@vibe-agent-toolkit/utils 0.2.0-rc.1 → 0.2.0-rc.10

package/dist/test-helpers.js

@@ -1,182 +1,260 @@
 import { randomBytes } from 'node:crypto';
-import { mkdtempSync, rmSync, symlinkSync } from 'node:fs';
+import nodeFs, { rmSync, symlinkSync } from 'node:fs';
 import fs from 'node:fs/promises';
-import { mkdirSyncReal, normalizedTmpdir, safePath } from './path-utils.js';
+import { syncBuiltinESMExports } from 'node:module';
+import { isFilesystemAccessError } from './errors/errno.js';
+import { normalizedTmpdir, safePath, toForwardSlash } from './path-utils.js';
+let cachedCapability;
 /**
- * Get isolated test output directory for current test run
+ * The errnos that mean "this host cannot create symlinks": Windows without
+ * Developer Mode or `SeCreateSymbolicLinkPrivilege` (`EPERM`), and a
+ * filesystem that has no symlinks to offer (`ENOTSUP` / `EOPNOTSUPP`).
+ */
+const SYMLINK_UNSUPPORTED_ERRNOS = new Set(['EPERM', 'ENOTSUP', 'EOPNOTSUPP']);
+function isSymlinkUnsupported(error) {
+    return error instanceof Error && 'code' in error && typeof error.code === 'string' && SYMLINK_UNSUPPORTED_ERRNOS.has(error.code);
+}
+/**
+ * Whether this PROCESS can create symlinks — probed once and memoized.
  *
- * Creates a unique directory under `packages/{packageName}/.test-output/{testType}/{runId}`
- * where runId is `{timestamp}-{randomId}` to ensure isolation across parallel test runs.
+ * On Windows, `symlink()` needs either Developer Mode or
+ * `SeCreateSymbolicLinkPrivilege`. That privilege lives on the process's
+ * security token, not on any one directory: it cannot change between calls
+ * within a single run, so probing it once and reusing the result is a
+ * memoization, not a shortcut that risks a stale answer. (A filesystem that
+ * itself has no symlinks — some network shares, some FAT variants — answers
+ * `ENOTSUP` and is read as the same "no"; every fixture in this repo creates
+ * its roots under {@link normalizedTmpdir}, so it never arises here.)
  *
- * @param packageName - Name of package (e.g., 'rag-lancedb')
- * @param testType - Type of test ('unit', 'integration', 'system')
- * @param subdirs - Optional subdirectories to create within the test output directory
- * @returns Absolute path to the created directory
+ * Because the answer is memoized for the whole process, what reads as "no"
+ * matters more than usual: a `null` here silently `skip()`s every symlink test
+ * for the rest of the run. So ONLY {@link SYMLINK_UNSUPPORTED_ERRNOS} is a
+ * no. A tmpdir that is unwritable or missing, or a bug, is not an answer about
+ * symlinks at all and stays loud rather than becoming a process-wide skip for
+ * a reason nothing reported.
  *
- * @example
- * ```typescript
- * // Create isolated database directory for system tests
- * const dbPath = getTestOutputDir('rag-lancedb', 'system', 'databases', 'test-db');
- * // Result: packages/rag-lancedb/.test-output/system/20260105-143022-abc123/databases/test-db
+ * Fixtures that depend on symlinks must ask rather than assume — and, having
+ * asked, must SAY they skipped. A symlink case that silently no-ops reads as
+ * a passing test for a property nobody exercised.
  *
- * // Create temporary file directory for integration tests
- * const tempDir = getTestOutputDir('agent-skills', 'integration', 'temp-files');
- * // Result: packages/agent-skills/.test-output/integration/20260105-143022-def456/temp-files
- * ```
+ * @returns A {@link SymlinkCapability} token when this process can create
+ *   symlinks, else `null`. Route the `null` case through vitest's `skip()`
+ *   rather than a plain `return`, so the skip is visible in the report.
  */
-export function getTestOutputDir(packageName, testType, ...subdirs) {
-    // Generate unique run ID: timestamp + random hex
-    const timestamp = new Date().toISOString().replaceAll(/[:.]/g, '-').slice(0, 19);
-    const randomId = randomBytes(4).toString('hex');
-    const runId = `${timestamp}-${randomId}`;
-    // Find project root (assuming we're always in packages/*/test/*)
-    const projectRoot = safePath.resolve(process.cwd());
-    // Build path: packages/{packageName}/.test-output/{testType}/{runId}/{...subdirs}
-    const testOutputDir = safePath.join(projectRoot, 'packages', packageName, '.test-output', testType, runId, ...subdirs);
-    // Create directory structure and return normalized path
-    return mkdirSyncReal(testOutputDir, { recursive: true });
+export function symlinkCapability() {
+    if (cachedCapability === undefined) {
+        const probe = safePath.join(normalizedTmpdir(), `.vat-symlink-probe-${randomBytes(4).toString('hex')}`);
+        try {
+            symlinkSync('.', probe);
+            cachedCapability = {};
+        }
+        catch (error) {
+            if (!isSymlinkUnsupported(error))
+                throw error;
+            cachedCapability = null;
+        }
+        if (cachedCapability !== null) {
+            // Best-effort: the capability answer comes from creation succeeding, not
+            // from cleanup — a probe left behind by a failed rmSync (e.g. a transient
+            // lock on the freshly-created reparse point) must not flip a real "yes"
+            // into a memoized, process-wide "no". Only the filesystem refusing the
+            // delete is that case; a bug is not, and stays loud.
+            try {
+                rmSync(probe, { force: true });
+            }
+            catch (error) {
+                if (!isFilesystemAccessError(error))
+                    throw error;
+            }
+        }
+    }
+    return cachedCapability;
 }
 /**
- * Get the base test output directory for a package
- * Useful for cleanup operations that need to remove all test output
+ * Create a symlink — the one sanctioned call site for `fs.symlinkSync` in
+ * test code. Requires a {@link SymlinkCapability}, which only
+ * {@link symlinkCapability} can mint, so a test cannot reach the real
+ * syscall without first proving (or explicitly bypassing via `skip()`) that
+ * this host supports it.
  *
- * @param packageName - Name of package (e.g., 'rag-lancedb')
- * @returns Absolute path to packages/{packageName}/.test-output
- *
- * @example
- * ```typescript
- * const baseDir = getTestOutputBase('rag-lancedb');
- * // Result: packages/rag-lancedb/.test-output
- * ```
+ * @param _cap - Proof from {@link symlinkCapability} that this host can create symlinks
+ * @param target - The existing path the new link should point at
+ * @param path - Where to create the link
+ * @param type - Windows-only link-type hint (`'file'` \| `'dir'` \| `'junction'`); ignored on POSIX
  */
-export function getTestOutputBase(packageName) {
-    const projectRoot = safePath.resolve(process.cwd());
-    return safePath.join(projectRoot, 'packages', packageName, '.test-output');
+export function createSymlink(_cap, target, path, type) {
+    symlinkSync(target, path, type);
 }
 /**
- * Per-suite temp directory pattern (async version)
- * Creates a single temp directory for the entire test suite,
- * with subdirectories for each test. This is 3-5x faster on Windows
- * than creating a new mkdtemp for each test.
- *
- * @param prefix - Prefix for the suite temp directory name
- * @returns Suite helper with beforeAll, afterAll, beforeEach, afterEach, and getTempDir
- *
- * @example
- * ```typescript
- * const suite = setupAsyncTempDirSuite('my-test');
- *
- * describe('my tests', () => {
- *   beforeAll(suite.beforeAll);
- *   afterAll(suite.afterAll);
- *   beforeEach(suite.beforeEach);
+ * The async counterpart of {@link createSymlink}, for fixtures already using
+ * `node:fs/promises`. Same capability requirement, same reasoning.
  *
- *   it('test 1', async () => {
- *     const tempDir = suite.getTempDir();
- *     // Use tempDir...
- *   });
- * });
- * ```
+ * @param _cap - Proof from {@link symlinkCapability} that this host can create symlinks
+ * @param target - The existing path the new link should point at
+ * @param path - Where to create the link
+ * @param type - Windows-only link-type hint (`'file'` \| `'dir'` \| `'junction'`); ignored on POSIX
  */
-export function setupAsyncTempDirSuite(prefix) {
-    let suiteDir = '';
-    let tempDir = '';
-    let testCounter = 0;
-    return {
-        beforeAll: async () => {
-            suiteDir = await fs.mkdtemp(safePath.join(normalizedTmpdir(), `${prefix}-suite-`));
-        },
-        afterAll: async () => {
-            if (suiteDir) {
-                await fs.rm(suiteDir, { recursive: true, force: true });
-            }
-        },
-        beforeEach: async () => {
-            testCounter++;
-            tempDir = safePath.join(suiteDir, `test-${testCounter}`);
-            // eslint-disable-next-line security/detect-non-literal-fs-filename -- tempDir is from mkdtemp
-            await fs.mkdir(tempDir, { recursive: true });
-        },
-        afterEach: async () => {
-            // Per-test cleanup handled by suite cleanup
-        },
-        getTempDir: () => tempDir,
-    };
+export async function createSymlinkAsync(_cap, target, path, type) {
+    await fs.symlink(target, path, type);
 }
 /**
- * Per-suite temp directory pattern (sync version)
- * Creates a single temp directory for the entire test suite,
- * with subdirectories for each test. This is 3-5x faster on Windows
- * than creating a new mkdtemp for each test.
+ * The variables git exports into a hook, which a fixture must clear before it
+ * can fabricate its own.
  *
- * @param prefix - Prefix for the suite temp directory name
- * @returns Suite helper with beforeAll, afterAll, beforeEach, afterEach, and getTempDir
+ * These are the ones git sets *for* you. Deliberately **not** the operator's own
+ * `GIT_CONFIG_COUNT`/`KEY_n`/`VALUE_n`/`GLOBAL`/`SYSTEM` channel — a test may be
+ * using that on purpose to point a clone at a local path, and clearing it sends
+ * the clone to the network instead.
+ */
+export const INHERITED_GIT_ENV = [
+    'GIT_ALTERNATE_OBJECT_DIRECTORIES',
+    'GIT_CEILING_DIRECTORIES',
+    'GIT_COMMON_DIR',
+    'GIT_CONFIG_PARAMETERS',
+    'GIT_DIR',
+    'GIT_DISCOVERY_ACROSS_FILESYSTEM',
+    'GIT_GRAFT_FILE',
+    'GIT_INDEX_FILE',
+    'GIT_INDEX_VERSION',
+    'GIT_NAMESPACE',
+    'GIT_NOTES_REF',
+    'GIT_OBJECT_DIRECTORY',
+    'GIT_PREFIX',
+    'GIT_SHALLOW_FILE',
+    'GIT_WORK_TREE',
+];
+/**
+ * Remove every inherited git redirection from `process.env`, and hand back the
+ * undo.
  *
- * @example
- * ```typescript
- * const suite = setupSyncTempDirSuite('my-test');
+ * A test that fabricates a hook environment has to start from a known-clean one,
+ * or it inherits whatever the *outer* runner exported and can no longer tell its
+ * own fixture apart from the ambient state — it then passes or fails for reasons
+ * it never set up. Restoring afterwards matters just as much: these are
+ * process-global, so a test that leaks `GIT_DIR` silently redirects every later
+ * test sharing the worker.
+ *
+ * ⚠️ **The key list is restated here on purpose, not by oversight.** Deriving it
+ * from `@vibe-validate/git`'s `stripGitEnv()` would be tidier, and it is exactly
+ * what this function did for one revision — but this module is the `./testing`
+ * subpath, which `subpath-purity.test.ts` pins as reaching **no third-party
+ * package at all** so it stays importable with zero dependencies installed. One
+ * import cost that property. The drift risk the derivation was avoiding is
+ * handled instead by {@link "../test/test-helpers-git-env.test".default}, which
+ * asserts this list equals what the shipped scrub removes.
  *
- * describe('my tests', () => {
- *   beforeAll(suite.beforeAll);
- *   afterAll(suite.afterAll);
- *   beforeEach(suite.beforeEach);
+ * @returns A function restoring every variable to its prior value, putting back
+ *   "was not set" as unset rather than as an empty string
  *
- *   it('test 1', () => {
- *     const tempDir = suite.getTempDir();
- *     // Use tempDir...
- *   });
- * });
+ * @example
+ * ```typescript
+ * let restoreGitEnv: () => void;
+ * beforeEach(() => { restoreGitEnv = detachGitEnv(); });
+ * afterEach(() => { restoreGitEnv(); });
  * ```
  */
-export function setupSyncTempDirSuite(prefix) {
-    let suiteDir = '';
-    let tempDir = '';
-    let testCounter = 0;
-    return {
-        beforeAll: () => {
-            suiteDir = mkdtempSync(safePath.join(normalizedTmpdir(), `${prefix}-suite-`));
-        },
-        afterAll: () => {
-            if (suiteDir) {
-                rmSync(suiteDir, { recursive: true, force: true });
-            }
-        },
-        beforeEach: () => {
-            testCounter++;
-            tempDir = safePath.join(suiteDir, `test-${testCounter}`);
-            mkdirSyncReal(tempDir);
-        },
-        afterEach: () => {
-            // Per-test cleanup handled by suite cleanup
-        },
-        getTempDir: () => tempDir,
+export function detachGitEnv() {
+    const saved = new Map();
+    const forget = (name) => {
+        saved.set(name, process.env[name]);
+        delete process.env[name];
+    };
+    for (const name of INHERITED_GIT_ENV) {
+        forget(name);
+    }
+    return () => {
+        for (const [name, value] of saved) {
+            // Deleted first so an absent variable is restored as absent: assigning
+            // `undefined` would leave the literal string 'undefined' behind.
+            delete process.env[name];
+            if (value !== undefined)
+                process.env[name] = value;
+        }
     };
 }
 /**
- * Probe whether this host can create symbolic links inside `dir`.
+ * The errno-shaped error a refused `fs` call throws: a message, the `code`,
+ * and the `syscall`, exactly as Node shapes one.
+ */
+export function errnoError(code, syscall, target) {
+    return Object.assign(new Error(`${code}: refused, ${syscall} '${target}'`), { code, syscall });
+}
+/**
+ * Assign `fn` over `module[method]` and republish the builtin's ESM bindings.
  *
- * On Windows, `symlink()` needs either Developer Mode or
- * `SeCreateSymbolicLinkPrivilege`; CI agents frequently have neither. Fixtures
- * that depend on symlinks must therefore ask rather than assume — and, having
- * asked, must SAY they skipped. A symlink case that silently no-ops reads as a
- * passing test for a property nobody exercised.
+ * Assigning on the CJS object alone reaches ONLY a `import fs from 'node:fs'`
+ * caller — a named or namespace import reads the builtin's ESM bindings, which
+ * Node snapshots at import time. `syncBuiltinESMExports()` after each
+ * assignment republishes the patch (and the restore) to every import style;
+ * measured under vitest: without it, a spy on a named-import caller attached
+ * and counted zero, which reads exactly like "this function performs no I/O".
+ */
+function republish(module, method, fn) {
+    module[method] = fn;
+    syncBuiltinESMExports();
+}
+/**
+ * Make `fs[method]` throw `code` for exactly `targetPath` until the returned
+ * restore is called; every other path, and every other method, stays real.
  *
- * The probe creates and removes one link, because the privilege cannot be
- * inferred from `process.platform` alone.
+ * A patch rather than a `chmod`: `chmod` reaches one errno (`EACCES`), only
+ * where POSIX modes bind, and not as root — and the property under test is
+ * "any refusal that is not an absence", so `EACCES`, `ELOOP`, `EMFILE` must all
+ * be reachable. What a walk under test meets is ONE refused call inside an
+ * otherwise ordinary tree; a walk that gave up entirely would pass a test where
+ * everything was refused.
  *
- * @param dir - An existing directory to probe in (the probe cleans up after itself)
- * @returns True when a symlink was created successfully
+ * Lives in the shipped helpers because consumers in five packages each need to
+ * refuse a call, and the duplication gate refuses five copies.
+ */
+export function refuseSyncFs(method, targetPath, code) {
+    const original = nodeFs[method];
+    const refused = toForwardSlash(targetPath);
+    republish(nodeFs, method, (target, ...rest) => {
+        if (toForwardSlash(String(target)) === refused)
+            throw errnoError(code, method, String(target));
+        return original(target, ...rest);
+    });
+    return () => republish(nodeFs, method, original);
+}
+/**
+ * `fs/promises[method]` rejects with `code` for exactly `targetPath` until the
+ * returned restore is called; every other path, and every other method, is real.
+ */
+export function refuseAsyncFs(method, targetPath, code) {
+    const original = fs[method].bind(fs);
+    const refused = toForwardSlash(targetPath);
+    republish(fs, method, async (target, ...rest) => {
+        if (toForwardSlash(String(target)) === refused)
+            throw errnoError(code, method, String(target));
+        return original(target, ...rest);
+    });
+    return () => republish(fs, method, original);
+}
+/**
+ * Run `body` while `fs[method]` throws `code` for exactly `targetPath`; the
+ * patch is lifted however `body` exits. See {@link refuseSyncFs}.
  */
-export function canCreateSymlinks(dir) {
-    const probe = safePath.join(dir, `.vat-symlink-probe-${randomBytes(4).toString('hex')}`);
+export async function withSyncFsRefused(method, targetPath, code, body) {
+    const restore = refuseSyncFs(method, targetPath, code);
     try {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller-supplied dir plus a random basename generated here
-        symlinkSync('.', probe);
+        return await body();
     }
-    catch {
-        return false;
+    finally {
+        restore();
     }
-    rmSync(probe, { force: true });
-    return true;
+}
+/**
+ * Run `body` with `fs.readdirSync` of exactly `directory` throwing an error
+ * carrying errno `code`. The listing case of {@link withSyncFsRefused}, named
+ * because refusing a LISTING is the question the crawler's consumers ask.
+ *
+ * @param directory - Absolute path of the one directory to refuse
+ * @param code - The errno to reject with
+ * @param body - Runs while the refusal is in force; may be async
+ * @returns Whatever `body` returned
+ */
+export async function withReaddirSyncRefused(directory, code, body) {
+    return withSyncFsRefused('readdirSync', directory, code, body);
 }
 //# sourceMappingURL=test-helpers.js.map

package/dist/test-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"test-helpers.js","sourceRoot":"","sources":["../src/test-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,QAA2C,EAC3C,GAAG,OAAiB;IAEpB,iDAAiD;IACjD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC;IAEzC,iEAAiE;IACjE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpD,kFAAkF;IAClF,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CACjC,WAAW,EACX,UAAU,EACV,WAAW,EACX,cAAc,EACd,QAAQ,EACR,KAAK,EACL,GAAG,OAAO,CACX,CAAC;IAEF,wDAAwD;IAExD,OAAO,aAAa,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IAOnD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,OAAO;QACL,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,UAAU,EAAE,KAAK,IAAI,EAAE;YACrB,WAAW,EAAE,CAAC;YACd,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC;YACzD,8FAA8F;YAC9F,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,4CAA4C;QAC9C,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAOlD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,OAAO;QACL,SAAS,EAAE,GAAG,EAAE;YACd,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE;YACb,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,GAAG,EAAE;YACf,WAAW,EAAE,CAAC;YACd,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC;YACzD,aAAa,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,SAAS,EAAE,GAAG,EAAE;YACd,4CAA4C;QAC9C,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC;QACH,gIAAgI;QAChI,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"test-helpers.js","sourceRoot":"","sources":["../src/test-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAgB7E,IAAI,gBAAsD,CAAC;AAE3D;;;;GAIG;AACH,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAEpG,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnI,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,sBAAsB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC;YACH,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxB,gBAAgB,GAAG,EAAuB,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC9C,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,uEAAuE;YACvE,qDAAqD;YACrD,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAkC;IAElC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAkC;IAElC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,kCAAkC;IAClC,yBAAyB;IACzB,gBAAgB;IAChB,uBAAuB;IACvB,SAAS;IACT,iCAAiC;IACjC,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,eAAe;IACf,eAAe;IACf,sBAAsB;IACtB,YAAY;IACZ,kBAAkB;IAClB,eAAe;CACP,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEpD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;QACpC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,uEAAuE;YACvE,iEAAiE;YACjE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAGD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,OAAO,KAAK,MAAM,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACjG,CAAC;AAgBD;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc,EAAE,EAAW;IAC3D,MAAkC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IACjD,qBAAqB,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,MAA6B,EAAE,UAAkB,EAAE,IAAY;IAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAoC,CAAC;IACnE,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3C,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,MAAe,EAAE,GAAG,IAAe,EAAW,EAAE;QACzE,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO;YAAE,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAA8B,EAAE,UAAkB,EAAE,IAAY;IAC5F,MAAM,QAAQ,GAAI,EAAE,CAAC,MAAM,CAA8C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3C,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAe,EAAE,GAAG,IAAe,EAAoB,EAAE;QACpF,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO;YAAE,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA6B,EAC7B,UAAkB,EAClB,IAAY,EACZ,IAA0B;IAE1B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,IAAY,EACZ,IAA0B;IAE1B,OAAO,iBAAiB,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC"}

package/dist/testing/executables.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Absolute paths for the executables test fixtures spawn.
+ *
+ * A test that spawns `'git'` or `'node'` by bare name asks the OS to search
+ * `PATH`, and a writable directory on `PATH` turns that into a place to plant
+ * a binary (the class SonarCloud's S4036 flags). Fixtures resolve the binary
+ * ONCE, here, to an absolute path and spawn that: `node` is the process that
+ * is running the test (`process.execPath`, the only node whose version the
+ * test can vouch for), and `git` is found by walking `PATH`.
+ *
+ * Why a second `PATH` walk beside `safe-exec.ts`'s `which`: `which` resolves
+ * in-process too, but it is a third-party package, and the `./testing` subpath
+ * is pinned dependency-free (`subpath-purity.test.ts`) — an adopter's test
+ * suite pulls nothing in. This walk answers the same question under that
+ * constraint: the first REGULAR FILE on `PATH` named `name` (with a `PATHEXT`
+ * extension on Windows) that the process may execute.
+ */
+/** The `node` running this test, absolute. */
+export declare const NODE_EXECUTABLE: string;
+/** The names to try in one `PATH` directory: `PATHEXT` variants on Windows, the bare name elsewhere. */
+export declare function executableCandidates(name: string, platform: NodeJS.Platform, pathext: string | undefined): string[];
+/**
+ * The first executable named `name` on `PATH`, absolute.
+ *
+ * @throws {Error} when nothing on `PATH` is executable under that name — a
+ *   fixture that needs `git` and has none should fail at the first spawn with
+ *   the reason, not with the OS's `ENOENT` for a bare word.
+ */
+export declare function resolveExecutable(name: string): string;
+/** `git`, absolute, resolved on first use and cached for the process. */
+export declare function gitExecutable(): string;
+//# sourceMappingURL=executables.d.ts.map

package/dist/testing/executables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executables.d.ts","sourceRoot":"","sources":["../../src/testing/executables.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,8CAA8C;AAC9C,eAAO,MAAM,eAAe,EAAE,MAAyB,CAAC;AAExD,wGAAwG;AACxG,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAInH;AAcD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUtD;AAID,yEAAyE;AACzE,wBAAgB,aAAa,IAAI,MAAM,CAGtC"}

package/dist/testing/executables.js

@@ -0,0 +1,70 @@
+/**
+ * Absolute paths for the executables test fixtures spawn.
+ *
+ * A test that spawns `'git'` or `'node'` by bare name asks the OS to search
+ * `PATH`, and a writable directory on `PATH` turns that into a place to plant
+ * a binary (the class SonarCloud's S4036 flags). Fixtures resolve the binary
+ * ONCE, here, to an absolute path and spawn that: `node` is the process that
+ * is running the test (`process.execPath`, the only node whose version the
+ * test can vouch for), and `git` is found by walking `PATH`.
+ *
+ * Why a second `PATH` walk beside `safe-exec.ts`'s `which`: `which` resolves
+ * in-process too, but it is a third-party package, and the `./testing` subpath
+ * is pinned dependency-free (`subpath-purity.test.ts`) — an adopter's test
+ * suite pulls nothing in. This walk answers the same question under that
+ * constraint: the first REGULAR FILE on `PATH` named `name` (with a `PATHEXT`
+ * extension on Windows) that the process may execute.
+ */
+import { accessSync, constants, statSync } from 'node:fs';
+import { delimiter } from 'node:path';
+import { isFilesystemAccessError } from '../errors/errno.js';
+import { safePath } from '../path-core.js';
+/** The `node` running this test, absolute. */
+export const NODE_EXECUTABLE = process.execPath;
+/** The names to try in one `PATH` directory: `PATHEXT` variants on Windows, the bare name elsewhere. */
+export function executableCandidates(name, platform, pathext) {
+    if (platform !== 'win32')
+        return [name];
+    const extensions = (pathext ?? '.EXE;.CMD;.BAT;.COM').split(';').filter((ext) => ext !== '');
+    return [...extensions.map((ext) => `${name}${ext}`), name];
+}
+/** Is `full` a regular file the process may execute? A directory named `git` passes `X_OK` (search permission) and is not one. */
+function isExecutableFile(full) {
+    try {
+        accessSync(full, constants.X_OK);
+        return statSync(full).isFile();
+    }
+    catch (error) {
+        // Absent or not executable here: the next directory on PATH may have it.
+        if (isFilesystemAccessError(error))
+            return false;
+        throw error;
+    }
+}
+/**
+ * The first executable named `name` on `PATH`, absolute.
+ *
+ * @throws {Error} when nothing on `PATH` is executable under that name — a
+ *   fixture that needs `git` and has none should fail at the first spawn with
+ *   the reason, not with the OS's `ENOENT` for a bare word.
+ */
+export function resolveExecutable(name) {
+    const candidates = executableCandidates(name, process.platform, process.env['PATHEXT']);
+    for (const dir of (process.env['PATH'] ?? '').split(delimiter)) {
+        if (dir === '')
+            continue;
+        for (const candidate of candidates) {
+            const full = safePath.join(dir, candidate);
+            if (isExecutableFile(full))
+                return full;
+        }
+    }
+    throw new Error(`No executable named "${name}" on PATH (${process.env['PATH'] ?? '<unset>'})`);
+}
+let resolvedGit;
+/** `git`, absolute, resolved on first use and cached for the process. */
+export function gitExecutable() {
+    resolvedGit ??= resolveExecutable('git');
+    return resolvedGit;
+}
+//# sourceMappingURL=executables.js.map

package/dist/testing/executables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executables.js","sourceRoot":"","sources":["../../src/testing/executables.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,8CAA8C;AAC9C,MAAM,CAAC,MAAM,eAAe,GAAW,OAAO,CAAC,QAAQ,CAAC;AAExD,wGAAwG;AACxG,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,QAAyB,EAAE,OAA2B;IACvG,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,kIAAkI;AAClI,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,IAAI,uBAAuB,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACxF,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,IAAI,GAAG,KAAK,EAAE;YAAE,SAAS;QACzB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC3C,IAAI,gBAAgB,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,cAAc,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC;AACjG,CAAC;AAED,IAAI,WAA+B,CAAC;AAEpC,yEAAyE;AACzE,MAAM,UAAU,aAAa;IAC3B,WAAW,KAAK,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/testing/hostile-tree.d.ts

@@ -0,0 +1,79 @@
+/**
+ * One hostile fixture tree, built the same way for every sink.
+ *
+ * A correctness sweep found a delete, a copy and an uninstall that
+ * each walked out of their root, and found them by hand-building the same
+ * shapes — a symlink pointing out, a symlink pointing back at the root, a
+ * `..`-named entry, an unreadable directory, a traversal name — one throwaway
+ * fixture per probe. This module
+ * is that fixture, once, so a sink's test says `buildHostileTree(base)` and
+ * `it.each(HOSTILE_NAMES)` and is refusing the shapes the next sink's test is
+ * refusing too. A shape added here reaches every sink that uses it.
+ *
+ * ⛔ Framework-free, like everything under `testing/`: no `vitest` import, so
+ * the `./testing` subpath keeps the empty third-party set its purity pin
+ * asserts. Fields that the host cannot build are `null` — route those through
+ * the suite's own `skip()` so the skip is visible in the report.
+ */
+/** The names a sink must refuse when they arrive as "the entry to act on". */
+export declare const HOSTILE_NAMES: readonly string[];
+/** The tree {@link buildHostileTree} plants, every path absolute and forward-slashed. */
+export interface HostileTree {
+    /** The trusted root — the directory a sink must stay inside. */
+    readonly root: string;
+    /** A regular directory under the root; `root/member`. */
+    readonly member: string;
+    /** A member whose NAME begins with two dots; `root/..cache`. Legitimate. */
+    readonly dotdotNamed: string;
+    /** A sibling of the root, outside it. */
+    readonly outside: string;
+    /** `outside/victim` — holds `secret.txt`; a traversal that succeeds deletes or copies this. */
+    readonly victim: string;
+    /** `root/link-out` → `outside/victim`, or `null` where the host cannot symlink. */
+    readonly linkOut: string | null;
+    /** `root/link-in` → `root/member`, or `null` where the host cannot symlink. */
+    readonly linkIn: string | null;
+    /** `root/dangling` → a path that does not exist, or `null` where the host cannot symlink. */
+    readonly dangling: string | null;
+    /** `root/loop` → `root` itself — a walk that follows it never ends — or `null` where the host cannot symlink. */
+    readonly linkLoop: string | null;
+    /** A link OUTSIDE the tree that points AT the root, or `null` where the host cannot symlink. */
+    readonly rootAlias: string | null;
+    /** `root/unreadable`, mode 000, or `null` where the host cannot deny reads. */
+    readonly unreadable: string | null;
+    /** A directory whose own name is 200 characters, under the root; `null` where the OS refused it. */
+    readonly longPath: string | null;
+    /** Restore modes and remove everything this call created. Idempotent. */
+    cleanup(): void;
+}
+/**
+ * Plant the hostile tree under `base`, which must exist and be empty enough
+ * to take `root`, `outside` and `root-alias` as direct children.
+ *
+ * @param base - A scratch directory the caller owns (a per-test temp dir)
+ * @returns The tree, with `null` for every shape this host cannot build
+ */
+export declare function buildHostileTree(base: string): HostileTree;
+/** A hostile tree replanted per test, driven from the suite's own hooks. */
+export interface HostileTreePerTest {
+    /** Mint a scratch root and plant a fresh tree in it. Drive from `beforeEach`. */
+    plant: () => void;
+    /** Tear the tree down and remove the scratch root. Drive from `afterEach`. */
+    clear: () => void;
+    /** The tree planted by the most recent {@link HostileTreePerTest.plant}. */
+    tree: () => HostileTree;
+}
+/**
+ * Hold a per-test hostile tree, so a suite's wiring is three lines:
+ * `const hostile = hostileTreePerTest('x'); beforeEach(hostile.plant); afterEach(hostile.clear);`.
+ *
+ * Same shape and same reasons as `replantableCorpus`: the tree comes back
+ * through a GETTER because it is reminted per test, `plant` clears any tree
+ * still standing so nested `describe`s do not leak one, and `tree()` before
+ * `plant()` throws by name rather than surfacing as an undefined read.
+ *
+ * @param prefix - `mkdtemp` prefix for the scratch root, so a leak names its suite
+ * @returns Plant/clear/tree, to be driven from the caller's own hooks
+ */
+export declare function hostileTreePerTest(prefix: string): HostileTreePerTest;
+//# sourceMappingURL=hostile-tree.d.ts.map