@codyswann/lisa 4.28.5 → 4.29.1

package/dist/configs/vitest/scratch-bound-root-cleanup.js

@@ -0,0 +1,149 @@
+/** Kernel-bound removal of one token-authorized scratch run root. */
+import { randomBytes } from "node:crypto";
+import { spawnSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { SCRATCH_QUARANTINE_PREFIX, assertScratchNamespaceAuthority, } from "./scratch-namespace-authority.js";
+import { BOUND_DIRECTORY_CLEANUP_PROGRAM } from "./scratch-bound-cleanup-programs.js";
+import { readScratchOwnerRecord, } from "./scratch-owner.js";
+/** Exit status used when a child cwd does not match its expected inode. */
+const BOUND_CLEANUP_IDENTITY_EXIT = 73;
+/**
+ * Demand one inert direct basename, never a path.
+ * @param basename - Candidate direct-child name
+ */
+function validateBasename(basename) {
+    if (basename === "" ||
+        basename === "." ||
+        basename === ".." ||
+        path.basename(basename) !== basename ||
+        basename.includes("/") ||
+        basename.includes("\\")) {
+        throw new Error(`Scratch candidate must be a direct basename: ${basename}`);
+    }
+}
+/**
+ * Read one candidate without converting absence into an exception.
+ * @param candidate - Candidate path
+ * @returns Candidate metadata, or undefined when already absent
+ */
+function lstatIfPresent(candidate) {
+    try {
+        return fs.lstatSync(candidate);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Clear a directory through a cwd bound to the inspected inode.
+ * @param candidate - Directory path
+ * @param expected - Pinned directory identity
+ */
+function clearDirectoryThroughBoundCwd(candidate, expected) {
+    const result = spawnSync(process.execPath, [
+        "--input-type=commonjs",
+        "--eval",
+        BOUND_DIRECTORY_CLEANUP_PROGRAM,
+        String(expected.dev),
+        String(expected.ino),
+    ], { cwd: candidate, encoding: "utf8", maxBuffer: 64 * 1024 });
+    if (result.error !== undefined)
+        throw result.error;
+    if (result.status === BOUND_CLEANUP_IDENTITY_EXIT) {
+        throw new Error("Scratch directory identity changed before bound cleanup");
+    }
+    if (result.status !== 0 || result.signal !== null) {
+        throw new Error(`Scratch bound cleanup failed: ${result.stderr.trim() || result.signal || String(result.status)}`);
+    }
+}
+/**
+ * Bind an optional armed inode identity to the inspected candidate.
+ * @param options - Authorized root-removal options
+ * @param stat - Candidate metadata when present
+ * @returns Validated metadata, or undefined when already absent
+ */
+function validateExpectedRootIdentity(options, stat) {
+    if (stat !== undefined &&
+        options.expectedIdentity !== undefined &&
+        (stat.dev !== options.expectedIdentity.dev ||
+            stat.ino !== options.expectedIdentity.ino)) {
+        throw new Error("Scratch root identity does not match armed intent");
+    }
+    return stat;
+}
+/**
+ * Validate authority before reading a destructive candidate.
+ * @param options - Authorized root-removal options
+ * @param candidate - Candidate path
+ * @returns Candidate metadata, or undefined when already absent
+ */
+function inspectAuthorizedCandidate(options, candidate) {
+    validateBasename(options.basename);
+    assertScratchNamespaceAuthority(options.authority);
+    return validateExpectedRootIdentity(options, lstatIfPresent(candidate));
+}
+/**
+ * Revalidate an expected marker token at a specific path.
+ * @param candidate - Candidate path
+ * @param expectedToken - Token authorized by the caller
+ * @param phase - Whether validation occurs before or after quarantine
+ */
+function assertOwnerToken(candidate, expectedToken, phase) {
+    if (expectedToken === undefined)
+        return;
+    const owner = readScratchOwnerRecord(candidate);
+    if (owner.token !== expectedToken) {
+        throw new Error(`Scratch owner token changed ${phase} quarantine`);
+    }
+}
+/**
+ * Revalidate and unlink the renamed candidate.
+ * @param quarantine - Quarantined path
+ * @param before - Pinned pre-rename metadata
+ * @param expectedToken - Token authorized by the caller
+ * @param afterIdentityCheck - Optional adversarial test hook
+ * @returns True after successful removal
+ */
+function removeVerifiedQuarantine(quarantine, before, expectedToken, afterIdentityCheck) {
+    const after = fs.lstatSync(quarantine);
+    if (after.isSymbolicLink() ||
+        after.dev !== before.dev ||
+        after.ino !== before.ino) {
+        throw new Error("Scratch root identity changed during quarantine");
+    }
+    afterIdentityCheck?.(quarantine);
+    assertOwnerToken(quarantine, expectedToken, "after");
+    clearDirectoryThroughBoundCwd(quarantine, after);
+    fs.rmdirSync(quarantine);
+    return true;
+}
+/**
+ * Quarantine and delete one direct owned root.
+ * @param options - Authorized root-removal options
+ * @returns Whether an existing root was removed
+ */
+export function removeAuthorizedScratchRoot(options) {
+    const candidate = path.join(options.authority.namespace.canonicalPath, options.basename);
+    const quarantineName = `${SCRATCH_QUARANTINE_PREFIX}${randomBytes(16).toString("hex")}`;
+    const quarantine = path.join(options.authority.namespace.canonicalPath, quarantineName);
+    const before = inspectAuthorizedCandidate(options, candidate);
+    if (before === undefined)
+        return false;
+    if (before.isSymbolicLink() || !before.isDirectory()) {
+        throw new Error(`Scratch root authority refuses non-directory or symlink: ${candidate}`);
+    }
+    assertOwnerToken(candidate, options.expectedToken, "before");
+    try {
+        fs.renameSync(candidate, quarantine);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+    return removeVerifiedQuarantine(quarantine, before, options.expectedToken, options.afterIdentityCheck);
+}
+//# sourceMappingURL=scratch-bound-root-cleanup.js.map

package/dist/configs/vitest/scratch-bound-root-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-bound-root-cleanup.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-bound-root-cleanup.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,yBAAyB,EACzB,+BAA+B,GAEhC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EACL,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAW5B,2EAA2E;AAC3E,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAEvC;;;GAGG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IACE,QAAQ,KAAK,EAAE;QACf,QAAQ,KAAK,GAAG;QAChB,QAAQ,KAAK,IAAI;QACjB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ;QACpC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EACvB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,SAAiB;IACvC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,6BAA6B,CACpC,SAAiB,EACjB,QAAkB;IAElB,MAAM,MAAM,GAAG,SAAS,CACtB,OAAO,CAAC,QAAQ,EAChB;QACE,uBAAuB;QACvB,QAAQ;QACR,+BAA+B;QAC/B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;KACrB,EACD,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,CAC3D,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,iCAAiC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAClG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,4BAA4B,CACnC,OAA2C,EAC3C,IAA0B;IAE1B,IACE,IAAI,KAAK,SAAS;QAClB,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,gBAAgB,CAAC,GAAG;YACxC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,0BAA0B,CACjC,OAA2C,EAC3C,SAAiB;IAEjB,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,+BAA+B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,OAAO,4BAA4B,CAAC,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,SAAiB,EACjB,aAAiC,EACjC,KAAyB;IAEzB,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO;IACxC,MAAM,KAAK,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,aAAa,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAC/B,UAAkB,EAClB,MAAgB,EAChB,aAAiC,EACjC,kBAA6D;IAE7D,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvC,IACE,KAAK,CAAC,cAAc,EAAE;QACtB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QACxB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EACxB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,kBAAkB,EAAE,CAAC,UAAU,CAAC,CAAC;IACjC,gBAAgB,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACrD,6BAA6B,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA2C;IAE3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,EACzC,OAAO,CAAC,QAAQ,CACjB,CAAC;IACF,MAAM,cAAc,GAAG,GAAG,yBAAyB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAC1B,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,EACzC,cAAc,CACf,CAAC;IACF,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,4DAA4D,SAAS,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,wBAAwB,CAC7B,UAAU,EACV,MAAM,EACN,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,kBAAkB,CAC3B,CAAC;AACJ,CAAC"}

package/dist/configs/vitest/scratch-global-setup.d.ts

@@ -1,3 +1,4 @@
+import { processBirthFingerprintSnapshot } from "./scratch-owner.js";
 /**
  * Upper bound on entries the namespace may hold that **nobody owns**.
  *
@@ -35,7 +36,7 @@ export declare const MAX_NAMESPACE_ENTRIES = 512;
 export interface NamespaceResidue {
     /** Entries whose owning process is gone but which were not removed */
     readonly orphaned: readonly string[];
-    /** Entries that do not follow the run-root naming scheme at all */
+    /** Entries whose exact dead ownership cannot be established */
     readonly unrecognised: readonly string[];
     /** Total entries present */
     readonly total: number;
@@ -50,26 +51,33 @@ export interface NamespaceResidue {
  * that regression into a failure instead of a slow leak.
  * @param dir - Namespace directory to inspect
  * @param alive - Liveness probe, overridable for tests
+ * @param birth - Process-birth probe, overridable for tests
  * @returns The classified residue.
  */
-export declare const inspectNamespace: (dir?: string, alive?: (pid: number) => boolean) => NamespaceResidue;
+export declare const inspectNamespace: (dir?: string, alive?: (pid: number) => boolean, birth?: (pid: number) => string | undefined) => NamespaceResidue;
 /**
  * Builds the failure message for a namespace that is accumulating.
  *
  * Every branch names the directory and the offending entries, because the
  * failure this replaces was a 60-second timeout that named nothing.
  *
- * `unrecognised` is deliberately NOT a failure. It was, and it wedged: one
- * foreign directory in the namespace failed every subsequent run, forever, with
- * a message a downstream user could not act on. Those entries are reclaimed on
- * age by the sweep instead. What remains here are the two conditions that mean
- * this fix itself has stopped working — residue the sweep should have taken and
- * did not, and a namespace growing without bound.
+ * `unrecognised` is deliberately a fail-closed refusal. A foreign, malformed,
+ * or identity-mismatched entry is preserved because age and naming are not
+ * deletion authority; proceeding would silently permit unbounded residue, and
+ * deleting it could destroy a live sibling's work. The diagnostic therefore
+ * names the bounded entries and gives the only safe manual recovery rule.
  * @param dir - Namespace directory inspected
  * @param residue - What the inspection found
  * @returns The message, or `undefined` when the namespace is healthy.
  */
 export declare const describeResidueFailure: (dir: string, residue: NamespaceResidue) => string | undefined;
+/**
+ * Sweeps the namespace and reports what survived.
+ * @param alive - Process liveness probe shared by both phases
+ * @param snapshot - One bulk process-birth snapshot provider
+ * @returns The residue remaining after the sweep.
+ */
+export declare const sweepThenInspect: (alive?: (pid: number) => boolean, snapshot?: typeof processBirthFingerprintSnapshot) => NamespaceResidue;
 /**
  * Renders the banner printed at the moment of refusal.
  *
@@ -193,7 +201,7 @@ export declare const announceRefusal: (failure: string, writeNotice?: (text: str
  * A refusal speaks twice — a banner before collection and a summary line at
  * exit — and the two are not redundant. They are the top and the bottom of a
  * transcript nobody reads in full.
- * @throws When residue is present that the sweep cannot or did not reclaim.
+ * @throws {Error} When residue is present that the sweep cannot or did not reclaim.
  */
 export declare const setup: () => void;
 /**

package/dist/configs/vitest/scratch-global-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scratch-global-setup.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAkDA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAK,MAA8B,EACnC,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,KAC/C,gBAWF,CAAC;AAUF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,sBAAsB,GACjC,KAAK,MAAM,EACX,SAAS,gBAAgB,KACxB,MAAM,GAAG,SA2BX,CAAC;AA2BF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,KAAG,MAcxC,CAAC;AAKf;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,MAAM,KAAG,MAG/B,CAAC;AAEzB;;;;;GAKG;AACH,eAAO,MAAM,eAAe,mBAAmB,CAAC;AAQhD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,iBAAiB,GAC5B,SAAS,MAAM,EACf,QAAO,CAAC,IAAI,EAAE,MAAM,KAAK,IAExB,KACA,IAIF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,EACf,cAAa,CAAC,IAAI,EAAE,MAAM,KAAK,IAE9B,KACA,IAMF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,KAAK,QAAO,IAexB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,QAAQ,QAAO,IAE3B,CAAC"}
+{"version":3,"file":"scratch-global-setup.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAmDA,OAAO,EAGL,+BAA+B,EAGhC,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,+DAA+D;IAC/D,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AA4DD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAK,MAA8B,EACnC,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,EAChD,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAmC,KACnE,gBAgBF,CAAC;AAeF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,GACjC,KAAK,MAAM,EACX,SAAS,gBAAgB,KACxB,MAAM,GAAG,SAsCX,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,GAC3B,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,EAChD,WAAU,OAAO,+BAAiE,KACjF,gBAQF,CAAC;AAgBF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,KAAG,MAcxC,CAAC;AAKf;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,MAAM,KAAG,MAG/B,CAAC;AAEzB;;;;;GAKG;AACH,eAAO,MAAM,eAAe,mBAAmB,CAAC;AAQhD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,iBAAiB,GAC5B,SAAS,MAAM,EACf,QAAO,CAAC,IAAI,EAAE,MAAM,KAAK,IAExB,KACA,IAIF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,EACf,cAAa,CAAC,IAAI,EAAE,MAAM,KAAK,IAE9B,KACA,IAMF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,KAAK,QAAO,IAexB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,QAAQ,QAAO,IAE3B,CAAC"}

package/dist/configs/vitest/scratch-global-setup.js

@@ -3,10 +3,11 @@
  *
  * Runs once in the main Vitest process, on either side of the whole run.
  *
- * `setup` reclaims residue left by runs that were killed and then REFUSES TO
- * START a run whose namespace is accumulating — the accumulation being the
- * entire defect this exists to prevent, arriving one directory at a time.
- * `teardown` reclaims what this run allocated.
+ * `setup` reclaims residue only when a valid owner marker proves the exact root
+ * belongs to a dead process. It REFUSES TO START when a root cannot be removed
+ * with that authority or when proven-dead residue survives the sweep. That
+ * fail-closed distinction prevents a cleanup guard from deleting a live
+ * sibling's work. `teardown` reclaims what this run allocated.
  *
  * The check is deliberately a hard failure. A previous version of this problem
  * was invisible for a working day because every instrument that met the
@@ -29,16 +30,18 @@
  * a hook the runner ignores is the exact defect this file was written to stop,
  * reproduced inside the guard itself.
  *
- * Checking at the start rather than the end costs nothing that matters: a run's
- * own residue is reclaimed by the next run's sweep, and the next run's check
- * sees whatever that sweep could not take. Accumulation is a trend, and a trend
- * is still visible one run later.
+ * Checking at the start rather than the end costs nothing that matters: the
+ * next run reclaims roots whose exact dead ownership it can prove, preserves
+ * uncertain paths, and refuses before collection if anything unsafe remains.
+ * Accumulation is a trend, and a trend is still visible one run later.
  * @see {@link module:configs/vitest/scratch} for the reclaim rules
  * @module configs/vitest/scratch-global-setup
  */
-import { writeSync } from "node:fs";
+import { lstatSync, realpathSync, writeSync } from "node:fs";
+import * as path from "node:path";
 import { env } from "node:process";
-import { isProcessAlive, parseRunRootName, readNamespaceEntries, scratchNamespaceDir, sweepScratchNamespace, } from "./scratch.js";
+import { isProcessAlive, liveOwnerBirthProbe, readNamespaceEntries, scratchNamespaceDir, sweepScratchNamespace, } from "./scratch.js";
+import { classifyScratchOwner, processBirthFingerprint, processBirthFingerprintSnapshot, readScratchOwnerRecord, } from "./scratch-owner.js";
 /**
  * Upper bound on entries the namespace may hold that **nobody owns**.
  *
@@ -72,6 +75,50 @@ import { isProcessAlive, parseRunRootName, readNamespaceEntries, scratchNamespac
  * against measured harm and belongs in its own ticket.
  */
 export const MAX_NAMESPACE_ENTRIES = 512;
+/**
+ * Verify that a durable marker names the physical root and namespace inspected.
+ * @param dir - Canonical namespace path
+ * @param root - Direct child root
+ * @param owner - Valid owner marker
+ * @returns True when device, inode, and canonical identities all match
+ */
+function markerMatchesInspectedPath(dir, root, owner) {
+    const namespaceStat = lstatSync(dir);
+    const rootStat = lstatSync(root);
+    return (!rootStat.isSymbolicLink() &&
+        rootStat.isDirectory() &&
+        owner.namespace.canonicalPath === realpathSync(dir) &&
+        owner.namespace.dev === namespaceStat.dev &&
+        owner.namespace.ino === namespaceStat.ino &&
+        owner.root.canonicalPath === realpathSync(root) &&
+        owner.root.dev === rootStat.dev &&
+        owner.root.ino === rootStat.ino);
+}
+/**
+ * Classify one direct namespace child without treating age as authority.
+ * @param dir - Canonical namespace path
+ * @param name - Direct child basename
+ * @param alive - Pid liveness probe
+ * @param birth - Process-birth probe
+ * @returns Fail-closed entry disposition
+ */
+function classifyNamespaceEntry(dir, name, alive, birth) {
+    const root = path.join(dir, name);
+    try {
+        const owner = readScratchOwnerRecord(root);
+        if (!markerMatchesInspectedPath(dir, root, owner))
+            return "unrecognised";
+        return classifyScratchOwner(owner, {
+            isProcessAlive: alive,
+            processBirthFingerprint: birth,
+        }) === "preserve"
+            ? "live"
+            : "orphaned";
+    }
+    catch {
+        return "unrecognised";
+    }
+}
 /**
  * Classifies what is left in the namespace.
  *
@@ -82,16 +129,22 @@ export const MAX_NAMESPACE_ENTRIES = 512;
  * that regression into a failure instead of a slow leak.
  * @param dir - Namespace directory to inspect
  * @param alive - Liveness probe, overridable for tests
+ * @param birth - Process-birth probe, overridable for tests
  * @returns The classified residue.
  */
-export const inspectNamespace = (dir = scratchNamespaceDir(), alive = isProcessAlive) => {
+export const inspectNamespace = (dir = scratchNamespaceDir(), alive = isProcessAlive, birth = processBirthFingerprint) => {
     const entries = readNamespaceEntries(dir);
+    const classified = entries.map(name => ({
+        name,
+        disposition: classifyNamespaceEntry(dir, name, alive, birth),
+    }));
     return {
-        orphaned: entries.filter(name => {
-            const owner = parseRunRootName(name);
-            return owner !== undefined && !alive(owner.pid);
-        }),
-        unrecognised: entries.filter(name => parseRunRootName(name) === undefined),
+        orphaned: classified
+            .filter(entry => entry.disposition === "orphaned")
+            .map(entry => entry.name),
+        unrecognised: classified
+            .filter(entry => entry.disposition === "unrecognised")
+            .map(entry => entry.name),
         total: entries.length,
     };
 };
@@ -101,18 +154,20 @@ export const inspectNamespace = (dir = scratchNamespaceDir(), alive = isProcessA
  * @returns A comma-separated sample, elided beyond five.
  */
 const sample = (names) => names.slice(0, 5).join(", ") + (names.length > 5 ? ", …" : "");
+/** Safe operator recovery when automatic deletion authority is unavailable. */
+const MANUAL_RECOVERY_GUIDANCE = "Remove only an exact entry whose dead owner you can independently verify. " +
+    "Do not clear the shared namespace or remove a live sibling's root.";
 /**
  * Builds the failure message for a namespace that is accumulating.
  *
  * Every branch names the directory and the offending entries, because the
  * failure this replaces was a 60-second timeout that named nothing.
  *
- * `unrecognised` is deliberately NOT a failure. It was, and it wedged: one
- * foreign directory in the namespace failed every subsequent run, forever, with
- * a message a downstream user could not act on. Those entries are reclaimed on
- * age by the sweep instead. What remains here are the two conditions that mean
- * this fix itself has stopped working — residue the sweep should have taken and
- * did not, and a namespace growing without bound.
+ * `unrecognised` is deliberately a fail-closed refusal. A foreign, malformed,
+ * or identity-mismatched entry is preserved because age and naming are not
+ * deletion authority; proceeding would silently permit unbounded residue, and
+ * deleting it could destroy a live sibling's work. The diagnostic therefore
+ * names the bounded entries and gives the only safe manual recovery rule.
  * @param dir - Namespace directory inspected
  * @param residue - What the inspection found
  * @returns The message, or `undefined` when the namespace is healthy.
@@ -122,7 +177,15 @@ export const describeResidueFailure = (dir, residue) => {
         return (`Test scratch namespace ${dir} still holds ${String(residue.orphaned.length)} ` +
             `root(s) whose owning process is gone, after a sweep that should have ` +
             `removed them: ${sample(residue.orphaned)}. Reclaim-on-start is not ` +
-            `working, so a killed run's residue is now permanent.`);
+            `working, so a killed run's residue is now permanent. ${MANUAL_RECOVERY_GUIDANCE}`);
+    }
+    if (residue.unrecognised.length > 0) {
+        return (`Test scratch namespace ${dir} holds ${String(residue.unrecognised.length)} ` +
+            `root(s) without valid owner-marker authority: ${sample(residue.unrecognised)}. ` +
+            `Lisa preserved the uncertain residue instead of deleting a path that ` +
+            `cannot be bound to a token and process-birth fingerprint. ` +
+            `There are ${String(residue.total)} entries in total; the historical ` +
+            `accumulating-residue ceiling is ${String(MAX_NAMESPACE_ENTRIES)}. ${MANUAL_RECOVERY_GUIDANCE}`);
     }
     // Entries no live process owns. Written as the general expression rather
     // than as `unrecognised` alone: the orphaned branch above returns first
@@ -134,18 +197,24 @@ export const describeResidueFailure = (dir, residue) => {
             `live process owns, past the ceiling of ${String(MAX_NAMESPACE_ENTRIES)} ` +
             `(${String(residue.total)} entries in total, the rest being work in ` +
             `flight). Scratch space is accumulating rather than being reclaimed — ` +
-            `the condition this guard exists to prevent.`);
+            `the condition this guard exists to prevent. ${MANUAL_RECOVERY_GUIDANCE}`);
     }
     return undefined;
 };
 /**
  * Sweeps the namespace and reports what survived.
- * @param dir - Namespace directory
+ * @param alive - Process liveness probe shared by both phases
+ * @param snapshot - One bulk process-birth snapshot provider
  * @returns The residue remaining after the sweep.
  */
-const sweepThenInspect = (dir) => {
-    sweepScratchNamespace({ dir });
-    return inspectNamespace(dir);
+export const sweepThenInspect = (alive = isProcessAlive, snapshot = processBirthFingerprintSnapshot) => {
+    const dir = scratchNamespaceDir();
+    const birth = liveOwnerBirthProbe(dir, alive, snapshot);
+    sweepScratchNamespace({
+        isProcessAlive: alive,
+        processBirthFingerprint: birth,
+    });
+    return inspectNamespace(dir, alive, birth);
 };
 /**
  * Audits the namespace, tolerating a sibling run's worker exiting mid-audit.
@@ -154,12 +223,11 @@ const sweepThenInspect = (dir) => {
  * inspection, through no fault of this run. Sweeping once more before treating
  * an orphan as a defect keeps a guard built to catch a permanent leak from
  * failing on a transient one.
- * @param dir - Namespace directory
  * @returns The residue to judge.
  */
-const auditNamespace = (dir) => {
-    const first = sweepThenInspect(dir);
-    return first.orphaned.length > 0 ? sweepThenInspect(dir) : first;
+const auditNamespace = () => {
+    const first = sweepThenInspect();
+    return first.orphaned.length > 0 ? sweepThenInspect() : first;
 };
 /**
  * Renders the banner printed at the moment of refusal.
@@ -321,7 +389,7 @@ export const announceRefusal = (failure, writeNotice = text => {
  * A refusal speaks twice — a banner before collection and a summary line at
  * exit — and the two are not redundant. They are the top and the bottom of a
  * transcript nobody reads in full.
- * @throws When residue is present that the sweep cannot or did not reclaim.
+ * @throws {Error} When residue is present that the sweep cannot or did not reclaim.
  */
 export const setup = () => {
     // The namespace directory is not created here. `createRunRoot` makes it
@@ -329,7 +397,7 @@ export const setup = () => {
     // inspection treat an absent namespace as an empty one — so creating it would
     // be a side effect ahead of the audit that buys nothing.
     const dir = scratchNamespaceDir();
-    const residue = auditNamespace(dir);
+    const residue = auditNamespace();
     const failure = describeResidueFailure(dir, residue);
     if (failure !== undefined) {
         // Both halves of the announcement happen before the throw, because the
@@ -354,6 +422,6 @@ export const setup = () => {
  * approximately true.
  */
 export const teardown = () => {
-    sweepScratchNamespace({ dir: scratchNamespaceDir() });
+    sweepScratchNamespace();
 };
 //# sourceMappingURL=scratch-global-setup.js.map

package/dist/configs/vitest/scratch-global-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"scratch-global-setup.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAYzC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,mBAAmB,EAAE,EACnC,QAAkC,cAAc,EAC9B,EAAE;IACpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAE1C,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YAC9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;QAC1E,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAU,EAAE,CAClD,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEjE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,GAAW,EACX,OAAyB,EACL,EAAE;IACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CACL,0BAA0B,GAAG,gBAAgB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;YAC/E,uEAAuE;YACvE,iBAAiB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B;YACrE,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;IAEtE,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,mBAAmB;YACzE,0CAA0C,MAAM,CAAC,qBAAqB,CAAC,GAAG;YAC1E,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,4CAA4C;YACrE,uEAAuE;YACvE,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAoB,EAAE;IACzD,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,cAAc,GAAG,CAAC,GAAW,EAAoB,EAAE;IACvD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACnE,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC7D;IACE,EAAE;IACF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,6DAA6D;IAC7D,EAAE;IACF,OAAO;IACP,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,2CAA2C;IAC3C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,8DAA8D;AAC9D,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC9D,wEAAwE;IACxE,qEAAqE;IACrE,WAAW,OAAO,IAAI,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD;;;GAGG;AACH,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAe,EACf,QAAgC,IAAI,CAAC,EAAE;IACrC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAe,EACf,cAAsC,IAAI,CAAC,EAAE;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,IAAI,YAAY,EAAE;QAAE,OAAO;IAC3B,2EAA2E;IAC3E,gEAAgE;IAChE,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,GAAS,EAAE;IAC9B,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,uEAAuE;QACvE,oCAAoC;QACpC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAS,EAAE;IACjC,qBAAqB,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC,CAAC"}
+{"version":3,"file":"scratch-global-setup.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAezC;;;;;;GAMG;AACH,SAAS,0BAA0B,CACjC,GAAW,EACX,IAAY,EACZ,KAA2B;IAE3B,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,CACL,CAAC,QAAQ,CAAC,cAAc,EAAE;QAC1B,QAAQ,CAAC,WAAW,EAAE;QACtB,KAAK,CAAC,SAAS,CAAC,aAAa,KAAK,YAAY,CAAC,GAAG,CAAC;QACnD,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG;QACzC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG;QACzC,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,YAAY,CAAC,IAAI,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAChC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAC7B,GAAW,EACX,IAAY,EACZ,KAA+B,EAC/B,KAA0C;IAE1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,cAAc,CAAC;QACzE,OAAO,oBAAoB,CAAC,KAAK,EAAE;YACjC,cAAc,EAAE,KAAK;YACrB,uBAAuB,EAAE,KAAK;SAC/B,CAAC,KAAK,UAAU;YACf,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,mBAAmB,EAAE,EACnC,QAAkC,cAAc,EAChD,QAA6C,uBAAuB,EAClD,EAAE;IACpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI;QACJ,WAAW,EAAE,sBAAsB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;KAC7D,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,QAAQ,EAAE,UAAU;aACjB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC;aACjD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,YAAY,EAAE,UAAU;aACrB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,cAAc,CAAC;aACrD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAU,EAAE,CAClD,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEjE,+EAA+E;AAC/E,MAAM,wBAAwB,GAC5B,4EAA4E;IAC5E,oEAAoE,CAAC;AAEvE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,GAAW,EACX,OAAyB,EACL,EAAE;IACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CACL,0BAA0B,GAAG,gBAAgB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;YAC/E,uEAAuE;YACvE,iBAAiB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B;YACrE,wDAAwD,wBAAwB,EAAE,CACnF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG;YAC7E,iDAAiD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI;YACjF,uEAAuE;YACvE,4DAA4D;YAC5D,aAAa,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oCAAoC;YACtE,mCAAmC,MAAM,CAAC,qBAAqB,CAAC,KAAK,wBAAwB,EAAE,CAChG,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;IAEtE,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,mBAAmB;YACzE,0CAA0C,MAAM,CAAC,qBAAqB,CAAC,GAAG;YAC1E,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,4CAA4C;YACrE,uEAAuE;YACvE,+CAA+C,wBAAwB,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,QAAkC,cAAc,EAChD,WAAmD,+BAA+B,EAChE,EAAE;IACpB,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxD,qBAAqB,CAAC;QACpB,cAAc,EAAE,KAAK;QACrB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,GAAqB,EAAE;IAC5C,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC7D;IACE,EAAE;IACF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,6DAA6D;IAC7D,EAAE;IACF,OAAO;IACP,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,2CAA2C;IAC3C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,8DAA8D;AAC9D,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC9D,wEAAwE;IACxE,qEAAqE;IACrE,WAAW,OAAO,IAAI,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD;;;GAGG;AACH,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAe,EACf,QAAgC,IAAI,CAAC,EAAE;IACrC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAe,EACf,cAAsC,IAAI,CAAC,EAAE;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,IAAI,YAAY,EAAE;QAAE,OAAO;IAC3B,2EAA2E;IAC3E,gEAAgE;IAChE,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,GAAS,EAAE;IAC9B,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,uEAAuE;QACvE,oCAAoC;QACpC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAS,EAAE;IACjC,qBAAqB,EAAE,CAAC;AAC1B,CAAC,CAAC"}

package/dist/configs/vitest/scratch-leak-setup.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scratch-leak-setup.d.ts.map

package/dist/configs/vitest/scratch-leak-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-leak-setup.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-leak-setup.ts"],"names":[],"mappings":""}

package/dist/configs/vitest/scratch-leak-setup.js

@@ -0,0 +1,108 @@
+/**
+ * Per-suite backstop that makes a leaked fixture fail the suite that leaked it.
+ *
+ * The worker-wide run root is still removed wholesale on exit and reclaimed by
+ * a successor after SIGKILL. This hook is the attribution layer: it snapshots
+ * the run-root children before collection, runs last after every user
+ * `afterAll`, removes anything added by the suite, and fails on additions whose
+ * prefix was not registered before collection.
+ * @module configs/vitest/scratch-leak-setup
+ */
+import * as fs from "node:fs";
+import { tmpdir } from "node:os";
+import * as path from "node:path";
+import { afterAll } from "vitest";
+import { readBoundedScratchNames, removeAuthorizedScratchChildren, } from "./scratch-authority.js";
+import { SCRATCH_OWNER_FILE, readScratchOwnerRecord } from "./scratch-owner.js";
+/** Run root whose children this suite owns. */
+const runRoot = tmpdir();
+/** Fail immediately if the setup order did not install scratch first. */
+if (!path.basename(runRoot).startsWith("worker-")) {
+    throw new Error(`Scratch leak guard started before scratch redirection: ${runRoot}`);
+}
+/** Owner record binds the prefix registry and path identity to this root. */
+const owner = readScratchOwnerRecord(runRoot);
+/** Direct children present before this suite imports any test module. */
+const baseline = new Set([
+    ...readBoundedScratchNames(runRoot),
+    SCRATCH_OWNER_FILE,
+]);
+/**
+ * Render the prefix a mkdtemp-shaped basename came from.
+ * @param name - Direct scratch child basename
+ * @returns Display prefix
+ */
+function displayedPrefix(name) {
+    return /^[\s\S]*[A-Za-z0-9]{6}$/u.test(name) ? `${name.slice(0, -6)}*` : name;
+}
+/**
+ * Remove every classified addition through one inode-bound cleanup process.
+ * @param names - Direct scratch child basenames
+ */
+function removeInternalChildren(names) {
+    for (const name of names) {
+        if (path.basename(name) !== name || name === "." || name === "..") {
+            throw new Error(`Scratch leak guard refused non-basename child: ${name}`);
+        }
+    }
+    const before = fs.lstatSync(runRoot);
+    if (before.dev !== owner.root.dev ||
+        before.ino !== owner.root.ino ||
+        fs.realpathSync(runRoot) !== owner.root.canonicalPath) {
+        throw new Error("Scratch run-root identity changed before leak cleanup");
+    }
+    const marker = readScratchOwnerRecord(runRoot);
+    if (marker.token !== owner.token) {
+        throw new Error("Scratch owner marker changed before leak cleanup");
+    }
+    removeAuthorizedScratchChildren({
+        parent: owner.root,
+        basenames: names,
+    });
+    if (readScratchOwnerRecord(runRoot).token !== owner.token) {
+        throw new Error("Scratch owner marker changed during leak cleanup");
+    }
+}
+/**
+ * Read the run root or throw a suite-attributed diagnostic.
+ * @returns Current direct-child basenames
+ */
+function readRunRootNames() {
+    try {
+        return readBoundedScratchNames(runRoot);
+    }
+    catch (error) {
+        throw new Error(`Scratch leak guard could not read suite root ${runRoot}: ${String(error)}`);
+    }
+}
+/**
+ * Whether one addition belongs to a prefix registered before collection.
+ * @param name - Added direct-child basename
+ * @returns Whether the stack registered ownership
+ */
+function isRegisteredAddition(name) {
+    return owner.registeredPrefixes.some(prefix => name.startsWith(prefix));
+}
+/**
+ * Audit direct additions after user hooks, clean every one, and fail on any
+ * prefix the stack did not register before collection.
+ */
+afterAll(() => {
+    const names = readRunRootNames();
+    const additions = names.filter(name => !baseline.has(name));
+    const unregistered = additions.filter(name => !isRegisteredAddition(name));
+    try {
+        removeInternalChildren(additions);
+    }
+    catch (error) {
+        throw new Error(`Scratch leak guard could not clean ${additions.join(", ")} for suite ${owner.suiteLabel}: ${String(error)}`);
+    }
+    if (unregistered.length > 0) {
+        const details = [...unregistered]
+            .sort((left, right) => left.localeCompare(right))
+            .map(name => `${name} (${displayedPrefix(name)})`)
+            .join(", ");
+        throw new Error(`Suite ${owner.suiteLabel} leaked ${String(unregistered.length)} unregistered scratch fixture(s): ${details}`);
+    }
+});
+//# sourceMappingURL=scratch-leak-setup.js.map

package/dist/configs/vitest/scratch-leak-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-leak-setup.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-leak-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEhF,+CAA+C;AAC/C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;AAEzB,yEAAyE;AACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;IAClD,MAAM,IAAI,KAAK,CACb,0DAA0D,OAAO,EAAE,CACpE,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAE9C,yEAAyE;AACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,GAAG,uBAAuB,CAAC,OAAO,CAAC;IACnC,kBAAkB;CACnB,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,KAAwB;IACtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,IACE,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG;QAC7B,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG;QAC7B,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,aAAa,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,+BAA+B,CAAC;QAC9B,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;IACH,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,gDAAgD,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,QAAQ,CAAC,GAAG,EAAE;IACZ,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7G,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC;aAC9B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aAChD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,KAAK,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;aACjD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,SAAS,KAAK,CAAC,UAAU,WAAW,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,qCAAqC,OAAO,EAAE,CAC9G,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC"}