@warlock.js/core 5.32.0 → 5.33.0

package/esm/socket/utils.mjs

@@ -7,7 +7,18 @@ import { container } from "../container/index.mjs";
 function getSocketServer() {
 	return container.tryGet("socket") ?? null;
 }
+/**
+* Broadcast through the socket connector's configured adapter. Returns false
+* without a socket server; true means dispatched, not acknowledged by clients.
+* Socket.IO 4.8.3's BroadcastOperator.emit calls adapter.broadcast (installed
+* socket.io/dist/broadcast-operator.js); do not use `io.local` here.
+*/
+function broadcastSocketEvent(event, ...args) {
+	const socket = getSocketServer();
+	if (!socket) return false;
+	return socket.emit(event, ...args);
+}
 
 //#endregion
-export { getSocketServer };
+export { broadcastSocketEvent, getSocketServer };
 //# sourceMappingURL=utils.mjs.map

package/esm/socket/utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"utils.mjs","names":[],"sources":["../../../../../../../../packages/core/src/socket/utils.ts"],"sourcesContent":["import { type Server } from \"socket.io\";\nimport { container } from \"../container\";\n\n/**\n * Get socket server instance\n */\nexport function getSocketServer(): Server | null {\n  return container.tryGet(\"socket\") ?? null;\n}\n"],"mappings":";;;;;;AAMA,SAAgB,kBAAiC;CAC/C,OAAO,UAAU,OAAO,QAAQ,KAAK;AACvC"}
+{"version":3,"file":"utils.mjs","names":[],"sources":["../../../../../../../../packages/core/src/socket/utils.ts"],"sourcesContent":["import { type Server } from \"socket.io\";\nimport { container } from \"../container\";\n\n/**\n * Get socket server instance\n */\nexport function getSocketServer(): Server | null {\n  return container.tryGet(\"socket\") ?? null;\n}\n\n/**\n * Broadcast through the socket connector's configured adapter. Returns false\n * without a socket server; true means dispatched, not acknowledged by clients.\n * Socket.IO 4.8.3's BroadcastOperator.emit calls adapter.broadcast (installed\n * socket.io/dist/broadcast-operator.js); do not use `io.local` here.\n */\nexport function broadcastSocketEvent(event: string, ...args: unknown[]): boolean {\n  const socket = getSocketServer();\n  if (!socket) return false;\n  return socket.emit(event, ...args);\n}\n"],"mappings":";;;;;;AAMA,SAAgB,kBAAiC;CAC/C,OAAO,UAAU,OAAO,QAAQ,KAAK;AACvC;;;;;;;AAQA,SAAgB,qBAAqB,OAAe,GAAG,MAA0B;CAC/E,MAAM,SAAS,gBAAgB;CAC/B,IAAI,CAAC,QAAQ,OAAO;CACpB,OAAO,OAAO,KAAK,OAAO,GAAG,IAAI;AACnC"}

package/esm/tests/fakes/index.d.mts

@@ -6,4 +6,5 @@ import { idsFake } from "./ids-fake.mjs";
 import { MailMatcher, mailFake } from "./mail-fake.mjs";
 import { JobReference, PushedJob, PushedJobMatcher, queueFake } from "./queue-fake.mjs";
 import { storageFake } from "./storage-fake.mjs";
-export { DEFAULT_FAKE_NOW, FakeAssertionError, JobReference, MailMatcher, PushedJob, PushedJobMatcher, TEST_FAKE_NAMES, TestFakeName, TestFakesSelection, cacheFake, clockFake, describeRecorded, idsFake, installTestFakes, installedTestFakes, mailFake, queueFake, readConfiguredFakes, resolveTestFakes, restoreTestFakes, storageFake };
+import { secretsFake } from "./secrets-fake.mjs";
+export { DEFAULT_FAKE_NOW, FakeAssertionError, JobReference, MailMatcher, PushedJob, PushedJobMatcher, TEST_FAKE_NAMES, TestFakeName, TestFakesSelection, cacheFake, clockFake, describeRecorded, idsFake, installTestFakes, installedTestFakes, mailFake, queueFake, readConfiguredFakes, resolveTestFakes, restoreTestFakes, secretsFake, storageFake };

package/esm/tests/fakes/index.mjs

@@ -4,7 +4,8 @@ import { DEFAULT_FAKE_NOW, clockFake } from "./clock-fake.mjs";
 import { idsFake } from "./ids-fake.mjs";
 import { mailFake } from "./mail-fake.mjs";
 import { queueFake } from "./queue-fake.mjs";
+import { secretsFake } from "./secrets-fake.mjs";
 import { storageFake } from "./storage-fake.mjs";
 import { TEST_FAKE_NAMES, installTestFakes, installedTestFakes, readConfiguredFakes, resolveTestFakes, restoreTestFakes } from "./test-fakes.mjs";
 
-export { DEFAULT_FAKE_NOW, FakeAssertionError, TEST_FAKE_NAMES, cacheFake, clockFake, describeRecorded, idsFake, installTestFakes, installedTestFakes, mailFake, queueFake, readConfiguredFakes, resolveTestFakes, restoreTestFakes, storageFake };
+export { DEFAULT_FAKE_NOW, FakeAssertionError, TEST_FAKE_NAMES, cacheFake, clockFake, describeRecorded, idsFake, installTestFakes, installedTestFakes, mailFake, queueFake, readConfiguredFakes, resolveTestFakes, restoreTestFakes, secretsFake, storageFake };

package/esm/tests/fakes/secrets-fake.d.mts

@@ -0,0 +1,13 @@
+//#region ../../packages/core/src/tests/fakes/secrets-fake.d.ts
+/** The default test-kit secret backend. Assertion failures never reveal stored values. */
+export declare const secretsFake: {
+  install(): void;
+  restore(): void;
+  isInstalled(): boolean;
+  clear(): void;
+  assertHas(name: string): Promise<void>;
+  assertMissing(name: string): Promise<void>;
+  assertStored(name: string, value: string): Promise<void>;
+};
+//#endregion
+//# sourceMappingURL=secrets-fake.d.mts.map

package/esm/tests/fakes/secrets-fake.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-fake.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tests/fakes/secrets-fake.ts"],"mappings":";;qBAaa;EACX;EAQA;EAMA;EAGA;EAGM,UAAS,eAAgB;EAMzB,cAAa,eAAgB;EAM7B,aAAY,cAAa,gBAAkB"}

package/esm/tests/fakes/secrets-fake.mjs

@@ -0,0 +1,50 @@
+import { MemorySecretBackend } from "../../secrets/memory-backend.mjs";
+import { replaceSecretsBackend, secrets } from "../../secrets/secrets.mjs";
+import { FakeAssertionError } from "./fake-assertion-error.mjs";
+
+//#region ../../packages/core/src/tests/fakes/secrets-fake.ts
+let backend;
+let restore;
+function installed() {
+	if (!backend) throw new FakeAssertionError("secretsFake is not installed.");
+	return backend;
+}
+/** The default test-kit secret backend. Assertion failures never reveal stored values. */
+const secretsFake = {
+	install() {
+		if (backend) {
+			backend.clear();
+			return;
+		}
+		backend = new MemorySecretBackend();
+		restore = replaceSecretsBackend(backend);
+	},
+	restore() {
+		restore?.();
+		restore = void 0;
+		backend?.clear();
+		backend = void 0;
+	},
+	isInstalled() {
+		return backend !== void 0;
+	},
+	clear() {
+		installed().clear();
+	},
+	async assertHas(name) {
+		installed();
+		if (!await secrets.has(name)) throw new FakeAssertionError("Expected the secret to be present.");
+	},
+	async assertMissing(name) {
+		installed();
+		if (await secrets.has(name)) throw new FakeAssertionError("Expected the secret to be absent.");
+	},
+	async assertStored(name, value) {
+		installed();
+		if (await secrets.get(name) !== value) throw new FakeAssertionError("The stored secret does not match the expected value.");
+	}
+};
+
+//#endregion
+export { secretsFake };
+//# sourceMappingURL=secrets-fake.mjs.map

package/esm/tests/fakes/secrets-fake.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-fake.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tests/fakes/secrets-fake.ts"],"sourcesContent":["import { MemorySecretBackend } from \"../../secrets/memory-backend\";\nimport { replaceSecretsBackend, secrets } from \"../../secrets/secrets\";\nimport { FakeAssertionError } from \"./fake-assertion-error\";\n\nlet backend: MemorySecretBackend | undefined;\nlet restore: (() => void) | undefined;\n\nfunction installed(): MemorySecretBackend {\n  if (!backend) throw new FakeAssertionError(\"secretsFake is not installed.\");\n  return backend;\n}\n\n/** The default test-kit secret backend. Assertion failures never reveal stored values. */\nexport const secretsFake = {\n  install(): void {\n    if (backend) {\n      backend.clear();\n      return;\n    }\n    backend = new MemorySecretBackend();\n    restore = replaceSecretsBackend(backend);\n  },\n  restore(): void {\n    restore?.();\n    restore = undefined;\n    backend?.clear();\n    backend = undefined;\n  },\n  isInstalled(): boolean {\n    return backend !== undefined;\n  },\n  clear(): void {\n    installed().clear();\n  },\n  async assertHas(name: string): Promise<void> {\n    installed();\n    if (!(await secrets.has(name))) {\n      throw new FakeAssertionError(\"Expected the secret to be present.\");\n    }\n  },\n  async assertMissing(name: string): Promise<void> {\n    installed();\n    if (await secrets.has(name)) {\n      throw new FakeAssertionError(\"Expected the secret to be absent.\");\n    }\n  },\n  async assertStored(name: string, value: string): Promise<void> {\n    installed();\n    if ((await secrets.get(name)) !== value) {\n      throw new FakeAssertionError(\"The stored secret does not match the expected value.\");\n    }\n  },\n};\n"],"mappings":";;;;;AAIA,IAAI;AACJ,IAAI;AAEJ,SAAS,YAAiC;CACxC,IAAI,CAAC,SAAS,MAAM,IAAI,mBAAmB,+BAA+B;CAC1E,OAAO;AACT;;AAGA,MAAa,cAAc;CACzB,UAAgB;EACd,IAAI,SAAS;GACX,QAAQ,MAAM;GACd;EACF;EACA,UAAU,IAAI,oBAAoB;EAClC,UAAU,sBAAsB,OAAO;CACzC;CACA,UAAgB;EACd,UAAU;EACV,UAAU;EACV,SAAS,MAAM;EACf,UAAU;CACZ;CACA,cAAuB;EACrB,OAAO,YAAY;CACrB;CACA,QAAc;EACZ,UAAU,CAAC,CAAC,MAAM;CACpB;CACA,MAAM,UAAU,MAA6B;EAC3C,UAAU;EACV,IAAI,CAAE,MAAM,QAAQ,IAAI,IAAI,GAC1B,MAAM,IAAI,mBAAmB,oCAAoC;CAErE;CACA,MAAM,cAAc,MAA6B;EAC/C,UAAU;EACV,IAAI,MAAM,QAAQ,IAAI,IAAI,GACxB,MAAM,IAAI,mBAAmB,mCAAmC;CAEpE;CACA,MAAM,aAAa,MAAc,OAA8B;EAC7D,UAAU;EACV,IAAK,MAAM,QAAQ,IAAI,IAAI,MAAO,OAChC,MAAM,IAAI,mBAAmB,sDAAsD;CAEvF;AACF"}

package/esm/tests/fakes/test-fakes.d.mts

@@ -1,12 +1,12 @@
 //#region ../../packages/core/src/tests/fakes/test-fakes.d.ts
 /** The fakes the test kit installs. */
-export declare const TEST_FAKE_NAMES: readonly ["mail", "queue", "cache", "storage", "clock", "ids"];
+export declare const TEST_FAKE_NAMES: readonly ["mail", "queue", "cache", "storage", "clock", "ids", "secrets"];
 export type TestFakeName = (typeof TEST_FAKE_NAMES)[number];
 /**
  * Which fakes to install.
  *
  * - `true` (the default) — all of them.
- * - `false` — none: real drivers, real clock, real ids.
+ * - `false` — none: real drivers, real clock, real ids, real secret storage.
  * - an object — all of them except the ones set to `false`, e.g.
  *   `{ cache: false }` keeps the configured cache driver.
  */

package/esm/tests/fakes/test-fakes.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"test-fakes.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tests/fakes/test-fakes.ts"],"mappings":";;qBAUa;YAED,uBAAuB;;;;;;;;;YAUvB,+BAA+B,QAAQ,OAAO;;wBAiB1C,uBAAuB;;;;;;wBA0CvB,iBAAiB,WAAW,qBAAqB;;;;;;;;wBAiB3C,iBAAiB,WAAW,qBAAqB,QAAQ;;;;;wBAgBzD,oBAAoB;;wBAiB1B,sBAAsB"}
+{"version":3,"file":"test-fakes.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tests/fakes/test-fakes.ts"],"mappings":";;qBAWa;YAUD,uBAAuB;;;;;;;;;YAUvB,+BAA+B,QAAQ,OAAO;;wBAkB1C,uBAAuB;;;;;;wBA0CvB,iBAAiB,WAAW,qBAAqB;;;;;;;;wBAiB3C,iBAAiB,WAAW,qBAAqB,QAAQ;;;;;wBAgBzD,oBAAoB;;wBAiB1B,sBAAsB"}

package/esm/tests/fakes/test-fakes.mjs

@@ -5,6 +5,7 @@ import { clockFake } from "./clock-fake.mjs";
 import { idsFake } from "./ids-fake.mjs";
 import { mailFake } from "./mail-fake.mjs";
 import { queueFake } from "./queue-fake.mjs";
+import { secretsFake } from "./secrets-fake.mjs";
 import { storageFake } from "./storage-fake.mjs";
 
 //#region ../../packages/core/src/tests/fakes/test-fakes.ts
@@ -15,7 +16,8 @@ const TEST_FAKE_NAMES = [
 	"cache",
 	"storage",
 	"clock",
-	"ids"
+	"ids",
+	"secrets"
 ];
 const fakes = {
 	mail: mailFake,
@@ -23,7 +25,8 @@ const fakes = {
 	cache: cacheFake,
 	storage: storageFake,
 	clock: clockFake,
-	ids: idsFake
+	ids: idsFake,
+	secrets: secretsFake
 };
 let active = [];
 /** Read `tests.fakes` from `src/config/tests.ts`, or `undefined` when unset. */

package/esm/tests/fakes/test-fakes.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"test-fakes.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tests/fakes/test-fakes.ts"],"sourcesContent":["import type { GenericObject } from \"@mongez/reinforcements\";\nimport { config } from \"../../config\";\nimport { cacheFake } from \"./cache-fake\";\nimport { clockFake } from \"./clock-fake\";\nimport { idsFake } from \"./ids-fake\";\nimport { mailFake } from \"./mail-fake\";\nimport { queueFake } from \"./queue-fake\";\nimport { storageFake } from \"./storage-fake\";\n\n/** The fakes the test kit installs. */\nexport const TEST_FAKE_NAMES = [\"mail\", \"queue\", \"cache\", \"storage\", \"clock\", \"ids\"] as const;\n\nexport type TestFakeName = (typeof TEST_FAKE_NAMES)[number];\n\n/**\n * Which fakes to install.\n *\n * - `true` (the default) — all of them.\n * - `false` — none: real drivers, real clock, real ids.\n * - an object — all of them except the ones set to `false`, e.g.\n *   `{ cache: false }` keeps the configured cache driver.\n */\nexport type TestFakesSelection = boolean | Partial<Record<TestFakeName, boolean>>;\n\nconst fakes: Record<\n  TestFakeName,\n  { install(): void | Promise<void>; restore(): void | Promise<void> }\n> = {\n  mail: mailFake,\n  queue: queueFake,\n  cache: cacheFake,\n  storage: storageFake,\n  clock: clockFake,\n  ids: idsFake,\n};\n\nlet active: TestFakeName[] = [];\n\n/** Read `tests.fakes` from `src/config/tests.ts`, or `undefined` when unset. */\nexport function readConfiguredFakes(): TestFakesSelection | undefined {\n  // `config.get` resolves an absent key to `null`, not to its default's shape.\n  const testsConfig = config.get<GenericObject>(\"tests\", {}) ?? {};\n\n  return validateSelection(testsConfig.fakes as unknown, \"tests.fakes\");\n}\n\nfunction validateSelection(value: unknown, source: string): TestFakesSelection | undefined {\n  if (value === undefined || typeof value === \"boolean\") return value;\n\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw new Error(\n      `${source} must be true, false, or an object such as { cache: false }; got ${JSON.stringify(value)}.`,\n    );\n  }\n\n  const selection: Partial<Record<TestFakeName, boolean>> = {};\n\n  for (const [key, flag] of Object.entries(value)) {\n    const name = TEST_FAKE_NAMES.find((candidate) => candidate === key);\n\n    if (!name) {\n      throw new Error(\n        `${source} has an unknown fake \"${key}\". Known fakes: ${TEST_FAKE_NAMES.join(\", \")}.`,\n      );\n    }\n\n    if (typeof flag !== \"boolean\") {\n      throw new Error(`${source}.${key} must be true or false; got ${JSON.stringify(flag)}.`);\n    }\n\n    selection[name] = flag;\n  }\n\n  return selection;\n}\n\n/**\n * The fakes to install. Precedence: an explicit selection (the `fakes`\n * option of `setupTest()` / `startHttpTestServer()`) > `tests.fakes` in\n * `src/config/tests.ts` > all on.\n */\nexport function resolveTestFakes(explicit?: TestFakesSelection): TestFakeName[] {\n  const selection =\n    explicit !== undefined ? validateSelection(explicit, \"fakes\") : readConfiguredFakes();\n\n  if (selection === undefined || selection === true) return [...TEST_FAKE_NAMES];\n  if (selection === false) return [];\n\n  return TEST_FAKE_NAMES.filter((name) => selection[name] !== false);\n}\n\n/**\n * Install the selected fakes. Called by `setupTest()` and\n * `startHttpTestServer()` once their connectors are up; call it yourself only\n * when you bootstrap the framework without them.\n *\n * @returns the fakes that are now installed.\n */\nexport async function installTestFakes(explicit?: TestFakesSelection): Promise<TestFakeName[]> {\n  const selected = resolveTestFakes(explicit);\n\n  for (const name of selected) {\n    await fakes[name].install();\n  }\n\n  active = [...new Set([...active, ...selected])];\n\n  return selected;\n}\n\n/**\n * Restore every installed fake, in reverse order. Every fake is restored even\n * when one fails; the failures are rethrown together afterwards.\n */\nexport async function restoreTestFakes(): Promise<void> {\n  const errors: unknown[] = [];\n\n  for (const name of [...active].reverse()) {\n    try {\n      await fakes[name].restore();\n    } catch (error) {\n      errors.push(error);\n    }\n  }\n\n  active = [];\n\n  if (errors.length > 0) throw new AggregateError(errors, \"Restoring the test fakes failed.\");\n}\n\n/** The fakes installed right now. */\nexport function installedTestFakes(): TestFakeName[] {\n  return [...active];\n}\n"],"mappings":";;;;;;;;;;;AAUA,MAAa,kBAAkB;CAAC;CAAQ;CAAS;CAAS;CAAW;CAAS;AAAK;AAcnF,MAAM,QAGF;CACF,MAAM;CACN,OAAO;CACP,OAAO;CACP,SAAS;CACT,OAAO;CACP,KAAK;AACP;AAEA,IAAI,SAAyB,CAAC;;AAG9B,SAAgB,sBAAsD;CAIpE,OAAO,mBAFa,OAAO,IAAmB,SAAS,CAAC,CAAC,KAAK,CAAC,EAE3B,CAAC,OAAkB,aAAa;AACtE;AAEA,SAAS,kBAAkB,OAAgB,QAAgD;CACzF,IAAI,UAAU,UAAa,OAAO,UAAU,WAAW,OAAO;CAE9D,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,MACR,GAAG,OAAO,mEAAmE,KAAK,UAAU,KAAK,EAAE,EACrG;CAGF,MAAM,YAAoD,CAAC;CAE3D,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAK,GAAG;EAC/C,MAAM,OAAO,gBAAgB,MAAM,cAAc,cAAc,GAAG;EAElE,IAAI,CAAC,MACH,MAAM,IAAI,MACR,GAAG,OAAO,wBAAwB,IAAI,kBAAkB,gBAAgB,KAAK,IAAI,EAAE,EACrF;EAGF,IAAI,OAAO,SAAS,WAClB,MAAM,IAAI,MAAM,GAAG,OAAO,GAAG,IAAI,8BAA8B,KAAK,UAAU,IAAI,EAAE,EAAE;EAGxF,UAAU,QAAQ;CACpB;CAEA,OAAO;AACT;;;;;;AAOA,SAAgB,iBAAiB,UAA+C;CAC9E,MAAM,YACJ,aAAa,SAAY,kBAAkB,UAAU,OAAO,IAAI,oBAAoB;CAEtF,IAAI,cAAc,UAAa,cAAc,MAAM,OAAO,CAAC,GAAG,eAAe;CAC7E,IAAI,cAAc,OAAO,OAAO,CAAC;CAEjC,OAAO,gBAAgB,QAAQ,SAAS,UAAU,UAAU,KAAK;AACnE;;;;;;;;AASA,eAAsB,iBAAiB,UAAwD;CAC7F,MAAM,WAAW,iBAAiB,QAAQ;CAE1C,KAAK,MAAM,QAAQ,UACjB,MAAM,MAAM,KAAK,CAAC,QAAQ;CAG5B,SAAS,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;CAE9C,OAAO;AACT;;;;;AAMA,eAAsB,mBAAkC;CACtD,MAAM,SAAoB,CAAC;CAE3B,KAAK,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,GACrC,IAAI;EACF,MAAM,MAAM,KAAK,CAAC,QAAQ;CAC5B,SAAS,OAAO;EACd,OAAO,KAAK,KAAK;CACnB;CAGF,SAAS,CAAC;CAEV,IAAI,OAAO,SAAS,GAAG,MAAM,IAAI,eAAe,QAAQ,kCAAkC;AAC5F;;AAGA,SAAgB,qBAAqC;CACnD,OAAO,CAAC,GAAG,MAAM;AACnB"}
+{"version":3,"file":"test-fakes.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tests/fakes/test-fakes.ts"],"sourcesContent":["import type { GenericObject } from \"@mongez/reinforcements\";\nimport { config } from \"../../config\";\nimport { cacheFake } from \"./cache-fake\";\nimport { clockFake } from \"./clock-fake\";\nimport { idsFake } from \"./ids-fake\";\nimport { mailFake } from \"./mail-fake\";\nimport { queueFake } from \"./queue-fake\";\nimport { secretsFake } from \"./secrets-fake\";\nimport { storageFake } from \"./storage-fake\";\n\n/** The fakes the test kit installs. */\nexport const TEST_FAKE_NAMES = [\n  \"mail\",\n  \"queue\",\n  \"cache\",\n  \"storage\",\n  \"clock\",\n  \"ids\",\n  \"secrets\",\n] as const;\n\nexport type TestFakeName = (typeof TEST_FAKE_NAMES)[number];\n\n/**\n * Which fakes to install.\n *\n * - `true` (the default) — all of them.\n * - `false` — none: real drivers, real clock, real ids, real secret storage.\n * - an object — all of them except the ones set to `false`, e.g.\n *   `{ cache: false }` keeps the configured cache driver.\n */\nexport type TestFakesSelection = boolean | Partial<Record<TestFakeName, boolean>>;\n\nconst fakes: Record<\n  TestFakeName,\n  { install(): void | Promise<void>; restore(): void | Promise<void> }\n> = {\n  mail: mailFake,\n  queue: queueFake,\n  cache: cacheFake,\n  storage: storageFake,\n  clock: clockFake,\n  ids: idsFake,\n  secrets: secretsFake,\n};\n\nlet active: TestFakeName[] = [];\n\n/** Read `tests.fakes` from `src/config/tests.ts`, or `undefined` when unset. */\nexport function readConfiguredFakes(): TestFakesSelection | undefined {\n  // `config.get` resolves an absent key to `null`, not to its default's shape.\n  const testsConfig = config.get<GenericObject>(\"tests\", {}) ?? {};\n\n  return validateSelection(testsConfig.fakes as unknown, \"tests.fakes\");\n}\n\nfunction validateSelection(value: unknown, source: string): TestFakesSelection | undefined {\n  if (value === undefined || typeof value === \"boolean\") return value;\n\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw new Error(\n      `${source} must be true, false, or an object such as { cache: false }; got ${JSON.stringify(value)}.`,\n    );\n  }\n\n  const selection: Partial<Record<TestFakeName, boolean>> = {};\n\n  for (const [key, flag] of Object.entries(value)) {\n    const name = TEST_FAKE_NAMES.find((candidate) => candidate === key);\n\n    if (!name) {\n      throw new Error(\n        `${source} has an unknown fake \"${key}\". Known fakes: ${TEST_FAKE_NAMES.join(\", \")}.`,\n      );\n    }\n\n    if (typeof flag !== \"boolean\") {\n      throw new Error(`${source}.${key} must be true or false; got ${JSON.stringify(flag)}.`);\n    }\n\n    selection[name] = flag;\n  }\n\n  return selection;\n}\n\n/**\n * The fakes to install. Precedence: an explicit selection (the `fakes`\n * option of `setupTest()` / `startHttpTestServer()`) > `tests.fakes` in\n * `src/config/tests.ts` > all on.\n */\nexport function resolveTestFakes(explicit?: TestFakesSelection): TestFakeName[] {\n  const selection =\n    explicit !== undefined ? validateSelection(explicit, \"fakes\") : readConfiguredFakes();\n\n  if (selection === undefined || selection === true) return [...TEST_FAKE_NAMES];\n  if (selection === false) return [];\n\n  return TEST_FAKE_NAMES.filter((name) => selection[name] !== false);\n}\n\n/**\n * Install the selected fakes. Called by `setupTest()` and\n * `startHttpTestServer()` once their connectors are up; call it yourself only\n * when you bootstrap the framework without them.\n *\n * @returns the fakes that are now installed.\n */\nexport async function installTestFakes(explicit?: TestFakesSelection): Promise<TestFakeName[]> {\n  const selected = resolveTestFakes(explicit);\n\n  for (const name of selected) {\n    await fakes[name].install();\n  }\n\n  active = [...new Set([...active, ...selected])];\n\n  return selected;\n}\n\n/**\n * Restore every installed fake, in reverse order. Every fake is restored even\n * when one fails; the failures are rethrown together afterwards.\n */\nexport async function restoreTestFakes(): Promise<void> {\n  const errors: unknown[] = [];\n\n  for (const name of [...active].reverse()) {\n    try {\n      await fakes[name].restore();\n    } catch (error) {\n      errors.push(error);\n    }\n  }\n\n  active = [];\n\n  if (errors.length > 0) throw new AggregateError(errors, \"Restoring the test fakes failed.\");\n}\n\n/** The fakes installed right now. */\nexport function installedTestFakes(): TestFakeName[] {\n  return [...active];\n}\n"],"mappings":";;;;;;;;;;;;AAWA,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAcA,MAAM,QAGF;CACF,MAAM;CACN,OAAO;CACP,OAAO;CACP,SAAS;CACT,OAAO;CACP,KAAK;CACL,SAAS;AACX;AAEA,IAAI,SAAyB,CAAC;;AAG9B,SAAgB,sBAAsD;CAIpE,OAAO,mBAFa,OAAO,IAAmB,SAAS,CAAC,CAAC,KAAK,CAAC,EAE3B,CAAC,OAAkB,aAAa;AACtE;AAEA,SAAS,kBAAkB,OAAgB,QAAgD;CACzF,IAAI,UAAU,UAAa,OAAO,UAAU,WAAW,OAAO;CAE9D,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,MACR,GAAG,OAAO,mEAAmE,KAAK,UAAU,KAAK,EAAE,EACrG;CAGF,MAAM,YAAoD,CAAC;CAE3D,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAK,GAAG;EAC/C,MAAM,OAAO,gBAAgB,MAAM,cAAc,cAAc,GAAG;EAElE,IAAI,CAAC,MACH,MAAM,IAAI,MACR,GAAG,OAAO,wBAAwB,IAAI,kBAAkB,gBAAgB,KAAK,IAAI,EAAE,EACrF;EAGF,IAAI,OAAO,SAAS,WAClB,MAAM,IAAI,MAAM,GAAG,OAAO,GAAG,IAAI,8BAA8B,KAAK,UAAU,IAAI,EAAE,EAAE;EAGxF,UAAU,QAAQ;CACpB;CAEA,OAAO;AACT;;;;;;AAOA,SAAgB,iBAAiB,UAA+C;CAC9E,MAAM,YACJ,aAAa,SAAY,kBAAkB,UAAU,OAAO,IAAI,oBAAoB;CAEtF,IAAI,cAAc,UAAa,cAAc,MAAM,OAAO,CAAC,GAAG,eAAe;CAC7E,IAAI,cAAc,OAAO,OAAO,CAAC;CAEjC,OAAO,gBAAgB,QAAQ,SAAS,UAAU,UAAU,KAAK;AACnE;;;;;;;;AASA,eAAsB,iBAAiB,UAAwD;CAC7F,MAAM,WAAW,iBAAiB,QAAQ;CAE1C,KAAK,MAAM,QAAQ,UACjB,MAAM,MAAM,KAAK,CAAC,QAAQ;CAG5B,SAAS,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;CAE9C,OAAO;AACT;;;;;AAMA,eAAsB,mBAAkC;CACtD,MAAM,SAAoB,CAAC;CAE3B,KAAK,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,GACrC,IAAI;EACF,MAAM,MAAM,KAAK,CAAC,QAAQ;CAC5B,SAAS,OAAO;EACd,OAAO,KAAK,KAAK;CACnB;CAGF,SAAS,CAAC;CAEV,IAAI,OAAO,SAAS,GAAG,MAAM,IAAI,eAAe,QAAQ,kCAAkC;AAC5F;;AAGA,SAAgB,qBAAqC;CACnD,OAAO,CAAC,GAAG,MAAM;AACnB"}

package/esm/tests/index.d.mts

@@ -12,8 +12,9 @@ import { idsFake } from "./fakes/ids-fake.mjs";
 import { MailMatcher, mailFake } from "./fakes/mail-fake.mjs";
 import { JobReference, PushedJob, PushedJobMatcher, queueFake } from "./fakes/queue-fake.mjs";
 import { storageFake } from "./fakes/storage-fake.mjs";
+import { secretsFake } from "./fakes/secrets-fake.mjs";
 import "./fakes/index.mjs";
 import { Factory, FactoryAttributes, FactoryOverrides, FactorySeed, FactoryState, defineFactory, resetFactorySequences } from "./factories.mjs";
 import { CreateTestHttpServerOptions, TestHttpServer, createTestHttpServer } from "./test-http-server.mjs";
 import { REDACTED, ResponseSnapshot, SnapshotResponseOptions, snapshotResponse } from "./snapshot-response.mjs";
-export { AuthenticatedTestClient, CreateTestHttpServerOptions, DEFAULT_FAKE_NOW, Factory, FactoryAttributes, FactoryOverrides, FactorySeed, FactoryState, FakeAssertionError, JobReference, MailMatcher, PushedJob, PushedJobMatcher, REDACTED, ResponseSnapshot, SnapshotResponseOptions, StartHttpTestServerOptions, TEST_FAKE_NAMES, TestAuthenticableUser, type TestConnectorsSelection, TestFakeName, TestFakesSelection, TestHttpServer, TestLifecycleError, TestRequestClient, TestSetupOptions, actingAs, assertPortIsAvailable, cacheFake, clockFake, createTestHttpServer, createTestRequestClient, defineFactory, describeRecorded, expectJson, getTestServerUrl, idsFake, installTestFakes, installedTestFakes, isPortAvailable, isTestServerRunning, mailFake, parseJsonResponse, queueFake, readConfiguredFakes, resetFactorySequences, resolveTestFakes, restoreTestFakes, setupTest, snapshotResponse, startHttpTestServer, stopHttpTestServer, storageFake, teardownTest, testDelete, testGet, testPatch, testPost, testPut, testRequest, warnMissingImportModule };
+export { AuthenticatedTestClient, CreateTestHttpServerOptions, DEFAULT_FAKE_NOW, Factory, FactoryAttributes, FactoryOverrides, FactorySeed, FactoryState, FakeAssertionError, JobReference, MailMatcher, PushedJob, PushedJobMatcher, REDACTED, ResponseSnapshot, SnapshotResponseOptions, StartHttpTestServerOptions, TEST_FAKE_NAMES, TestAuthenticableUser, type TestConnectorsSelection, TestFakeName, TestFakesSelection, TestHttpServer, TestLifecycleError, TestRequestClient, TestSetupOptions, actingAs, assertPortIsAvailable, cacheFake, clockFake, createTestHttpServer, createTestRequestClient, defineFactory, describeRecorded, expectJson, getTestServerUrl, idsFake, installTestFakes, installedTestFakes, isPortAvailable, isTestServerRunning, mailFake, parseJsonResponse, queueFake, readConfiguredFakes, resetFactorySequences, resolveTestFakes, restoreTestFakes, secretsFake, setupTest, snapshotResponse, startHttpTestServer, stopHttpTestServer, storageFake, teardownTest, testDelete, testGet, testPatch, testPost, testPut, testRequest, warnMissingImportModule };

package/esm/tests/index.mjs

@@ -5,6 +5,7 @@ import { DEFAULT_FAKE_NOW, clockFake } from "./fakes/clock-fake.mjs";
 import { idsFake } from "./fakes/ids-fake.mjs";
 import { mailFake } from "./fakes/mail-fake.mjs";
 import { queueFake } from "./fakes/queue-fake.mjs";
+import { secretsFake } from "./fakes/secrets-fake.mjs";
 import { storageFake } from "./fakes/storage-fake.mjs";
 import { TEST_FAKE_NAMES, installTestFakes, installedTestFakes, readConfiguredFakes, resolveTestFakes, restoreTestFakes } from "./fakes/test-fakes.mjs";
 import { isTestServerRunning, startHttpTestServer, stopHttpTestServer } from "./start-http-development-server.mjs";
@@ -16,4 +17,4 @@ import { defineFactory, resetFactorySequences } from "./factories.mjs";
 import { createTestHttpServer } from "./test-http-server.mjs";
 import { REDACTED, snapshotResponse } from "./snapshot-response.mjs";
 
-export { DEFAULT_FAKE_NOW, FakeAssertionError, REDACTED, TEST_FAKE_NAMES, TestLifecycleError, actingAs, assertPortIsAvailable, cacheFake, clockFake, createTestHttpServer, createTestRequestClient, defineFactory, describeRecorded, expectJson, getTestServerUrl, idsFake, installTestFakes, installedTestFakes, isPortAvailable, isTestServerRunning, mailFake, parseJsonResponse, queueFake, readConfiguredFakes, resetFactorySequences, resolveTestFakes, restoreTestFakes, setupTest, snapshotResponse, startHttpTestServer, stopHttpTestServer, storageFake, teardownTest, testDelete, testGet, testPatch, testPost, testPut, testRequest, warnMissingImportModule };
+export { DEFAULT_FAKE_NOW, FakeAssertionError, REDACTED, TEST_FAKE_NAMES, TestLifecycleError, actingAs, assertPortIsAvailable, cacheFake, clockFake, createTestHttpServer, createTestRequestClient, defineFactory, describeRecorded, expectJson, getTestServerUrl, idsFake, installTestFakes, installedTestFakes, isPortAvailable, isTestServerRunning, mailFake, parseJsonResponse, queueFake, readConfiguredFakes, resetFactorySequences, resolveTestFakes, restoreTestFakes, secretsFake, setupTest, snapshotResponse, startHttpTestServer, stopHttpTestServer, storageFake, teardownTest, testDelete, testGet, testPatch, testPost, testPut, testRequest, warnMissingImportModule };

package/esm/tests/vitest-setup.d.mts

@@ -24,7 +24,7 @@ export type TestSetupOptions = {
   importModule?: AppModuleImporter;
   /**
    * Which test fakes to install once the connectors are up: mail, queue,
-   * cache, storage, clock and ids (see `installTestFakes`).
+   * cache, storage, clock, ids and secrets (see `installTestFakes`).
    *
    * Precedence is `explicit option > tests.fakes config > true`, so every fake
    * is on unless the project or this call opts out. `false` keeps the real

package/esm/tests/vitest-setup.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"vitest-setup.mjs","names":[],"sources":["../../../../../../../../packages/core/src/tests/vitest-setup.ts"],"sourcesContent":["/**\n * Worker test lifecycle — `setupTest` / `teardownTest`.\n *\n * Implements `contracts/2026-08-12-test-worker-lifecycle.md`. The pair is\n * context-scoped, not \"once per worker\": Vitest runs `setupFiles` before EVERY\n * test file and rebuilds the module registry each time, so the harness that\n * calls `setupTest` owns pairing it with `teardownTest` in the same runtime\n * context.\n *\n * Ownership, stated once because teardown is wider than it looks:\n *\n * - the runtime assumes exclusive ownership of the process-local\n *   `connectorsManager` for its lifetime;\n * - it owns the framework bootstrap, the application shutdown hooks, and the\n *   connectors it starts — including the `connectors: false` case, where\n *   bootstrap still registers hooks;\n * - teardown is MANAGER-WIDE. `connectorsManager.shutdown()` has no selective\n *   ownership handle, so a lifecycle that started two connectors still closes\n *   every connector the manager holds. Mixing `setupTest` with manual connector\n *   startup in the same process is unsupported for exactly that reason.\n * - HTTP global setup stays separately owned by `startHttpTestServer` /\n *   `stopHttpTestServer`.\n */\nimport { Application } from \"../application/application\";\nimport { bootstrap } from \"../bootstrap\";\nimport { setAppModuleImporter } from \"../loader/app-module-importer\";\nimport type { AppModuleImporter } from \"../loader/app-module-importer\";\nimport { loadConfigFiles } from \"../config/load-config-files\";\nimport { connectorsManager } from \"../connectors\";\nimport { filesOrchestrator } from \"../dev-server/files-orchestrator\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\nimport { installTestFakes, restoreTestFakes } from \"./fakes/test-fakes\";\nimport type { TestFakesSelection } from \"./fakes/test-fakes\";\nimport {\n  describeConnectorsSelection,\n  isSameConnectorsSelection,\n  normalizeConnectorNames,\n  readRequestedConnectors,\n  resolveEffectiveConnectors,\n} from \"./test-connectors-selection\";\nimport type { RequestedTestConnectors, TestConnectorsSelection } from \"./test-connectors-selection\";\nimport { getTestLifecycleRegistry } from \"./test-lifecycle-state\";\nimport type { TestLifecycleRegistry, TestSetupAttempt } from \"./test-lifecycle-state\";\nimport {\n  DEFAULT_TEST_SETUP_TIMEOUT,\n  describeExpiredSetup,\n  readConfiguredSetupTimeout,\n  scheduleRealTimeout,\n} from \"./test-setup-timeout\";\nimport type { TestTimeoutHandle } from \"./test-setup-timeout\";\n\nexport type { TestConnectorsSelection } from \"./test-connectors-selection\";\n\nexport type TestSetupOptions = {\n  /**\n   * Which connectors to start.\n   *\n   * Precedence is `explicit non-undefined option > tests.connectors config >\n   * true`. Omitting the property, or passing `undefined`, lets project config\n   * apply — so an optional variable that happens to be `undefined` cannot erase\n   * it.\n   */\n  connectors?: TestConnectorsSelection;\n  /**\n   * Import hook for APPLICATION modules (config, routes, events, ...).\n   *\n   * Pass `(file) => import(file)` from your `src/test-setup.ts`: that file is\n   * app code, so Vitest handles the `import()` and app modules land in the same\n   * module graph as your test files. Without it Warlock imports them natively,\n   * one worker holds two copies of every class (`User`, ...), and `instanceof`\n   * fails. Defaults to native import.\n   */\n  importModule?: AppModuleImporter;\n  /**\n   * Which test fakes to install once the connectors are up: mail, queue,\n   * cache, storage, clock and ids (see `installTestFakes`).\n   *\n   * Precedence is `explicit option > tests.fakes config > true`, so every fake\n   * is on unless the project or this call opts out. `false` keeps the real\n   * drivers; `{ cache: false }` keeps only the real cache. Teardown restores\n   * them.\n   */\n  fakes?: TestFakesSelection;\n};\n\nconst IMPORT_MODULE_WARNED_KEY = Symbol.for(\"warlock.core.importModuleWarned\");\n\n/**\n * Warn — once per process — that app modules are loaded outside Vitest's graph.\n */\nexport function warnMissingImportModule(importModule: AppModuleImporter | undefined): void {\n  if (importModule || !process.env.VITEST) return;\n\n  const holder = globalThis as Record<symbol, unknown>;\n\n  if (holder[IMPORT_MODULE_WARNED_KEY]) return;\n\n  holder[IMPORT_MODULE_WARNED_KEY] = true;\n\n  console.warn(\n    \"[warlock] Warlock loads app modules outside Vitest's module graph, so classes like User exist twice and instanceof fails. Pass importModule: (file) => import(file) to setupTest().\",\n  );\n}\n\n/**\n * Raised by the lifecycle itself, never by the runtime it manages — a conflict\n * between two calls, or a refusal to reuse a runtime that did not close.\n */\nexport class TestLifecycleError extends Error {\n  public constructor(message: string) {\n    super(message);\n\n    this.name = \"TestLifecycleError\";\n  }\n}\n\nconst POISONED_MESSAGE =\n  \"setupTest() refuses to start a test runtime: an earlier teardownTest() reported a shutdown failure, so the connectors, ports and pools it owned are not known to be closed. Restart the Vitest worker before setting up again, or call teardownTest() to retry the shutdown — the lifecycle only returns to idle on a fully successful retry.\";\n\n/**\n * Bootstrap the test runtime and start the selected connectors.\n *\n * ⚠ Runs once per TEST FILE, not once per worker: `setupFiles` is executed for\n * every file and its module registry is rebuilt with it, measured across both\n * pools with isolation on and off. The lifecycle state lives on the runtime\n * context rather than in this module precisely so that a rebuild cannot hide a\n * runtime that is still up.\n *\n * Repeated calls:\n *\n * - concurrent calls with the same effective selection share one startup;\n * - while ready, the same effective selection is a no-op;\n * - while starting or ready, a DIFFERENT effective selection rejects and leaves\n *   the live runtime untouched;\n * - a failed setup unwinds and returns to idle, so a clean retry is allowed;\n * - after a successful `teardownTest`, a later setup may use a different\n *   selection.\n *\n * @example\n * // let project config decide, falling back to the default set\n * await setupTest();\n *\n * @example\n * // bootstrap only — no connectors, whatever config says\n * await setupTest({ connectors: false });\n */\nexport async function setupTest(options?: TestSetupOptions): Promise<void> {\n  warnMissingImportModule(options?.importModule);\n\n  const registry = getTestLifecycleRegistry();\n  const requested = readRequestedConnectors(options?.connectors);\n\n  if (registry.state === \"poisoned\") {\n    throw new TestLifecycleError(POISONED_MESSAGE);\n  }\n\n  if (registry.state === \"stopping\" && registry.teardownAttempt) {\n    await settled(registry.teardownAttempt);\n\n    return setupTest(options);\n  }\n\n  if (registry.state === \"ready\") {\n    assertReadySelectionMatches(registry.activeSelection, requested);\n\n    return;\n  }\n\n  if (registry.state === \"starting\" && registry.setupAttempt) {\n    const attempt = registry.setupAttempt;\n\n    await assertPendingSetupMatches(attempt, requested);\n\n    return attempt.completion;\n  }\n\n  // Scoped to this startup: the loaders read it while app modules import, and\n  // it is cleared whatever the outcome so it never leaks past setup.\n  setAppModuleImporter(options?.importModule);\n\n  try {\n    return await startTestRuntime(requested, options?.fakes);\n  } finally {\n    setAppModuleImporter(undefined);\n  }\n}\n\n/**\n * Shut the test runtime down and release the lifecycle.\n *\n * - idle is a no-op;\n * - concurrent calls share one attempt;\n * - a call made while setup is still running waits for that attempt to settle,\n *   then closes the runtime if it succeeded;\n * - the local \"ready\" state is always cleared, including when shutdown rejects;\n * - a shutdown rejection is surfaced, never swallowed, and poisons the\n *   lifecycle — a reported close failure is not proof that anything closed, so\n *   later `setupTest` calls refuse until the worker is restarted or a retry\n *   fully succeeds.\n *\n * ⚠ Individual connector shutdown failures are caught and logged inside\n * `connectorsManager.shutdown()`, so they never reach this function and never\n * poison anything. This lifecycle can only surface what that layer reports.\n */\nexport async function teardownTest(): Promise<void> {\n  const registry = getTestLifecycleRegistry();\n\n  if (registry.state === \"stopping\" && registry.teardownAttempt) {\n    return registry.teardownAttempt;\n  }\n\n  if (registry.state === \"starting\" && registry.setupAttempt) {\n    // A runtime that is still opening cannot be closed halfway. Wait for the\n    // attempt to settle: a failed one has already unwound itself and left the\n    // lifecycle idle, which the re-entry below then reads as \"nothing to do\".\n    await settled(registry.setupAttempt.completion);\n\n    return teardownTest();\n  }\n\n  if (registry.state === \"idle\") {\n    return;\n  }\n\n  registry.state = \"stopping\";\n\n  // Deferred by a microtask so the registry is fully published before the\n  // attempt's first line runs — a synchronous throw would otherwise reach the\n  // `finally` below, and reset the state, before this function had recorded\n  // that a teardown was in flight at all.\n  const attempt = Promise.resolve().then(() => runTestRuntimeShutdown());\n\n  registry.teardownAttempt = attempt;\n\n  return attempt;\n}\n\n/**\n * The setup attempt's hang guard, as the lifecycle consumes it.\n *\n * The bound's POLICY — the default, the config key, the message — lives in\n * `test-setup-timeout.ts`. What expiry MEANS lives here.\n *\n * @internal\n */\ntype SetupBound = {\n  /**\n   * Rejects with the expiry error. Never resolves: the attempt is the only side\n   * of the race that can succeed.\n   */\n  readonly expiry: Promise<never>;\n\n  /**\n   * Re-aim the bound at `next` ms measured from when the ATTEMPT STARTED, once\n   * config has made `tests.setupTimeout` readable.\n   */\n  rearm(next: number): void;\n\n  /** The race is over — cancel whatever timer is still pending. */\n  settle(): void;\n\n  /** Whether the bound, rather than the attempt, won the race. */\n  hasExpired(): boolean;\n};\n\n/**\n * Arm the hang guard for one setup attempt.\n *\n * Armed at the default BEFORE the attempt runs, because `tests.setupTimeout` is\n * not readable until the attempt has loaded config — and loading config is\n * itself one of the steps that can hang. `rearm` then narrows or widens it the\n * moment config arrives.\n */\nfunction armSetupBound(registry: TestLifecycleRegistry): SetupBound {\n  const schedule = registry.scheduleTimeout ?? scheduleRealTimeout;\n  const armedAt = Date.now();\n\n  let handle: TestTimeoutHandle | undefined;\n  let expired = false;\n  let closed = false;\n  let expire: (error: unknown) => void = () => undefined;\n\n  const expiry = new Promise<never>((_resolve, reject) => {\n    expire = reject;\n  });\n\n  // Only `awaitSetupWithinBound` observes this, and only until the attempt wins\n  // — after that nobody is listening, and an unobserved rejection surfaces as an\n  // unhandled rejection that fails an unrelated test file. Same reason as the\n  // `effectiveSelection` barrier below.\n  expiry.catch(() => undefined);\n\n  const expireNow = (bound: number): void => {\n    if (closed) {\n      return;\n    }\n\n    closed = true;\n    expired = true;\n\n    handle?.cancel();\n    handle = undefined;\n\n    expire(new TestLifecycleError(describeExpiredSetup(bound)));\n  };\n\n  const armFor = (bound: number, delay: number): void => {\n    if (closed) {\n      return;\n    }\n\n    handle?.cancel();\n\n    // Already overdue. A bound the attempt has ALREADY exceeded must fire now,\n    // not be rescheduled for time that was spent before it was known.\n    if (delay <= 0) {\n      expireNow(bound);\n\n      return;\n    }\n\n    handle = schedule(delay, () => expireNow(bound));\n  };\n\n  const initialBound = registry.setupTimeoutOverride ?? DEFAULT_TEST_SETUP_TIMEOUT;\n\n  armFor(initialBound, initialBound);\n\n  return {\n    expiry,\n\n    // Measured from `armedAt`, never from now: adding a configured bound to the\n    // time already spent would make the real bound default-plus-configured, and\n    // a project that lowered the key would get a LONGER guard than the default.\n    rearm: (next) => armFor(next, next - (Date.now() - armedAt)),\n\n    settle: () => {\n      closed = true;\n\n      handle?.cancel();\n      handle = undefined;\n    },\n\n    hasExpired: () => expired,\n  };\n}\n\n/**\n * Race one setup attempt against its bound.\n *\n * The losing attempt is NOT cancellable — nothing here can interrupt a bootstrap\n * stuck in a socket connect — so when the bound wins, the lifecycle is poisoned\n * and every later state write from that abandoned attempt is dropped. That\n * dropping happens in `runTestRuntimeStartup`, guarded on `hasExpired()`;\n * without it the still-running attempt would quietly overwrite `poisoned` with\n * `ready` or `idle` and hand the next caller a runtime nobody owns.\n */\nasync function awaitSetupWithinBound(\n  attempt: Promise<void>,\n  bound: SetupBound,\n  registry: TestLifecycleRegistry,\n): Promise<void> {\n  try {\n    await Promise.race([attempt, bound.expiry]);\n  } catch (error) {\n    if (bound.hasExpired()) {\n      registry.state = \"poisoned\";\n      registry.activeSelection = undefined;\n      registry.setupAttempt = undefined;\n    }\n\n    throw error;\n  } finally {\n    bound.settle();\n  }\n}\n\n/**\n * Open a new setup attempt and publish it before it runs.\n */\nfunction startTestRuntime(\n  requested: RequestedTestConnectors,\n  fakes: TestFakesSelection | undefined,\n): Promise<void> {\n  const registry = getTestLifecycleRegistry();\n\n  let publishEffectiveSelection: (selection: TestConnectorsSelection) => void = () => undefined;\n  let failEffectiveSelection: (error: unknown) => void = () => undefined;\n\n  const effectiveSelection = new Promise<TestConnectorsSelection>((resolve, reject) => {\n    publishEffectiveSelection = resolve;\n    failEffectiveSelection = reject;\n  });\n\n  // Only the mixed explicit/config comparison ever awaits this barrier, so its\n  // rejection is usually unobserved — and an unobserved rejection would surface\n  // as an unhandled rejection and fail an unrelated test file.\n  effectiveSelection.catch(() => undefined);\n\n  const bound = armSetupBound(registry);\n\n  const attempt = Promise.resolve().then(() =>\n    runTestRuntimeStartup(\n      requested,\n      publishEffectiveSelection,\n      failEffectiveSelection,\n      bound,\n      fakes,\n    ),\n  );\n\n  // The attempt outlives a bound that beat it, and by then `completion` has\n  // already rejected with the expiry error — so the attempt's own late rejection\n  // has no observer. Same unhandled-rejection hazard as above.\n  attempt.catch(() => undefined);\n\n  // `teardownTest` waits on this same promise, which is how a teardown requested\n  // during setup inherits the bound. There is deliberately no second timer and\n  // no separate teardown deadline.\n  const completion = awaitSetupWithinBound(attempt, bound, registry);\n\n  registry.state = \"starting\";\n  registry.setupAttempt = { requested, effectiveSelection, completion };\n\n  return completion;\n}\n\n/**\n * The startup attempt itself.\n *\n * On failure: best-effort unwind, reset bookkeeping, rethrow the ORIGINAL error\n * unchanged. A cleanup failure is a secondary diagnostic and never replaces the\n * cause the caller needs to read.\n */\nasync function runTestRuntimeStartup(\n  requested: RequestedTestConnectors,\n  publishEffectiveSelection: (selection: TestConnectorsSelection) => void,\n  failEffectiveSelection: (error: unknown) => void,\n  bound: SetupBound,\n  fakes: TestFakesSelection | undefined,\n): Promise<void> {\n  const registry = getTestLifecycleRegistry();\n\n  try {\n    Application.setEnvironment(\"test\");\n\n    await warlockConfigManager.load();\n    await bootstrap();\n\n    await filesOrchestrator.init();\n    await loadConfigFiles(true);\n\n    // The first point at which `tests.setupTimeout` is readable at all. An\n    // invalid value throws from here and takes the normal failure path — falling\n    // back to the default would silently erase what the project configured.\n    const configuredTimeout = readConfiguredSetupTimeout();\n\n    if (configuredTimeout !== undefined) {\n      bound.rearm(configuredTimeout);\n    }\n\n    // Resolved here and not at call time: the config layer is only readable once\n    // the four steps above have run.\n    const effectiveSelection = resolveEffectiveConnectors(requested);\n\n    // Every state write below is conditional on this attempt still being the one\n    // the lifecycle is waiting for. Once the bound has expired the lifecycle is\n    // poisoned and this attempt is abandoned — it may still be running, but it\n    // no longer speaks for the runtime.\n    if (!bound.hasExpired()) {\n      registry.activeSelection = effectiveSelection;\n    }\n\n    publishEffectiveSelection(effectiveSelection);\n\n    await startSelectedConnectors(effectiveSelection);\n\n    // After the connectors, so the cache and storage fakes replace drivers\n    // that are already configured instead of being replaced by them.\n    await installTestFakes(fakes);\n\n    if (!bound.hasExpired()) {\n      registry.state = \"ready\";\n      registry.setupAttempt = undefined;\n    }\n  } catch (error) {\n    failEffectiveSelection(error);\n\n    await unwindPartialStartup();\n\n    if (!bound.hasExpired()) {\n      registry.state = \"idle\";\n      registry.activeSelection = undefined;\n      registry.setupAttempt = undefined;\n    }\n\n    console.error(\"[vitest-setup] Failed to setup test environment:\", error);\n\n    throw error;\n  }\n}\n\n/**\n * `false` means none at all. Everything else starts something: an array starts\n * exactly those, and `true` starts the default set — all but http, which is the\n * global setup's job and shared across every worker.\n */\nasync function startSelectedConnectors(selection: TestConnectorsSelection): Promise<void> {\n  if (selection === false) {\n    return;\n  }\n\n  if (Array.isArray(selection)) {\n    await connectorsManager.start(normalizeConnectorNames(selection));\n\n    return;\n  }\n\n  await connectorsManager.startWithout([\"http\"]);\n}\n\n/**\n * Best-effort teardown of whatever a failed startup managed to start.\n *\n * Runs while an error is already in flight, so no step here may throw and every\n * step is attempted independently.\n */\nasync function unwindPartialStartup(): Promise<void> {\n  // Two steps rather than one: `connectorsManager.shutdown()` runs the\n  // application hooks itself, but it runs them FIRST and does not isolate their\n  // rejection — so a hook that rejects would take the connector teardown down\n  // with it and leave every connector up. Both calls are idempotent, so running\n  // the hooks on their own first costs nothing and means neither failure can\n  // skip the other step.\n  await attemptCleanupStep(\"test fakes\", () => restoreTestFakes());\n  await attemptCleanupStep(\"application shutdown hooks\", () => Application.runShutdownHooks());\n  await attemptCleanupStep(\"connectors shutdown\", () => connectorsManager.shutdown());\n}\n\n/**\n * Run one cleanup step, isolating its failure so the next step still runs.\n */\nasync function attemptCleanupStep(step: string, run: () => Promise<void>): Promise<void> {\n  try {\n    await run();\n  } catch (error) {\n    // Reported, not thrown — it is secondary to the startup error about to be\n    // rethrown, and losing that one to this would be the worse outcome.\n    console.error(`[vitest-setup] Cleanup after a failed setup did not complete (${step}):`, error);\n  }\n}\n\n/**\n * The teardown attempt itself.\n */\nasync function runTestRuntimeShutdown(): Promise<void> {\n  const registry = getTestLifecycleRegistry();\n  let shutdownSucceeded = false;\n\n  try {\n    // Manager-wide, and deliberately called whatever the selection was: with\n    // `connectors: false` nothing was started, but bootstrap still registered\n    // application shutdown hooks, and the manager runs those first (see\n    // `connectors-manager.ts` — `Application.runShutdownHooks()` is its first\n    // line). Skipping the call to \"match\" an empty selection would leak them.\n    //\n    // Fakes go first, while the real drivers they put back are still\n    // connected. A fake that fails to restore is reported, never allowed to\n    // keep the connectors open.\n    try {\n      await restoreTestFakes();\n    } catch (error) {\n      console.error(\"[vitest-setup] Restoring the test fakes did not complete:\", error);\n    }\n\n    await connectorsManager.shutdown();\n\n    shutdownSucceeded = true;\n  } finally {\n    // In a `finally`, not after the `await`: a rejected shutdown must not leave\n    // the lifecycle claiming a runtime it no longer owns. Poisoned rather than\n    // idle, because a cleared flag does not prove that ports, sockets, pools or\n    // timers closed.\n    registry.activeSelection = undefined;\n    registry.setupAttempt = undefined;\n    registry.teardownAttempt = undefined;\n    registry.state = shutdownSucceeded ? \"idle\" : \"poisoned\";\n  }\n}\n\n/**\n * Reject when a ready runtime was set up with a different selection.\n */\nfunction assertReadySelectionMatches(\n  activeSelection: TestConnectorsSelection | undefined,\n  requested: RequestedTestConnectors,\n): void {\n  if (activeSelection === undefined) {\n    return;\n  }\n\n  // Config is loaded by the time anything is ready, so the config-derived layer\n  // is resolvable right here.\n  const requestedSelection = resolveEffectiveConnectors(requested);\n\n  assertSelectionsMatch(activeSelection, requestedSelection);\n}\n\n/**\n * Reject when an in-flight setup attempt is starting a different selection.\n */\nasync function assertPendingSetupMatches(\n  attempt: TestSetupAttempt,\n  requested: RequestedTestConnectors,\n): Promise<void> {\n  const pending = attempt.requested;\n\n  // Two calls that both defer to project config resolve to the same thing by\n  // construction — knowable without waiting for config to load.\n  if (!pending.isExplicit && !requested.isExplicit) {\n    return;\n  }\n\n  if (pending.isExplicit && requested.isExplicit) {\n    assertSelectionsMatch(pending.selection, requested.selection);\n\n    return;\n  }\n\n  // Mixed: one side is config-derived and config is not readable until the\n  // running attempt has loaded it, so wait for that barrier first.\n  const activeSelection = await attempt.effectiveSelection;\n  const requestedSelection = resolveEffectiveConnectors(requested);\n\n  assertSelectionsMatch(activeSelection, requestedSelection);\n}\n\n/**\n * Name both selections: a caller looking at this message has to be able to tell\n * which call to change without reading the framework's source.\n */\nfunction assertSelectionsMatch(\n  activeSelection: TestConnectorsSelection,\n  requestedSelection: TestConnectorsSelection,\n): void {\n  if (isSameConnectorsSelection(activeSelection, requestedSelection)) {\n    return;\n  }\n\n  throw new TestLifecycleError(\n    `setupTest() is already using ${describeConnectorsSelection(activeSelection)}, and this call asked for ${describeConnectorsSelection(requestedSelection)}. One test runtime serves one connector selection — call teardownTest() before setting up a different one.`,\n  );\n}\n\n/**\n * Await an attempt for its state transition only, not its result.\n */\nfunction settled(attempt: Promise<void>): Promise<void> {\n  return attempt.catch(() => undefined);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqFA,MAAM,2BAA2B,OAAO,IAAI,iCAAiC;;;;AAK7E,SAAgB,wBAAwB,cAAmD;CACzF,IAAI,gBAAgB,CAAC,QAAQ,IAAI,QAAQ;CAEzC,MAAM,SAAS;CAEf,IAAI,OAAO,2BAA2B;CAEtC,OAAO,4BAA4B;CAEnC,QAAQ,KACN,qLACF;AACF;;;;;AAMA,IAAa,qBAAb,cAAwC,MAAM;CAC5C,AAAO,YAAY,SAAiB;EAClC,MAAM,OAAO;EAEb,KAAK,OAAO;CACd;AACF;AAEA,MAAM,mBACJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BF,eAAsB,UAAU,SAA2C;CACzE,wBAAwB,SAAS,YAAY;CAE7C,MAAM,WAAW,yBAAyB;CAC1C,MAAM,YAAY,wBAAwB,SAAS,UAAU;CAE7D,IAAI,SAAS,UAAU,YACrB,MAAM,IAAI,mBAAmB,gBAAgB;CAG/C,IAAI,SAAS,UAAU,cAAc,SAAS,iBAAiB;EAC7D,MAAM,QAAQ,SAAS,eAAe;EAEtC,OAAO,UAAU,OAAO;CAC1B;CAEA,IAAI,SAAS,UAAU,SAAS;EAC9B,4BAA4B,SAAS,iBAAiB,SAAS;EAE/D;CACF;CAEA,IAAI,SAAS,UAAU,cAAc,SAAS,cAAc;EAC1D,MAAM,UAAU,SAAS;EAEzB,MAAM,0BAA0B,SAAS,SAAS;EAElD,OAAO,QAAQ;CACjB;CAIA,qBAAqB,SAAS,YAAY;CAE1C,IAAI;EACF,OAAO,MAAM,iBAAiB,WAAW,SAAS,KAAK;CACzD,UAAU;EACR,qBAAqB,MAAS;CAChC;AACF;;;;;;;;;;;;;;;;;;AAmBA,eAAsB,eAA8B;CAClD,MAAM,WAAW,yBAAyB;CAE1C,IAAI,SAAS,UAAU,cAAc,SAAS,iBAC5C,OAAO,SAAS;CAGlB,IAAI,SAAS,UAAU,cAAc,SAAS,cAAc;EAI1D,MAAM,QAAQ,SAAS,aAAa,UAAU;EAE9C,OAAO,aAAa;CACtB;CAEA,IAAI,SAAS,UAAU,QACrB;CAGF,SAAS,QAAQ;CAMjB,MAAM,UAAU,QAAQ,QAAQ,CAAC,CAAC,WAAW,uBAAuB,CAAC;CAErE,SAAS,kBAAkB;CAE3B,OAAO;AACT;;;;;;;;;AAsCA,SAAS,cAAc,UAA6C;CAClE,MAAM,WAAW,SAAS,mBAAmB;CAC7C,MAAM,UAAU,KAAK,IAAI;CAEzB,IAAI;CACJ,IAAI,UAAU;CACd,IAAI,SAAS;CACb,IAAI,eAAyC;CAE7C,MAAM,SAAS,IAAI,SAAgB,UAAU,WAAW;EACtD,SAAS;CACX,CAAC;CAMD,OAAO,YAAY,MAAS;CAE5B,MAAM,aAAa,UAAwB;EACzC,IAAI,QACF;EAGF,SAAS;EACT,UAAU;EAEV,QAAQ,OAAO;EACf,SAAS;EAET,OAAO,IAAI,mBAAmB,qBAAqB,KAAK,CAAC,CAAC;CAC5D;CAEA,MAAM,UAAU,OAAe,UAAwB;EACrD,IAAI,QACF;EAGF,QAAQ,OAAO;EAIf,IAAI,SAAS,GAAG;GACd,UAAU,KAAK;GAEf;EACF;EAEA,SAAS,SAAS,aAAa,UAAU,KAAK,CAAC;CACjD;CAEA,MAAM,eAAe,SAAS;CAE9B,OAAO,cAAc,YAAY;CAEjC,OAAO;EACL;EAKA,QAAQ,SAAS,OAAO,MAAM,QAAQ,KAAK,IAAI,IAAI,QAAQ;EAE3D,cAAc;GACZ,SAAS;GAET,QAAQ,OAAO;GACf,SAAS;EACX;EAEA,kBAAkB;CACpB;AACF;;;;;;;;;;;AAYA,eAAe,sBACb,SACA,OACA,UACe;CACf,IAAI;EACF,MAAM,QAAQ,KAAK,CAAC,SAAS,MAAM,MAAM,CAAC;CAC5C,SAAS,OAAO;EACd,IAAI,MAAM,WAAW,GAAG;GACtB,SAAS,QAAQ;GACjB,SAAS,kBAAkB;GAC3B,SAAS,eAAe;EAC1B;EAEA,MAAM;CACR,UAAU;EACR,MAAM,OAAO;CACf;AACF;;;;AAKA,SAAS,iBACP,WACA,OACe;CACf,MAAM,WAAW,yBAAyB;CAE1C,IAAI,kCAAgF;CACpF,IAAI,+BAAyD;CAE7D,MAAM,qBAAqB,IAAI,SAAkC,SAAS,WAAW;EACnF,4BAA4B;EAC5B,yBAAyB;CAC3B,CAAC;CAKD,mBAAmB,YAAY,MAAS;CAExC,MAAM,QAAQ,cAAc,QAAQ;CAEpC,MAAM,UAAU,QAAQ,QAAQ,CAAC,CAAC,WAChC,sBACE,WACA,2BACA,wBACA,OACA,KACF,CACF;CAKA,QAAQ,YAAY,MAAS;CAK7B,MAAM,aAAa,sBAAsB,SAAS,OAAO,QAAQ;CAEjE,SAAS,QAAQ;CACjB,SAAS,eAAe;EAAE;EAAW;EAAoB;CAAW;CAEpE,OAAO;AACT;;;;;;;;AASA,eAAe,sBACb,WACA,2BACA,wBACA,OACA,OACe;CACf,MAAM,WAAW,yBAAyB;CAE1C,IAAI;EACF,YAAY,eAAe,MAAM;EAEjC,MAAM,qBAAqB,KAAK;EAChC,MAAM,UAAU;EAEhB,MAAM,kBAAkB,KAAK;EAC7B,MAAM,gBAAgB,IAAI;EAK1B,MAAM,oBAAoB,2BAA2B;EAErD,IAAI,sBAAsB,QACxB,MAAM,MAAM,iBAAiB;EAK/B,MAAM,qBAAqB,2BAA2B,SAAS;EAM/D,IAAI,CAAC,MAAM,WAAW,GACpB,SAAS,kBAAkB;EAG7B,0BAA0B,kBAAkB;EAE5C,MAAM,wBAAwB,kBAAkB;EAIhD,MAAM,iBAAiB,KAAK;EAE5B,IAAI,CAAC,MAAM,WAAW,GAAG;GACvB,SAAS,QAAQ;GACjB,SAAS,eAAe;EAC1B;CACF,SAAS,OAAO;EACd,uBAAuB,KAAK;EAE5B,MAAM,qBAAqB;EAE3B,IAAI,CAAC,MAAM,WAAW,GAAG;GACvB,SAAS,QAAQ;GACjB,SAAS,kBAAkB;GAC3B,SAAS,eAAe;EAC1B;EAEA,QAAQ,MAAM,oDAAoD,KAAK;EAEvE,MAAM;CACR;AACF;;;;;;AAOA,eAAe,wBAAwB,WAAmD;CACxF,IAAI,cAAc,OAChB;CAGF,IAAI,MAAM,QAAQ,SAAS,GAAG;EAC5B,MAAM,kBAAkB,MAAM,wBAAwB,SAAS,CAAC;EAEhE;CACF;CAEA,MAAM,kBAAkB,aAAa,CAAC,MAAM,CAAC;AAC/C;;;;;;;AAQA,eAAe,uBAAsC;CAOnD,MAAM,mBAAmB,oBAAoB,iBAAiB,CAAC;CAC/D,MAAM,mBAAmB,oCAAoC,YAAY,iBAAiB,CAAC;CAC3F,MAAM,mBAAmB,6BAA6B,kBAAkB,SAAS,CAAC;AACpF;;;;AAKA,eAAe,mBAAmB,MAAc,KAAyC;CACvF,IAAI;EACF,MAAM,IAAI;CACZ,SAAS,OAAO;EAGd,QAAQ,MAAM,iEAAiE,KAAK,KAAK,KAAK;CAChG;AACF;;;;AAKA,eAAe,yBAAwC;CACrD,MAAM,WAAW,yBAAyB;CAC1C,IAAI,oBAAoB;CAExB,IAAI;EAUF,IAAI;GACF,MAAM,iBAAiB;EACzB,SAAS,OAAO;GACd,QAAQ,MAAM,6DAA6D,KAAK;EAClF;EAEA,MAAM,kBAAkB,SAAS;EAEjC,oBAAoB;CACtB,UAAU;EAKR,SAAS,kBAAkB;EAC3B,SAAS,eAAe;EACxB,SAAS,kBAAkB;EAC3B,SAAS,QAAQ,oBAAoB,SAAS;CAChD;AACF;;;;AAKA,SAAS,4BACP,iBACA,WACM;CACN,IAAI,oBAAoB,QACtB;CAOF,sBAAsB,iBAFK,2BAA2B,SAEE,CAAC;AAC3D;;;;AAKA,eAAe,0BACb,SACA,WACe;CACf,MAAM,UAAU,QAAQ;CAIxB,IAAI,CAAC,QAAQ,cAAc,CAAC,UAAU,YACpC;CAGF,IAAI,QAAQ,cAAc,UAAU,YAAY;EAC9C,sBAAsB,QAAQ,WAAW,UAAU,SAAS;EAE5D;CACF;CAOA,sBAAsB,MAHQ,QAAQ,oBACX,2BAA2B,SAEE,CAAC;AAC3D;;;;;AAMA,SAAS,sBACP,iBACA,oBACM;CACN,IAAI,0BAA0B,iBAAiB,kBAAkB,GAC/D;CAGF,MAAM,IAAI,mBACR,gCAAgC,4BAA4B,eAAe,EAAE,4BAA4B,4BAA4B,kBAAkB,EAAE,2GAC3J;AACF;;;;AAKA,SAAS,QAAQ,SAAuC;CACtD,OAAO,QAAQ,YAAY,MAAS;AACtC"}
+{"version":3,"file":"vitest-setup.mjs","names":[],"sources":["../../../../../../../../packages/core/src/tests/vitest-setup.ts"],"sourcesContent":["/**\n * Worker test lifecycle — `setupTest` / `teardownTest`.\n *\n * Implements `contracts/2026-08-12-test-worker-lifecycle.md`. The pair is\n * context-scoped, not \"once per worker\": Vitest runs `setupFiles` before EVERY\n * test file and rebuilds the module registry each time, so the harness that\n * calls `setupTest` owns pairing it with `teardownTest` in the same runtime\n * context.\n *\n * Ownership, stated once because teardown is wider than it looks:\n *\n * - the runtime assumes exclusive ownership of the process-local\n *   `connectorsManager` for its lifetime;\n * - it owns the framework bootstrap, the application shutdown hooks, and the\n *   connectors it starts — including the `connectors: false` case, where\n *   bootstrap still registers hooks;\n * - teardown is MANAGER-WIDE. `connectorsManager.shutdown()` has no selective\n *   ownership handle, so a lifecycle that started two connectors still closes\n *   every connector the manager holds. Mixing `setupTest` with manual connector\n *   startup in the same process is unsupported for exactly that reason.\n * - HTTP global setup stays separately owned by `startHttpTestServer` /\n *   `stopHttpTestServer`.\n */\nimport { Application } from \"../application/application\";\nimport { bootstrap } from \"../bootstrap\";\nimport { setAppModuleImporter } from \"../loader/app-module-importer\";\nimport type { AppModuleImporter } from \"../loader/app-module-importer\";\nimport { loadConfigFiles } from \"../config/load-config-files\";\nimport { connectorsManager } from \"../connectors\";\nimport { filesOrchestrator } from \"../dev-server/files-orchestrator\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\nimport { installTestFakes, restoreTestFakes } from \"./fakes/test-fakes\";\nimport type { TestFakesSelection } from \"./fakes/test-fakes\";\nimport {\n  describeConnectorsSelection,\n  isSameConnectorsSelection,\n  normalizeConnectorNames,\n  readRequestedConnectors,\n  resolveEffectiveConnectors,\n} from \"./test-connectors-selection\";\nimport type { RequestedTestConnectors, TestConnectorsSelection } from \"./test-connectors-selection\";\nimport { getTestLifecycleRegistry } from \"./test-lifecycle-state\";\nimport type { TestLifecycleRegistry, TestSetupAttempt } from \"./test-lifecycle-state\";\nimport {\n  DEFAULT_TEST_SETUP_TIMEOUT,\n  describeExpiredSetup,\n  readConfiguredSetupTimeout,\n  scheduleRealTimeout,\n} from \"./test-setup-timeout\";\nimport type { TestTimeoutHandle } from \"./test-setup-timeout\";\n\nexport type { TestConnectorsSelection } from \"./test-connectors-selection\";\n\nexport type TestSetupOptions = {\n  /**\n   * Which connectors to start.\n   *\n   * Precedence is `explicit non-undefined option > tests.connectors config >\n   * true`. Omitting the property, or passing `undefined`, lets project config\n   * apply — so an optional variable that happens to be `undefined` cannot erase\n   * it.\n   */\n  connectors?: TestConnectorsSelection;\n  /**\n   * Import hook for APPLICATION modules (config, routes, events, ...).\n   *\n   * Pass `(file) => import(file)` from your `src/test-setup.ts`: that file is\n   * app code, so Vitest handles the `import()` and app modules land in the same\n   * module graph as your test files. Without it Warlock imports them natively,\n   * one worker holds two copies of every class (`User`, ...), and `instanceof`\n   * fails. Defaults to native import.\n   */\n  importModule?: AppModuleImporter;\n  /**\n   * Which test fakes to install once the connectors are up: mail, queue,\n   * cache, storage, clock, ids and secrets (see `installTestFakes`).\n   *\n   * Precedence is `explicit option > tests.fakes config > true`, so every fake\n   * is on unless the project or this call opts out. `false` keeps the real\n   * drivers; `{ cache: false }` keeps only the real cache. Teardown restores\n   * them.\n   */\n  fakes?: TestFakesSelection;\n};\n\nconst IMPORT_MODULE_WARNED_KEY = Symbol.for(\"warlock.core.importModuleWarned\");\n\n/**\n * Warn — once per process — that app modules are loaded outside Vitest's graph.\n */\nexport function warnMissingImportModule(importModule: AppModuleImporter | undefined): void {\n  if (importModule || !process.env.VITEST) return;\n\n  const holder = globalThis as Record<symbol, unknown>;\n\n  if (holder[IMPORT_MODULE_WARNED_KEY]) return;\n\n  holder[IMPORT_MODULE_WARNED_KEY] = true;\n\n  console.warn(\n    \"[warlock] Warlock loads app modules outside Vitest's module graph, so classes like User exist twice and instanceof fails. Pass importModule: (file) => import(file) to setupTest().\",\n  );\n}\n\n/**\n * Raised by the lifecycle itself, never by the runtime it manages — a conflict\n * between two calls, or a refusal to reuse a runtime that did not close.\n */\nexport class TestLifecycleError extends Error {\n  public constructor(message: string) {\n    super(message);\n\n    this.name = \"TestLifecycleError\";\n  }\n}\n\nconst POISONED_MESSAGE =\n  \"setupTest() refuses to start a test runtime: an earlier teardownTest() reported a shutdown failure, so the connectors, ports and pools it owned are not known to be closed. Restart the Vitest worker before setting up again, or call teardownTest() to retry the shutdown — the lifecycle only returns to idle on a fully successful retry.\";\n\n/**\n * Bootstrap the test runtime and start the selected connectors.\n *\n * ⚠ Runs once per TEST FILE, not once per worker: `setupFiles` is executed for\n * every file and its module registry is rebuilt with it, measured across both\n * pools with isolation on and off. The lifecycle state lives on the runtime\n * context rather than in this module precisely so that a rebuild cannot hide a\n * runtime that is still up.\n *\n * Repeated calls:\n *\n * - concurrent calls with the same effective selection share one startup;\n * - while ready, the same effective selection is a no-op;\n * - while starting or ready, a DIFFERENT effective selection rejects and leaves\n *   the live runtime untouched;\n * - a failed setup unwinds and returns to idle, so a clean retry is allowed;\n * - after a successful `teardownTest`, a later setup may use a different\n *   selection.\n *\n * @example\n * // let project config decide, falling back to the default set\n * await setupTest();\n *\n * @example\n * // bootstrap only — no connectors, whatever config says\n * await setupTest({ connectors: false });\n */\nexport async function setupTest(options?: TestSetupOptions): Promise<void> {\n  warnMissingImportModule(options?.importModule);\n\n  const registry = getTestLifecycleRegistry();\n  const requested = readRequestedConnectors(options?.connectors);\n\n  if (registry.state === \"poisoned\") {\n    throw new TestLifecycleError(POISONED_MESSAGE);\n  }\n\n  if (registry.state === \"stopping\" && registry.teardownAttempt) {\n    await settled(registry.teardownAttempt);\n\n    return setupTest(options);\n  }\n\n  if (registry.state === \"ready\") {\n    assertReadySelectionMatches(registry.activeSelection, requested);\n\n    return;\n  }\n\n  if (registry.state === \"starting\" && registry.setupAttempt) {\n    const attempt = registry.setupAttempt;\n\n    await assertPendingSetupMatches(attempt, requested);\n\n    return attempt.completion;\n  }\n\n  // Scoped to this startup: the loaders read it while app modules import, and\n  // it is cleared whatever the outcome so it never leaks past setup.\n  setAppModuleImporter(options?.importModule);\n\n  try {\n    return await startTestRuntime(requested, options?.fakes);\n  } finally {\n    setAppModuleImporter(undefined);\n  }\n}\n\n/**\n * Shut the test runtime down and release the lifecycle.\n *\n * - idle is a no-op;\n * - concurrent calls share one attempt;\n * - a call made while setup is still running waits for that attempt to settle,\n *   then closes the runtime if it succeeded;\n * - the local \"ready\" state is always cleared, including when shutdown rejects;\n * - a shutdown rejection is surfaced, never swallowed, and poisons the\n *   lifecycle — a reported close failure is not proof that anything closed, so\n *   later `setupTest` calls refuse until the worker is restarted or a retry\n *   fully succeeds.\n *\n * ⚠ Individual connector shutdown failures are caught and logged inside\n * `connectorsManager.shutdown()`, so they never reach this function and never\n * poison anything. This lifecycle can only surface what that layer reports.\n */\nexport async function teardownTest(): Promise<void> {\n  const registry = getTestLifecycleRegistry();\n\n  if (registry.state === \"stopping\" && registry.teardownAttempt) {\n    return registry.teardownAttempt;\n  }\n\n  if (registry.state === \"starting\" && registry.setupAttempt) {\n    // A runtime that is still opening cannot be closed halfway. Wait for the\n    // attempt to settle: a failed one has already unwound itself and left the\n    // lifecycle idle, which the re-entry below then reads as \"nothing to do\".\n    await settled(registry.setupAttempt.completion);\n\n    return teardownTest();\n  }\n\n  if (registry.state === \"idle\") {\n    return;\n  }\n\n  registry.state = \"stopping\";\n\n  // Deferred by a microtask so the registry is fully published before the\n  // attempt's first line runs — a synchronous throw would otherwise reach the\n  // `finally` below, and reset the state, before this function had recorded\n  // that a teardown was in flight at all.\n  const attempt = Promise.resolve().then(() => runTestRuntimeShutdown());\n\n  registry.teardownAttempt = attempt;\n\n  return attempt;\n}\n\n/**\n * The setup attempt's hang guard, as the lifecycle consumes it.\n *\n * The bound's POLICY — the default, the config key, the message — lives in\n * `test-setup-timeout.ts`. What expiry MEANS lives here.\n *\n * @internal\n */\ntype SetupBound = {\n  /**\n   * Rejects with the expiry error. Never resolves: the attempt is the only side\n   * of the race that can succeed.\n   */\n  readonly expiry: Promise<never>;\n\n  /**\n   * Re-aim the bound at `next` ms measured from when the ATTEMPT STARTED, once\n   * config has made `tests.setupTimeout` readable.\n   */\n  rearm(next: number): void;\n\n  /** The race is over — cancel whatever timer is still pending. */\n  settle(): void;\n\n  /** Whether the bound, rather than the attempt, won the race. */\n  hasExpired(): boolean;\n};\n\n/**\n * Arm the hang guard for one setup attempt.\n *\n * Armed at the default BEFORE the attempt runs, because `tests.setupTimeout` is\n * not readable until the attempt has loaded config — and loading config is\n * itself one of the steps that can hang. `rearm` then narrows or widens it the\n * moment config arrives.\n */\nfunction armSetupBound(registry: TestLifecycleRegistry): SetupBound {\n  const schedule = registry.scheduleTimeout ?? scheduleRealTimeout;\n  const armedAt = Date.now();\n\n  let handle: TestTimeoutHandle | undefined;\n  let expired = false;\n  let closed = false;\n  let expire: (error: unknown) => void = () => undefined;\n\n  const expiry = new Promise<never>((_resolve, reject) => {\n    expire = reject;\n  });\n\n  // Only `awaitSetupWithinBound` observes this, and only until the attempt wins\n  // — after that nobody is listening, and an unobserved rejection surfaces as an\n  // unhandled rejection that fails an unrelated test file. Same reason as the\n  // `effectiveSelection` barrier below.\n  expiry.catch(() => undefined);\n\n  const expireNow = (bound: number): void => {\n    if (closed) {\n      return;\n    }\n\n    closed = true;\n    expired = true;\n\n    handle?.cancel();\n    handle = undefined;\n\n    expire(new TestLifecycleError(describeExpiredSetup(bound)));\n  };\n\n  const armFor = (bound: number, delay: number): void => {\n    if (closed) {\n      return;\n    }\n\n    handle?.cancel();\n\n    // Already overdue. A bound the attempt has ALREADY exceeded must fire now,\n    // not be rescheduled for time that was spent before it was known.\n    if (delay <= 0) {\n      expireNow(bound);\n\n      return;\n    }\n\n    handle = schedule(delay, () => expireNow(bound));\n  };\n\n  const initialBound = registry.setupTimeoutOverride ?? DEFAULT_TEST_SETUP_TIMEOUT;\n\n  armFor(initialBound, initialBound);\n\n  return {\n    expiry,\n\n    // Measured from `armedAt`, never from now: adding a configured bound to the\n    // time already spent would make the real bound default-plus-configured, and\n    // a project that lowered the key would get a LONGER guard than the default.\n    rearm: (next) => armFor(next, next - (Date.now() - armedAt)),\n\n    settle: () => {\n      closed = true;\n\n      handle?.cancel();\n      handle = undefined;\n    },\n\n    hasExpired: () => expired,\n  };\n}\n\n/**\n * Race one setup attempt against its bound.\n *\n * The losing attempt is NOT cancellable — nothing here can interrupt a bootstrap\n * stuck in a socket connect — so when the bound wins, the lifecycle is poisoned\n * and every later state write from that abandoned attempt is dropped. That\n * dropping happens in `runTestRuntimeStartup`, guarded on `hasExpired()`;\n * without it the still-running attempt would quietly overwrite `poisoned` with\n * `ready` or `idle` and hand the next caller a runtime nobody owns.\n */\nasync function awaitSetupWithinBound(\n  attempt: Promise<void>,\n  bound: SetupBound,\n  registry: TestLifecycleRegistry,\n): Promise<void> {\n  try {\n    await Promise.race([attempt, bound.expiry]);\n  } catch (error) {\n    if (bound.hasExpired()) {\n      registry.state = \"poisoned\";\n      registry.activeSelection = undefined;\n      registry.setupAttempt = undefined;\n    }\n\n    throw error;\n  } finally {\n    bound.settle();\n  }\n}\n\n/**\n * Open a new setup attempt and publish it before it runs.\n */\nfunction startTestRuntime(\n  requested: RequestedTestConnectors,\n  fakes: TestFakesSelection | undefined,\n): Promise<void> {\n  const registry = getTestLifecycleRegistry();\n\n  let publishEffectiveSelection: (selection: TestConnectorsSelection) => void = () => undefined;\n  let failEffectiveSelection: (error: unknown) => void = () => undefined;\n\n  const effectiveSelection = new Promise<TestConnectorsSelection>((resolve, reject) => {\n    publishEffectiveSelection = resolve;\n    failEffectiveSelection = reject;\n  });\n\n  // Only the mixed explicit/config comparison ever awaits this barrier, so its\n  // rejection is usually unobserved — and an unobserved rejection would surface\n  // as an unhandled rejection and fail an unrelated test file.\n  effectiveSelection.catch(() => undefined);\n\n  const bound = armSetupBound(registry);\n\n  const attempt = Promise.resolve().then(() =>\n    runTestRuntimeStartup(\n      requested,\n      publishEffectiveSelection,\n      failEffectiveSelection,\n      bound,\n      fakes,\n    ),\n  );\n\n  // The attempt outlives a bound that beat it, and by then `completion` has\n  // already rejected with the expiry error — so the attempt's own late rejection\n  // has no observer. Same unhandled-rejection hazard as above.\n  attempt.catch(() => undefined);\n\n  // `teardownTest` waits on this same promise, which is how a teardown requested\n  // during setup inherits the bound. There is deliberately no second timer and\n  // no separate teardown deadline.\n  const completion = awaitSetupWithinBound(attempt, bound, registry);\n\n  registry.state = \"starting\";\n  registry.setupAttempt = { requested, effectiveSelection, completion };\n\n  return completion;\n}\n\n/**\n * The startup attempt itself.\n *\n * On failure: best-effort unwind, reset bookkeeping, rethrow the ORIGINAL error\n * unchanged. A cleanup failure is a secondary diagnostic and never replaces the\n * cause the caller needs to read.\n */\nasync function runTestRuntimeStartup(\n  requested: RequestedTestConnectors,\n  publishEffectiveSelection: (selection: TestConnectorsSelection) => void,\n  failEffectiveSelection: (error: unknown) => void,\n  bound: SetupBound,\n  fakes: TestFakesSelection | undefined,\n): Promise<void> {\n  const registry = getTestLifecycleRegistry();\n\n  try {\n    Application.setEnvironment(\"test\");\n\n    await warlockConfigManager.load();\n    await bootstrap();\n\n    await filesOrchestrator.init();\n    await loadConfigFiles(true);\n\n    // The first point at which `tests.setupTimeout` is readable at all. An\n    // invalid value throws from here and takes the normal failure path — falling\n    // back to the default would silently erase what the project configured.\n    const configuredTimeout = readConfiguredSetupTimeout();\n\n    if (configuredTimeout !== undefined) {\n      bound.rearm(configuredTimeout);\n    }\n\n    // Resolved here and not at call time: the config layer is only readable once\n    // the four steps above have run.\n    const effectiveSelection = resolveEffectiveConnectors(requested);\n\n    // Every state write below is conditional on this attempt still being the one\n    // the lifecycle is waiting for. Once the bound has expired the lifecycle is\n    // poisoned and this attempt is abandoned — it may still be running, but it\n    // no longer speaks for the runtime.\n    if (!bound.hasExpired()) {\n      registry.activeSelection = effectiveSelection;\n    }\n\n    publishEffectiveSelection(effectiveSelection);\n\n    await startSelectedConnectors(effectiveSelection);\n\n    // After the connectors, so the cache and storage fakes replace drivers\n    // that are already configured instead of being replaced by them.\n    await installTestFakes(fakes);\n\n    if (!bound.hasExpired()) {\n      registry.state = \"ready\";\n      registry.setupAttempt = undefined;\n    }\n  } catch (error) {\n    failEffectiveSelection(error);\n\n    await unwindPartialStartup();\n\n    if (!bound.hasExpired()) {\n      registry.state = \"idle\";\n      registry.activeSelection = undefined;\n      registry.setupAttempt = undefined;\n    }\n\n    console.error(\"[vitest-setup] Failed to setup test environment:\", error);\n\n    throw error;\n  }\n}\n\n/**\n * `false` means none at all. Everything else starts something: an array starts\n * exactly those, and `true` starts the default set — all but http, which is the\n * global setup's job and shared across every worker.\n */\nasync function startSelectedConnectors(selection: TestConnectorsSelection): Promise<void> {\n  if (selection === false) {\n    return;\n  }\n\n  if (Array.isArray(selection)) {\n    await connectorsManager.start(normalizeConnectorNames(selection));\n\n    return;\n  }\n\n  await connectorsManager.startWithout([\"http\"]);\n}\n\n/**\n * Best-effort teardown of whatever a failed startup managed to start.\n *\n * Runs while an error is already in flight, so no step here may throw and every\n * step is attempted independently.\n */\nasync function unwindPartialStartup(): Promise<void> {\n  // Two steps rather than one: `connectorsManager.shutdown()` runs the\n  // application hooks itself, but it runs them FIRST and does not isolate their\n  // rejection — so a hook that rejects would take the connector teardown down\n  // with it and leave every connector up. Both calls are idempotent, so running\n  // the hooks on their own first costs nothing and means neither failure can\n  // skip the other step.\n  await attemptCleanupStep(\"test fakes\", () => restoreTestFakes());\n  await attemptCleanupStep(\"application shutdown hooks\", () => Application.runShutdownHooks());\n  await attemptCleanupStep(\"connectors shutdown\", () => connectorsManager.shutdown());\n}\n\n/**\n * Run one cleanup step, isolating its failure so the next step still runs.\n */\nasync function attemptCleanupStep(step: string, run: () => Promise<void>): Promise<void> {\n  try {\n    await run();\n  } catch (error) {\n    // Reported, not thrown — it is secondary to the startup error about to be\n    // rethrown, and losing that one to this would be the worse outcome.\n    console.error(`[vitest-setup] Cleanup after a failed setup did not complete (${step}):`, error);\n  }\n}\n\n/**\n * The teardown attempt itself.\n */\nasync function runTestRuntimeShutdown(): Promise<void> {\n  const registry = getTestLifecycleRegistry();\n  let shutdownSucceeded = false;\n\n  try {\n    // Manager-wide, and deliberately called whatever the selection was: with\n    // `connectors: false` nothing was started, but bootstrap still registered\n    // application shutdown hooks, and the manager runs those first (see\n    // `connectors-manager.ts` — `Application.runShutdownHooks()` is its first\n    // line). Skipping the call to \"match\" an empty selection would leak them.\n    //\n    // Fakes go first, while the real drivers they put back are still\n    // connected. A fake that fails to restore is reported, never allowed to\n    // keep the connectors open.\n    try {\n      await restoreTestFakes();\n    } catch (error) {\n      console.error(\"[vitest-setup] Restoring the test fakes did not complete:\", error);\n    }\n\n    await connectorsManager.shutdown();\n\n    shutdownSucceeded = true;\n  } finally {\n    // In a `finally`, not after the `await`: a rejected shutdown must not leave\n    // the lifecycle claiming a runtime it no longer owns. Poisoned rather than\n    // idle, because a cleared flag does not prove that ports, sockets, pools or\n    // timers closed.\n    registry.activeSelection = undefined;\n    registry.setupAttempt = undefined;\n    registry.teardownAttempt = undefined;\n    registry.state = shutdownSucceeded ? \"idle\" : \"poisoned\";\n  }\n}\n\n/**\n * Reject when a ready runtime was set up with a different selection.\n */\nfunction assertReadySelectionMatches(\n  activeSelection: TestConnectorsSelection | undefined,\n  requested: RequestedTestConnectors,\n): void {\n  if (activeSelection === undefined) {\n    return;\n  }\n\n  // Config is loaded by the time anything is ready, so the config-derived layer\n  // is resolvable right here.\n  const requestedSelection = resolveEffectiveConnectors(requested);\n\n  assertSelectionsMatch(activeSelection, requestedSelection);\n}\n\n/**\n * Reject when an in-flight setup attempt is starting a different selection.\n */\nasync function assertPendingSetupMatches(\n  attempt: TestSetupAttempt,\n  requested: RequestedTestConnectors,\n): Promise<void> {\n  const pending = attempt.requested;\n\n  // Two calls that both defer to project config resolve to the same thing by\n  // construction — knowable without waiting for config to load.\n  if (!pending.isExplicit && !requested.isExplicit) {\n    return;\n  }\n\n  if (pending.isExplicit && requested.isExplicit) {\n    assertSelectionsMatch(pending.selection, requested.selection);\n\n    return;\n  }\n\n  // Mixed: one side is config-derived and config is not readable until the\n  // running attempt has loaded it, so wait for that barrier first.\n  const activeSelection = await attempt.effectiveSelection;\n  const requestedSelection = resolveEffectiveConnectors(requested);\n\n  assertSelectionsMatch(activeSelection, requestedSelection);\n}\n\n/**\n * Name both selections: a caller looking at this message has to be able to tell\n * which call to change without reading the framework's source.\n */\nfunction assertSelectionsMatch(\n  activeSelection: TestConnectorsSelection,\n  requestedSelection: TestConnectorsSelection,\n): void {\n  if (isSameConnectorsSelection(activeSelection, requestedSelection)) {\n    return;\n  }\n\n  throw new TestLifecycleError(\n    `setupTest() is already using ${describeConnectorsSelection(activeSelection)}, and this call asked for ${describeConnectorsSelection(requestedSelection)}. One test runtime serves one connector selection — call teardownTest() before setting up a different one.`,\n  );\n}\n\n/**\n * Await an attempt for its state transition only, not its result.\n */\nfunction settled(attempt: Promise<void>): Promise<void> {\n  return attempt.catch(() => undefined);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqFA,MAAM,2BAA2B,OAAO,IAAI,iCAAiC;;;;AAK7E,SAAgB,wBAAwB,cAAmD;CACzF,IAAI,gBAAgB,CAAC,QAAQ,IAAI,QAAQ;CAEzC,MAAM,SAAS;CAEf,IAAI,OAAO,2BAA2B;CAEtC,OAAO,4BAA4B;CAEnC,QAAQ,KACN,qLACF;AACF;;;;;AAMA,IAAa,qBAAb,cAAwC,MAAM;CAC5C,AAAO,YAAY,SAAiB;EAClC,MAAM,OAAO;EAEb,KAAK,OAAO;CACd;AACF;AAEA,MAAM,mBACJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BF,eAAsB,UAAU,SAA2C;CACzE,wBAAwB,SAAS,YAAY;CAE7C,MAAM,WAAW,yBAAyB;CAC1C,MAAM,YAAY,wBAAwB,SAAS,UAAU;CAE7D,IAAI,SAAS,UAAU,YACrB,MAAM,IAAI,mBAAmB,gBAAgB;CAG/C,IAAI,SAAS,UAAU,cAAc,SAAS,iBAAiB;EAC7D,MAAM,QAAQ,SAAS,eAAe;EAEtC,OAAO,UAAU,OAAO;CAC1B;CAEA,IAAI,SAAS,UAAU,SAAS;EAC9B,4BAA4B,SAAS,iBAAiB,SAAS;EAE/D;CACF;CAEA,IAAI,SAAS,UAAU,cAAc,SAAS,cAAc;EAC1D,MAAM,UAAU,SAAS;EAEzB,MAAM,0BAA0B,SAAS,SAAS;EAElD,OAAO,QAAQ;CACjB;CAIA,qBAAqB,SAAS,YAAY;CAE1C,IAAI;EACF,OAAO,MAAM,iBAAiB,WAAW,SAAS,KAAK;CACzD,UAAU;EACR,qBAAqB,MAAS;CAChC;AACF;;;;;;;;;;;;;;;;;;AAmBA,eAAsB,eAA8B;CAClD,MAAM,WAAW,yBAAyB;CAE1C,IAAI,SAAS,UAAU,cAAc,SAAS,iBAC5C,OAAO,SAAS;CAGlB,IAAI,SAAS,UAAU,cAAc,SAAS,cAAc;EAI1D,MAAM,QAAQ,SAAS,aAAa,UAAU;EAE9C,OAAO,aAAa;CACtB;CAEA,IAAI,SAAS,UAAU,QACrB;CAGF,SAAS,QAAQ;CAMjB,MAAM,UAAU,QAAQ,QAAQ,CAAC,CAAC,WAAW,uBAAuB,CAAC;CAErE,SAAS,kBAAkB;CAE3B,OAAO;AACT;;;;;;;;;AAsCA,SAAS,cAAc,UAA6C;CAClE,MAAM,WAAW,SAAS,mBAAmB;CAC7C,MAAM,UAAU,KAAK,IAAI;CAEzB,IAAI;CACJ,IAAI,UAAU;CACd,IAAI,SAAS;CACb,IAAI,eAAyC;CAE7C,MAAM,SAAS,IAAI,SAAgB,UAAU,WAAW;EACtD,SAAS;CACX,CAAC;CAMD,OAAO,YAAY,MAAS;CAE5B,MAAM,aAAa,UAAwB;EACzC,IAAI,QACF;EAGF,SAAS;EACT,UAAU;EAEV,QAAQ,OAAO;EACf,SAAS;EAET,OAAO,IAAI,mBAAmB,qBAAqB,KAAK,CAAC,CAAC;CAC5D;CAEA,MAAM,UAAU,OAAe,UAAwB;EACrD,IAAI,QACF;EAGF,QAAQ,OAAO;EAIf,IAAI,SAAS,GAAG;GACd,UAAU,KAAK;GAEf;EACF;EAEA,SAAS,SAAS,aAAa,UAAU,KAAK,CAAC;CACjD;CAEA,MAAM,eAAe,SAAS;CAE9B,OAAO,cAAc,YAAY;CAEjC,OAAO;EACL;EAKA,QAAQ,SAAS,OAAO,MAAM,QAAQ,KAAK,IAAI,IAAI,QAAQ;EAE3D,cAAc;GACZ,SAAS;GAET,QAAQ,OAAO;GACf,SAAS;EACX;EAEA,kBAAkB;CACpB;AACF;;;;;;;;;;;AAYA,eAAe,sBACb,SACA,OACA,UACe;CACf,IAAI;EACF,MAAM,QAAQ,KAAK,CAAC,SAAS,MAAM,MAAM,CAAC;CAC5C,SAAS,OAAO;EACd,IAAI,MAAM,WAAW,GAAG;GACtB,SAAS,QAAQ;GACjB,SAAS,kBAAkB;GAC3B,SAAS,eAAe;EAC1B;EAEA,MAAM;CACR,UAAU;EACR,MAAM,OAAO;CACf;AACF;;;;AAKA,SAAS,iBACP,WACA,OACe;CACf,MAAM,WAAW,yBAAyB;CAE1C,IAAI,kCAAgF;CACpF,IAAI,+BAAyD;CAE7D,MAAM,qBAAqB,IAAI,SAAkC,SAAS,WAAW;EACnF,4BAA4B;EAC5B,yBAAyB;CAC3B,CAAC;CAKD,mBAAmB,YAAY,MAAS;CAExC,MAAM,QAAQ,cAAc,QAAQ;CAEpC,MAAM,UAAU,QAAQ,QAAQ,CAAC,CAAC,WAChC,sBACE,WACA,2BACA,wBACA,OACA,KACF,CACF;CAKA,QAAQ,YAAY,MAAS;CAK7B,MAAM,aAAa,sBAAsB,SAAS,OAAO,QAAQ;CAEjE,SAAS,QAAQ;CACjB,SAAS,eAAe;EAAE;EAAW;EAAoB;CAAW;CAEpE,OAAO;AACT;;;;;;;;AASA,eAAe,sBACb,WACA,2BACA,wBACA,OACA,OACe;CACf,MAAM,WAAW,yBAAyB;CAE1C,IAAI;EACF,YAAY,eAAe,MAAM;EAEjC,MAAM,qBAAqB,KAAK;EAChC,MAAM,UAAU;EAEhB,MAAM,kBAAkB,KAAK;EAC7B,MAAM,gBAAgB,IAAI;EAK1B,MAAM,oBAAoB,2BAA2B;EAErD,IAAI,sBAAsB,QACxB,MAAM,MAAM,iBAAiB;EAK/B,MAAM,qBAAqB,2BAA2B,SAAS;EAM/D,IAAI,CAAC,MAAM,WAAW,GACpB,SAAS,kBAAkB;EAG7B,0BAA0B,kBAAkB;EAE5C,MAAM,wBAAwB,kBAAkB;EAIhD,MAAM,iBAAiB,KAAK;EAE5B,IAAI,CAAC,MAAM,WAAW,GAAG;GACvB,SAAS,QAAQ;GACjB,SAAS,eAAe;EAC1B;CACF,SAAS,OAAO;EACd,uBAAuB,KAAK;EAE5B,MAAM,qBAAqB;EAE3B,IAAI,CAAC,MAAM,WAAW,GAAG;GACvB,SAAS,QAAQ;GACjB,SAAS,kBAAkB;GAC3B,SAAS,eAAe;EAC1B;EAEA,QAAQ,MAAM,oDAAoD,KAAK;EAEvE,MAAM;CACR;AACF;;;;;;AAOA,eAAe,wBAAwB,WAAmD;CACxF,IAAI,cAAc,OAChB;CAGF,IAAI,MAAM,QAAQ,SAAS,GAAG;EAC5B,MAAM,kBAAkB,MAAM,wBAAwB,SAAS,CAAC;EAEhE;CACF;CAEA,MAAM,kBAAkB,aAAa,CAAC,MAAM,CAAC;AAC/C;;;;;;;AAQA,eAAe,uBAAsC;CAOnD,MAAM,mBAAmB,oBAAoB,iBAAiB,CAAC;CAC/D,MAAM,mBAAmB,oCAAoC,YAAY,iBAAiB,CAAC;CAC3F,MAAM,mBAAmB,6BAA6B,kBAAkB,SAAS,CAAC;AACpF;;;;AAKA,eAAe,mBAAmB,MAAc,KAAyC;CACvF,IAAI;EACF,MAAM,IAAI;CACZ,SAAS,OAAO;EAGd,QAAQ,MAAM,iEAAiE,KAAK,KAAK,KAAK;CAChG;AACF;;;;AAKA,eAAe,yBAAwC;CACrD,MAAM,WAAW,yBAAyB;CAC1C,IAAI,oBAAoB;CAExB,IAAI;EAUF,IAAI;GACF,MAAM,iBAAiB;EACzB,SAAS,OAAO;GACd,QAAQ,MAAM,6DAA6D,KAAK;EAClF;EAEA,MAAM,kBAAkB,SAAS;EAEjC,oBAAoB;CACtB,UAAU;EAKR,SAAS,kBAAkB;EAC3B,SAAS,eAAe;EACxB,SAAS,kBAAkB;EAC3B,SAAS,QAAQ,oBAAoB,SAAS;CAChD;AACF;;;;AAKA,SAAS,4BACP,iBACA,WACM;CACN,IAAI,oBAAoB,QACtB;CAOF,sBAAsB,iBAFK,2BAA2B,SAEE,CAAC;AAC3D;;;;AAKA,eAAe,0BACb,SACA,WACe;CACf,MAAM,UAAU,QAAQ;CAIxB,IAAI,CAAC,QAAQ,cAAc,CAAC,UAAU,YACpC;CAGF,IAAI,QAAQ,cAAc,UAAU,YAAY;EAC9C,sBAAsB,QAAQ,WAAW,UAAU,SAAS;EAE5D;CACF;CAOA,sBAAsB,MAHQ,QAAQ,oBACX,2BAA2B,SAEE,CAAC;AAC3D;;;;;AAMA,SAAS,sBACP,iBACA,oBACM;CACN,IAAI,0BAA0B,iBAAiB,kBAAkB,GAC/D;CAGF,MAAM,IAAI,mBACR,gCAAgC,4BAA4B,eAAe,EAAE,4BAA4B,4BAA4B,kBAAkB,EAAE,2GAC3J;AACF;;;;AAKA,SAAS,QAAQ,SAAuC;CACtD,OAAO,QAAQ,YAAY,MAAS;AACtC"}

package/esm/tooling/check/lint-step.d.mts

@@ -6,13 +6,7 @@ export type LintOutcome = {
   /** The linters that ran (`eslint`, `oxlint`); empty when the app configures none. */
   linters: string[];
 };
-/**
- * Lint `files` (project-relative) with the linters the app configures, the
- * same ones `warlock dev` runs in the background: ESLint when an
- * `eslint.config.*` exists, oxlint when an oxlint config exists and the app
- * has the `oxlint` package. A config without its tool is a `WL8002`
- * environment problem.
- */
-export declare function runLint(cwd: string, files: readonly string[]): Promise<LintOutcome>;
+/** Oxlint by default. ESLint requires an explicit selection and a flat config. */
+export declare function runLint(cwd: string, files: readonly string[], selection?: "oxlint" | "eslint"): Promise<LintOutcome>;
 //#endregion
 //# sourceMappingURL=lint-step.d.mts.map

package/esm/tooling/check/lint-step.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"lint-step.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/check/lint-step.ts"],"mappings":";;;YAWY;EACV,UAAU;;EAEV;;;;;;;;;wBAuFoB,QAAQ,aAAa,2BAA2B,QAAQ"}
+{"version":3,"file":"lint-step.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/check/lint-step.ts"],"mappings":";;;YAWY;EACV,UAAU;;EAEV;;;wBAiFoB,QACpB,aACA,0BACA,kCACC,QAAQ"}

package/esm/tooling/check/lint-step.mjs

@@ -1,5 +1,5 @@
+import { hasEslint, warnEslintDeprecation } from "../../dev-server/health-checker/eslint-support.mjs";
 import { OxlintRunner, findOxlint, hasOxlintConfig } from "../../dev-server/health-checker/oxlint-runner.mjs";
-import { hasEslint } from "../../dev-server/health-checker/default-health-checkers.mjs";
 import { createProblem } from "../problem.mjs";
 import path from "node:path";
 import { ESLint } from "eslint";
@@ -65,14 +65,8 @@ async function runOxlint(cwd, files) {
 		await runner.shutdown();
 	}
 }
-/**
-* Lint `files` (project-relative) with the linters the app configures, the
-* same ones `warlock dev` runs in the background: ESLint when an
-* `eslint.config.*` exists, oxlint when an oxlint config exists and the app
-* has the `oxlint` package. A config without its tool is a `WL8002`
-* environment problem.
-*/
-async function runLint(cwd, files) {
+/** Oxlint by default. ESLint requires an explicit selection and a flat config. */
+async function runLint(cwd, files, selection = "oxlint") {
 	const lintable = files.filter((file) => LINTABLE.test(file));
 	const problems = [];
 	const linters = [];
@@ -80,7 +74,16 @@ async function runLint(cwd, files) {
 		problems,
 		linters
 	};
-	if (hasEslint(cwd)) {
+	if (selection === "eslint") {
+		warnEslintDeprecation();
+		if (!hasEslint(cwd)) return {
+			linters: ["eslint"],
+			problems: [createProblem({
+				code: "WL8002",
+				source: "environment",
+				message: "Cannot find ESLint flat config in the app."
+			})]
+		};
 		linters.push("eslint");
 		try {
 			problems.push(...await runEslint(cwd, lintable));
@@ -88,7 +91,7 @@ async function runLint(cwd, files) {
 			problems.push(toolFailure("ESLint", error));
 		}
 	}
-	if (hasOxlintConfig(cwd)) {
+	if (selection === "oxlint" && hasOxlintConfig(cwd)) {
 		linters.push("oxlint");
 		if (!findOxlint(cwd)) problems.push(createProblem({
 			code: "WL8002",

package/esm/tooling/check/lint-step.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"lint-step.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/check/lint-step.ts"],"sourcesContent":["import { ESLint } from \"eslint\";\nimport path from \"node:path\";\nimport { hasEslint } from \"../../dev-server/health-checker/default-health-checkers\";\nimport {\n  findOxlint,\n  hasOxlintConfig,\n  OxlintRunner,\n} from \"../../dev-server/health-checker/oxlint-runner\";\nimport { createProblem, type ToolingProblem } from \"../problem\";\n\n/** What the lint step found, and which linters ran. */\nexport type LintOutcome = {\n  problems: ToolingProblem[];\n  /** The linters that ran (`eslint`, `oxlint`); empty when the app configures none. */\n  linters: string[];\n};\n\nconst LINTABLE = /\\.[cm]?[jt]sx?$/i;\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\n/** A missing package/plugin is the machine's install; anything else is the tool crashing. */\nfunction toolFailure(tool: string, error: unknown): ToolingProblem {\n  const message = errorMessage(error);\n  const missing = /cannot find (?:module|package)|ERR_MODULE_NOT_FOUND/i.test(message);\n\n  return createProblem({\n    code: missing ? \"WL8002\" : \"WL8007\",\n    source: \"environment\",\n    message: `${tool} could not run: ${message.split(\"\\n\")[0]}`,\n  });\n}\n\nasync function runEslint(cwd: string, files: readonly string[]): Promise<ToolingProblem[]> {\n  // The same flat-config lookup the dev server's ESLint checker uses.\n  const eslint = new ESLint({ cwd, errorOnUnmatchedPattern: false, warnIgnored: false });\n  const results = await eslint.lintFiles([...files]);\n  const problems: ToolingProblem[] = [];\n\n  for (const result of results) {\n    const file = path.relative(cwd, result.filePath).split(path.sep).join(\"/\");\n\n    for (const message of result.messages) {\n      const error = message.severity === 2 || message.fatal === true;\n\n      problems.push(\n        createProblem({\n          code: error ? \"WL7201\" : \"WL7202\",\n          source: \"eslint\",\n          severity: error ? \"error\" : \"warning\",\n          message: message.message,\n          file,\n          line: message.line || null,\n          column: message.column || null,\n          rule: message.ruleId ?? null,\n        }),\n      );\n    }\n  }\n\n  return problems;\n}\n\nasync function runOxlint(cwd: string, files: readonly string[]): Promise<ToolingProblem[]> {\n  const runner = new OxlintRunner();\n\n  runner.initialize(cwd);\n\n  try {\n    const results = await runner.checkFiles(\n      files.map((file) => ({ path: path.join(cwd, file), relativePath: file })),\n    );\n\n    return results.flatMap((result) =>\n      [...result.errors, ...result.warnings].map((message) =>\n        createProblem({\n          code: message.type === \"error\" ? \"WL7201\" : \"WL7202\",\n          source: \"oxlint\",\n          severity: message.type,\n          message: message.message,\n          file: message.relativePath,\n          line: message.lineNumber,\n          column: message.columnNumber,\n          rule: message.ruleId ?? null,\n        }),\n      ),\n    );\n  } finally {\n    await runner.shutdown();\n  }\n}\n\n/**\n * Lint `files` (project-relative) with the linters the app configures, the\n * same ones `warlock dev` runs in the background: ESLint when an\n * `eslint.config.*` exists, oxlint when an oxlint config exists and the app\n * has the `oxlint` package. A config without its tool is a `WL8002`\n * environment problem.\n */\nexport async function runLint(cwd: string, files: readonly string[]): Promise<LintOutcome> {\n  const lintable = files.filter((file) => LINTABLE.test(file));\n  const problems: ToolingProblem[] = [];\n  const linters: string[] = [];\n\n  // ESLint lints the whole directory when handed no pattern; nothing to lint\n  // means nothing to run.\n  if (lintable.length === 0) return { problems, linters };\n\n  if (hasEslint(cwd)) {\n    linters.push(\"eslint\");\n\n    try {\n      problems.push(...(await runEslint(cwd, lintable)));\n    } catch (error) {\n      problems.push(toolFailure(\"ESLint\", error));\n    }\n  }\n\n  if (hasOxlintConfig(cwd)) {\n    linters.push(\"oxlint\");\n\n    if (!findOxlint(cwd)) {\n      problems.push(\n        createProblem({\n          code: \"WL8002\",\n          source: \"environment\",\n          message: \"An oxlint config exists but the oxlint package is not installed in the app.\",\n        }),\n      );\n    } else {\n      try {\n        problems.push(...(await runOxlint(cwd, lintable)));\n      } catch (error) {\n        problems.push(toolFailure(\"oxlint\", error));\n      }\n    }\n  }\n\n  return { problems, linters };\n}\n"],"mappings":";;;;;;;AAiBA,MAAM,WAAW;AAEjB,SAAS,aAAa,OAAwB;CAC5C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;;AAGA,SAAS,YAAY,MAAc,OAAgC;CACjE,MAAM,UAAU,aAAa,KAAK;CAClC,MAAM,UAAU,uDAAuD,KAAK,OAAO;CAEnF,OAAO,cAAc;EACnB,MAAM,UAAU,WAAW;EAC3B,QAAQ;EACR,SAAS,GAAG,KAAK,kBAAkB,QAAQ,MAAM,IAAI,CAAC,CAAC;CACzD,CAAC;AACH;AAEA,eAAe,UAAU,KAAa,OAAqD;CAGzF,MAAM,UAAU,MAAM,IADH,OAAO;EAAE;EAAK,yBAAyB;EAAO,aAAa;CAAM,CACzD,CAAC,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;CACjD,MAAM,WAA6B,CAAC;CAEpC,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,OAAO,KAAK,SAAS,KAAK,OAAO,QAAQ,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;EAEzE,KAAK,MAAM,WAAW,OAAO,UAAU;GACrC,MAAM,QAAQ,QAAQ,aAAa,KAAK,QAAQ,UAAU;GAE1D,SAAS,KACP,cAAc;IACZ,MAAM,QAAQ,WAAW;IACzB,QAAQ;IACR,UAAU,QAAQ,UAAU;IAC5B,SAAS,QAAQ;IACjB;IACA,MAAM,QAAQ,QAAQ;IACtB,QAAQ,QAAQ,UAAU;IAC1B,MAAM,QAAQ,UAAU;GAC1B,CAAC,CACH;EACF;CACF;CAEA,OAAO;AACT;AAEA,eAAe,UAAU,KAAa,OAAqD;CACzF,MAAM,SAAS,IAAI,aAAa;CAEhC,OAAO,WAAW,GAAG;CAErB,IAAI;EAKF,QAAO,MAJe,OAAO,WAC3B,MAAM,KAAK,UAAU;GAAE,MAAM,KAAK,KAAK,KAAK,IAAI;GAAG,cAAc;EAAK,EAAE,CAC1E,EAEc,CAAC,SAAS,WACtB,CAAC,GAAG,OAAO,QAAQ,GAAG,OAAO,QAAQ,CAAC,CAAC,KAAK,YAC1C,cAAc;GACZ,MAAM,QAAQ,SAAS,UAAU,WAAW;GAC5C,QAAQ;GACR,UAAU,QAAQ;GAClB,SAAS,QAAQ;GACjB,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd,QAAQ,QAAQ;GAChB,MAAM,QAAQ,UAAU;EAC1B,CAAC,CACH,CACF;CACF,UAAU;EACR,MAAM,OAAO,SAAS;CACxB;AACF;;;;;;;;AASA,eAAsB,QAAQ,KAAa,OAAgD;CACzF,MAAM,WAAW,MAAM,QAAQ,SAAS,SAAS,KAAK,IAAI,CAAC;CAC3D,MAAM,WAA6B,CAAC;CACpC,MAAM,UAAoB,CAAC;CAI3B,IAAI,SAAS,WAAW,GAAG,OAAO;EAAE;EAAU;CAAQ;CAEtD,IAAI,UAAU,GAAG,GAAG;EAClB,QAAQ,KAAK,QAAQ;EAErB,IAAI;GACF,SAAS,KAAK,GAAI,MAAM,UAAU,KAAK,QAAQ,CAAE;EACnD,SAAS,OAAO;GACd,SAAS,KAAK,YAAY,UAAU,KAAK,CAAC;EAC5C;CACF;CAEA,IAAI,gBAAgB,GAAG,GAAG;EACxB,QAAQ,KAAK,QAAQ;EAErB,IAAI,CAAC,WAAW,GAAG,GACjB,SAAS,KACP,cAAc;GACZ,MAAM;GACN,QAAQ;GACR,SAAS;EACX,CAAC,CACH;OAEA,IAAI;GACF,SAAS,KAAK,GAAI,MAAM,UAAU,KAAK,QAAQ,CAAE;EACnD,SAAS,OAAO;GACd,SAAS,KAAK,YAAY,UAAU,KAAK,CAAC;EAC5C;CAEJ;CAEA,OAAO;EAAE;EAAU;CAAQ;AAC7B"}
+{"version":3,"file":"lint-step.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/check/lint-step.ts"],"sourcesContent":["import { ESLint } from \"eslint\";\nimport path from \"node:path\";\nimport { hasEslint, warnEslintDeprecation } from \"../../dev-server/health-checker/eslint-support\";\nimport {\n  findOxlint,\n  hasOxlintConfig,\n  OxlintRunner,\n} from \"../../dev-server/health-checker/oxlint-runner\";\nimport { createProblem, type ToolingProblem } from \"../problem\";\n\n/** What the lint step found, and which linters ran. */\nexport type LintOutcome = {\n  problems: ToolingProblem[];\n  /** The linters that ran (`eslint`, `oxlint`); empty when the app configures none. */\n  linters: string[];\n};\n\nconst LINTABLE = /\\.[cm]?[jt]sx?$/i;\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\n/** A missing package/plugin is the machine's install; anything else is the tool crashing. */\nfunction toolFailure(tool: string, error: unknown): ToolingProblem {\n  const message = errorMessage(error);\n  const missing = /cannot find (?:module|package)|ERR_MODULE_NOT_FOUND/i.test(message);\n\n  return createProblem({\n    code: missing ? \"WL8002\" : \"WL8007\",\n    source: \"environment\",\n    message: `${tool} could not run: ${message.split(\"\\n\")[0]}`,\n  });\n}\n\nasync function runEslint(cwd: string, files: readonly string[]): Promise<ToolingProblem[]> {\n  // The same flat-config lookup the dev server's ESLint checker uses.\n  const eslint = new ESLint({ cwd, errorOnUnmatchedPattern: false, warnIgnored: false });\n  const results = await eslint.lintFiles([...files]);\n  const problems: ToolingProblem[] = [];\n\n  for (const result of results) {\n    const file = path.relative(cwd, result.filePath).split(path.sep).join(\"/\");\n\n    for (const message of result.messages) {\n      const error = message.severity === 2 || message.fatal === true;\n\n      problems.push(\n        createProblem({\n          code: error ? \"WL7201\" : \"WL7202\",\n          source: \"eslint\",\n          severity: error ? \"error\" : \"warning\",\n          message: message.message,\n          file,\n          line: message.line || null,\n          column: message.column || null,\n          rule: message.ruleId ?? null,\n        }),\n      );\n    }\n  }\n\n  return problems;\n}\n\nasync function runOxlint(cwd: string, files: readonly string[]): Promise<ToolingProblem[]> {\n  const runner = new OxlintRunner();\n\n  runner.initialize(cwd);\n\n  try {\n    const results = await runner.checkFiles(\n      files.map((file) => ({ path: path.join(cwd, file), relativePath: file })),\n    );\n\n    return results.flatMap((result) =>\n      [...result.errors, ...result.warnings].map((message) =>\n        createProblem({\n          code: message.type === \"error\" ? \"WL7201\" : \"WL7202\",\n          source: \"oxlint\",\n          severity: message.type,\n          message: message.message,\n          file: message.relativePath,\n          line: message.lineNumber,\n          column: message.columnNumber,\n          rule: message.ruleId ?? null,\n        }),\n      ),\n    );\n  } finally {\n    await runner.shutdown();\n  }\n}\n\n/** Oxlint by default. ESLint requires an explicit selection and a flat config. */\nexport async function runLint(\n  cwd: string,\n  files: readonly string[],\n  selection: \"oxlint\" | \"eslint\" = \"oxlint\",\n): Promise<LintOutcome> {\n  const lintable = files.filter((file) => LINTABLE.test(file));\n  const problems: ToolingProblem[] = [];\n  const linters: string[] = [];\n\n  // ESLint lints the whole directory when handed no pattern; nothing to lint\n  // means nothing to run.\n  if (lintable.length === 0) return { problems, linters };\n\n  if (selection === \"eslint\") {\n    warnEslintDeprecation();\n    if (!hasEslint(cwd)) {\n      return {\n        linters: [\"eslint\"],\n        problems: [\n          createProblem({\n            code: \"WL8002\",\n            source: \"environment\",\n            message: \"Cannot find ESLint flat config in the app.\",\n          }),\n        ],\n      };\n    }\n    linters.push(\"eslint\");\n\n    try {\n      problems.push(...(await runEslint(cwd, lintable)));\n    } catch (error) {\n      problems.push(toolFailure(\"ESLint\", error));\n    }\n  }\n\n  if (selection === \"oxlint\" && hasOxlintConfig(cwd)) {\n    linters.push(\"oxlint\");\n\n    if (!findOxlint(cwd)) {\n      problems.push(\n        createProblem({\n          code: \"WL8002\",\n          source: \"environment\",\n          message: \"An oxlint config exists but the oxlint package is not installed in the app.\",\n        }),\n      );\n    } else {\n      try {\n        problems.push(...(await runOxlint(cwd, lintable)));\n      } catch (error) {\n        problems.push(toolFailure(\"oxlint\", error));\n      }\n    }\n  }\n\n  return { problems, linters };\n}\n"],"mappings":";;;;;;;AAiBA,MAAM,WAAW;AAEjB,SAAS,aAAa,OAAwB;CAC5C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;;AAGA,SAAS,YAAY,MAAc,OAAgC;CACjE,MAAM,UAAU,aAAa,KAAK;CAClC,MAAM,UAAU,uDAAuD,KAAK,OAAO;CAEnF,OAAO,cAAc;EACnB,MAAM,UAAU,WAAW;EAC3B,QAAQ;EACR,SAAS,GAAG,KAAK,kBAAkB,QAAQ,MAAM,IAAI,CAAC,CAAC;CACzD,CAAC;AACH;AAEA,eAAe,UAAU,KAAa,OAAqD;CAGzF,MAAM,UAAU,MAAM,IADH,OAAO;EAAE;EAAK,yBAAyB;EAAO,aAAa;CAAM,CACzD,CAAC,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;CACjD,MAAM,WAA6B,CAAC;CAEpC,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,OAAO,KAAK,SAAS,KAAK,OAAO,QAAQ,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;EAEzE,KAAK,MAAM,WAAW,OAAO,UAAU;GACrC,MAAM,QAAQ,QAAQ,aAAa,KAAK,QAAQ,UAAU;GAE1D,SAAS,KACP,cAAc;IACZ,MAAM,QAAQ,WAAW;IACzB,QAAQ;IACR,UAAU,QAAQ,UAAU;IAC5B,SAAS,QAAQ;IACjB;IACA,MAAM,QAAQ,QAAQ;IACtB,QAAQ,QAAQ,UAAU;IAC1B,MAAM,QAAQ,UAAU;GAC1B,CAAC,CACH;EACF;CACF;CAEA,OAAO;AACT;AAEA,eAAe,UAAU,KAAa,OAAqD;CACzF,MAAM,SAAS,IAAI,aAAa;CAEhC,OAAO,WAAW,GAAG;CAErB,IAAI;EAKF,QAAO,MAJe,OAAO,WAC3B,MAAM,KAAK,UAAU;GAAE,MAAM,KAAK,KAAK,KAAK,IAAI;GAAG,cAAc;EAAK,EAAE,CAC1E,EAEc,CAAC,SAAS,WACtB,CAAC,GAAG,OAAO,QAAQ,GAAG,OAAO,QAAQ,CAAC,CAAC,KAAK,YAC1C,cAAc;GACZ,MAAM,QAAQ,SAAS,UAAU,WAAW;GAC5C,QAAQ;GACR,UAAU,QAAQ;GAClB,SAAS,QAAQ;GACjB,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd,QAAQ,QAAQ;GAChB,MAAM,QAAQ,UAAU;EAC1B,CAAC,CACH,CACF;CACF,UAAU;EACR,MAAM,OAAO,SAAS;CACxB;AACF;;AAGA,eAAsB,QACpB,KACA,OACA,YAAiC,UACX;CACtB,MAAM,WAAW,MAAM,QAAQ,SAAS,SAAS,KAAK,IAAI,CAAC;CAC3D,MAAM,WAA6B,CAAC;CACpC,MAAM,UAAoB,CAAC;CAI3B,IAAI,SAAS,WAAW,GAAG,OAAO;EAAE;EAAU;CAAQ;CAEtD,IAAI,cAAc,UAAU;EAC1B,sBAAsB;EACtB,IAAI,CAAC,UAAU,GAAG,GAChB,OAAO;GACL,SAAS,CAAC,QAAQ;GAClB,UAAU,CACR,cAAc;IACZ,MAAM;IACN,QAAQ;IACR,SAAS;GACX,CAAC,CACH;EACF;EAEF,QAAQ,KAAK,QAAQ;EAErB,IAAI;GACF,SAAS,KAAK,GAAI,MAAM,UAAU,KAAK,QAAQ,CAAE;EACnD,SAAS,OAAO;GACd,SAAS,KAAK,YAAY,UAAU,KAAK,CAAC;EAC5C;CACF;CAEA,IAAI,cAAc,YAAY,gBAAgB,GAAG,GAAG;EAClD,QAAQ,KAAK,QAAQ;EAErB,IAAI,CAAC,WAAW,GAAG,GACjB,SAAS,KACP,cAAc;GACZ,MAAM;GACN,QAAQ;GACR,SAAS;EACX,CAAC,CACH;OAEA,IAAI;GACF,SAAS,KAAK,GAAI,MAAM,UAAU,KAAK,QAAQ,CAAE;EACnD,SAAS,OAAO;GACd,SAAS,KAAK,YAAY,UAAU,KAAK,CAAC;EAC5C;CAEJ;CAEA,OAAO;EAAE;EAAU;CAAQ;AAC7B"}

package/esm/tooling/check/run-check.d.mts

@@ -9,6 +9,8 @@ export type TypecheckRunner = (options: TypecheckOptions) => Promise<TypecheckRe
 export type CheckOptions = {
   /** Project root. Default: `process.cwd()`. */
   cwd?: string;
+  /** Oxlint by default; ESLint is deprecated and requires explicit selection. */
+  lint?: "oxlint" | "eslint";
   /** Limit every step to the files changed against `base` (default HEAD) plus untracked files. */
   changed?: boolean;
   /** Compare with `git merge-base <base> HEAD` instead of HEAD. Implies `changed`. */

package/esm/tooling/check/run-check.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"run-check.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/check/run-check.ts"],"mappings":";;;;;;YA8BY,mBACV,SAAS,qBACN,QAAQ,mBAAmB;;YAGpB;;EAEV;;EAEA;;EAEA;;EAEA,gBAAgB;;EAEhB;;EAEA,MAAM;;EAEN,YAAY;;EAEZ,SAAS;;EAET;;EAEA;;;;;;;;;;;;wBA4BoB,SAAS,UAAS,eAAoB,QAAQ"}
+{"version":3,"file":"run-check.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/check/run-check.ts"],"mappings":";;;;;;YA8BY,mBACV,SAAS,qBACN,QAAQ,mBAAmB;;YAGpB;;EAEV;;EAEA;;EAEA;;EAEA;;EAEA,gBAAgB;;EAEhB;;EAEA,MAAM;;EAEN,YAAY;;EAEZ,SAAS;;EAET;;EAEA;;;;;;;;;;;;wBA4BoB,SAAS,UAAS,eAAoB,QAAQ"}

package/esm/tooling/check/run-check.mjs

@@ -119,10 +119,10 @@ async function runCheck(options = {}) {
 			detail: "no files to lint",
 			problems: []
 		};
-		const { linters, problems: found } = await runLint(cwd, lintFiles);
+		const { linters, problems: found } = await runLint(cwd, lintFiles, options.lint);
 		if (linters.length === 0) return {
 			status: "skipped",
-			detail: "no ESLint or oxlint config",
+			detail: "no Oxlint config (ESLint requires --lint eslint)",
 			problems: []
 		};
 		return {

package/esm/tooling/check/run-check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"run-check.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/check/run-check.ts"],"sourcesContent":["import path from \"node:path\";\nimport { createProblem, type ToolingProblem } from \"../problem\";\nimport {\n  runTypecheck,\n  type TypecheckOptions,\n  type TypecheckResult,\n} from \"../typecheck/run-typecheck\";\nimport { type GitRunner, listChangedFiles } from \"./changed-files\";\nimport {\n  CHECK_STEPS,\n  type CheckReport,\n  type CheckStep,\n  type CheckStepName,\n  type CheckStepStatus,\n  checkExitCode,\n} from \"./check-report.types\";\nimport { runConventions } from \"./conventions-step\";\nimport { checkNodeVersion } from \"./environment-step\";\nimport { runLint } from \"./lint-step\";\nimport { listSourceFiles, listTestFiles } from \"./source-files\";\nimport {\n  findVitest,\n  parseVitestReport,\n  runVitest,\n  type VitestRunner,\n  vitestArguments,\n  vitestRunFailure,\n} from \"./tests-step\";\n\n/** Runs the typecheck step. The CLI swaps in a child process so a heap overflow cannot end `check`. */\nexport type TypecheckRunner = (\n  options: TypecheckOptions,\n) => Promise<TypecheckResult> | TypecheckResult;\n\n/** Inputs of {@link runCheck}. */\nexport type CheckOptions = {\n  /** Project root. Default: `process.cwd()`. */\n  cwd?: string;\n  /** Limit every step to the files changed against `base` (default HEAD) plus untracked files. */\n  changed?: boolean;\n  /** Compare with `git merge-base <base> HEAD` instead of HEAD. Implies `changed`. */\n  base?: string;\n  /** Steps not to run. */\n  skip?: readonly CheckStepName[];\n  /** tsconfig path, relative to `cwd`. Default: `tsconfig.json`. */\n  project?: string;\n  /** How git is run. */\n  git?: GitRunner;\n  /** How the typecheck runs. Default: in this process. */\n  typecheck?: TypecheckRunner;\n  /** How vitest runs. */\n  vitest?: VitestRunner;\n  /** Where the app's vitest CLI is. Default: resolved from the app root. */\n  vitestBinary?: string | null;\n  /** The Node.js version to check. Default: the running one. */\n  nodeVersion?: string;\n};\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nfunction statusOf(problems: readonly ToolingProblem[]): CheckStepStatus {\n  const errors = problems.filter((problem) => problem.severity === \"error\");\n\n  if (errors.some((problem) => problem.category === \"environment\")) return \"blocked\";\n\n  return errors.length > 0 ? \"failed\" : \"passed\";\n}\n\n/** Bundles one step's timing, status and problems. */\ntype StepOutcome = { status?: CheckStepStatus; detail: string | null; problems: ToolingProblem[] };\n\n/**\n * The single verify command: typecheck, lint, the tests affected by the\n * change, and the framework's convention checks, as one report with one entry\n * per problem and an exit code that tells \"your code\" (1) from \"this machine\"\n * (2).\n *\n * Every step runs even when an earlier one failed, so one run lists every\n * problem. The only exception: with `changed`, a git failure leaves no file\n * list, and every step after `environment` is `blocked`.\n */\nexport async function runCheck(options: CheckOptions = {}): Promise<CheckReport> {\n  const cwd = path.resolve(options.cwd ?? process.cwd());\n  const changed = options.changed === true || options.base !== undefined;\n  const skip = new Set(options.skip ?? []);\n  const steps: CheckStep[] = [];\n  const problems: ToolingProblem[] = [];\n  let files: string[] | null = null;\n  let filesBlocked = false;\n\n  const run = async (name: CheckStepName, body: () => Promise<StepOutcome> | StepOutcome) => {\n    const startedAt = Date.now();\n\n    if (skip.has(name)) {\n      steps.push({ name, status: \"skipped\", durationMs: 0, detail: \"skipped with --skip\" });\n      return;\n    }\n\n    if (filesBlocked && name !== \"environment\") {\n      steps.push({\n        name,\n        status: \"blocked\",\n        durationMs: 0,\n        detail: \"the changed files could not be listed\",\n      });\n      return;\n    }\n\n    let outcome: StepOutcome;\n\n    try {\n      outcome = await body();\n    } catch (error) {\n      outcome = {\n        detail: null,\n        problems: [\n          createProblem({\n            code: \"WL8007\",\n            source: \"environment\",\n            message: `The ${name} step crashed: ${errorMessage(error)}`,\n          }),\n        ],\n      };\n    }\n\n    problems.push(...outcome.problems);\n    steps.push({\n      name,\n      status: outcome.status ?? statusOf(outcome.problems),\n      durationMs: Date.now() - startedAt,\n      detail: outcome.detail,\n    });\n  };\n\n  await run(\"environment\", async () => {\n    const found = checkNodeVersion(cwd, options.nodeVersion);\n\n    if (changed) {\n      const listed = await listChangedFiles({ cwd, base: options.base, git: options.git });\n\n      if (\"problem\" in listed) {\n        filesBlocked = true;\n        found.push(listed.problem);\n      } else {\n        files = listed.files;\n      }\n    }\n\n    return {\n      detail: `Node ${options.nodeVersion ?? process.versions.node}${files ? `, ${files.length} changed file(s)` : \"\"}`,\n      problems: found,\n    };\n  });\n\n  const targets = async (): Promise<string[]> => files ?? (await listSourceFiles(cwd));\n\n  await run(\"typecheck\", async () => {\n    if (files !== null && files.length === 0) {\n      return { status: \"skipped\", detail: \"no changed files\", problems: [] };\n    }\n\n    const typecheck = options.typecheck ?? runTypecheck;\n    const result = await typecheck({\n      cwd,\n      project: options.project,\n      ...(files !== null ? { files } : {}),\n    });\n\n    return {\n      detail: `${result.checkedFiles} file(s) checked in ${result.durationMs}ms`,\n      problems: result.problems,\n    };\n  });\n\n  await run(\"lint\", async () => {\n    const lintFiles = await targets();\n\n    if (lintFiles.length === 0) {\n      return { status: \"skipped\", detail: \"no files to lint\", problems: [] };\n    }\n\n    const { linters, problems: found } = await runLint(cwd, lintFiles);\n\n    if (linters.length === 0) {\n      return { status: \"skipped\", detail: \"no ESLint or oxlint config\", problems: [] };\n    }\n\n    return { detail: `${linters.join(\" + \")} over ${lintFiles.length} file(s)`, problems: found };\n  });\n\n  await run(\"tests\", async () => {\n    if (files !== null && files.length === 0) {\n      return { status: \"skipped\", detail: \"no changed files\", problems: [] };\n    }\n\n    const binary = options.vitestBinary === undefined ? findVitest(cwd) : options.vitestBinary;\n\n    if (!binary) {\n      if ((await listTestFiles(cwd)).length === 0) {\n        return { status: \"skipped\", detail: \"no test files\", problems: [] };\n      }\n\n      return {\n        detail: null,\n        problems: [\n          createProblem({\n            code: \"WL8002\",\n            source: \"environment\",\n            message: \"The project has test files but vitest is not installed in the app.\",\n          }),\n        ],\n      };\n    }\n\n    const vitest = options.vitest ?? runVitest;\n    const outcome = await vitest(binary, vitestArguments(files), cwd);\n    const found =\n      outcome.report === undefined\n        ? vitestRunFailure(outcome)\n        : parseVitestReport(outcome.report, cwd);\n    const total =\n      typeof outcome.report === \"object\" && outcome.report !== null\n        ? Reflect.get(outcome.report, \"numTotalTests\")\n        : undefined;\n\n    return {\n      detail: typeof total === \"number\" ? `${total} test(s) ran` : null,\n      problems: found,\n    };\n  });\n\n  await run(\"conventions\", async () => {\n    const conventionFiles = await targets();\n\n    return {\n      detail: `${conventionFiles.length} file(s) checked`,\n      problems: runConventions(cwd, conventionFiles, options.project),\n    };\n  });\n\n  // Keep the declared order even if a future step is added out of sequence.\n  steps.sort((first, second) => CHECK_STEPS.indexOf(first.name) - CHECK_STEPS.indexOf(second.name));\n\n  const exitCode = checkExitCode(problems);\n  const errors = problems.filter((problem) => problem.severity === \"error\");\n\n  return {\n    schemaVersion: 1,\n    ok: exitCode === 0,\n    exitCode,\n    changed,\n    files,\n    steps,\n    problems,\n    summary: {\n      errors: errors.length,\n      warnings: problems.length - errors.length,\n      code: errors.filter((problem) => problem.category === \"code\").length,\n      environment: errors.filter((problem) => problem.category === \"environment\").length,\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;AA0DA,SAAS,aAAa,OAAwB;CAC5C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;AAEA,SAAS,SAAS,UAAsD;CACtE,MAAM,SAAS,SAAS,QAAQ,YAAY,QAAQ,aAAa,OAAO;CAExE,IAAI,OAAO,MAAM,YAAY,QAAQ,aAAa,aAAa,GAAG,OAAO;CAEzE,OAAO,OAAO,SAAS,IAAI,WAAW;AACxC;;;;;;;;;;;AAeA,eAAsB,SAAS,UAAwB,CAAC,GAAyB;CAC/E,MAAM,MAAM,KAAK,QAAQ,QAAQ,OAAO,QAAQ,IAAI,CAAC;CACrD,MAAM,UAAU,QAAQ,YAAY,QAAQ,QAAQ,SAAS;CAC7D,MAAM,OAAO,IAAI,IAAI,QAAQ,QAAQ,CAAC,CAAC;CACvC,MAAM,QAAqB,CAAC;CAC5B,MAAM,WAA6B,CAAC;CACpC,IAAI,QAAyB;CAC7B,IAAI,eAAe;CAEnB,MAAM,MAAM,OAAO,MAAqB,SAAmD;EACzF,MAAM,YAAY,KAAK,IAAI;EAE3B,IAAI,KAAK,IAAI,IAAI,GAAG;GAClB,MAAM,KAAK;IAAE;IAAM,QAAQ;IAAW,YAAY;IAAG,QAAQ;GAAsB,CAAC;GACpF;EACF;EAEA,IAAI,gBAAgB,SAAS,eAAe;GAC1C,MAAM,KAAK;IACT;IACA,QAAQ;IACR,YAAY;IACZ,QAAQ;GACV,CAAC;GACD;EACF;EAEA,IAAI;EAEJ,IAAI;GACF,UAAU,MAAM,KAAK;EACvB,SAAS,OAAO;GACd,UAAU;IACR,QAAQ;IACR,UAAU,CACR,cAAc;KACZ,MAAM;KACN,QAAQ;KACR,SAAS,OAAO,KAAK,iBAAiB,aAAa,KAAK;IAC1D,CAAC,CACH;GACF;EACF;EAEA,SAAS,KAAK,GAAG,QAAQ,QAAQ;EACjC,MAAM,KAAK;GACT;GACA,QAAQ,QAAQ,UAAU,SAAS,QAAQ,QAAQ;GACnD,YAAY,KAAK,IAAI,IAAI;GACzB,QAAQ,QAAQ;EAClB,CAAC;CACH;CAEA,MAAM,IAAI,eAAe,YAAY;EACnC,MAAM,QAAQ,iBAAiB,KAAK,QAAQ,WAAW;EAEvD,IAAI,SAAS;GACX,MAAM,SAAS,MAAM,iBAAiB;IAAE;IAAK,MAAM,QAAQ;IAAM,KAAK,QAAQ;GAAI,CAAC;GAEnF,IAAI,aAAa,QAAQ;IACvB,eAAe;IACf,MAAM,KAAK,OAAO,OAAO;GAC3B,OACE,QAAQ,OAAO;EAEnB;EAEA,OAAO;GACL,QAAQ,QAAQ,QAAQ,eAAe,QAAQ,SAAS,OAAO,QAAQ,KAAK,MAAM,OAAO,oBAAoB;GAC7G,UAAU;EACZ;CACF,CAAC;CAED,MAAM,UAAU,YAA+B,SAAU,MAAM,gBAAgB,GAAG;CAElF,MAAM,IAAI,aAAa,YAAY;EACjC,IAAI,UAAU,QAAQ,MAAM,WAAW,GACrC,OAAO;GAAE,QAAQ;GAAW,QAAQ;GAAoB,UAAU,CAAC;EAAE;EAIvE,MAAM,SAAS,OADG,QAAQ,aAAa,aACT,CAAC;GAC7B;GACA,SAAS,QAAQ;GACjB,GAAI,UAAU,OAAO,EAAE,MAAM,IAAI,CAAC;EACpC,CAAC;EAED,OAAO;GACL,QAAQ,GAAG,OAAO,aAAa,sBAAsB,OAAO,WAAW;GACvE,UAAU,OAAO;EACnB;CACF,CAAC;CAED,MAAM,IAAI,QAAQ,YAAY;EAC5B,MAAM,YAAY,MAAM,QAAQ;EAEhC,IAAI,UAAU,WAAW,GACvB,OAAO;GAAE,QAAQ;GAAW,QAAQ;GAAoB,UAAU,CAAC;EAAE;EAGvE,MAAM,EAAE,SAAS,UAAU,UAAU,MAAM,QAAQ,KAAK,SAAS;EAEjE,IAAI,QAAQ,WAAW,GACrB,OAAO;GAAE,QAAQ;GAAW,QAAQ;GAA8B,UAAU,CAAC;EAAE;EAGjF,OAAO;GAAE,QAAQ,GAAG,QAAQ,KAAK,KAAK,EAAE,QAAQ,UAAU,OAAO;GAAW,UAAU;EAAM;CAC9F,CAAC;CAED,MAAM,IAAI,SAAS,YAAY;EAC7B,IAAI,UAAU,QAAQ,MAAM,WAAW,GACrC,OAAO;GAAE,QAAQ;GAAW,QAAQ;GAAoB,UAAU,CAAC;EAAE;EAGvE,MAAM,SAAS,QAAQ,iBAAiB,SAAY,WAAW,GAAG,IAAI,QAAQ;EAE9E,IAAI,CAAC,QAAQ;GACX,KAAK,MAAM,cAAc,GAAG,EAAC,CAAE,WAAW,GACxC,OAAO;IAAE,QAAQ;IAAW,QAAQ;IAAiB,UAAU,CAAC;GAAE;GAGpE,OAAO;IACL,QAAQ;IACR,UAAU,CACR,cAAc;KACZ,MAAM;KACN,QAAQ;KACR,SAAS;IACX,CAAC,CACH;GACF;EACF;EAGA,MAAM,UAAU,OADD,QAAQ,UAAU,UACL,CAAC,QAAQ,gBAAgB,KAAK,GAAG,GAAG;EAChE,MAAM,QACJ,QAAQ,WAAW,SACf,iBAAiB,OAAO,IACxB,kBAAkB,QAAQ,QAAQ,GAAG;EAC3C,MAAM,QACJ,OAAO,QAAQ,WAAW,YAAY,QAAQ,WAAW,OACrD,QAAQ,IAAI,QAAQ,QAAQ,eAAe,IAC3C;EAEN,OAAO;GACL,QAAQ,OAAO,UAAU,WAAW,GAAG,MAAM,gBAAgB;GAC7D,UAAU;EACZ;CACF,CAAC;CAED,MAAM,IAAI,eAAe,YAAY;EACnC,MAAM,kBAAkB,MAAM,QAAQ;EAEtC,OAAO;GACL,QAAQ,GAAG,gBAAgB,OAAO;GAClC,UAAU,eAAe,KAAK,iBAAiB,QAAQ,OAAO;EAChE;CACF,CAAC;CAGD,MAAM,MAAM,OAAO,WAAW,YAAY,QAAQ,MAAM,IAAI,IAAI,YAAY,QAAQ,OAAO,IAAI,CAAC;CAEhG,MAAM,WAAW,cAAc,QAAQ;CACvC,MAAM,SAAS,SAAS,QAAQ,YAAY,QAAQ,aAAa,OAAO;CAExE,OAAO;EACL,eAAe;EACf,IAAI,aAAa;EACjB;EACA;EACA;EACA;EACA;EACA,SAAS;GACP,QAAQ,OAAO;GACf,UAAU,SAAS,SAAS,OAAO;GACnC,MAAM,OAAO,QAAQ,YAAY,QAAQ,aAAa,MAAM,CAAC,CAAC;GAC9D,aAAa,OAAO,QAAQ,YAAY,QAAQ,aAAa,aAAa,CAAC,CAAC;EAC9E;CACF;AACF"}
+{"version":3,"file":"run-check.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/check/run-check.ts"],"sourcesContent":["import path from \"node:path\";\nimport { createProblem, type ToolingProblem } from \"../problem\";\nimport {\n  runTypecheck,\n  type TypecheckOptions,\n  type TypecheckResult,\n} from \"../typecheck/run-typecheck\";\nimport { type GitRunner, listChangedFiles } from \"./changed-files\";\nimport {\n  CHECK_STEPS,\n  type CheckReport,\n  type CheckStep,\n  type CheckStepName,\n  type CheckStepStatus,\n  checkExitCode,\n} from \"./check-report.types\";\nimport { runConventions } from \"./conventions-step\";\nimport { checkNodeVersion } from \"./environment-step\";\nimport { runLint } from \"./lint-step\";\nimport { listSourceFiles, listTestFiles } from \"./source-files\";\nimport {\n  findVitest,\n  parseVitestReport,\n  runVitest,\n  type VitestRunner,\n  vitestArguments,\n  vitestRunFailure,\n} from \"./tests-step\";\n\n/** Runs the typecheck step. The CLI swaps in a child process so a heap overflow cannot end `check`. */\nexport type TypecheckRunner = (\n  options: TypecheckOptions,\n) => Promise<TypecheckResult> | TypecheckResult;\n\n/** Inputs of {@link runCheck}. */\nexport type CheckOptions = {\n  /** Project root. Default: `process.cwd()`. */\n  cwd?: string;\n  /** Oxlint by default; ESLint is deprecated and requires explicit selection. */\n  lint?: \"oxlint\" | \"eslint\";\n  /** Limit every step to the files changed against `base` (default HEAD) plus untracked files. */\n  changed?: boolean;\n  /** Compare with `git merge-base <base> HEAD` instead of HEAD. Implies `changed`. */\n  base?: string;\n  /** Steps not to run. */\n  skip?: readonly CheckStepName[];\n  /** tsconfig path, relative to `cwd`. Default: `tsconfig.json`. */\n  project?: string;\n  /** How git is run. */\n  git?: GitRunner;\n  /** How the typecheck runs. Default: in this process. */\n  typecheck?: TypecheckRunner;\n  /** How vitest runs. */\n  vitest?: VitestRunner;\n  /** Where the app's vitest CLI is. Default: resolved from the app root. */\n  vitestBinary?: string | null;\n  /** The Node.js version to check. Default: the running one. */\n  nodeVersion?: string;\n};\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nfunction statusOf(problems: readonly ToolingProblem[]): CheckStepStatus {\n  const errors = problems.filter((problem) => problem.severity === \"error\");\n\n  if (errors.some((problem) => problem.category === \"environment\")) return \"blocked\";\n\n  return errors.length > 0 ? \"failed\" : \"passed\";\n}\n\n/** Bundles one step's timing, status and problems. */\ntype StepOutcome = { status?: CheckStepStatus; detail: string | null; problems: ToolingProblem[] };\n\n/**\n * The single verify command: typecheck, lint, the tests affected by the\n * change, and the framework's convention checks, as one report with one entry\n * per problem and an exit code that tells \"your code\" (1) from \"this machine\"\n * (2).\n *\n * Every step runs even when an earlier one failed, so one run lists every\n * problem. The only exception: with `changed`, a git failure leaves no file\n * list, and every step after `environment` is `blocked`.\n */\nexport async function runCheck(options: CheckOptions = {}): Promise<CheckReport> {\n  const cwd = path.resolve(options.cwd ?? process.cwd());\n  const changed = options.changed === true || options.base !== undefined;\n  const skip = new Set(options.skip ?? []);\n  const steps: CheckStep[] = [];\n  const problems: ToolingProblem[] = [];\n  let files: string[] | null = null;\n  let filesBlocked = false;\n\n  const run = async (name: CheckStepName, body: () => Promise<StepOutcome> | StepOutcome) => {\n    const startedAt = Date.now();\n\n    if (skip.has(name)) {\n      steps.push({ name, status: \"skipped\", durationMs: 0, detail: \"skipped with --skip\" });\n      return;\n    }\n\n    if (filesBlocked && name !== \"environment\") {\n      steps.push({\n        name,\n        status: \"blocked\",\n        durationMs: 0,\n        detail: \"the changed files could not be listed\",\n      });\n      return;\n    }\n\n    let outcome: StepOutcome;\n\n    try {\n      outcome = await body();\n    } catch (error) {\n      outcome = {\n        detail: null,\n        problems: [\n          createProblem({\n            code: \"WL8007\",\n            source: \"environment\",\n            message: `The ${name} step crashed: ${errorMessage(error)}`,\n          }),\n        ],\n      };\n    }\n\n    problems.push(...outcome.problems);\n    steps.push({\n      name,\n      status: outcome.status ?? statusOf(outcome.problems),\n      durationMs: Date.now() - startedAt,\n      detail: outcome.detail,\n    });\n  };\n\n  await run(\"environment\", async () => {\n    const found = checkNodeVersion(cwd, options.nodeVersion);\n\n    if (changed) {\n      const listed = await listChangedFiles({ cwd, base: options.base, git: options.git });\n\n      if (\"problem\" in listed) {\n        filesBlocked = true;\n        found.push(listed.problem);\n      } else {\n        files = listed.files;\n      }\n    }\n\n    return {\n      detail: `Node ${options.nodeVersion ?? process.versions.node}${files ? `, ${files.length} changed file(s)` : \"\"}`,\n      problems: found,\n    };\n  });\n\n  const targets = async (): Promise<string[]> => files ?? (await listSourceFiles(cwd));\n\n  await run(\"typecheck\", async () => {\n    if (files !== null && files.length === 0) {\n      return { status: \"skipped\", detail: \"no changed files\", problems: [] };\n    }\n\n    const typecheck = options.typecheck ?? runTypecheck;\n    const result = await typecheck({\n      cwd,\n      project: options.project,\n      ...(files !== null ? { files } : {}),\n    });\n\n    return {\n      detail: `${result.checkedFiles} file(s) checked in ${result.durationMs}ms`,\n      problems: result.problems,\n    };\n  });\n\n  await run(\"lint\", async () => {\n    const lintFiles = await targets();\n\n    if (lintFiles.length === 0) {\n      return { status: \"skipped\", detail: \"no files to lint\", problems: [] };\n    }\n\n    const { linters, problems: found } = await runLint(cwd, lintFiles, options.lint);\n\n    if (linters.length === 0) {\n      return {\n        status: \"skipped\",\n        detail: \"no Oxlint config (ESLint requires --lint eslint)\",\n        problems: [],\n      };\n    }\n\n    return { detail: `${linters.join(\" + \")} over ${lintFiles.length} file(s)`, problems: found };\n  });\n\n  await run(\"tests\", async () => {\n    if (files !== null && files.length === 0) {\n      return { status: \"skipped\", detail: \"no changed files\", problems: [] };\n    }\n\n    const binary = options.vitestBinary === undefined ? findVitest(cwd) : options.vitestBinary;\n\n    if (!binary) {\n      if ((await listTestFiles(cwd)).length === 0) {\n        return { status: \"skipped\", detail: \"no test files\", problems: [] };\n      }\n\n      return {\n        detail: null,\n        problems: [\n          createProblem({\n            code: \"WL8002\",\n            source: \"environment\",\n            message: \"The project has test files but vitest is not installed in the app.\",\n          }),\n        ],\n      };\n    }\n\n    const vitest = options.vitest ?? runVitest;\n    const outcome = await vitest(binary, vitestArguments(files), cwd);\n    const found =\n      outcome.report === undefined\n        ? vitestRunFailure(outcome)\n        : parseVitestReport(outcome.report, cwd);\n    const total =\n      typeof outcome.report === \"object\" && outcome.report !== null\n        ? Reflect.get(outcome.report, \"numTotalTests\")\n        : undefined;\n\n    return {\n      detail: typeof total === \"number\" ? `${total} test(s) ran` : null,\n      problems: found,\n    };\n  });\n\n  await run(\"conventions\", async () => {\n    const conventionFiles = await targets();\n\n    return {\n      detail: `${conventionFiles.length} file(s) checked`,\n      problems: runConventions(cwd, conventionFiles, options.project),\n    };\n  });\n\n  // Keep the declared order even if a future step is added out of sequence.\n  steps.sort((first, second) => CHECK_STEPS.indexOf(first.name) - CHECK_STEPS.indexOf(second.name));\n\n  const exitCode = checkExitCode(problems);\n  const errors = problems.filter((problem) => problem.severity === \"error\");\n\n  return {\n    schemaVersion: 1,\n    ok: exitCode === 0,\n    exitCode,\n    changed,\n    files,\n    steps,\n    problems,\n    summary: {\n      errors: errors.length,\n      warnings: problems.length - errors.length,\n      code: errors.filter((problem) => problem.category === \"code\").length,\n      environment: errors.filter((problem) => problem.category === \"environment\").length,\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;AA4DA,SAAS,aAAa,OAAwB;CAC5C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;AAEA,SAAS,SAAS,UAAsD;CACtE,MAAM,SAAS,SAAS,QAAQ,YAAY,QAAQ,aAAa,OAAO;CAExE,IAAI,OAAO,MAAM,YAAY,QAAQ,aAAa,aAAa,GAAG,OAAO;CAEzE,OAAO,OAAO,SAAS,IAAI,WAAW;AACxC;;;;;;;;;;;AAeA,eAAsB,SAAS,UAAwB,CAAC,GAAyB;CAC/E,MAAM,MAAM,KAAK,QAAQ,QAAQ,OAAO,QAAQ,IAAI,CAAC;CACrD,MAAM,UAAU,QAAQ,YAAY,QAAQ,QAAQ,SAAS;CAC7D,MAAM,OAAO,IAAI,IAAI,QAAQ,QAAQ,CAAC,CAAC;CACvC,MAAM,QAAqB,CAAC;CAC5B,MAAM,WAA6B,CAAC;CACpC,IAAI,QAAyB;CAC7B,IAAI,eAAe;CAEnB,MAAM,MAAM,OAAO,MAAqB,SAAmD;EACzF,MAAM,YAAY,KAAK,IAAI;EAE3B,IAAI,KAAK,IAAI,IAAI,GAAG;GAClB,MAAM,KAAK;IAAE;IAAM,QAAQ;IAAW,YAAY;IAAG,QAAQ;GAAsB,CAAC;GACpF;EACF;EAEA,IAAI,gBAAgB,SAAS,eAAe;GAC1C,MAAM,KAAK;IACT;IACA,QAAQ;IACR,YAAY;IACZ,QAAQ;GACV,CAAC;GACD;EACF;EAEA,IAAI;EAEJ,IAAI;GACF,UAAU,MAAM,KAAK;EACvB,SAAS,OAAO;GACd,UAAU;IACR,QAAQ;IACR,UAAU,CACR,cAAc;KACZ,MAAM;KACN,QAAQ;KACR,SAAS,OAAO,KAAK,iBAAiB,aAAa,KAAK;IAC1D,CAAC,CACH;GACF;EACF;EAEA,SAAS,KAAK,GAAG,QAAQ,QAAQ;EACjC,MAAM,KAAK;GACT;GACA,QAAQ,QAAQ,UAAU,SAAS,QAAQ,QAAQ;GACnD,YAAY,KAAK,IAAI,IAAI;GACzB,QAAQ,QAAQ;EAClB,CAAC;CACH;CAEA,MAAM,IAAI,eAAe,YAAY;EACnC,MAAM,QAAQ,iBAAiB,KAAK,QAAQ,WAAW;EAEvD,IAAI,SAAS;GACX,MAAM,SAAS,MAAM,iBAAiB;IAAE;IAAK,MAAM,QAAQ;IAAM,KAAK,QAAQ;GAAI,CAAC;GAEnF,IAAI,aAAa,QAAQ;IACvB,eAAe;IACf,MAAM,KAAK,OAAO,OAAO;GAC3B,OACE,QAAQ,OAAO;EAEnB;EAEA,OAAO;GACL,QAAQ,QAAQ,QAAQ,eAAe,QAAQ,SAAS,OAAO,QAAQ,KAAK,MAAM,OAAO,oBAAoB;GAC7G,UAAU;EACZ;CACF,CAAC;CAED,MAAM,UAAU,YAA+B,SAAU,MAAM,gBAAgB,GAAG;CAElF,MAAM,IAAI,aAAa,YAAY;EACjC,IAAI,UAAU,QAAQ,MAAM,WAAW,GACrC,OAAO;GAAE,QAAQ;GAAW,QAAQ;GAAoB,UAAU,CAAC;EAAE;EAIvE,MAAM,SAAS,OADG,QAAQ,aAAa,aACT,CAAC;GAC7B;GACA,SAAS,QAAQ;GACjB,GAAI,UAAU,OAAO,EAAE,MAAM,IAAI,CAAC;EACpC,CAAC;EAED,OAAO;GACL,QAAQ,GAAG,OAAO,aAAa,sBAAsB,OAAO,WAAW;GACvE,UAAU,OAAO;EACnB;CACF,CAAC;CAED,MAAM,IAAI,QAAQ,YAAY;EAC5B,MAAM,YAAY,MAAM,QAAQ;EAEhC,IAAI,UAAU,WAAW,GACvB,OAAO;GAAE,QAAQ;GAAW,QAAQ;GAAoB,UAAU,CAAC;EAAE;EAGvE,MAAM,EAAE,SAAS,UAAU,UAAU,MAAM,QAAQ,KAAK,WAAW,QAAQ,IAAI;EAE/E,IAAI,QAAQ,WAAW,GACrB,OAAO;GACL,QAAQ;GACR,QAAQ;GACR,UAAU,CAAC;EACb;EAGF,OAAO;GAAE,QAAQ,GAAG,QAAQ,KAAK,KAAK,EAAE,QAAQ,UAAU,OAAO;GAAW,UAAU;EAAM;CAC9F,CAAC;CAED,MAAM,IAAI,SAAS,YAAY;EAC7B,IAAI,UAAU,QAAQ,MAAM,WAAW,GACrC,OAAO;GAAE,QAAQ;GAAW,QAAQ;GAAoB,UAAU,CAAC;EAAE;EAGvE,MAAM,SAAS,QAAQ,iBAAiB,SAAY,WAAW,GAAG,IAAI,QAAQ;EAE9E,IAAI,CAAC,QAAQ;GACX,KAAK,MAAM,cAAc,GAAG,EAAC,CAAE,WAAW,GACxC,OAAO;IAAE,QAAQ;IAAW,QAAQ;IAAiB,UAAU,CAAC;GAAE;GAGpE,OAAO;IACL,QAAQ;IACR,UAAU,CACR,cAAc;KACZ,MAAM;KACN,QAAQ;KACR,SAAS;IACX,CAAC,CACH;GACF;EACF;EAGA,MAAM,UAAU,OADD,QAAQ,UAAU,UACL,CAAC,QAAQ,gBAAgB,KAAK,GAAG,GAAG;EAChE,MAAM,QACJ,QAAQ,WAAW,SACf,iBAAiB,OAAO,IACxB,kBAAkB,QAAQ,QAAQ,GAAG;EAC3C,MAAM,QACJ,OAAO,QAAQ,WAAW,YAAY,QAAQ,WAAW,OACrD,QAAQ,IAAI,QAAQ,QAAQ,eAAe,IAC3C;EAEN,OAAO;GACL,QAAQ,OAAO,UAAU,WAAW,GAAG,MAAM,gBAAgB;GAC7D,UAAU;EACZ;CACF,CAAC;CAED,MAAM,IAAI,eAAe,YAAY;EACnC,MAAM,kBAAkB,MAAM,QAAQ;EAEtC,OAAO;GACL,QAAQ,GAAG,gBAAgB,OAAO;GAClC,UAAU,eAAe,KAAK,iBAAiB,QAAQ,OAAO;EAChE;CACF,CAAC;CAGD,MAAM,MAAM,OAAO,WAAW,YAAY,QAAQ,MAAM,IAAI,IAAI,YAAY,QAAQ,OAAO,IAAI,CAAC;CAEhG,MAAM,WAAW,cAAc,QAAQ;CACvC,MAAM,SAAS,SAAS,QAAQ,YAAY,QAAQ,aAAa,OAAO;CAExE,OAAO;EACL,eAAe;EACf,IAAI,aAAa;EACjB;EACA;EACA;EACA;EACA;EACA,SAAS;GACP,QAAQ,OAAO;GACf,UAAU,SAAS,SAAS,OAAO;GACnC,MAAM,OAAO,QAAQ,YAAY,QAAQ,aAAa,MAAM,CAAC,CAAC;GAC9D,aAAa,OAAO,QAAQ,YAAY,QAAQ,aAAa,aAAa,CAAC,CAAC;EAC9E;CACF;AACF"}