stitchkit 0.114.1 → 0.115.0

package/dist/{index-zrtrjkbf.js → index-x0ddbj85.js}

@@ -1,17 +1,22 @@
 import {
   loadDarwinBinding
 } from "./index-2kbysk9s.js";
+import {
+  errnoOf
+} from "./index-jj9228tt.js";
 
-// src/agent-runtime/contained-scan.ts
-import path2 from "node:path";
-
-// src/agent-runtime/contained-files.ts
+// src/internal/contained-directory.ts
 import { constants } from "node:fs";
-import { lstat, mkdir, open, readdir, realpath } from "node:fs/promises";
+import { mkdir, open, realpath } from "node:fs/promises";
 import path from "node:path";
 
-// src/agent-runtime/contained-darwin.ts
+// src/internal/contained-handle.ts
 import { close as closeDescriptor, fstat, read as readDescriptor } from "node:fs";
+function descriptorPath(handle) {
+  if (process.platform === "linux")
+    return `/proc/self/fd/${handle.fd}`;
+  throw new Error("Descriptor paths are available only in the Linux contained-files backend");
+}
 var FILE_TYPE_MASK = 61440;
 var FILE_TYPE_DIRECTORY = 16384;
 var FILE_TYPE_REGULAR = 32768;
@@ -22,10 +27,14 @@ function modeIs(mode, type) {
 
 class NumericFileHandle {
   fd;
+  closed = false;
   constructor(fd) {
     this.fd = fd;
   }
   close() {
+    if (this.closed)
+      return Promise.resolve();
+    this.closed = true;
     return new Promise((resolve, reject) => {
       closeDescriptor(this.fd, (error) => error ? reject(error) : resolve());
     });
@@ -42,55 +51,111 @@ class NumericFileHandle {
   }
 }
 
-// src/agent-runtime/contained-files.ts
-function containedEntryKind(entry) {
-  return entry.isDirectory() ? "directory" : entry.isSymbolicLink() ? "symlink" : entry.isFile() ? "file" : "other";
+// src/internal/contained-directory.ts
+var O_PATH_LINUX = 2097152;
+var O_SEARCH_DARWIN = 1073741824;
+function directoryFlags(searchOnly) {
+  const access = searchOnly ? process.platform === "linux" ? O_PATH_LINUX : O_SEARCH_DARWIN : constants.O_RDONLY;
+  return access | constants.O_DIRECTORY | constants.O_NOFOLLOW;
 }
-function descriptorPath(handle) {
-  if (process.platform === "linux")
-    return `/proc/self/fd/${handle.fd}`;
-  throw new Error("Descriptor paths are available only in the Linux contained-files backend");
+async function openDirectoryAt(directory, name, searchOnly = false) {
+  if (process.platform === "darwin") {
+    return new NumericFileHandle(loadDarwinBinding().openDirectoryAt(directory.fd, name, searchOnly));
+  }
+  return open(path.join(descriptorPath(directory), name), directoryFlags(searchOnly));
 }
-function sameIdentity(left, right) {
-  return left.dev === right.dev && left.ino === right.ino;
+async function descend(current, next) {
+  try {
+    await current.close();
+  } catch (error) {
+    await next.close();
+    throw error;
+  }
+  return next;
 }
-async function openPinnedDirectory(absolute) {
+async function createDirectoryAt(directory, name) {
+  if (process.platform === "darwin") {
+    return loadDarwinBinding().createDirectoryAt(directory.fd, name, 511);
+  }
+  try {
+    await mkdir(path.join(descriptorPath(directory), name));
+    return true;
+  } catch (error) {
+    if (errnoOf(error) === "EEXIST")
+      return false;
+    throw error;
+  }
+}
+async function openPinnedDirectory(absolute, options = {}, io = { realpath }) {
   if (process.platform !== "linux" && process.platform !== "darwin") {
     throw new Error("Contained filesystem operations support Linux and macOS only");
   }
-  const expected = await realpath(absolute);
-  const handle = await open(expected, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+  let prefix = path.resolve(absolute);
+  const missing = [];
+  let canonical;
+  for (;; ) {
+    try {
+      canonical = await io.realpath(prefix);
+      break;
+    } catch (error) {
+      if (!options.create || errnoOf(error) !== "ENOENT")
+        throw error;
+      const parent = path.dirname(prefix);
+      if (parent === prefix)
+        throw error;
+      missing.unshift(path.basename(prefix));
+      prefix = parent;
+    }
+  }
+  const anchor = path.parse(canonical).root;
+  let current = await open(anchor, directoryFlags(true));
+  if (canonical === anchor && missing.length === 0 && options.readable !== false) {
+    await current.close();
+    return open(anchor, directoryFlags(false));
+  }
+  const existing = path.relative(anchor, canonical).split(path.sep).filter(Boolean);
   try {
-    const [pathMetadata, handleMetadata] = await Promise.all([lstat(expected), handle.stat()]);
-    if (!pathMetadata.isDirectory() || !sameIdentity(pathMetadata, handleMetadata)) {
-      throw new Error("Contained directory identity changed while opening");
+    const segments = [...existing, ...missing];
+    for (const [index, segment] of segments.entries()) {
+      if (index >= existing.length)
+        await createDirectoryAt(current, segment);
+      const next = await openDirectoryAt(current, segment, index < segments.length - 1 || options.readable === false);
+      current = await descend(current, next);
     }
-    return handle;
+    return current;
   } catch (error) {
-    await handle.close();
+    await current.close();
     throw error;
   }
 }
+
+// src/internal/contained-files.ts
+import { constants as constants2 } from "node:fs";
+import { lstat, open as open2, readdir } from "node:fs/promises";
+import path2 from "node:path";
+function containedEntryKind(entry) {
+  return entry.isDirectory() ? "directory" : entry.isSymbolicLink() ? "symlink" : entry.isFile() ? "file" : "other";
+}
+function sameIdentity(left, right) {
+  return left.dev === right.dev && left.ino === right.ino;
+}
+function isSafeEntryName(name) {
+  return name !== "" && name !== "." && name !== ".." && !name.includes("\x00");
+}
 function safeSegments(relative) {
-  if (path.isAbsolute(relative))
+  if (path2.isAbsolute(relative))
     throw new Error("Contained paths must be relative");
   const segments = relative.split(/[\\/]/u);
-  if (segments.length === 0 || segments.some((segment) => segment === "" || segment === "." || segment === "..")) {
+  if (!segments.every(isSafeEntryName)) {
     throw new Error("Contained path has invalid segments");
   }
   return segments;
 }
-async function openDirectoryAt(directory, name) {
-  if (process.platform === "darwin") {
-    return new NumericFileHandle(loadDarwinBinding().openDirectoryAt(directory.fd, name));
-  }
-  return open(path.join(descriptorPath(directory), name), constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
-}
 async function openFileAt(directory, name) {
   if (process.platform === "darwin") {
     return new NumericFileHandle(loadDarwinBinding().openFileAt(directory.fd, name));
   }
-  return open(path.join(descriptorPath(directory), name), constants.O_RDONLY | constants.O_NOFOLLOW);
+  return open2(path2.join(descriptorPath(directory), name), constants2.O_RDONLY | constants2.O_NOFOLLOW | constants2.O_NONBLOCK);
 }
 function entryMetadata(mode, size) {
   return {
@@ -106,8 +171,8 @@ async function statAt(directory, name) {
     const metadata = loadDarwinBinding().statAt(directory.fd, name);
     return metadata ? entryMetadata(metadata.mode, metadata.size) : null;
   }
-  return lstat(path.join(descriptorPath(directory), name)).catch((error) => {
-    if (error.code === "ENOENT")
+  return lstat(path2.join(descriptorPath(directory), name)).catch((error) => {
+    if (errnoOf(error) === "ENOENT")
       return null;
     throw error;
   });
@@ -123,14 +188,7 @@ async function listContainedDirectory(root, relative, maxEntries, authorizePath)
   try {
     if (relative !== ".") {
       for (const segment of safeSegments(relative)) {
-        const next = await openDirectoryAt(current, segment);
-        const metadata = await next.stat();
-        if (!metadata.isDirectory()) {
-          await next.close();
-          throw new Error("Contained ancestor is not a directory");
-        }
-        await current.close();
-        current = next;
+        current = await descend(current, await openDirectoryAt(current, segment));
       }
     }
     const raw = [...await listAt(current)];
@@ -138,7 +196,7 @@ async function listContainedDirectory(root, relative, maxEntries, authorizePath)
     const admitted = [];
     const denied = [];
     for (const entry of raw) {
-      const entryPath = relative === "." ? entry.name : path.join(relative, entry.name);
+      const entryPath = relative === "." ? entry.name : path2.join(relative, entry.name);
       if (authorizePath && !await authorizePath(entryPath)) {
         denied.push({ name: entry.name, kind: containedEntryKind(entry) });
         continue;
@@ -174,19 +232,6 @@ async function listContainedDirectory(root, relative, maxEntries, authorizePath)
     await current.close();
   }
 }
-async function createDirectoryAt(directory, name) {
-  if (process.platform === "darwin") {
-    return loadDarwinBinding().createDirectoryAt(directory.fd, name, 511);
-  }
-  try {
-    await mkdir(path.join(descriptorPath(directory), name));
-    return true;
-  } catch (error) {
-    if (error.code === "EEXIST")
-      return false;
-    throw error;
-  }
-}
 async function missingContainedDirectories(root, relative) {
   const segments = safeSegments(relative);
   segments.pop();
@@ -197,26 +242,34 @@ async function missingContainedDirectories(root, relative) {
     for (const segment of segments) {
       walked = [...walked, segment];
       if (missing.length > 0) {
-        missing.push(walked.join(path.sep));
+        missing.push(walked.join(path2.sep));
         continue;
       }
       const next = await openDirectoryAt(current, segment).catch((error) => {
-        if (error.code === "ENOENT")
+        if (errnoOf(error) === "ENOENT")
           return null;
         throw error;
       });
       if (!next) {
-        missing.push(walked.join(path.sep));
+        missing.push(walked.join(path2.sep));
         continue;
       }
-      await current.close();
-      current = next;
+      current = await descend(current, next);
     }
     return missing;
   } finally {
     await current.close();
   }
 }
+
+class UnapprovedContainedDirectoryError extends Error {
+  relative;
+  constructor(relative) {
+    super(`Contained directory creation was not authorized: ${relative}`);
+    this.relative = relative;
+    this.name = "UnapprovedContainedDirectoryError";
+  }
+}
 async function openContainedParent(root, relative, options = {}) {
   const segments = safeSegments(relative);
   const basename = segments.pop();
@@ -224,17 +277,20 @@ async function openContainedParent(root, relative, options = {}) {
     throw new Error("Contained path is missing a basename");
   let current = await openPinnedDirectory(root);
   try {
+    const approved = new Set(options.createDirectories);
+    const walked = [];
     for (const segment of segments) {
-      if (options.create)
+      walked.push(segment);
+      const next = await openDirectoryAt(current, segment).catch(async (error) => {
+        if (options.createDirectories === undefined || errnoOf(error) !== "ENOENT")
+          throw error;
+        const directory = walked.join(path2.sep);
+        if (!approved.has(directory))
+          throw new UnapprovedContainedDirectoryError(directory);
         await createDirectoryAt(current, segment);
-      const next = await openDirectoryAt(current, segment);
-      const metadata = await next.stat();
-      if (!metadata.isDirectory()) {
-        await next.close();
-        throw new Error("Contained ancestor is not a directory");
-      }
-      await current.close();
-      current = next;
+        return openDirectoryAt(current, segment);
+      });
+      current = await descend(current, next);
     }
     return { handle: current, basename };
   } catch (error) {
@@ -256,21 +312,38 @@ async function openContainedFile(root, relative) {
     await parent.handle.close();
   }
 }
+
+class ContainedPathChangedError extends Error {
+  relative;
+  constructor(relative) {
+    super(`Contained path changed during authorization: ${relative}`);
+    this.relative = relative;
+    this.name = "ContainedPathChangedError";
+  }
+}
+async function reopen(relative, open) {
+  return open().catch((error) => {
+    if (["ENOENT", "ENOTDIR", "ELOOP"].includes(errnoOf(error) ?? "")) {
+      throw new ContainedPathChangedError(relative);
+    }
+    throw error;
+  });
+}
 async function assertContainedFileCurrent(root, relative, expected) {
-  const current = await openContainedFile(root, relative);
+  const current = await reopen(relative, () => openContainedFile(root, relative));
   try {
     if (!sameIdentity(await expected.stat(), await current.stat())) {
-      throw new Error("Contained file identity changed during authorization");
+      throw new ContainedPathChangedError(relative);
     }
   } finally {
     await current.close();
   }
 }
 async function assertContainedParentCurrent(root, relative, expected) {
-  const current = await openContainedParent(root, relative);
+  const current = await reopen(relative, () => openContainedParent(root, relative));
   try {
     if (!sameIdentity(await expected.stat(), await current.handle.stat())) {
-      throw new Error("Contained parent identity changed during authorization");
+      throw new ContainedPathChangedError(relative);
     }
   } finally {
     await current.handle.close();
@@ -310,101 +383,4 @@ async function readContainedUtf8Handle(handle, maxBytes) {
   };
 }
 
-// src/agent-runtime/contained-scan.ts
-async function walkContainedFiles(input) {
-  const scan = await scanContainedFiles({ ...input, symlinks: "refuse" });
-  if (scan.truncated)
-    throw new Error("Contained file traversal exceeded its bounds");
-  return scan.files;
-}
-async function scanContainedFiles(input) {
-  const files = [];
-  let truncated = false;
-  let skippedDirectories = 0;
-  let skippedSymlinks = 0;
-  const denied = [];
-  let deniedTruncated = false;
-  const root = await openPinnedDirectory(input.root);
-  const visit = async (directory, relativeDirectory, depth) => {
-    if (truncated)
-      return;
-    if (depth > input.maxDepth) {
-      truncated = true;
-      return;
-    }
-    const entries = [...await listAt(directory)];
-    entries.sort((left, right) => left.name.localeCompare(right.name));
-    for (const entry of entries) {
-      const relative = relativeDirectory ? path2.join(relativeDirectory, entry.name) : entry.name;
-      const kind = entry.isDirectory() ? "directory" : entry.isSymbolicLink() ? "symlink" : entry.isFile() ? "file" : "other";
-      if (kind === "file" && input.includeFile && !input.includeFile(relative))
-        continue;
-      if (input.authorizePath && !await input.authorizePath(relative, kind)) {
-        if (denied.length < input.maxFiles)
-          denied.push({ relative, kind });
-        else
-          deniedTruncated = true;
-        continue;
-      }
-      if (entry.isSymbolicLink()) {
-        if (input.symlinks === "refuse") {
-          throw new Error(`Contained file traversal refuses symlink: ${relative}`);
-        }
-        skippedSymlinks += 1;
-        continue;
-      }
-      if (entry.isDirectory()) {
-        if (input.excludeDirectory?.(relative)) {
-          skippedDirectories += 1;
-          continue;
-        }
-        let child;
-        try {
-          child = await openDirectoryAt(directory, entry.name);
-        } catch (error) {
-          if (input.symlinks === "skip") {
-            skippedSymlinks += 1;
-            continue;
-          }
-          throw error;
-        }
-        try {
-          await visit(child, relative, depth + 1);
-        } finally {
-          await child.close();
-        }
-        continue;
-      }
-      if (!entry.isFile())
-        continue;
-      if (files.length >= input.maxFiles) {
-        truncated = true;
-        return;
-      }
-      let content;
-      if (input.readMaxBytes !== undefined) {
-        try {
-          const handle = await openFileAt(directory, entry.name);
-          try {
-            content = await readContainedUtf8Handle(handle, input.readMaxBytes);
-          } finally {
-            await handle.close();
-          }
-        } catch (error) {
-          if (input.skipUnreadable)
-            continue;
-          throw error;
-        }
-      }
-      files.push({ absolute: relative, relative, ...content && { content } });
-    }
-  };
-  try {
-    await visit(root, "", 0);
-  } finally {
-    await root.close();
-  }
-  return { files, truncated, skippedDirectories, skippedSymlinks, denied, deniedTruncated };
-}
-
-export { NumericFileHandle, descriptorPath, listContainedDirectory, missingContainedDirectories, openContainedParent, openContainedFile, assertContainedFileCurrent, assertContainedParentCurrent, containedEntryMetadata, openContainedParentFile, readContainedUtf8Handle, walkContainedFiles, scanContainedFiles };
+export { descriptorPath, NumericFileHandle, openDirectoryAt, openPinnedDirectory, isSafeEntryName, openFileAt, listAt, listContainedDirectory, missingContainedDirectories, UnapprovedContainedDirectoryError, openContainedParent, openContainedFile, ContainedPathChangedError, assertContainedFileCurrent, assertContainedParentCurrent, containedEntryMetadata, openContainedParentFile, readContainedUtf8Handle };

package/dist/{index-p02zgk8x.js → index-y4rxnvgp.js}

@@ -134,6 +134,12 @@ function createKeyLayerStack2(target) {
         if (!entries.delete(entry))
           return;
         sync();
+      },
+      restore() {
+        if (entries.has(entry))
+          return;
+        entries.add(entry);
+        sync();
       }
     };
   }

package/dist/{index-5v5a9k2n.js → index-z3d6smer.js}

@@ -3,7 +3,7 @@ import {
   ProcessInstanceSchema2,
   readProcessInstance,
   probeProcessOwner2
-} from "./index-bh2ht9y5.js";
+} from "./index-n8z3rvzw.js";
 import {
   BoundedFileReadError,
   readBoundedFile

package/dist/{index-6b3pcq5z.js → index-zqkz4af9.js}

@@ -1,6 +1,6 @@
 import {
   attemptExclusiveLock
-} from "./index-5v5a9k2n.js";
+} from "./index-z3d6smer.js";
 import {
   sleep
 } from "./index-eemvahkc.js";

package/dist/internal/atomic-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"atomic-file.d.ts","sourceRoot":"","sources":["../../src/internal/atomic-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,EACL,KAAK,oBAAoB,EAG1B,MAAM,sBAAsB,CAAC;AAI9B,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;CAC5C;AAQD,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,kGAAkG;AAClG,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAMtF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,UAAU,iBAAiB;IACzB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvF;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,oHAAoH;IACpH,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACnC,0EAA0E;IAC1E,cAAc,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CACvC;AAQD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,EACzB,OAAO,EAAE,sBAAsB,EAC/B,EAAE,GAAE,iBAAgE,GACnE,OAAO,CAAC,CAAC,CAAC,CAwBZ;AAED,iEAAiE;AACjE,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,OAAO,EAAE,sBAAsB,EAC/B,EAAE,CAAC,EAAE,iBAAiB,GACrB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,+CAA+C;AAC/C,UAAU,cAAc;IACtB,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACjE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,IAAI,IAAI,CAAC;IACb,KAAK,IAAI,IAAI,CAAC;CACf;AAED,UAAU,qBAAqB;IAC7B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC;IAC9D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9E;AAgBD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,OAAO,EAAE,sBAAsB,EAC/B,EAAE,GAAE,qBAAkC,GACrC,IAAI,CAmCN;AAED,mGAAmG;AACnG,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,OAAO,GAAE,sBAA2B,GACnC,IAAI,CAEN"}
+{"version":3,"file":"atomic-file.d.ts","sourceRoot":"","sources":["../../src/internal/atomic-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,EACL,KAAK,oBAAoB,EAG1B,MAAM,sBAAsB,CAAC;AAK9B,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;CAC5C;AAQD,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,kGAAkG;AAClG,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAMtF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,UAAU,iBAAiB;IACzB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvF;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,oHAAoH;IACpH,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACnC,0EAA0E;IAC1E,cAAc,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CACvC;AAMD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,EACzB,OAAO,EAAE,sBAAsB,EAC/B,EAAE,GAAE,iBAAgE,GACnE,OAAO,CAAC,CAAC,CAAC,CAwBZ;AAED,iEAAiE;AACjE,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,OAAO,EAAE,sBAAsB,EAC/B,EAAE,CAAC,EAAE,iBAAiB,GACrB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,+CAA+C;AAC/C,UAAU,cAAc;IACtB,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACjE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,IAAI,IAAI,CAAC;IACb,KAAK,IAAI,IAAI,CAAC;CACf;AAED,UAAU,qBAAqB;IAC7B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC;IAC9D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9E;AAgBD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,OAAO,EAAE,sBAAsB,EAC/B,EAAE,GAAE,qBAAkC,GACrC,IAAI,CAmCN;AAED,mGAAmG;AACnG,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,OAAO,GAAE,sBAA2B,GACnC,IAAI,CAEN"}

package/dist/internal/atomic-staging.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"atomic-staging.d.ts","sourceRoot":"","sources":["../../src/internal/atomic-staging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAaH,mGAAmG;AACnG,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,6CAA6C;AAC7C,MAAM,WAAW,yBAAyB;IACxC,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAQD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,MAAM,EAAE,CAAC,CA6BnB"}
+{"version":3,"file":"atomic-staging.d.ts","sourceRoot":"","sources":["../../src/internal/atomic-staging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAcH,mGAAmG;AACnG,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,6CAA6C;AAC7C,MAAM,WAAW,yBAAyB;IACxC,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAMD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,MAAM,EAAE,CAAC,CA6BnB"}

package/dist/internal/contained-directory.d.ts

@@ -0,0 +1,20 @@
+import { type ContainedFileHandle } from './contained-handle.js';
+/** Open one child directory without following a symbolic link. */
+export declare function openDirectoryAt(directory: ContainedFileHandle, name: string, searchOnly?: boolean): Promise<ContainedFileHandle>;
+/** Move a walk to `next`; a failure to close the previous step does not leak the new one. */
+export declare function descend(current: ContainedFileHandle, next: ContainedFileHandle): Promise<ContainedFileHandle>;
+/** Create one directory through its pinned parent; false if an entry already exists. */
+export declare function createDirectoryAt(directory: ContainedFileHandle, name: string): Promise<boolean>;
+/**
+ * Select the configured root once, then walk its canonical components through directory
+ * descriptors. Initial root aliases are configuration; symlinks introduced after that
+ * selection cannot redirect the walk. Missing descendants are created through the same
+ * pinned parents. The returned capability remains the selected directory if it is renamed.
+ */
+export declare function openPinnedDirectory(absolute: string, options?: {
+    create?: boolean;
+    readable?: boolean;
+}, io?: {
+    realpath(path: string): Promise<string>;
+}): Promise<ContainedFileHandle>;
+//# sourceMappingURL=contained-directory.d.ts.map

package/dist/internal/contained-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contained-directory.d.ts","sourceRoot":"","sources":["../../src/internal/contained-directory.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,mBAAmB,EAGzB,MAAM,oBAAoB,CAAC;AAkB5B,kEAAkE;AAClE,wBAAsB,eAAe,CACnC,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,MAAM,EACZ,UAAU,UAAQ,GACjB,OAAO,CAAC,mBAAmB,CAAC,CAO9B;AAED,6FAA6F;AAC7F,wBAAsB,OAAO,CAC3B,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAQ9B;AAED,wFAAwF;AACxF,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAWlB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,EACtD,EAAE,GAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAAiB,GAC7D,OAAO,CAAC,mBAAmB,CAAC,CA0C9B"}

package/dist/{agent-runtime → internal}/contained-files.d.ts

@@ -1,4 +1,4 @@
-import { type Stats } from 'node:fs';
+import { type ContainedFileHandle } from './contained-handle.js';
 export interface ContainedFile {
     absolute: string;
     relative: string;
@@ -27,17 +27,8 @@ export interface ContainedFileScan {
     deniedTruncated: boolean;
 }
 export type ContainedEntryKind = 'file' | 'directory' | 'symlink' | 'other';
-export interface ContainedFileHandle {
-    readonly fd: number;
-    close(): Promise<void>;
-    read(buffer: Buffer, offset: number, length: number, position: number): Promise<{
-        bytesRead: number;
-    }>;
-    stat(): Promise<Stats>;
-}
-export declare function descriptorPath(handle: ContainedFileHandle): string;
-export declare function openPinnedDirectory(absolute: string): Promise<ContainedFileHandle>;
-export declare function openDirectoryAt(directory: ContainedFileHandle, name: string): Promise<ContainedFileHandle>;
+/** One entry name a directory-relative call may receive: never a walk and never truncated by NUL. */
+export declare function isSafeEntryName(name: string): boolean;
 export declare function openFileAt(directory: ContainedFileHandle, name: string): Promise<ContainedFileHandle>;
 interface ContainedEntryMetadata {
     mode: number;
@@ -80,11 +71,21 @@ export interface ContainedParent {
  * happens, and cannot do that without knowing what would be created.
  */
 export declare function missingContainedDirectories(root: string, relative: string): Promise<string[]>;
+/** A directory vanished after the host approved a different creation plan. */
+export declare class UnapprovedContainedDirectoryError extends Error {
+    readonly relative: string;
+    constructor(relative: string);
+}
 export declare function openContainedParent(root: string, relative: string, options?: {
-    create?: boolean;
+    createDirectories?: readonly string[];
 }): Promise<ContainedParent>;
 /** Open a final regular-file candidate through pinned ancestors without following symlinks. */
 export declare function openContainedFile(root: string, relative: string): Promise<ContainedFileHandle>;
+/** What was checked is no longer what the path names; the caller can look again. */
+export declare class ContainedPathChangedError extends Error {
+    readonly relative: string;
+    constructor(relative: string);
+}
 export declare function assertContainedFileCurrent(root: string, relative: string, expected: ContainedFileHandle): Promise<void>;
 export declare function assertContainedParentCurrent(root: string, relative: string, expected: ContainedFileHandle): Promise<void>;
 export declare function containedEntryMetadata(parent: ContainedParent): Promise<ContainedEntryMetadata | null>;

package/dist/internal/contained-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contained-files.d.ts","sourceRoot":"","sources":["../../src/internal/contained-files.ts"],"names":[],"mappings":"AASA,OAAO,EACL,KAAK,mBAAmB,EAOzB,MAAM,oBAAoB,CAAC;AAI5B,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,MAAM,EAAE,SAAS;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IAClE,yEAAyE;IACzE,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AAoB5E,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAWD,wBAAsB,UAAU,CAC9B,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CAQ9B;AAED,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AAED,UAAU,uBAAuB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AA0BD,wBAAsB,MAAM,CAC1B,SAAS,EAAE,mBAAmB,GAC7B,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAO7C;AAED,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC/D,OAAO,CAAC;IACT,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,CAAC;IACJ,SAAS,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IACrD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC,CAoDD;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CA6BnB;AAED,8EAA8E;AAC9E,qBAAa,iCAAkC,SAAQ,KAAK;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAArC,YAAqB,QAAQ,EAAE,MAAM,EAGpC;CACF;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GACtD,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,+FAA+F;AAC/F,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAa9B;AAED,oFAAoF;AACpF,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAArC,YAAqB,QAAQ,EAAE,MAAM,EAGpC;CACF;AAYD,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAExC;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAO9B;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED,yFAAyF;AACzF,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAOxD"}

package/dist/internal/contained-handle.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The shared contained-file capability and its platform descriptor adapters.
+ * Darwin native calls return numeric descriptors; Linux also exposes descriptor paths.
+ */
+import { type Stats } from 'node:fs';
+export interface ContainedFileHandle {
+    readonly fd: number;
+    close(): Promise<void>;
+    read(buffer: Buffer, offset: number, length: number, position: number): Promise<{
+        bytesRead: number;
+    }>;
+    stat(): Promise<Stats>;
+}
+export declare function descriptorPath(handle: ContainedFileHandle): string;
+export declare const FILE_TYPE_DIRECTORY = 16384;
+export declare const FILE_TYPE_REGULAR = 32768;
+export declare const FILE_TYPE_SYMLINK = 40960;
+export declare function modeIs(mode: number, type: number): boolean;
+export declare class NumericFileHandle implements ContainedFileHandle {
+    readonly fd: number;
+    private closed;
+    constructor(fd: number);
+    /** Once only: the number may already name another file, and a walk's cleanup can repeat this. */
+    close(): Promise<void>;
+    read(buffer: Buffer, offset: number, length: number, position: number): Promise<{
+        bytesRead: number;
+    }>;
+    stat(): Promise<Stats>;
+}
+//# sourceMappingURL=contained-handle.d.ts.map

package/dist/internal/contained-handle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contained-handle.d.ts","sourceRoot":"","sources":["../../src/internal/contained-handle.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAA2D,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAGlE;AAGD,eAAO,MAAM,mBAAmB,QAAW,CAAC;AAC5C,eAAO,MAAM,iBAAiB,QAAW,CAAC;AAC1C,eAAO,MAAM,iBAAiB,QAAW,CAAC;AAE1C,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,qBAAa,iBAAkB,YAAW,mBAAmB;IAG/C,QAAQ,CAAC,EAAE,EAAE,MAAM;IAF/B,OAAO,CAAC,MAAM,CAAS;IAEvB,YAAqB,EAAE,EAAE,MAAM,EAAI;IAEnC,iGAAiG;IACjG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAMrB;IAED,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAMhC;IAED,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAIrB;CACF"}

package/dist/internal/contained-write.d.ts

@@ -0,0 +1,12 @@
+import type { ContainedParent } from './contained-files.js';
+/**
+ * Create or atomically replace one direct child through the pinned parent descriptor.
+ * `mode` keeps permission bits only: new content must not inherit setuid, setgid or sticky.
+ */
+export declare function writeContainedFile(input: {
+    parent: ContainedParent;
+    content: string | Uint8Array;
+    replace: boolean;
+    mode?: number;
+}): Promise<void>;
+//# sourceMappingURL=contained-write.d.ts.map

package/dist/internal/contained-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contained-write.d.ts","sourceRoot":"","sources":["../../src/internal/contained-write.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAoHzD;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}

package/dist/internal/darwin-binding.d.ts

@@ -5,7 +5,7 @@ export interface DarwinEntry {
 }
 export interface DarwinBinding {
     processIdentity(pid: number): unknown;
-    openDirectoryAt(directory: number, name: string): number;
+    openDirectoryAt(directory: number, name: string, searchOnly: boolean): number;
     openFileAt(directory: number, name: string): number;
     createFileAt(directory: number, name: string, mode: number): number;
     createDirectoryAt(directory: number, name: string, mode: number): boolean;

package/dist/internal/darwin-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"darwin-binding.d.ts","sourceRoot":"","sources":["../../src/internal/darwin-binding.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACzD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpD,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM9E;AAID,wBAAgB,iBAAiB,IAAI,aAAa,CA4BjD"}
+{"version":3,"file":"darwin-binding.d.ts","sourceRoot":"","sources":["../../src/internal/darwin-binding.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,CAAC;IAC9E,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpD,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM9E;AAID,wBAAgB,iBAAiB,IAAI,aAAa,CA4BjD"}