@ultimat3/testing 7.0.0 → 8.0.0

package/CLAUDE.md

@@ -64,7 +64,8 @@ is its own entry point and not part of the barrel.
 | `querySelector` skips `this` | descendants only, as the DOM's does. Matching the element it is called on made a host `<div>` answer `find('div')` with the container the test built rather than the markup the island rendered |
 | A mount installs process globals | so `MountedIsland` is `Disposable` and a `mount` that THROWS restores before it rethrows. A fake `document` left installed reaches every later FILE in the run, and fails somewhere with no thread back |
 | `fire` answers whether a handler ran | a selector matching nothing and an island that attached no handler are the same silence otherwise — the second is a bug, the first a typo. It reads Solid's delegated `$$click` property or an `addEventListener` listener; a compiled island uses one or the other |
-| The chunk is imported from a temp FILE, `As of 2026-08-21` | `mkdtemp`ed once per process and named by the chunk's SHA-256, so an edited island is a different module rather than a cache hit on the same path and no test leaves a `.mjs` behind in the app it just built. It was a `data:` URL until 2026-08-21 and that read better: `bun test --coverage` panics with `range end index N out of range for slice of length 4096` on `import()` of any `data:` module past ~4 kB, and an island chunk is 12-55 kB — so every island test dumped core in the per-package CI job while the root gate stayed green. Measured on Bun 1.4.0; `fixture-island.test.ts` pins the file form as a source rule, because the failure is invisible to a `bun test` without `--coverage` |
+| The chunk is imported from a temp FILE, `As of 2026-08-21` | `mkdtemp`ed on the FIRST mount and named by the chunk's SHA-256, so an edited island is a different module rather than a cache hit on the same path and no test leaves a `.mjs` behind in the app it just built. It was a `data:` URL until 2026-08-21 and that read better: `bun test --coverage` panics with `range end index N out of range for slice of length 4096` on `import()` of any `data:` module past ~4 kB, and an island chunk is 12-55 kB — so every island test dumped core in the per-package CI job while the root gate stayed green. Measured on Bun 1.4.0; `fixture-island.test.ts` pins the file form as a source rule, because the failure is invisible to a `bun test` without `--coverage` |
+| The scratch directory is lazy and removed, `As of 2026-08-22` | `mkdtempSync` ran at MODULE scope and nothing removed it, so every process importing `@ultimat3/testing` at all — this module is on the `.` barrel, so `expect` alone did it — left one directory in `/tmp` forever. Created on the first `modulePathFor` and `rmSync`ed from `process.on('exit')`: the handler has to be synchronous, and it is per PROCESS while `MountedIsland`'s `Disposable` is per mount and is never reached by a mount that threw. `fixture-island-cleanup.test.ts` asserts both halves from a CHILD process, which is the only place either is observable |
 | Attaching a node MOVES it | `appendChild`, `insertBefore` and `replaceChild` detach the node from its old parent first, and `removeChild` clears `parentNode` — as the DOM does, and as `reconcileArrays` requires: a `<For>` re-order calls `parentNode.insertBefore(child, ref)` on a child ALREADY in that parent (`solid-js/web`'s `web.js:155`), so an attach that only pushed left the node in BOTH positions and a five-row list reconciled to ten. A removal that left `parentNode` set was the same defect read backwards — `indexOf` answers -1, so the orphan's `nextSibling` was its old parent's FIRST child instead of `null`. `textContent = ''` detaches too; it opens every island's `mount` |
 | Globals install all-or-nothing | `installGlobals` saves DESCRIPTORS, not values — a saved value cannot tell "no such global" from "a global holding `undefined`", and the teardown deleted both — and rolls the whole install back if one assignment throws. That rollback is the half with teeth: the install runs BEFORE `mountIsland`'s own `try`, so a getter-only own global among the caller's `globals` used to leave the fake `document` installed for the rest of the process |
 | Which command shards | `bun test` is one process on one database, and that is still what a scaffolded app's `test` script runs. `x verify` DOES shard its parallel test steps, over `ULTIMATE_TEST_WORKER` and one database per worker; `live` and `e2e` stay serial because a replication slot is cluster-scoped and `e2e` has one built `dist/`. Say which command a claim is about |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/testing",
-  "version": "7.0.0",
+  "version": "8.0.0",
   "description": "Test harness: cloned template DBs per worker, frozen clock, sealed network, 6 test types",
   "license": "MIT",
   "type": "module",
@@ -33,16 +33,16 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@ultimat3/cache": "7.0.0",
-    "@ultimat3/core": "7.0.0",
-    "@ultimat3/db": "7.0.0",
-    "@ultimat3/entity": "7.0.0",
-    "@ultimat3/i18n": "7.0.0",
-    "@ultimat3/jobs": "7.0.0",
-    "@ultimat3/mail": "7.0.0",
-    "@ultimat3/policy": "7.0.0",
-    "@ultimat3/query": "7.0.0",
-    "@ultimat3/realtime": "7.0.0",
-    "@ultimat3/time": "7.0.0"
+    "@ultimat3/cache": "8.0.0",
+    "@ultimat3/core": "8.0.0",
+    "@ultimat3/db": "8.0.0",
+    "@ultimat3/entity": "8.0.0",
+    "@ultimat3/i18n": "8.0.0",
+    "@ultimat3/jobs": "8.0.0",
+    "@ultimat3/mail": "8.0.0",
+    "@ultimat3/policy": "8.0.0",
+    "@ultimat3/query": "8.0.0",
+    "@ultimat3/realtime": "8.0.0",
+    "@ultimat3/time": "8.0.0"
   }
 }

package/src/fixture-island.ts

@@ -3,7 +3,7 @@
 // packages are tier 5, so importing it here would be the reverse of the one declared `cli → testing`
 // edge. A structural seam keeps the direction honest and survives the bundler changing underneath.
 
-import { mkdtempSync } from 'node:fs';
+import { mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { islandMountMissing, islandNotBuilt } from './errors';
@@ -76,8 +76,36 @@ function entryOf(module: unknown, file: string): IslandEntry {
   return { mount: mount as IslandEntry['mount'] };
 }
 
-/** One directory per process, outside the app under test — so no test leaves a `.mjs` behind. */
-const MODULE_DIR = mkdtempSync(join(tmpdir(), 'ultimate-island-'));
+let moduleDir: string | undefined;
+
+/**
+ * One directory per process, outside the app under test — so no test leaves a `.mjs` behind. Two
+ * properties the module-scope `mkdtempSync` it replaces had neither of:
+ *
+ * LAZY. This module is on the `.` barrel, so importing `@ultimat3/testing` for `expect` alone
+ * created a directory — in every test process in the repo, whether or not it ever mounts anything.
+ *
+ * REMOVED. `exit` and `rmSync`, because an exit handler runs synchronously and nothing else covers
+ * every path: `mountIsland` restores and rethrows on a failed mount, so that run never reaches the
+ * `Disposable`, and the directory is per PROCESS while the disposable is per mount.
+ */
+function moduleDirPath(): string {
+  const existing = moduleDir;
+  if (existing !== undefined) return existing;
+  const created = mkdtempSync(join(tmpdir(), 'ultimate-island-'));
+  process.on('exit', () => {
+    rmSync(created, { recursive: true, force: true });
+  });
+  moduleDir = created;
+  return created;
+}
+
+/**
+ * The scratch root, or `undefined` when nothing has been mounted. Read by the leak test, which
+ * asserts both halves of the above from a CHILD process — the only place where "this process
+ * created no directory" and "the directory is gone afterwards" are both observable.
+ */
+export const islandModuleDir = (): string | undefined => moduleDir;
 
 /**
  * A temp file named by the chunk's own hash, NOT a `data:` URL. The URL form read better and
@@ -90,7 +118,7 @@ const MODULE_DIR = mkdtempSync(join(tmpdir(), 'ultimate-island-'));
  * edited island is a different module rather than a cache hit on the same path.
  */
 const modulePathFor = (code: string): string =>
-  join(MODULE_DIR, `${Bun.SHA256.hash(code, 'hex').slice(0, 16)}.mjs`);
+  join(moduleDirPath(), `${Bun.SHA256.hash(code, 'hex').slice(0, 16)}.mjs`);
 
 /**
  * DESCRIPTORS, not values, and all-or-nothing.

package/src/live-node.ts

@@ -17,7 +17,7 @@ import type {
   UpgradeTarget,
   WsData,
   WsLike,
-} from '@ultimat3/realtime';
+} from '@ultimat3/realtime/server';
 import { liveNodeUnavailable, upgradeRefused } from './errors';
 
 /** Every frame this end received, in order, already parsed. */
@@ -121,7 +121,7 @@ let sequence = 0;
 export async function createLiveNode(options: LiveNodeOptions = {}): Promise<LiveNodeHandle> {
   const core = await import('@ultimat3/core');
   const query = await import('@ultimat3/query');
-  const realtime = await import('@ultimat3/realtime');
+  const realtime = await import('@ultimat3/realtime/server');
 
   const buildId = options.buildId ?? 'test-build';
   const transport = new realtime.InProcessTransport();

package/src/live-replicator.ts

@@ -14,7 +14,8 @@
 // still decides what a real node reads, and this is never in that decision.
 
 import type { RowBulkChange, RowChange, RowObserver } from '@ultimat3/entity';
-import type { ChangeEvent, ChangeOp, LiveQueryRegistry, Row } from '@ultimat3/realtime';
+import type { Row } from '@ultimat3/realtime';
+import type { ChangeEvent, ChangeOp, LiveQueryRegistry } from '@ultimat3/realtime/server';
 
 /** What a caller does with a change nobody could deliver. */
 export interface LiveReplicatorOptions {