@rightkit/release 0.2.69 → 0.2.70

package/rightapps-register.test.mjs

@@ -1,28 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-
-import { registerRightAppsRelease } from "./rightapps-register.mjs";
-
-test("registers through the shared durable release-token boundary", async () => {
-  const calls = [];
-  const response = await registerRightAppsRelease("/v1/admin/apps/runtime-artifacts", { schema: 1 }, {
-    token: "durable-token",
-    env: { RIGHTAPPS_API_URL: "https://rightapps.example", RIGHTAPPS_STORE_SLUG: "rightapps" },
-    fetchImpl: async (url, init) => {
-      calls.push({ url, init });
-      return { ok: true, text: async () => '{"id":"registered"}' };
-    },
-  });
-  assert.deepEqual(response, { id: "registered" });
-  assert.equal(calls[0].url, "https://rightapps.example/v1/admin/apps/runtime-artifacts");
-  assert.equal(calls[0].init.headers.authorization, "Bearer durable-token");
-});
-
-test("rejects absent durable token and non-admin registration paths before network", async () => {
-  let called = false;
-  const fetchImpl = async () => { called = true; };
-  await assert.rejects(registerRightAppsRelease("/v1/admin/apps/runtime-artifacts", {}, { token: "", fetchImpl }), /release token/i);
-  await assert.rejects(registerRightAppsRelease("https://evil.invalid", {}, { token: "token", fetchImpl }), /route/i);
-  await assert.rejects(registerRightAppsRelease("/v1/admin/apps/../../evil", {}, { token: "token", fetchImpl }), /route/i);
-  assert.equal(called, false);
-});

package/runtime-artifact-manifest.test.mjs

@@ -1,128 +0,0 @@
-import assert from "node:assert/strict";
-import { generateKeyPairSync } from "node:crypto";
-import test from "node:test";
-
-import {
-  buildRuntimeArtifactManifest,
-  runtimeArtifactManifestPointerKey,
-  runtimeArtifactObjectKey,
-  signRuntimeArtifactManifest,
-  validateRuntimeArtifactManifest,
-  verifyRuntimeArtifactEnvelope,
-} from "./runtime-artifact-manifest.mjs";
-
-const digest = "a".repeat(64);
-const evidenceDigest = "b".repeat(64);
-
-function validManifest(overrides = {}) {
-  return buildRuntimeArtifactManifest({
-    artifactKind: "asr-model",
-    filename: "parakeet-tdt-v3.onnx",
-    sha256: digest,
-    sizeBytes: 42,
-    entitlement: { appKey: "scraperight", tier: "pro" },
-    distribution: { delivery: "private-r2", bucket: "rightapps-updates" },
-    target: { os: "windows", arch: "x86_64" },
-    versions: {
-      runtime: "onnxruntime-1.22.0",
-      model: "parakeet-tdt-0.6b-v3",
-      tokenizer: "sentencepiece-2026-07-14",
-      preprocessing: "rightkit-asr-0.1.0",
-      license: "cc-by-4.0",
-      provenance: "heardright-approved-2026-07-14",
-    },
-    provenance: {
-      source: "https://huggingface.co/nvidia/parakeet-tdt-0.6b-v3",
-      sourceRevision: "0123456789abcdef",
-      licenseId: "CC-BY-4.0",
-      noticeSha256: "c".repeat(64),
-    },
-    promotion: {
-      authorityAppKey: "heardright",
-      promotionId: "hr-asr-2026-07-14-001",
-      promotedAt: "2026-07-14T12:00:00.000Z",
-      evidenceSha256: evidenceDigest,
-    },
-    ...overrides,
-  });
-}
-
-test("builds exact stable-pointer and immutable content-addressed object keys", () => {
-  const manifest = validManifest();
-  assert.equal(
-    manifest.pointerKey,
-    "scraperight/runtime-artifacts/asr-model/windows/x86_64/current/manifest.json",
-  );
-  assert.equal(
-    manifest.object.r2Key,
-    `scraperight/runtime-artifacts/objects/sha256/${digest}/parakeet-tdt-v3.onnx`,
-  );
-  assert.equal(runtimeArtifactManifestPointerKey(manifest), manifest.pointerKey);
-  assert.equal(runtimeArtifactObjectKey(manifest), manifest.object.r2Key);
-  assert.equal(validateRuntimeArtifactManifest(manifest), manifest);
-});
-
-test("signs and verifies the canonical manifest with Ed25519", () => {
-  const { privateKey, publicKey } = generateKeyPairSync("ed25519");
-  const envelope = signRuntimeArtifactManifest(validManifest(), privateKey, "rightapps-runtime-2026-01");
-  assert.equal(envelope.signature.algorithm, "Ed25519");
-  assert.equal(verifyRuntimeArtifactEnvelope(envelope, publicKey).artifactKind, "asr-model");
-
-  const tampered = structuredClone(envelope);
-  tampered.manifest.object.sizeBytes += 1;
-  assert.throws(() => verifyRuntimeArtifactEnvelope(tampered, publicKey), /signature verification failed/);
-});
-
-test("fails closed on missing or contradictory digest, provenance, version, scope, and promotion metadata", () => {
-  const mutations = [
-    (m) => delete m.versions.tokenizer,
-    (m) => { m.versions.license = ""; },
-    (m) => delete m.provenance.sourceRevision,
-    (m) => { m.provenance.licenseId = "MIT"; },
-    (m) => { m.entitlement.tier = "free"; },
-    (m) => { m.object.sha256 = "d".repeat(64); },
-    (m) => { m.object.sizeBytes = 0; },
-    (m) => { m.pointerKey = "scraperight/runtime-artifacts/asr-model/windows/x86_64/v1/manifest.json"; },
-    (m) => { m.promotion.authorityAppKey = "unknown"; },
-    (m) => { m.promotion.evidenceSha256 = "not-a-digest"; },
-  ];
-  for (const mutate of mutations) {
-    const manifest = structuredClone(validManifest());
-    mutate(manifest);
-    assert.throws(() => validateRuntimeArtifactManifest(manifest));
-  }
-});
-
-test("rejects unknown fields and path traversal instead of guessing", () => {
-  const extra = structuredClone(validManifest());
-  extra.secretUrl = "https://example.invalid/token";
-  assert.throws(() => validateRuntimeArtifactManifest(extra), /unknown field/);
-  assert.throws(() => validManifest({ filename: "../model.onnx" }), /filename/);
-});
-
-test("requires an explicit compatible entitlement and delivery lane per artifact", () => {
-  const publicMedia = validManifest({
-    artifactKind: "media-runtime",
-    entitlement: { appKey: "scraperight", tier: "public" },
-    distribution: { delivery: "public-r2", bucket: "rightapps-downloads" },
-  });
-  assert.equal(publicMedia.distribution.delivery, "public-r2");
-
-  const bundledOrt = validManifest({
-    artifactKind: "ort-runtime",
-    entitlement: { appKey: "viewright", tier: "bundled" },
-    distribution: { delivery: "bundled", bucket: null },
-  });
-  assert.equal(bundledOrt.pointerKey, null);
-  assert.equal(bundledOrt.object.r2Key, null);
-
-  assert.throws(() => validManifest({
-    entitlement: { appKey: "scraperight", tier: "public" },
-    distribution: { delivery: "public-r2", bucket: "rightapps-downloads" },
-  }), /model.*private-r2.*pro/i);
-  assert.throws(() => validManifest({
-    artifactKind: "media-runtime",
-    entitlement: { appKey: "scraperight", tier: "public" },
-    distribution: { delivery: "private-r2", bucket: "rightapps-updates" },
-  }), /contradict/);
-});

package/sign-updater.test.mjs

@@ -1,12 +0,0 @@
-import assert from "node:assert/strict";
-import { spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import test from "node:test";
-
-const helper = fileURLToPath(new URL("./sign-updater.mjs", import.meta.url));
-
-test("dry-run signs the final OS-signed artifact with Tauri minisign", () => {
-  const result = spawnSync(process.execPath, [helper, "--file", "Fixture.exe", "--dry-run"], { encoding: "utf8" });
-  assert.equal(result.status, 0, result.stderr);
-  assert.match(result.stdout, /tauri signer sign .*Fixture\.exe/);
-});

package/source-gate.test.mjs

@@ -1,25 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-
-import { assertCleanSource } from "./source-gate.mjs";
-
-test("a clean status passes the gate", () => {
-  assert.doesNotThrow(() => assertCleanSource({ status: "", commandId: "right-release build" }));
-});
-
-test("a dirty status names the command and the offending files", () => {
-  assert.throws(
-    () => assertCleanSource({ status: " M src/main.rs\0?? notes.txt\0", commandId: "right-release build" }),
-    (error) => {
-      assert.match(error.message, /right-release build requires a clean working tree/);
-      assert.match(error.message, /- src\/main\.rs/);
-      assert.match(error.message, /- notes\.txt/);
-      return true;
-    },
-  );
-});
-
-test("a missing status is refused rather than treated as clean", () => {
-  assert.throws(() => assertCleanSource({ commandId: "right-release upload" }), /status is required/);
-  assert.throws(() => assertCleanSource({ status: null }), /status is required/);
-});

package/standalone-clone-evidence.json

@@ -1,32 +0,0 @@
-{
-  "schemaVersion": 1,
-  "generatedAt": "2026-08-10T04:42:36.444Z",
-  "workRoot": "C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR",
-  "apps": [
-    {
-      "key": "viewright",
-      "remote": "https://github.com/bogusyogi/viewright.git",
-      "appDir": ".",
-      "revision": "21a4171fa8add2d8114bc5f07498b60d7e8eafe5",
-    "packageManager": "pnpm@11.24.0",
-      "clone": {
-        "command": "git clone --depth 1 --single-branch https://github.com/bogusyogi/viewright.git C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright",
-        "status": 0,
-        "stdout": "",
-        "stderr": "Cloning into 'C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright'...\nUpdating files:  91% (1902/2080)\rUpdating files:  92% (1914/2080)\rUpdating files:  93% (1935/2080)\rUpdating files:  94% (1956/2080)\rUpdating files:  95% (1976/2080)\rUpdating files:  96% (1997/2080)\rUpdating files:  97% (2018/2080)\rUpdating files:  98% (2039/2080)\rUpdating files:  99% (2060/2080)\rUpdating files: 100% (2080/2080)\rUpdating files: 100% (2080/2080), done."
-      },
-      "install": {
-        "command": "C:\\nvm4w\\nodejs\\node.exe C:\\nvm4w\\nodejs\\node_modules\\pnpm\\bin\\pnpm.mjs install --frozen-lockfile",
-        "status": 0,
-        "stdout": "✓ Lockfile passes supply-chain policies (verified 8h ago)\nLockfile is up to date, resolution step is skipped\nProgress: resolved 1, reused 0, downloaded 0, added 0\nPackages: +619\n++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\nProgress: resolved 619, reused 0, downloaded 0, added 0\nProgress: resolved 619, reused 60, downloaded 0, added 0\nPackages are hard linked from the content-addressable store to the virtual store.\n  Content-addressable store is at: C:\\Users\\adrds\\AppData\\Local\\pnpm\\store\\v11\n  Virtual store is at:             node_modules/.pnpm\nProgress: resolved 619, reused 573, downloaded 7, added 7\nProgress: resolved 619, reused 574, downloaded 9, added 10\nProgress: resolved 619, reused 574, downloaded 22, added 11\nProgress: resolved 619, reused 574, downloaded 23, added 11\nProgress: resolved 619, reused 574, downloaded 26, added 14\nProgress: resolved 619, reused 574, downloaded 30, added 24\nProgress: resolved 619, reused 574, downloaded 31, added 57\nProgress: resolved 619, reused 574, downloaded 34, added 128\nProgress: resolved 619, reused 574, downloaded 38, added 135\nProgress: resolved 619, reused 574, downloaded 38, added 136\nProgress: resolved 619, reused 574, downloaded 39, added 141\nProgress: resolved 619, reused 574, downloaded 39, added 148\nProgress: resolved 619, reused 574, downloaded 39, added 182\nProgress: resolved 619, reused 574, downloaded 40, added 201\nProgress: resolved 619, reused 574, downloaded 41, added 218\nProgress: resolved 619, reused 574, downloaded 41, added 242\nProgress: resolved 619, reused 574, downloaded 42, added 312\nProgress: resolved 619, reused 574, downloaded 42, added 371\nProgress: resolved 619, reused 574, downloaded 42, added 430\nProgress: resolved 619, reused 574, downloaded 42, added 486\nProgress: resolved 619, reused 574, downloaded 43, added 543\nProgress: resolved 619, reused 574, downloaded 43, added 578\nProgress: resolved 619, reused 574, downloaded 44, added 596\nProgress: resolved 619, reused 574, downloaded 44, added 611\nProgress: resolved 619, reused 574, downloaded 44, added 612\nProgress: resolved 619, reused 574, downloaded 44, added 613\nProgress: resolved 619, reused 574, downloaded 44, added 615\nProgress: resolved 619, reused 574, downloaded 44, added 616\nProgress: resolved 619, reused 574, downloaded 44, added 617\nProgress: resolved 619, reused 574, downloaded 44, added 618\nProgress: resolved 619, reused 574, downloaded 45, added 618\nProgress: resolved 619, reused 574, downloaded 45, added 619\nProgress: resolved 619, reused 574, downloaded 45, added 619, done\n\ndependencies:\n+ @codemirror/autocomplete 6.20.3\n+ @codemirror/commands 6.10.4\n+ @codemirror/lang-html 6.4.11\n+ @codemirror/lang-javascript 6.2.5\n+ @codemirror/lang-markdown 6.5.0\n+ @codemirror/language 6.12.4\n+ @codemirror/lint 6.9.7\n+ @codemirror/search 6.7.1\n+ @codemirror/state 6.7.1\n+ @codemirror/view 6.43.6\n+ @eigenpal/docx-editor-agents @eigenpal/docx-editor-agents@file:vendor/docx-editor/packages/agents(react@19.2.7)\n+ @eigenpal/docx-editor-core @eigenpal/docx-editor-core@file:vendor/docx-editor/packages/core(prosemirror-commands@1.7.1)(prosemirror-dropcursor@1.8.2)(prosemirror-history@1.5.0)(prosemirror-keymap@1.2.3)(prosemirror-model@1.25.10)(prosemirror-state@1.4.4)(prosemirror-tables@1.8.5)(prosemirror-transform@1.12.0)(prosemirror-view@1.42.0)\n+ @eigenpal/docx-editor-i18n @eigenpal/docx-editor-i18n@file:vendor/docx-editor/packages/i18n\n+ @eigenpal/docx-editor-react @eigenpal/docx-editor-react@file:vendor/docx-editor/packages/react(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(prosemirror-commands@1.7.1)(prosemirror-dropcursor@1.8.2)(prosemirror-history@1.5.0)(prosemirror-keymap@1.2.3)(prosemirror-model@1.25.10)(prosemirror-state@1.4.4)(prosemirror-tables@1.8.5)(prosemirror-transform@1.12.0)(prosemirror-view@1.42.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)\n+ @lezer/highlight 1.2.3\n+ @mdx-js/mdx 3.1.1\n+ @phosphor-icons/react 2.1.10\n+ @radix-ui/react-select 2.3.2\n+ @rightkit/legal-ui 0.1.0\n+ @rightkit/license 0.1.6\n+ @rightkit/logs 0.1.3\n+ @rightkit/tauri 0.1.0\n+ @rightkit/updates 0.2.3\n+ @tauri-apps/api 2.11.1\n+ @tauri-apps/plugin-http 2.5.9\n+ @tauri-apps/plugin-process 2.3.1\n+ @tauri-apps/plugin-updater 2.10.1\n+ clsx 2.1.1\n+ docxtemplater 3.69.0\n+ dompurify 3.4.13\n+ fabric 7.4.0\n+ github-slugger 2.0.0\n+ jszip 3.10.1\n+ katex 0.17.0\n+ mermaid 11.16.1\n+ pdfjs-dist 6.2.108\n+ pizzip 3.2.0\n+ prosemirror-commands 1.7.1\n+ prosemirror-dropcursor 1.8.2\n+ prosemirror-history 1.5.0\n+ prosemirror-keymap 1.2.3\n+ prosemirror-model 1.25.10\n+ prosemirror-state 1.4.4\n+ prosemirror-tables 1.8.5\n+ prosemirror-transform 1.12.0\n+ prosemirror-view 1.42.0\n+ react 19.2.7\n+ react-dom 19.2.7\n+ react-image-crop 11.1.2\n+ rehype-stringify 10.0.1\n+ remark-frontmatter 5.0.0\n+ remark-gfm 4.0.1\n+ remark-math 6.0.0\n+ remark-parse 11.0.0\n+ remark-rehype 11.1.2\n+ remark-smartypants 3.0.2\n+ shiki 4.3.1\n+ sonner 2.0.7\n+ sucrase 3.35.1\n+ unified 11.0.5\n+ xml-js 1.6.11\n+ yaml 2.9.0\n\ndevDependencies:\n+ @biomejs/biome 2.5.3\n+ @rightkit/legal 0.3.0\n+ @rightkit/release 0.2.50\n+ @tailwindcss/vite 4.3.2\n+ @tauri-apps/cli 2.11.4\n+ @testing-library/dom 10.4.1\n+ @testing-library/jest-dom 6.9.1\n+ @testing-library/react 16.3.2\n+ @types/mdast 4.0.4\n+ @types/react 19.2.17\n+ @types/react-dom 19.2.3\n+ @types/ws 8.18.1\n+ @vitejs/plugin-react 6.0.3\n+ happy-dom 20.10.6\n+ jscpd 5.0.12\n+ jsdom 29.1.1\n+ knip 6.25.0\n+ tailwindcss 4.3.2\n+ typescript 6.0.3\n+ vite 8.1.4\n+ vitest 4.1.10\n+ ws 8.21.0\n\nDone in 40.8s using pnpm v11.18.0",
-        "stderr": ""
-      },
-      "doctor": {
-        "command": "C:\\nvm4w\\nodejs\\node.exe C:\\nvm4w\\nodejs\\node_modules\\pnpm\\bin\\pnpm.mjs release:doctor",
-        "status": 0,
-        "stdout": "right-release 0.2.50\nconfig: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\\right-release.config.mjs\napp: viewright\nplatform: win\ntier: <required for release/publish>\npackageManager: pnpm\nworkdir: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\nhardeningscan: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\\node_modules\\.pnpm\\@rightkit+release@0.2.50\\node_modules\\@rightkit\\release\\hardeningscan.mjs\nlegal: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\\legal\\legal-manifest.json\nlegalAcceptance: viewright-2026-07-17-v3\nlegalManifestSha256: 035ea7cbd040ef001dbdc1385f114c8bb126178fea9a9f705016a726f96a7830\nsign: src-tauri/target/release/bundle/nsis/ViewRight_0.1.60_x64-setup.exe\npreflight:\n  [ok  ] target-bridge: src-tauri/target is ready for the shared cache bridge\n  [ok  ] version: 0.1.60 is free to build\n  [ok  ] windows-sdk: makeappx.exe from SDK 10.0.26100.0\n  [ok  ] signtool: signtool.exe from SDK 10.0.26100.0\n  [ok  ] sccache: sccache 0.17.0\n  [ok  ] disk: 628.7GB free",
-        "stderr": "$ right-release doctor"
-      }
-    }
-  ]
-}

package/standalone-clone-verify.test.mjs

@@ -1,76 +0,0 @@
-import assert from "node:assert/strict";
-import { mkdtempSync, readFileSync, writeFileSync, mkdirSync, existsSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import test from "node:test";
-
-import { verifyStandaloneClones } from "./standalone-clone-verify.mjs";
-
-function run(command, args, cwd) {
-  const result = spawnSync(command, args, { cwd, encoding: "utf8", windowsHide: true });
-  assert.equal(result.status, 0, `${command} ${args.join(" ")}\n${result.stderr}`);
-}
-
-test("standalone verifier clones, installs, doctors from a nested app root, and removes only its own temp tree", async (t) => {
-  const fixtureRoot = mkdtempSync(path.join(tmpdir(), "rightkit-standalone-fixture-"));
-  t.after(() => rmSync(fixtureRoot, { recursive: true, force: true }));
-  const source = path.join(fixtureRoot, "source");
-  const outsideForge = path.join(fixtureRoot, "keep.txt");
-  mkdirSync(path.join(source, "apps", "desktop"), { recursive: true });
-  writeFileSync(outsideForge, "keep", "utf8");
-  writeFileSync(path.join(source, "apps", "desktop", "package.json"), JSON.stringify({
-    name: "standalone-fixture",
-    private: true,
-    packageManager: "pnpm@11.24.0",
-    scripts: { "release:doctor": "node doctor.mjs" },
-  }), "utf8");
-  writeFileSync(path.join(source, "apps", "desktop", "pnpm-lock.yaml"), "lockfileVersion: '9.0'\nsettings:\n  autoInstallPeers: true\n  excludeLinksFromLockfile: false\nimporters:\n  .: {}\n", "utf8");
-  writeFileSync(path.join(source, "apps", "desktop", "doctor.mjs"), "process.stdout.write('fixture doctor passed\\n')\n", "utf8");
-  run("git", ["init", "-q"], source);
-  run("git", ["config", "user.email", "fixture@example.test"], source);
-  run("git", ["config", "user.name", "Fixture"], source);
-  run("git", ["add", "."], source);
-  run("git", ["commit", "-qm", "fixture"], source);
-
-  const evidencePath = path.join(fixtureRoot, "evidence.json");
-  const result = await verifyStandaloneClones({
-    apps: [{ key: "fixture", remote: source, appDir: "apps/desktop" }],
-    evidencePath,
-    tempParent: fixtureRoot,
-  });
-
-  assert.equal(result.apps[0].install.status, 0);
-  assert.equal(result.apps[0].doctor.status, 0);
-  assert.match(result.apps[0].doctor.stdout, /fixture doctor passed/);
-  assert.equal(existsSync(result.workRoot), false, "generated clone tree must be removed");
-  assert.equal(readFileSync(outsideForge, "utf8"), "keep", "cleanup must not escape the generated tree");
-  assert.deepEqual(JSON.parse(readFileSync(evidencePath, "utf8")).apps.map(({ key }) => key), ["fixture"]);
-});
-
-test("release package exposes the local standalone verification lane", () => {
-  const pkg = JSON.parse(readFileSync(new URL("./package.json", import.meta.url), "utf8"));
-  assert.equal(pkg.scripts["verify:standalone"], "node standalone-clone-verify.mjs");
-});
-
-test("standalone verifier rejects a package root that escapes its clone", async (t) => {
-  const fixtureRoot = mkdtempSync(path.join(tmpdir(), "rightkit-standalone-escape-"));
-  t.after(() => rmSync(fixtureRoot, { recursive: true, force: true }));
-  const source = path.join(fixtureRoot, "source");
-  mkdirSync(source, { recursive: true });
-  writeFileSync(path.join(source, "README.md"), "fixture", "utf8");
-  run("git", ["init", "-q"], source);
-  run("git", ["config", "user.email", "fixture@example.test"], source);
-  run("git", ["config", "user.name", "Fixture"], source);
-  run("git", ["add", "."], source);
-  run("git", ["commit", "-qm", "fixture"], source);
-
-  await assert.rejects(
-    verifyStandaloneClones({
-      apps: [{ key: "fixture", remote: source, appDir: ".." }],
-      evidencePath: path.join(fixtureRoot, "evidence.json"),
-      tempParent: fixtureRoot,
-    }),
-    /package root escapes its clone/,
-  );
-});

package/suite-doctor.test.mjs

@@ -1,19 +0,0 @@
-import assert from "node:assert/strict";
-import { spawnSync } from "node:child_process";
-import path from "node:path";
-import test from "node:test";
-import { fileURLToPath } from "node:url";
-
-const packageRoot = path.dirname(fileURLToPath(import.meta.url));
-const cli = path.join(packageRoot, "cli", "right-release.mjs");
-
-test("suite-doctor runs the complete local multi-repo contract", () => {
-  const result = spawnSync(process.execPath, [cli, "suite-doctor"], {
-    cwd: packageRoot,
-    encoding: "utf8",
-    windowsHide: true,
-  });
-
-  assert.equal(result.status, 0, result.stderr || result.stdout);
-  assert.match(result.stdout, /\[right-release\] suite-doctor passed/);
-});

package/target-bridge.test.mjs

@@ -1,269 +0,0 @@
-import assert from "node:assert/strict";
-import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, rmSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import test from "node:test";
-
-import { createTargetBridge } from "./target-bridge.mjs";
-
-function fixture() {
-  const root = mkdtempSync(path.join(os.tmpdir(), "rightkit-target-bridge-"));
-  const target = path.join(root, "shared", "target");
-  const link = path.join(root, "app", "src-tauri", "target");
-  mkdirSync(target, { recursive: true });
-  mkdirSync(path.dirname(link), { recursive: true });
-  writeFileSync(path.join(target, "keep.txt"), "shared-cache\n");
-  return { root, target, link };
-}
-
-test("removes an invocation-created bridge after success without touching the shared target", async () => {
-  const fx = fixture();
-  const bridge = createTargetBridge(fx);
-  await bridge.run(async () => {
-    bridge.ensure();
-    assert.equal(realpathSync(fx.link), realpathSync(fx.target));
-  });
-  assert.throws(() => lstatSync(fx.link), { code: "ENOENT" });
-  assert.equal(readFileSync(path.join(fx.target, "keep.txt"), "utf8"), "shared-cache\n");
-});
-
-test("Windows creates a directory symlink instead of an untrusted junction", () => {
-  const fx = fixture();
-  let requestedType;
-  const bridge = createTargetBridge({
-    ...fx,
-    platform: "win32",
-    symlink(target, link, type) {
-      requestedType = type;
-      symlinkSync(target, link, type);
-    },
-  });
-  bridge.ensure();
-  assert.equal(requestedType, "dir");
-  assert.equal(realpathSync(fx.link), realpathSync(fx.target));
-  bridge.release();
-});
-
-test("removes an invocation-created bridge after the build throws", async () => {
-  const fx = fixture();
-  const bridge = createTargetBridge(fx);
-  await assert.rejects(
-    bridge.run(async () => {
-      bridge.ensure();
-      throw new Error("package failed");
-    }),
-    /package failed/,
-  );
-  assert.throws(() => lstatSync(fx.link), { code: "ENOENT" });
-});
-
-test("removes an invocation-created bridge after a signal-style abort", async () => {
-  const fx = fixture();
-  const bridge = createTargetBridge(fx);
-  await assert.rejects(
-    bridge.run(async () => {
-      bridge.ensure();
-      throw new Error("release interrupted by SIGTERM");
-    }),
-    /SIGTERM/,
-  );
-  assert.throws(() => lstatSync(fx.link), { code: "ENOENT" });
-});
-
-test("accepts but preserves a pre-existing exact shared-target bridge", async () => {
-  const fx = fixture();
-  symlinkSync(fx.target, fx.link, process.platform === "win32" ? "junction" : "dir");
-  await createTargetBridge(fx).run(async (bridge) => {
-    assert.deepEqual(bridge.ensure(), { created: false, link: fx.link, target: fx.target });
-  });
-  assert.equal(realpathSync(fx.link), realpathSync(fx.target));
-  assert.equal(readFileSync(path.join(fx.target, "keep.txt"), "utf8"), "shared-cache\n");
-});
-
-test("fails closed when the new bridge is replaced immediately after symlink creation", () => {
-  const fx = fixture();
-  const other = path.join(fx.root, "racing-target");
-  mkdirSync(other);
-  const bridge = createTargetBridge({
-    ...fx,
-    symlink(target, link, type) {
-      symlinkSync(target, link, type);
-      unlinkSync(link);
-      symlinkSync(other, link, type);
-    },
-  });
-  assert.throws(() => bridge.ensure(), /owned shared cache target/i);
-  assert.equal(realpathSync(fx.link), realpathSync(other));
-});
-
-test("fails closed and preserves an unrelated symlink", async () => {
-  const fx = fixture();
-  const other = path.join(fx.root, "other-target");
-  mkdirSync(other);
-  symlinkSync(other, fx.link, process.platform === "win32" ? "junction" : "dir");
-  await assert.rejects(
-    createTargetBridge(fx).run(async (bridge) => bridge.ensure()),
-    /not the owned shared cache target/i,
-  );
-  assert.equal(realpathSync(fx.link), realpathSync(other));
-});
-
-test("preserves a same-target symlink that replaces an acquired bridge", () => {
-  const fx = fixture();
-  let successfulStats = 0;
-  const bridge = createTargetBridge({
-    ...fx,
-    lstat(file) {
-      const stats = lstatSync(file);
-      successfulStats += 1;
-      if (successfulStats === 1) return stats;
-      return { dev: stats.dev, ino: stats.ino + 1, isSymbolicLink: () => stats.isSymbolicLink() };
-    },
-  });
-  bridge.ensure();
-  unlinkSync(fx.link);
-  symlinkSync(fx.target, fx.link, process.platform === "win32" ? "junction" : "dir");
-  assert.equal(bridge.release(), false);
-  assert.equal(realpathSync(fx.link), realpathSync(fx.target));
-});
-
-test("preserves a different-target symlink that replaces an acquired bridge", () => {
-  const fx = fixture();
-  const other = path.join(fx.root, "replacement-target");
-  mkdirSync(other);
-  const bridge = createTargetBridge(fx);
-  bridge.ensure();
-  unlinkSync(fx.link);
-  symlinkSync(other, fx.link, process.platform === "win32" ? "junction" : "dir");
-  assert.equal(bridge.release(), false);
-  assert.equal(realpathSync(fx.link), realpathSync(other));
-});
-
-test("fails closed and preserves a real target directory with user content", async () => {
-  const fx = fixture();
-  mkdirSync(fx.link);
-  writeFileSync(path.join(fx.link, "user.txt"), "keep\n");
-  await assert.rejects(
-    createTargetBridge(fx).run(async (bridge) => bridge.ensure()),
-    /not a symbolic link/i,
-  );
-  assert.equal(readFileSync(path.join(fx.link, "user.txt"), "utf8"), "keep\n");
-});
-
-test("rejecting a real target does not create the shared cache destination", () => {
-  const root = mkdtempSync(path.join(os.tmpdir(), "rightkit-target-bridge-pure-"));
-  const target = path.join(root, "shared", "target");
-  const link = path.join(root, "app", "src-tauri", "target");
-  mkdirSync(link, { recursive: true });
-
-  assert.throws(() => createTargetBridge({ link, target }).ensure(), /not a symbolic link/i);
-  assert.equal(existsSync(target), false);
-});
-
-test("broker-managed: a real target directory is left untouched instead of treated as corruption", async () => {
-  const fx = fixture();
-  mkdirSync(fx.link);
-  writeFileSync(path.join(fx.link, "user.txt"), "keep\n");
-  const result = await createTargetBridge({ ...fx, brokerManaged: true }).run(async (bridge) => bridge.ensure());
-  assert.equal(result.brokerManaged, true);
-  assert.equal(result.created, false);
-  // Nothing was removed, replaced, or relinked: the real directory and its
-  // content are exactly as they were, and no shared-cache destination was
-  // fabricated in its place.
-  assert.equal(readFileSync(path.join(fx.link, "user.txt"), "utf8"), "keep\n");
-  assert.equal(lstatSync(fx.link).isSymbolicLink(), false);
-});
-
-test("broker-managed: release() is a safe no-op after leaving a real target untouched", () => {
-  const fx = fixture();
-  mkdirSync(fx.link);
-  writeFileSync(path.join(fx.link, "user.txt"), "keep\n");
-  const bridge = createTargetBridge({ ...fx, brokerManaged: true });
-  bridge.ensure();
-  assert.equal(bridge.release(), false);
-  assert.equal(readFileSync(path.join(fx.link, "user.txt"), "utf8"), "keep\n");
-});
-
-test("broker-managed has no effect on the non-broker path: a symlink bridge still behaves exactly as before", async () => {
-  const fx = fixture();
-  const result = await createTargetBridge({ ...fx, brokerManaged: true }).run(async (bridge) => {
-    const ensured = bridge.ensure();
-    assert.equal(lstatSync(fx.link).isSymbolicLink(), true);
-    return ensured;
-  });
-  assert.equal(result.created, true);
-  assert.equal(result.brokerManaged, undefined);
-});
-
-test("cleanup is idempotent and reports process errors without masking a build failure", async () => {
-  const fx = fixture();
-  const bridge = createTargetBridge(fx);
-  bridge.ensure();
-  assert.equal(bridge.release(), true);
-  assert.equal(bridge.release(), false);
-
-  const cleanupFailure = new Error("unlink denied");
-  const failing = createTargetBridge({ ...fx, unlink: () => { throw cleanupFailure; } });
-  const buildFailure = new Error("build aborted");
-  await assert.rejects(
-    failing.run(async () => {
-      failing.ensure();
-      throw buildFailure;
-    }),
-    (error) => error === buildFailure && error.cleanupError === cleanupFailure,
-  );
-  assert.equal(lstatSync(fx.link).isSymbolicLink(), true);
-  unlinkSync(fx.link);
-});
-
-test("a stale link from an earlier fingerprint is repointed, not a hard stop", () => {
-  const dir = mkdtempSync(path.join(os.tmpdir(), "bridge-stale-"));
-  const ownedRoot = path.join(dir, "cache", "heardright");
-  const oldTarget = path.join(ownedRoot, "aaaaaaaa");
-  const newTarget = path.join(ownedRoot, "bbbbbbbb");
-  mkdirSync(oldTarget, { recursive: true });
-  const link = path.join(dir, "target");
-  symlinkSync(oldTarget, link, "junction");
-
-  const bridge = createTargetBridge({ link, target: newTarget, ownedRoot });
-  const result = bridge.ensure();
-
-  assert.equal(result.created, true);
-  assert.equal(realpathSync(link), realpathSync(newTarget));
-  // The directory the stale link pointed at must survive: it is cache, and the
-  // link was only ever a pointer to it.
-  assert.equal(existsSync(oldTarget), true);
-  rmSync(dir, { recursive: true, force: true });
-});
-
-test("a link pointing outside the owned root is still refused", () => {
-  const dir = mkdtempSync(path.join(os.tmpdir(), "bridge-foreign-"));
-  const ownedRoot = path.join(dir, "cache", "heardright");
-  const foreign = path.join(dir, "somewhere-else");
-  const newTarget = path.join(ownedRoot, "bbbbbbbb");
-  mkdirSync(foreign, { recursive: true });
-  const link = path.join(dir, "target");
-  symlinkSync(foreign, link, "junction");
-
-  const bridge = createTargetBridge({ link, target: newTarget, ownedRoot });
-  assert.throws(() => bridge.ensure(), /refusing to replace it/);
-  assert.equal(existsSync(newTarget), false);
-  assert.equal(realpathSync(link), realpathSync(foreign));
-  rmSync(dir, { recursive: true, force: true });
-});
-
-test("a dangling link whose cache entry was pruned is reclaimed", () => {
-  const dir = mkdtempSync(path.join(os.tmpdir(), "bridge-dangling-"));
-  const ownedRoot = path.join(dir, "cache", "heardright");
-  const pruned = path.join(ownedRoot, "aaaaaaaa");
-  const newTarget = path.join(ownedRoot, "bbbbbbbb");
-  mkdirSync(pruned, { recursive: true });
-  const link = path.join(dir, "target");
-  symlinkSync(pruned, link, "junction");
-  rmSync(pruned, { recursive: true, force: true });
-
-  const bridge = createTargetBridge({ link, target: newTarget, ownedRoot });
-  assert.equal(bridge.ensure().created, true);
-  assert.equal(realpathSync(link), realpathSync(newTarget));
-  rmSync(dir, { recursive: true, force: true });
-});