@dommaker/harness 1.2.2 → 1.2.3

package/CHANGELOG.md

@@ -6,6 +6,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [Unreleased]
 
+## [1.2.3] - 2026-08-28
+
+### Changes
+- fix(test): mkdtemp 泄漏防护——setupFilesAfterEnv 劫持 mkdtempSync 统一清理
+
 ## [1.2.2] - 2026-08-26
 
 ### Changes

package/dist/test-setup/mkdtemp-cleanup.d.ts

@@ -0,0 +1,9 @@
+/** 幂等。setup 与测试文件重复调用安全。 */
+export declare function patchMktempCleanup(): void;
+export declare function isRegisteredTmpDir(dir: string): boolean;
+/**
+ * 清扫 tmpDir 中超龄且符合 mkdtemp 签名的目录。返回删除数。
+ * 单条失败（竞态被别进程先删等）不阻断。
+ */
+export declare function sweepStaleMkdtempDirs(tmpDir: string, ageMs: number): number;
+//# sourceMappingURL=mkdtemp-cleanup.d.ts.map

package/dist/test-setup/mkdtemp-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mkdtemp-cleanup.d.ts","sourceRoot":"","sources":["../../src/test-setup/mkdtemp-cleanup.ts"],"names":[],"mappings":"AAwBA,4BAA4B;AAC5B,wBAAgB,kBAAkB,IAAI,IAAI,CAoBzC;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAuB3E"}

package/dist/test-setup/mkdtemp-cleanup.js

@@ -0,0 +1,90 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.patchMktempCleanup = patchMktempCleanup;
+exports.isRegisteredTmpDir = isRegisteredTmpDir;
+exports.sweepStaleMkdtempDirs = sweepStaleMkdtempDirs;
+/**
+ * Jest setupFilesAfterEnv - mkdtemp 泄漏防护（2026-08-26 /tmp 3.9 万残留事故根因修复）
+ *
+ * 事故：5 个测试文件 fs.mkdtempSync 后零清理（constraints-retire / check-drift /
+ * constraints-report / agent-prompt-renderer / injection-drift），日常 jest 运行累积。
+ *
+ * 机制（studio apps/api/tests/mkdtemp-cleanup.ts 同款，jest 版）：
+ * 1) patch fs.mkdtempSync--本进程创建的临时目录全部进注册表，afterAll 统一 rmSync。
+ *    jest worker 被 kill 时 process 'exit' 不触发，必须用 afterAll（setupFilesAfterEnv
+ *    里注册 = 文件级钩子）。
+ * 2) import 时清扫 tmpdir 里 >24h 且符合 mkdtemp 签名的目录，兜底 worker 被 kill 的场景。
+ *
+ * 签名正则只匹配「小写字母数字连字符前缀 + 恰好 6 位大小写字母数字后缀」：
+ * chrome crashpad（org.chromium.Chromium.XXXX，含点）、tsx-0 / jest_0 等不匹配。
+ */
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const globals_1 = require("@jest/globals");
+const MKDTEMP_SUFFIX_RE = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*-[A-Za-z0-9]{6}$/;
+let patched = false;
+const registeredDirs = new Set();
+/** 幂等。setup 与测试文件重复调用安全。 */
+function patchMktempCleanup() {
+    if (patched)
+        return;
+    patched = true;
+    const orig = fs_1.default.mkdtempSync;
+    fs_1.default.mkdtempSync = ((prefix) => {
+        const dir = orig(prefix);
+        registeredDirs.add(dir);
+        return dir;
+    });
+    (0, globals_1.afterAll)(() => {
+        for (const dir of registeredDirs) {
+            try {
+                fs_1.default.rmSync(dir, { recursive: true, force: true });
+            }
+            catch {
+                // 清理失败不阻断测试
+            }
+        }
+        registeredDirs.clear();
+    });
+}
+function isRegisteredTmpDir(dir) {
+    return registeredDirs.has(dir);
+}
+/**
+ * 清扫 tmpDir 中超龄且符合 mkdtemp 签名的目录。返回删除数。
+ * 单条失败（竞态被别进程先删等）不阻断。
+ */
+function sweepStaleMkdtempDirs(tmpDir, ageMs) {
+    let entries;
+    try {
+        entries = fs_1.default.readdirSync(tmpDir);
+    }
+    catch {
+        return 0;
+    }
+    const now = Date.now();
+    let removed = 0;
+    for (const name of entries) {
+        if (!MKDTEMP_SUFFIX_RE.test(name))
+            continue;
+        try {
+            const p = path_1.default.join(tmpDir, name);
+            const st = fs_1.default.statSync(p);
+            if (st.isDirectory() && now - st.mtimeMs > ageMs) {
+                fs_1.default.rmSync(p, { recursive: true, force: true });
+                removed++;
+            }
+        }
+        catch {
+            // 单条竞态不阻断
+        }
+    }
+    return removed;
+}
+// setupFilesAfterEnv 顶层执行：打补丁 + 清扫历史残留
+patchMktempCleanup();
+sweepStaleMkdtempDirs(process.env.TMPDIR || '/tmp', 24 * 60 * 60 * 1000);
+//# sourceMappingURL=mkdtemp-cleanup.js.map

package/dist/test-setup/mkdtemp-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mkdtemp-cleanup.js","sourceRoot":"","sources":["../../src/test-setup/mkdtemp-cleanup.ts"],"names":[],"mappings":";;;;;AAyBA,gDAoBC;AAED,gDAEC;AAMD,sDAuBC;AA9ED;;;;;;;;;;;;;;GAcG;AACH,4CAAoB;AACpB,gDAAwB;AACxB,2CAAyC;AAEzC,MAAM,iBAAiB,GAAG,gDAAgD,CAAC;AAE3E,IAAI,OAAO,GAAG,KAAK,CAAC;AACpB,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;AAEzC,4BAA4B;AAC5B,SAAgB,kBAAkB;IAChC,IAAI,OAAO;QAAE,OAAO;IACpB,OAAO,GAAG,IAAI,CAAC;IACf,MAAM,IAAI,GAAG,YAAE,CAAC,WAAyC,CAAC;IAC1D,YAAE,CAAC,WAAW,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC,CAA0B,CAAC;IAE5B,IAAA,kBAAQ,EAAC,GAAG,EAAE;QACZ,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,YAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,cAAc,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,MAAc,EAAE,KAAa;IACjE,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,YAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,cAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,EAAE,GAAG,YAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,GAAG,KAAK,EAAE,CAAC;gBACjD,YAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uCAAuC;AACvC,kBAAkB,EAAE,CAAC;AACrB,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dommaker/harness",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "通用工程约束框架 - 铁律系统、检查点验证、测试门控",
   "keywords": [
     "harness",

package/src/test-setup/__tests__/mkdtemp-cleanup.test.ts

@@ -0,0 +1,45 @@
+/**
+ * mkdtemp 泄漏防护测试（2026-08-26 /tmp 3.9 万残留事故，与 studio 同款机制）。
+ * 正本见 ../mkdtemp-cleanup.ts。
+ */
+import fs from 'fs';
+import path from 'path';
+import {
+  patchMktempCleanup,
+  isRegisteredTmpDir,
+  sweepStaleMkdtempDirs,
+} from '../mkdtemp-cleanup';
+
+describe('mkdtemp-cleanup', () => {
+  it('patch 后 mkdtempSync 创建的目录进注册表（幂等）', () => {
+    patchMktempCleanup();
+    const d = fs.mkdtempSync(path.join('/tmp', 'harness-mkdtemp-cleanup-test-'));
+    expect(fs.existsSync(d)).toBe(true);
+    expect(isRegisteredTmpDir(d)).toBe(true);
+    fs.rmSync(d, { recursive: true, force: true });
+  });
+
+  it('sweep 只删超过年龄阈值且符合 mkdtemp 签名的目录', () => {
+    const base = fs.mkdtempSync(path.join('/tmp', 'harness-mkdtemp-cleanup-sweep-'));
+    const cases: Array<{ name: string; ageH: number; shouldRemove: boolean }> = [
+      { name: 'fake-test-aB3xY9', ageH: 25, shouldRemove: true }, // 签名匹配 + 超龄 -> 删
+      { name: 'fake-test-cD4zW0', ageH: 1, shouldRemove: false }, // 签名匹配但新鲜 -> 留
+      { name: 'org.chromium.Chromium.RJ5vUP', ageH: 25, shouldRemove: false }, // 含点（chrome crashpad）-> 不匹配
+      { name: 'fake-test-ab12', ageH: 25, shouldRemove: false }, // 后缀 4 字符 -> 不匹配
+      { name: 'tsx-0', ageH: 25, shouldRemove: false }, // 后缀 1 字符 -> 不匹配
+    ];
+    for (const c of cases) {
+      const p = path.join(base, c.name);
+      fs.mkdirSync(p);
+      const t = new Date(Date.now() - c.ageH * 3600 * 1000);
+      fs.utimesSync(p, t, t);
+    }
+
+    const removed = sweepStaleMkdtempDirs(base, 24 * 3600 * 1000);
+    expect(removed).toBe(1);
+    for (const c of cases) {
+      expect(fs.existsSync(path.join(base, c.name))).toBe(!c.shouldRemove);
+    }
+    fs.rmSync(base, { recursive: true, force: true });
+  });
+});

package/src/test-setup/mkdtemp-cleanup.ts

@@ -0,0 +1,83 @@
+/**
+ * Jest setupFilesAfterEnv - mkdtemp 泄漏防护（2026-08-26 /tmp 3.9 万残留事故根因修复）
+ *
+ * 事故：5 个测试文件 fs.mkdtempSync 后零清理（constraints-retire / check-drift /
+ * constraints-report / agent-prompt-renderer / injection-drift），日常 jest 运行累积。
+ *
+ * 机制（studio apps/api/tests/mkdtemp-cleanup.ts 同款，jest 版）：
+ * 1) patch fs.mkdtempSync--本进程创建的临时目录全部进注册表，afterAll 统一 rmSync。
+ *    jest worker 被 kill 时 process 'exit' 不触发，必须用 afterAll（setupFilesAfterEnv
+ *    里注册 = 文件级钩子）。
+ * 2) import 时清扫 tmpdir 里 >24h 且符合 mkdtemp 签名的目录，兜底 worker 被 kill 的场景。
+ *
+ * 签名正则只匹配「小写字母数字连字符前缀 + 恰好 6 位大小写字母数字后缀」：
+ * chrome crashpad（org.chromium.Chromium.XXXX，含点）、tsx-0 / jest_0 等不匹配。
+ */
+import fs from 'fs';
+import path from 'path';
+import { afterAll } from '@jest/globals';
+
+const MKDTEMP_SUFFIX_RE = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*-[A-Za-z0-9]{6}$/;
+
+let patched = false;
+const registeredDirs = new Set<string>();
+
+/** 幂等。setup 与测试文件重复调用安全。 */
+export function patchMktempCleanup(): void {
+  if (patched) return;
+  patched = true;
+  const orig = fs.mkdtempSync as (prefix: string) => string;
+  fs.mkdtempSync = ((prefix: string) => {
+    const dir = orig(prefix);
+    registeredDirs.add(dir);
+    return dir;
+  }) as typeof fs.mkdtempSync;
+
+  afterAll(() => {
+    for (const dir of registeredDirs) {
+      try {
+        fs.rmSync(dir, { recursive: true, force: true });
+      } catch {
+        // 清理失败不阻断测试
+      }
+    }
+    registeredDirs.clear();
+  });
+}
+
+export function isRegisteredTmpDir(dir: string): boolean {
+  return registeredDirs.has(dir);
+}
+
+/**
+ * 清扫 tmpDir 中超龄且符合 mkdtemp 签名的目录。返回删除数。
+ * 单条失败（竞态被别进程先删等）不阻断。
+ */
+export function sweepStaleMkdtempDirs(tmpDir: string, ageMs: number): number {
+  let entries: string[];
+  try {
+    entries = fs.readdirSync(tmpDir);
+  } catch {
+    return 0;
+  }
+  const now = Date.now();
+  let removed = 0;
+  for (const name of entries) {
+    if (!MKDTEMP_SUFFIX_RE.test(name)) continue;
+    try {
+      const p = path.join(tmpDir, name);
+      const st = fs.statSync(p);
+      if (st.isDirectory() && now - st.mtimeMs > ageMs) {
+        fs.rmSync(p, { recursive: true, force: true });
+        removed++;
+      }
+    } catch {
+      // 单条竞态不阻断
+    }
+  }
+  return removed;
+}
+
+// setupFilesAfterEnv 顶层执行：打补丁 + 清扫历史残留
+patchMktempCleanup();
+sweepStaleMkdtempDirs(process.env.TMPDIR || '/tmp', 24 * 60 * 60 * 1000);