@rehearsal-labs/retest 0.2.0 → 0.3.0

package/dist/runner/test-file-process.d.ts

@@ -34,6 +34,14 @@ export type SpawnOptions = {
     /** The process's whole environment, in place of this process's own. The hidden variables are left out of it too. */
     environment?: Readonly<Record<string, string>>;
 };
+/**
+ * The environment a test file's process starts with: this process's, or `environment`, without the hidden variables. On
+ * Windows NODE_COMPILE_CACHE is left out too: Node turns the compile cache on as it starts when that variable is set, and
+ * the test file's process keeps the cache off there (`child.ts`).
+ *
+ * @example testFileEnvironment({ environment: { NODE_COMPILE_CACHE: 'C:\\cache' } }, 'win32') // {}
+ */
+export declare function testFileEnvironment(options: Pick<SpawnOptions, 'environment' | 'hiddenVariables'>, platform?: NodeJS.Platform): Record<string, string | undefined>;
 /**
  * The process one test file runs in. The parent owns it: it is killed when the run gives up on it, and,
  * as a last resort, when the parent process exits.

package/dist/runner/test-file-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-file-process.d.ts","sourceRoot":"","sources":["../../src/runner/test-file-process.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAS5D,2GAA2G;AAC3G,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC,CAAA;AAE9E,4GAA4G;AAC5G,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAA;AAEvC;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAA;AAElE,MAAM,MAAM,YAAY,GAAG;IACzB,6GAA6G;IAC7G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9D,8FAA8F;IAC9F,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,oHAAoH;IACpH,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC/C,CAAA;AAaD;;;GAGG;AACH,qBAAa,eAAe;;IAQ1B,OAAO;IA0BP;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,GAAE,YAAiB,GAAG,eAAe;IAiBzD,IAAI,GAAG,IAAI,MAAM,GAAG,SAAS,CAE5B;IAED,IAAI,KAAK,IAAI,OAAO,CAEnB;IAED,0CAA0C;IAC1C,IAAI,IAAI,IAAI,WAAW,GAAG,SAAS,CAElC;IAED,yCAAyC;IACzC,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,4GAA4G;IAC5G,IAAI,MAAM,IAAI,SAAS,OAAO,EAAE,CAE/B;IAED,yFAAyF;IACzF,IAAI,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAEjC;IAED,oEAAoE;IACpE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,IAAI;IAInE,6GAA6G;IAC7G,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAOlC,4DAA4D;IAC5D,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAQ5B,+EAA+E;IACzE,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAmCrD;AAED,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAQxE"}
+{"version":3,"file":"test-file-process.d.ts","sourceRoot":"","sources":["../../src/runner/test-file-process.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAY5D,2GAA2G;AAC3G,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC,CAAA;AAE9E,4GAA4G;AAC5G,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAA;AAEvC;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAA;AAElE,MAAM,MAAM,YAAY,GAAG;IACzB,6GAA6G;IAC7G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9D,8FAA8F;IAC9F,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,oHAAoH;IACpH,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC/C,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,iBAAiB,CAAC,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAGpL;AAaD;;;GAGG;AACH,qBAAa,eAAe;;IAQ1B,OAAO;IA0BP;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,GAAE,YAAiB,GAAG,eAAe;IAyBzD,IAAI,GAAG,IAAI,MAAM,GAAG,SAAS,CAE5B;IAED,IAAI,KAAK,IAAI,OAAO,CAEnB;IAED,0CAA0C;IAC1C,IAAI,IAAI,IAAI,WAAW,GAAG,SAAS,CAElC;IAED,yCAAyC;IACzC,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,4GAA4G;IAC5G,IAAI,MAAM,IAAI,SAAS,OAAO,EAAE,CAE/B;IAED,yFAAyF;IACzF,IAAI,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAEjC;IAED,oEAAoE;IACpE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,IAAI;IAInE,6GAA6G;IAC7G,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAOlC,4DAA4D;IAC5D,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAQ5B,+EAA+E;IACzE,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAmCrD;AAED,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAQxE"}

package/dist/runner/test-file-process.js

@@ -3,8 +3,22 @@ import { extname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { testProcessFlags } from "../loader/node.js";
 import { playwrightArgument } from "../loader/resolve.js";
+import { failure } from "../protocol/failures.js";
 import { childMessageSchema } from "../protocol/messages.js";
 import { parse } from "../protocol/schema.js";
+import { withoutVariables } from "../shared/environment.js";
+import { holdOwnChild, prepareOwnedLaunch } from "../shared/process-system.js";
+/**
+ * The environment a test file's process starts with: this process's, or `environment`, without the hidden variables. On
+ * Windows NODE_COMPILE_CACHE is left out too: Node turns the compile cache on as it starts when that variable is set, and
+ * the test file's process keeps the cache off there (`child.ts`).
+ *
+ * @example testFileEnvironment({ environment: { NODE_COMPILE_CACHE: 'C:\\cache' } }, 'win32') // {}
+ */
+export function testFileEnvironment(options, platform = process.platform) {
+    const hidden = platform === 'win32' ? [...(options.hiddenVariables ?? []), 'NODE_COMPILE_CACHE'] : options.hiddenVariables;
+    return withoutVariables(options.environment ?? process.env, hidden, platform);
+}
 // The entry beside this module: child.ts when running from source, child.js once built.
 const childEntry = fileURLToPath(new URL(`./child${extname(fileURLToPath(import.meta.url))}`, import.meta.url));
 const liveChildren = new Set();
@@ -56,19 +70,28 @@ export class TestFileProcess {
      */
     static spawn(options = {}) {
         const output = options.onOutput;
-        const hidden = new Set(options.hiddenVariables);
+        // On Windows the runner is held before its first test file's process starts, and each one is held as a launch of
+        // its own, so whatever a test starts below it is held too, and ends with Retest.
+        prepareOwnedLaunch();
         const child = fork(childEntry, options.playwright === true ? [playwrightArgument] : [], {
             execArgv: [...conditionArguments(process.execArgv), ...testProcessFlags],
-            env: Object.fromEntries(Object.entries(options.environment ?? process.env).filter(([name]) => !hidden.has(name))),
+            env: testFileEnvironment(options),
             serialization: 'json',
             stdio: output === undefined ? ['ignore', 'ignore', 'ignore', 'ipc'] : ['ignore', 'pipe', 'pipe', 'ipc'],
+            // On Windows a console of its own with no window, so a key pressed on Retest's console stops the run as Retest
+            // decides, rather than each test file's process at once; Node ignores it elsewhere.
+            windowsHide: true,
         });
         own(child);
+        const holding = holdOwnChild(child);
         if (output !== undefined) {
             child.stdout?.setEncoding('utf8').on('data', (text) => output('stdout', text));
             child.stderr?.setEncoding('utf8').on('data', (text) => output('stderr', text));
         }
-        return new TestFileProcess(child);
+        const spawned = new TestFileProcess(child);
+        for (const problem of holding)
+            spawned.#errors.push(failure('setup_failed', `Retest could not hold the test file's process: ${problem}`));
+        return spawned;
     }
     get pid() {
         return this.#child.pid;

package/dist/runner/test-pages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-pages.d.ts","sourceRoot":"","sources":["../../src/runner/test-pages.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACvH,OAAO,KAAK,EAAe,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEtD,OAAO,KAAK,EAAE,OAAO,EAAgB,MAAM,yBAAyB,CAAA;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAQ/C;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,eAAe,CAAC;IAAC,KAAK,CAAC,EAAE,IAAI,CAAA;CAAE,CAAA;AAErI,kDAAkD;AAClD,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,QAAQ,CAAA;IACf,QAAQ,EAAE,QAAQ,CAAA;IAClB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,YAAY,EAAE,MAAM,OAAO,GAAG,SAAS,CAAA;IACvC,SAAS,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAA;IAC7C,yFAAyF;IACzF,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;IACzC,kFAAkF;IAClF,KAAK,EAAE,OAAO,CAAA;IACd,sCAAsC;IACtC,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,CAAA;IAC/B,wGAAwG;IACxG,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAA;CACpB,CAAA;AAED,+HAA+H;AAC/H,MAAM,MAAM,UAAU,GAAG;IAAE,MAAM,CAAC,OAAO,EAAE,YAAY,GAAG,aAAa,CAAC;IAAC,KAAK,IAAI,MAAM,CAAA;CAAE,CAAA;AAE1F,gGAAgG;AAChG,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAehI;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAI1G;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAiBnJ;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS,CAIxF;AAED,uHAAuH;AACvH,wBAAsB,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAYvG"}
+{"version":3,"file":"test-pages.d.ts","sourceRoot":"","sources":["../../src/runner/test-pages.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACvH,OAAO,KAAK,EAAe,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEtD,OAAO,KAAK,EAAE,OAAO,EAAgB,MAAM,yBAAyB,CAAA;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAS/C;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,eAAe,CAAC;IAAC,KAAK,CAAC,EAAE,IAAI,CAAA;CAAE,CAAA;AAErI,kDAAkD;AAClD,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,QAAQ,CAAA;IACf,QAAQ,EAAE,QAAQ,CAAA;IAClB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,YAAY,EAAE,MAAM,OAAO,GAAG,SAAS,CAAA;IACvC,SAAS,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAA;IAC7C,yFAAyF;IACzF,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;IACzC,kFAAkF;IAClF,KAAK,EAAE,OAAO,CAAA;IACd,sCAAsC;IACtC,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,CAAA;IAC/B,wGAAwG;IACxG,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAA;CACpB,CAAA;AAED,+HAA+H;AAC/H,MAAM,MAAM,UAAU,GAAG;IAAE,MAAM,CAAC,OAAO,EAAE,YAAY,GAAG,aAAa,CAAC;IAAC,KAAK,IAAI,MAAM,CAAA;CAAE,CAAA;AAE1F,gGAAgG;AAChG,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAehI;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAI1G;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAmBnJ;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS,CAIxF;AAED,uHAAuH;AACvH,wBAAsB,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAYvG"}

package/dist/runner/test-pages.js

@@ -3,6 +3,7 @@ import { NativeError } from "../native/session.js";
 import { BrowserError } from "../browser/browser-error.js";
 import { errorMessage, failure } from "../protocol/failures.js";
 import { failureScreenshotFile, stateFile } from "../protocol/run-folder.js";
+import { PrivateFolderError } from "../shared/private-file.js";
 import { bounded } from "./bounded.js";
 import { abortGraceMs } from "./running-test.js";
 import { timerMs } from "./timer.js";
@@ -54,10 +55,12 @@ export async function saveState(context, { app, page, session }, state, target)
     if (captured.status === 'failed')
         return unsaved(errorMessage(captured.error));
     try {
-        context.store.writeState(stateFile(state, target), captured.value);
+        await context.store.writeState(stateFile(state, target), captured.value);
     }
     catch (error) {
-        return unsaved(errorMessage(error));
+        // A folder Windows would not keep private says so in a sentence; which tool refused, and how, is its detail.
+        const unsavedState = unsaved(errorMessage(error));
+        return error instanceof PrivateFolderError ? { ...unsavedState, details: { cause: error.detail } } : unsavedState;
     }
     context.emit({ type: 'state.saved', testId: context.testId, attemptId: context.attemptId, state, app, target, sessionId: session.sessionId });
     return undefined;

package/dist/shared/environment.d.ts

@@ -0,0 +1,17 @@
+/**
+ * An environment without the variables a process must not see, such as the ones secrets and judges read. On Windows a
+ * variable's name is one name whatever its case, so `Path` and `PATH` are the same variable there, and a hidden name
+ * hides it in every case; elsewhere names are compared exactly, as the system compares them.
+ *
+ * @example withoutVariables(process.env, ['RETEST_PASSWORD']) // process.env without RETEST_PASSWORD
+ */
+export declare function withoutVariables(environment: Readonly<Record<string, string | undefined>>, hidden: Iterable<string> | undefined, platform?: NodeJS.Platform): Record<string, string | undefined>;
+/**
+ * A variable name as Windows compares it: each character in its upper case, one character for one, as the system
+ * compares names character by character. A character whose upper case is longer, such as ß (SS), stays as it is, so
+ * `straße` and `STRASSE` stay two names.
+ *
+ * @example foldCase('Path') // 'PATH'
+ */
+export declare function foldCase(name: string): string;
+//# sourceMappingURL=environment.d.ts.map

package/dist/shared/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/shared/environment.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACzD,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,EACpC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAIpC;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO7C"}

package/dist/shared/environment.js

@@ -0,0 +1,27 @@
+/**
+ * An environment without the variables a process must not see, such as the ones secrets and judges read. On Windows a
+ * variable's name is one name whatever its case, so `Path` and `PATH` are the same variable there, and a hidden name
+ * hides it in every case; elsewhere names are compared exactly, as the system compares them.
+ *
+ * @example withoutVariables(process.env, ['RETEST_PASSWORD']) // process.env without RETEST_PASSWORD
+ */
+export function withoutVariables(environment, hidden, platform = process.platform) {
+    const named = platform === 'win32' ? foldCase : (name) => name;
+    const hide = new Set([...(hidden ?? [])].map(named));
+    return Object.fromEntries(Object.entries(environment).filter(([name]) => !hide.has(named(name))));
+}
+/**
+ * A variable name as Windows compares it: each character in its upper case, one character for one, as the system
+ * compares names character by character. A character whose upper case is longer, such as ß (SS), stays as it is, so
+ * `straße` and `STRASSE` stay two names.
+ *
+ * @example foldCase('Path') // 'PATH'
+ */
+export function foldCase(name) {
+    let folded = '';
+    for (const character of name) {
+        const upper = character.toUpperCase();
+        folded += [...upper].length === 1 ? upper : character;
+    }
+    return folded;
+}

package/dist/shared/metadata-process-worker.js

@@ -1,10 +1,12 @@
 import { spawn } from 'node:child_process';
 import { performance } from 'node:perf_hooks';
 import { parentPort } from 'node:worker_threads';
-import { metadataAbandoned, metadataComplete, metadataFailure, metadataPending, metadataRunning, metadataSuccess } from "./metadata-process.js";
-// Children whose query failed, until each one's own exit is seen; none is ever signalled. A stuck one fails only its own
-// query, and queries in flight at once are not counted, but while this many are outstanding later queries are refused, so
-// stuck children cannot pile up.
+import { errorCode } from "./error-code.js";
+import { metadataAbandoned, metadataComplete, metadataDeadlineVariable, metadataFailure, metadataPending, metadataRunning, metadataSuccess } from "./metadata-process.js";
+import { launchesHeldByJob } from "./process-system.js";
+// Children whose query failed, until each one's own exit is seen. On macOS and Linux none is ever signalled. A stuck one
+// fails only its own query, and queries in flight at once are not counted, but while this many are outstanding later
+// queries are refused, so stuck children cannot pile up.
 const unresolved = new Set();
 const unresolvedLimit = 4;
 parentPort?.on('message', (request) => {
@@ -25,7 +27,7 @@ parentPort?.on('message', (request) => {
     }
     let child;
     try {
-        child = spawn(request.command, request.args, { detached: true, stdio: ['ignore', 'pipe', 'pipe'], env: { ...request.environment, TZ: 'UTC0' } });
+        child = spawn(request.command, request.args, { detached: true, stdio: ['ignore', 'pipe', 'pipe'], env: { ...request.environment, TZ: 'UTC0', [metadataDeadlineVariable]: `${Math.floor(performance.timeOrigin + deadline)}` } });
     }
     catch {
         finish(control, output, metadataFailure, 'The metadata process could not start.');
@@ -51,6 +53,10 @@ parentPort?.on('message', (request) => {
         settled = true;
         clearTimeout(timer);
         stopReading();
+        // On Windows a query is a run of retest-supervisor, which may still be making or filling a job. One given up on is
+        // ended, through Node's own handle on it, before the failure is told, so no job appears after its caller moved on.
+        if (launchesHeldByJob && !closed)
+            child.kill();
         if (!closed)
             unresolved.add(child);
         finish(control, output, metadataFailure, message);
@@ -81,10 +87,12 @@ parentPort?.on('message', (request) => {
     child.stderr?.on('data', (chunk) => { read(chunk, false); });
     child.stdout?.on('error', () => { fail('The metadata process output could not be read.'); });
     child.stderr?.on('error', () => { fail('The metadata process output could not be read.'); });
-    child.on('error', () => {
+    child.on('error', (error) => {
         if (child.pid === undefined)
             release();
-        fail('The metadata process could not run.');
+        // The system's code says why, such as a program that is gone or a system out of room for another process.
+        const code = errorCode(error);
+        fail(code === undefined ? 'The metadata process could not run.' : `The metadata process could not run (${code}).`);
     });
     child.once('close', (code, signal) => {
         release();

package/dist/shared/metadata-process.d.ts

@@ -25,6 +25,11 @@ export type MetadataProcessRequest = {
     readonly output: SharedArrayBuffer;
 };
 export declare const metadataOutputLimit: number;
+/**
+ * The variable each metadata process finds the time its query is given up at in, as milliseconds since the epoch, for a
+ * program that must change nothing once its answer can no longer be heard, as the stand-in supervisor the tests run.
+ */
+export declare const metadataDeadlineVariable = "RETEST_METADATA_DEADLINE_MS";
 /**
  * The bound a whole process table is read under. A `ps -ww` table passed 4 MiB on a busy Mac (4.53 MB with about 3,600
  * processes), and a table refused for its size leaves every ownership decision without a reading, so nothing could be

package/dist/shared/metadata-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metadata-process.d.ts","sourceRoot":"","sources":["../../src/shared/metadata-process.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAIvD,sFAAsF;AACtF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,sGAAsG;IACtG,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IACxC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED,yFAAyF;AACzF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,sGAAsG;IACtG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CACnC,CAAA;AAED,eAAO,MAAM,mBAAmB,EAAE,MAAwB,CAAA;AAC1D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAyB,CAAA;AAC/D,eAAO,MAAM,eAAe,EAAE,MAAU,CAAA;AACxC,eAAO,MAAM,eAAe,EAAE,MAAU,CAAA;AACxC,eAAO,MAAM,gBAAgB,EAAE,MAAU,CAAA;AACzC,eAAO,MAAM,iBAAiB,EAAE,MAAU,CAAA;AAC1C,kHAAkH;AAClH,eAAO,MAAM,mBAAmB,EAAE,MAAU,CAAA;AAC5C,eAAO,MAAM,eAAe,EAAE,MAAU,CAAA;AACxC,eAAO,MAAM,eAAe,EAAE,MAAU,CAAA;AAaxC;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAsB3E;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B/F;AAuFD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,IAAI,CAQ7D"}
+{"version":3,"file":"metadata-process.d.ts","sourceRoot":"","sources":["../../src/shared/metadata-process.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAIvD,sFAAsF;AACtF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,sGAAsG;IACtG,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IACxC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED,yFAAyF;AACzF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,sGAAsG;IACtG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CACnC,CAAA;AAED,eAAO,MAAM,mBAAmB,EAAE,MAAwB,CAAA;AAC1D;;;GAGG;AACH,eAAO,MAAM,wBAAwB,gCAAgC,CAAA;AACrE;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAyB,CAAA;AAC/D,eAAO,MAAM,eAAe,EAAE,MAAU,CAAA;AACxC,eAAO,MAAM,eAAe,EAAE,MAAU,CAAA;AACxC,eAAO,MAAM,gBAAgB,EAAE,MAAU,CAAA;AACzC,eAAO,MAAM,iBAAiB,EAAE,MAAU,CAAA;AAC1C,kHAAkH;AAClH,eAAO,MAAM,mBAAmB,EAAE,MAAU,CAAA;AAC5C,eAAO,MAAM,eAAe,EAAE,MAAU,CAAA;AACxC,eAAO,MAAM,eAAe,EAAE,MAAU,CAAA;AAoBxC;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAsB3E;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B/F;AAmGD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,IAAI,CAQ7D"}

package/dist/shared/metadata-process.js

@@ -1,6 +1,11 @@
 import { performance } from 'node:perf_hooks';
 import { Worker } from 'node:worker_threads';
 export const metadataOutputLimit = 4 * 1024 * 1024;
+/**
+ * The variable each metadata process finds the time its query is given up at in, as milliseconds since the epoch, for a
+ * program that must change nothing once its answer can no longer be heard, as the stand-in supervisor the tests run.
+ */
+export const metadataDeadlineVariable = 'RETEST_METADATA_DEADLINE_MS';
 /**
  * The bound a whole process table is read under. A `ps -ww` table passed 4 MiB on a busy Mac (4.53 MB with about 3,600
  * processes), and a table refused for its size leaves every ownership decision without a reading, so nothing could be
@@ -18,6 +23,9 @@ export const metadataSuccess = 0;
 export const metadataFailure = 1;
 const queryLimitMs = 5000;
 const workerAllowanceMs = 1000;
+// How many fresh workers one query is asked of after workers it was posted to ended by themselves before answering
+// anything, as one whose module cannot load does, which would otherwise be replaced as fast as each one ends.
+const workerRetries = 2;
 // One spare of each production capacity. Only a completed query can return its buffer: an abandoned worker may
 // still be writing, and a concurrent query must hold a different buffer until its completion signal is consumed.
 const spareOutputs = new Map();
@@ -25,6 +33,10 @@ const spareOutputs = new Map();
 // leaving each to wait out its whole bound for an answer that cannot come.
 const inFlight = new Set();
 let bridge;
+// Workers that answered a query, and workers ended here for a query other than the one asking again; an ending of
+// either says nothing against the next worker.
+const answered = new WeakSet();
+const endedForAnother = new WeakSet();
 let workerModule = new URL(import.meta.url.endsWith('.ts') ? './metadata-process-worker.ts' : './metadata-process-worker.js', import.meta.url);
 /**
  * A synchronous bridge for fresh ownership readings, including exit hooks. The worker uses an asynchronous child
@@ -43,7 +55,7 @@ export function readMetadataProcess(options) {
                 return answer(query);
             if (state === metadataWorkerEnded) {
                 settle(query);
-                query = submit(options);
+                query = askAgain(query, options);
                 continue;
             }
             const remaining = query.deadline - performance.now();
@@ -81,7 +93,7 @@ export async function readMetadataProcessAsync(options) {
                 return answer(query);
             if (state === metadataWorkerEnded) {
                 settle(query);
-                query = submit(options);
+                query = askAgain(query, options);
                 continue;
             }
             const remaining = query.deadline - performance.now();
@@ -107,7 +119,18 @@ function checkCaller(query, deadline) {
     abandoned(query);
     throw new Error('The metadata query was not confirmed before its caller deadline ended or was cancelled.');
 }
-function submit(options) {
+// A query whose worker ended is asked again of a fresh worker, within its own caller's deadline. Only a worker that
+// ended by itself before it answered anything counts towards the query's few retries; a worker ended for another
+// query, or one that had answered, is replaced as before.
+function askAgain(query, options) {
+    const broken = !answered.has(query.worker) && !endedForAnother.has(query.worker);
+    if (!broken)
+        return submit(options, query.retries);
+    if (query.retries >= workerRetries)
+        throw new Error('The metadata worker ended before it answered the query.');
+    return submit(options, query.retries + 1);
+}
+function submit(options, retries = 0) {
     if (options.deadline?.signal?.aborted === true || options.deadline?.reached === true)
         throw new Error('The metadata query was not started because its caller deadline ended or was cancelled.');
     const timeoutMs = options.timeoutMs ?? queryLimitMs;
@@ -134,7 +157,7 @@ function submit(options) {
         discardWorker(worker);
         throw new Error('The metadata worker could not receive the query.');
     }
-    const query = { worker, control, output, deadline: Math.min(performance.now() + timeoutMs + workerAllowanceMs, request.deadline === undefined ? Infinity : request.deadline - performance.timeOrigin) };
+    const query = { worker, control, output, deadline: Math.min(performance.now() + timeoutMs + workerAllowanceMs, request.deadline === undefined ? Infinity : request.deadline - performance.timeOrigin), retries };
     inFlight.add(query);
     return query;
 }
@@ -163,6 +186,7 @@ function abandoned(query) {
             return false;
         if (Atomics.compareExchange(query.control, 0, latest, metadataAbandoned) !== latest)
             continue;
+        endedForAnother.add(query.worker);
         discardWorker(query.worker);
         return true;
     }
@@ -177,6 +201,7 @@ function releaseOutput(query) {
         spareOutputs.set(capacity, query.output);
 }
 function answer(query) {
+    answered.add(query.worker);
     const length = Atomics.load(query.control, 2);
     if (length < 0 || length > query.output.byteLength) {
         discardWorker(query.worker);
@@ -203,11 +228,11 @@ export function useMetadataWorkerModule(file) {
     const previous = workerModule;
     workerModule = file;
     if (bridge !== undefined)
-        discardWorker(bridge);
+        retire(bridge);
     return () => {
         workerModule = previous;
         if (bridge !== undefined)
-            discardWorker(bridge);
+            retire(bridge);
     };
 }
 function metadataWorker() {
@@ -234,6 +259,11 @@ function metadataWorker() {
     bridge = worker;
     return worker;
 }
+// A worker set aside for a module swapped in, which says nothing against the worker after it.
+function retire(worker) {
+    endedForAnother.add(worker);
+    discardWorker(worker);
+}
 // The query that met the failure reports it; the next one starts a fresh worker, and the others it held are asked again.
 function discardWorker(worker) {
     if (bridge === worker)

package/dist/shared/posix-path.d.ts

@@ -5,4 +5,16 @@
  * @example relativePosixPath('/work', '/work/tests/tasks.retest.ts') // 'tests/tasks.retest.ts'
  */
 export declare function relativePosixPath(from: string, to: string): string;
+/**
+ * A path with forward slashes on every platform, as a record stores it, so a run on macOS and one on Windows read alike.
+ *
+ * @example posixPath('C:\\work\\.data\\desk') // 'C:/work/.data/desk' on Windows; a POSIX path is unchanged
+ */
+export declare function posixPath(path: string): string;
+/**
+ * A path a record stores, as this platform writes it, for a person.
+ *
+ * @example platformPath('C:/work/.data/desk') // 'C:\\work\\.data\\desk' on Windows; unchanged on macOS and Linux
+ */
+export declare function platformPath(path: string): string;
 //# sourceMappingURL=posix-path.d.ts.map

package/dist/shared/posix-path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"posix-path.d.ts","sourceRoot":"","sources":["../../src/shared/posix-path.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAElE"}
+{"version":3,"file":"posix-path.d.ts","sourceRoot":"","sources":["../../src/shared/posix-path.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD"}

package/dist/shared/posix-path.js

@@ -8,3 +8,19 @@ import { relative, sep } from 'node:path';
 export function relativePosixPath(from, to) {
     return relative(from, to).split(sep).join('/');
 }
+/**
+ * A path with forward slashes on every platform, as a record stores it, so a run on macOS and one on Windows read alike.
+ *
+ * @example posixPath('C:\\work\\.data\\desk') // 'C:/work/.data/desk' on Windows; a POSIX path is unchanged
+ */
+export function posixPath(path) {
+    return path.split(sep).join('/');
+}
+/**
+ * A path a record stores, as this platform writes it, for a person.
+ *
+ * @example platformPath('C:/work/.data/desk') // 'C:\\work\\.data\\desk' on Windows; unchanged on macOS and Linux
+ */
+export function platformPath(path) {
+    return path.split('/').join(sep);
+}

package/dist/shared/private-file.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Why a folder could not be kept to this user alone: `message` is a sentence for a person, `detail` names the Windows
+ * tool and what it said.
+ */
+export declare class PrivateFolderError extends Error {
+    readonly detail: string;
+    constructor(message: string, detail: string);
+}
+/**
+ * Leaves `folder`, an empty folder this process just made, readable and writable by the user this process runs as and by
+ * no other user, and makes every file and folder later made in it inherit that. Nothing runs on macOS and Linux, where
+ * the folder's mode does it. On Windows every inherited entry is removed, Users' read among them, and this user's SID
+ * gets full control, passed on to what the folder will hold. An entry the folder holds as its own stays: under a parent
+ * whose list is not marked as passed down, such as a temporary folder Node makes, Windows writes the system's and the
+ * administrators' that way, and they read any file, as root does on Unix. Throws a `PrivateFolderError` when that cannot
+ * be done.
+ *
+ * @example mkdirSync(folder, { mode: 0o700 }); await keepFolderToUser(folder)
+ */
+export declare function keepFolderToUser(folder: string, platform?: NodeJS.Platform): Promise<void>;
+/**
+ * The SID of the user this process runs as, from whoami, read once.
+ *
+ * @example await currentUserSid() // 'S-1-5-21-…-1001'
+ */
+export declare function currentUserSid(): Promise<string>;
+/**
+ * Runs a Windows tool to its end through the launch seam, with an environment of `SystemRoot` alone: undefined once it
+ * ended with 0, otherwise how it ended, as a clause for a detail. One that has not ended within `timeoutMs` is ended,
+ * with everything it started. What it printed on stdout is pushed to `output`.
+ *
+ * @example await runOwnedTool('C:\\Windows\\System32\\whoami.exe', []) // undefined
+ */
+export declare function runOwnedTool(program: string, args: readonly string[], options?: {
+    output?: string[];
+    timeoutMs?: number;
+}): Promise<string | undefined>;
+//# sourceMappingURL=private-file.d.ts.map

package/dist/shared/private-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-file.d.ts","sourceRoot":"","sources":["../../src/shared/private-file.ts"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBAEX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAKlH;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAOhD;AAWD;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuCjK"}

package/dist/shared/private-file.js

@@ -0,0 +1,132 @@
+import { spawn } from 'node:child_process';
+import { win32 } from 'node:path';
+import { consolesDetached, holdLaunch, prepareOwnedLaunch } from "./process-system.js";
+// A folder that holds secrets, such as a run's saved sign-in states, is open to this user alone, and so is every file
+// later made in it. On macOS and Linux the mode it is created with does that. Windows ignores the mode and gives a new
+// folder the access list of its parent, which under C:\ lets every local user read it, and a file made in it takes that
+// list too. There the folder keeps nothing of its parent's list and gets one entry, this user's full control, which
+// every file and folder made in it inherits. That is done before any file is made in it: Windows checks access when a
+// file is opened, so a file another user opened while it was still open to them would stay open to them.
+//
+// whoami and icacls run as every program Retest starts does, through the launch seam, and are waited for without
+// blocking: each is held in a job of its own on Windows, and one that has not ended within its time is ended with it.
+const toolTimeoutMs = 10_000;
+const outputLimit = 64 * 1024;
+/**
+ * Why a folder could not be kept to this user alone: `message` is a sentence for a person, `detail` names the Windows
+ * tool and what it said.
+ */
+export class PrivateFolderError extends Error {
+    detail;
+    constructor(message, detail) {
+        super(message);
+        this.name = 'PrivateFolderError';
+        this.detail = detail;
+    }
+}
+let userSid;
+/**
+ * Leaves `folder`, an empty folder this process just made, readable and writable by the user this process runs as and by
+ * no other user, and makes every file and folder later made in it inherit that. Nothing runs on macOS and Linux, where
+ * the folder's mode does it. On Windows every inherited entry is removed, Users' read among them, and this user's SID
+ * gets full control, passed on to what the folder will hold. An entry the folder holds as its own stays: under a parent
+ * whose list is not marked as passed down, such as a temporary folder Node makes, Windows writes the system's and the
+ * administrators' that way, and they read any file, as root does on Unix. Throws a `PrivateFolderError` when that cannot
+ * be done.
+ *
+ * @example mkdirSync(folder, { mode: 0o700 }); await keepFolderToUser(folder)
+ */
+export async function keepFolderToUser(folder, platform = process.platform) {
+    if (platform !== 'win32')
+        return;
+    const sid = await currentUserSid();
+    const ended = await runOwnedTool(systemTool('icacls.exe'), [folder, '/inheritance:r', '/grant:r', `*${sid}:(OI)(CI)(F)`]);
+    if (ended !== undefined)
+        throw new PrivateFolderError('its folder could not be kept to this user alone.', `icacls.exe ${ended}`);
+}
+/**
+ * The SID of the user this process runs as, from whoami, read once.
+ *
+ * @example await currentUserSid() // 'S-1-5-21-…-1001'
+ */
+export function currentUserSid() {
+    const reading = (userSid ??= readUserSid());
+    // A reading that failed is not kept, so the next save asks again.
+    reading.catch(() => {
+        if (userSid === reading)
+            userSid = undefined;
+    });
+    return reading;
+}
+async function readUserSid() {
+    const output = [];
+    const ended = await runOwnedTool(systemTool('whoami.exe'), ['/user', '/fo', 'csv', '/nh'], { output });
+    const printed = (output[0] ?? '').trim();
+    const sid = ended === undefined ? /"(S-1-[0-9-]+)"\s*$/.exec(printed)?.[1] : undefined;
+    if (sid === undefined)
+        throw new PrivateFolderError('Retest could not tell which user it runs as.', `whoami.exe ${ended ?? `printed no SID: ${printed}`}`);
+    return sid;
+}
+/**
+ * Runs a Windows tool to its end through the launch seam, with an environment of `SystemRoot` alone: undefined once it
+ * ended with 0, otherwise how it ended, as a clause for a detail. One that has not ended within `timeoutMs` is ended,
+ * with everything it started. What it printed on stdout is pushed to `output`.
+ *
+ * @example await runOwnedTool('C:\\Windows\\System32\\whoami.exe', []) // undefined
+ */
+export async function runOwnedTool(program, args, options = {}) {
+    const { output = [], timeoutMs = toolTimeoutMs } = options;
+    let child;
+    try {
+        prepareOwnedLaunch();
+        child = spawn(program, args, { env: { SystemRoot: systemRoot() }, stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true, detached: consolesDetached });
+    }
+    catch (error) {
+        return `could not start: ${error instanceof Error ? error.message : String(error)}`;
+    }
+    let stdout = '';
+    let stderr = '';
+    child.stdout?.setEncoding('utf8').on('data', (chunk) => {
+        if (stdout.length < outputLimit)
+            stdout += chunk;
+    });
+    child.stderr?.setEncoding('utf8').on('data', (chunk) => {
+        if (stderr.length < outputLimit)
+            stderr += chunk;
+    });
+    const ended = new Promise((resolve) => {
+        child.once('error', (error) => resolve({ code: null, error }));
+        child.once('close', (code) => resolve({ code }));
+    });
+    const ownership = child.pid === undefined ? undefined : holdLaunch(child);
+    let timedOut = false;
+    const timer = setTimeout(() => {
+        timedOut = true;
+        if (ownership === undefined)
+            child.kill('SIGKILL');
+        else
+            ownership.signal('SIGKILL');
+    }, timeoutMs);
+    try {
+        const { code, error } = await ended;
+        output.push(stdout);
+        if (error !== undefined)
+            return `could not start: ${error.message}`;
+        if (timedOut)
+            return `did not finish within ${timeoutMs} ms and was ended`;
+        if (code === 0)
+            return undefined;
+        const said = (stderr.trim() || stdout.trim()).split(/\r?\n/, 1)[0] ?? '';
+        return `ended with exit code ${code ?? 'none'}${said === '' ? '' : `: ${said}`}`;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+// The tools are named by their place in the system folder, never looked up on PATH.
+function systemTool(name) {
+    return win32.join(systemRoot(), 'System32', name);
+}
+function systemRoot() {
+    return process.env['SystemRoot'] ?? 'C:\\Windows';
+}