@vibe-agent-toolkit/utils 0.2.0-rc.11 → 0.2.0-rc.12

package/dist/test-helpers.js

@@ -2,18 +2,9 @@ import { randomBytes } from 'node:crypto';
 import nodeFs, { rmSync, symlinkSync } from 'node:fs';
 import fs from 'node:fs/promises';
 import { syncBuiltinESMExports } from 'node:module';
-import { isFilesystemAccessError } from './errors/errno.js';
+import { fsFaultOf, isSymlinkUnsupportedError } from './errors/errno-table.js';
 import { normalizedTmpdir, safePath, toForwardSlash } from './path-utils.js';
 let cachedCapability;
-/**
- * The errnos that mean "this host cannot create symlinks": Windows without
- * Developer Mode or `SeCreateSymbolicLinkPrivilege` (`EPERM`), and a
- * filesystem that has no symlinks to offer (`ENOTSUP` / `EOPNOTSUPP`).
- */
-const SYMLINK_UNSUPPORTED_ERRNOS = new Set(['EPERM', 'ENOTSUP', 'EOPNOTSUPP']);
-function isSymlinkUnsupported(error) {
-    return error instanceof Error && 'code' in error && typeof error.code === 'string' && SYMLINK_UNSUPPORTED_ERRNOS.has(error.code);
-}
 /**
  * Whether this PROCESS can create symlinks — probed once and memoized.
  *
@@ -28,7 +19,7 @@ function isSymlinkUnsupported(error) {
  *
  * Because the answer is memoized for the whole process, what reads as "no"
  * matters more than usual: a `null` here silently `skip()`s every symlink test
- * for the rest of the run. So ONLY {@link SYMLINK_UNSUPPORTED_ERRNOS} is a
+ * for the rest of the run. So ONLY {@link isSymlinkUnsupportedError} is a
  * no. A tmpdir that is unwritable or missing, or a bug, is not an answer about
  * symlinks at all and stays loud rather than becoming a process-wide skip for
  * a reason nothing reported.
@@ -45,11 +36,11 @@ export function symlinkCapability() {
     if (cachedCapability === undefined) {
         const probe = safePath.join(normalizedTmpdir(), `.vat-symlink-probe-${randomBytes(4).toString('hex')}`);
         try {
-            symlinkSync('.', probe);
+            symlinkSync('.', probe, 'dir');
             cachedCapability = {};
         }
         catch (error) {
-            if (!isSymlinkUnsupported(error))
+            if (!isSymlinkUnsupportedError(error))
                 throw error;
             cachedCapability = null;
         }
@@ -63,7 +54,7 @@ export function symlinkCapability() {
                 rmSync(probe, { force: true });
             }
             catch (error) {
-                if (!isFilesystemAccessError(error))
+                if (fsFaultOf(error) === undefined)
                     throw error;
             }
         }
@@ -174,10 +165,11 @@ export function detachGitEnv() {
 }
 /**
  * The errno-shaped error a refused `fs` call throws: a message, the `code`,
- * and the `syscall`, exactly as Node shapes one.
+ * the `syscall` and the `path`, exactly as Node shapes one — a caller that names
+ * the refused file from `path` (a tree probe naming the nested file) reads it.
  */
 export function errnoError(code, syscall, target) {
-    return Object.assign(new Error(`${code}: refused, ${syscall} '${target}'`), { code, syscall });
+    return Object.assign(new Error(`${code}: refused, ${syscall} '${target}'`), { code, syscall, path: target });
 }
 /**
  * Assign `fn` over `module[method]` and republish the builtin's ESM bindings.
@@ -220,13 +212,18 @@ export function refuseSyncFs(method, targetPath, code) {
 /**
  * `fs/promises[method]` rejects with `code` for exactly `targetPath` until the
  * returned restore is called; every other path, and every other method, is real.
+ * `beforeRefusing`, when given, runs first on each refused call — a write that
+ * fails partway (a full disk) leaves a truncated file behind, and a test of the
+ * cleanup needs that file to exist.
  */
-export function refuseAsyncFs(method, targetPath, code) {
+export function refuseAsyncFs(method, targetPath, code, beforeRefusing) {
     const original = fs[method].bind(fs);
     const refused = toForwardSlash(targetPath);
-    republish(fs, method, async (target, ...rest) => {
-        if (toForwardSlash(String(target)) === refused)
-            throw errnoError(code, method, String(target));
+    republish(fs, method, (target, ...rest) => {
+        if (toForwardSlash(String(target)) === refused) {
+            beforeRefusing?.();
+            return Promise.reject(errnoError(code, method, String(target)));
+        }
         return original(target, ...rest);
     });
     return () => republish(fs, method, original);
@@ -254,7 +251,7 @@ export async function withSyncFsRefused(method, targetPath, code, body) {
  * @param body - Runs while the refusal is in force; may be async
  * @returns Whatever `body` returned
  */
-export async function withReaddirSyncRefused(directory, code, body) {
+export function withReaddirSyncRefused(directory, code, body) {
     return withSyncFsRefused('readdirSync', directory, code, body);
 }
 //# sourceMappingURL=test-helpers.js.map

package/dist/test-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"test-helpers.js","sourceRoot":"","sources":["../src/test-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAgB7E,IAAI,gBAAsD,CAAC;AAE3D;;;;GAIG;AACH,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAEpG,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnI,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,sBAAsB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC;YACH,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxB,gBAAgB,GAAG,EAAuB,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC9C,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,uEAAuE;YACvE,qDAAqD;YACrD,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAkC;IAElC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAkC;IAElC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,kCAAkC;IAClC,yBAAyB;IACzB,gBAAgB;IAChB,uBAAuB;IACvB,SAAS;IACT,iCAAiC;IACjC,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,eAAe;IACf,eAAe;IACf,sBAAsB;IACtB,YAAY;IACZ,kBAAkB;IAClB,eAAe;CACP,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEpD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;QACpC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,uEAAuE;YACvE,iEAAiE;YACjE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAGD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,OAAO,KAAK,MAAM,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACjG,CAAC;AAgBD;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc,EAAE,EAAW;IAC3D,MAAkC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IACjD,qBAAqB,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,MAA6B,EAAE,UAAkB,EAAE,IAAY;IAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAoC,CAAC;IACnE,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3C,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,MAAe,EAAE,GAAG,IAAe,EAAW,EAAE;QACzE,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO;YAAE,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAA8B,EAAE,UAAkB,EAAE,IAAY;IAC5F,MAAM,QAAQ,GAAI,EAAE,CAAC,MAAM,CAA8C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3C,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAe,EAAE,GAAG,IAAe,EAAoB,EAAE;QACpF,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO;YAAE,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA6B,EAC7B,UAAkB,EAClB,IAAY,EACZ,IAA0B;IAE1B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,IAAY,EACZ,IAA0B;IAE1B,OAAO,iBAAiB,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC"}
+{"version":3,"file":"test-helpers.js","sourceRoot":"","sources":["../src/test-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAgB7E,IAAI,gBAAsD,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,sBAAsB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC;YACH,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/B,gBAAgB,GAAG,EAAuB,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACnD,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,uEAAuE;YACvE,qDAAqD;YACrD,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAkC;IAElC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAkC;IAElC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,kCAAkC;IAClC,yBAAyB;IACzB,gBAAgB;IAChB,uBAAuB;IACvB,SAAS;IACT,iCAAiC;IACjC,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,eAAe;IACf,eAAe;IACf,sBAAsB;IACtB,YAAY;IACZ,kBAAkB;IAClB,eAAe;CACP,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEpD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;QACpC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,uEAAuE;YACvE,iEAAiE;YACjE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAGD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,OAAO,KAAK,MAAM,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/G,CAAC;AAmBD;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc,EAAE,EAAW;IAC3D,MAAkC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IACjD,qBAAqB,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,MAA6B,EAAE,UAAkB,EAAE,IAAY;IAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAoC,CAAC;IACnE,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3C,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,MAAe,EAAE,GAAG,IAAe,EAAW,EAAE;QACzE,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO;YAAE,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,MAA8B,EAC9B,UAAkB,EAClB,IAAY,EACZ,cAA2B;IAE3B,MAAM,QAAQ,GAAI,EAAE,CAAC,MAAM,CAA8C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3C,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,MAAe,EAAE,GAAG,IAAe,EAAoB,EAAE;QAC9E,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC/C,cAAc,EAAE,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA6B,EAC7B,UAAkB,EAClB,IAAY,EACZ,IAA0B;IAE1B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,IAAY,EACZ,IAA0B;IAE1B,OAAO,iBAAiB,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC"}

package/dist/test-scratch-guard.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The fail-closed guard for user state in a TEST process.
+ *
+ * VAT keeps state under the user's home: the Claude directory (`CLAUDE_CONFIG_DIR`, else
+ * `$HOME/.claude`), every other target's user-scope skills directory (`~/.codex/skills`, …), the
+ * session store. A test that reaches one of them without redirecting it writes a developer's real
+ * configuration, exit 0, with nothing in its output to say so — it has happened, twice, to a live
+ * Claude config. So each place that resolves such a root passes it through
+ * {@link requireTestScratch}, which throws when the test harness has named the one tree user state
+ * may be in and the root is outside it.
+ *
+ * No user sets the variable: unset, the guard does nothing and costs one environment read.
+ */
+/**
+ * The variable a test process sets to the tree its user state may be in: the OS temp directory, in
+ * each spelling it has (`path.delimiter`-separated — on macOS `/var/…` and the `/private/var/…` it
+ * links to). The repo's shared vitest setup arms it in every tier, and every `vat` child a test
+ * spawns inherits it.
+ */
+export declare const TEST_USER_STATE_UNDER = "VAT_TEST_USER_STATE_UNDER";
+/**
+ * `root` — a directory of user state VAT is about to hand out — unless a test process named the tree
+ * it must be in and it is outside that tree.
+ *
+ * Judged by spelling alone, with no filesystem call: the guard must not itself be a read the OS can
+ * refuse (a fault-injection run would fail the guard instead of the verb under test).
+ *
+ * @param root - The resolved directory, absolute
+ * @param what - What it is, for the message: `The Claude directory`
+ * @returns `root`, unchanged
+ * @throws Error naming the directory and the tree, when the variable is set and `root` is outside it
+ */
+export declare function requireTestScratch(root: string, what: string): string;
+//# sourceMappingURL=test-scratch-guard.d.ts.map

package/dist/test-scratch-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-scratch-guard.d.ts","sourceRoot":"","sources":["../src/test-scratch-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAEjE;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CASrE"}

package/dist/test-scratch-guard.js

@@ -0,0 +1,45 @@
+/**
+ * The fail-closed guard for user state in a TEST process.
+ *
+ * VAT keeps state under the user's home: the Claude directory (`CLAUDE_CONFIG_DIR`, else
+ * `$HOME/.claude`), every other target's user-scope skills directory (`~/.codex/skills`, …), the
+ * session store. A test that reaches one of them without redirecting it writes a developer's real
+ * configuration, exit 0, with nothing in its output to say so — it has happened, twice, to a live
+ * Claude config. So each place that resolves such a root passes it through
+ * {@link requireTestScratch}, which throws when the test harness has named the one tree user state
+ * may be in and the root is outside it.
+ *
+ * No user sets the variable: unset, the guard does nothing and costs one environment read.
+ */
+import { delimiter } from 'node:path';
+import { relativeEscapesRoot, safePath } from './path-core.js';
+/**
+ * The variable a test process sets to the tree its user state may be in: the OS temp directory, in
+ * each spelling it has (`path.delimiter`-separated — on macOS `/var/…` and the `/private/var/…` it
+ * links to). The repo's shared vitest setup arms it in every tier, and every `vat` child a test
+ * spawns inherits it.
+ */
+export const TEST_USER_STATE_UNDER = 'VAT_TEST_USER_STATE_UNDER';
+/**
+ * `root` — a directory of user state VAT is about to hand out — unless a test process named the tree
+ * it must be in and it is outside that tree.
+ *
+ * Judged by spelling alone, with no filesystem call: the guard must not itself be a read the OS can
+ * refuse (a fault-injection run would fail the guard instead of the verb under test).
+ *
+ * @param root - The resolved directory, absolute
+ * @param what - What it is, for the message: `The Claude directory`
+ * @returns `root`, unchanged
+ * @throws Error naming the directory and the tree, when the variable is set and `root` is outside it
+ */
+export function requireTestScratch(root, what) {
+    const under = process.env[TEST_USER_STATE_UNDER]?.trim();
+    if (under === undefined || under.length === 0)
+        return root;
+    const trees = under.split(delimiter).filter((tree) => tree.length > 0);
+    if (trees.some((tree) => !relativeEscapesRoot(safePath.relative(tree, root))))
+        return root;
+    throw new Error(`${what} resolves to ${root}, outside ${under}: refusing to resolve it in a test process `
+        + `(${TEST_USER_STATE_UNDER} is set). Point the test at a temp directory first — HOME (and CLAUDE_CONFIG_DIR, blank or under it).`);
+}
+//# sourceMappingURL=test-scratch-guard.js.map

package/dist/test-scratch-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-scratch-guard.js","sourceRoot":"","sources":["../src/test-scratch-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AAEjE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAY;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,gBAAgB,IAAI,aAAa,KAAK,6CAA6C;UACtF,IAAI,qBAAqB,uGAAuG,CACrI,CAAC;AACJ,CAAC"}

package/dist/testing/archive-fixtures.d.ts

@@ -0,0 +1,147 @@
+/**
+ * Archives for tests, written byte by byte — the ONE place a suite builds a tarball or a ZIP.
+ *
+ * Hand-written on purpose. An archive library writes only what it considers an archive: it
+ * strips a leading `/`, folds `..` away, refuses a name listed twice and will not mark an entry
+ * a link or a device. Those are exactly the archives an extractor must refuse, so a fixture
+ * built with the library under test cannot express them. Nothing here imports `tar` or
+ * `adm-zip` — only `packages/utils/src/archive/` does.
+ */
+/** One entry of a fixture archive, exactly as the archive will spell it. */
+export interface ArchiveFixtureEntry {
+    /** The entry name, verbatim: `../x`, `/abs`, `C:\\x` and a name already listed are all written as given. */
+    readonly name: string;
+    /** What the entry is; `file` when omitted. `device` is a character device. */
+    readonly kind?: 'file' | 'directory' | 'link' | 'hardlink' | 'device' | 'fifo';
+    /** A file's bytes. */
+    readonly data?: string | Uint8Array;
+    /** Where a `link` or `hardlink` points, verbatim. */
+    readonly target?: string;
+    /** Permission bits (setuid, setgid and sticky included); `0o644`, or `0o755` for a directory, when omitted. */
+    readonly mode?: number;
+    /** The size the entry's header DECLARES, when it should differ from the data's own length. */
+    readonly declaredSize?: number;
+    /** When a ZIP entry says it was last modified (local time, two-second resolution); the DOS epoch when omitted. */
+    readonly modified?: Date;
+    /**
+     * Tar only: the header's type byte, verbatim, in place of the one `kind` gives — `x` (a PAX
+     * header whose `data` overrides the next entry), `L` (a GNU long name), `S` (sparse), `D` (a GNU
+     * dump directory), or a byte no tar defines.
+     */
+    readonly tarType?: string;
+}
+/**
+ * One PAX extended-header record, `<length> <key>=<value>\n`, the length counting itself: the
+ * `data` of a `tarType: 'x'` entry, which overrides that field of the entry after it.
+ *
+ * @param key - The field: `path`, `linkpath`, `size`
+ * @param value - Its value, verbatim
+ */
+export declare function paxRecord(key: string, value: string): string;
+/**
+ * A tar archive of `entries`, in order, gzipped unless `options.gzip` is `false`.
+ *
+ * @param entries - The entries, written exactly as given
+ * @param options - `gzip: false` for a plain tar
+ * @returns The archive's bytes
+ */
+export declare function tarFixture(entries: readonly ArchiveFixtureEntry[], options?: {
+    readonly gzip?: boolean;
+}): Buffer;
+/**
+ * A ZIP archive of `entries`, in order, each as a ZIP made on Unix records it (so a link, a
+ * device and an executable bit are all expressible).
+ *
+ * @param entries - The entries, written exactly as given; a `hardlink` throws (a ZIP has none)
+ * @param options - `compress: false` to store every entry instead of deflating it
+ * @returns The archive's bytes
+ */
+export declare function zipFixture(entries: readonly ArchiveFixtureEntry[], options?: {
+    readonly compress?: boolean;
+}): Buffer;
+/**
+ * A directory tree as fixture entries, in listing order: each directory, then what it holds; a
+ * file with its bytes and permission bits; a symbolic link as a link entry with its target
+ * verbatim (never followed). What a test that used to `tar` or `zip` a directory hands
+ * {@link tarFixture} or {@link zipFixture}.
+ *
+ * @param dir - The directory to read
+ * @param prefix - What each entry name begins with: `''`, or a directory name ending in `/` (`package/`)
+ * @returns The entries of `dir`, `dir` itself not among them
+ */
+export declare function archiveEntriesOfDirectory(dir: string, prefix?: string): ArchiveFixtureEntry[];
+/**
+ * An archive of `format` holding `entries` — {@link tarFixture} (gzipped) or {@link zipFixture}
+ * (deflated) — for a suite that runs the same rows through both formats.
+ */
+export declare function archiveFixture(format: 'tar' | 'zip', entries: readonly ArchiveFixtureEntry[]): Buffer;
+/** One archive an extractor must refuse: what makes it hostile, and the entries that do. */
+export interface HostileArchiveRow {
+    /** What the archive holds, for a test's title. */
+    readonly what: string;
+    /** The formats that can express it (a ZIP has no hard link). */
+    readonly formats: ReadonlyArray<'tar' | 'zip'>;
+    /** The `ArchiveRefusedError` reason the archive module gives. */
+    readonly reason: 'link' | 'hardlink' | 'special' | 'unsafe-name' | 'name-clash' | 'unreadable' | 'unsupported' | 'too-many-entries' | 'too-large';
+    /**
+     * The offending entries, to add to an otherwise sound archive.
+     *
+     * @param prefix - Where inside the archive they go: `''`, or a directory name ending in `/`
+     */
+    readonly entries: (prefix: string) => ArchiveFixtureEntry[];
+    /**
+     * For a row that is hostile in its FRAMING rather than its entries: what to do to the built
+     * archive's bytes. A suite hands every archive it builds for a row through {@link hostileArchive}.
+     */
+    readonly mangle?: (archive: Buffer) => Buffer;
+}
+/**
+ * The archive a row stands for: `built` — the suite's sound archive with the row's entries — as
+ * the row frames it. Every suite that runs {@link hostileArchiveRows} passes its bytes through here.
+ *
+ * @param row - The row
+ * @param built - The archive the suite built from the row's entries
+ */
+export declare function hostileArchive(row: HostileArchiveRow, built: Buffer): Buffer;
+/**
+ * `archive` (a {@link zipFixture}) with `stub` before its first local header: a self-extracting
+ * ZIP. `adjusted` moves every offset its central directory and end record hold by the stub's
+ * length, as `zip -A` and an SFX builder do, so the directory still names each local header.
+ *
+ * @param archive - The ZIP
+ * @param stub - The bytes to put before it
+ * @param adjusted - Whether the offsets are moved to match
+ */
+export declare function withZipStub(archive: Buffer, stub: Buffer, adjusted: boolean): Buffer;
+/**
+ * `archive` (a {@link zipFixture}) carrying `entry` as a local header and its data after its last
+ * listed entry, before a central directory that does not list it: an entry only a reader that
+ * walks local headers from the front sees. Every offset still agrees, so a reader that holds the
+ * directory to its own reading takes the archive.
+ *
+ * @param archive - The ZIP
+ * @param entry - The entry its local headers hold and its directory does not
+ */
+export declare function withUnlistedLocalEntry(archive: Buffer, entry: ArchiveFixtureEntry): Buffer;
+/**
+ * A ZIP member that holds more than its directory declares: the archive parses and its entry list
+ * passes the policy, and the member is refused only when it is READ — `ArchiveEntryReadError`,
+ * `ARCHIVE_ENTRY_UNREADABLE`, never an `ArchiveRefusedError`, so it is no row of
+ * {@link hostileArchiveRows} (whose rows each name an `ArchiveRefusedError` reason). Each lane that
+ * reads a ZIP's members runs it beside that table, so the CLI's mapping of the code to
+ * `INPUT_UNREADABLE` is held by every lane that can raise it.
+ *
+ * @param prefix - Where inside the archive it goes: `''`, or a directory name ending in `/`
+ */
+export declare function entryHoldingMoreThanDeclared(prefix: string): ArchiveFixtureEntry[];
+/**
+ * Every shape of archive VAT refuses to extract, as rows a suite runs through each lane that
+ * extracts one: the same table for the archive module's own tests and for every verb's.
+ *
+ * @param limits - The bounds the lane under test holds an archive to; the last two rows are built just past them
+ */
+export declare function hostileArchiveRows(limits: {
+    readonly maxEntries: number;
+    readonly maxBytes: number;
+}): HostileArchiveRow[];
+//# sourceMappingURL=archive-fixtures.d.ts.map

package/dist/testing/archive-fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-fixtures.d.ts","sourceRoot":"","sources":["../../src/testing/archive-fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,4GAA4G;IAC5G,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/E,sBAAsB;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IACpC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+GAA+G;IAC/G,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,8FAA8F;IAC9F,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,kHAAkH;IAClH,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAK5D;AAmED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,EAAE,OAAO,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CASrH;AAuBD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,EAAE,OAAO,GAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAgDzH;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,mBAAmB,EAAE,CAczF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,OAAO,EAAE,SAAS,mBAAmB,EAAE,GAAG,MAAM,CAErG;AAED,4FAA4F;AAC5F,MAAM,WAAW,iBAAiB;IAChC,kDAAkD;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IAC/C,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,kBAAkB,GAAG,WAAW,CAAC;IAClJ;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,mBAAmB,EAAE,CAAC;IAC5D;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5E;AA8BD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAYpF;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAO1F;AAsFD;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAElF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,iBAAiB,EAAE,CAqE1H"}