@productbrain/cli 0.1.0-beta.7395 → 0.1.0-beta.7400

package/dist/__tests__/handshake-dormancy.test.js

@@ -1,20 +1,13 @@
 import { describe, expect, test } from 'vitest';
 import { relative, sep } from 'path';
-import { __test } from '../commands/handshake.js';
-describe('WP-426 E3 setupAuthoringPath precedence', () => {
-    test('authoringPath (relative to .productbrain) wins', () => {
-        expect(__test.setupAuthoringPath('/repo', { entryId: 'SETUP-FOO', name: 'Foo Bar', assetKind: 'skill', authoringPath: 'skills/my-foo.md' }))
-            .toBe('/repo/.productbrain/skills/my-foo.md');
-    });
-    test('null authoringPath falls back to name-derivation (unchanged)', () => {
-        expect(__test.setupAuthoringPath('/repo', { entryId: 'SETUP-FOO', name: 'Foo Bar', assetKind: 'skill', authoringPath: null }))
-            .toBe('/repo/.productbrain/skills/Foo Bar.md');
-    });
-});
+// WP-776 S3d/S3f: the setupAuthoringPath precedence/traversal-rejection describe blocks that
+// used to live here are deleted along with the setup-authoring sync machinery and its
+// __test.setupAuthoringPath export (handshake.ts). What remains below is general — the
+// perimeter guard's .dormant handling — and survives that deletion.
 test('WP-426 E3 relative authoringPath is POSIX under .productbrain/, never absolute', () => {
     expect(relative('/repo/.productbrain', '/repo/.productbrain/skills/foo.md').split(sep).join('/')).toBe('skills/foo.md');
 });
-// WP-426 doneWhen #10: perimeter is containment-based (perimeter.ts:128-130),
+// WP-426 doneWhen #10: perimeter is containment-based (writePerimeter.ts),
 // not extension-gated — lock that .dormant targets pass under a surface dir.
 // DEC-1690 retired the handshake's own on-disk rename/restore machinery, but a
 // leftover .dormant sibling from an older binary can still reach this guard via
@@ -22,61 +15,10 @@ test('WP-426 E3 relative authoringPath is POSIX under .productbrain/, never abso
 // accept it.
 describe('WP-426 E4 perimeter accepts .dormant', () => {
     test('.md.dormant / .mdc.dormant under a surface dir do not throw', async () => {
-        const { assertSetupWritePath } = await import('../setup/perimeter.js');
+        const { assertSetupWritePath } = await import('../lib/writePerimeter.js');
         const manifest = { surfaces: ['.codex', '.cursor', '.claude'] };
         expect(() => assertSetupWritePath('/repo/.cursor/rules/Foo.mdc.dormant', manifest, { cwd: '/repo' })).not.toThrow();
         expect(() => assertSetupWritePath('/repo/.codex/skills/Foo.md.dormant', manifest, { cwd: '/repo' })).not.toThrow();
     });
 });
-// WP-426 doneWhen #10 + Codex P1 (traversal rejection): a malicious authoringPath like
-// '../../etc/passwd' (or an absolute path) is probed via existsSync/readFileSync in the
-// writeback loop BEFORE any assertSetupWritePath write guard runs. The write-time guard is
-// therefore insufficient — setupAuthoringPath itself must reject traversal/absolute values
-// and fall back to the safe name-derived path under .productbrain/, never returning a path
-// that escapes the tree.
-describe('WP-426 E3 traversal rejection in setupAuthoringPath', () => {
-    test("`..` traversal authoringPath falls back to the safe name-derived path", () => {
-        const resolved = __test.setupAuthoringPath('/repo', {
-            entryId: 'X',
-            name: 'X',
-            assetKind: 'skill',
-            authoringPath: '../../etc/passwd',
-        });
-        expect(resolved).toBe('/repo/.productbrain/skills/X.md');
-    });
-    test('absolute authoringPath falls back to the safe name-derived path', () => {
-        const resolved = __test.setupAuthoringPath('/repo', {
-            entryId: 'X',
-            name: 'X',
-            assetKind: 'skill',
-            authoringPath: '/etc/passwd',
-        });
-        expect(resolved).toBe('/repo/.productbrain/skills/X.md');
-    });
-    test('a contained nested authoringPath is still honored', () => {
-        const resolved = __test.setupAuthoringPath('/repo', {
-            entryId: 'X',
-            name: 'X',
-            assetKind: 'skill',
-            authoringPath: 'skills/nested/x.md',
-        });
-        expect(resolved).toBe('/repo/.productbrain/skills/nested/x.md');
-    });
-    // Codex P2: containment is not enough — only kind-appropriate <dir>/**/*.md is honored.
-    test.each([
-        ['bare directory', 'skills'],
-        ['internal sync file', '.authoring-sync.json'],
-        ['internal manifest', 'manifest.yaml'],
-        ['non-markdown under kind dir', 'skills/foo.txt'],
-        ['wrong-kind dir for a skill', 'rules/foo.md'],
-    ])('%s falls back to the safe name-derived path', (_label, authoringPath) => {
-        const resolved = __test.setupAuthoringPath('/repo', {
-            entryId: 'X',
-            name: 'X',
-            assetKind: 'skill',
-            authoringPath,
-        });
-        expect(resolved).toBe('/repo/.productbrain/skills/X.md');
-    });
-});
 //# sourceMappingURL=handshake-dormancy.test.js.map

package/dist/__tests__/handshake-dormancy.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"handshake-dormancy.test.js","sourceRoot":"","sources":["../../src/__tests__/handshake-dormancy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;aACzI,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;aAC3H,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAC1H,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,aAAa;AACb,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAS,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,qCAAqC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACpH,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,oCAAoC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,uFAAuF;AACvF,wFAAwF;AACxF,2FAA2F;AAC3F,2FAA2F;AAC3F,2FAA2F;AAC3F,yBAAyB;AACzB,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;QACjF,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE;YAClD,OAAO,EAAE,GAAG;YACZ,IAAI,EAAE,GAAG;YACT,SAAS,EAAE,OAAO;YAClB,aAAa,EAAE,kBAAkB;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE;YAClD,OAAO,EAAE,GAAG;YACZ,IAAI,EAAE,GAAG;YACT,SAAS,EAAE,OAAO;YAClB,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE;YAClD,OAAO,EAAE,GAAG;YACZ,IAAI,EAAE,GAAG;YACT,SAAS,EAAE,OAAO;YAClB,aAAa,EAAE,oBAAoB;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,wFAAwF;IACxF,IAAI,CAAC,IAAI,CAAC;QACR,CAAC,gBAAgB,EAAE,QAAQ,CAAC;QAC5B,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;QAC9C,CAAC,mBAAmB,EAAE,eAAe,CAAC;QACtC,CAAC,6BAA6B,EAAE,gBAAgB,CAAC;QACjD,CAAC,4BAA4B,EAAE,cAAc,CAAC;KAC/C,CAAC,CAAC,6CAA6C,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE;QAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE;YAClD,OAAO,EAAE,GAAG;YACZ,IAAI,EAAE,GAAG;YACT,SAAS,EAAE,OAAO;YAClB,aAAa;SACd,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"handshake-dormancy.test.js","sourceRoot":"","sources":["../../src/__tests__/handshake-dormancy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAErC,6FAA6F;AAC7F,sFAAsF;AACtF,uFAAuF;AACvF,oEAAoE;AAEpE,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAC1H,CAAC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,aAAa;AACb,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAS,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,qCAAqC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACpH,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,oCAAoC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}