@proteinjs/db-file 1.7.3 → 1.7.5

package/dist/test/FileByteAccess.test.js

@@ -0,0 +1,252 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var reflection_1 = require("@proteinjs/reflection");
+var FileStorage_1 = require("../src/FileStorage");
+var DbFileStorageDriver_1 = require("../src/DbFileStorageDriver");
+var FileTestEnvironment_1 = require("./FileTestEnvironment");
+/** Every byte value once — a payload that corrupts under any text/base64 mix-up. */
+var rawBytes = Buffer.from(Array.from({ length: 256 }, function (_, i) { return i; }));
+var rawBase64 = rawBytes.toString('base64');
+/** A same-length replacement payload, byte-distinct at every position — the poisoning attempt. */
+var poisonBytes = Buffer.from(Array.from({ length: 256 }, function (_, i) { return 255 - i; }));
+var poisonBase64 = poisonBytes.toString('base64');
+/**
+ * The byte-access gates on the browser-facing service (FileStorageService is `allUsers`, so
+ * these methods are every logged-in user's to call with any file id they can guess or leak):
+ *
+ * - **Reads** (`getFileData`): gated on the {@link FileStorage.getFile} row read — the same
+ *   two-legged access decision every serving path derives from (the caller's SCOPED read, else
+ *   the FileReachabilityResolver shared-content leg). Bytes are exactly as reachable as the row
+ *   that names them. Ungated, a foreign file id read another user's bytes outright (the driver
+ *   byte ops are deliberately unscoped — the access wall lives at this service boundary).
+ * - **Writes** (`updateFileData`): gated on the caller's SCOPED row read — owner scope is the
+ *   write grant on ScopedRecords. Stricter than reads: the resolver leg widens READS only, so a
+ *   share recipient who can read bytes still cannot write them. Ungated, a foreign file id let
+ *   any caller poison another user's bytes (with the DbFileStorageDriver: caller-scoped chunk
+ *   inserts landing beside the owner's — this suite runs that real driver so the intact-bytes
+ *   assertions prove no chunk ever landed).
+ *
+ * The resolver is stubbed at the seam (content packages sit above db-file); denial is the named
+ * `File not found` — existence is not leaked to unauthorized callers.
+ */
+var testEnv = new FileTestEnvironment_1.FileTestEnvironment();
+var objectCache = function () { return reflection_1.SourceRepository.get().objectCache; };
+var owner;
+var recipient;
+var stranger;
+/** File ids the stub resolver reports as reachable for the current user. */
+var reachableFileIds = new Set();
+/** How many times the seam was consulted — the owner's scoped leg must never pay for it. */
+var resolverConsultations = 0;
+beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, testEnv.beforeAll()];
+            case 1:
+                _a.sent();
+                // The seam getFile consults on a scoped-read miss, stubbed (the real thought-media resolver
+                // lives above this package).
+                objectCache()['@proteinjs/db-file/FileReachabilityResolver'] = [
+                    {
+                        canReadViaReference: function (fileId) { return __awaiter(void 0, void 0, void 0, function () {
+                            return __generator(this, function (_a) {
+                                resolverConsultations++;
+                                return [2 /*return*/, reachableFileIds.has(fileId)];
+                            });
+                        }); },
+                    },
+                ];
+                // The real chunked driver: write-gate bites are proven at the chunk-row level, not a mock.
+                testEnv.setDriver(new DbFileStorageDriver_1.DbFileStorageDriver());
+                return [4 /*yield*/, testEnv.createUser({ name: 'File owner', email: 'byte-owner@test.local' })];
+            case 2:
+                owner = _a.sent();
+                return [4 /*yield*/, testEnv.createUser({ name: 'Share recipient', email: 'byte-recipient@test.local' })];
+            case 3:
+                recipient = _a.sent();
+                return [4 /*yield*/, testEnv.createUser({ name: 'Stranger', email: 'byte-stranger@test.local' })];
+            case 4:
+                stranger = _a.sent();
+                testEnv.actAs(owner);
+                return [2 /*return*/];
+        }
+    });
+}); });
+afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                delete objectCache()['@proteinjs/db-file/FileReachabilityResolver'];
+                return [4 /*yield*/, testEnv.afterAll()];
+            case 1:
+                _a.sent();
+                return [2 /*return*/];
+        }
+    });
+}); });
+beforeEach(function () {
+    reachableFileIds.clear();
+    resolverConsultations = 0;
+    testEnv.actAs(owner);
+});
+var createOwnerFile = function (name) { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, new FileStorage_1.FileStorage().createFile({ name: name, type: 'application/octet-stream', size: rawBytes.length }, rawBase64)];
+            case 1: return [2 /*return*/, _a.sent()];
+        }
+    });
+}); };
+describe('byte reads gate on the file-row read (the getFile decision)', function () {
+    it('the owner reads their bytes through the scoped leg alone — resolvers are never consulted', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, fileDataBase64;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('own-bytes.bin')];
+                case 1:
+                    file = _a.sent();
+                    return [4 /*yield*/, new FileStorage_1.FileStorage().getFileData(file.id)];
+                case 2:
+                    fileDataBase64 = _a.sent();
+                    expect(fileDataBase64).toEqual(rawBase64);
+                    expect(resolverConsultations).toEqual(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it("THE VULN (read): a stranger holding only the file id is DENIED another user's bytes", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('private-bytes.bin')];
+                case 1:
+                    file = _a.sent();
+                    testEnv.actAs(stranger);
+                    return [4 /*yield*/, expect(new FileStorage_1.FileStorage().getFileData(file.id)).rejects.toThrow("File not found: ".concat(file.id))];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('a shared-content recipient (resolver-vouched) reads the bytes byte-identical', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, fileDataBase64;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('shared-bytes.bin')];
+                case 1:
+                    file = _a.sent();
+                    reachableFileIds.add(file.id);
+                    testEnv.actAs(recipient);
+                    return [4 /*yield*/, new FileStorage_1.FileStorage().getFileData(file.id)];
+                case 2:
+                    fileDataBase64 = _a.sent();
+                    expect(fileDataBase64).toEqual(rawBase64);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+describe('byte writes gate on the caller WRITING the row (owner scope; read-reachability never grants it)', function () {
+    it("THE VULN (write): a stranger holding only the file id cannot poison another user's bytes", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('unpoisonable.bin')];
+                case 1:
+                    file = _b.sent();
+                    testEnv.actAs(stranger);
+                    return [4 /*yield*/, expect(new FileStorage_1.FileStorage().updateFileData(file.id, poisonBase64)).rejects.toThrow("File not found: ".concat(file.id))];
+                case 2:
+                    _b.sent();
+                    // The outcome that matters: no chunk landed — the owner's bytes read back untouched.
+                    testEnv.actAs(owner);
+                    _a = expect;
+                    return [4 /*yield*/, new FileStorage_1.FileStorage().getFileData(file.id)];
+                case 3:
+                    _a.apply(void 0, [_b.sent()]).toEqual(rawBase64);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it("read-reachability does NOT grant write: a vouched recipient's byte write is denied, bytes intact", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, _a, _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('read-only-share.bin')];
+                case 1:
+                    file = _c.sent();
+                    reachableFileIds.add(file.id);
+                    testEnv.actAs(recipient);
+                    _a = expect;
+                    return [4 /*yield*/, new FileStorage_1.FileStorage().getFileData(file.id)];
+                case 2:
+                    _a.apply(void 0, [_c.sent()]).toEqual(rawBase64);
+                    return [4 /*yield*/, expect(new FileStorage_1.FileStorage().updateFileData(file.id, poisonBase64)).rejects.toThrow("File not found: ".concat(file.id))];
+                case 3:
+                    _c.sent();
+                    testEnv.actAs(owner);
+                    _b = expect;
+                    return [4 /*yield*/, new FileStorage_1.FileStorage().getFileData(file.id)];
+                case 4:
+                    _b.apply(void 0, [_c.sent()]).toEqual(rawBase64);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('the owner replaces their bytes wholesale', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('rewritable.bin')];
+                case 1:
+                    file = _b.sent();
+                    return [4 /*yield*/, new FileStorage_1.FileStorage().updateFileData(file.id, poisonBase64)];
+                case 2:
+                    _b.sent();
+                    _a = expect;
+                    return [4 /*yield*/, new FileStorage_1.FileStorage().getFileData(file.id)];
+                case 3:
+                    _a.apply(void 0, [_b.sent()]).toEqual(poisonBase64);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+//# sourceMappingURL=FileByteAccess.test.js.map

package/dist/test/FileByteAccess.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileByteAccess.test.js","sourceRoot":"","sources":["../../test/FileByteAccess.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oDAAyD;AAGzD,kDAAiD;AACjD,kEAAiE;AACjE,6DAA4D;AAE5D,oFAAoF;AACpF,IAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,UAAC,CAAC,EAAE,CAAC,IAAK,OAAA,CAAC,EAAD,CAAC,CAAC,CAAC,CAAC;AACvE,IAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC9C,kGAAkG;AAClG,IAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,UAAC,CAAC,EAAE,CAAC,IAAK,OAAA,GAAG,GAAG,CAAC,EAAP,CAAO,CAAC,CAAC,CAAC;AAChF,IAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAEpD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,IAAM,OAAO,GAAG,IAAI,yCAAmB,EAAE,CAAC;AAE1C,IAAM,WAAW,GAAG,cAAM,OAAC,6BAAgB,CAAC,GAAG,EAA2C,CAAC,WAAW,EAA5E,CAA4E,CAAC;AAEvG,IAAI,KAAW,CAAC;AAChB,IAAI,SAAe,CAAC;AACpB,IAAI,QAAc,CAAC;AACnB,4EAA4E;AAC5E,IAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;AAC3C,4FAA4F;AAC5F,IAAI,qBAAqB,GAAG,CAAC,CAAC;AAE9B,SAAS,CAAC;;;oBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;gBAAzB,SAAyB,CAAC;gBAC1B,4FAA4F;gBAC5F,6BAA6B;gBAC7B,WAAW,EAAE,CAAC,6CAA6C,CAAC,GAAG;oBAC7D;wBACE,mBAAmB,EAAE,UAAO,MAAc;;gCACxC,qBAAqB,EAAE,CAAC;gCACxB,sBAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAC;;6BACrC;qBACF;iBACF,CAAC;gBACF,2FAA2F;gBAC3F,OAAO,CAAC,SAAS,CAAC,IAAI,yCAAmB,EAAE,CAAC,CAAC;gBACrC,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAA;;gBAAxF,KAAK,GAAG,SAAgF,CAAC;gBAC7E,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,EAAA;;gBAArG,SAAS,GAAG,SAAyF,CAAC;gBAC3F,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,EAAA;;gBAA5F,QAAQ,GAAG,SAAiF,CAAC;gBAC7F,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;;;KACtB,CAAC,CAAC;AAEH,QAAQ,CAAC;;;;gBACP,OAAO,WAAW,EAAE,CAAC,6CAA6C,CAAC,CAAC;gBACpE,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;gBAAxB,SAAwB,CAAC;;;;KAC1B,CAAC,CAAC;AAEH,UAAU,CAAC;IACT,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,qBAAqB,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,IAAM,eAAe,GAAG,UAAO,IAAY;;;oBACzC,qBAAM,IAAI,yBAAW,EAAE,CAAC,UAAU,CAChC,EAAE,IAAI,MAAA,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAU,EACzE,SAAS,CACV,EAAA;oBAHD,sBAAA,SAGC,EAAA;;;KAAA,CAAC;AAEJ,QAAQ,CAAC,6DAA6D,EAAE;IACtE,EAAE,CAAC,0FAA0F,EAAE;;;;wBAChF,qBAAM,eAAe,CAAC,eAAe,CAAC,EAAA;;oBAA7C,IAAI,GAAG,SAAsC;oBAE5B,qBAAM,IAAI,yBAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAA7D,cAAc,GAAG,SAA4C;oBAEnE,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAC1C,MAAM,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;;;;SAC1C,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE;;;;wBAC3E,qBAAM,eAAe,CAAC,mBAAmB,CAAC,EAAA;;oBAAjD,IAAI,GAAG,SAA0C;oBAEvD,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACxB,qBAAM,MAAM,CAAC,IAAI,yBAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAmB,IAAI,CAAC,EAAE,CAAE,CAAC,EAAA;;oBAAlG,SAAkG,CAAC;;;;SACpG,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE;;;;wBACpE,qBAAM,eAAe,CAAC,kBAAkB,CAAC,EAAA;;oBAAhD,IAAI,GAAG,SAAyC;oBACtD,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAE9B,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACF,qBAAM,IAAI,yBAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAA7D,cAAc,GAAG,SAA4C;oBAEnE,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;;;;SAC3C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iGAAiG,EAAE;IAC1G,EAAE,CAAC,0FAA0F,EAAE;;;;wBAChF,qBAAM,eAAe,CAAC,kBAAkB,CAAC,EAAA;;oBAAhD,IAAI,GAAG,SAAyC;oBAEtD,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACxB,qBAAM,MAAM,CAAC,IAAI,yBAAW,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAmB,IAAI,CAAC,EAAE,CAAE,CAAC,EAAA;;oBAAnH,SAAmH,CAAC;oBAEpH,qFAAqF;oBACrF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACrB,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAI,yBAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAnD,kBAAO,SAA4C,EAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;;;;SACzE,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE;;;;wBACxF,qBAAM,eAAe,CAAC,qBAAqB,CAAC,EAAA;;oBAAnD,IAAI,GAAG,SAA4C;oBACzD,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAE9B,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACzB,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAI,yBAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAnD,kBAAO,SAA4C,EAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACxE,qBAAM,MAAM,CAAC,IAAI,yBAAW,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAmB,IAAI,CAAC,EAAE,CAAE,CAAC,EAAA;;oBAAnH,SAAmH,CAAC;oBAEpH,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACrB,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAI,yBAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAnD,kBAAO,SAA4C,EAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;;;;SACzE,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE;;;;wBAChC,qBAAM,eAAe,CAAC,gBAAgB,CAAC,EAAA;;oBAA9C,IAAI,GAAG,SAAuC;oBAEpD,qBAAM,IAAI,yBAAW,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,EAAA;;oBAA7D,SAA6D,CAAC;oBAE9D,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAI,yBAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAnD,kBAAO,SAA4C,EAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;;;;SAC5E,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/FileSharedReachability.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=FileSharedReachability.test.d.ts.map

package/dist/test/FileSharedReachability.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileSharedReachability.test.d.ts","sourceRoot":"","sources":["../../test/FileSharedReachability.test.ts"],"names":[],"mappings":""}

package/dist/test/FileSharedReachability.test.js

@@ -0,0 +1,358 @@
+"use strict";
+var __extends = (this && this.__extends) || (function () {
+    var extendStatics = function (d, b) {
+        extendStatics = Object.setPrototypeOf ||
+            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
+            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
+        return extendStatics(d, b);
+    };
+    return function (d, b) {
+        if (typeof b !== "function" && b !== null)
+            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+        extendStatics(d, b);
+        function __() { this.constructor = d; }
+        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var reflection_1 = require("@proteinjs/reflection");
+var user_1 = require("@proteinjs/user");
+var FileStorage_1 = require("../src/FileStorage");
+var getFile_1 = require("../src/routes/getFile");
+var FileTestEnvironment_1 = require("./FileTestEnvironment");
+/** Every byte value once — a payload that corrupts under any text/base64 mix-up. */
+var rawBytes = Buffer.from(Array.from({ length: 256 }, function (_, i) { return i; }));
+/**
+ * The shared-content file leg (SHARING_EXPANSION §0 found defect / §1 fix shape): `/file/:id`
+ * used the caller's SCOPED row read as its whole access check, so a file embedded in content
+ * shared WITH the caller — a shared thought's media — 404'd for every share recipient. The fix
+ * is the FileReachabilityResolver seam: after the scoped read misses, content packages answer
+ * "can the current user read a row that references this file?" through their own grant-filtered
+ * reads, and only then is the row served via system read.
+ *
+ * This suite proves the SEAM CONTRACT at the route with a stub resolver (content packages sit
+ * above db-file — the real thought-media resolver is integration-tested in thought-server):
+ * a reachable file serves byte-identical to a non-owner, an unreachable one still 404s (the fix
+ * must not over-open), the owner's scoped leg never consults resolvers, and writes stay
+ * owner-scoped.
+ */
+/** In-memory proxy-shape driver (no signed URLs) — the DbFileStorageDriver serving shape. */
+var ProxyDriver = /** @class */ (function () {
+    function ProxyDriver() {
+        this.store = new Map();
+    }
+    ProxyDriver.prototype.createFile = function (file, fileData) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                this.store.set(file.id, Buffer.from(fileData, 'base64'));
+                return [2 /*return*/];
+            });
+        });
+    };
+    ProxyDriver.prototype.getFileData = function (fileId) {
+        return __awaiter(this, void 0, void 0, function () {
+            var data;
+            return __generator(this, function (_a) {
+                data = this.store.get(fileId);
+                if (data === undefined) {
+                    throw new Error("No such object: ".concat(fileId));
+                }
+                return [2 /*return*/, data.toString('base64')];
+            });
+        });
+    };
+    ProxyDriver.prototype.updateFileData = function (fileId, data) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                this.store.set(fileId, Buffer.from(data, 'base64'));
+                return [2 /*return*/];
+            });
+        });
+    };
+    ProxyDriver.prototype.deleteFile = function (fileId) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                this.store.delete(fileId);
+                return [2 /*return*/];
+            });
+        });
+    };
+    return ProxyDriver;
+}());
+/** Proxy driver plus a counting signed-URL mint — the GCS serving shape, minting observable. */
+var SignedUrlDriver = /** @class */ (function (_super) {
+    __extends(SignedUrlDriver, _super);
+    function SignedUrlDriver() {
+        var _this = _super !== null && _super.apply(this, arguments) || this;
+        _this.mintCount = 0;
+        return _this;
+    }
+    SignedUrlDriver.prototype.getSignedUrl = function (fileId) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                this.mintCount++;
+                return [2 /*return*/, "https://signed.test/blob/".concat(fileId, "?sig=test")];
+            });
+        });
+    };
+    return SignedUrlDriver;
+}(ProxyDriver));
+/** Minimal express Response recorder — the route only touches these members. */
+var ResponseRecorder = /** @class */ (function () {
+    function ResponseRecorder() {
+        this.headers = {};
+    }
+    ResponseRecorder.prototype.status = function (code) {
+        this.statusCode = code;
+        return this;
+    };
+    ResponseRecorder.prototype.send = function (body) {
+        this.body = body;
+        return this;
+    };
+    ResponseRecorder.prototype.setHeader = function (name, value) {
+        this.headers[name.toLowerCase()] = value;
+    };
+    ResponseRecorder.prototype.redirect = function (status, url) {
+        this.statusCode = status;
+        this.redirectUrl = url;
+    };
+    return ResponseRecorder;
+}());
+var invokeRoute = function (fileId) { return __awaiter(void 0, void 0, void 0, function () {
+    var response;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                response = new ResponseRecorder();
+                return [4 /*yield*/, getFile_1.getFile.onRequest({ params: { id: fileId }, headers: {} }, response)];
+            case 1:
+                _a.sent();
+                return [2 /*return*/, response];
+        }
+    });
+}); };
+var testEnv = new FileTestEnvironment_1.FileTestEnvironment();
+var objectCache = function () { return reflection_1.SourceRepository.get().objectCache; };
+var owner;
+var recipient;
+/** File ids the stub resolver reports as reachable for the current user. */
+var reachableFileIds = new Set();
+/** How many times the seam was consulted — the owner's scoped leg must never pay for it. */
+var resolverConsultations = 0;
+beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, testEnv.beforeAll()];
+            case 1:
+                _a.sent();
+                // The route gates on UserAuth.isLoggedIn(), which resolves its user repo from the source
+                // repository — seed it (tests don't load the generated source graph) and reset the static cache.
+                objectCache()['@proteinjs/user-auth/AuthenticatedUserRepo'] = [new user_1.UserRepo()];
+                user_1.UserAuth.userRepo = undefined;
+                // The seam under test, stubbed (the real thought-media resolver lives above this package).
+                objectCache()['@proteinjs/db-file/FileReachabilityResolver'] = [
+                    {
+                        canReadViaReference: function (fileId) { return __awaiter(void 0, void 0, void 0, function () {
+                            return __generator(this, function (_a) {
+                                resolverConsultations++;
+                                return [2 /*return*/, reachableFileIds.has(fileId)];
+                            });
+                        }); },
+                    },
+                ];
+                return [4 /*yield*/, testEnv.createUser({ name: 'File owner', email: 'reachability-owner@test.local' })];
+            case 2:
+                owner = _a.sent();
+                return [4 /*yield*/, testEnv.createUser({ name: 'Share recipient', email: 'reachability-recipient@test.local' })];
+            case 3:
+                recipient = _a.sent();
+                testEnv.actAs(owner);
+                return [2 /*return*/];
+        }
+    });
+}); });
+afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                delete objectCache()['@proteinjs/db-file/FileReachabilityResolver'];
+                user_1.UserAuth.userRepo = undefined;
+                return [4 /*yield*/, testEnv.afterAll()];
+            case 1:
+                _a.sent();
+                return [2 /*return*/];
+        }
+    });
+}); });
+beforeEach(function () {
+    reachableFileIds.clear();
+    resolverConsultations = 0;
+    testEnv.actAs(owner);
+});
+var createOwnerFile = function (name, type) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+    switch (_a.label) {
+        case 0: return [4 /*yield*/, new FileStorage_1.FileStorage().createFile({ name: name, type: type, size: rawBytes.length }, rawBytes.toString('base64'))];
+        case 1: return [2 /*return*/, _a.sent()];
+    }
+}); }); };
+describe('shared-content reachability — proxy serving', function () {
+    var driver = new ProxyDriver();
+    beforeAll(function () {
+        testEnv.setDriver(driver);
+    });
+    it("THE DEFECT: a non-owner whom a resolver vouches for is served the owner's file byte-identical", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, response;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('shared-shot.png', 'image/png')];
+                case 1:
+                    file = _a.sent();
+                    reachableFileIds.add(file.id);
+                    testEnv.actAs(recipient);
+                    return [4 /*yield*/, invokeRoute(file.id)];
+                case 2:
+                    response = _a.sent();
+                    expect(response.statusCode).not.toEqual(404);
+                    expect(response.headers['content-type']).toEqual('image/png');
+                    expect(Buffer.isBuffer(response.body)).toBe(true);
+                    expect(Buffer.compare(response.body, rawBytes)).toBe(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('THE OTHER DIRECTION: a non-owner with no reachability still 404s — the fix must not over-open', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, response;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('private-shot.png', 'image/png')];
+                case 1:
+                    file = _a.sent();
+                    testEnv.actAs(recipient);
+                    return [4 /*yield*/, invokeRoute(file.id)];
+                case 2:
+                    response = _a.sent();
+                    expect(response.statusCode).toEqual(404);
+                    expect(response.body).toEqual('File not found');
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('the owner is served by their scoped read alone — resolvers are never consulted', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, response;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('own-shot.png', 'image/png')];
+                case 1:
+                    file = _a.sent();
+                    return [4 /*yield*/, invokeRoute(file.id)];
+                case 2:
+                    response = _a.sent();
+                    expect(Buffer.compare(response.body, rawBytes)).toBe(0);
+                    expect(resolverConsultations).toEqual(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it("reachability widens READS only: a vouched-for non-owner's delete leaves the owner's file intact", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, response;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('undeletable.png', 'image/png')];
+                case 1:
+                    file = _a.sent();
+                    reachableFileIds.add(file.id);
+                    testEnv.actAs(recipient);
+                    return [4 /*yield*/, new FileStorage_1.FileStorage().deleteFile(file.id)];
+                case 2:
+                    _a.sent();
+                    testEnv.actAs(owner);
+                    return [4 /*yield*/, invokeRoute(file.id)];
+                case 3:
+                    response = _a.sent();
+                    expect(Buffer.compare(response.body, rawBytes)).toBe(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+describe('shared-content reachability — signed-URL serving', function () {
+    var driver = new SignedUrlDriver();
+    beforeAll(function () {
+        testEnv.setDriver(driver);
+    });
+    it('302-redirects a vouched-for non-owner to a signed URL (the GCS prod shape)', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, response;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('shared-clip.mp4', 'video/mp4')];
+                case 1:
+                    file = _a.sent();
+                    reachableFileIds.add(file.id);
+                    testEnv.actAs(recipient);
+                    return [4 /*yield*/, invokeRoute(file.id)];
+                case 2:
+                    response = _a.sent();
+                    expect(response.statusCode).toEqual(302);
+                    expect(response.redirectUrl).toEqual("https://signed.test/blob/".concat(file.id, "?sig=test"));
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('404s an unreachable non-owner WITHOUT minting a signed URL (a signed URL is a bearer capability)', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var file, mintsBefore, response;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createOwnerFile('private-clip.mp4', 'video/mp4')];
+                case 1:
+                    file = _a.sent();
+                    mintsBefore = driver.mintCount;
+                    testEnv.actAs(recipient);
+                    return [4 /*yield*/, invokeRoute(file.id)];
+                case 2:
+                    response = _a.sent();
+                    expect(response.statusCode).toEqual(404);
+                    expect(response.redirectUrl).toBeUndefined();
+                    expect(driver.mintCount).toEqual(mintsBefore);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+//# sourceMappingURL=FileSharedReachability.test.js.map

package/dist/test/FileSharedReachability.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileSharedReachability.test.js","sourceRoot":"","sources":["../../test/FileSharedReachability.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oDAAyD;AACzD,wCAA2D;AAE3D,kDAAiD;AAEjD,iDAAgD;AAChD,6DAA4D;AAE5D,oFAAoF;AACpF,IAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,UAAC,CAAC,EAAE,CAAC,IAAK,OAAA,CAAC,EAAD,CAAC,CAAC,CAAC,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AAEH,6FAA6F;AAC7F;IAAA;QACW,UAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAqB7C,CAAC;IAnBO,gCAAU,GAAhB,UAAiB,IAAU,EAAE,QAAgB;;;gBAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;;;;KAC1D;IAEK,iCAAW,GAAjB,UAAkB,MAAc;;;;gBACxB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,IAAI,KAAK,SAAS,EAAE;oBACtB,MAAM,IAAI,KAAK,CAAC,0BAAmB,MAAM,CAAE,CAAC,CAAC;iBAC9C;gBACD,sBAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC;;;KAChC;IAEK,oCAAc,GAApB,UAAqB,MAAc,EAAE,IAAY;;;gBAC/C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;;;;KACrD;IAEK,gCAAU,GAAhB,UAAiB,MAAc;;;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;;;KAC3B;IACH,kBAAC;AAAD,CAAC,AAtBD,IAsBC;AAED,gGAAgG;AAChG;IAA8B,mCAAW;IAAzC;QAAA,qEAOC;QANC,eAAS,GAAG,CAAC,CAAC;;IAMhB,CAAC;IAJO,sCAAY,GAAlB,UAAmB,MAAc;;;gBAC/B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,sBAAO,mCAA4B,MAAM,cAAW,EAAC;;;KACtD;IACH,sBAAC;AAAD,CAAC,AAPD,CAA8B,WAAW,GAOxC;AAED,gFAAgF;AAChF;IAAA;QAIE,YAAO,GAA2B,EAAE,CAAC;IAoBvC,CAAC;IAlBC,iCAAM,GAAN,UAAO,IAAY;QACjB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+BAAI,GAAJ,UAAK,IAAa;QAChB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oCAAS,GAAT,UAAU,IAAY,EAAE,KAAa;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;IAC3C,CAAC;IAED,mCAAQ,GAAR,UAAS,MAAc,EAAE,GAAW;QAClC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;IACzB,CAAC;IACH,uBAAC;AAAD,CAAC,AAxBD,IAwBC;AAKD,IAAM,WAAW,GAAG,UAAO,MAAc;;;;;gBACjC,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;gBACxC,qBAAM,iBAAO,CAAC,SAAS,CACrB,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAA6B,EAClE,QAAoC,CACrC,EAAA;;gBAHD,SAGC,CAAC;gBACF,sBAAO,QAAQ,EAAC;;;KACjB,CAAC;AAEF,IAAM,OAAO,GAAG,IAAI,yCAAmB,EAAE,CAAC;AAG1C,IAAM,WAAW,GAAG,cAAM,OAAC,6BAAgB,CAAC,GAAG,EAA2C,CAAC,WAAW,EAA5E,CAA4E,CAAC;AAEvG,IAAI,KAAW,CAAC;AAChB,IAAI,SAAe,CAAC;AACpB,4EAA4E;AAC5E,IAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;AAC3C,4FAA4F;AAC5F,IAAI,qBAAqB,GAAG,CAAC,CAAC;AAE9B,SAAS,CAAC;;;oBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;gBAAzB,SAAyB,CAAC;gBAC1B,yFAAyF;gBACzF,iGAAiG;gBACjG,WAAW,EAAE,CAAC,4CAA4C,CAAC,GAAG,CAAC,IAAI,eAAQ,EAAE,CAAC,CAAC;gBAC9E,eAAyC,CAAC,QAAQ,GAAG,SAAS,CAAC;gBAChE,2FAA2F;gBAC3F,WAAW,EAAE,CAAC,6CAA6C,CAAC,GAAG;oBAC7D;wBACE,mBAAmB,EAAE,UAAO,MAAc;;gCACxC,qBAAqB,EAAE,CAAC;gCACxB,sBAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAC;;6BACrC;qBACF;iBACF,CAAC;gBACM,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,EAAA;;gBAAhG,KAAK,GAAG,SAAwF,CAAC;gBACrF,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,EAAA;;gBAA7G,SAAS,GAAG,SAAiG,CAAC;gBAC9G,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;;;KACtB,CAAC,CAAC;AAEH,QAAQ,CAAC;;;;gBACP,OAAO,WAAW,EAAE,CAAC,6CAA6C,CAAC,CAAC;gBACnE,eAAyC,CAAC,QAAQ,GAAG,SAAS,CAAC;gBAChE,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;gBAAxB,SAAwB,CAAC;;;;KAC1B,CAAC,CAAC;AAEH,UAAU,CAAC;IACT,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,qBAAqB,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,IAAM,eAAe,GAAG,UAAO,IAAY,EAAE,IAAY;;gBACvD,qBAAM,IAAI,yBAAW,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,MAAA,EAAE,IAAI,MAAA,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAA;gBAA9G,sBAAA,SAA8G,EAAA;;SAAA,CAAC;AAEjH,QAAQ,CAAC,6CAA6C,EAAE;IACtD,IAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;IAEjC,SAAS,CAAC;QACR,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE;;;;wBACrF,qBAAM,eAAe,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAA;;oBAA5D,IAAI,GAAG,SAAqD;oBAClE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAE9B,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACR,qBAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAArC,QAAQ,GAAG,SAA0B;oBAE3C,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC7C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;oBAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;;;SACnE,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE;;;;wBACrF,qBAAM,eAAe,CAAC,kBAAkB,EAAE,WAAW,CAAC,EAAA;;oBAA7D,IAAI,GAAG,SAAsD;oBAEnE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACR,qBAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAArC,QAAQ,GAAG,SAA0B;oBAE3C,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;;;;SACjD,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE;;;;wBACtE,qBAAM,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,EAAA;;oBAAzD,IAAI,GAAG,SAAkD;oBAE9C,qBAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAArC,QAAQ,GAAG,SAA0B;oBAE3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClE,MAAM,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;;;;SAC1C,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE;;;;wBACvF,qBAAM,eAAe,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAA;;oBAA5D,IAAI,GAAG,SAAqD;oBAClE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAE9B,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACzB,qBAAM,IAAI,yBAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAA3C,SAA2C,CAAC;oBAE5C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACJ,qBAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAArC,QAAQ,GAAG,SAA0B;oBAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;;;SACnE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kDAAkD,EAAE;IAC3D,IAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IAErC,SAAS,CAAC;QACR,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE;;;;wBAClE,qBAAM,eAAe,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAA;;oBAA5D,IAAI,GAAG,SAAqD;oBAClE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAE9B,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACR,qBAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAArC,QAAQ,GAAG,SAA0B;oBAE3C,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACzC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,mCAA4B,IAAI,CAAC,EAAE,cAAW,CAAC,CAAC;;;;SACtF,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE;;;;wBACxF,qBAAM,eAAe,CAAC,kBAAkB,EAAE,WAAW,CAAC,EAAA;;oBAA7D,IAAI,GAAG,SAAsD;oBAC7D,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC;oBAErC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACR,qBAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAArC,QAAQ,GAAG,SAA0B;oBAE3C,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACzC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;oBAC7C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;;;;SAC/C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/FileTestEnvironment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileTestEnvironment.d.ts","sourceRoot":"","sources":["../../test/FileTestEnvironment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAI7D,OAAO,EAAwB,IAAI,EAAY,MAAM,iBAAiB,CAAC;AAGvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAqB7D;;;;;GAKG;AACH,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,aAAa,gBAInB;IACH,OAAO,CAAC,aAAa,CAAwC;IAC7D,OAAO,CAAC,QAAQ,CAAkB;IAE5B,SAAS;IA0BT,QAAQ;IAMd;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,iBAAiB;IAKnC,mDAAmD;IAC7C,UAAU,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxF,mGAAmG;IACnG,KAAK,CAAC,IAAI,EAAE,IAAI;IAIhB,OAAO,CAAC,WAAW;YAIL,UAAU;YAOV,UAAU;CAKzB"}
+{"version":3,"file":"FileTestEnvironment.d.ts","sourceRoot":"","sources":["../../test/FileTestEnvironment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAI7D,OAAO,EAAwB,IAAI,EAAY,MAAM,iBAAiB,CAAC;AAGvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAqB7D;;;;;GAKG;AACH,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,aAAa,gBAInB;IACH,OAAO,CAAC,aAAa,CAAwC;IAC7D,OAAO,CAAC,QAAQ,CAAkB;IAE5B,SAAS;IA8BT,QAAQ;IAMd;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,iBAAiB;IAKnC,mDAAmD;IAC7C,UAAU,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxF,mGAAmG;IACnG,KAAK,CAAC,IAAI,EAAE,IAAI;IAIhB,OAAO,CAAC,WAAW;YAIL,UAAU;YAOV,UAAU;CAKzB"}