@tryaura/aura-testkit 0.2.1 → 0.3.1

package/dist/index.js

@@ -1296,6 +1296,7 @@ async function readBody(response, maxBytes, binary) {
 		status: response.status
 	} : {
 		body: "",
+		...responseEtag(response),
 		kind: "response",
 		status: response.status
 	};
@@ -1321,10 +1322,16 @@ async function readBody(response, maxBytes, binary) {
 		status: response.status
 	} : {
 		body: new TextDecoder().decode(body),
+		...responseEtag(response),
 		kind: "response",
 		status: response.status
 	};
 }
+/** The entity tag as an optional field, so absence stays absent rather than `undefined`-valued. */
+function responseEtag(response) {
+	const etag = response.headers.get("etag");
+	return etag === null ? {} : { etag };
+}
 function concatenate(chunks, length) {
 	const joined = new Uint8Array(length);
 	let offset = 0;
@@ -1345,37 +1352,48 @@ function failureReason(error) {
 	return name === "TimeoutError" || name === "AbortError" ? "timeout" : "network";
 }
 //#endregion
-//#region ../core/src/managed-block/protocol.ts
+//#region ../core/src/content-hash.ts
 /**
-* Normalizes snippet text to the bytes covered by the managed-block hash protocol.
+* Normalizes Markdown to LF and exactly one trailing newline.
 *
-* Trailing newlines are trimmed by scanning rather than with `/\n+$/`, whose backtracking is
-* quadratic when a long newline run does not reach the end of the string.
+* Line endings and trailing blank lines are what a checkout, an editor, or an append seam change
+* without changing what the text says, so a hash that counted them would report drift on every
+* machine that rewrote them — and a fragment appended in this form is the same text the hash
+* covers. Trailing newlines are trimmed by scanning rather than with `/\n+$/`, whose backtracking
+* is quadratic when a long newline run does not reach the end of the string.
 */
-function canonicalizeManagedSnippet(content) {
-	const normalized = content.replace(/\r\n?/g, "\n");
+function canonicalizeContent(content) {
+	const normalized = content.replace(/\r\n?/gu, "\n");
 	let end = normalized.length;
 	while (end > 0 && normalized[end - 1] === "\n") end -= 1;
 	return `${normalized.slice(0, end)}\n`;
 }
-/** Computes the protocol hash for text already in {@link canonicalizeManagedSnippet} form. */
-function hashCanonicalManagedSnippet(canonical) {
-	return createHash("sha256").update(canonical, "utf8").digest("hex");
-}
-/** Computes the protocol hash for a snippet's canonical UTF-8 contents. */
-function hashManagedSnippet(content) {
-	return hashCanonicalManagedSnippet(canonicalizeManagedSnippet(content));
+/**
+* Fingerprints Markdown Aura records but does not own: an installed snippet, a trusted preset.
+*
+* One function for both because the two records answer the same question — "is this still the text
+* the user accepted?" — and two spellings of the canonical form would answer it differently on the
+* first file whose line endings a checkout rewrote.
+*/
+function hashContent(content) {
+	return createHash("sha256").update(canonicalizeContent(content), "utf8").digest("hex");
 }
 //#endregion
-//#region ../core/src/preset/repo-trust.ts
+//#region ../core/src/preset/repo-content.ts
 /**
-* Hashes repository preset contents for the trust record.
+* Hashes the repository content set for the trust record.
 *
-* Uses the managed-snippet canonicalization so a checkout that rewrites line endings does not
-* invalidate a trust the user already granted to the same bytes-as-authored.
+* With no snippet files the hash is exactly the preset file's own content hash, so a repository
+* that never adds `.aura/snippets` keeps every trust its users already recorded. The first
+* snippet changes the descriptor shape — and consent is re-asked, which is the point.
 */
-function hashRepoPreset(content) {
-	return hashManagedSnippet(content);
+function hashRepoContentSet(presetText, snippets) {
+	if (snippets.length === 0) return hashContent(presetText);
+	return hashContent([
+		"aura-repo-content-v1",
+		`preset ${hashContent(presetText)}`,
+		...[...snippets].sort((left, right) => left.id < right.id ? -1 : 1).map((file) => `snippet ${file.id} ${hashContent(file.text)}`)
+	].join("\n"));
 }
 //#endregion
 //#region src/http.ts
@@ -1828,7 +1846,7 @@ async function recordTrustedPresets(homeDir, workspaceDir, presets) {
 			throw new Error(`trustWorkspacePreset needs the seeded workspace file: ${relativePath}`);
 		});
 		added.push({
-			hash: hashRepoPreset(content),
+			hash: hashRepoContentSet(content, await seededSnippets(dirname(path))),
 			path
 		});
 	}
@@ -1844,6 +1862,17 @@ async function recordTrustedPresets(homeDir, workspaceDir, presets) {
 		mode: 384
 	});
 }
+/** The snippet files beside a seeded preset, in the shape the composite hash consumes. */
+async function seededSnippets(auraDir) {
+	const root = join(auraDir, "snippets");
+	const names = await readdir(root).catch(() => []);
+	const files = [];
+	for (const name of names.filter((entry) => !entry.startsWith(".") && entry.endsWith(".md"))) files.push({
+		id: `repo/${name.slice(0, -3)}`,
+		text: await readFile(join(root, name), "utf8")
+	});
+	return files;
+}
 function parseSeedManifest(source, path) {
 	const value = JSON.parse(source);
 	if (!isRecord(value)) throw new Error(`Seed manifest ${path} must contain a JSON object`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryaura/aura-testkit",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "description": "Deterministic filesystem seeds and CLI harnesses for Aura plugins and distributions.",
   "keywords": [
     "aura",
@@ -30,8 +30,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@tryaura/aura-cli": "0.2.1",
-    "@tryaura/aura-sdk": "0.2.1"
+    "@tryaura/aura-cli": "0.3.1",
+    "@tryaura/aura-sdk": "0.3.1"
   },
   "devDependencies": {
     "@types/node": "24.13.3",