF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,IAAI,KAAK,kBAAkB;wBAAE,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;oBACpG,IAAI,IAAI,KAAK,iBAAiB;wBAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;gBAClF,CAAC;gBACD,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;SAClC;KACF,CAAC;IACF,MAAM,+BAA+B,CAAC,KAAK,IAAI,EAAE;QAC/C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE;gBAC3F,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM;gCACxG,IAAI,EAAE,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,GAC9D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;QAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,kCAAkC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,eAAe;YAAE,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3E,IAAI,IAAI,KAAK,kBAAkB;YAAE,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChG,IAAI,IAAI,KAAK,iBAAiB;YAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/file-sync.d.ts

@@ -0,0 +1,79 @@
+import type { Sandbox } from "@daytonaio/sdk";
+import type { PluginEnvironmentSyncResult, PluginSpan, PluginSyncOperation } from "@tickernelz/wardmote-plugin-sdk";
+/**
+ * Run one span-wrapped step through the plugin tracer. The pack step, the
+ * transfer step, and each command round trip share this helper. It seeds the
+ * provider family, runs the step, marks a thrown step failed, and always ends
+ * the span. The host records the span with its true wall-clock width from the
+ * worker timestamps, so the span shows real time in the trace. The tracer is a
+ * no-op until the host injects a live tracer, so the span never changes the sync
+ * control flow.
+ *
+ * `wallMsAttr` is optional. The `pack` and `transfer` spans pass it to keep
+ * their existing `*.wall_ms` attribute. A per-round-trip span omits it, so it
+ * carries no `*.wall_ms` attribute and relies on the native span width.
+ *
+ * `run` receives the live span, so a caller that needs to record an attribute
+ * only known after the step completes (for example the compression byte
+ * counts) can call `span.setAttribute` directly, without a second span.
+ */
+export declare function withProviderSpan<T>(input: {
+    name: string;
+    wallMsAttr?: string;
+    attributes?: Record<string, string | number | boolean>;
+    run: (span: PluginSpan) => Promise<T>;
+}): Promise<T>;
+/**
+ * Host-side complete-mediation guard applied as defense-in-depth below the
+ * orchestrator's own confinement. Every sandbox-side path (the sync target for
+ * inbound, the sync source for outbound) MUST canonicalize inside the workspace
+ * remote dir; absolute escapes and `..` traversal are rejected fail-closed before
+ * any bytes move. Sandbox paths on the server are POSIX.
+ */
+export declare function assertConfinedSandboxPath(remoteDir: string, candidate: string, label: string): void;
+/**
+ * Parse one `tar -tvf` verbose listing line into its leading type flag and the
+ * trailing name-and-link-target field. The listing dialect depends on which tar
+ * the host ships: GNU/busybox emit
+ * `<perms> <owner>/<group> <size> <date> <time> <rest>`, while bsdtar
+ * (libarchive — the system tar on macOS) emits the ls-style
+ * `<perms> <links> <user> <group> <size> <Mon> <day> <time|year> <rest>`.
+ * The second field disambiguates: GNU always slash-joins owner/group, bsdtar
+ * puts a pure-digit link count there, so no line satisfies both shapes — the
+ * slash requirement is load-bearing, since a bsdtar line with numeric uid/gid
+ * would otherwise match the GNU shape shifted, hiding traversal in `<rest>`.
+ * Entries whose size column is not a plain byte count (e.g. a device node's
+ * `major,minor`) match neither shape. Returns null when nothing matches so
+ * callers can fail closed.
+ */
+export declare function parseTarVerboseListingLine(line: string): {
+    typeFlag: string;
+    rest: string;
+} | null;
+/**
+ * Split a verbose-listing link field (`<name><delimiter><target>`) exactly
+ * once. The sandbox controls both halves, so a field with zero or multiple
+ * delimiter occurrences is unresolvable: a link name that itself contains the
+ * delimiter shifts the split point, and taking the first (or last) occurrence
+ * would let a crafted name or target hide an escaping link target from the
+ * confinement check. Returns null so callers fail closed.
+ */
+export declare function splitLinkEntryOnce(field: string, delimiter: string): {
+    name: string;
+    target: string;
+} | null;
+export declare function assertTarballEntriesConfined(archivePath: string, timeoutMs?: number): Promise<void>;
+export declare function performSyncIn(input: {
+    sandbox: Sandbox;
+    operations: PluginSyncOperation[];
+    remoteDir: string;
+    timeoutSeconds: number;
+}): Promise<PluginEnvironmentSyncResult>;
+export declare function performSyncOut(input: {
+    sandbox: Sandbox;
+    operations: PluginSyncOperation[];
+    remoteDir: string;
+    timeoutSeconds: number;
+    onArchiveRecovery?: () => void;
+}): Promise<PluginEnvironmentSyncResult>;
+//# sourceMappingURL=file-sync.d.ts.map

package/dist/file-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-sync.d.ts","sourceRoot":"","sources":["../src/file-sync.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAyD,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACrG,OAAO,KAAK,EACV,2BAA2B,EAE3B,UAAU,EAEV,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAiCzC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACvD,GAAG,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CACvC,GAAG,OAAO,CAAC,CAAC,CAAC,CAcb;AAoCD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAenG;AA8DD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAMlG;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAK5G;AA4DD,wBAAsB,4BAA4B,CAChD,WAAW,EAAE,MAAM,EACnB,SAAS,SAAyB,GACjC,OAAO,CAAC,IAAI,CAAC,CAkFf;AAssBD,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAyCvC;AA4ND,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC;CAChC,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAiCvC"}