@sweny-ai/core 0.1.56 → 0.1.57

package/dist/sources.validation.test.js

@@ -10,11 +10,12 @@
  *   - Security: no auth token leakage, URL validation
  */
 import { mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { randomBytes } from "node:crypto";
 import { tmpdir } from "node:os";
 import * as path from "node:path";
 import { describe, it, expect, beforeEach, vi } from "vitest";
 import { classifySource, sourceZ, hashContent, resolveSource, resolveSources, } from "./sources.js";
-const fileTmp = path.join(tmpdir(), "sweny-sources-validation-test");
+const fileTmp = path.join(tmpdir(), `sweny-sources-validation-test-${randomBytes(4).toString("hex")}`);
 const baseCtx = () => ({
     cwd: "/tmp",
     env: {},
@@ -253,6 +254,24 @@ describe("error messages include actionable information", () => {
             expect(e.message).toContain("--offline");
         }
     });
+    it("SOURCE_FILE_READ_FAILED on permission denied", async () => {
+        const unreadable = path.join(fileTmp, "unreadable.md");
+        writeFileSync(unreadable, "secret");
+        const { chmodSync } = await import("node:fs");
+        chmodSync(unreadable, 0o000);
+        try {
+            await resolveSource("./unreadable.md", "context[0]", { ...baseCtx(), cwd: fileTmp });
+            expect.unreachable("should have thrown");
+        }
+        catch (e) {
+            expect(e.message).toContain("SOURCE_FILE_READ_FAILED");
+            expect(e.message).toContain("unreadable.md");
+            expect(e.message).toContain("context[0]");
+        }
+        finally {
+            chmodSync(unreadable, 0o644);
+        }
+    });
     it("SOURCE_OFFLINE_REQUIRES_FETCH includes the URL and field path", async () => {
         try {
             await resolveSource("https://example.com/rules.md", "rules[1]", { ...baseCtx(), offline: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sweny-ai/core",
-  "version": "0.1.56",
+  "version": "0.1.57",
   "type": "module",
   "bin": {
     "sweny": "./dist/cli/main.js"