@tryaura/aura-testkit 0.3.0 → 0.3.2

package/dist/index.js

@@ -1379,15 +1379,21 @@ function hashContent(content) {
 	return createHash("sha256").update(canonicalizeContent(content), "utf8").digest("hex");
 }
 //#endregion
-//#region ../core/src/preset/repo-trust.ts
+//#region ../core/src/preset/repo-content.ts
 /**
-* Hashes repository preset contents for the trust record.
+* Hashes the repository content set for the trust record.
 *
-* Normalizes line endings so a checkout that rewrites them does not invalidate a trust the user
-* already granted to the same bytes-as-authored.
+* With no snippet files the hash is exactly the preset file's own content hash, so a repository
+* that never adds `.aura/snippets` keeps every trust its users already recorded. The first
+* snippet changes the descriptor shape — and consent is re-asked, which is the point.
 */
-function hashRepoPreset(content) {
-	return hashContent(content);
+function hashRepoContentSet(presetText, snippets) {
+	if (snippets.length === 0) return hashContent(presetText);
+	return hashContent([
+		"aura-repo-content-v1",
+		`preset ${hashContent(presetText)}`,
+		...[...snippets].sort((left, right) => left.id < right.id ? -1 : 1).map((file) => `snippet ${file.id} ${hashContent(file.text)}`)
+	].join("\n"));
 }
 //#endregion
 //#region src/http.ts
@@ -1840,7 +1846,7 @@ async function recordTrustedPresets(homeDir, workspaceDir, presets) {
 			throw new Error(`trustWorkspacePreset needs the seeded workspace file: ${relativePath}`);
 		});
 		added.push({
-			hash: hashRepoPreset(content),
+			hash: hashRepoContentSet(content, await seededSnippets(dirname(path))),
 			path
 		});
 	}
@@ -1856,6 +1862,17 @@ async function recordTrustedPresets(homeDir, workspaceDir, presets) {
 		mode: 384
 	});
 }
+/** The snippet files beside a seeded preset, in the shape the composite hash consumes. */
+async function seededSnippets(auraDir) {
+	const root = join(auraDir, "snippets");
+	const names = await readdir(root).catch(() => []);
+	const files = [];
+	for (const name of names.filter((entry) => !entry.startsWith(".") && entry.endsWith(".md"))) files.push({
+		id: `repo/${name.slice(0, -3)}`,
+		text: await readFile(join(root, name), "utf8")
+	});
+	return files;
+}
 function parseSeedManifest(source, path) {
 	const value = JSON.parse(source);
 	if (!isRecord(value)) throw new Error(`Seed manifest ${path} must contain a JSON object`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryaura/aura-testkit",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Deterministic filesystem seeds and CLI harnesses for Aura plugins and distributions.",
   "keywords": [
     "aura",
@@ -30,17 +30,17 @@
     "access": "public"
   },
   "dependencies": {
-    "@tryaura/aura-cli": "0.3.0",
-    "@tryaura/aura-sdk": "0.3.0"
+    "@tryaura/aura-cli": "0.3.2",
+    "@tryaura/aura-sdk": "0.3.2"
   },
   "devDependencies": {
     "@types/node": "24.13.3",
     "diff": "9.0.0",
     "vitest": "4.1.10",
-    "@tryaura/adapter-codex": "0.0.0",
     "@tryaura/adapter-claude-code": "0.0.0",
-    "@tryaura/core": "0.0.0",
-    "@tryaura/adapter-cursor": "0.0.0"
+    "@tryaura/adapter-codex": "0.0.0",
+    "@tryaura/adapter-cursor": "0.0.0",
+    "@tryaura/core": "0.0.0"
   },
   "engines": {
     "node": ">=24"