stitchkit 0.103.8 → 0.103.10

package/dist/entrypoints/process.d.ts

@@ -0,0 +1,5 @@
+/** POSIX Node/Bun finite native commands, independent of the agent runtime. */
+export { observeProcessInstance, type ProcessInstance, type ProcessInstanceObservation, ProcessInstanceSchema, type ProcessOwnerEvidence, probeProcessOwner, } from '../internal/process-instance.js';
+export { runNativeCommand } from '../process/command.js';
+export { NativeCommandError, type NativeCommandOptions, type NativeCommandResult, type NativeCommandSettlement, } from '../process/contract.js';
+//# sourceMappingURL=process.d.ts.map

package/dist/entrypoints/process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/entrypoints/process.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,EACL,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC"}

package/dist/entrypoints/process.js

@@ -0,0 +1,20 @@
+import {
+  ProcessInstanceSchema2,
+  observeProcessInstance2,
+  probeProcessOwner2
+} from "../index-nybn2err.js";
+import {
+  NativeCommandError2,
+  startNativeCommand
+} from "../index-6m6a9ty4.js";
+// src/process/command.ts
+function runNativeCommand(input) {
+  return startNativeCommand(input).result;
+}
+export {
+  NativeCommandError2 as NativeCommandError,
+  ProcessInstanceSchema2 as ProcessInstanceSchema,
+  observeProcessInstance2 as observeProcessInstance,
+  probeProcessOwner2 as probeProcessOwner,
+  runNativeCommand
+};

package/dist/entrypoints/tools.js

@@ -1,7 +1,7 @@
 import {
   EffectUnresolvedError2,
   createLocalStepDurability2
-} from "../index-5vyd0fkb.js";
+} from "../index-ary5s7k0.js";
 import {
   AppError2,
   STITCH_ERROR_STATUS2
@@ -84,7 +84,7 @@ import {
 } from "../index-xqhede6x.js";
 import {
   ManagedFileError2
-} from "../index-v4a2fjtk.js";
+} from "../index-sybedc8b.js";
 import {
   composeToolLifecycle2
 } from "../index-ze1eph1k.js";
@@ -2508,12 +2508,21 @@ var SAFE_MANAGED_FILE_MESSAGES = {
   FILE_NOT_REGULAR: "Managed path is not a regular file",
   FILE_INSPECTION_REJECTED: "Managed file rejected by inspection",
   FILE_TOO_LARGE: "Managed file exceeds the configured size limit",
-  FILE_EXISTS: "Managed file already exists"
+  FILE_EXISTS: "Managed file already exists",
+  FILE_UNSAFE_LINK: "Managed file link policy rejected",
+  FILE_CHANGED: "Managed file changed during read",
+  FILE_UNSUPPORTED: "Managed file capability unavailable"
 };
 function managedFileAppError(error) {
   if (!(error instanceof ManagedFileError2))
     return null;
   switch (error.code) {
+    case "FILE_UNSAFE_LINK":
+      return new AppError2("FORBIDDEN", SAFE_MANAGED_FILE_MESSAGES[error.code], 403);
+    case "FILE_CHANGED":
+      return new AppError2("CONFLICT", SAFE_MANAGED_FILE_MESSAGES[error.code], 409);
+    case "FILE_UNSUPPORTED":
+      return new AppError2("NOT_IMPLEMENTED", SAFE_MANAGED_FILE_MESSAGES[error.code], 501);
     case "FILE_INVALID_PATH":
     case "FILE_OUTSIDE_ROOT":
     case "FILE_NOT_FOUND":

package/dist/files/boundary.d.ts

@@ -1,5 +1,5 @@
 import { type ManagedFileRef } from '../contract/file-ref.js';
-export type ManagedFileErrorCode = 'FILE_INVALID_PATH' | 'FILE_NOT_FOUND' | 'FILE_NOT_REGULAR' | 'FILE_OUTSIDE_ROOT' | 'FILE_TOO_LARGE' | 'FILE_EXISTS' | 'FILE_INSPECTION_REJECTED' | 'FILE_IO_ERROR';
+export type ManagedFileErrorCode = 'FILE_INVALID_PATH' | 'FILE_NOT_FOUND' | 'FILE_NOT_REGULAR' | 'FILE_OUTSIDE_ROOT' | 'FILE_TOO_LARGE' | 'FILE_EXISTS' | 'FILE_INSPECTION_REJECTED' | 'FILE_UNSAFE_LINK' | 'FILE_CHANGED' | 'FILE_UNSUPPORTED' | 'FILE_IO_ERROR';
 export declare class ManagedFileError extends Error {
     readonly code: ManagedFileErrorCode;
     constructor(code: ManagedFileErrorCode, message: string, options?: ErrorOptions);
@@ -27,6 +27,14 @@ export interface ManagedFileBoundaryConfig {
     onCleanupError?: (error: unknown) => void;
 }
 export interface ManagedFileReadOptions {
+    /** Include descriptor metadata in the result; default false keeps transport sources unchanged. */
+    observe?: boolean;
+    /** Refuse a symlink at the requested leaf. Ancestors remain trusted. */
+    rejectSymlinks?: boolean;
+    /** Require descriptor nlink===1; transient publication links are also refused. */
+    singleLink?: boolean;
+    /** Compare descriptor metadata around byte read; not a hostile-writer snapshot. */
+    stable?: boolean;
     maxBytes?: number;
     signal?: AbortSignal;
 }
@@ -38,9 +46,19 @@ export interface ManagedFileWriteOptions {
     name?: string;
     signal?: AbortSignal;
 }
+export interface FileObservation {
+    dev: number;
+    ino: number;
+    size: number;
+    nlink: number;
+    mtimeMs: number;
+    ctimeMs: number;
+}
 export interface ManagedFileSource {
     ref: ManagedFileRef;
     bytes: Uint8Array;
+    /** Included by createManagedFileBoundary when observe is true; custom sources may omit it. */
+    observation?: FileObservation;
 }
 export interface ManagedFileBoundary {
     read(path: string, options?: ManagedFileReadOptions): Promise<ManagedFileSource>;

package/dist/files/boundary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../../src/files/boundary.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAkBlF,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,aAAa,GACb,0BAA0B,GAC1B,eAAe,CAAC;AAEpB,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,oBAAoB;IAD5C,YACkB,IAAI,EAAE,oBAAoB,EAC1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,YAAY,EAIvB;CACF;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,UAAU,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,MAAM,CAAC,CAAC;AAE/E,MAAM,MAAM,oBAAoB,GAAG,CACjC,KAAK,EAAE,0BAA0B,KAC9B,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE5D,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,cAAc,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjF,KAAK,CACH,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,EAC/C,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AA2GD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,mBAAmB,CAAC,CAyJ9B"}
+{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../../src/files/boundary.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAqBlF,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,aAAa,GACb,0BAA0B,GAC1B,kBAAkB,GAClB,cAAc,GACd,kBAAkB,GAClB,eAAe,CAAC;AAEpB,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,oBAAoB;IAD5C,YACkB,IAAI,EAAE,oBAAoB,EAC1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,YAAY,EAIvB;CACF;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,UAAU,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,MAAM,CAAC,CAAC;AAE/E,MAAM,MAAM,oBAAoB,GAAG,CACjC,KAAK,EAAE,0BAA0B,KAC9B,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE5D,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,kGAAkG;IAClG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kFAAkF;IAClF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,cAAc,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,8FAA8F;IAC9F,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjF,KAAK,CACH,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,EAC/C,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AA2GD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,mBAAmB,CAAC,CAsJ9B"}

package/dist/files/file-io.d.ts

@@ -6,7 +6,11 @@ export declare function inspectedRef(path: string, size: number, inspection: Man
     mediaType?: string;
     name?: string;
 }): ManagedFileRef;
-export declare function readHandle(handle: Awaited<ReturnType<typeof open>>, maxBytes: number, signal?: AbortSignal): Promise<Uint8Array>;
+export declare function readHandle(handle: {
+    read(buffer: Uint8Array, offset: number, length: number): Promise<{
+        bytesRead: number;
+    }>;
+}, maxBytes: number, signal?: AbortSignal): Promise<Uint8Array>;
 export declare function writeSource(handle: Awaited<ReturnType<typeof open>>, source: Uint8Array | ReadableStream<Uint8Array>, maxBytes: number, inspectionBytes: number, signal?: AbortSignal): Promise<{
     size: number;
     prefix: Uint8Array;

package/dist/files/file-io.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-io.d.ts","sourceRoot":"","sources":["../../src/files/file-io.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,cAAc,EAAwB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AA+BpB,wBAAsB,WAAW,CAC/B,SAAS,EAAE,oBAAoB,GAAG,SAAS,EAC3C,KAAK,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,EACjD,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAmBhC;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,qBAAqB,EACjC,QAAQ,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,cAAc,CAiBhB;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EACxC,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CAyBrB;AAcD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EACxC,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,EAC/C,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC,CA2C/C"}
+{"version":3,"file":"file-io.d.ts","sourceRoot":"","sources":["../../src/files/file-io.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,cAAc,EAAwB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AA+BpB,wBAAsB,WAAW,CAC/B,SAAS,EAAE,oBAAoB,GAAG,SAAS,EAC3C,KAAK,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,EACjD,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAmBhC;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,qBAAqB,EACjC,QAAQ,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,cAAc,CAiBhB;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE;IACN,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1F,EACD,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CAkCrB;AAcD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EACxC,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,EAC/C,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC,CA2C/C"}

package/dist/files/read.d.ts

@@ -0,0 +1,13 @@
+import { type Stats } from 'node:fs';
+import { type FileHandle } from 'node:fs/promises';
+import type { ManagedFileInspector } from './boundary.js';
+import { type ManagedFileReadOptions, type ManagedFileSource } from './boundary.js';
+/** The descriptor, rather than a preceding path stat, decides kind/link/stability. */
+export declare function readManagedDescriptor(target: string, path: string, maxBytes: number, options: ManagedFileReadOptions, inspection: {
+    inspect?: ManagedFileInspector;
+    bytes: number;
+    timeoutMs: number;
+}, openDescriptor?: (path: string, flags: number) => Promise<Pick<FileHandle, 'read' | 'close'> & {
+    stat(): Promise<Stats>;
+}>): Promise<ManagedFileSource>;
+//# sourceMappingURL=read.d.ts.map

package/dist/files/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/files/read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,KAAK,UAAU,EAAQ,MAAM,kBAAkB,CAAC;AAEzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAC;AAGpB,sFAAsF;AACtF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,sBAAsB,EAC/B,UAAU,EAAE;IAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAChF,cAAc,GAAE,CACd,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG;IAAE,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;CAAE,CAAQ,GACnF,OAAO,CAAC,iBAAiB,CAAC,CAyE5B"}

package/dist/index-12m2v2a9.js

@@ -0,0 +1,98 @@
+import {
+  publishAtomicFile,
+  publishAtomicFileSync
+} from "./index-8a9ksm91.js";
+
+// src/internal/atomic-file.ts
+import { randomBytes } from "node:crypto";
+import { closeSync, fchmodSync, fsyncSync, openSync, unlinkSync, writeSync } from "node:fs";
+import { open, unlink } from "node:fs/promises";
+import { basename, dirname, join } from "node:path";
+var DEFAULT_MODE = 384;
+function stagingPath(target) {
+  return join(dirname(target), `.${basename(target)}.${randomBytes(12).toString("hex")}.tmp`);
+}
+function bytesOf(data) {
+  return typeof data === "string" ? new TextEncoder().encode(data) : data;
+}
+async function writeFileAtomic2(target, data, options = {}) {
+  return writeAtomicFileData(target, data, options);
+}
+async function writeAtomicFileData(target, data, options, io = { open, unlink, publish: publishAtomicFile }) {
+  const mode = options.mode ?? DEFAULT_MODE;
+  const staged = stagingPath(target);
+  const handle = await io.open(staged, "wx", mode);
+  try {
+    let failed = false;
+    let failure;
+    try {
+      await handle.writeFile(bytesOf(data));
+      await handle.chmod(mode);
+      if (options.durability !== "none")
+        await handle.sync();
+    } catch (error) {
+      failed = true;
+      failure = error;
+    } finally {
+      try {
+        await handle.close();
+      } catch (error) {
+        if (!failed) {
+          failed = true;
+          failure = error;
+        }
+      }
+    }
+    if (failed)
+      throw failure;
+    await io.publish(staged, target, options.replace ?? true, options.durability === "directory");
+  } catch (error) {
+    await io.unlink(staged).catch(() => {
+      return;
+    });
+    throw error;
+  }
+}
+function writeFileAtomicSync2(target, data, options = {}) {
+  const mode = options.mode ?? DEFAULT_MODE;
+  const bytes = bytesOf(data);
+  const staged = stagingPath(target);
+  const handle = openSync(staged, "wx", mode);
+  try {
+    let failed = false;
+    let failure;
+    try {
+      for (let offset = 0;offset < bytes.byteLength; ) {
+        const written = writeSync(handle, bytes, offset, bytes.byteLength - offset);
+        if (written === 0)
+          throw new Error("zero-byte atomic-file write");
+        offset += written;
+      }
+      fchmodSync(handle, mode);
+      if (options.durability !== "none")
+        fsyncSync(handle);
+    } catch (error) {
+      failed = true;
+      failure = error;
+    } finally {
+      try {
+        closeSync(handle);
+      } catch (error) {
+        if (!failed) {
+          failed = true;
+          failure = error;
+        }
+      }
+    }
+    if (failed)
+      throw failure;
+    publishAtomicFileSync(staged, target, options.replace ?? true, options.durability === "directory");
+  } catch (error) {
+    try {
+      unlinkSync(staged);
+    } catch {}
+    throw error;
+  }
+}
+
+export { writeFileAtomic2, writeFileAtomicSync2 };

package/dist/index-6m6a9ty4.js

@@ -0,0 +1,285 @@
+import {
+  raceAbort
+} from "./index-mbnnw3f2.js";
+
+// src/process/contract.ts
+import { z } from "zod";
+var NativeCommandSettlementSchema = z.discriminatedUnion("kind", [
+  z.object({
+    kind: z.literal("exit"),
+    exitCode: z.number().int().nullable(),
+    signal: z.string().nullable()
+  }),
+  z.object({ kind: z.literal("error"), cause: z.unknown() })
+]);
+var NativeCommandOptionsSchema = z.strictObject({
+  executable: z.string().min(1),
+  args: z.array(z.string()).default([]),
+  cwd: z.string().optional(),
+  env: z.record(z.string(), z.string()).optional(),
+  envPolicy: z.enum(["declared-only", "ambient"]).default("declared-only"),
+  signal: z.custom((v) => v instanceof AbortSignal).optional(),
+  timeoutMs: z.number().int().positive().max(2147483647).optional(),
+  maxOutputBytes: z.number().int().positive().optional(),
+  capture: z.boolean().default(false),
+  stdin: z.custom((v) => v instanceof Uint8Array).optional(),
+  maxStdinBytes: z.number().int().positive().default(1024 * 1024),
+  onOutput: z.custom((v) => typeof v === "function").optional(),
+  onLeaderSettled: z.custom((v) => typeof v === "function").optional(),
+  killGraceMs: z.number().int().nonnegative().max(1e4).default(100),
+  cleanupTimeoutMs: z.number().int().positive().max(30000).default(2000)
+}).superRefine((input, ctx) => {
+  if (!input.signal && input.timeoutMs === undefined)
+    ctx.addIssue({ code: "custom", message: "Declare a caller signal or a finite timeout" });
+  if (input.capture && input.maxOutputBytes === undefined)
+    ctx.addIssue({
+      code: "custom",
+      message: "Capture requires a finite combined output budget"
+    });
+  if (input.stdin && input.stdin.byteLength > input.maxStdinBytes)
+    ctx.addIssue({ code: "custom", message: "stdin exceeds maxStdinBytes" });
+});
+var NativeCommandResultSchema = z.object({
+  exitCode: z.number().int().nullable(),
+  signal: z.string().nullable(),
+  stdout: z.instanceof(Uint8Array),
+  stderr: z.instanceof(Uint8Array)
+});
+
+class NativeCommandError2 extends Error {
+  code;
+  constructor(code, message, options) {
+    super(message, options);
+    this.code = code;
+    this.name = "NativeCommandError";
+  }
+}
+
+// src/process/command-owner.ts
+import { spawn } from "node:child_process";
+
+// src/process/group.ts
+function deniedOnDarwin(error) {
+  return process.platform === "darwin" && error instanceof Error && "code" in error && error.code === "EPERM";
+}
+function signalGroup(pid, signal) {
+  if (pid === undefined)
+    return;
+  try {
+    process.kill(-pid, signal);
+  } catch (error) {
+    if (!(error instanceof Error && ("code" in error) && error.code === "ESRCH"))
+      throw error;
+  }
+}
+function exists(pid) {
+  if (pid === undefined)
+    return false;
+  try {
+    process.kill(-pid, 0);
+    return true;
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ESRCH")
+      return false;
+    if (deniedOnDarwin(error))
+      return true;
+    throw error;
+  }
+}
+async function signalUntilSettled(pid, signal, deadline) {
+  for (;; ) {
+    try {
+      signalGroup(pid, signal);
+      return;
+    } catch (error) {
+      if (!deniedOnDarwin(error) || Date.now() >= deadline)
+        throw error;
+      await new Promise((resolve) => setTimeout(resolve, Math.min(10, deadline - Date.now())));
+    }
+  }
+}
+async function stopCommandGroup(pid, graceMs, cleanupTimeoutMs = 2000) {
+  const deadline = Date.now() + graceMs + cleanupTimeoutMs;
+  await signalUntilSettled(pid, "SIGTERM", deadline);
+  const until = Date.now() + graceMs;
+  while (Date.now() < until && exists(pid))
+    await new Promise((resolve) => setTimeout(resolve, Math.min(10, until - Date.now())));
+  await signalUntilSettled(pid, "SIGKILL", deadline);
+}
+function commandCleanupError(cause) {
+  return new NativeCommandError2("COMMAND_CLEANUP", "Command cleanup did not complete", {
+    cause
+  });
+}
+function waitForCommandClose(closed, timeoutMs) {
+  return raceAbort(closed, AbortSignal.timeout(timeoutMs));
+}
+
+// src/process/leader-settlement.ts
+function createLeaderSettlement(options, signal) {
+  let pending;
+  return (event) => {
+    if (pending)
+      return pending;
+    pending = (async () => {
+      if (!options.onLeaderSettled)
+        return;
+      const controller = new AbortController;
+      const timer = setTimeout(() => controller.abort(new Error("Leader settlement deadline exceeded")), options.cleanupTimeoutMs);
+      const abort = () => controller.abort(signal.reason);
+      if (!signal.aborted)
+        signal.addEventListener("abort", abort, { once: true });
+      try {
+        await raceAbort(Promise.resolve(options.onLeaderSettled(event, controller.signal)), controller.signal);
+      } catch (cause) {
+        if (signal.aborted && cause === signal.reason)
+          throw cause;
+        throw commandCleanupError(new AggregateError([event, cause], "Leader settlement failed"));
+      } finally {
+        clearTimeout(timer);
+        signal.removeEventListener("abort", abort);
+        controller.abort(new Error("Leader settlement completed"));
+      }
+    })();
+    pending.catch(() => {
+      return;
+    });
+    return pending;
+  };
+}
+
+// src/process/command-owner.ts
+function startNativeCommand(input, onSpawn) {
+  const options = NativeCommandOptionsSchema.parse(input);
+  options.signal?.throwIfAborted();
+  if (process.platform === "win32")
+    throw new NativeCommandError2("COMMAND_UNAVAILABLE", "POSIX process groups are required");
+  const controller = new AbortController;
+  const abort = () => controller.abort(options.signal?.reason);
+  options.signal?.addEventListener("abort", abort, { once: true });
+  if (options.signal?.aborted)
+    abort();
+  const timer = options.timeoutMs === undefined ? undefined : setTimeout(() => controller.abort(new NativeCommandError2("COMMAND_LIMIT", "Command deadline exceeded")), options.timeoutMs);
+  let child;
+  try {
+    child = spawn(options.executable, options.args, {
+      cwd: options.cwd,
+      env: options.envPolicy === "ambient" ? { ...process.env, ...options.env } : options.env ?? {},
+      detached: true,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+  } catch (cause) {
+    if (timer !== undefined)
+      clearTimeout(timer);
+    options.signal?.removeEventListener("abort", abort);
+    throw new NativeCommandError2("COMMAND_UNAVAILABLE", "Command could not start", { cause });
+  }
+  const stdout = [];
+  const stderr = [];
+  let total = 0;
+  let finished = false;
+  let spawnFailure;
+  const settle = createLeaderSettlement(options, controller.signal);
+  const leader = new Promise((resolve) => {
+    child.once("exit", (exitCode, signal) => resolve({ kind: "exit", exitCode, signal }));
+    child.once("error", (cause) => resolve({ kind: "error", cause }));
+  });
+  const pendingHandles = new Set(["leader", "stdin", "stdout", "stderr"]);
+  const released = Promise.all([
+    leader.then(() => pendingHandles.delete("leader")),
+    ...["stdin", "stdout", "stderr"].map((name) => new Promise((resolve) => child[name].once("close", () => {
+      pendingHandles.delete(name);
+      resolve();
+    })))
+  ]);
+  const closed = new Promise((resolve) => {
+    child.once("error", (error) => {
+      spawnFailure = new NativeCommandError2("COMMAND_UNAVAILABLE", "Command could not start", {
+        cause: error
+      });
+      controller.abort(spawnFailure);
+    });
+    child.once("close", (exitCode, signal) => resolve({ exitCode, signal }));
+  });
+  child.stdin.on("error", (error) => {
+    if (!(("code" in error) && error.code === "EPIPE"))
+      controller.abort(error);
+  });
+  const drain = async (stream, channel, captured) => {
+    for await (const chunk of stream) {
+      controller.signal.throwIfAborted();
+      if (!(chunk instanceof Uint8Array))
+        throw new TypeError("Expected binary command output");
+      total += chunk.byteLength;
+      if (options.maxOutputBytes !== undefined && total > options.maxOutputBytes)
+        throw new NativeCommandError2("COMMAND_LIMIT", "Command output budget exceeded");
+      if (options.capture)
+        captured.push(Uint8Array.from(chunk));
+      if (options.onOutput)
+        await raceAbort(Promise.resolve().then(() => {
+          controller.signal.throwIfAborted();
+          return options.onOutput?.(chunk, channel, controller.signal);
+        }), controller.signal);
+    }
+  };
+  const result = (async () => {
+    try {
+      onSpawn?.(child);
+      child.stdin.end(options.stdin);
+      const drains = Promise.all([
+        drain(child.stdout, "stdout", stdout),
+        drain(child.stderr, "stderr", stderr)
+      ]);
+      await raceAbort(Promise.all([drains, leader.then(settle)]), controller.signal);
+      const status = await raceAbort(closed, controller.signal);
+      if (spawnFailure !== undefined)
+        throw spawnFailure;
+      return { ...status, stdout: Buffer.concat(stdout), stderr: Buffer.concat(stderr) };
+    } catch (error) {
+      controller.abort(error);
+      child.stdin.destroy();
+      child.stdout.destroy();
+      child.stderr.destroy();
+      const cleanup = await Promise.allSettled([
+        settle({ kind: "error", cause: error }),
+        stopCommandGroup(child.pid, options.killGraceMs, options.cleanupTimeoutMs).then(async () => {
+          try {
+            await waitForCommandClose(released, options.cleanupTimeoutMs);
+          } catch (cause) {
+            throw new Error(`Command handles remained open: ${[...pendingHandles].join(", ")}`, {
+              cause
+            });
+          }
+        })
+      ]);
+      const failures = cleanup.flatMap((item) => item.status === "rejected" && item.reason !== error ? [item.reason] : []);
+      if (failures.length) {
+        throw commandCleanupError(new AggregateError([error, ...failures], "Command failed and cleanup failed"));
+      }
+      throw error;
+    } finally {
+      finished = true;
+      if (timer !== undefined)
+        clearTimeout(timer);
+      options.signal?.removeEventListener("abort", abort);
+      controller.abort(new Error("Command completed"));
+    }
+  })();
+  result.catch(() => {
+    return;
+  });
+  return {
+    result,
+    async stop() {
+      if (!finished)
+        controller.abort(new DOMException("Command stopped", "AbortError"));
+      await result.then(() => {
+        return;
+      }, () => {
+        return;
+      });
+    }
+  };
+}
+
+export { NativeCommandError2, startNativeCommand };

package/dist/index-8a9ksm91.js

@@ -0,0 +1,95 @@
+// src/internal/atomic-publication.ts
+import { closeSync, fsyncSync, linkSync, openSync, renameSync, unlinkSync } from "node:fs";
+import { link, open, rename, unlink } from "node:fs/promises";
+import { dirname } from "node:path";
+
+class AtomicFilePublicationError2 extends Error {
+  phase;
+  published = true;
+  constructor(phase, cause) {
+    super(`File published but ${phase} failed`, { cause });
+    this.phase = phase;
+    this.name = "AtomicFilePublicationError";
+  }
+}
+var native = { rename, link, unlink, open };
+async function publishAtomicFile(staged, target, replace, directorySync, io = native) {
+  if (directorySync && process.platform === "win32")
+    throw new Error("Directory durability is unsupported on Windows");
+  const directory = directorySync ? await io.open(dirname(target), "r") : undefined;
+  let failed = false;
+  let failure;
+  try {
+    if (replace)
+      await io.rename(staged, target);
+    else {
+      await io.link(staged, target);
+      try {
+        await io.unlink(staged);
+      } catch (error) {
+        throw new AtomicFilePublicationError2("cleanup", error);
+      }
+    }
+    try {
+      await directory?.sync();
+    } catch (error) {
+      throw new AtomicFilePublicationError2("directory-sync", error);
+    }
+  } catch (error) {
+    failed = true;
+    failure = error;
+  } finally {
+    try {
+      await directory?.close();
+    } catch (error) {
+      if (!failed) {
+        failed = true;
+        failure = new AtomicFilePublicationError2("directory-close", error);
+      }
+    }
+  }
+  if (failed)
+    throw failure;
+}
+function publishAtomicFileSync(staged, target, replace, directorySync) {
+  if (directorySync && process.platform === "win32")
+    throw new Error("Directory durability is unsupported on Windows");
+  const directory = directorySync ? openSync(dirname(target), "r") : undefined;
+  let failed = false;
+  let failure;
+  try {
+    if (replace)
+      renameSync(staged, target);
+    else {
+      linkSync(staged, target);
+      try {
+        unlinkSync(staged);
+      } catch (error) {
+        throw new AtomicFilePublicationError2("cleanup", error);
+      }
+    }
+    try {
+      if (directory !== undefined)
+        fsyncSync(directory);
+    } catch (error) {
+      throw new AtomicFilePublicationError2("directory-sync", error);
+    }
+  } catch (error) {
+    failed = true;
+    failure = error;
+  } finally {
+    try {
+      if (directory !== undefined)
+        closeSync(directory);
+    } catch (error) {
+      if (!failed) {
+        failed = true;
+        failure = new AtomicFilePublicationError2("directory-close", error);
+      }
+    }
+  }
+  if (failed)
+    throw failure;
+}
+
+export { AtomicFilePublicationError2, publishAtomicFile, publishAtomicFileSync };

package/dist/{index-90ppdx3q.js → index-9jb61j5a.js}

@@ -20,7 +20,7 @@ import {
 } from "./index-mnkk1ffz.js";
 import {
   createLocalStepDurability2
-} from "./index-5vyd0fkb.js";
+} from "./index-ary5s7k0.js";
 import {
   isAgentToolError2,
   createToolDurabilityContext