@vibe-agent-toolkit/utils 0.2.0-rc.2 → 0.2.0-rc.3

package/dist/test-helpers.d.ts

@@ -1,3 +1,84 @@
+/** Knobs for {@link removeScratchDir}; all three exist so the behaviour is testable. */
+export interface RemoveScratchDirOptions {
+    /** Deadline before the removal is abandoned. Default {@link SCRATCH_REMOVAL_BUDGET_MS}. */
+    readonly budgetMs?: number;
+    /** Where the give-up notice goes. Default `console.warn`. */
+    readonly onWarn?: (message: string) => void;
+    /**
+     * The removal itself. Defaults to `fs.rm` with recursive/force/retries.
+     *
+     * Injectable because the *contract* — a removal that fails must warn rather
+     * than throw — cannot otherwise be tested on every platform. Driving a real
+     * `fs.rm` failure needs a path the OS refuses, and those diverge: a path
+     * whose parent component is a regular file yields `ENOTDIR` on POSIX, and
+     * resolves silently on Windows. A test written against the POSIX shape
+     * passes locally and fails in CI, which is exactly what it did once.
+     */
+    readonly remove?: (dir: string) => Promise<void>;
+}
+/**
+ * Delete a scratch directory as *best effort* — never failing the suite that
+ * created it, and never taking longer than its own budget to say so.
+ *
+ * ## Why this is not just `await rm(dir, { recursive: true, force: true })`
+ *
+ * A teardown hook that can redden a suite whose every assertion passed is a
+ * defect in the harness, not a flake. `packages/lab/test/instrument.test.ts`
+ * timed out here on two consecutive Windows runs with all 655 assertions
+ * green — only the cleanup lost.
+ *
+ * The measurement is what rules out the obvious fixes: that scratch dir holds
+ * 490 files / 378 KiB across 14 fixture git repos, and deletes in **59 ms**
+ * idle. Against vitest's 10,000 ms unit-hook budget that is 170x of headroom,
+ * and Windows blew through it anyway. No quantity of real work explains that,
+ * so the cause is scheduling — contention from a fully parallel `validate`,
+ * plus per-unlink antivirus on Windows — which is unbounded by nature. Hence:
+ *
+ * - **Raising `hookTimeout` cannot be argued.** You would be picking a number
+ *   to beat an unbounded quantity, when 10s of 170x headroom already lost. It
+ *   also punches a hole in the deliberate policy in `vitest.shared.ts` ("no
+ *   hookTimeout override here on purpose") for every unit hook, to fix one.
+ * - **`try`/`catch` around the `rm` cannot work.** A vitest hook timeout is a
+ *   race decided on the *timer* side; the hook's own catch never sees it. It
+ *   addresses a failure mode we did not observe and leaves the one we did.
+ * - **`maxRetries` alone makes it worse.** Retries target transient
+ *   `EPERM`/`EBUSY`, which fail *fast*; our failure was *slow*, and retry
+ *   backoff only adds to it. Kept below as a cheap inner win, not as the fix.
+ *
+ * So the deadline is taken away from vitest: the removal races a timer of our
+ * own, well inside the hook budget, and expiry is a warning rather than a
+ * failure. The hook therefore always resolves in time, which makes it
+ * *structurally* incapable of reddening a green suite on any machine at any
+ * load — rather than merely unlikely to.
+ *
+ * The cost, stated plainly: under pathological contention the directory
+ * survives in the OS temp dir, which the OS reclaims, and the warning names
+ * the path. It can never surface as an unhandled rejection, because the only
+ * rejection handler is installed before the race.
+ *
+ * ⚠️ **Abandoning the removal does not stop it, and does not free the worker.**
+ * A pending libuv `fs` request is an active handle, so the `rm` runs to
+ * completion regardless — measured at 2,407 ms on an 8,000-file tree after the
+ * race was decided at 5 ms — and the process cannot exit until it does.
+ * `timer.unref()` below unrefs the *timer*, not the removal. So what this buys
+ * is bounded: the **hook** always resolves in time, which is what stops a green
+ * suite going red. It does **not** shed the work, and under the contention it
+ * targets the abandoned removal competes for disk with whatever runs next in
+ * the same worker. That is the trade, and it is why the budget wants to be as
+ * large as the tier's hook allows rather than as small as possible.
+ *
+ * @param dir - Directory to remove. An empty string is a no-op, so a suite
+ *   whose `beforeAll` never ran can call this unconditionally.
+ * @param options - Deadline and warning sink
+ *
+ * @example
+ * ```typescript
+ * afterAll(async () => {
+ *   await removeScratchDir(scratch);
+ * });
+ * ```
+ */
+export declare function removeScratchDir(dir: string, options?: RemoveScratchDirOptions): Promise<void>;
 /**
  * Get isolated test output directory for current test run
  *
@@ -42,6 +123,9 @@ export declare function getTestOutputBase(packageName: string): string;
  * than creating a new mkdtemp for each test.
  *
  * @param prefix - Prefix for the suite temp directory name
+ * @param teardown - Forwarded to {@link removeScratchDir}. Raise `budgetMs` for a
+ *   suite whose fixture tree is heavy or whose tier allows a longer hook than the
+ *   unit tier this default is sized against — see {@link SCRATCH_REMOVAL_BUDGET_MS}.
  * @returns Suite helper with beforeAll, afterAll, beforeEach, afterEach, and getTempDir
  *
  * @example
@@ -60,7 +144,7 @@ export declare function getTestOutputBase(packageName: string): string;
  * });
  * ```
  */
-export declare function setupAsyncTempDirSuite(prefix: string): {
+export declare function setupAsyncTempDirSuite(prefix: string, teardown?: RemoveScratchDirOptions): {
     beforeAll: () => Promise<void>;
     afterAll: () => Promise<void>;
     beforeEach: () => Promise<void>;
@@ -74,6 +158,9 @@ export declare function setupAsyncTempDirSuite(prefix: string): {
  * than creating a new mkdtemp for each test.
  *
  * @param prefix - Prefix for the suite temp directory name
+ * @param teardown - Forwarded to {@link removeScratchDir}. Raise `budgetMs` for a
+ *   suite whose fixture tree is heavy or whose tier allows a longer hook than the
+ *   unit tier this default is sized against — see {@link SCRATCH_REMOVAL_BUDGET_MS}.
  * @returns Suite helper with beforeAll, afterAll, beforeEach, afterEach, and getTempDir
  *
  * @example
@@ -92,27 +179,112 @@ export declare function setupAsyncTempDirSuite(prefix: string): {
  * });
  * ```
  */
-export declare function setupSyncTempDirSuite(prefix: string): {
+export declare function setupSyncTempDirSuite(prefix: string, teardown?: RemoveScratchDirOptions): {
     beforeAll: () => void;
-    afterAll: () => void;
+    afterAll: () => Promise<void>;
     beforeEach: () => void;
     afterEach: () => void;
     getTempDir: () => string;
 };
+declare const symlinkCapabilityBrand: unique symbol;
+/**
+ * Proof that this process can create filesystem symlinks.
+ *
+ * The only way to obtain one is {@link symlinkCapability}, and it exists at
+ * all only when a real probe already succeeded — so a function that requires
+ * this as a parameter cannot be reached by code that skipped the check. That
+ * is the point of branding it rather than passing a `boolean`: forgetting the
+ * check becomes a type error instead of a runtime `EPERM` on a machine you
+ * don't control.
+ */
+export type SymlinkCapability = {
+    readonly [symlinkCapabilityBrand]: true;
+};
 /**
- * Probe whether this host can create symbolic links inside `dir`.
+ * Whether this PROCESS can create symlinks — probed once and memoized.
  *
  * On Windows, `symlink()` needs either Developer Mode or
- * `SeCreateSymbolicLinkPrivilege`; CI agents frequently have neither. Fixtures
- * that depend on symlinks must therefore ask rather than assume — and, having
- * asked, must SAY they skipped. A symlink case that silently no-ops reads as a
- * passing test for a property nobody exercised.
+ * `SeCreateSymbolicLinkPrivilege`. That privilege lives on the process's
+ * security token, not on any one directory: it cannot change between calls
+ * within a single run, so probing it once and reusing the result is a
+ * memoization, not a shortcut that risks a stale answer. (An exotic
+ * filesystem that itself refuses symlinks — some network shares, some FAT
+ * variants — is a real exception this does not model; every fixture in this
+ * repo creates its roots under {@link normalizedTmpdir}, so it never arises
+ * here.)
+ *
+ * Fixtures that depend on symlinks must ask rather than assume — and, having
+ * asked, must SAY they skipped. A symlink case that silently no-ops reads as
+ * a passing test for a property nobody exercised.
+ *
+ * @returns A {@link SymlinkCapability} token when this process can create
+ *   symlinks, else `null`. Route the `null` case through vitest's `skip()`
+ *   rather than a plain `return`, so the skip is visible in the report.
+ */
+export declare function symlinkCapability(): SymlinkCapability | null;
+/**
+ * Create a symlink — the one sanctioned call site for `fs.symlinkSync` in
+ * test code. Requires a {@link SymlinkCapability}, which only
+ * {@link symlinkCapability} can mint, so a test cannot reach the real
+ * syscall without first proving (or explicitly bypassing via `skip()`) that
+ * this host supports it.
  *
- * The probe creates and removes one link, because the privilege cannot be
- * inferred from `process.platform` alone.
+ * @param _cap - Proof from {@link symlinkCapability} that this host can create symlinks
+ * @param target - The existing path the new link should point at
+ * @param path - Where to create the link
+ * @param type - Windows-only link-type hint (`'file'` \| `'dir'` \| `'junction'`); ignored on POSIX
+ */
+export declare function createSymlink(_cap: SymlinkCapability, target: string, path: string, type?: 'dir' | 'file' | 'junction'): void;
+/**
+ * The async counterpart of {@link createSymlink}, for fixtures already using
+ * `node:fs/promises`. Same capability requirement, same reasoning.
+ *
+ * @param _cap - Proof from {@link symlinkCapability} that this host can create symlinks
+ * @param target - The existing path the new link should point at
+ * @param path - Where to create the link
+ * @param type - Windows-only link-type hint (`'file'` \| `'dir'` \| `'junction'`); ignored on POSIX
+ */
+export declare function createSymlinkAsync(_cap: SymlinkCapability, target: string, path: string, type?: 'dir' | 'file' | 'junction'): Promise<void>;
+/**
+ * The variables git exports into a hook, which a fixture must clear before it
+ * can fabricate its own.
  *
- * @param dir - An existing directory to probe in (the probe cleans up after itself)
- * @returns True when a symlink was created successfully
+ * These are the ones git sets *for* you. Deliberately **not** the operator's own
+ * `GIT_CONFIG_COUNT`/`KEY_n`/`VALUE_n`/`GLOBAL`/`SYSTEM` channel — a test may be
+ * using that on purpose to point a clone at a local path, and clearing it sends
+ * the clone to the network instead.
+ */
+export declare const INHERITED_GIT_ENV: readonly ["GIT_ALTERNATE_OBJECT_DIRECTORIES", "GIT_CEILING_DIRECTORIES", "GIT_COMMON_DIR", "GIT_CONFIG_PARAMETERS", "GIT_DIR", "GIT_DISCOVERY_ACROSS_FILESYSTEM", "GIT_GRAFT_FILE", "GIT_INDEX_FILE", "GIT_INDEX_VERSION", "GIT_NAMESPACE", "GIT_NOTES_REF", "GIT_OBJECT_DIRECTORY", "GIT_PREFIX", "GIT_SHALLOW_FILE", "GIT_WORK_TREE"];
+/**
+ * Remove every inherited git redirection from `process.env`, and hand back the
+ * undo.
+ *
+ * A test that fabricates a hook environment has to start from a known-clean one,
+ * or it inherits whatever the *outer* runner exported and can no longer tell its
+ * own fixture apart from the ambient state — it then passes or fails for reasons
+ * it never set up. Restoring afterwards matters just as much: these are
+ * process-global, so a test that leaks `GIT_DIR` silently redirects every later
+ * test sharing the worker.
+ *
+ * ⚠️ **The key list is restated here on purpose, not by oversight.** Deriving it
+ * from `@vibe-validate/git`'s `stripGitEnv()` would be tidier, and it is exactly
+ * what this function did for one revision — but this module is the `./testing`
+ * subpath, which `subpath-purity.test.ts` pins as reaching **no third-party
+ * package at all** so it stays importable with zero dependencies installed. One
+ * import cost that property. The drift risk the derivation was avoiding is
+ * handled instead by {@link "../test/test-helpers-git-env.test".default}, which
+ * asserts this list equals what the shipped scrub removes.
+ *
+ * @returns A function restoring every variable to its prior value, putting back
+ *   "was not set" as unset rather than as an empty string
+ *
+ * @example
+ * ```typescript
+ * let restoreGitEnv: () => void;
+ * beforeEach(() => { restoreGitEnv = detachGitEnv(); });
+ * afterEach(() => { restoreGitEnv(); });
+ * ```
  */
-export declare function canCreateSymlinks(dir: string): boolean;
+export declare function detachGitEnv(): () => void;
+export {};
 //# sourceMappingURL=test-helpers.d.ts.map

package/dist/test-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-helpers.d.ts","sourceRoot":"","sources":["../src/test-helpers.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,QAAQ,EAC3C,GAAG,OAAO,EAAE,MAAM,EAAE,GACnB,MAAM,CAuBR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG;IACtD,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,MAAM,CAAC;CAC1B,CAyBA;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG;IACrD,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,MAAM,CAAC;CAC1B,CAwBA;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUtD"}
+{"version":3,"file":"test-helpers.d.ts","sourceRoot":"","sources":["../src/test-helpers.ts"],"names":[],"mappings":"AA4BA,wFAAwF;AACxF,MAAM,WAAW,uBAAuB;IACtC,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CA4Cf;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,QAAQ,EAC3C,GAAG,OAAO,EAAE,MAAM,EAAE,GACnB,MAAM,CAuBR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAE,uBAA4B,GAAG;IAC9F,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,MAAM,CAAC;CAC1B,CAuBA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAE,uBAA4B,GAAG;IAC7F,SAAS,EAAE,MAAM,IAAI,CAAC;IAItB,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,MAAM,CAAC;CAC1B,CAsBA;AAED,OAAO,CAAC,MAAM,sBAAsB,EAAE,OAAO,MAAM,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAAE,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAI5E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,iBAAiB,IAAI,iBAAiB,GAAG,IAAI,CAuB5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,UAAU,GACjC,IAAI,CAGN;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,UAAU,GACjC,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,yUAgBpB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,YAAY,IAAI,MAAM,IAAI,CAoBzC"}

package/dist/test-helpers.js

@@ -2,6 +2,126 @@ import { randomBytes } from 'node:crypto';
 import { mkdtempSync, rmSync, symlinkSync } from 'node:fs';
 import fs from 'node:fs/promises';
 import { mkdirSyncReal, normalizedTmpdir, safePath } from './path-utils.js';
+/**
+ * How long a scratch-dir teardown may run before it gives up and warns.
+ *
+ * The value only has to be comfortably *under* the hook timeout it runs in —
+ * that is the whole design. Sizing a teardown budget to beat contention is
+ * unprovable (see {@link removeScratchDir}); sizing it below a known constant is
+ * arithmetic.
+ *
+ * ⚠️ **The known constant is the UNIT tier's**, which is the only tier that
+ * takes vitest's 10s default (`vitest.shared.ts` declines to override it there
+ * on purpose) and the tier where the flake was actually observed. The other two
+ * tiers set their own, far larger: integration gets `platformTestTimeout`
+ * (60s on Unix, 900s on Windows) and system gets 300s. A suite in those tiers
+ * inherits this 4s default and therefore gives up 15x–225x earlier than its hook
+ * would have allowed — for a heavy fixture tree that is a leaked directory and a
+ * warning bought for nothing, since an abandoned removal does not stop (see
+ * {@link removeScratchDir}). Such a suite should pass its own `budgetMs`, which
+ * both suite helpers forward.
+ */
+const SCRATCH_REMOVAL_BUDGET_MS = 4000;
+/**
+ * Delete a scratch directory as *best effort* — never failing the suite that
+ * created it, and never taking longer than its own budget to say so.
+ *
+ * ## Why this is not just `await rm(dir, { recursive: true, force: true })`
+ *
+ * A teardown hook that can redden a suite whose every assertion passed is a
+ * defect in the harness, not a flake. `packages/lab/test/instrument.test.ts`
+ * timed out here on two consecutive Windows runs with all 655 assertions
+ * green — only the cleanup lost.
+ *
+ * The measurement is what rules out the obvious fixes: that scratch dir holds
+ * 490 files / 378 KiB across 14 fixture git repos, and deletes in **59 ms**
+ * idle. Against vitest's 10,000 ms unit-hook budget that is 170x of headroom,
+ * and Windows blew through it anyway. No quantity of real work explains that,
+ * so the cause is scheduling — contention from a fully parallel `validate`,
+ * plus per-unlink antivirus on Windows — which is unbounded by nature. Hence:
+ *
+ * - **Raising `hookTimeout` cannot be argued.** You would be picking a number
+ *   to beat an unbounded quantity, when 10s of 170x headroom already lost. It
+ *   also punches a hole in the deliberate policy in `vitest.shared.ts` ("no
+ *   hookTimeout override here on purpose") for every unit hook, to fix one.
+ * - **`try`/`catch` around the `rm` cannot work.** A vitest hook timeout is a
+ *   race decided on the *timer* side; the hook's own catch never sees it. It
+ *   addresses a failure mode we did not observe and leaves the one we did.
+ * - **`maxRetries` alone makes it worse.** Retries target transient
+ *   `EPERM`/`EBUSY`, which fail *fast*; our failure was *slow*, and retry
+ *   backoff only adds to it. Kept below as a cheap inner win, not as the fix.
+ *
+ * So the deadline is taken away from vitest: the removal races a timer of our
+ * own, well inside the hook budget, and expiry is a warning rather than a
+ * failure. The hook therefore always resolves in time, which makes it
+ * *structurally* incapable of reddening a green suite on any machine at any
+ * load — rather than merely unlikely to.
+ *
+ * The cost, stated plainly: under pathological contention the directory
+ * survives in the OS temp dir, which the OS reclaims, and the warning names
+ * the path. It can never surface as an unhandled rejection, because the only
+ * rejection handler is installed before the race.
+ *
+ * ⚠️ **Abandoning the removal does not stop it, and does not free the worker.**
+ * A pending libuv `fs` request is an active handle, so the `rm` runs to
+ * completion regardless — measured at 2,407 ms on an 8,000-file tree after the
+ * race was decided at 5 ms — and the process cannot exit until it does.
+ * `timer.unref()` below unrefs the *timer*, not the removal. So what this buys
+ * is bounded: the **hook** always resolves in time, which is what stops a green
+ * suite going red. It does **not** shed the work, and under the contention it
+ * targets the abandoned removal competes for disk with whatever runs next in
+ * the same worker. That is the trade, and it is why the budget wants to be as
+ * large as the tier's hook allows rather than as small as possible.
+ *
+ * @param dir - Directory to remove. An empty string is a no-op, so a suite
+ *   whose `beforeAll` never ran can call this unconditionally.
+ * @param options - Deadline and warning sink
+ *
+ * @example
+ * ```typescript
+ * afterAll(async () => {
+ *   await removeScratchDir(scratch);
+ * });
+ * ```
+ */
+export async function removeScratchDir(dir, options = {}) {
+    if (dir === '')
+        return;
+    const budgetMs = options.budgetMs ?? SCRATCH_REMOVAL_BUDGET_MS;
+    const onWarn = options.onWarn ??
+        ((message) => {
+            console.warn(message);
+        });
+    // Latches on the first outcome so a removal that finishes (or fails) after
+    // the budget expired cannot log a second time into an already-finished suite.
+    let settled = false;
+    const giveUp = (reason) => {
+        if (settled)
+            return;
+        settled = true;
+        onWarn(`scratch dir left behind at ${dir}: ${reason}`);
+    };
+    const remove = options.remove ??
+        ((target) => fs.rm(target, { recursive: true, force: true, maxRetries: 2, retryDelay: 50 }));
+    const removal = remove(dir)
+        .then(() => {
+        settled = true;
+    })
+        .catch((error) => {
+        giveUp(error instanceof Error ? error.message : String(error));
+    });
+    let timer;
+    const deadline = new Promise((resolve) => {
+        timer = setTimeout(() => {
+            giveUp(`removal did not finish within ${budgetMs}ms`);
+            resolve();
+        }, budgetMs);
+        // Never hold the process open for a teardown nobody is waiting on.
+        timer.unref();
+    });
+    await Promise.race([removal, deadline]);
+    clearTimeout(timer);
+}
 /**
  * Get isolated test output directory for current test run
  *
@@ -60,6 +180,9 @@ export function getTestOutputBase(packageName) {
  * than creating a new mkdtemp for each test.
  *
  * @param prefix - Prefix for the suite temp directory name
+ * @param teardown - Forwarded to {@link removeScratchDir}. Raise `budgetMs` for a
+ *   suite whose fixture tree is heavy or whose tier allows a longer hook than the
+ *   unit tier this default is sized against — see {@link SCRATCH_REMOVAL_BUDGET_MS}.
  * @returns Suite helper with beforeAll, afterAll, beforeEach, afterEach, and getTempDir
  *
  * @example
@@ -78,7 +201,7 @@ export function getTestOutputBase(packageName) {
  * });
  * ```
  */
-export function setupAsyncTempDirSuite(prefix) {
+export function setupAsyncTempDirSuite(prefix, teardown = {}) {
     let suiteDir = '';
     let tempDir = '';
     let testCounter = 0;
@@ -87,9 +210,7 @@ export function setupAsyncTempDirSuite(prefix) {
             suiteDir = await fs.mkdtemp(safePath.join(normalizedTmpdir(), `${prefix}-suite-`));
         },
         afterAll: async () => {
-            if (suiteDir) {
-                await fs.rm(suiteDir, { recursive: true, force: true });
-            }
+            await removeScratchDir(suiteDir, teardown);
         },
         beforeEach: async () => {
             testCounter++;
@@ -110,6 +231,9 @@ export function setupAsyncTempDirSuite(prefix) {
  * than creating a new mkdtemp for each test.
  *
  * @param prefix - Prefix for the suite temp directory name
+ * @param teardown - Forwarded to {@link removeScratchDir}. Raise `budgetMs` for a
+ *   suite whose fixture tree is heavy or whose tier allows a longer hook than the
+ *   unit tier this default is sized against — see {@link SCRATCH_REMOVAL_BUDGET_MS}.
  * @returns Suite helper with beforeAll, afterAll, beforeEach, afterEach, and getTempDir
  *
  * @example
@@ -128,7 +252,7 @@ export function setupAsyncTempDirSuite(prefix) {
  * });
  * ```
  */
-export function setupSyncTempDirSuite(prefix) {
+export function setupSyncTempDirSuite(prefix, teardown = {}) {
     let suiteDir = '';
     let tempDir = '';
     let testCounter = 0;
@@ -136,10 +260,8 @@ export function setupSyncTempDirSuite(prefix) {
         beforeAll: () => {
             suiteDir = mkdtempSync(safePath.join(normalizedTmpdir(), `${prefix}-suite-`));
         },
-        afterAll: () => {
-            if (suiteDir) {
-                rmSync(suiteDir, { recursive: true, force: true });
-            }
+        afterAll: async () => {
+            await removeScratchDir(suiteDir, teardown);
         },
         beforeEach: () => {
             testCounter++;
@@ -152,31 +274,156 @@ export function setupSyncTempDirSuite(prefix) {
         getTempDir: () => tempDir,
     };
 }
+let cachedCapability;
 /**
- * Probe whether this host can create symbolic links inside `dir`.
+ * Whether this PROCESS can create symlinks — probed once and memoized.
  *
  * On Windows, `symlink()` needs either Developer Mode or
- * `SeCreateSymbolicLinkPrivilege`; CI agents frequently have neither. Fixtures
- * that depend on symlinks must therefore ask rather than assume — and, having
- * asked, must SAY they skipped. A symlink case that silently no-ops reads as a
- * passing test for a property nobody exercised.
+ * `SeCreateSymbolicLinkPrivilege`. That privilege lives on the process's
+ * security token, not on any one directory: it cannot change between calls
+ * within a single run, so probing it once and reusing the result is a
+ * memoization, not a shortcut that risks a stale answer. (An exotic
+ * filesystem that itself refuses symlinks — some network shares, some FAT
+ * variants — is a real exception this does not model; every fixture in this
+ * repo creates its roots under {@link normalizedTmpdir}, so it never arises
+ * here.)
  *
- * The probe creates and removes one link, because the privilege cannot be
- * inferred from `process.platform` alone.
+ * Fixtures that depend on symlinks must ask rather than assume — and, having
+ * asked, must SAY they skipped. A symlink case that silently no-ops reads as
+ * a passing test for a property nobody exercised.
  *
- * @param dir - An existing directory to probe in (the probe cleans up after itself)
- * @returns True when a symlink was created successfully
+ * @returns A {@link SymlinkCapability} token when this process can create
+ *   symlinks, else `null`. Route the `null` case through vitest's `skip()`
+ *   rather than a plain `return`, so the skip is visible in the report.
  */
-export function canCreateSymlinks(dir) {
-    const probe = safePath.join(dir, `.vat-symlink-probe-${randomBytes(4).toString('hex')}`);
-    try {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller-supplied dir plus a random basename generated here
-        symlinkSync('.', probe);
+export function symlinkCapability() {
+    if (cachedCapability === undefined) {
+        const probe = safePath.join(normalizedTmpdir(), `.vat-symlink-probe-${randomBytes(4).toString('hex')}`);
+        try {
+            // eslint-disable-next-line security/detect-non-literal-fs-filename -- fixed tmp dir plus a random basename generated here
+            symlinkSync('.', probe);
+            cachedCapability = {};
+        }
+        catch {
+            cachedCapability = null;
+        }
+        if (cachedCapability !== null) {
+            // Best-effort: the capability answer comes from creation succeeding, not
+            // from cleanup — a probe left behind by a failed rmSync (e.g. a transient
+            // lock on the freshly-created reparse point) must not flip a real "yes"
+            // into a memoized, process-wide "no".
+            try {
+                rmSync(probe, { force: true });
+            }
+            catch {
+                // Leftover probe file; harmless, and not this function's concern.
+            }
+        }
     }
-    catch {
-        return false;
+    return cachedCapability;
+}
+/**
+ * Create a symlink — the one sanctioned call site for `fs.symlinkSync` in
+ * test code. Requires a {@link SymlinkCapability}, which only
+ * {@link symlinkCapability} can mint, so a test cannot reach the real
+ * syscall without first proving (or explicitly bypassing via `skip()`) that
+ * this host supports it.
+ *
+ * @param _cap - Proof from {@link symlinkCapability} that this host can create symlinks
+ * @param target - The existing path the new link should point at
+ * @param path - Where to create the link
+ * @param type - Windows-only link-type hint (`'file'` \| `'dir'` \| `'junction'`); ignored on POSIX
+ */
+export function createSymlink(_cap, target, path, type) {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller-supplied path; the capability parameter is what proves this call site is sanctioned
+    symlinkSync(target, path, type);
+}
+/**
+ * The async counterpart of {@link createSymlink}, for fixtures already using
+ * `node:fs/promises`. Same capability requirement, same reasoning.
+ *
+ * @param _cap - Proof from {@link symlinkCapability} that this host can create symlinks
+ * @param target - The existing path the new link should point at
+ * @param path - Where to create the link
+ * @param type - Windows-only link-type hint (`'file'` \| `'dir'` \| `'junction'`); ignored on POSIX
+ */
+export async function createSymlinkAsync(_cap, target, path, type) {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller-supplied path; the capability parameter is what proves this call site is sanctioned
+    await fs.symlink(target, path, type);
+}
+/**
+ * The variables git exports into a hook, which a fixture must clear before it
+ * can fabricate its own.
+ *
+ * These are the ones git sets *for* you. Deliberately **not** the operator's own
+ * `GIT_CONFIG_COUNT`/`KEY_n`/`VALUE_n`/`GLOBAL`/`SYSTEM` channel — a test may be
+ * using that on purpose to point a clone at a local path, and clearing it sends
+ * the clone to the network instead.
+ */
+export const INHERITED_GIT_ENV = [
+    'GIT_ALTERNATE_OBJECT_DIRECTORIES',
+    'GIT_CEILING_DIRECTORIES',
+    'GIT_COMMON_DIR',
+    'GIT_CONFIG_PARAMETERS',
+    'GIT_DIR',
+    'GIT_DISCOVERY_ACROSS_FILESYSTEM',
+    'GIT_GRAFT_FILE',
+    'GIT_INDEX_FILE',
+    'GIT_INDEX_VERSION',
+    'GIT_NAMESPACE',
+    'GIT_NOTES_REF',
+    'GIT_OBJECT_DIRECTORY',
+    'GIT_PREFIX',
+    'GIT_SHALLOW_FILE',
+    'GIT_WORK_TREE',
+];
+/**
+ * Remove every inherited git redirection from `process.env`, and hand back the
+ * undo.
+ *
+ * A test that fabricates a hook environment has to start from a known-clean one,
+ * or it inherits whatever the *outer* runner exported and can no longer tell its
+ * own fixture apart from the ambient state — it then passes or fails for reasons
+ * it never set up. Restoring afterwards matters just as much: these are
+ * process-global, so a test that leaks `GIT_DIR` silently redirects every later
+ * test sharing the worker.
+ *
+ * ⚠️ **The key list is restated here on purpose, not by oversight.** Deriving it
+ * from `@vibe-validate/git`'s `stripGitEnv()` would be tidier, and it is exactly
+ * what this function did for one revision — but this module is the `./testing`
+ * subpath, which `subpath-purity.test.ts` pins as reaching **no third-party
+ * package at all** so it stays importable with zero dependencies installed. One
+ * import cost that property. The drift risk the derivation was avoiding is
+ * handled instead by {@link "../test/test-helpers-git-env.test".default}, which
+ * asserts this list equals what the shipped scrub removes.
+ *
+ * @returns A function restoring every variable to its prior value, putting back
+ *   "was not set" as unset rather than as an empty string
+ *
+ * @example
+ * ```typescript
+ * let restoreGitEnv: () => void;
+ * beforeEach(() => { restoreGitEnv = detachGitEnv(); });
+ * afterEach(() => { restoreGitEnv(); });
+ * ```
+ */
+export function detachGitEnv() {
+    const saved = new Map();
+    const forget = (name) => {
+        saved.set(name, process.env[name]);
+        delete process.env[name];
+    };
+    for (const name of INHERITED_GIT_ENV) {
+        forget(name);
     }
-    rmSync(probe, { force: true });
-    return true;
+    return () => {
+        for (const [name, value] of saved) {
+            // Deleted first so an absent variable is restored as absent: assigning
+            // `undefined` would leave the literal string 'undefined' behind.
+            delete process.env[name];
+            if (value !== undefined)
+                process.env[name] = value;
+        }
+    };
 }
 //# sourceMappingURL=test-helpers.js.map

package/dist/test-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"test-helpers.js","sourceRoot":"","sources":["../src/test-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,QAA2C,EAC3C,GAAG,OAAiB;IAEpB,iDAAiD;IACjD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC;IAEzC,iEAAiE;IACjE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpD,kFAAkF;IAClF,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CACjC,WAAW,EACX,UAAU,EACV,WAAW,EACX,cAAc,EACd,QAAQ,EACR,KAAK,EACL,GAAG,OAAO,CACX,CAAC;IAEF,wDAAwD;IAExD,OAAO,aAAa,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IAOnD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,OAAO;QACL,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,UAAU,EAAE,KAAK,IAAI,EAAE;YACrB,WAAW,EAAE,CAAC;YACd,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC;YACzD,8FAA8F;YAC9F,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,4CAA4C;QAC9C,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAOlD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,OAAO;QACL,SAAS,EAAE,GAAG,EAAE;YACd,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE;YACb,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,GAAG,EAAE;YACf,WAAW,EAAE,CAAC;YACd,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC;YACzD,aAAa,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,SAAS,EAAE,GAAG,EAAE;YACd,4CAA4C;QAC9C,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC;QACH,gIAAgI;QAChI,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"test-helpers.js","sourceRoot":"","sources":["../src/test-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAGlC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE5E;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAqBvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,UAAmC,EAAE;IAErC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,yBAAyB,CAAC;IAC/D,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;QACd,CAAC,CAAC,OAAe,EAAQ,EAAE;YACzB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IAEL,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,MAAM,GAAG,CAAC,MAAc,EAAQ,EAAE;QACtC,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,CAAC,8BAA8B,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC;IAEF,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;QACd,CAAC,CAAC,MAAc,EAAiB,EAAE,CACjC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAEpF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;SACxB,IAAI,CAAC,GAAG,EAAE;QACT,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEL,IAAI,KAAgD,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC7C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,MAAM,CAAC,iCAAiC,QAAQ,IAAI,CAAC,CAAC;YACtD,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,QAAQ,CAAC,CAAC;QACb,mEAAmE;QACnE,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxC,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,QAA2C,EAC3C,GAAG,OAAiB;IAEpB,iDAAiD;IACjD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC;IAEzC,iEAAiE;IACjE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpD,kFAAkF;IAClF,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CACjC,WAAW,EACX,UAAU,EACV,WAAW,EACX,cAAc,EACd,QAAQ,EACR,KAAK,EACL,GAAG,OAAO,CACX,CAAC;IAEF,wDAAwD;IAExD,OAAO,aAAa,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,WAAoC,EAAE;IAO3F,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,OAAO;QACL,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,UAAU,EAAE,KAAK,IAAI,EAAE;YACrB,WAAW,EAAE,CAAC;YACd,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC;YACzD,8FAA8F;YAC9F,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,4CAA4C;QAC9C,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,WAAoC,EAAE;IAU1F,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,OAAO;QACL,SAAS,EAAE,GAAG,EAAE;YACd,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,UAAU,EAAE,GAAG,EAAE;YACf,WAAW,EAAE,CAAC;YACd,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC;YACzD,aAAa,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,SAAS,EAAE,GAAG,EAAE;YACd,4CAA4C;QAC9C,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;KAC1B,CAAC;AACJ,CAAC;AAgBD,IAAI,gBAAsD,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,sBAAsB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC;YACH,0HAA0H;YAC1H,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxB,gBAAgB,GAAG,EAAuB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,sCAAsC;YACtC,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAkC;IAElC,iKAAiK;IACjK,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAkC;IAElC,iKAAiK;IACjK,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,kCAAkC;IAClC,yBAAyB;IACzB,gBAAgB;IAChB,uBAAuB;IACvB,SAAS;IACT,iCAAiC;IACjC,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,eAAe;IACf,eAAe;IACf,sBAAsB;IACtB,YAAY;IACZ,kBAAkB;IAClB,eAAe;CACP,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEpD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;QACpC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,uEAAuE;YACvE,iEAAiE;YACjE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}