@hublo/sentinel 1.4.0-alpha.1 → 1.4.0-alpha.3

package/dist/{chunk-O3XCQGTJ.js → chunk-MUQWAZQN.js}

@@ -5394,6 +5394,9 @@ function registerLint() {
 
 // src/roles/test/adapters/vitest/vitest.adapter.ts
 import { spawnSync as spawnSync5 } from "child_process";
+import { mkdtempSync as mkdtempSync2, readFileSync as readFileSync30 } from "fs";
+import { tmpdir as tmpdir2 } from "os";
+import { join as join37 } from "path";
 
 // src/roles/test/presets/toolchain.json
 var toolchain_default2 = {
@@ -5456,12 +5459,12 @@ function rewriteVitestScript(command) {
   });
 }
 function testTarget(options) {
-  const { configFiles, outputs, dependsOn, configurations } = options;
+  const { name, configFiles, outputs, dependsOn, configurations } = options;
   const cached = outputs !== void 0 && outputs.length > 0;
   return {
-    [TEST_SCRIPT_NAME]: {
+    [name ?? TEST_SCRIPT_NAME]: {
       cache: cached,
-      inputs: ["default", "^default", ...configFiles.map((name) => `{projectRoot}/${name}`)],
+      inputs: ["default", "^default", ...configFiles.map((name2) => `{projectRoot}/${name2}`)],
       ...cached ? { outputs: [...outputs] } : {},
       ...dependsOn !== void 0 && dependsOn.length > 0 ? { dependsOn: [...dependsOn] } : {},
       ...configurations !== void 0 && Object.keys(configurations).length > 0 ? { configurations: { ...configurations } } : {}
@@ -5470,12 +5473,12 @@ function testTarget(options) {
 }
 
 // src/roles/test/jest-migration.ts
-import { existsSync as existsSync26, readFileSync as readFileSync26 } from "fs";
-import { join as join32 } from "path";
+import { existsSync as existsSync29, readFileSync as readFileSync28 } from "fs";
+import { join as join35 } from "path";
 
 // src/roles/test/codemod/migrate-module.ts
-import { readdirSync as readdirSync5, readFileSync as readFileSync23, statSync as statSync5 } from "fs";
-import { join as join29 } from "path";
+import { readdirSync as readdirSync6, readFileSync as readFileSync25, statSync as statSync6 } from "fs";
+import { join as join31 } from "path";
 import { parseSync as parseSync8 } from "oxc-parser";
 
 // src/roles/test/read-adoption.ts
@@ -5933,6 +5936,104 @@ function rewriteEmptyMockImplementation(source, program) {
   return { source: result, rewritten: insertAt.length };
 }
 
+// src/roles/test/codemod/fake-timer-options.ts
+var MEMBER_TYPES6 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
+var TIMER_CALLS = /* @__PURE__ */ new Set(["useFakeTimers"]);
+function timerOptions(node) {
+  if (node.type !== "CallExpression") return void 0;
+  const callee = node.callee;
+  if (callee === void 0 || !MEMBER_TYPES6.has(callee.type)) return void 0;
+  const object = callee.object;
+  const property = callee.property;
+  if (object?.type !== "Identifier") return void 0;
+  if (object.name !== "jest" && object.name !== "vi") return void 0;
+  if (property?.type !== "Identifier" || !TIMER_CALLS.has(property.name)) return void 0;
+  const [options] = node.arguments ?? [];
+  return options?.type === "ObjectExpression" ? options : void 0;
+}
+var FAKEABLE = [
+  "setTimeout",
+  "clearTimeout",
+  "setImmediate",
+  "clearImmediate",
+  "setInterval",
+  "clearInterval",
+  "Date",
+  "hrtime",
+  "requestAnimationFrame",
+  "cancelAnimationFrame",
+  "requestIdleCallback",
+  "cancelIdleCallback",
+  "performance"
+];
+function stringLiterals2(node) {
+  if (node.type !== "ArrayExpression") return void 0;
+  const values = [];
+  for (const element of node.elements ?? []) {
+    if (element?.type !== "Literal" || typeof element.value !== "string") return void 0;
+    values.push(element.value);
+  }
+  return values;
+}
+function rewriteFakeTimerOptions(source, program) {
+  const edits = [];
+  const translated = [];
+  const refusals = [];
+  walk(program, (node) => {
+    const options = timerOptions(node);
+    if (options === void 0) return;
+    for (const property of options.properties ?? []) {
+      const key = property.key;
+      if (key?.type !== "Identifier") continue;
+      const value = property.value;
+      if (value === void 0) continue;
+      const span = { start: property.start, end: property.end };
+      if (key.name === "advanceTimers") {
+        if (value.type === "Literal" && value.value === true) {
+          edits.push({ ...span, text: "shouldAdvanceTime: true" });
+          translated.push("advanceTimers -> shouldAdvanceTime");
+          continue;
+        }
+        if (value.type === "Literal" && typeof value.value === "number") {
+          edits.push({
+            ...span,
+            text: `shouldAdvanceTime: true, advanceTimeDelta: ${value.value}`
+          });
+          translated.push("advanceTimers -> shouldAdvanceTime + advanceTimeDelta");
+          continue;
+        }
+        refusals.push({
+          binding: "advanceTimers",
+          reason: "`useFakeTimers({ advanceTimers })` translates to sinon's `shouldAdvanceTime`, but only when the value can be read here: this one is neither `true` nor a number, and inventing a delta would be inventing behaviour."
+        });
+        continue;
+      }
+      if (key.name === "doNotFake") {
+        const excluded = stringLiterals2(value);
+        if (excluded === void 0) {
+          refusals.push({
+            binding: "doNotFake",
+            reason: "`useFakeTimers({ doNotFake })` becomes sinon's `toFake`, which is its COMPLEMENT, so the list has to be readable here. This one is not a list of string literals."
+          });
+          continue;
+        }
+        const kept = FAKEABLE.filter((name) => !excluded.includes(name));
+        edits.push({
+          ...span,
+          text: `toFake: [${kept.map((name) => `'${name}'`).join(", ")}]`
+        });
+        translated.push("doNotFake -> toFake");
+      }
+    }
+  });
+  if (edits.length === 0) return { source, translated, refusals };
+  let result = source;
+  for (const edit of [...edits].sort((left, right) => right.start - left.start)) {
+    result = result.slice(0, edit.start) + edit.text + result.slice(edit.end);
+  }
+  return { source: result, translated, refusals };
+}
+
 // src/roles/test/codemod/scope.ts
 function readIdentifiers(node, runsLater) {
   const names = [];
@@ -6098,7 +6199,7 @@ function hoistCapturedBindings(source, program, factories, bindings, imported) {
     if (hoistable(name, bindings, imported)) continue;
     refusals.push({
       binding: name,
-      reason: bindings.get(name) === void 0 ? `it is declared without an initializer, so there is nothing for vi.hoisted to carry` : `its initializer reads something imported, so it cannot live above the import graph`
+      reason: bindings.get(name) === void 0 ? `\`${name}\` cannot move into vi.hoisted: it is declared without an initializer, so there is nothing for vi.hoisted to carry` : `\`${name}\` cannot move into vi.hoisted: its initializer reads something imported, so it cannot live above the import graph`
     });
   }
   const declarations = simpleDeclarations(program);
@@ -6156,7 +6257,7 @@ function hoistCapturedBindings(source, program, factories, bindings, imported) {
 
 // src/roles/test/codemod/hook-return-value.ts
 var HOOKS = /* @__PURE__ */ new Set(["beforeEach", "afterEach", "beforeAll", "afterAll"]);
-var MEMBER_TYPES6 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
+var MEMBER_TYPES7 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
 function hookCallback(node) {
   if (node.type !== "CallExpression") return void 0;
   const callee = node.callee;
@@ -6167,7 +6268,7 @@ function hookCallback(node) {
 function configuresAMock(body) {
   if (body.type !== "CallExpression") return false;
   const callee = body.callee;
-  if (callee === void 0 || !MEMBER_TYPES6.has(callee.type)) return false;
+  if (callee === void 0 || !MEMBER_TYPES7.has(callee.type)) return false;
   const property = callee.property;
   return property?.type === "Identifier" && /^mock[A-Z]/.test(property.name);
 }
@@ -6352,7 +6453,37 @@ ${source}`;
 }
 
 // src/roles/test/codemod/named-rules.ts
-var MEMBER_TYPES7 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
+import { existsSync as existsSync24, readFileSync as readFileSync22 } from "fs";
+import { createRequire as createRequire4 } from "module";
+import { dirname as dirname4, join as join28 } from "path";
+function isCommonJsPackage(fromFile, specifier) {
+  if (specifier.startsWith(".") || specifier.startsWith("/")) return false;
+  let resolved;
+  try {
+    resolved = createRequire4(fromFile).resolve(specifier);
+  } catch {
+    return false;
+  }
+  if (!resolved.includes(`${"/"}node_modules${"/"}`)) return false;
+  if (resolved.endsWith(".mjs")) return false;
+  if (resolved.endsWith(".cjs")) return true;
+  let dir = dirname4(resolved);
+  for (let depth = 0; depth < 12; depth += 1) {
+    const manifest = join28(dir, "package.json");
+    if (existsSync24(manifest)) {
+      try {
+        return JSON.parse(readFileSync22(manifest, "utf8")).type !== "module";
+      } catch {
+        return false;
+      }
+    }
+    const parent = dirname4(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return false;
+}
+var MEMBER_TYPES8 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
 var ASYNC_REPLACEMENTS = {
   requireActual: "importActual",
   requireMock: "importMock"
@@ -6362,7 +6493,7 @@ function mockedSpecifiers(program) {
   walk(program, (node) => {
     if (node.type !== "CallExpression") return;
     const callee = node.callee;
-    if (callee === void 0 || !MEMBER_TYPES7.has(callee.type)) return;
+    if (callee === void 0 || !MEMBER_TYPES8.has(callee.type)) return;
     const object = callee.object;
     const property = callee.property;
     if (object?.type !== "Identifier") return;
@@ -6396,6 +6527,33 @@ function bareRequire(node) {
   const args = node.arguments ?? [];
   return args.length === 1 && args[0] !== void 0;
 }
+function mockFactoryReturn(node) {
+  if (node.type !== "CallExpression") return void 0;
+  const callee = node.callee;
+  if (callee === void 0 || !MEMBER_TYPES8.has(callee.type)) return void 0;
+  const object = callee.object;
+  const property = callee.property;
+  if (object?.type !== "Identifier") return void 0;
+  if (!["jest", "vi", "vitest"].includes(object.name)) return void 0;
+  if (property?.name !== "mock") return void 0;
+  const factory = (node.arguments ?? [])[1];
+  if (factory?.type !== "ArrowFunctionExpression" && factory?.type !== "FunctionExpression") {
+    return void 0;
+  }
+  let body = factory.body;
+  while (body?.type === "ParenthesizedExpression") body = body.expression;
+  if (body === void 0) return void 0;
+  if (body.type !== "BlockStatement") return body;
+  const statements = body.body ?? [];
+  if (statements.length !== 1) return void 0;
+  const only = statements[0];
+  if (only?.type !== "ReturnStatement") return void 0;
+  let argument = only.argument;
+  while (argument?.type === "ParenthesizedExpression") {
+    argument = argument.expression;
+  }
+  return argument;
+}
 function ownedCall(node) {
   if (node.type !== "CallExpression") return void 0;
   const callee = node.callee;
@@ -6421,11 +6579,36 @@ function applyEdits(source, edits) {
   }
   return result;
 }
-function applyNamedRules(source, program) {
+function applyNamedRules(source, program, fileName = "") {
   const edits = [];
   const applied = /* @__PURE__ */ new Set();
   const asyncify = /* @__PURE__ */ new Set();
   const mocked = mockedSpecifiers(program);
+  const wholeStatement = /* @__PURE__ */ new Set();
+  walk(program, (node) => {
+    if (node.type !== "ExpressionStatement") return;
+    const expression = node.expression;
+    if (expression !== void 0) wholeStatement.add(expression);
+  });
+  const handedToTheRunnerAsAModule = /* @__PURE__ */ new Set();
+  walk(program, (node) => {
+    const returned = mockFactoryReturn(node);
+    if (returned !== void 0) handedToTheRunnerAsAModule.add(returned);
+  });
+  const readsANameOffIt = /* @__PURE__ */ new Set();
+  walk(program, (node) => {
+    if (node.type === "VariableDeclarator") {
+      const id = node.id;
+      const init = node.init ?? void 0;
+      if (id !== void 0 && id.type !== "Identifier" && init !== void 0) {
+        readsANameOffIt.add(init);
+      }
+      return;
+    }
+    if (!MEMBER_TYPES8.has(node.type)) return;
+    const object = node.object;
+    if (object !== void 0) readsANameOffIt.add(object);
+  });
   walkWithEnclosingFunction(program, void 0, (node, enclosing) => {
     const member = ownedCall(node);
     if (member === void 0 && !bareRequire(node)) return;
@@ -6455,10 +6638,13 @@ function applyNamedRules(source, program) {
       return;
     }
     if (bareRequire(node)) {
+      const [specifier] = node.arguments ?? [];
+      const literal = specifier?.type === "StringLiteral" || specifier?.type === "Literal" ? String(specifier.value) : void 0;
+      const interop = literal !== void 0 && !readsANameOffIt.has(node) && !handedToTheRunnerAsAModule.has(node) && !wholeStatement.has(node) && isCommonJsPackage(fileName, literal) ? ".default" : "";
       edits.push({
         start: node.start,
         end: node.end,
-        text: `(await import(${argumentText(source, node)}))`
+        text: wholeStatement.has(node) ? `await import(${argumentText(source, node)});` : `(await import(${argumentText(source, node)}))${interop}`
       });
       applied.add("require");
       if (enclosing !== void 0 && enclosing.async !== true) asyncify.add(enclosing);
@@ -6490,13 +6676,13 @@ function applyNamedRules(source, program) {
 }
 
 // src/roles/test/codemod/isolate-modules.ts
-var MEMBER_TYPES8 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
+var MEMBER_TYPES9 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
 var ISOLATORS = /* @__PURE__ */ new Set(["isolateModules", "isolateModulesAsync"]);
 var FUNCTIONS2 = /* @__PURE__ */ new Set(["ArrowFunctionExpression", "FunctionExpression"]);
 function isolatingCall(node) {
   if (node.type !== "CallExpression") return void 0;
   const callee = node.callee;
-  if (callee === void 0 || !MEMBER_TYPES8.has(callee.type)) return void 0;
+  if (callee === void 0 || !MEMBER_TYPES9.has(callee.type)) return void 0;
   const object = callee.object;
   const property = callee.property;
   if (object?.type !== "Identifier" || object.name !== "jest") return void 0;
@@ -6507,7 +6693,7 @@ function isolatingCall(node) {
 function unusableIsolatingCall(node) {
   if (node.type !== "CallExpression") return void 0;
   const callee = node.callee;
-  if (callee === void 0 || !MEMBER_TYPES8.has(callee.type)) return void 0;
+  if (callee === void 0 || !MEMBER_TYPES9.has(callee.type)) return void 0;
   const object = callee.object;
   const property = callee.property;
   if (object?.type !== "Identifier" || object.name !== "jest") return void 0;
@@ -6558,11 +6744,11 @@ ${indent}await (${callback})()`
 }
 
 // src/roles/test/codemod/mock-as-value.ts
-var MEMBER_TYPES9 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
+var MEMBER_TYPES10 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
 function isViMockCall(node) {
   if (node?.type !== "CallExpression") return false;
   const callee = node.callee;
-  if (callee === void 0 || !MEMBER_TYPES9.has(callee.type)) return false;
+  if (callee === void 0 || !MEMBER_TYPES10.has(callee.type)) return false;
   const object = callee.object;
   const property = callee.property;
   return object?.type === "Identifier" && object.name === "vi" && property?.type === "Identifier" && (property.name === "mock" || property.name === "doMock");
@@ -6587,7 +6773,7 @@ function rewriteMockAsValue(source, program) {
   const memberUses = /* @__PURE__ */ new Map();
   const otherUses = /* @__PURE__ */ new Map();
   walk(program, (node) => {
-    if (MEMBER_TYPES9.has(node.type)) {
+    if (MEMBER_TYPES10.has(node.type)) {
       const object = node.object;
       if (object?.type === "Identifier" && bindings.has(object.name)) {
         const list = memberUses.get(object.name) ?? [];
@@ -6633,12 +6819,12 @@ function rewriteMockAsValue(source, program) {
 }
 
 // src/roles/test/codemod/mock-factory-default.ts
-var MEMBER_TYPES10 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
+var MEMBER_TYPES11 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
 var BINDING = "sentinelMockedModule";
 function mockCall(node) {
   if (node.type !== "CallExpression") return void 0;
   const callee = node.callee;
-  if (callee === void 0 || !MEMBER_TYPES10.has(callee.type)) return void 0;
+  if (callee === void 0 || !MEMBER_TYPES11.has(callee.type)) return void 0;
   const property = callee.property;
   if (property?.type !== "Identifier" || property.name !== "mock") return void 0;
   const object = callee.object;
@@ -6657,7 +6843,7 @@ function returnedExpression(factory) {
   let body = factory.body;
   while (body?.type === "ParenthesizedExpression") body = body.expression;
   if (body === void 0) return void 0;
-  if (body.type !== "BlockStatement") return { node: body, isObject: false };
+  if (body.type !== "BlockStatement") return { node: body, isObject: false, concise: true };
   const statements = body.body ?? [];
   if (statements.length !== 1) return void 0;
   const only = statements[0];
@@ -6681,6 +6867,20 @@ function returnedObject(factory) {
   }
   return void 0;
 }
+function isModuleNamespace(node) {
+  let current = node;
+  while (current?.type === "ParenthesizedExpression") {
+    current = current.expression;
+  }
+  if (current?.type === "AwaitExpression") {
+    let argument = current.argument;
+    while (argument?.type === "ParenthesizedExpression") {
+      argument = argument.expression;
+    }
+    current = argument;
+  }
+  return current?.type === "ImportExpression";
+}
 function namesDefault(object) {
   return (object.properties ?? []).some((property) => {
     const key = property.key;
@@ -6698,12 +6898,14 @@ function rewriteMockFactoryDefault(source, program, defaultImported) {
     if (returned === void 0) return;
     if (returned.isObject && namesDefault(returned.node)) return;
     if (returned.isObject && !defaultImported.has(call.specifier)) return;
+    if (!returned.isObject && isModuleNamespace(returned.node)) return;
     if (!returned.isObject) {
       const expression = source.slice(returned.node.start, returned.node.end);
       edits.push({
         start: returned.node.start,
         end: returned.node.end,
-        literal: `{ default: ${expression} }`,
+        // Parenthesised when it is the arrow's own body, or it is read as a block, not an object.
+        literal: returned.concise === true ? `({ default: ${expression} })` : `{ default: ${expression} }`,
         specifier: call.specifier,
         wrap: false
       });
@@ -6736,7 +6938,7 @@ function rewriteMockFactoryDefault(source, program, defaultImported) {
 // src/roles/test/codemod/propagate-await.ts
 import { parseSync as parseSync5 } from "oxc-parser";
 var FUNCTIONS3 = /* @__PURE__ */ new Set(["ArrowFunctionExpression", "FunctionExpression", "FunctionDeclaration"]);
-var MEMBER_TYPES11 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
+var MEMBER_TYPES12 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
 var ALREADY_A_PROMISE = /* @__PURE__ */ new Set(["then", "catch", "finally"]);
 function asyncFunctionNames(program) {
   const names = /* @__PURE__ */ new Set();
@@ -6810,7 +7012,7 @@ function alreadyHandled(call, parent) {
   if (parent === void 0) return false;
   if (parent.type === "AwaitExpression") return true;
   if (parent.type === "ReturnStatement" || parent.type === "ArrowFunctionExpression") return true;
-  if (MEMBER_TYPES11.has(parent.type) && parent.object === call) {
+  if (MEMBER_TYPES12.has(parent.type) && parent.object === call) {
     const property = parent.property;
     return property?.type === "Identifier" && ALREADY_A_PROMISE.has(property.name);
   }
@@ -6859,6 +7061,105 @@ function propagateAwait(fileName, source, original, elsewhere = /* @__PURE__ */
   return { source: current, rewritten };
 }
 
+// src/roles/test/codemod/reexport-barrel-mock.ts
+import { readFileSync as readFileSync23, readdirSync as readdirSync4, statSync as statSync4 } from "fs";
+import { createRequire as createRequire5 } from "module";
+import { dirname as dirname5, join as join29 } from "path";
+var MEMBER_TYPES13 = /* @__PURE__ */ new Set(["MemberExpression", "StaticMemberExpression"]);
+var PACKAGE_SUBPATH = /^(@[^/]+\/[^/]+|[^@.][^/]*)\/(.+)$/;
+var PURE_REEXPORT = /^module\.exports\s*=\s*require\(\s*(['"])([^'"]+)\1\s*\)\s*;?$/;
+function mockCalls(program) {
+  const found = [];
+  walk(program, (node) => {
+    if (node.type !== "CallExpression") return;
+    const callee = node.callee;
+    if (callee === void 0 || !MEMBER_TYPES13.has(callee.type)) return;
+    const object = callee.object;
+    const property = callee.property;
+    if (object?.type !== "Identifier") return;
+    if (object.name !== "vi" && object.name !== "jest") return;
+    if (property?.name !== "mock") return;
+    const first = (node.arguments ?? [])[0];
+    if (first?.type !== "Literal" || typeof first.value !== "string") return;
+    found.push({
+      specifier: first.value,
+      start: node.start,
+      end: node.end,
+      literalStart: first.start,
+      literalEnd: first.end
+    });
+  });
+  return found;
+}
+function packageRoot(fromFile, name) {
+  try {
+    return dirname5(createRequire5(fromFile).resolve(`${name}/package.json`));
+  } catch {
+    return void 0;
+  }
+}
+function resolveFrom(fromFile, specifier) {
+  try {
+    return createRequire5(fromFile).resolve(specifier);
+  } catch {
+    return void 0;
+  }
+}
+function barrelsFor(fromFile, name, target) {
+  const root = packageRoot(fromFile, name);
+  if (root === void 0) return [];
+  let entries;
+  try {
+    entries = readdirSync4(root);
+  } catch {
+    return [];
+  }
+  const aliases = [];
+  for (const entry of entries) {
+    if (!entry.endsWith(".js")) continue;
+    const path = join29(root, entry);
+    let body;
+    try {
+      if (!statSync4(path).isFile()) continue;
+      body = readFileSync23(path, "utf8");
+    } catch {
+      continue;
+    }
+    const match = PURE_REEXPORT.exec(body.trim());
+    if (match === null) continue;
+    if (resolveFrom(path, match[2]) !== target) continue;
+    aliases.push(`${name}/${entry.slice(0, -".js".length)}`);
+  }
+  return aliases.sort();
+}
+function rewriteReexportBarrelMocks(fromFile, source, program) {
+  const calls = mockCalls(program);
+  if (calls.length === 0) return { source, added: [] };
+  const alreadyMocked = new Set(calls.map((call) => call.specifier));
+  const added = [];
+  const insertions = [];
+  for (const call of calls) {
+    const parts = PACKAGE_SUBPATH.exec(call.specifier);
+    if (parts === null) continue;
+    const target = resolveFrom(fromFile, call.specifier);
+    if (target === void 0) continue;
+    for (const alias of barrelsFor(fromFile, parts[1], target)) {
+      if (alreadyMocked.has(alias)) continue;
+      alreadyMocked.add(alias);
+      added.push(alias);
+      const text = source.slice(call.start, call.literalStart) + `'${alias}'` + source.slice(call.literalEnd, call.end);
+      insertions.push({ at: call.end, text: `
+${text}` });
+    }
+  }
+  if (insertions.length === 0) return { source, added: [] };
+  let rewritten = source;
+  for (const insertion of insertions.sort((a, b) => b.at - a.at)) {
+    rewritten = rewritten.slice(0, insertion.at) + insertion.text + rewritten.slice(insertion.at);
+  }
+  return { source: rewritten, added };
+}
+
 // src/roles/test/codemod/repoint-msw.ts
 import { parseSync as parseSync6 } from "oxc-parser";
 var SENTINEL_MSW_SERVER = "@hublo/sentinel/test/msw";
@@ -6896,6 +7197,43 @@ function repointMswServer(fileName, source) {
   return { source: rewritten, repointed: true };
 }
 
+// src/roles/test/codemod/spy-instance-type.ts
+var SPY_TYPES = /* @__PURE__ */ new Set(["SpyInstance"]);
+function typeNameOf(source, node) {
+  const name = node.typeName;
+  if (name === void 0) return void 0;
+  return source.slice(name.start, name.end);
+}
+function rewriteSpyInstanceType(source, program) {
+  const edits = [];
+  walk(program, (node) => {
+    if (node.type !== "TSTypeReference") return;
+    const written = typeNameOf(source, node);
+    if (written === void 0) return;
+    const bare = written.startsWith("jest.") ? written.slice("jest.".length) : written;
+    if (!SPY_TYPES.has(bare)) return;
+    const args = (node.typeArguments ?? node.typeParameters)?.params;
+    if (args === void 0 || args.length === 0) return;
+    const text = (argument) => source.slice(argument.start, argument.end);
+    const returns = text(args[0]);
+    const parameters = args.length > 1 ? `...args: ${text(args[1])}` : "...args: any[]";
+    edits.push({
+      start: node.start,
+      end: node.end,
+      text: `MockInstance<(${parameters}) => ${returns}>`
+    });
+  });
+  let result = source;
+  for (const edit of [...edits].sort((left, right) => right.start - left.start)) {
+    result = `${result.slice(0, edit.start)}${edit.text}${result.slice(edit.end)}`;
+  }
+  return {
+    source: result,
+    rewritten: edits.length,
+    typeImports: edits.length > 0 ? ["MockInstance"] : []
+  };
+}
+
 // src/roles/test/codemod/migrate-file.ts
 function mockFactories(program) {
   const factories = [];
@@ -6928,46 +7266,61 @@ function migrateTestFile(fileName, source, defaultImported = /* @__PURE__ */ new
     rulesApplied: [],
     mswRepointed: false
   };
+  const unparsable = (step) => ({
+    ...untouched,
+    refusals: [
+      {
+        binding: step,
+        reason: `this file no longer parses after the \`${step}\` step, so nothing was written for it. That is a defect in sentinel, not in the file: please report it with the file name.`
+      }
+    ]
+  });
   const original = parse2(fileName, source);
-  if (original === void 0) return untouched;
+  if (original === void 0) return unparsable("reading the file");
   const titles = rewriteEachTitles(source, original);
   const tables = rewriteEachTableRows(titles.source, original);
   const afterTables = parse2(fileName, tables.source);
-  if (afterTables === void 0) return untouched;
-  const ruled = applyNamedRules(tables.source, afterTables);
+  if (afterTables === void 0) return unparsable("each table rows");
+  const spyTypes = rewriteSpyInstanceType(tables.source, afterTables);
+  const afterSpyTypes = parse2(fileName, spyTypes.source);
+  if (afterSpyTypes === void 0) return unparsable("SpyInstance types");
+  const ruled = applyNamedRules(spyTypes.source, afterSpyTypes, fileName);
   const renamed = renameJestToVitest(fileName, ruled.source);
   const afterRename = parse2(fileName, renamed.source);
-  if (afterRename === void 0) return untouched;
-  const mocks = rewriteMockAsValue(renamed.source, afterRename);
+  if (afterRename === void 0) return unparsable("jest to vi rename");
+  const fakeTimers = rewriteFakeTimerOptions(renamed.source, afterRename);
+  const afterFakeTimers = parse2(fileName, fakeTimers.source);
+  if (afterFakeTimers === void 0) return unparsable("fake timer options");
+  const mocks = rewriteMockAsValue(fakeTimers.source, afterFakeTimers);
   const afterMocks = parse2(fileName, mocks.source);
-  if (afterMocks === void 0) return untouched;
+  if (afterMocks === void 0) return unparsable("mock as a value");
   const constructible = rewriteConstructibleMocks(
     mocks.source,
     afterMocks,
     mockFactories(afterMocks)
   );
   const afterConstructible = parse2(fileName, constructible.source);
-  if (afterConstructible === void 0) return untouched;
+  if (afterConstructible === void 0) return unparsable("constructible mocks");
   const factoryDefault = rewriteMockFactoryDefault(
     constructible.source,
     afterConstructible,
     defaultImported
   );
   const beforeReturnValue = parse2(fileName, factoryDefault.source);
-  if (beforeReturnValue === void 0) return untouched;
+  if (beforeReturnValue === void 0) return unparsable("mock factory default");
   const returnValue = rewriteAssertionReturnValue(factoryDefault.source, beforeReturnValue);
   const afterReturnValue = parse2(fileName, returnValue.source);
-  if (afterReturnValue === void 0) return untouched;
+  if (afterReturnValue === void 0) return unparsable("assertion return value");
   const isolated = rewriteIsolateModules(returnValue.source, afterReturnValue);
   const afterIsolate = parse2(fileName, isolated.source);
-  if (afterIsolate === void 0) return untouched;
+  if (afterIsolate === void 0) return unparsable("isolate modules");
   const emptyImplementations = rewriteEmptyMockImplementation(isolated.source, afterIsolate);
   const afterEmpty = parse2(fileName, emptyImplementations.source);
-  if (afterEmpty === void 0) return untouched;
+  if (afterEmpty === void 0) return unparsable("empty mock implementation");
   const hooks = rewriteHookReturnValue(emptyImplementations.source, afterEmpty);
   const awaited = propagateAwait(fileName, hooks.source, original, asyncHelpers);
   const program = parse2(fileName, awaited.source);
-  if (program === void 0) return untouched;
+  if (program === void 0) return unparsable("hook body");
   const hoist = hoistCapturedBindings(
     awaited.source,
     program,
@@ -6975,12 +7328,18 @@ function migrateTestFile(fileName, source, defaultImported = /* @__PURE__ */ new
     moduleBindings(program),
     importedNames(program)
   );
-  const withImport = injectTypeImport(fileName, hoist.source, renamed.typeImports);
+  const withImport = injectTypeImport(fileName, hoist.source, [
+    ...renamed.typeImports,
+    ...spyTypes.typeImports
+  ]);
   const deep = normaliseDeepImports(withImport);
   const repointed = repointMswServer(fileName, deep.source);
+  const finalProgram = parse2(fileName, repointed.source);
+  if (finalProgram === void 0) return unparsable("msw server import");
+  const barrels = rewriteReexportBarrelMocks(fileName, repointed.source, finalProgram);
   return {
-    source: repointed.source,
-    changed: repointed.source !== source,
+    source: barrels.source,
+    changed: barrels.source !== source,
     renamed: renamed.rewritten,
     hoisted: hoist.hoisted,
     unhandled: renamed.unhandled,
@@ -6993,9 +7352,13 @@ function migrateTestFile(fileName, source, defaultImported = /* @__PURE__ */ new
       ...isolated.rewritten > 0 ? ["jest.isolateModules"] : [],
       ...emptyImplementations.rewritten > 0 ? ["empty mockImplementation"] : [],
       ...hooks.rewritten > 0 ? ["hook body, so it does not return its mock"] : [],
-      ...awaited.rewritten > 0 ? ["await propagated to a helper that became async"] : []
+      ...spyTypes.rewritten > 0 ? ["SpyInstance<T> as a signature, not a return type"] : [],
+      ...awaited.rewritten > 0 ? ["await propagated to a helper that became async"] : [],
+      ...barrels.added.map((alias) => `mock carried to ${alias}, which re-exports the mocked file`),
+      ...fakeTimers.translated
     ].sort(),
     refusals: [
+      ...fakeTimers.refusals,
       ...hoist.refusals,
       ...mocks.refusals.map((refusal) => ({ binding: refusal.binding, reason: refusal.reason })),
       ...constructible.refusals,
@@ -7006,8 +7369,8 @@ function migrateTestFile(fileName, source, defaultImported = /* @__PURE__ */ new
 }
 
 // src/roles/test/codemod/test-support-files.ts
-import { existsSync as existsSync24, readFileSync as readFileSync22, readdirSync as readdirSync4, statSync as statSync4 } from "fs";
-import { dirname as dirname4, join as join28, relative as relative5, resolve as resolve4 } from "path";
+import { existsSync as existsSync25, readFileSync as readFileSync24, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
+import { dirname as dirname6, join as join30, relative as relative5, resolve as resolve4 } from "path";
 var SKIPPED = /* @__PURE__ */ new Set(["node_modules", "dist", "coverage", ".git", ".vite"]);
 var TEST_FILE2 = /\.(spec|test)\.[cm]?[jt]sx?$/;
 var SOURCE_FILE = /\.[cm]?[jt]sx?$/;
@@ -7026,14 +7389,14 @@ function relativeSpecifiers(source) {
   return found;
 }
 function resolveSpecifier(fromFile, specifier) {
-  const base = resolve4(dirname4(fromFile), specifier);
-  if (existsSync24(base) && statSync4(base).isFile()) return base;
+  const base = resolve4(dirname6(fromFile), specifier);
+  if (existsSync25(base) && statSync5(base).isFile()) return base;
   for (const extension of EXTENSIONS) {
-    if (existsSync24(`${base}${extension}`)) return `${base}${extension}`;
+    if (existsSync25(`${base}${extension}`)) return `${base}${extension}`;
   }
   for (const extension of EXTENSIONS) {
-    const index = join28(base, `index${extension}`);
-    if (existsSync24(index)) return index;
+    const index = join30(base, `index${extension}`);
+    if (existsSync25(index)) return index;
   }
   return void 0;
 }
@@ -7044,15 +7407,15 @@ function moduleSources(cwd) {
     const dir = stack.pop();
     let entries;
     try {
-      entries = readdirSync4(dir, { withFileTypes: true });
+      entries = readdirSync5(dir, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (entry.isDirectory()) {
-        if (!SKIPPED.has(entry.name)) stack.push(join28(dir, entry.name));
+        if (!SKIPPED.has(entry.name)) stack.push(join30(dir, entry.name));
       } else if (SOURCE_FILE.test(entry.name)) {
-        found.push(join28(dir, entry.name));
+        found.push(join30(dir, entry.name));
       }
     }
   }
@@ -7060,12 +7423,24 @@ function moduleSources(cwd) {
 }
 function read(path) {
   try {
-    return readFileSync22(path, "utf8");
+    return readFileSync24(path, "utf8");
   } catch {
     return void 0;
   }
 }
-function listTestSupportFiles(cwd) {
+function setupFilesInside(cwd, named) {
+  const kept = [];
+  for (const raw of named) {
+    const withoutToken = raw.replaceAll("<rootDir>/", "").replaceAll("<rootDir>", ".");
+    const full = resolve4(cwd, withoutToken);
+    const inside = relative5(cwd, full);
+    if (inside.startsWith("..") || inside === "") continue;
+    if (!existsSync25(full)) continue;
+    kept.push(inside.replaceAll("\\", "/"));
+  }
+  return kept;
+}
+function listTestSupportFiles(cwd, setupFiles = []) {
   const sources = moduleSources(cwd);
   const contents = /* @__PURE__ */ new Map();
   for (const file of sources) {
@@ -7095,7 +7470,8 @@ function listTestSupportFiles(cwd) {
       queue.push(target);
     }
   }
-  return [...testOnly].filter((file) => /\brequire\s*\(/.test(contents.get(file) ?? "")).map((file) => relative5(cwd, file).replaceAll("\\", "/")).sort();
+  const reachable = [...testOnly].filter((file) => /\brequire\s*\(/.test(contents.get(file) ?? "")).map((file) => relative5(cwd, file).replaceAll("\\", "/"));
+  return [.../* @__PURE__ */ new Set([...reachable, ...setupFilesInside(cwd, setupFiles)])].sort();
 }
 
 // src/roles/test/codemod/migrate-module.ts
@@ -7105,7 +7481,7 @@ function parse3(source) {
 }
 function read2(path) {
   try {
-    return readFileSync23(path, "utf8");
+    return readFileSync25(path, "utf8");
   } catch {
     return void 0;
   }
@@ -7117,16 +7493,16 @@ function defaultImportedSpecifiers(cwd) {
   const walk2 = (dir) => {
     let entries;
     try {
-      entries = readdirSync5(dir);
+      entries = readdirSync6(dir);
     } catch {
       return;
     }
     for (const entry of entries) {
       if (SKIPPED2.has(entry)) continue;
-      const path = join29(dir, entry);
+      const path = join31(dir, entry);
       let directory;
       try {
-        directory = statSync5(path).isDirectory();
+        directory = statSync6(path).isDirectory();
       } catch {
         continue;
       }
@@ -7143,7 +7519,7 @@ function defaultImportedSpecifiers(cwd) {
   walk2(cwd);
   return found;
 }
-function migrateModuleTests(cwd) {
+function migrateModuleTests(cwd, setupFiles = []) {
   const operations = [];
   const blockers = [];
   let files = 0;
@@ -7151,13 +7527,13 @@ function migrateModuleTests(cwd) {
   let hoisted = 0;
   const defaultImported = defaultImportedSpecifiers(cwd);
   const asyncHelpers = /* @__PURE__ */ new Set();
-  for (const relative7 of listTestSupportFiles(cwd)) {
-    const source = read2(join29(cwd, relative7));
+  for (const relative7 of listTestSupportFiles(cwd, setupFiles)) {
+    const source = read2(join31(cwd, relative7));
     if (source === void 0) {
       blockers.push({ file: relative7, reason: "this file could not be read" });
       continue;
     }
-    const migrated = migrateTestFile(join29(cwd, relative7), source, defaultImported);
+    const migrated = migrateTestFile(join31(cwd, relative7), source, defaultImported);
     if (!migrated.changed) continue;
     const before = parse3(source);
     const after = parse3(migrated.source);
@@ -7172,12 +7548,12 @@ function migrateModuleTests(cwd) {
     operations.push({ kind: "write", path: relative7, contents: migrated.source });
   }
   for (const relative7 of listTestFiles(cwd)) {
-    const source = read2(join29(cwd, relative7));
+    const source = read2(join31(cwd, relative7));
     if (source === void 0) {
       blockers.push({ file: relative7, reason: "this file could not be read" });
       continue;
     }
-    const migrated = migrateTestFile(join29(cwd, relative7), source, defaultImported, asyncHelpers);
+    const migrated = migrateTestFile(join31(cwd, relative7), source, defaultImported, asyncHelpers);
     for (const member of migrated.unhandled) {
       blockers.push({
         file: `${relative7}:${member.line}`,
@@ -7185,10 +7561,7 @@ function migrateModuleTests(cwd) {
       });
     }
     for (const refusal of migrated.refusals) {
-      blockers.push({
-        file: relative7,
-        reason: `\`${refusal.binding}\` cannot move into vi.hoisted: ${refusal.reason}`
-      });
+      blockers.push({ file: relative7, reason: refusal.reason });
     }
     if (!migrated.changed) continue;
     files++;
@@ -7200,11 +7573,16 @@ function migrateModuleTests(cwd) {
 }
 
 // src/roles/test/nest/generate-config.ts
-import { readdirSync as readdirSync6, readFileSync as readFileSync24, statSync as statSync6 } from "fs";
-import { join as join30, relative as relative6 } from "path";
+import { existsSync as existsSync26, readdirSync as readdirSync7, readFileSync as readFileSync26, statSync as statSync7 } from "fs";
+import { join as join32, relative as relative6 } from "path";
 var NEST_TEST_PRESET_SPECIFIER = "@hublo/sentinel/test/nest";
+var REACT_TEST_PRESET_SPECIFIER = "@hublo/sentinel/test/react";
+function flavourOf(reading) {
+  return reading.testEnvironment === "jsdom" ? "react" : "nest";
+}
 var SENTINEL_TEST_SETUP = "@hublo/sentinel/test/setup/nest";
 var SENTINEL_MSW_SETUP = "@hublo/sentinel/test/setup/msw-lifecycle";
+var SENTINEL_WORKSPACE_SETUP = "@hublo/sentinel/test/setup/workspace";
 var NEST_TEST_CONFIG_FILE = "vitest.config.mts";
 function hopsToRoot(cwd, workspaceRoot) {
   const up = relative6(cwd, workspaceRoot).replaceAll("\\", "/");
@@ -7235,16 +7613,16 @@ function readModuleTraits(cwd) {
   const walk2 = (dir) => {
     let entries;
     try {
-      entries = readdirSync6(dir);
+      entries = readdirSync7(dir);
     } catch {
       return;
     }
     for (const entry of entries) {
       if (SKIPPED3.has(entry)) continue;
-      const path = join30(dir, entry);
+      const path = join32(dir, entry);
       let directory;
       try {
-        directory = statSync6(path).isDirectory();
+        directory = statSync7(path).isDirectory();
       } catch {
         continue;
       }
@@ -7255,7 +7633,7 @@ function readModuleTraits(cwd) {
       if (!/\.tsx?$/.test(entry)) continue;
       let source;
       try {
-        source = readFileSync24(path, "utf8");
+        source = readFileSync26(path, "utf8");
       } catch {
         continue;
       }
@@ -7272,9 +7650,30 @@ function readModuleTraits(cwd) {
   return traits;
 }
 var withoutRootDir = (value) => value.replaceAll("<rootDir>/", "./").replaceAll("<rootDir>", ".");
-function setupBlock(reading, msw) {
-  const own = [...reading.setupFiles ?? [], ...reading.setupFilesAfterEnv ?? []].filter((file) => !file.endsWith("jest.setup.after.env.js")).map((file) => `'${withoutRootDir(file)}'`);
-  const sentinel = [`'${SENTINEL_TEST_SETUP}'`, ...msw ? [`'${SENTINEL_MSW_SETUP}'`] : []];
+function ownsMswLifecycle(cwd, reading) {
+  const declared = [...reading.setupFiles ?? [], ...reading.setupFilesAfterEnv ?? []].filter(
+    (file) => !file.endsWith("jest.setup.after.env.js")
+  );
+  for (const raw of declared) {
+    const file = join32(cwd, raw.replaceAll("<rootDir>/", "").replaceAll("<rootDir>", "."));
+    if (!existsSync26(file)) continue;
+    try {
+      if (/\.listen\s*\(/.test(readFileSync26(file, "utf8"))) return true;
+    } catch {
+      continue;
+    }
+  }
+  return false;
+}
+function setupBlock(cwd, reading, msw) {
+  const declared = [...reading.setupFiles ?? [], ...reading.setupFilesAfterEnv ?? []];
+  const namedTheRootSetup = declared.some((file) => file.endsWith("jest.setup.after.env.js"));
+  const own = declared.filter((file) => !file.endsWith("jest.setup.after.env.js")).map((file) => `'${withoutRootDir(file)}'`);
+  const sentinel = [
+    `'${SENTINEL_TEST_SETUP}'`,
+    ...namedTheRootSetup ? [`'${SENTINEL_WORKSPACE_SETUP}'`] : [],
+    ...msw && !ownsMswLifecycle(cwd, reading) ? [`'${SENTINEL_MSW_SETUP}'`] : []
+  ];
   return `        setupFiles: [${[...sentinel, ...own].join(", ")}],`;
 }
 function envBlock(reading) {
@@ -7282,6 +7681,19 @@ function envBlock(reading) {
   const entries = reading.env.map((entry) => `          ${entry.name}: ${entry.value},`);
   return ["        env: {", ...entries, "        },"].join("\n");
 }
+function concurrencyBlock(cwd, reading, target) {
+  const declared = reading.maxWorkers;
+  if (declared !== void 0) {
+    return declared === "1" ? `        fileParallelism: false,` : `        maxWorkers: ${declared},`;
+  }
+  const ci = projectTargets(cwd)?.[target]?.configurations?.ci;
+  if (ci === void 0) return "";
+  if (ci.runInBand === true) return `        fileParallelism: false,`;
+  if (typeof ci.maxWorkers === "number") {
+    return ci.maxWorkers === 1 ? `        fileParallelism: false,` : `        maxWorkers: ${ci.maxWorkers},`;
+  }
+  return "";
+}
 function timeoutBlock(reading) {
   return reading.testTimeout === void 0 ? "" : `        testTimeout: ${reading.testTimeout},`;
 }
@@ -7300,14 +7712,19 @@ function excludeBlock(reading) {
   const globs = reading.excludeGlobs.map((glob) => `'${glob}'`).join(", ");
   return `        exclude: [...configDefaults.exclude, ${globs}],`;
 }
+function isPackage(replacement) {
+  return !replacement.startsWith(".") && !replacement.startsWith("/") && !replacement.toLowerCase().includes("<rootdir>");
+}
 function aliasBlock(reading) {
   if (reading.aliases === void 0 || reading.aliases.length === 0) return "";
-  const entries = reading.aliases.map(
-    (alias) => `          { find: /${alias.find.replaceAll("/", "\\\\/")}/, replacement: path.resolve(import.meta.dirname, '${withoutRootDir(alias.replacement)}') },`
-  );
+  const entries = reading.aliases.map((alias) => {
+    const pattern = alias.find.replaceAll(String.raw`\\`, "\\").replaceAll("/", String.raw`\/`);
+    const target = isPackage(alias.replacement) ? `'${alias.replacement}'` : `path.resolve(import.meta.dirname, '${withoutRootDir(alias.replacement)}')`;
+    return `          { find: /${pattern}/, replacement: ${target} },`;
+  });
   return ["      resolve: {", "        alias: [", ...entries, "        ],", "      },"].join("\n");
 }
-function generateNestTestConfig(cwd, reading) {
+function generateNestTestConfig(cwd, reading, target = "test") {
   if (reading.refusals.length > 0) return { refusals: reading.refusals };
   const workspaceRoot = findWorkspaceRoot(cwd);
   if (workspaceRoot === void 0) {
@@ -7317,9 +7734,10 @@ function generateNestTestConfig(cwd, reading) {
   const up = hopsToRoot(cwd, workspaceRoot);
   const test = [
     environmentBlock(reading),
-    setupBlock(reading, traits.msw),
+    setupBlock(cwd, reading, traits.msw),
     envBlock(reading),
     timeoutBlock(reading),
+    concurrencyBlock(cwd, reading, target),
     globalSetupBlock(reading),
     includeBlock(reading),
     excludeBlock(reading),
@@ -7331,7 +7749,7 @@ function generateNestTestConfig(cwd, reading) {
     `import path from 'node:path'`,
     "",
     ...needsDefaults ? [`import { configDefaults } from 'vitest/config'`, ""] : [],
-    `import { defineConfig, nestTestConfig } from '${NEST_TEST_PRESET_SPECIFIER}'`
+    flavourOf(reading) === "react" ? `import { defineConfig, reactTestConfig } from '${REACT_TEST_PRESET_SPECIFIER}'` : `import { defineConfig, nestTestConfig } from '${NEST_TEST_PRESET_SPECIFIER}'`
   ].join("\n");
   const overrides = [aliasBlock(reading), "      test: {", ...test, "      },"].filter(
     (line) => line !== ""
@@ -7342,7 +7760,7 @@ function generateNestTestConfig(cwd, reading) {
     source: `${imports}
 
 export default defineConfig(
-  nestTestConfig({
+  ${flavourOf(reading) === "react" ? "reactTestConfig" : "nestTestConfig"}({
     root: import.meta.dirname,
     workspaceRoot: path.resolve(import.meta.dirname, '${up}'),${decoratorLine}
     overrides: {
@@ -7355,14 +7773,15 @@ ${overrides.join("\n")}
 }
 
 // src/roles/test/nest/read-jest-config.ts
-import { existsSync as existsSync25, readFileSync as readFileSync25 } from "fs";
-import { join as join31 } from "path";
+import { existsSync as existsSync27, readFileSync as readFileSync27 } from "fs";
+import { join as join33 } from "path";
 var CARRIED = [
   "testEnvironment",
   "coverageDirectory",
   "setupFilesAfterEnv",
   "setupFiles",
   "testTimeout",
+  "maxWorkers",
   "globalSetup",
   "testMatch",
   "collectCoverageFrom",
@@ -7376,9 +7795,10 @@ var DISCARDED = [
   "transform",
   "extensionsToTreatAsEsm"
 ];
-var STRING = String.raw`['"]([^'"]*)['"]`;
+var STRING = String.raw`['"\`]([^'"\`]*)['"\`]`;
 function readString(body, key) {
-  return new RegExp(String.raw`\b${key}\s*:\s*${STRING}`).exec(body)?.[1];
+  const value = new RegExp(String.raw`\b${key}\s*:\s*${STRING}`).exec(body)?.[1];
+  return value?.includes("${") === true ? void 0 : value;
 }
 function readNumber(body, key) {
   return new RegExp(String.raw`\b${key}\s*:\s*(\d+)`).exec(body)?.[1];
@@ -7486,19 +7906,73 @@ function configBody(source) {
 function declaredKeys(body) {
   const keys = [];
   let depth = 0;
-  for (const line of body.split("\n")) {
-    if (depth === 0) {
-      const key = /^\s*([A-Za-z_$][\w$]*)\s*:/.exec(line);
-      if (key !== null) keys.push(key[1]);
+  let quote;
+  let token = "";
+  for (let i = 0; i < body.length; i += 1) {
+    const char = body[i];
+    if (quote !== void 0) {
+      if (char === quote && body[i - 1] !== "\\") quote = void 0;
+      continue;
+    }
+    if (char === "'" || char === '"' || char === "`") {
+      quote = char;
+      continue;
+    }
+    if (char === "/" && body[i + 1] === "/") {
+      const end = body.indexOf("\n", i);
+      i = end === -1 ? body.length : end;
+      token = "";
+      continue;
+    }
+    if (char === "/" && body[i + 1] === "*") {
+      const end = body.indexOf("*/", i + 2);
+      i = end === -1 ? body.length : end + 1;
+      token = "";
+      continue;
+    }
+    if (char === "{" || char === "[" || char === "(") {
+      depth += 1;
+      token = "";
+      continue;
+    }
+    if (char === "}" || char === "]" || char === ")") {
+      depth -= 1;
+      token = "";
+      continue;
     }
-    for (const char of line) {
-      if (char === "{" || char === "[") depth += 1;
-      else if (char === "}" || char === "]") depth -= 1;
+    if (depth === 0 && char === ":") {
+      const key = /([A-Za-z_$][\w$]*)\s*$/.exec(token)?.[1];
+      if (key !== void 0) keys.push(key);
+      token = "";
+      continue;
+    }
+    if (depth === 0 && char === ",") {
+      token = "";
+      continue;
     }
+    token += char;
   }
   return keys;
 }
-function sideEffects(source) {
+function extendedConfig(source, cwd) {
+  if (cwd === void 0) return void 0;
+  for (const line of source.split("\n")) {
+    const match = /^\s*import\s+(?!type\b)(\w+)\s+from\s+['"](\.[^'"]*)['"]/.exec(line);
+    if (match === null) continue;
+    const [, binding, specifier] = match;
+    const candidates = [specifier, `${specifier}.ts`, `${specifier}.js`].map(
+      (name) => name.replace(/^\.\//, "")
+    );
+    const file = candidates.find(
+      (name) => /^jest[\w.-]*\.(ts|js)$/.test(name) && existsSync27(join33(cwd, name))
+    );
+    if (file === void 0) continue;
+    if (!new RegExp(String.raw`\{\s*\.\.\.${binding}\b`).test(source)) continue;
+    return { binding, file };
+  }
+  return void 0;
+}
+function sideEffects(source, extended) {
   const found = [];
   for (const line of source.split("\n")) {
     const valueImport = /^\s*import\s+(?!type\b)(.*)$/.exec(line);
@@ -7507,6 +7981,7 @@ function sideEffects(source) {
       ...(/\{([^}]*)\}/.exec(valueImport[1])?.[1] ?? "").split(","),
       /^\s*(\w+)\s*(?:,|from)/.exec(valueImport[1])?.[1] ?? ""
     ].map((name) => name.split(" as ").pop()?.trim() ?? "").filter((name) => name !== "");
+    if (extended !== void 0 && bindings.includes(extended.binding)) continue;
     const used = bindings.some((name) => {
       const uses = source.match(new RegExp(String.raw`\b${name}\b`, "g")) ?? [];
       return uses.length > 1;
@@ -7515,16 +7990,17 @@ function sideEffects(source) {
   }
   return found;
 }
-function readJestConfig(cwd) {
-  const file = JEST_CONFIG_FILES.find((name) => existsSync25(join31(cwd, name)));
-  if (file === void 0) return void 0;
+function readJestConfig(cwd, named) {
+  const file = named ?? JEST_CONFIG_FILES.find((name) => existsSync27(join33(cwd, name)));
+  if (file === void 0 || !existsSync27(join33(cwd, file))) return void 0;
   let source;
   try {
-    source = readFileSync25(join31(cwd, file), "utf8");
+    source = readFileSync27(join33(cwd, file), "utf8");
   } catch {
     return { file, refusals: [`${file} could not be read`], notes: [] };
   }
-  const refusals = sideEffects(source);
+  const extended = extendedConfig(source, cwd);
+  const refusals = sideEffects(source, extended);
   const body = configBody(source);
   if (body === void 0) {
     return { file, refusals: [...refusals, "its config object could not be located"], notes: [] };
@@ -7554,39 +8030,108 @@ function readJestConfig(cwd) {
       `\`moduleNameMapper\` entry \`${find}\` pointed at another build of the package it matches, which is jest saying it could not load the package as it ships. Vitest can, so the mapping is dropped rather than carried`
     );
   }
+  for (const alias of mapper.aliases) {
+    if (/<rootdir>/i.test(alias.replacement) && !alias.replacement.includes("<rootDir>")) {
+      notes.push(
+        `\`moduleNameMapper\` entry \`${alias.find}\` writes \`${/<[Rr]oot[Dd]ir>/.exec(alias.replacement)?.[0] ?? "<RootDir>"}\`, and jest only substitutes \`<rootDir>\`. That mapping resolved to a literal directory under jest too, so it has never done anything; it is carried unchanged rather than quietly repaired`
+      );
+    }
+  }
   const coverageFrom = readCoverageFrom(body);
   const env = readEnvironment(source);
   const globalSetup = readString(body, "globalSetup");
   const testTimeout = readNumber(body, "testTimeout");
+  const maxWorkers = readNumber(body, "maxWorkers");
   const testMatch = readStringArray(body, "testMatch");
+  const base = extended === void 0 ? void 0 : readJestConfig(cwd, extended.file);
+  const inherited = base === void 0 ? {} : { ...base, refusals: [], notes: [] };
+  for (const [jestKey, field] of [
+    ["testPathIgnorePatterns", "excludeGlobs"],
+    ["setupFilesAfterEnv", "setupFilesAfterEnv"],
+    ["setupFiles", "setupFiles"],
+    ["testMatch", "testMatch"],
+    ["collectCoverageFrom", "coverageFrom"],
+    ["moduleNameMapper", "aliases"]
+  ]) {
+    if (declaredKeys(body).includes(jestKey)) delete inherited[field];
+  }
   return {
+    ...inherited,
     file,
     ...readString(body, "testEnvironment") !== void 0 ? { testEnvironment: readString(body, "testEnvironment") } : {},
     ...readString(body, "coverageDirectory") !== void 0 ? { coverageDirectory: readString(body, "coverageDirectory") } : {},
     ...afterEnv !== void 0 ? { setupFilesAfterEnv: afterEnv } : {},
     ...before !== void 0 ? { setupFiles: before } : {},
     ...testTimeout !== void 0 ? { testTimeout } : {},
+    ...maxWorkers !== void 0 ? { maxWorkers } : {},
     ...globalSetup !== void 0 ? { globalSetup: [globalSetup] } : {},
     ...testMatch !== void 0 ? { testMatch } : {},
     ...coverageFrom !== void 0 ? { coverageFrom } : {},
     ...excludeGlobs.length > 0 ? { excludeGlobs } : {},
     ...mapper.aliases.length > 0 ? { aliases: mapper.aliases } : {},
     ...env.length > 0 ? { env } : {},
-    refusals,
-    notes
+    refusals: [...base?.refusals ?? [], ...refusals],
+    notes: [...base?.notes ?? [], ...notes]
   };
 }
 
+// src/roles/test/nest/run-modes.ts
+import { existsSync as existsSync28 } from "fs";
+import { basename as basename2, join as join34 } from "path";
+var JEST_EXECUTOR = "@nx/jest:jest";
+var PRIMARY_CONFIG_FILE = "vitest.config.mts";
+var PRIMARY_TARGET = "test";
+function configName(declared) {
+  return basename2(declared.replaceAll("\\", "/"));
+}
+function configFileFor(target) {
+  if (target === PRIMARY_TARGET) return PRIMARY_CONFIG_FILE;
+  const suffix = target.startsWith("test-") ? target.slice("test-".length) : target;
+  return `vitest.${suffix}.config.mts`;
+}
+function runModes(cwd, fallback) {
+  const targets = projectTargets(cwd) ?? {};
+  const declared = [];
+  for (const [target, raw] of Object.entries(targets)) {
+    const entry = raw;
+    if (entry.executor !== JEST_EXECUTOR) continue;
+    const jestConfig = entry.options?.jestConfig;
+    if (jestConfig === void 0) continue;
+    const name = configName(jestConfig);
+    if (!existsSync28(join34(cwd, name))) continue;
+    declared.push({
+      target,
+      jestConfig: name,
+      vitestConfig: configFileFor(target),
+      primary: target === PRIMARY_TARGET
+    });
+  }
+  if (declared.length === 0) {
+    const [only] = fallback;
+    return only === void 0 ? [] : [
+      {
+        target: PRIMARY_TARGET,
+        jestConfig: only,
+        vitestConfig: PRIMARY_CONFIG_FILE,
+        primary: true
+      }
+    ];
+  }
+  return declared.sort(
+    (left, right) => left.primary === right.primary ? left.target.localeCompare(right.target) : Number(right.primary) - Number(left.primary)
+  );
+}
+
 // src/roles/test/jest-migration.ts
 var SPEC_TSCONFIG = "tsconfig.spec.json";
 var VITEST_GLOBAL_TYPES = "vitest/globals";
 function specTypesOperation(cwd) {
-  const path = join32(cwd, SPEC_TSCONFIG);
-  if (!existsSync26(path)) return void 0;
+  const path = join35(cwd, SPEC_TSCONFIG);
+  if (!existsSync29(path)) return void 0;
   let config;
   try {
     config = parseJsonc(
-      readFileSync26(path, "utf8"),
+      readFileSync28(path, "utf8"),
       SPEC_TSCONFIG
     );
   } catch {
@@ -7617,23 +8162,32 @@ function blocked(reason) {
   return { operations: [], blocked: reason };
 }
 function planJestMigration(context, adoption) {
-  if (adoption.jestConfigs.length > 1) {
-    const [primary, ...rest] = adoption.jestConfigs;
-    return blocked(
-      `this module has a second run mode (${rest.join(", ")}) beside ${primary}, with its own target. One config file cannot stand for both, and how run modes are expressed under Vitest is an open question here, so this module is not migrated yet.`
-    );
-  }
-  const reading = readJestConfig(context.cwd);
-  if (reading === void 0) {
-    return blocked(`${adoption.jestConfigs.join(", ")} could not be read, so nothing was written.`);
-  }
-  const generated = generateNestTestConfig(context.cwd, reading);
-  if (generated.source === void 0) {
-    return blocked(
-      `this module's jest config does not transpose as it stands: ${generated.refusals.join("; ")}. Nothing was written; this needs a look before the migration runs.`
-    );
+  const modes = runModes(context.cwd, adoption.jestConfigs);
+  if (modes.length === 0) {
+    return blocked(`no jest config could be found for this module, so nothing was written.`);
+  }
+  const prepared = [];
+  for (const mode of modes) {
+    const reading = readJestConfig(context.cwd, mode.jestConfig);
+    if (reading === void 0) {
+      return blocked(`${mode.jestConfig} could not be read, so nothing was written.`);
+    }
+    const generated = generateNestTestConfig(context.cwd, reading, mode.target);
+    if (generated.source === void 0) {
+      return blocked(
+        `${mode.jestConfig} (the \`${mode.target}\` target) does not transpose as it stands: ${generated.refusals.join("; ")}. Nothing was written; this needs a look before the migration runs.`
+      );
+    }
+    prepared.push({ mode, reading, source: generated.source });
   }
-  const migration = migrateModuleTests(context.cwd);
+  const migration = migrateModuleTests(
+    context.cwd,
+    prepared.flatMap(({ reading }) => [
+      ...reading.setupFiles ?? [],
+      ...reading.setupFilesAfterEnv ?? [],
+      ...reading.globalSetup ?? []
+    ])
+  );
   if (migration.blockers.length > 0) {
     const listed = migration.blockers.map((blocker) => `
     ${blocker.file}: ${blocker.reason}`).join("");
@@ -7641,32 +8195,41 @@ function planJestMigration(context, adoption) {
       `${migration.blockers.length} thing(s) in this module's test files need a human before it can move. Nothing was written, because a config without its files is a suite calling jest.* under Vitest.${listed}`
     );
   }
-  const existing = projectTargets(context.cwd)?.[TEST_SCRIPT_NAME];
+  const targets = projectTargets(context.cwd) ?? {};
+  const existingFor = (name) => targets[name];
   const siblings = siblingScriptRewrites(context.cwd);
   const specTypes = specTypesOperation(context.cwd);
+  const scripts = Object.fromEntries(
+    prepared.map(({ mode }) => [
+      mode.target,
+      mode.primary ? SENTINEL_TEST_COMMAND : `${SENTINEL_TEST_COMMAND} --config ${mode.vitestConfig}`
+    ])
+  );
   const operations = [
-    { kind: "write", path: NEST_TEST_CONFIG_FILE, contents: generated.source },
+    ...prepared.map(({ mode, source }) => ({
+      kind: "write",
+      path: mode.vitestConfig,
+      contents: source
+    })),
     ...migration.operations,
     ...specTypes === void 0 ? [] : [specTypes],
-    manifestOperation(context.cwd, { [TEST_SCRIPT_NAME]: SENTINEL_TEST_COMMAND, ...siblings }),
-    ...nxTargetOperations({
-      cwd: context.cwd,
-      targets: testTarget({
-        configFiles: [NEST_TEST_CONFIG_FILE],
-        outputs: existing?.outputs ?? [],
-        dependsOn: existing?.dependsOn ?? [],
-        configurations: existing?.configurations ?? {}
+    manifestOperation(context.cwd, { ...scripts, ...siblings }),
+    ...prepared.flatMap(
+      ({ mode }) => nxTargetOperations({
+        cwd: context.cwd,
+        targets: testTarget({
+          name: mode.target,
+          configFiles: [mode.vitestConfig],
+          outputs: existingFor(mode.target)?.outputs ?? [],
+          dependsOn: existingFor(mode.target)?.dependsOn ?? [],
+          configurations: existingFor(mode.target)?.configurations ?? {}
+        })
       })
-    }),
-    ...adoption.jestConfigs.map((name) => ({ kind: "delete", path: name }))
+    ),
+    ...[.../* @__PURE__ */ new Set([...adoption.jestConfigs, ...prepared.map(({ mode }) => mode.jestConfig)])].map(
+      (name) => ({ kind: "delete", path: name })
+    )
   ];
-  if (existing !== void 0) {
-    operations.push({
-      kind: "remove-json-keys",
-      path: "project.json",
-      keys: [["targets", TEST_SCRIPT_NAME]]
-    });
-  }
   const notes = [
     `${migration.files} test file(s) migrated from jest to Vitest, ${migration.renamed} site(s) rewritten${migration.hoisted > 0 ? `, ${migration.hoisted} of them moving a mock factory's captures into vi.hoisted` : ""}.`,
     `${NEST_TEST_CONFIG_FILE} written from what ${adoption.jestConfigs.join(", ")} declared, and that config deleted. Every specifier in the new one is a package name: nothing in it reaches outside this module.`
@@ -7679,6 +8242,9 @@ function planJestMigration(context, adoption) {
   notes.push(
     `run this module's own lint --fix (or its formatter) after installing: the Vitest type imports are written beside the existing ones, and ordering belongs to the tool that enforces it.`
   );
+  notes.push(
+    `then run this module's TYPECHECK, not only its tests. The migration rewrites types as well as calls, and a wrong type is invisible to a green suite: measured on a real module, \`--run --test\` passed while \`--run --typescript\` reported ten errors it had not had before.`
+  );
   if (Object.keys(siblings).length > 0) {
     notes.push(`rewrote ${Object.keys(siblings).join(", ")} to run through sentinel.`);
   }
@@ -7819,6 +8385,311 @@ function plan3(context) {
   return { operations, notes };
 }
 
+// src/roles/test/reference.ts
+import { execFileSync } from "child_process";
+import { existsSync as existsSync30, mkdtempSync, readFileSync as readFileSync29, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "fs";
+import { tmpdir } from "os";
+import { join as join36 } from "path";
+
+// src/roles/test/baseline.ts
+function readSnapshot(report) {
+  const files = report?.testResults ?? [];
+  const passing = [];
+  const failing = [];
+  const unloadable = [];
+  for (const file of files) {
+    const assertions = file?.assertionResults ?? [];
+    if (file?.status === "failed" && assertions.length === 0) {
+      unloadable.push(typeof file.name === "string" ? file.name : "an unnamed file");
+    }
+    for (const assertion of assertions) {
+      const name = assertion?.fullName;
+      if (typeof name !== "string" || name === "") continue;
+      if (assertion.status === "passed") passing.push(name);
+      else if (assertion.status === "failed") failing.push(name);
+    }
+  }
+  const claimed = report?.numFailedTests;
+  return {
+    files: files.length,
+    passing: passing.sort(),
+    failing: failing.sort(),
+    unloadable: unloadable.sort(),
+    claimedFailing: typeof claimed === "number" ? claimed : failing.length
+  };
+}
+function difference(left, right) {
+  const remaining = /* @__PURE__ */ new Map();
+  for (const name of right) remaining.set(name, (remaining.get(name) ?? 0) + 1);
+  const missing = [];
+  for (const name of left) {
+    const left_ = remaining.get(name) ?? 0;
+    if (left_ === 0) {
+      missing.push(name);
+      continue;
+    }
+    remaining.set(name, left_ - 1);
+  }
+  return missing.sort();
+}
+var withoutRenderingQuotes = (name) => name.replaceAll(String.raw`\'`, "'").replaceAll(String.raw`\"`, '"').replaceAll(/['"`]\s*\+\s*['"`]/g, "").replaceAll(/(^|[\s:,[{(])(''|"")($|[\s,)\]}])/g, "$1<empty-string>$3").replaceAll(/['"`]/g, "");
+function withoutRenderingNoise(name) {
+  const spelled = withSortedKeys(
+    withoutUndefinedEntries(
+      withoutErrorRendering(
+        withoutNaN(
+          withoutTimestamps(withoutRenderingQuotes(withoutClassBodies(withoutStackFrames(name))))
+        )
+      )
+    )
+  );
+  return withoutArrayBrackets(
+    spelled.replaceAll(/\[\s+/g, "[").replaceAll(/\s+\]/g, "]").replaceAll(/\{\s+/g, "{").replaceAll(/\s+\}/g, "}").replaceAll(/(?<=[[{,\s])\+0\b/g, "0").replaceAll(/:\s+/g, ":").replaceAll(/,\s+/g, ",")
+  );
+}
+function withoutArrayBrackets(name) {
+  return name.replaceAll(
+    /\[([^[\]]*)\]/g,
+    (match, inner) => (
+      // `[Object]` and `[Array]` are the formatter saying it STOPPED, not an array literal.
+      // Stripping their brackets would erase the marker `collapsedOf` pairs on.
+      /^(?:Object|Array)$/.test(inner) ? match : inner.replaceAll(/,\s+/g, ",")
+    )
+  );
+}
+var withoutClassBodies = (name) => name.replaceAll(
+  /class\s+([A-Za-z_$][\w$]*)\s*\{\s*\}/g,
+  (_match, className) => `class ${className}`
+).replaceAll(
+  /class\s+([A-Za-z_$][\w$]*)[\s\S]*?\n\}/g,
+  (_match, className) => `class ${className}`
+);
+var withoutTimestamps = (name) => name.replaceAll(/\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z/g, "<instant>");
+var withoutNaN = (name) => name.replaceAll(/\bNaN\b/g, "null");
+function entriesOf(inner) {
+  const parts = [];
+  let depth = 0;
+  let start = 0;
+  for (let index = 0; index < inner.length; index += 1) {
+    const character = inner[index];
+    if (character === "[" || character === "(") depth += 1;
+    else if (character === "]" || character === ")") depth -= 1;
+    else if (character === "," && depth === 0) {
+      parts.push(inner.slice(start, index));
+      start = index + 1;
+    }
+    if (depth < 0) return void 0;
+  }
+  if (depth !== 0) return void 0;
+  parts.push(inner.slice(start));
+  return parts.map((part) => part.trim()).filter(Boolean);
+}
+var sortedGroup = (match, inner) => {
+  if (!inner.includes(":")) return match;
+  const parts = entriesOf(inner);
+  if (parts === void 0) return match;
+  if (parts.length < 2 || !parts.every((part) => part.includes(":"))) return match;
+  return `{${[...parts].sort().join(",")}}`;
+};
+var HELD = "\u241F";
+var withSortedKeys = (name) => {
+  const held = [];
+  let current = name;
+  for (let depth = 0; depth < 24; depth += 1) {
+    const next = current.replaceAll(/\{([^{}]*)\}/g, (match, inner) => {
+      held.push(sortedGroup(match, inner));
+      return `${HELD}${held.length - 1}${HELD}`;
+    });
+    if (next === current) break;
+    current = next;
+  }
+  for (let depth = 0; depth < 24 && current.includes(HELD); depth += 1) {
+    current = current.replaceAll(
+      new RegExp(`${HELD}(\\d+)${HELD}`, "g"),
+      (_match, index) => held[Number(index)]
+    );
+  }
+  return current;
+};
+var withoutStackFrames = (name) => {
+  const frame = name.search(/\n\s+at\s/);
+  return frame === -1 ? name : name.slice(0, frame);
+};
+var withoutErrorRendering = (name) => name.replaceAll(/\[[A-Za-z]*(?:Error|Exception):[^\][]*\]/g, "{}");
+var withoutUndefinedEntries = (name) => name.replaceAll(/([{,])\s*[A-Za-z_$][\w$]*\s*:\s*undefined\s*(?=[,}])/g, "$1").replaceAll(/\{\s*,/g, "{").replaceAll(/,\s*\}/g, "}").replaceAll(/\{\s*\}/g, "{}");
+function collapsedOf(candidate, name) {
+  if (!/\[(?:Object|Array)\]/.test(candidate)) return false;
+  const pattern = candidate.split(/\[(?:Object|Array)\]/).map((part) => part.replaceAll(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*");
+  return new RegExp(`^${pattern}$`, "s").test(name);
+}
+function truncationOf(candidate, name) {
+  const cut = candidate.indexOf("\u2026");
+  if (cut === -1) return false;
+  const head = candidate.slice(0, cut);
+  const tail = candidate.slice(cut + 1);
+  return name.startsWith(head) && name.endsWith(tail);
+}
+function pairRenamed(missing, added) {
+  const remaining = [...added];
+  const renamed = [];
+  const unmatched = [];
+  for (const name of missing) {
+    const normalised = withoutRenderingNoise(name);
+    const at = remaining.findIndex((candidate) => withoutRenderingNoise(candidate) === normalised);
+    if (at === -1) {
+      unmatched.push(name);
+      continue;
+    }
+    renamed.push({ before: name, after: remaining[at] });
+    remaining.splice(at, 1);
+  }
+  const lost = [];
+  for (const name of unmatched) {
+    const normalised = withoutRenderingNoise(name);
+    const at = remaining.findIndex(
+      (candidate) => truncationOf(withoutRenderingNoise(candidate), normalised) || collapsedOf(normalised, withoutRenderingNoise(candidate))
+    );
+    if (at === -1) {
+      lost.push(name);
+      continue;
+    }
+    renamed.push({ before: name, after: remaining[at] });
+    remaining.splice(at, 1);
+  }
+  return { renamed, missing: lost, added: remaining };
+}
+function compareSnapshots(before, after) {
+  const beforeAll = [...before.passing, ...before.failing];
+  const afterAll = [...after.passing, ...after.failing];
+  const paired = pairRenamed(difference(beforeAll, afterAll), difference(afterAll, beforeAll));
+  const renamedBefore = new Set(paired.renamed.map((pair) => pair.before));
+  const regressed = difference(before.passing, after.passing).filter(
+    (name) => !paired.missing.includes(name) && !renamedBefore.has(name)
+  );
+  const failedBefore = new Set(before.failing);
+  const recovered = after.passing.filter((name) => failedBefore.has(name));
+  return {
+    identical: paired.missing.length === 0 && paired.added.length === 0 && regressed.length === 0,
+    missing: paired.missing,
+    added: paired.added,
+    regressed,
+    renamed: paired.renamed,
+    recovered,
+    alreadyFailing: before.failing.length
+  };
+}
+function unusableAsBaseline(snapshot) {
+  if (snapshot.unloadable.length > 0) {
+    return `${snapshot.unloadable.length} file(s) in the reference run did not load, so they reported no test at all and the run is short by however many they hold: ${snapshot.unloadable.slice(0, 3).join(", ")}. A reference that quietly lost tests cannot prove anything about the run after it`;
+  }
+  if (snapshot.claimedFailing > snapshot.failing.length) {
+    return `the reference run says ${snapshot.claimedFailing} test(s) failed and names only ${snapshot.failing.length} of them, so the comparison has nothing to pair the rest against and would report them as invented by the migration`;
+  }
+  if (snapshot.passing.length === 0) {
+    return `the reference run reports no passing test at all, so a green run after would prove nothing: there is no claim to preserve`;
+  }
+  return void 0;
+}
+function describeComparison(comparison) {
+  const renamedNote = comparison.renamed.length > 0 ? ` ${comparison.renamed.length} test(s) kept their identity and changed name, because the runners render an each title's interpolated value differently (e.g. "${comparison.renamed[0]?.before.slice(-40)}" -> "${comparison.renamed[0]?.after.slice(-40)}").` : "";
+  const alreadyRedNote = comparison.alreadyFailing > 0 ? ` ${comparison.alreadyFailing} test(s) were already failing before the migration and are outside this comparison, which covers only what passed.` : "";
+  const recoveredNote = comparison.recovered.length > 0 ? ` ${comparison.recovered.length} test(s) were failing before and pass now.` : "";
+  if (comparison.identical) {
+    return `every test that ran before runs and passes now.${recoveredNote}${renamedNote}${alreadyRedNote}`;
+  }
+  const parts = [];
+  if (comparison.recovered.length > 0) {
+    parts.push(`${comparison.recovered.length} test(s) were failing before and pass now`);
+  }
+  if (comparison.missing.length > 0) {
+    parts.push(
+      `${comparison.missing.length} test(s) no longer exist: ${comparison.missing.slice(0, 3).join(", ")}`
+    );
+  }
+  if (comparison.added.length > 0) {
+    parts.push(
+      `${comparison.added.length} test(s) appeared, which a migration should not do: ${comparison.added.slice(0, 3).join(", ")}`
+    );
+  }
+  if (comparison.regressed.length > 0) {
+    parts.push(
+      `${comparison.regressed.length} test(s) passed before and do not now: ${comparison.regressed.slice(0, 3).join(", ")}`
+    );
+  }
+  return `${parts.join("; ")}${renamedNote}${alreadyRedNote}`;
+}
+
+// src/roles/test/reference.ts
+var REFERENCE_FILE = ".sentinel-test-reference.json";
+function runJest(cwd, config) {
+  const bin = resolveBin(cwd, "jest");
+  if (bin === void 0) return void 0;
+  const root = findWorkspaceRoot(cwd) ?? cwd;
+  const out = join36(mkdtempSync(join36(tmpdir(), "sentinel-reference-")), "jest.json");
+  try {
+    execFileSync(bin, ["-c", join36(cwd, config), "--json", `--outputFile=${out}`, "--silent"], {
+      cwd: root,
+      stdio: ["ignore", "ignore", "ignore"],
+      maxBuffer: 1 << 28
+    });
+  } catch {
+  }
+  if (!existsSync30(out)) return void 0;
+  try {
+    return JSON.parse(readFileSync29(out, "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function captureReference(cwd, config) {
+  const report = runJest(cwd, config);
+  if (report === void 0) {
+    return {
+      captured: false,
+      message: `could not run jest to record a reference, so this migration cannot be PROVED. It is still applied: a module whose jest run is broken can move, it just cannot be compared.`
+    };
+  }
+  const snapshot = readSnapshot(report);
+  const unusable = unusableAsBaseline(snapshot);
+  if (unusable !== void 0) {
+    return {
+      captured: false,
+      message: `no reference recorded: ${unusable} The migration is applied anyway, unproved.`
+    };
+  }
+  const stored = {
+    runner: "jest",
+    config,
+    takenAt: (/* @__PURE__ */ new Date()).toISOString(),
+    snapshot
+  };
+  writeFileSync3(join36(cwd, REFERENCE_FILE), `${JSON.stringify(stored, void 0, 2)}
+`);
+  return {
+    captured: true,
+    message: `recorded ${snapshot.passing.length} passing test name(s) from ${config} as the reference. The next \`sentinel --run --test\` compares against it.`
+  };
+}
+function hasReference(cwd) {
+  return existsSync30(join36(cwd, REFERENCE_FILE));
+}
+function compareAgainstReference(cwd, report) {
+  const path = join36(cwd, REFERENCE_FILE);
+  let stored;
+  try {
+    stored = JSON.parse(readFileSync29(path, "utf8"));
+  } catch {
+    rmSync3(path, { force: true });
+    return { ok: true, message: `the recorded reference could not be read, so nothing was proved.` };
+  }
+  const comparison = compareSnapshots(stored.snapshot, readSnapshot(report));
+  rmSync3(path, { force: true });
+  return {
+    ok: comparison.identical,
+    message: `${describeComparison(comparison)} (reference: ${stored.config}, ${stored.takenAt})`
+  };
+}
+
 // src/roles/test/adapters/vitest/vitest.adapter.ts
 function resolveVitest(cwd) {
   const fromSentinel = binFromOwnInstall("vitest", "vitest");
@@ -7832,6 +8703,22 @@ var VitestAdapter = class extends BaseAdapter {
   appliesTo(_preset) {
     return true;
   }
+  /**
+   * Record what this module's tests do TODAY, at the last moment it is still true.
+   *
+   * The plan about to be applied deletes the jest config, and with it any way of asking again. A
+   * migration that cannot be compared to what came before is a migration nobody can check, which
+   * is the whole reason this role has a baseline gate at all.
+   */
+  async beforeInit(ctx) {
+    const adoption = readTestAdoption(ctx.cwd);
+    if (adoption.state !== "jest") return Promise.resolve();
+    const [config] = adoption.jestConfigs;
+    if (config === void 0) return Promise.resolve();
+    this.say(`recording the jest reference before migrating...`);
+    this.say(captureReference(ctx.cwd, config).message);
+    return Promise.resolve();
+  }
   plan(context) {
     return plan3(context);
   }
@@ -7878,13 +8765,31 @@ var VitestAdapter = class extends BaseAdapter {
     }
     const { options, paths } = splitToolArgs(ctx.cwd, ctx.toolArgs, { valueFlags: [] });
     const watching = options.includes("--watch") || options.includes("-w");
-    const argv = watching ? [...options, ...paths] : ["run", ...options, ...paths];
+    const proving = !watching && hasReference(ctx.cwd);
+    const reportFile = proving ? join37(mkdtempSync2(join37(tmpdir2(), "sentinel-run-")), "vitest.json") : void 0;
+    const reporters = reportFile === void 0 ? [] : ["--reporter=default", "--reporter=json", `--outputFile=${reportFile}`];
+    const argv = watching ? [...options, ...paths] : ["run", ...reporters, ...options, ...paths];
     const result = spawnSync5(bin, argv, { cwd: ctx.cwd, stdio: "inherit" });
     if (result.error) {
       this.say(`could not run vitest (${result.error.message})`);
       return Promise.resolve({ ok: false, code: 1 });
     }
     const code = result.status ?? 1;
+    if (reportFile !== void 0) {
+      let report;
+      try {
+        report = JSON.parse(readFileSync30(reportFile, "utf8"));
+      } catch {
+        report = void 0;
+      }
+      if (report === void 0) {
+        this.say(`vitest wrote no report, so this run proved nothing against the reference.`);
+      } else {
+        const outcome = compareAgainstReference(ctx.cwd, report);
+        this.say(outcome.message);
+        if (!outcome.ok) return Promise.resolve({ ok: false, code: code === 0 ? 1 : code });
+      }
+    }
     return Promise.resolve({ ok: code === 0, code });
   }
   say(message) {
@@ -7901,9 +8806,9 @@ function registerTest() {
 
 // src/roles/typescript/adapters/tsc/tsc.adapter.ts
 import { spawnSync as spawnSync6 } from "child_process";
-import { existsSync as existsSync27, readFileSync as readFileSync28 } from "fs";
-import { createRequire as createRequire4 } from "module";
-import { join as join34 } from "path";
+import { existsSync as existsSync31, readFileSync as readFileSync32 } from "fs";
+import { createRequire as createRequire6 } from "module";
+import { join as join39 } from "path";
 
 // src/roles/typescript/presets/nest.json
 var nest_default2 = {
@@ -8084,8 +8989,8 @@ function readTsconfigAdoption(cwd) {
 }
 
 // src/roles/typescript/adapters/tsc/plan.ts
-import { readFileSync as readFileSync27 } from "fs";
-import { join as join33 } from "path";
+import { readFileSync as readFileSync31 } from "fs";
+import { join as join38 } from "path";
 
 // src/roles/typescript/typecheck-script.ts
 var SENTINEL_TYPECHECK_COMMAND = "sentinel --run --typescript";
@@ -8178,7 +9083,7 @@ function planAdoption(context) {
     };
   }
   const existing = parseJsonc(
-    readFileSync27(join33(context.cwd, target.path), "utf8"),
+    readFileSync31(join38(context.cwd, target.path), "utf8"),
     target.path
   );
   const extendsChain = composeExtends(existing.extends, preset);
@@ -8316,7 +9221,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
     let chain;
     try {
       const parsed = parseJsonc(
-        readFileSync28(join34(cwd, target.path), "utf8"),
+        readFileSync32(join39(cwd, target.path), "utf8"),
         target.path
       );
       chain = parsed.extends;
@@ -8329,7 +9234,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
     );
     if (preset === void 0) return void 0;
     try {
-      createRequire4(join34(cwd, "noop.js")).resolve(preset);
+      createRequire6(join39(cwd, "noop.js")).resolve(preset);
       return void 0;
     } catch {
       return preset;
@@ -8425,7 +9330,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
   referencedProjects(cwd, config) {
     try {
       const parsed = parseJsonc(
-        readFileSync28(join34(cwd, config), "utf8"),
+        readFileSync32(join39(cwd, config), "utf8"),
         config
       );
       const referenced = (parsed.references ?? []).map((reference) => reference.path).filter((path) => typeof path === "string" && path.length > 0);
@@ -8441,7 +9346,7 @@ var TscAdapter = class _TscAdapter extends BaseAdapter {
    * check.
    */
   typecheckTarget(cwd) {
-    if (existsSync27(join34(cwd, "tsconfig.json"))) return "tsconfig.json";
+    if (existsSync31(join39(cwd, "tsconfig.json"))) return "tsconfig.json";
     const target = resolveTsconfigTarget(cwd);
     return target.reason === "none" ? null : target.path;
   }
@@ -8590,7 +9495,7 @@ function detectFramework(packageJson) {
 }
 
 // src/core/dispatch.ts
-import { basename as basename2 } from "path";
+import { basename as basename3 } from "path";
 
 // src/shared/text.ts
 function ensureLines(current, lines) {
@@ -8646,7 +9551,7 @@ function replaceLines(current, replacements) {
 }
 
 // src/core/apply-plan.ts
-import { existsSync as existsSync28, readFileSync as readFileSync29, renameSync, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync32, readFileSync as readFileSync33, renameSync, rmSync as rmSync4, writeFileSync as writeFileSync4 } from "fs";
 import { resolve as resolve5, sep } from "path";
 import { applyEdits as applyEdits3, findNodeAtLocation, modify, parseTree } from "jsonc-parser";
 
@@ -8665,7 +9570,7 @@ function resolveWithinRoot(cwd, relativePath) {
   return absolutePath;
 }
 function readIfExists(absolutePath) {
-  return existsSync28(absolutePath) ? readFileSync29(absolutePath, "utf8") : void 0;
+  return existsSync32(absolutePath) ? readFileSync33(absolutePath, "utf8") : void 0;
 }
 function* leaves(value, prefix = []) {
   for (const [key, keyValue] of Object.entries(value)) {
@@ -8767,14 +9672,14 @@ function preparePlan(cwd, plan4) {
 }
 function writeFileAtomic(absolutePath, contents) {
   const tempPath = `${absolutePath}.sentinel-${process.pid}.tmp`;
-  writeFileSync3(tempPath, contents);
+  writeFileSync4(tempPath, contents);
   renameSync(tempPath, absolutePath);
 }
 function applyPlan(cwd, plan4) {
   const changed = preparePlan(cwd, plan4).filter((file) => file.before !== file.after);
   for (const file of changed) {
     if (file.deleted) {
-      rmSync3(file.absolutePath, { force: true });
+      rmSync4(file.absolutePath, { force: true });
       continue;
     }
     writeFileAtomic(file.absolutePath, file.after);
@@ -8783,8 +9688,8 @@ function applyPlan(cwd, plan4) {
 }
 
 // src/core/config/preset-evidence.ts
-import { existsSync as existsSync29, readdirSync as readdirSync7, readFileSync as readFileSync30 } from "fs";
-import { join as join35 } from "path";
+import { existsSync as existsSync33, readdirSync as readdirSync8, readFileSync as readFileSync34 } from "fs";
+import { join as join40 } from "path";
 var PATH_SIGNALS = [
   {
     preset: "nest",
@@ -8812,18 +9717,18 @@ function sourceImports(cwd, pattern) {
     const dir = stack.pop();
     let entries;
     try {
-      entries = readdirSync7(dir, { withFileTypes: true });
+      entries = readdirSync8(dir, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (entry.isDirectory()) {
-        if (!NOT_SCANNED.has(entry.name)) stack.push(join35(dir, entry.name));
+        if (!NOT_SCANNED.has(entry.name)) stack.push(join40(dir, entry.name));
         continue;
       }
       if (!SOURCE_FILE2.test(entry.name)) continue;
       try {
-        if (pattern.test(readFileSync30(join35(dir, entry.name), "utf8"))) return true;
+        if (pattern.test(readFileSync34(join40(dir, entry.name), "utf8"))) return true;
       } catch {
         continue;
       }
@@ -8832,11 +9737,11 @@ function sourceImports(cwd, pattern) {
   return false;
 }
 function dependencyNames(cwd) {
-  const path = join35(cwd, "package.json");
-  if (!existsSync29(path)) return [];
+  const path = join40(cwd, "package.json");
+  if (!existsSync33(path)) return [];
   try {
     const manifest = parseJsonc(
-      readFileSync30(path, "utf8"),
+      readFileSync34(path, "utf8"),
       path
     );
     return [
@@ -8850,7 +9755,7 @@ function dependencyNames(cwd) {
 function declaresJsx(cwd) {
   let entries;
   try {
-    entries = readdirSync7(cwd).filter(
+    entries = readdirSync8(cwd).filter(
       (name) => name.startsWith("tsconfig") && name.endsWith(".json")
     );
   } catch {
@@ -8859,7 +9764,7 @@ function declaresJsx(cwd) {
   for (const name of entries) {
     try {
       const config = parseJsonc(
-        readFileSync30(join35(cwd, name), "utf8"),
+        readFileSync34(join40(cwd, name), "utf8"),
         name
       );
       if (config.compilerOptions?.jsx !== void 0) return true;
@@ -9004,6 +9909,15 @@ async function dispatch(opts) {
   if (opts.dryRun) {
     return previewPlan(opts, plan4);
   }
+  if (adapter.beforeInit) {
+    await adapter.beforeInit({
+      module: basename3(opts.cwd),
+      cwd: opts.cwd,
+      preset,
+      ci: false,
+      fix: false
+    });
+  }
   for (const change of applyPlan(opts.cwd, plan4)) {
     process.stderr.write(`  ${change.deleted ? "removed" : "wrote"} ${change.path}
 `);
@@ -9014,7 +9928,7 @@ async function dispatch(opts) {
     process.stderr.write(`  fixing what ${opts.target} can fix automatically...
 `);
     await adapter.afterInit({
-      module: basename2(opts.cwd),
+      module: basename3(opts.cwd),
       cwd: opts.cwd,
       preset,
       ci: false,
@@ -9047,4 +9961,4 @@ export {
   detectFramework,
   dispatch
 };
-//# sourceMappingURL=chunk-O3XCQGTJ.js.map
+//# sourceMappingURL=chunk-MUQWAZQN.js.map