stitchkit 0.103.8 → 0.103.9

package/dist/files/boundary.d.ts

@@ -1,5 +1,5 @@
 import { type ManagedFileRef } from '../contract/file-ref.js';
-export type ManagedFileErrorCode = 'FILE_INVALID_PATH' | 'FILE_NOT_FOUND' | 'FILE_NOT_REGULAR' | 'FILE_OUTSIDE_ROOT' | 'FILE_TOO_LARGE' | 'FILE_EXISTS' | 'FILE_INSPECTION_REJECTED' | 'FILE_IO_ERROR';
+export type ManagedFileErrorCode = 'FILE_INVALID_PATH' | 'FILE_NOT_FOUND' | 'FILE_NOT_REGULAR' | 'FILE_OUTSIDE_ROOT' | 'FILE_TOO_LARGE' | 'FILE_EXISTS' | 'FILE_INSPECTION_REJECTED' | 'FILE_UNSAFE_LINK' | 'FILE_CHANGED' | 'FILE_UNSUPPORTED' | 'FILE_IO_ERROR';
 export declare class ManagedFileError extends Error {
     readonly code: ManagedFileErrorCode;
     constructor(code: ManagedFileErrorCode, message: string, options?: ErrorOptions);
@@ -27,6 +27,14 @@ export interface ManagedFileBoundaryConfig {
     onCleanupError?: (error: unknown) => void;
 }
 export interface ManagedFileReadOptions {
+    /** Include descriptor metadata in the result; default false keeps transport sources unchanged. */
+    observe?: boolean;
+    /** Refuse a symlink at the requested leaf. Ancestors remain trusted. */
+    rejectSymlinks?: boolean;
+    /** Require descriptor nlink===1; transient publication links are also refused. */
+    singleLink?: boolean;
+    /** Compare descriptor metadata around byte read; not a hostile-writer snapshot. */
+    stable?: boolean;
     maxBytes?: number;
     signal?: AbortSignal;
 }
@@ -38,9 +46,19 @@ export interface ManagedFileWriteOptions {
     name?: string;
     signal?: AbortSignal;
 }
+export interface FileObservation {
+    dev: number;
+    ino: number;
+    size: number;
+    nlink: number;
+    mtimeMs: number;
+    ctimeMs: number;
+}
 export interface ManagedFileSource {
     ref: ManagedFileRef;
     bytes: Uint8Array;
+    /** Included by createManagedFileBoundary when observe is true; custom sources may omit it. */
+    observation?: FileObservation;
 }
 export interface ManagedFileBoundary {
     read(path: string, options?: ManagedFileReadOptions): Promise<ManagedFileSource>;

package/dist/files/boundary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../../src/files/boundary.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAkBlF,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,aAAa,GACb,0BAA0B,GAC1B,eAAe,CAAC;AAEpB,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,oBAAoB;IAD5C,YACkB,IAAI,EAAE,oBAAoB,EAC1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,YAAY,EAIvB;CACF;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,UAAU,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,MAAM,CAAC,CAAC;AAE/E,MAAM,MAAM,oBAAoB,GAAG,CACjC,KAAK,EAAE,0BAA0B,KAC9B,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE5D,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,cAAc,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjF,KAAK,CACH,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,EAC/C,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AA2GD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,mBAAmB,CAAC,CAyJ9B"}
+{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../../src/files/boundary.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAqBlF,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,aAAa,GACb,0BAA0B,GAC1B,kBAAkB,GAClB,cAAc,GACd,kBAAkB,GAClB,eAAe,CAAC;AAEpB,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,oBAAoB;IAD5C,YACkB,IAAI,EAAE,oBAAoB,EAC1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,YAAY,EAIvB;CACF;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,UAAU,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,MAAM,CAAC,CAAC;AAE/E,MAAM,MAAM,oBAAoB,GAAG,CACjC,KAAK,EAAE,0BAA0B,KAC9B,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE5D,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,kGAAkG;IAClG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kFAAkF;IAClF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,cAAc,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,8FAA8F;IAC9F,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjF,KAAK,CACH,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,EAC/C,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AA2GD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,mBAAmB,CAAC,CAsJ9B"}

package/dist/files/file-io.d.ts

@@ -6,7 +6,11 @@ export declare function inspectedRef(path: string, size: number, inspection: Man
     mediaType?: string;
     name?: string;
 }): ManagedFileRef;
-export declare function readHandle(handle: Awaited<ReturnType<typeof open>>, maxBytes: number, signal?: AbortSignal): Promise<Uint8Array>;
+export declare function readHandle(handle: {
+    read(buffer: Uint8Array, offset: number, length: number): Promise<{
+        bytesRead: number;
+    }>;
+}, maxBytes: number, signal?: AbortSignal): Promise<Uint8Array>;
 export declare function writeSource(handle: Awaited<ReturnType<typeof open>>, source: Uint8Array | ReadableStream<Uint8Array>, maxBytes: number, inspectionBytes: number, signal?: AbortSignal): Promise<{
     size: number;
     prefix: Uint8Array;

package/dist/files/file-io.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-io.d.ts","sourceRoot":"","sources":["../../src/files/file-io.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,cAAc,EAAwB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AA+BpB,wBAAsB,WAAW,CAC/B,SAAS,EAAE,oBAAoB,GAAG,SAAS,EAC3C,KAAK,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,EACjD,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAmBhC;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,qBAAqB,EACjC,QAAQ,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,cAAc,CAiBhB;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EACxC,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CAyBrB;AAcD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EACxC,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,EAC/C,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC,CA2C/C"}
+{"version":3,"file":"file-io.d.ts","sourceRoot":"","sources":["../../src/files/file-io.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,cAAc,EAAwB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AA+BpB,wBAAsB,WAAW,CAC/B,SAAS,EAAE,oBAAoB,GAAG,SAAS,EAC3C,KAAK,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,EACjD,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAmBhC;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,qBAAqB,EACjC,QAAQ,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,cAAc,CAiBhB;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE;IACN,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1F,EACD,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CAkCrB;AAcD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EACxC,MAAM,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,EAC/C,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC,CA2C/C"}

package/dist/files/read.d.ts

@@ -0,0 +1,13 @@
+import { type Stats } from 'node:fs';
+import { type FileHandle } from 'node:fs/promises';
+import type { ManagedFileInspector } from './boundary.js';
+import { type ManagedFileReadOptions, type ManagedFileSource } from './boundary.js';
+/** The descriptor, rather than a preceding path stat, decides kind/link/stability. */
+export declare function readManagedDescriptor(target: string, path: string, maxBytes: number, options: ManagedFileReadOptions, inspection: {
+    inspect?: ManagedFileInspector;
+    bytes: number;
+    timeoutMs: number;
+}, openDescriptor?: (path: string, flags: number) => Promise<Pick<FileHandle, 'read' | 'close'> & {
+    stat(): Promise<Stats>;
+}>): Promise<ManagedFileSource>;
+//# sourceMappingURL=read.d.ts.map

package/dist/files/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/files/read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,KAAK,UAAU,EAAQ,MAAM,kBAAkB,CAAC;AAEzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAC;AAGpB,sFAAsF;AACtF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,sBAAsB,EAC/B,UAAU,EAAE;IAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAChF,cAAc,GAAE,CACd,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG;IAAE,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;CAAE,CAAQ,GACnF,OAAO,CAAC,iBAAiB,CAAC,CAyE5B"}

package/dist/index-12m2v2a9.js

@@ -0,0 +1,98 @@
+import {
+  publishAtomicFile,
+  publishAtomicFileSync
+} from "./index-8a9ksm91.js";
+
+// src/internal/atomic-file.ts
+import { randomBytes } from "node:crypto";
+import { closeSync, fchmodSync, fsyncSync, openSync, unlinkSync, writeSync } from "node:fs";
+import { open, unlink } from "node:fs/promises";
+import { basename, dirname, join } from "node:path";
+var DEFAULT_MODE = 384;
+function stagingPath(target) {
+  return join(dirname(target), `.${basename(target)}.${randomBytes(12).toString("hex")}.tmp`);
+}
+function bytesOf(data) {
+  return typeof data === "string" ? new TextEncoder().encode(data) : data;
+}
+async function writeFileAtomic2(target, data, options = {}) {
+  return writeAtomicFileData(target, data, options);
+}
+async function writeAtomicFileData(target, data, options, io = { open, unlink, publish: publishAtomicFile }) {
+  const mode = options.mode ?? DEFAULT_MODE;
+  const staged = stagingPath(target);
+  const handle = await io.open(staged, "wx", mode);
+  try {
+    let failed = false;
+    let failure;
+    try {
+      await handle.writeFile(bytesOf(data));
+      await handle.chmod(mode);
+      if (options.durability !== "none")
+        await handle.sync();
+    } catch (error) {
+      failed = true;
+      failure = error;
+    } finally {
+      try {
+        await handle.close();
+      } catch (error) {
+        if (!failed) {
+          failed = true;
+          failure = error;
+        }
+      }
+    }
+    if (failed)
+      throw failure;
+    await io.publish(staged, target, options.replace ?? true, options.durability === "directory");
+  } catch (error) {
+    await io.unlink(staged).catch(() => {
+      return;
+    });
+    throw error;
+  }
+}
+function writeFileAtomicSync2(target, data, options = {}) {
+  const mode = options.mode ?? DEFAULT_MODE;
+  const bytes = bytesOf(data);
+  const staged = stagingPath(target);
+  const handle = openSync(staged, "wx", mode);
+  try {
+    let failed = false;
+    let failure;
+    try {
+      for (let offset = 0;offset < bytes.byteLength; ) {
+        const written = writeSync(handle, bytes, offset, bytes.byteLength - offset);
+        if (written === 0)
+          throw new Error("zero-byte atomic-file write");
+        offset += written;
+      }
+      fchmodSync(handle, mode);
+      if (options.durability !== "none")
+        fsyncSync(handle);
+    } catch (error) {
+      failed = true;
+      failure = error;
+    } finally {
+      try {
+        closeSync(handle);
+      } catch (error) {
+        if (!failed) {
+          failed = true;
+          failure = error;
+        }
+      }
+    }
+    if (failed)
+      throw failure;
+    publishAtomicFileSync(staged, target, options.replace ?? true, options.durability === "directory");
+  } catch (error) {
+    try {
+      unlinkSync(staged);
+    } catch {}
+    throw error;
+  }
+}
+
+export { writeFileAtomic2, writeFileAtomicSync2 };

package/dist/index-8a9ksm91.js

@@ -0,0 +1,95 @@
+// src/internal/atomic-publication.ts
+import { closeSync, fsyncSync, linkSync, openSync, renameSync, unlinkSync } from "node:fs";
+import { link, open, rename, unlink } from "node:fs/promises";
+import { dirname } from "node:path";
+
+class AtomicFilePublicationError2 extends Error {
+  phase;
+  published = true;
+  constructor(phase, cause) {
+    super(`File published but ${phase} failed`, { cause });
+    this.phase = phase;
+    this.name = "AtomicFilePublicationError";
+  }
+}
+var native = { rename, link, unlink, open };
+async function publishAtomicFile(staged, target, replace, directorySync, io = native) {
+  if (directorySync && process.platform === "win32")
+    throw new Error("Directory durability is unsupported on Windows");
+  const directory = directorySync ? await io.open(dirname(target), "r") : undefined;
+  let failed = false;
+  let failure;
+  try {
+    if (replace)
+      await io.rename(staged, target);
+    else {
+      await io.link(staged, target);
+      try {
+        await io.unlink(staged);
+      } catch (error) {
+        throw new AtomicFilePublicationError2("cleanup", error);
+      }
+    }
+    try {
+      await directory?.sync();
+    } catch (error) {
+      throw new AtomicFilePublicationError2("directory-sync", error);
+    }
+  } catch (error) {
+    failed = true;
+    failure = error;
+  } finally {
+    try {
+      await directory?.close();
+    } catch (error) {
+      if (!failed) {
+        failed = true;
+        failure = new AtomicFilePublicationError2("directory-close", error);
+      }
+    }
+  }
+  if (failed)
+    throw failure;
+}
+function publishAtomicFileSync(staged, target, replace, directorySync) {
+  if (directorySync && process.platform === "win32")
+    throw new Error("Directory durability is unsupported on Windows");
+  const directory = directorySync ? openSync(dirname(target), "r") : undefined;
+  let failed = false;
+  let failure;
+  try {
+    if (replace)
+      renameSync(staged, target);
+    else {
+      linkSync(staged, target);
+      try {
+        unlinkSync(staged);
+      } catch (error) {
+        throw new AtomicFilePublicationError2("cleanup", error);
+      }
+    }
+    try {
+      if (directory !== undefined)
+        fsyncSync(directory);
+    } catch (error) {
+      throw new AtomicFilePublicationError2("directory-sync", error);
+    }
+  } catch (error) {
+    failed = true;
+    failure = error;
+  } finally {
+    try {
+      if (directory !== undefined)
+        closeSync(directory);
+    } catch (error) {
+      if (!failed) {
+        failed = true;
+        failure = new AtomicFilePublicationError2("directory-close", error);
+      }
+    }
+  }
+  if (failed)
+    throw failure;
+}
+
+export { AtomicFilePublicationError2, publishAtomicFile, publishAtomicFileSync };

package/dist/{index-90ppdx3q.js → index-9jb61j5a.js}

@@ -20,7 +20,7 @@ import {
 } from "./index-mnkk1ffz.js";
 import {
   createLocalStepDurability2
-} from "./index-5vyd0fkb.js";
+} from "./index-ary5s7k0.js";
 import {
   isAgentToolError2,
   createToolDurabilityContext

package/dist/{index-5vyd0fkb.js → index-ary5s7k0.js}

@@ -1,3 +1,10 @@
+import {
+  isJsonData
+} from "./index-c1jmtxa0.js";
+import {
+  raceAbort
+} from "./index-mbnnw3f2.js";
+
 // src/durability/contract.ts
 import { z } from "zod";
 var DURABILITY_STEP_EVENT_KIND2 = "durability/step";
@@ -93,44 +100,12 @@ class ParkAbortedError2 extends Error {
 
 // src/durability/json.ts
 import { z as z2 } from "zod";
-function losslessJson(value, ancestors = new Set, depth = 0) {
-  if (depth > 100)
-    return false;
-  if (value === null || typeof value === "string" || typeof value === "boolean")
-    return true;
-  if (typeof value === "number")
-    return Number.isFinite(value) && !Object.is(value, -0);
-  if (typeof value !== "object" || ancestors.has(value))
-    return false;
-  const array = Array.isArray(value);
-  const prototype = Object.getPrototypeOf(value);
-  if (array ? prototype !== Array.prototype : prototype !== Object.prototype && prototype !== null)
-    return false;
-  ancestors.add(value);
-  try {
-    const descriptors = Object.getOwnPropertyDescriptors(value);
-    const keys = Reflect.ownKeys(descriptors);
-    if (array && keys.length !== value.length + 1)
-      return false;
-    for (const key of keys) {
-      if (array && key === "length")
-        continue;
-      if (typeof key !== "string")
-        return false;
-      if (array && (!/^(0|[1-9][0-9]*)$/.test(key) || Number(key) >= value.length))
-        return false;
-      const descriptor = descriptors[key];
-      if (!descriptor?.enumerable || !("value" in descriptor))
-        return false;
-      if (!losslessJson(descriptor.value, ancestors, depth + 1))
-        return false;
-    }
-    return true;
-  } finally {
-    ancestors.delete(value);
-  }
-}
-var DurableJsonSchema = z2.custom((value) => losslessJson(value), "Expected lossless JSON data (finite numbers, plain objects and dense arrays; no accessors)");
+var DurableJsonSchema = z2.custom((value) => isJsonData(value, {
+  maxDepth: 100,
+  maxNodes: Number.MAX_SAFE_INTEGER,
+  maxBytes: Number.MAX_SAFE_INTEGER,
+  omitObjectUndefined: false
+}), "Expected lossless JSON data (finite numbers, plain objects and dense arrays; no accessors)");
 
 // src/durability/ledger.ts
 function stepKey(conversationId, runId, stepName) {
@@ -292,30 +267,25 @@ async function append(context, payload, name) {
     payload: { runId: context.runId, effectName: name, ...payload }
   });
 }
-async function reconcile(context, name, handlers, timeoutMs) {
+async function reconcile(context, name, handlers, timeoutMs, outerSignal) {
+  const caller = [context.signal, outerSignal].filter((signal) => signal !== undefined);
   const controller = new AbortController;
-  let timer;
-  const deadline = new Promise((resolve) => {
-    timer = setTimeout(() => {
-      controller.abort(new Error(`reconcile did not finish within ${timeoutMs} ms`));
-      resolve("timeout");
-    }, timeoutMs);
-  });
+  const timeout = setTimeout(() => controller.abort(new Error(`reconcile did not finish within ${timeoutMs} ms`)), timeoutMs);
+  const signal = AbortSignal.any([...caller, controller.signal]);
   let found;
   try {
-    found = await Promise.race([
-      Promise.resolve().then(() => handlers.reconcile(controller.signal)),
-      deadline
-    ]);
+    found = await raceAbort(Promise.resolve().then(() => {
+      signal.throwIfAborted();
+      return handlers.reconcile(signal);
+    }), signal);
+    signal.throwIfAborted();
   } catch (cause) {
-    throw new EffectUnresolvedError2(name, "reconcile-failed", { cause });
+    if (caller.some((signal) => signal.aborted))
+      throw new StepAbortedError2(name);
+    throw new EffectUnresolvedError2(name, controller.signal.aborted ? "reconcile-timeout" : "reconcile-failed", { cause });
   } finally {
-    clearTimeout(timer);
-  }
-  if (found === "timeout") {
-    throw new EffectUnresolvedError2(name, "reconcile-timeout", {
-      cause: controller.signal.reason
-    });
+    clearTimeout(timeout);
+    controller.abort(new Error("Reconciliation completed"));
   }
   if (found === null) {
     await append(context, { phase: "uncertain" }, name);
@@ -327,8 +297,8 @@ async function reconcile(context, name, handlers, timeoutMs) {
 }
 async function executeEffect(context, name, handlers, options) {
   const timeoutMs = options?.reconcileTimeoutMs ?? DEFAULT_RECONCILE_TIMEOUT_MS;
-  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
-    throw new TypeError(`reconcileTimeoutMs must be a positive finite number, got ${timeoutMs}`);
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0 || timeoutMs > 2147483647) {
+    throw new TypeError(`reconcileTimeoutMs must be a positive finite number at most 2147483647, got ${timeoutMs}`);
   }
   const key = effectKey(context.conversationId, context.runId, name);
   const recorded = (await context.readLedger()).effects.get(key);
@@ -340,7 +310,7 @@ async function executeEffect(context, name, handlers, options) {
   if (options?.signal?.aborted || context.signal?.aborted)
     throw new StepAbortedError2(name);
   if (recorded)
-    return reconcile(context, name, handlers, timeoutMs);
+    return reconcile(context, name, handlers, timeoutMs, options?.signal);
   await append(context, { phase: "intent" }, name);
   let proof;
   try {
@@ -581,7 +551,16 @@ function createLocalStepDurability2(options) {
     const key = effectKey(conversationId, runId, name);
     const existing = inFlightEffects.get(key);
     if (existing) {
-      return detachedResult(existing);
+      const signals = [options.signal, runOptions?.signal].filter((signal) => signal !== undefined);
+      const result = detachedResult(existing);
+      if (signals.length === 0)
+        return result;
+      const signal = AbortSignal.any(signals);
+      return raceAbort(result, signal).catch((error) => {
+        if (signal.aborted)
+          throw new StepAbortedError2(name);
+        throw error;
+      });
     }
     const pending = executeEffect({ store, conversationId, runId, signal: options.signal, readLedger }, name, handlers, runOptions);
     inFlightEffects.set(key, pending);

package/dist/index-c1jmtxa0.js

@@ -0,0 +1,74 @@
+// src/internal/json-data.ts
+function isJsonData(value, limits) {
+  const ancestors = new Set;
+  let nodes = 0;
+  let bytes = 0;
+  const charge = (amount) => {
+    bytes += amount;
+    return bytes <= limits.maxBytes;
+  };
+  const textSize = (text) => {
+    if (text.length > limits.maxBytes)
+      return limits.maxBytes + 1;
+    return new TextEncoder().encode(JSON.stringify(text)).byteLength;
+  };
+  const visit = (item, depth) => {
+    if (++nodes > limits.maxNodes || depth > limits.maxDepth)
+      return false;
+    if (item === null)
+      return charge(4);
+    if (typeof item === "string")
+      return charge(textSize(item));
+    if (typeof item === "boolean")
+      return charge(item ? 4 : 5);
+    if (typeof item === "number")
+      return Number.isFinite(item) && !Object.is(item, -0) && charge(String(item).length);
+    if (typeof item !== "object" || ancestors.has(item))
+      return false;
+    const array = Array.isArray(item);
+    const prototype = Object.getPrototypeOf(item);
+    if (array ? prototype !== Array.prototype : prototype !== Object.prototype && prototype !== null)
+      return false;
+    if (array && item.length > limits.maxNodes - nodes)
+      return false;
+    const keys = Reflect.ownKeys(item);
+    if (keys.length > limits.maxNodes - nodes + (array ? 1 : 0))
+      return false;
+    if (array && keys.length !== item.length + 1)
+      return false;
+    ancestors.add(item);
+    try {
+      if (!charge(2))
+        return false;
+      let members = 0;
+      for (const key of keys) {
+        if (array && key === "length")
+          continue;
+        if (typeof key !== "string")
+          return false;
+        if (array && (!/^(0|[1-9][0-9]*)$/.test(key) || Number(key) >= item.length))
+          return false;
+        const descriptor = Object.getOwnPropertyDescriptor(item, key);
+        if (!descriptor?.enumerable || !("value" in descriptor))
+          return false;
+        if (!array && limits.omitObjectUndefined && descriptor.value === undefined) {
+          if (++nodes > limits.maxNodes)
+            return false;
+          continue;
+        }
+        if (members++ > 0 && !charge(1))
+          return false;
+        if (!array && !charge(textSize(key) + 1))
+          return false;
+        if (!visit(descriptor.value, depth + 1))
+          return false;
+      }
+      return true;
+    } finally {
+      ancestors.delete(item);
+    }
+  };
+  return visit(value, 0);
+}
+
+export { isJsonData };