pi-agent-browser-native 0.9.3 → 0.9.4

package/dist/extensions/agent-browser/lib/temp.js

@@ -1,427 +1,24 @@
-import { randomBytes, randomInt } from "node:crypto";
-import { existsSync, readdirSync, rmSync } from "node:fs";
-import { chmod, mkdir, mkdtemp, open, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { basename, dirname, join, resolve } from "node:path";
-import { isRecord, parsePositiveInteger } from "./parsing.js";
-import { processStartIdentitiesMatch, readProcessStartIdentity } from "./process-identity.js";
-const TEMP_ROOT_PREFIX = "pi-agent-browser-";
-const TEMP_ROOT_MARKER_FILE_NAME = ".pi-agent-browser-owner.json";
-const TEMP_ROOT_MARKER_KIND = "pi-agent-browser-temp-root";
-const TEMP_ROOT_MARKER_VERSION = 2;
-const STALE_TEMP_ROOT_MAX_AGE_MS = 24 * 60 * 60 * 1_000;
-const STALE_TEMP_ROOT_BATCH_SIZE = 8;
-let lastTempGcName;
-const TEMP_ROOT_MAX_BYTES_ENV = "PI_AGENT_BROWSER_TEMP_ROOT_MAX_BYTES";
-const DEFAULT_TEMP_ROOT_MAX_BYTES = 32 * 1_024 * 1_024;
-const SESSION_ARTIFACT_MAX_BYTES_ENV = "PI_AGENT_BROWSER_SESSION_ARTIFACT_MAX_BYTES";
-const DEFAULT_SESSION_ARTIFACT_MAX_BYTES = 32 * 1_024 * 1_024;
-const SESSION_ARTIFACTS_ROOT_DIR_NAME = ".pi-agent-browser-artifacts";
-let sessionTempRootPromise;
-let exitCleanupRegistered = false;
-let tempMutationQueue = Promise.resolve();
-const ownedTempRoots = new Set();
-const protectedTempChildren = new Set();
-function getCurrentProcessUid() {
-    return typeof process.getuid === "function" ? process.getuid() : undefined;
-}
-function isPositiveFiniteNumber(value) {
-    return typeof value === "number" && Number.isFinite(value) && value > 0;
-}
-function isProtectedTempChildName(value) {
-    if (typeof value !== "string")
-        return false;
-    if (value === "" || value === "." || value === ".." || value === TEMP_ROOT_MARKER_FILE_NAME)
-        return false;
-    if (value.includes("/") || value.includes("\\"))
-        return false;
-    return basename(value) === value;
-}
-function isTempRootOwnershipRecord(value) {
-    if (!isRecord(value))
-        return false;
-    if (value.kind !== TEMP_ROOT_MARKER_KIND || value.version !== TEMP_ROOT_MARKER_VERSION)
-        return false;
-    if (!isPositiveFiniteNumber(value.createdAtMs))
-        return false;
-    if (value.leaseUpdatedAtMs !== undefined && !isPositiveFiniteNumber(value.leaseUpdatedAtMs))
-        return false;
-    if (value.ownerPid !== undefined) {
-        if (typeof value.ownerPid !== "number" || !Number.isSafeInteger(value.ownerPid) || value.ownerPid <= 0)
-            return false;
-    }
-    if (value.ownerProcessStartIdentity !== undefined) {
-        if (typeof value.ownerProcessStartIdentity !== "string" || value.ownerProcessStartIdentity.trim() === "")
-            return false;
-    }
-    if (value.ownerUid !== undefined) {
-        if (typeof value.ownerUid !== "number" || !Number.isSafeInteger(value.ownerUid) || value.ownerUid < 0)
-            return false;
-    }
-    if (value.protectedChildNames !== undefined) {
-        if (!Array.isArray(value.protectedChildNames))
-            return false;
-        if (!value.protectedChildNames.every(isProtectedTempChildName))
-            return false;
-    }
-    return true;
-}
-function getTempArtifactByteLength(content) {
-    return typeof content === "string" ? Buffer.byteLength(content) : content.byteLength;
-}
-function enqueueTempMutation(task) {
-    const nextTask = tempMutationQueue.then(task, task);
-    tempMutationQueue = nextTask.then(() => undefined, () => undefined);
-    return nextTask;
-}
-async function listArtifactFiles(directory, excludedNames = new Set()) {
-    const entries = await readdir(directory, { withFileTypes: true }).catch(() => []);
-    const files = [];
-    for (const entry of entries) {
-        if (!entry.isFile() || excludedNames.has(entry.name))
-            continue;
-        const path = join(directory, entry.name);
-        const stats = await stat(path).catch(() => undefined);
-        if (stats?.isFile()) {
-            files.push({ mtimeMs: stats.mtimeMs, path, size: stats.size });
-        }
-    }
-    return files;
-}
-async function getTempRootArtifactBytes(tempRoot) {
-    const files = await listArtifactFiles(tempRoot, new Set([TEMP_ROOT_MARKER_FILE_NAME]));
-    return files.reduce((totalBytes, file) => totalBytes + file.size, 0);
-}
-async function readTempRootOwnershipMarker(tempRoot) {
-    try {
-        const markerText = await readFile(join(tempRoot, TEMP_ROOT_MARKER_FILE_NAME), "utf8");
-        const parsed = JSON.parse(markerText);
-        return isTempRootOwnershipRecord(parsed) ? parsed : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function getProtectedTempChildName(tempRoot, childPath) {
-    const normalizedTempRoot = resolve(tempRoot);
-    const normalizedChildPath = resolve(childPath);
-    if (dirname(normalizedChildPath) !== normalizedTempRoot)
-        return undefined;
-    const childName = basename(normalizedChildPath);
-    return isProtectedTempChildName(childName) ? childName : undefined;
-}
-function normalizeProtectedChildNames(names) {
-    return [...new Set([...names].filter(isProtectedTempChildName))].sort();
-}
-function getPersistedProtectedChildPaths(tempRoot, ownershipMarker) {
-    const normalizedTempRoot = resolve(tempRoot);
-    return new Set((ownershipMarker?.protectedChildNames ?? []).map((childName) => resolve(join(normalizedTempRoot, childName))));
-}
-async function writeTempRootOwnershipMarkerRecord(tempRoot, markerRecord, options = {}) {
-    const markerPath = join(tempRoot, TEMP_ROOT_MARKER_FILE_NAME);
-    await writeFile(markerPath, JSON.stringify(markerRecord, null, 2), {
-        encoding: "utf8",
-        flag: options.flag,
-        mode: 0o600,
-    });
-    await chmod(markerPath, 0o600).catch(() => undefined);
-    return markerPath;
-}
-async function persistProtectedTempChildren(tempRoot, protectedChildren) {
-    if (protectedChildren.size === 0)
-        return;
-    const ownershipMarker = await readTempRootOwnershipMarker(tempRoot);
-    if (!ownershipMarker)
-        return;
-    const childNames = normalizeProtectedChildNames([
-        ...(ownershipMarker.protectedChildNames ?? []),
-        ...[...protectedChildren]
-            .map((path) => getProtectedTempChildName(tempRoot, path))
-            .filter((childName) => childName !== undefined),
-    ]);
-    if (childNames.length === 0)
-        return;
-    await writeTempRootOwnershipMarkerRecord(tempRoot, {
-        ...ownershipMarker,
-        leaseUpdatedAtMs: Date.now(),
-        protectedChildNames: childNames,
-        version: TEMP_ROOT_MARKER_VERSION,
-    });
-}
-async function getExistingProtectedChildren(tempRoot, protectedChildren) {
-    const normalizedTempRoot = resolve(tempRoot);
-    const existingChildren = new Set();
-    for (const path of protectedChildren) {
-        const normalizedPath = resolve(path);
-        if (dirname(normalizedPath) !== normalizedTempRoot)
-            continue;
-        if (await stat(normalizedPath).then((stats) => stats.isDirectory(), () => false)) {
-            existingChildren.add(normalizedPath);
-        }
-    }
-    return existingChildren;
-}
-async function removeTempRootChildrenExcept(tempRoot, protectedChildren) {
-    const entries = await readdir(tempRoot, { withFileTypes: true }).catch(() => []);
-    await Promise.all(entries.map(async (entry) => {
-        if (entry.name === TEMP_ROOT_MARKER_FILE_NAME)
-            return;
-        const entryPath = join(tempRoot, entry.name);
-        if (protectedChildren.has(resolve(entryPath)))
-            return;
-        await rm(entryPath, { force: true, recursive: true }).catch(() => undefined);
-    }));
-}
-async function getProcessStartIdentity(pid) {
-    return pid === undefined ? undefined : await readProcessStartIdentity(pid);
-}
-export async function writeSecureTempRootOwnershipMarker(tempRoot, options = {}) {
-    const createdAtMs = options.createdAtMs ?? Date.now();
-    const ownerPid = options.ownerPid ?? process.pid;
-    const markerRecord = {
-        createdAtMs,
-        kind: TEMP_ROOT_MARKER_KIND,
-        leaseUpdatedAtMs: options.leaseUpdatedAtMs ?? createdAtMs,
-        ownerPid,
-        ownerProcessStartIdentity: options.ownerProcessStartIdentity ?? (await getProcessStartIdentity(ownerPid)),
-        ownerUid: getCurrentProcessUid(),
-        version: TEMP_ROOT_MARKER_VERSION,
-    };
-    return await writeTempRootOwnershipMarkerRecord(tempRoot, markerRecord, { flag: "wx" });
-}
-async function refreshSecureTempRootLease(tempRoot) {
-    const ownershipMarker = await readTempRootOwnershipMarker(tempRoot);
-    if (!ownershipMarker)
-        return;
-    if (ownershipMarker.ownerPid !== process.pid)
-        return;
-    const currentUid = getCurrentProcessUid();
-    if (currentUid !== undefined && ownershipMarker.ownerUid !== undefined && ownershipMarker.ownerUid !== currentUid)
-        return;
-    const currentProcessStartIdentity = await getProcessStartIdentity(process.pid);
-    if (ownershipMarker.ownerProcessStartIdentity !== undefined && currentProcessStartIdentity !== undefined) {
-        const identitiesMatch = processStartIdentitiesMatch(ownershipMarker.ownerProcessStartIdentity, currentProcessStartIdentity);
-        if (identitiesMatch === false)
-            return;
-    }
-    const refreshedMarker = {
-        ...ownershipMarker,
-        leaseUpdatedAtMs: Date.now(),
-        ownerPid: process.pid,
-        ownerProcessStartIdentity: currentProcessStartIdentity ?? ownershipMarker.ownerProcessStartIdentity,
-        ownerUid: currentUid,
-        version: TEMP_ROOT_MARKER_VERSION,
-    };
-    await writeTempRootOwnershipMarkerRecord(tempRoot, refreshedMarker);
-}
-async function getMarkerOwnerLiveness(ownershipMarker) {
-    const pid = ownershipMarker.ownerPid;
-    if (pid === undefined)
-        return "unknown";
-    try {
-        process.kill(pid, 0);
-    }
-    catch (error) {
-        const errorWithCode = error;
-        if (errorWithCode.code === "ESRCH")
-            return "dead";
-        if (errorWithCode.code !== "EPERM")
-            return "unknown";
-    }
-    const currentProcessStartIdentity = await getProcessStartIdentity(pid);
-    if (ownershipMarker.ownerProcessStartIdentity === undefined || currentProcessStartIdentity === undefined) {
-        return "unknown";
-    }
-    const identitiesMatch = processStartIdentitiesMatch(ownershipMarker.ownerProcessStartIdentity, currentProcessStartIdentity);
-    return identitiesMatch === undefined ? "unknown" : identitiesMatch ? "alive" : "dead";
-}
-async function pruneStaleTempRoots(currentTempRoot) {
-    const entries = await readdir(tmpdir(), { withFileTypes: true }).catch(() => []);
-    const cutoffTime = Date.now() - STALE_TEMP_ROOT_MAX_AGE_MS;
-    const currentUid = getCurrentProcessUid();
-    // ponytail: list/sort all names; stream directories if enumeration becomes the bottleneck.
-    const candidates = entries.filter((entry) => entry.isDirectory() && entry.name.startsWith(TEMP_ROOT_PREFIX))
-        .map((entry) => entry.name).sort();
-    if (candidates.length === 0)
-        return;
-    const start = lastTempGcName === undefined ? randomInt(candidates.length)
-        : Math.max(0, candidates.findIndex((name) => name > lastTempGcName));
-    const batch = Array.from({ length: Math.min(STALE_TEMP_ROOT_BATCH_SIZE, candidates.length) }, (_, offset) => candidates[(start + offset) % candidates.length]);
-    lastTempGcName = batch.at(-1);
-    await Promise.all(batch.map(async (name) => {
-        const path = join(tmpdir(), name);
-        if (path === currentTempRoot)
-            return;
-        const ownershipMarker = await readTempRootOwnershipMarker(path);
-        if (!ownershipMarker)
-            return;
-        if (currentUid !== undefined &&
-            ownershipMarker.ownerUid !== undefined &&
-            ownershipMarker.ownerUid !== currentUid) {
-            return;
-        }
-        const staleTimestampMs = ownershipMarker.leaseUpdatedAtMs ?? ownershipMarker.createdAtMs;
-        if (staleTimestampMs >= cutoffTime)
-            return;
-        // Preserve roots when owner liveness cannot be proven; safe cleanup beats deleting another live process's files.
-        if ((await getMarkerOwnerLiveness(ownershipMarker)) !== "dead")
-            return;
-        const stats = await stat(path).catch(() => undefined);
-        if (!stats?.isDirectory())
-            return;
-        const protectedChildren = await getExistingProtectedChildren(path, getPersistedProtectedChildPaths(path, ownershipMarker));
-        if (protectedChildren.size > 0) {
-            await removeTempRootChildrenExcept(path, protectedChildren);
-            return;
-        }
-        await rm(path, { force: true, recursive: true }).catch(() => undefined);
-    }));
-}
-function getProtectedChildrenForRoot(tempRoot) {
-    const normalizedTempRoot = resolve(tempRoot);
-    return new Set([...protectedTempChildren].filter((path) => dirname(path) === normalizedTempRoot && existsSync(path)));
-}
-function removeTempRootChildrenExceptSync(tempRoot, protectedChildren) {
-    for (const entry of readdirSync(tempRoot, { withFileTypes: true })) {
-        if (entry.name === TEMP_ROOT_MARKER_FILE_NAME)
-            continue;
-        const entryPath = join(tempRoot, entry.name);
-        if (protectedChildren.has(resolve(entryPath)))
-            continue;
-        rmSync(entryPath, { force: true, recursive: true });
-    }
-}
-function registerExitCleanup() {
-    if (exitCleanupRegistered)
-        return;
-    exitCleanupRegistered = true;
-    process.once("exit", () => {
-        for (const tempRoot of ownedTempRoots) {
-            try {
-                const protectedChildren = getProtectedChildrenForRoot(tempRoot);
-                if (protectedChildren.size === 0) {
-                    rmSync(tempRoot, { force: true, recursive: true });
-                }
-                else {
-                    removeTempRootChildrenExceptSync(tempRoot, protectedChildren);
-                }
-            }
-            catch {
-                // Best-effort cleanup only.
-            }
-        }
-    });
-}
-export function getSecureTempRootMaxBytes(env = process.env) {
-    return parsePositiveInteger(env[TEMP_ROOT_MAX_BYTES_ENV]) ?? DEFAULT_TEMP_ROOT_MAX_BYTES;
-}
-export function getPersistentSessionArtifactMaxBytes(env = process.env) {
-    if (env[SESSION_ARTIFACT_MAX_BYTES_ENV]?.trim() === "0")
-        return 0;
-    return parsePositiveInteger(env[SESSION_ARTIFACT_MAX_BYTES_ENV]) ?? DEFAULT_SESSION_ARTIFACT_MAX_BYTES;
-}
-async function assertSecureTempRootBudget(tempRoot, additionalBytes) {
-    if (additionalBytes <= 0)
-        return;
-    const currentBytes = await getTempRootArtifactBytes(tempRoot);
-    const maxBytes = getSecureTempRootMaxBytes();
-    const nextBytes = currentBytes + additionalBytes;
-    if (nextBytes > maxBytes) {
-        throw new Error(`pi-agent-browser temp spill budget exceeded (${nextBytes} bytes > ${maxBytes} byte limit).`);
-    }
-}
-export async function preserveSecureTempDirectory(path) {
-    await enqueueTempMutation(async () => {
-        const childPath = resolve(path);
-        const tempRoot = dirname(childPath);
-        if (!ownedTempRoots.has(tempRoot) || !getProtectedTempChildName(tempRoot, childPath) || !(await stat(childPath)).isDirectory()) {
-            throw new Error(`Cannot preserve ${path}; expected an existing child directory of a currently owned temp root.`);
-        }
-        protectedTempChildren.add(childPath);
-        await persistProtectedTempChildren(tempRoot, new Set([childPath]));
-        if (!getPersistedProtectedChildPaths(tempRoot, await readTempRootOwnershipMarker(tempRoot)).has(childPath)) {
-            throw new Error(`Could not persist temp directory preservation for ${path}.`);
-        }
-    });
-}
-export async function cleanupSecureTempArtifacts(options = {}) {
-    await enqueueTempMutation(async () => {
-        const tempRoot = await sessionTempRootPromise?.catch(() => undefined);
-        if (!tempRoot)
-            return;
-        const normalizedTempRoot = resolve(tempRoot);
-        for (const path of options.preservePaths ?? []) {
-            const childName = getProtectedTempChildName(normalizedTempRoot, path);
-            if (childName)
-                protectedTempChildren.add(resolve(join(normalizedTempRoot, childName)));
-        }
-        const preservedChildren = await getExistingProtectedChildren(normalizedTempRoot, protectedTempChildren);
-        for (const path of protectedTempChildren) {
-            if (dirname(path) === normalizedTempRoot && !preservedChildren.has(path))
-                protectedTempChildren.delete(path);
-        }
-        if (preservedChildren.size === 0) {
-            sessionTempRootPromise = undefined;
-            ownedTempRoots.delete(tempRoot);
-            await rm(tempRoot, { force: true, recursive: true }).catch(() => undefined);
-            return;
-        }
-        await persistProtectedTempChildren(tempRoot, preservedChildren);
-        await removeTempRootChildrenExcept(tempRoot, preservedChildren);
-        await refreshSecureTempRootLease(tempRoot).catch(() => undefined);
-    });
-}
+import { randomBytes } from "node:crypto";
+import { chmod, mkdir, mkdtemp, open, rm } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { enqueueTempMutation } from "./temp-mutation-queue.js";
+import { getSessionTempRoot, refreshSecureTempRootLease } from "./temp-root.js";
+import { assertSecureTempRootBudget, getTempArtifactByteLength, prunePersistentSessionArtifactsToBudget, } from "./temp-artifact-budget.js";
+export { cleanupSecureTempArtifacts, getSecureTempChildDirectoryValidationError, getSecureTempDebugState, preserveSecureTempDirectory, writeSecureTempRootOwnershipMarker, } from "./temp-root.js";
+export { getPersistentSessionArtifactMaxBytes, getSecureTempRootMaxBytes, } from "./temp-artifact-budget.js";
 async function ensurePersistentSessionArtifactDir(store) {
-    const rootDir = join(store.sessionDir, SESSION_ARTIFACTS_ROOT_DIR_NAME);
+    const rootDir = join(store.sessionDir, ".pi-agent-browser-artifacts");
     const sessionDir = join(rootDir, store.sessionId);
     await mkdir(rootDir, { recursive: true, mode: 0o700 });
-    await chmod(rootDir, 0o700).catch(() => undefined);
+    await chmod(rootDir, 0o700).catch(() => {
+        /* Native creation may already enforce the mode. */
+    });
     await mkdir(sessionDir, { recursive: true, mode: 0o700 });
-    await chmod(sessionDir, 0o700).catch(() => undefined);
+    await chmod(sessionDir, 0o700).catch(() => {
+        /* Native creation may already enforce the mode. */
+    });
     return sessionDir;
 }
-async function prunePersistentSessionArtifactsToBudget(sessionArtifactDir, additionalBytes, protectedPaths) {
-    if (additionalBytes <= 0)
-        return [];
-    const maxBytes = getPersistentSessionArtifactMaxBytes();
-    if (maxBytes === 0)
-        return [];
-    let files = await listArtifactFiles(sessionArtifactDir);
-    let totalBytes = files.reduce((total, file) => total + file.size, 0);
-    if (totalBytes + additionalBytes <= maxBytes) {
-        return [];
-    }
-    const evictedArtifacts = [];
-    files = files.sort((left, right) => left.mtimeMs - right.mtimeMs || left.path.localeCompare(right.path));
-    for (const file of files) {
-        if (protectedPaths.has(file.path)) {
-            continue;
-        }
-        await rm(file.path, { force: true }).catch(() => undefined);
-        evictedArtifacts.push({ mtimeMs: file.mtimeMs, path: file.path, sizeBytes: file.size });
-        totalBytes -= file.size;
-        if (totalBytes + additionalBytes <= maxBytes) {
-            return evictedArtifacts;
-        }
-    }
-    throw new Error(`pi-agent-browser persisted spill budget exceeded (${totalBytes + additionalBytes} bytes > ${maxBytes} byte limit).`);
-}
-async function getSessionTempRoot() {
-    if (!sessionTempRootPromise) {
-        sessionTempRootPromise = (async () => {
-            const tempRoot = await mkdtemp(join(tmpdir(), TEMP_ROOT_PREFIX));
-            await chmod(tempRoot, 0o700).catch(() => undefined);
-            await writeSecureTempRootOwnershipMarker(tempRoot);
-            ownedTempRoots.add(tempRoot);
-            registerExitCleanup();
-            return tempRoot;
-        })();
-    }
-    const tempRoot = await sessionTempRootPromise;
-    await refreshSecureTempRootLease(tempRoot).catch(() => undefined);
-    await pruneStaleTempRoots(tempRoot).catch(() => undefined);
-    return tempRoot;
-}
 export async function openSecureTempFile(prefix, suffix) {
     const tempRoot = await getSessionTempRoot();
     const path = join(tempRoot, `${prefix}-${randomBytes(8).toString("hex")}${suffix}`);
@@ -432,7 +29,9 @@ export async function writeSecureTempChunk(options) {
     const { content, fileHandle, path } = options;
     await enqueueTempMutation(async () => {
         const tempRoot = dirname(path);
-        await refreshSecureTempRootLease(tempRoot).catch(() => undefined);
+        await refreshSecureTempRootLease(tempRoot).catch(() => {
+            /* Lease renewal is best-effort; file ownership is already captured. */
+        });
         await assertSecureTempRootBudget(tempRoot, getTempArtifactByteLength(content));
         await fileHandle.appendFile(content);
     });
@@ -444,7 +43,9 @@ export async function writeSecureTempFile(options) {
         await writeSecureTempChunk({ content, fileHandle, path });
     }
     catch (error) {
-        await rm(path, { force: true }).catch(() => undefined);
+        await rm(path, { force: true }).catch(() => {
+            /* Retain the original write failure if removal also fails. */
+        });
         throw error;
     }
     finally {
@@ -456,26 +57,14 @@ export async function createSecureTempDirectory(prefix) {
     const tempRoot = await getSessionTempRoot();
     await assertSecureTempRootBudget(tempRoot, 0);
     const directory = await mkdtemp(join(tempRoot, prefix));
-    await chmod(directory, 0o700).catch(() => undefined);
-    await refreshSecureTempRootLease(tempRoot).catch(() => undefined);
+    await chmod(directory, 0o700).catch(() => {
+        /* mkdtemp supplies the private directory when chmod is unavailable. */
+    });
+    await refreshSecureTempRootLease(tempRoot).catch(() => {
+        /* Renewal is best-effort after private creation. */
+    });
     return directory;
 }
-export async function getSecureTempChildDirectoryValidationError(path, childPrefix) {
-    const parentDirectory = dirname(path);
-    const childName = path.slice(parentDirectory.length + 1);
-    if (!childName.startsWith(childPrefix)) {
-        return `Refusing to remove ${path}; expected wrapper temp child prefix ${childPrefix}.`;
-    }
-    const ownershipMarker = await readTempRootOwnershipMarker(parentDirectory);
-    if (!ownershipMarker) {
-        return `Refusing to remove ${path}; parent directory is not a pi-agent-browser owned temp root.`;
-    }
-    const currentUid = getCurrentProcessUid();
-    if (currentUid !== undefined && ownershipMarker.ownerUid !== undefined && ownershipMarker.ownerUid !== currentUid) {
-        return `Refusing to remove ${path}; parent temp root is owned by uid ${ownershipMarker.ownerUid}, not current uid ${currentUid}.`;
-    }
-    return undefined;
-}
 export async function writePersistentSessionArtifactFile(options) {
     const { content, prefix, store, suffix } = options;
     return await enqueueTempMutation(async () => {
@@ -487,18 +76,16 @@ export async function writePersistentSessionArtifactFile(options) {
             await fileHandle.writeFile(content);
         }
         catch (error) {
-            await rm(path, { force: true }).catch(() => undefined);
+            await rm(path, { force: true }).catch(() => {
+                /* Preserve write failure identity. */
+            });
             throw error;
         }
         finally {
-            await fileHandle.close().catch(() => undefined);
+            await fileHandle.close().catch(() => {
+                /* A completed artifact write retains its receipt even if close fails. */
+            });
         }
         return { evictedArtifacts, path };
     });
 }
-export async function getSecureTempDebugState() {
-    return {
-        currentTempRoot: await sessionTempRootPromise?.catch(() => undefined),
-        ownedTempRoots: [...ownedTempRoots].sort(),
-    };
-}