@zhivex-ai/harness 0.11.0 → 0.11.1

package/dist/file-security.d.ts

@@ -0,0 +1,29 @@
+import { type Stats } from "node:fs";
+export interface StableRegularFile {
+    contents: Buffer;
+    stat: Stats;
+}
+export interface ReadRegularFileNoFollowOptions {
+    label: string;
+    maxBytes: number;
+    requireSingleLink?: boolean;
+}
+export declare class UnsafeFileTypeError extends Error {
+    constructor(label: string);
+}
+export declare class FileSizeLimitError extends Error {
+    readonly label: string;
+    readonly maxBytes: number;
+    constructor(label: string, maxBytes: number);
+}
+export declare class FileChangedWhileReadingError extends Error {
+    constructor(label: string);
+}
+export declare const statRegularFileNoFollow: (target: string, options: Pick<ReadRegularFileNoFollowOptions, "label" | "requireSingleLink">) => Promise<Stats>;
+/**
+ * Opens the leaf without following a symbolic link and performs every content
+ * and identity check through the resulting descriptor. Positional reads bind
+ * the returned bytes to the exact inode that was opened, avoiding path-based
+ * time-of-check/time-of-use windows.
+ */
+export declare const readRegularFileNoFollow: (target: string, options: ReadRegularFileNoFollowOptions) => Promise<StableRegularFile>;