@codyswann/lisa 4.28.4 → 4.29.0

package/dist/configs/vitest/scratch-global-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"scratch-global-setup.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAYzC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,mBAAmB,EAAE,EACnC,QAAkC,cAAc,EAC9B,EAAE;IACpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAE1C,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YAC9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;QAC1E,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAU,EAAE,CAClD,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEjE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,GAAW,EACX,OAAyB,EACL,EAAE;IACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CACL,0BAA0B,GAAG,gBAAgB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;YAC/E,uEAAuE;YACvE,iBAAiB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B;YACrE,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;IAEtE,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,mBAAmB;YACzE,0CAA0C,MAAM,CAAC,qBAAqB,CAAC,GAAG;YAC1E,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,4CAA4C;YACrE,uEAAuE;YACvE,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAoB,EAAE;IACzD,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,cAAc,GAAG,CAAC,GAAW,EAAoB,EAAE;IACvD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACnE,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC7D;IACE,EAAE;IACF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,6DAA6D;IAC7D,EAAE;IACF,OAAO;IACP,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,2CAA2C;IAC3C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,8DAA8D;AAC9D,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC9D,wEAAwE;IACxE,qEAAqE;IACrE,WAAW,OAAO,IAAI,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD;;;GAGG;AACH,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAe,EACf,QAAgC,IAAI,CAAC,EAAE;IACrC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAe,EACf,cAAsC,IAAI,CAAC,EAAE;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,IAAI,YAAY,EAAE;QAAE,OAAO;IAC3B,2EAA2E;IAC3E,gEAAgE;IAChE,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,GAAS,EAAE;IAC9B,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,uEAAuE;QACvE,oCAAoC;QACpC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAS,EAAE;IACjC,qBAAqB,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC,CAAC"}
+{"version":3,"file":"scratch-global-setup.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAezC;;;;;;GAMG;AACH,SAAS,0BAA0B,CACjC,GAAW,EACX,IAAY,EACZ,KAA2B;IAE3B,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,CACL,CAAC,QAAQ,CAAC,cAAc,EAAE;QAC1B,QAAQ,CAAC,WAAW,EAAE;QACtB,KAAK,CAAC,SAAS,CAAC,aAAa,KAAK,YAAY,CAAC,GAAG,CAAC;QACnD,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG;QACzC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG;QACzC,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,YAAY,CAAC,IAAI,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAChC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAC7B,GAAW,EACX,IAAY,EACZ,KAA+B,EAC/B,KAA0C;IAE1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,cAAc,CAAC;QACzE,OAAO,oBAAoB,CAAC,KAAK,EAAE;YACjC,cAAc,EAAE,KAAK;YACrB,uBAAuB,EAAE,KAAK;SAC/B,CAAC,KAAK,UAAU;YACf,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,mBAAmB,EAAE,EACnC,QAAkC,cAAc,EAChD,QAA6C,uBAAuB,EAClD,EAAE;IACpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI;QACJ,WAAW,EAAE,sBAAsB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;KAC7D,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,QAAQ,EAAE,UAAU;aACjB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC;aACjD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,YAAY,EAAE,UAAU;aACrB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,cAAc,CAAC;aACrD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAU,EAAE,CAClD,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEjE,+EAA+E;AAC/E,MAAM,wBAAwB,GAC5B,4EAA4E;IAC5E,oEAAoE,CAAC;AAEvE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,GAAW,EACX,OAAyB,EACL,EAAE;IACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CACL,0BAA0B,GAAG,gBAAgB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;YAC/E,uEAAuE;YACvE,iBAAiB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B;YACrE,wDAAwD,wBAAwB,EAAE,CACnF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG;YAC7E,iDAAiD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI;YACjF,uEAAuE;YACvE,4DAA4D;YAC5D,aAAa,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oCAAoC;YACtE,mCAAmC,MAAM,CAAC,qBAAqB,CAAC,KAAK,wBAAwB,EAAE,CAChG,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;IAEtE,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,mBAAmB;YACzE,0CAA0C,MAAM,CAAC,qBAAqB,CAAC,GAAG;YAC1E,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,4CAA4C;YACrE,uEAAuE;YACvE,+CAA+C,wBAAwB,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,QAAkC,cAAc,EAChD,WAAmD,+BAA+B,EAChE,EAAE;IACpB,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxD,qBAAqB,CAAC;QACpB,cAAc,EAAE,KAAK;QACrB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,GAAqB,EAAE;IAC5C,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC7D;IACE,EAAE;IACF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,6DAA6D;IAC7D,EAAE;IACF,OAAO;IACP,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,2CAA2C;IAC3C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,8DAA8D;AAC9D,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC9D,wEAAwE;IACxE,qEAAqE;IACrE,WAAW,OAAO,IAAI,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD;;;GAGG;AACH,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAe,EACf,QAAgC,IAAI,CAAC,EAAE;IACrC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAe,EACf,cAAsC,IAAI,CAAC,EAAE;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,IAAI,YAAY,EAAE;QAAE,OAAO;IAC3B,2EAA2E;IAC3E,gEAAgE;IAChE,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,GAAS,EAAE;IAC9B,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,uEAAuE;QACvE,oCAAoC;QACpC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAS,EAAE;IACjC,qBAAqB,EAAE,CAAC;AAC1B,CAAC,CAAC"}

package/dist/configs/vitest/scratch-leak-setup.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scratch-leak-setup.d.ts.map

package/dist/configs/vitest/scratch-leak-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-leak-setup.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-leak-setup.ts"],"names":[],"mappings":""}

package/dist/configs/vitest/scratch-leak-setup.js

@@ -0,0 +1,108 @@
+/**
+ * Per-suite backstop that makes a leaked fixture fail the suite that leaked it.
+ *
+ * The worker-wide run root is still removed wholesale on exit and reclaimed by
+ * a successor after SIGKILL. This hook is the attribution layer: it snapshots
+ * the run-root children before collection, runs last after every user
+ * `afterAll`, removes anything added by the suite, and fails on additions whose
+ * prefix was not registered before collection.
+ * @module configs/vitest/scratch-leak-setup
+ */
+import * as fs from "node:fs";
+import { tmpdir } from "node:os";
+import * as path from "node:path";
+import { afterAll } from "vitest";
+import { readBoundedScratchNames, removeAuthorizedScratchChildren, } from "./scratch-authority.js";
+import { SCRATCH_OWNER_FILE, readScratchOwnerRecord } from "./scratch-owner.js";
+/** Run root whose children this suite owns. */
+const runRoot = tmpdir();
+/** Fail immediately if the setup order did not install scratch first. */
+if (!path.basename(runRoot).startsWith("worker-")) {
+    throw new Error(`Scratch leak guard started before scratch redirection: ${runRoot}`);
+}
+/** Owner record binds the prefix registry and path identity to this root. */
+const owner = readScratchOwnerRecord(runRoot);
+/** Direct children present before this suite imports any test module. */
+const baseline = new Set([
+    ...readBoundedScratchNames(runRoot),
+    SCRATCH_OWNER_FILE,
+]);
+/**
+ * Render the prefix a mkdtemp-shaped basename came from.
+ * @param name - Direct scratch child basename
+ * @returns Display prefix
+ */
+function displayedPrefix(name) {
+    return /^[\s\S]*[A-Za-z0-9]{6}$/u.test(name) ? `${name.slice(0, -6)}*` : name;
+}
+/**
+ * Remove every classified addition through one inode-bound cleanup process.
+ * @param names - Direct scratch child basenames
+ */
+function removeInternalChildren(names) {
+    for (const name of names) {
+        if (path.basename(name) !== name || name === "." || name === "..") {
+            throw new Error(`Scratch leak guard refused non-basename child: ${name}`);
+        }
+    }
+    const before = fs.lstatSync(runRoot);
+    if (before.dev !== owner.root.dev ||
+        before.ino !== owner.root.ino ||
+        fs.realpathSync(runRoot) !== owner.root.canonicalPath) {
+        throw new Error("Scratch run-root identity changed before leak cleanup");
+    }
+    const marker = readScratchOwnerRecord(runRoot);
+    if (marker.token !== owner.token) {
+        throw new Error("Scratch owner marker changed before leak cleanup");
+    }
+    removeAuthorizedScratchChildren({
+        parent: owner.root,
+        basenames: names,
+    });
+    if (readScratchOwnerRecord(runRoot).token !== owner.token) {
+        throw new Error("Scratch owner marker changed during leak cleanup");
+    }
+}
+/**
+ * Read the run root or throw a suite-attributed diagnostic.
+ * @returns Current direct-child basenames
+ */
+function readRunRootNames() {
+    try {
+        return readBoundedScratchNames(runRoot);
+    }
+    catch (error) {
+        throw new Error(`Scratch leak guard could not read suite root ${runRoot}: ${String(error)}`);
+    }
+}
+/**
+ * Whether one addition belongs to a prefix registered before collection.
+ * @param name - Added direct-child basename
+ * @returns Whether the stack registered ownership
+ */
+function isRegisteredAddition(name) {
+    return owner.registeredPrefixes.some(prefix => name.startsWith(prefix));
+}
+/**
+ * Audit direct additions after user hooks, clean every one, and fail on any
+ * prefix the stack did not register before collection.
+ */
+afterAll(() => {
+    const names = readRunRootNames();
+    const additions = names.filter(name => !baseline.has(name));
+    const unregistered = additions.filter(name => !isRegisteredAddition(name));
+    try {
+        removeInternalChildren(additions);
+    }
+    catch (error) {
+        throw new Error(`Scratch leak guard could not clean ${additions.join(", ")} for suite ${owner.suiteLabel}: ${String(error)}`);
+    }
+    if (unregistered.length > 0) {
+        const details = [...unregistered]
+            .sort((left, right) => left.localeCompare(right))
+            .map(name => `${name} (${displayedPrefix(name)})`)
+            .join(", ");
+        throw new Error(`Suite ${owner.suiteLabel} leaked ${String(unregistered.length)} unregistered scratch fixture(s): ${details}`);
+    }
+});
+//# sourceMappingURL=scratch-leak-setup.js.map

package/dist/configs/vitest/scratch-leak-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-leak-setup.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-leak-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEhF,+CAA+C;AAC/C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;AAEzB,yEAAyE;AACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;IAClD,MAAM,IAAI,KAAK,CACb,0DAA0D,OAAO,EAAE,CACpE,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAE9C,yEAAyE;AACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,GAAG,uBAAuB,CAAC,OAAO,CAAC;IACnC,kBAAkB;CACnB,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,KAAwB;IACtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,IACE,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG;QAC7B,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG;QAC7B,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,aAAa,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,+BAA+B,CAAC;QAC9B,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;IACH,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,gDAAgD,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,QAAQ,CAAC,GAAG,EAAE;IACZ,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7G,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC;aAC9B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aAChD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,KAAK,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;aACjD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,SAAS,KAAK,CAAC,UAAU,WAAW,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,qCAAqC,OAAO,EAAE,CAC9G,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/configs/vitest/scratch-namespace-authority.d.ts

@@ -0,0 +1,80 @@
+import { parseScratchRunRootName, scratchRunRootName, type ScratchPathIdentity } from "./scratch-owner.js";
+/** Public compatibility name for the exact managed namespace. */
+export declare const SCRATCH_NAMESPACE = "lisa-scratch";
+/** Prefix identifying a per-process run root inside the namespace. */
+export declare const RUN_ROOT_PREFIX = "run-";
+/** Legacy default retained for callers; age alone never authorizes deletion. */
+export declare const DEFAULT_RECLAIM_AGE_MS: number;
+/** Absolute cap shared by startup inspection and destructive sweeps. */
+export declare const MAX_SCRATCH_NAMESPACE_SCAN_ENTRIES = 120000;
+/** Maximum UTF-8 bytes accepted in one direct namespace basename. */
+export declare const MAX_SCRATCH_NAMESPACE_NAME_BYTES = 1024;
+/** Maximum direct entries one already-authorized suite audit may retain. */
+export declare const SCRATCH_DIRECT_ENTRY_LIMIT = 100000;
+/** Maximum UTF-8 bytes in one authorized direct-child basename. */
+export declare const SCRATCH_DIRECT_NAME_BYTES = 1024;
+/** Recognisable quarantine prefix, with a random suffix per removal. */
+export declare const SCRATCH_QUARANTINE_PREFIX = ".lisa-quarantine-";
+/** Namespace identity plus local ownership facts. */
+export interface ScratchNamespaceIdentity extends ScratchPathIdentity {
+    readonly uid: number | undefined;
+}
+/** Authority required before any destructive scratch operation. */
+export interface ScratchNamespaceAuthority {
+    readonly baseCanonicalPath: string;
+    readonly namespace: ScratchNamespaceIdentity;
+}
+/**
+ * Resolve the only public platform-temp authority.
+ * @returns Logical platform temp root
+ */
+export declare const scratchBaseDir: () => string;
+/**
+ * Resolve the shared namespace directory.
+ * @returns Managed namespace path
+ */
+export declare const scratchNamespaceDir: () => string;
+/** Build one unique direct run-root basename. */
+export declare const runRootName: typeof scratchRunRootName;
+/** Parse one recognized direct run-root basename. */
+export declare const parseRunRootName: typeof parseScratchRunRootName;
+/**
+ * Consume injected direct namespace basenames under the 120k hard bound.
+ * @param names - Direct namespace basenames
+ * @returns Deterministically sorted names
+ */
+export declare function collectBoundedScratchNamespaceNames(names: Iterable<string>): readonly string[];
+/**
+ * Stream one real namespace without following direct children.
+ * @param dir - Namespace path
+ * @returns Validated direct basenames
+ */
+export declare function readBoundedScratchNamespace(dir: string): readonly string[];
+/**
+ * Validate one direct-name stream under the distinct 100k suite bound.
+ * @param names - Direct basename stream
+ * @returns Validated names in source order
+ */
+export declare function collectBoundedScratchNames(names: Iterable<string>): readonly string[];
+/**
+ * Stream one already-authorized directory under the 100k suite bound.
+ * @param directory - Authorized suite directory
+ * @returns Validated direct basenames
+ */
+export declare function readBoundedScratchNames(directory: string): readonly string[];
+/**
+ * Establish and pin the canonical scratch namespace.
+ * @returns Filesystem authority for its exact direct `lisa-scratch` child
+ */
+export declare function createScratchNamespaceAuthority(): ScratchNamespaceAuthority;
+/**
+ * Revalidate that the namespace is still the directory authority pinned.
+ * @param authority - Captured namespace authority
+ */
+export declare function assertScratchNamespaceAuthority(authority: ScratchNamespaceAuthority): void;
+/**
+ * Resolve authority for an existing exact namespace without creating it.
+ * @returns Captured authority, or undefined when absent
+ */
+export declare function authorityForExistingScratchNamespace(): ScratchNamespaceAuthority | undefined;
+//# sourceMappingURL=scratch-namespace-authority.d.ts.map

package/dist/configs/vitest/scratch-namespace-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-namespace-authority.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-namespace-authority.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,uBAAuB,EACvB,kBAAkB,EAElB,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAK5B,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,iBAA+B,CAAC;AAE9D,sEAAsE;AACtE,eAAO,MAAM,eAAe,SAA0B,CAAC;AAEvD,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,QAAqB,CAAC;AAEzD,wEAAwE;AACxE,eAAO,MAAM,kCAAkC,SAAU,CAAC;AAE1D,qEAAqE;AACrE,eAAO,MAAM,gCAAgC,OAAQ,CAAC;AAEtD,4EAA4E;AAC5E,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAElD,mEAAmE;AACnE,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAE/C,wEAAwE;AACxE,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AAE7D,qDAAqD;AACrD,MAAM,WAAW,wBAAyB,SAAQ,mBAAmB;IACnE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,mEAAmE;AACnE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;CAC9C;AAED;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAO,MAAqB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,QAAO,MACS,CAAC;AAEjD,iDAAiD;AACjD,eAAO,MAAM,WAAW,2BAAqB,CAAC;AAE9C,qDAAqD;AACrD,eAAO,MAAM,gBAAgB,gCAA0B,CAAC;AAWxD;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,SAAS,MAAM,EAAE,CA0BnB;AAoBD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAgB1E;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,SAAS,MAAM,EAAE,CAiBnB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAe5E;AAiFD;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,yBAAyB,CAiB3E;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,yBAAyB,GACnC,IAAI,CAqBN;AAED;;;GAGG;AACH,wBAAgB,oCAAoC,IAChD,yBAAyB,GACzB,SAAS,CAuBZ"}

package/dist/configs/vitest/scratch-namespace-authority.js

@@ -0,0 +1,291 @@
+/** Canonical platform-temp namespace capture and immutable identity authority. */
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { SCRATCH_RUN_ROOT_PREFIX, parseScratchRunRootName, scratchRunRootName, scratchPathIdentity, } from "./scratch-owner.js";
+/** Exact shared namespace basename used by the authority implementation. */
+const AUTHORIZED_SCRATCH_NAMESPACE = "lisa-scratch";
+/** Public compatibility name for the exact managed namespace. */
+export const SCRATCH_NAMESPACE = AUTHORIZED_SCRATCH_NAMESPACE;
+/** Prefix identifying a per-process run root inside the namespace. */
+export const RUN_ROOT_PREFIX = SCRATCH_RUN_ROOT_PREFIX;
+/** Legacy default retained for callers; age alone never authorizes deletion. */
+export const DEFAULT_RECLAIM_AGE_MS = 6 * 60 * 60 * 1000;
+/** Absolute cap shared by startup inspection and destructive sweeps. */
+export const MAX_SCRATCH_NAMESPACE_SCAN_ENTRIES = 120_000;
+/** Maximum UTF-8 bytes accepted in one direct namespace basename. */
+export const MAX_SCRATCH_NAMESPACE_NAME_BYTES = 1_024;
+/** Maximum direct entries one already-authorized suite audit may retain. */
+export const SCRATCH_DIRECT_ENTRY_LIMIT = 100_000;
+/** Maximum UTF-8 bytes in one authorized direct-child basename. */
+export const SCRATCH_DIRECT_NAME_BYTES = 1_024;
+/** Recognisable quarantine prefix, with a random suffix per removal. */
+export const SCRATCH_QUARANTINE_PREFIX = ".lisa-quarantine-";
+/**
+ * Resolve the only public platform-temp authority.
+ * @returns Logical platform temp root
+ */
+export const scratchBaseDir = () => os.tmpdir();
+/**
+ * Resolve the shared namespace directory.
+ * @returns Managed namespace path
+ */
+export const scratchNamespaceDir = () => path.join(scratchBaseDir(), SCRATCH_NAMESPACE);
+/** Build one unique direct run-root basename. */
+export const runRootName = scratchRunRootName;
+/** Parse one recognized direct run-root basename. */
+export const parseRunRootName = parseScratchRunRootName;
+/**
+ * Stable code-point ordering independent of host locale.
+ * @param left - Left basename
+ * @param right - Right basename
+ * @returns Sort comparator result
+ */
+const codePointCompare = (left, right) => left === right ? 0 : left < right ? -1 : 1;
+/**
+ * Consume injected direct namespace basenames under the 120k hard bound.
+ * @param names - Direct namespace basenames
+ * @returns Deterministically sorted names
+ */
+export function collectBoundedScratchNamespaceNames(names) {
+    const collected = [];
+    for (const name of names) {
+        if (name === "" ||
+            name === "." ||
+            name === ".." ||
+            name.includes("/") ||
+            name.includes("\\")) {
+            throw new Error(`Scratch namespace scan refused non-basename: ${name}`);
+        }
+        if (Buffer.byteLength(name, "utf8") > MAX_SCRATCH_NAMESPACE_NAME_BYTES) {
+            throw new Error(`Scratch namespace name exceeds ${String(MAX_SCRATCH_NAMESPACE_NAME_BYTES)} bytes`);
+        }
+        if (collected.length >= MAX_SCRATCH_NAMESPACE_SCAN_ENTRIES) {
+            throw new Error(`Scratch namespace scan exceeds ${String(MAX_SCRATCH_NAMESPACE_SCAN_ENTRIES)} entries`);
+        }
+        // eslint-disable-next-line functional/immutable-data -- bounded streaming avoids attacker-sized materialization
+        collected.push(name);
+    }
+    return [...collected].sort(codePointCompare);
+}
+/**
+ * Open one real namespace directory while preserving absence.
+ * @param dir - Namespace path
+ * @returns Open handle, or undefined when absent
+ */
+function openScratchNamespace(dir) {
+    try {
+        const stat = fs.lstatSync(dir);
+        if (stat.isSymbolicLink() || !stat.isDirectory()) {
+            throw new Error(`Scratch namespace is not a real directory: ${dir}`);
+        }
+        return fs.opendirSync(dir);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Stream one real namespace without following direct children.
+ * @param dir - Namespace path
+ * @returns Validated direct basenames
+ */
+export function readBoundedScratchNamespace(dir) {
+    const directory = openScratchNamespace(dir);
+    if (directory === undefined)
+        return [];
+    try {
+        return collectBoundedScratchNamespaceNames((function* entries() {
+            for (;;) {
+                const entry = directory.readSync();
+                if (entry === null)
+                    return;
+                yield entry.name;
+            }
+        })());
+    }
+    finally {
+        directory.closeSync();
+    }
+}
+/**
+ * Validate one direct-name stream under the distinct 100k suite bound.
+ * @param names - Direct basename stream
+ * @returns Validated names in source order
+ */
+export function collectBoundedScratchNames(names) {
+    const collected = [];
+    for (const name of names) {
+        if (Buffer.byteLength(name, "utf8") > SCRATCH_DIRECT_NAME_BYTES) {
+            throw new Error(`Scratch direct basename exceeds ${String(SCRATCH_DIRECT_NAME_BYTES)} bytes`);
+        }
+        // eslint-disable-next-line functional/immutable-data -- refuse before retaining the 100001st entry
+        collected.push(name);
+        if (collected.length > SCRATCH_DIRECT_ENTRY_LIMIT) {
+            throw new Error(`Scratch direct entry count exceeds ${String(SCRATCH_DIRECT_ENTRY_LIMIT)}`);
+        }
+    }
+    return collected;
+}
+/**
+ * Stream one already-authorized directory under the 100k suite bound.
+ * @param directory - Authorized suite directory
+ * @returns Validated direct basenames
+ */
+export function readBoundedScratchNames(directory) {
+    const handle = fs.opendirSync(directory);
+    try {
+        return collectBoundedScratchNames({
+            *[Symbol.iterator]() {
+                for (;;) {
+                    const entry = handle.readSync();
+                    if (entry === null)
+                        return;
+                    yield entry.name;
+                }
+            },
+        });
+    }
+    finally {
+        handle.closeSync();
+    }
+}
+/**
+ * Return the current uid where the platform supplies one.
+ * @returns Current uid or undefined on platforms without uid ownership
+ */
+const currentUid = () => process.getuid?.();
+/**
+ * Ensure the namespace path exists as a real directory.
+ * @param namespacePath - Exact namespace path
+ */
+function assertRealDirectory(namespacePath) {
+    const existing = fs.lstatSync(namespacePath);
+    if (existing.isSymbolicLink()) {
+        throw new Error(`Scratch namespace must not be a symlink: ${namespacePath}`);
+    }
+    if (!existing.isDirectory()) {
+        throw new Error(`Scratch namespace is not a directory: ${namespacePath}`);
+    }
+}
+/**
+ * Create the namespace or accept a concurrent creator only after revalidation.
+ * @param namespacePath - Exact namespace path
+ */
+function ensureNamespaceDirectory(namespacePath) {
+    try {
+        assertRealDirectory(namespacePath);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+        try {
+            fs.mkdirSync(namespacePath, { mode: 0o700 });
+        }
+        catch (mkdirError) {
+            if (mkdirError.code !== "EEXIST") {
+                throw mkdirError;
+            }
+            assertRealDirectory(namespacePath);
+        }
+    }
+}
+/**
+ * Assert local namespace ownership without silently broadening authority.
+ * @param namespacePath - Exact namespace path
+ */
+function enforceNamespaceOwnership(namespacePath) {
+    const stat = fs.lstatSync(namespacePath);
+    const uid = currentUid();
+    if (uid !== undefined && stat.uid !== uid) {
+        throw new Error(`Scratch namespace uid ${String(stat.uid)} does not match current uid ${String(uid)}`);
+    }
+    if ((stat.mode & 0o777) !== 0o700) {
+        throw new Error(`Scratch namespace mode must be 0700: ${namespacePath}`);
+    }
+}
+/**
+ * Capture the namespace identity after its creation and mode repair.
+ * @param namespacePath - Exact namespace path
+ * @param baseCanonicalPath - Pinned physical temp base
+ * @returns Captured authority
+ */
+function captureNamespaceAuthority(namespacePath, baseCanonicalPath) {
+    const uid = currentUid();
+    const identity = scratchPathIdentity(namespacePath);
+    if (path.dirname(identity.canonicalPath) !== baseCanonicalPath) {
+        throw new Error("Scratch namespace escaped its canonical temp base");
+    }
+    return {
+        baseCanonicalPath,
+        namespace: { ...identity, uid },
+    };
+}
+/**
+ * Establish and pin the canonical scratch namespace.
+ * @returns Filesystem authority for its exact direct `lisa-scratch` child
+ */
+export function createScratchNamespaceAuthority() {
+    const baseDir = os.tmpdir();
+    const baseStat = fs.lstatSync(baseDir);
+    if (baseStat.isSymbolicLink()) {
+        throw new Error(`Scratch temp base must not be a symlink: ${baseDir}`);
+    }
+    if (!baseStat.isDirectory()) {
+        throw new Error(`Scratch temp base is not a directory: ${baseDir}`);
+    }
+    const baseCanonicalPath = fs.realpathSync(baseDir);
+    const namespacePath = path.join(baseCanonicalPath, AUTHORIZED_SCRATCH_NAMESPACE);
+    ensureNamespaceDirectory(namespacePath);
+    enforceNamespaceOwnership(namespacePath);
+    return captureNamespaceAuthority(namespacePath, baseCanonicalPath);
+}
+/**
+ * Revalidate that the namespace is still the directory authority pinned.
+ * @param authority - Captured namespace authority
+ */
+export function assertScratchNamespaceAuthority(authority) {
+    const current = scratchPathIdentity(authority.namespace.canonicalPath);
+    if (current.dev !== authority.namespace.dev ||
+        current.ino !== authority.namespace.ino ||
+        current.canonicalPath !== authority.namespace.canonicalPath) {
+        throw new Error("Scratch namespace identity changed after authority capture");
+    }
+    const stat = fs.lstatSync(authority.namespace.canonicalPath);
+    if ((stat.mode & 0o777) !== 0o700) {
+        throw new Error("Scratch namespace mode changed after authority capture");
+    }
+    if (authority.namespace.uid !== undefined &&
+        stat.uid !== authority.namespace.uid) {
+        throw new Error("Scratch namespace uid changed after authority capture");
+    }
+}
+/**
+ * Resolve authority for an existing exact namespace without creating it.
+ * @returns Captured authority, or undefined when absent
+ */
+export function authorityForExistingScratchNamespace() {
+    const dir = path.join(os.tmpdir(), AUTHORIZED_SCRATCH_NAMESPACE);
+    try {
+        const stat = fs.lstatSync(dir);
+        if (stat.isSymbolicLink() || !stat.isDirectory()) {
+            throw new Error(`Scratch namespace must be a real directory: ${dir}`);
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+    if (path.basename(dir) !== AUTHORIZED_SCRATCH_NAMESPACE) {
+        throw new Error(`Scratch namespace must be the exact ${AUTHORIZED_SCRATCH_NAMESPACE} child`);
+    }
+    const authority = createScratchNamespaceAuthority();
+    if (fs.realpathSync(dir) !== authority.namespace.canonicalPath) {
+        throw new Error("Scratch namespace path does not match canonical authority");
+    }
+    return authority;
+}
+//# sourceMappingURL=scratch-namespace-authority.js.map

package/dist/configs/vitest/scratch-namespace-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-namespace-authority.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-namespace-authority.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,oBAAoB,CAAC;AAE5B,4EAA4E;AAC5E,MAAM,4BAA4B,GAAG,cAAc,CAAC;AAEpD,iEAAiE;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAE9D,sEAAsE;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,wEAAwE;AACxE,MAAM,CAAC,MAAM,kCAAkC,GAAG,OAAO,CAAC;AAE1D,qEAAqE;AACrE,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,CAAC;AAEtD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAElD,mEAAmE;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C,wEAAwE;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAC;AAa7D;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAW,EAAE,CAC9C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAEjD,iDAAiD;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAE9C,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAExD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAC/D,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7C;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAuB;IAEvB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IACE,IAAI,KAAK,EAAE;YACX,IAAI,KAAK,GAAG;YACZ,IAAI,KAAK,IAAI;YACb,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EACnB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,gCAAgC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,gCAAgC,CAAC,QAAQ,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,IAAI,kCAAkC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,kCAAkC,CAAC,UAAU,CACvF,CAAC;QACJ,CAAC;QACD,gHAAgH;QAChH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,mCAAmC,CACxC,CAAC,QAAQ,CAAC,CAAC,OAAO;YAChB,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACnC,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO;gBAC3B,MAAM,KAAK,CAAC,IAAI,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,EAAE,CACL,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,SAAS,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAuB;IAEvB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,yBAAyB,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,mCAAmC,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAC7E,CAAC;QACJ,CAAC;QACD,mGAAmG;QACnG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,SAAS,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAChB,SAAS,CAAC;oBACR,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAChC,IAAI,KAAK,KAAK,IAAI;wBAAE,OAAO;oBAC3B,MAAM,KAAK,CAAC,IAAI,CAAC;gBACnB,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AACD;;;GAGG;AACH,MAAM,UAAU,GAAG,GAAuB,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AAEhE;;;GAGG;AACH,SAAS,mBAAmB,CAAC,aAAqB;IAChD,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,4CAA4C,aAAa,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yCAAyC,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,aAAqB;IACrD,IAAI,CAAC;QACH,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,IAAK,UAAoC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,UAAU,CAAC;YACnB,CAAC;YACD,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAAC,aAAqB;IACtD,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wCAAwC,aAAa,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAChC,aAAqB,EACrB,iBAAyB;IAEzB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,iBAAiB,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO;QACL,iBAAiB;QACjB,SAAS,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE;KAChC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B;IAC7C,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,iBAAiB,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAC7B,iBAAiB,EACjB,4BAA4B,CAC7B,CAAC;IACF,wBAAwB,CAAC,aAAa,CAAC,CAAC;IACxC,yBAAyB,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,yBAAyB,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,SAAoC;IAEpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACvE,IACE,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,SAAS,CAAC,GAAG;QACvC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,SAAS,CAAC,GAAG;QACvC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,SAAS,CAAC,aAAa,EAC3D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IACE,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,SAAS;QACrC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,SAAS,CAAC,GAAG,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oCAAoC;IAGlD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,4BAA4B,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,uCAAuC,4BAA4B,QAAQ,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,+BAA+B,EAAE,CAAC;IACpD,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}