`@openclaw/fs-safe` is a production-grade Node.js library providing capability-style filesystem roots for secure, confined file operations. It enforces path boundaries, rejects symlink/hardlink escapes, and defends against TOCTOU races. The library offers atomic read/write/replace operations, secure archive extraction (ZIP/TAR with entry budgets and integrity checks), cross-process file locking, JSON stores with durability guarantees, permission inspection for POSIX and Windows, and secret file handling. It bundles a Rust native addon (via napi-rs) to accelerate critical operations on Linux, macOS, and Windows, with a transparent JavaScript fallback. The API is organized into modular subpath exports (e.g., `root`, `archive`, `file-store`, `file-lock`, `permissions`, `secret`, `durability`, `atomic`, `temp`, `walk`, `advanced`), each with typed error codes and consistent error categories. The package includes an extensive test suite (>3000 tests) covering security regressions, property-based fuzzing, concurrency stress tests, and cross-platform behavior. It is used by the OpenClaw ecosystem and published on npm with SLSA provenance.