toiljs 0.0.115 → 0.0.117

package/test/stream-emulation.test.ts

@@ -1,479 +0,0 @@
-/**
- * Dev STREAM emulation end-to-end (Phase 4). Compiles real `@stream` fixtures with the LOCAL toilscript
- * (`--targetMode hot`), then drives `DevStreamBox` + `StreamDevHost` and asserts the dev runtime mirrors
- * the production edge (`toil-backend` `src/wasm/stream`) BYTE-FOR-BYTE: the `@message` ring bridge
- * (echo / reject / empty), the `@connect` info-block bridge (path-based accept/reject + egress clear),
- * and the session driver (accept / dispatch / trap-close / lifecycle). The dev mirror of toil-backend's
- * message_bridge + @connect + hostile-isolation tests.
- */
-
-import { spawnSync } from 'node:child_process';
-import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import { Server } from '@dacely/hyper-express';
-import { afterAll, beforeAll, describe, expect, it } from 'vitest';
-
-import { makeStreamClient } from '../src/client/stream/client.js';
-import { matchStreamRoute, parseStreamCatalog } from '../src/devserver/stream/catalog.js';
-import { buildStreamImports, freshStreamBoxState } from '../src/devserver/stream/host.js';
-import { wireStreams } from '../src/devserver/stream/wire.js';
-import { DevStreamBox } from '../src/devserver/stream/index.js';
-import { StreamDevHost } from '../src/devserver/stream/manager.js';
-import {
-    StreamRouter,
-    type StreamUpgradeContext,
-    type StreamWs,
-} from '../src/devserver/stream/router.js';
-import { StreamWsSession, type StreamWsTransport } from '../src/devserver/stream/ws.js';
-
-const here = dirname(fileURLToPath(import.meta.url));
-// The toilscript build with the @message + @connect bridge codegen (it ships in the dep now).
-// Resolved from node_modules so this works both locally (the symlinked repo) and in CI (the npm
-// dep), not from a sibling checkout that CI does not have.
-const LOCAL_TOILSCRIPT_BIN = join(here, '..', 'node_modules', 'toilscript', 'bin', 'toilscript.js');
-
-let tmp: string;
-let ECHO_PATH: string;
-let GATE_PATH: string;
-let TRAP_PATH: string;
-let ECHO: Buffer;
-let GATE: Buffer;
-let TYPED: Buffer;
-
-function compile(srcName: string): { path: string; wasm: Buffer } {
-    const src = join(here, 'fixtures', srcName);
-    const out = join(tmp, srcName.replace(/\.ts$/, '.wasm'));
-    const r = spawnSync(
-        'node',
-        [LOCAL_TOILSCRIPT_BIN, src, '-o', out, '--targetMode', 'hot', '--runtime', 'stub'],
-        { encoding: 'utf8' },
-    );
-    if (r.status !== 0) {
-        throw new Error(
-            `toilscript compile ${srcName} failed (${String(r.status)}):\n${r.stderr}${r.stdout}`,
-        );
-    }
-    return { path: out, wasm: readFileSync(out) };
-}
-
-beforeAll(() => {
-    tmp = mkdtempSync(join(tmpdir(), 'toiljs-stream-'));
-    const echo = compile('stream-echo.ts');
-    ECHO_PATH = echo.path;
-    ECHO = echo.wasm;
-    const gate = compile('stream-gate.ts');
-    GATE_PATH = gate.path;
-    GATE = gate.wasm;
-    TRAP_PATH = compile('stream-trap.ts').path;
-    TYPED = compile('stream-typed.ts').wasm;
-});
-
-afterAll(() => {
-    if (tmp) rmSync(tmp, { recursive: true, force: true });
-});
-
-describe('dev stream box: typed @data @message decode (doc 03 2.5)', () => {
-    it('decodes a guest-seeded @data payload at runtime and replies with the decoded field', () => {
-        // Seed a real ChatMsg.encode() from a raw instance (deterministic), so the host feeds VALID
-        // @data bytes without hand-crafting the wire format.
-        const ref: { memory: WebAssembly.Memory | null } = { memory: null };
-        const state = freshStreamBoxState();
-        const seedInst = new WebAssembly.Instance(
-            new WebAssembly.Module(new Uint8Array(TYPED)),
-            buildStreamImports(ref, state),
-        );
-        const sx = seedInst.exports as unknown as {
-            memory: WebAssembly.Memory;
-            seedHi: () => void;
-            seedOffset: () => number;
-            seedLength: () => number;
-        };
-        ref.memory = sx.memory;
-        sx.seedHi();
-        const off = sx.seedOffset() >>> 0;
-        const len = sx.seedLength() >>> 0;
-        expect(len).toBeGreaterThan(0);
-        const payload = Buffer.from(new Uint8Array(sx.memory.buffer, off, len));
-
-        // Drive the typed @message: the guest DECODES ChatMsg{text:"hi"} and replies with text.length.
-        const box = DevStreamBox.load(TYPED);
-        const tid = 0x0000_0000_0000_0011n;
-        expect(box.onConnect(tid, 'localhost', '/').kind).toBe('accept');
-        const out = box.onMessage(tid, payload);
-        expect(out.kind).toBe('reply');
-        if (out.kind === 'reply') {
-            expect(out.frames.length).toBe(1);
-            expect(out.frames[0][0]).toBe(2); // decoded "hi" -> text.length 2
-        }
-    });
-});
-
-describe('dev stream box: the @message ring bridge', () => {
-    const id = 0x0000_0007_0000_0005n;
-
-    it('loads a hot stream artifact with the ring runtime', () => {
-        expect(DevStreamBox.load(ECHO).hasRings).toBe(true);
-    });
-
-    it('echoes / rejects / empties through the ring, persisting state across events', () => {
-        const box = DevStreamBox.load(ECHO);
-        expect(box.onConnect(id, 'localhost', '/').kind).toBe('accept'); // echo declares no @connect
-        expect(box.onMessage(id, Buffer.from('hello'))).toEqual({
-            kind: 'reply',
-            frames: [Buffer.from('hello')],
-        });
-        expect(box.onMessage(id, Buffer.from('second frame'))).toEqual({
-            kind: 'reply',
-            frames: [Buffer.from('second frame')],
-        });
-        expect(box.onMessage(id, Buffer.from('Xdrop'))).toEqual({ kind: 'reject', code: 0x0210 });
-        expect(box.onMessage(id, Buffer.from(''))).toEqual({ kind: 'reply', frames: [] });
-    });
-
-    it('rejects a non-stream artifact (fails closed)', () => {
-        expect(() => DevStreamBox.load(Buffer.from('\0asm\x01\0\0\0', 'binary'))).toThrow();
-    });
-});
-
-describe('dev stream box: the @connect info-block bridge', () => {
-    const id = 0x11n;
-
-    it('reads the connect path and rejects /blocked while accepting others', () => {
-        const box = DevStreamBox.load(GATE);
-        expect(box.hasConnectBridge).toBe(true);
-        expect(box.onConnect(id, 'acme.toil', '/blocked')).toEqual({
-            kind: 'reject',
-            code: 0x0211,
-            initialEgress: [],
-        });
-
-        const ok = DevStreamBox.load(GATE);
-        expect(ok.onConnect(id, 'acme.toil', '/room/42')).toEqual({
-            kind: 'accept',
-            initialEgress: [],
-        });
-        // An accepted connection is usable: its @message echoes.
-        expect(ok.onMessage(id, Buffer.from('hi'))).toEqual({
-            kind: 'reply',
-            frames: [Buffer.from('hi')],
-        });
-    });
-
-    it('returns @connect-staged egress and keeps the first @message reply clean', () => {
-        const box = DevStreamBox.load(GATE);
-        // /greet stages "GHI" during @connect; the host returns it as initial egress.
-        expect(box.onConnect(id, 'acme.toil', '/greet')).toEqual({
-            kind: 'accept',
-            initialEgress: [Buffer.from('GHI')],
-        });
-        // The first @message must see ONLY its own reply, never the drained initial "GHI".
-        expect(box.onMessage(id, Buffer.from('hi'))).toEqual({
-            kind: 'reply',
-            frames: [Buffer.from('hi')],
-        });
-    });
-});
-
-describe('dev stream session driver (StreamDevHost)', () => {
-    it('accepts, dispatches, and closes - mirroring StreamWorker', () => {
-        const host = new StreamDevHost(ECHO_PATH);
-        expect(host.acceptUpgrade('c1', 'acme.toil', '/').kind).toBe('accepted');
-        expect(host.activeConnections).toBe(1);
-        expect(host.dispatch('c1', Buffer.from('one'))).toEqual({
-            kind: 'reply',
-            frames: [Buffer.from('one')],
-        });
-        // A guest reject -> close with the 0x02xx code.
-        expect(host.dispatch('c1', Buffer.from('Xstop'))).toEqual({ kind: 'close', code: 0x0210 });
-        // A frame for an unknown connection.
-        expect(host.dispatch('ghost', Buffer.from('x'))).toEqual({ kind: 'noConnection' });
-        host.close('c1');
-        expect(host.activeConnections).toBe(0);
-    });
-
-    it('honors a @connect reject at the upgrade (no box registered)', () => {
-        const host = new StreamDevHost(GATE_PATH);
-        expect(host.acceptUpgrade('c1', 'acme.toil', '/blocked')).toEqual({
-            kind: 'rejected',
-            code: 0x0211,
-            initialEgress: [],
-        });
-        expect(host.activeConnections).toBe(0);
-        expect(host.acceptUpgrade('c2', 'acme.toil', '/ok').kind).toBe('accepted');
-        expect(host.dispatch('c2', Buffer.from('hi'))).toEqual({
-            kind: 'reply',
-            frames: [Buffer.from('hi')],
-        });
-    });
-
-    it('trap-closes a hostile @message and discards only its box', () => {
-        const host = new StreamDevHost(TRAP_PATH);
-        host.acceptUpgrade('h1', 'acme.toil', '/');
-        host.acceptUpgrade('h2', 'acme.toil', '/');
-        expect(host.activeConnections).toBe(2);
-        // h1's @message TRAPS -> STREAM_HOOK_TRAPPED close, its box discarded; h2 is untouched.
-        expect(host.dispatch('h1', Buffer.from('boom'))).toEqual({ kind: 'close', code: 0x0200 });
-        expect(host.has('h1')).toBe(false);
-        expect(host.has('h2')).toBe(true);
-        expect(host.activeConnections).toBe(1);
-    });
-
-    it('throws on a duplicate open', () => {
-        const host = new StreamDevHost(ECHO_PATH);
-        host.acceptUpgrade('c1', 'acme.toil', '/');
-        expect(() => host.acceptUpgrade('c1', 'acme.toil', '/')).toThrow();
-    });
-
-    it('returns initial egress from @connect while keeping dispatch clean', () => {
-        const host = new StreamDevHost(GATE_PATH);
-        expect(host.acceptUpgrade('c1', 'acme.toil', '/greet')).toMatchObject({
-            kind: 'accepted',
-            initialEgress: [Buffer.from('GHI')],
-        });
-        expect(host.dispatch('c1', Buffer.from('hi'))).toEqual({
-            kind: 'reply',
-            frames: [Buffer.from('hi')],
-        });
-    });
-});
-
-describe('dev stream WS session adapter (StreamWsSession)', () => {
-    function makeTransport(): { sent: Buffer[]; closed: number[]; t: StreamWsTransport } {
-        const sent: Buffer[] = [];
-        const closed: number[] = [];
-        return {
-            sent,
-            closed,
-            t: { send: (f: Buffer) => sent.push(f), close: (c: number) => closed.push(c) },
-        };
-    }
-
-    it('accepts, echoes a frame back, and tears down', () => {
-        const host = new StreamDevHost(ECHO_PATH);
-        const { sent, closed, t } = makeTransport();
-        const s = new StreamWsSession(host, 'ws1', 'acme.toil', '/', t);
-        expect(s.onOpen()).toBe(true);
-        expect(s.isOpen).toBe(true);
-        s.onMessage(Buffer.from('hi'));
-        expect(sent).toEqual([Buffer.from('hi')]);
-        expect(closed).toEqual([]);
-        s.onClose();
-        expect(host.activeConnections).toBe(0);
-    });
-
-    it('sends @connect initial egress on open', () => {
-        const host = new StreamDevHost(GATE_PATH);
-        const { sent, closed, t } = makeTransport();
-        const s = new StreamWsSession(host, 'ws1', 'acme.toil', '/greet', t);
-        expect(s.onOpen()).toBe(true);
-        expect(s.isOpen).toBe(true);
-        expect(sent).toEqual([Buffer.from('GHI')]);
-        expect(closed).toEqual([]);
-        s.onMessage(Buffer.from('hi'));
-        expect(sent).toEqual([Buffer.from('GHI'), Buffer.from('hi')]);
-        s.onClose();
-        expect(host.activeConnections).toBe(0);
-    });
-
-    it('closes the socket with the code on a guest reject, then fires @close on socket close', () => {
-        const host = new StreamDevHost(ECHO_PATH);
-        const { closed, t } = makeTransport();
-        const s = new StreamWsSession(host, 'ws1', 'acme.toil', '/', t);
-        s.onOpen();
-        s.onMessage(Buffer.from('Xstop')); // guest reject -> close 0x0210
-        expect(closed).toEqual([0x0210]);
-        expect(s.isOpen).toBe(false);
-        s.onClose();
-        expect(host.activeConnections).toBe(0);
-    });
-
-    it('closes a @connect-rejected upgrade without holding a box', () => {
-        const host = new StreamDevHost(GATE_PATH);
-        const { closed, t } = makeTransport();
-        const s = new StreamWsSession(host, 'ws1', 'acme.toil', '/blocked', t);
-        expect(s.onOpen()).toBe(false);
-        expect(closed).toEqual([0x0211]);
-        expect(host.activeConnections).toBe(0);
-    });
-});
-
-describe('dev stream catalog (toilstream.catalog route table, doc 08 3.1/4.2)', () => {
-    it('parses the @stream route table and matches routes (query stripped)', () => {
-        const cat = parseStreamCatalog(ECHO);
-        expect(cat.size).toBe(1);
-        const def = [...cat.values()][0];
-        expect(def.route.length).toBeGreaterThan(0);
-        expect(def.hooks.message).toBe(true);
-        expect(def.scope).toBe('regional'); // declared_scope default
-        expect(def.messageMode).toBe('raw'); // the raw @message bridge
-        // matchRoute (4.2): exact match, query stripped; a non-route misses (-> proxied to Vite).
-        expect(matchStreamRoute(cat, def.route)).toBe(def);
-        expect(matchStreamRoute(cat, `${def.route}?x=1`)).toBe(def);
-        expect(matchStreamRoute(cat, '/definitely-not-a-stream')).toBeNull();
-    });
-});
-
-/** A minimal hyper-express `Websocket` mock for the router (records send/close, replays events). */
-class MockWs implements StreamWs {
-    readonly sent: Buffer[] = [];
-    readonly closed: number[] = [];
-    private msgCb?: (m: Buffer, b: boolean) => void;
-    private closeCb?: () => void;
-    send(d: Buffer, _isBinary: boolean): void {
-        this.sent.push(d);
-    }
-    close(c: number): void {
-        this.closed.push(c);
-    }
-    on(event: 'message', cb: (m: Buffer, b: boolean) => void): void;
-    on(event: 'close', cb: () => void): void;
-    on(event: 'message' | 'close', cb: ((m: Buffer, b: boolean) => void) | (() => void)): void {
-        if (event === 'message') this.msgCb = cb as (m: Buffer, b: boolean) => void;
-        else this.closeCb = cb as () => void;
-    }
-    emitMessage(m: Buffer): void {
-        this.msgCb?.(m, true);
-    }
-    emitClose(): void {
-        this.closeCb?.();
-    }
-}
-
-describe('dev stream router (doc 08 4.1/4.2)', () => {
-    it('matches @stream routes and bridges a socket to a resident box', () => {
-        const router = new StreamRouter(ECHO_PATH);
-        const route = [...parseStreamCatalog(ECHO).keys()][0];
-        expect(router.matchRoute(route)).not.toBeNull();
-        expect(router.matchRoute(`${route}?x=1`)).not.toBeNull(); // query stripped
-        expect(router.matchRoute('/not-a-stream')).toBeNull(); // -> proxied to Vite
-
-        const ws = new MockWs();
-        const ctx: StreamUpgradeContext = {
-            kind: 'stream',
-            route,
-            url: route,
-            authority: 'acme.toil',
-        };
-        router.onUpgrade(ws, ctx);
-        expect(router.activeConnections).toBe(1);
-        ws.emitMessage(Buffer.from('hi'));
-        expect(ws.sent).toEqual([Buffer.from('hi')]); // @message echoed back over the socket
-        ws.emitClose();
-        expect(router.activeConnections).toBe(0); // @close fired + box dropped
-    });
-
-    it('closes the socket with the code on a @connect reject', () => {
-        const router = new StreamRouter(GATE_PATH);
-        const route = [...parseStreamCatalog(GATE).keys()][0];
-        const ws = new MockWs();
-        // The gate rejects path "/blocked"; the upgrade's url carries the connect path.
-        router.onUpgrade(ws, { kind: 'stream', route, url: '/blocked', authority: 'acme.toil' });
-        expect(ws.closed).toEqual([0x0211]);
-        expect(router.activeConnections).toBe(0); // rejected -> no resident box
-    });
-});
-
-describe('dev stream LIVE round-trip (wireStreams over a real WebSocket)', () => {
-    it('echoes a binary frame end-to-end through app.upgrade + app.ws', async () => {
-        const router = new StreamRouter(ECHO_PATH);
-        const route = [...parseStreamCatalog(ECHO).keys()][0];
-        const app = new Server();
-        // A dummy Vite target: a @stream-route upgrade never touches it (it goes to the StreamRouter).
-        wireStreams(app, { host: '127.0.0.1', port: 65535 }, router);
-
-        const PORT = 49317;
-        await app.listen(PORT);
-        try {
-            const echoed = await new Promise<Buffer>((resolve, reject) => {
-                const ws = new WebSocket(`ws://127.0.0.1:${String(PORT)}${route}`);
-                ws.binaryType = 'arraybuffer';
-                const timer = setTimeout(() => {
-                    reject(new Error('no echo within 3s'));
-                }, 3000);
-                ws.onopen = (): void => {
-                    ws.send(new Uint8Array([0x68, 0x69])); // "hi"
-                };
-                ws.onmessage = (ev: MessageEvent): void => {
-                    clearTimeout(timer);
-                    resolve(Buffer.from(ev.data as ArrayBuffer));
-                    ws.close();
-                };
-                ws.onerror = (): void => {
-                    clearTimeout(timer);
-                    reject(new Error('websocket error'));
-                };
-            });
-            expect(echoed).toEqual(Buffer.from('hi'));
-        } finally {
-            app.close();
-        }
-    });
-});
-
-describe('Server.Stream client (doc 08 8.2 makeStreamClient)', () => {
-    it('connects + echoes through a real WebSocket end to end', async () => {
-        const router = new StreamRouter(ECHO_PATH);
-        const route = [...parseStreamCatalog(ECHO).keys()][0];
-        const app = new Server();
-        wireStreams(app, { host: '127.0.0.1', port: 65535 }, router);
-
-        const PORT = 49318;
-        await app.listen(PORT);
-        try {
-            // The generated client would call makeStreamClient({ Echo: route }) -> globalThis.__toilStream.
-            const stream = makeStreamClient({ Echo: route }, `ws://127.0.0.1:${String(PORT)}`);
-            const channel = await stream.Echo.connect();
-            const echoed = await new Promise<Uint8Array>((resolve, reject) => {
-                const timer = setTimeout(() => {
-                    reject(new Error('no echo within 3s'));
-                }, 3000);
-                channel.onMessage((d) => {
-                    clearTimeout(timer);
-                    resolve(d);
-                });
-                channel.send(new Uint8Array([0x68, 0x69])); // "hi"
-            });
-            expect(Buffer.from(echoed)).toEqual(Buffer.from('hi'));
-            channel.close();
-        } finally {
-            app.close();
-        }
-    });
-
-    it('encodes a typed @data message on send (doc 03 2.5)', async () => {
-        const router = new StreamRouter(ECHO_PATH);
-        const route = [...parseStreamCatalog(ECHO).keys()][0];
-        const app = new Server();
-        wireStreams(app, { host: '127.0.0.1', port: 65535 }, router);
-
-        const PORT = 49319;
-        await app.listen(PORT);
-        try {
-            // A typed class: the encoder serializes { text } -> bytes (stands in for ChatMsg.encode()).
-            const encode = (m: { text: string }): Uint8Array => new TextEncoder().encode(m.text);
-            const stream = makeStreamClient({ Echo: route }, `ws://127.0.0.1:${String(PORT)}`, {
-                Echo: encode,
-            });
-            const channel = await stream.Echo.connect();
-            const echoed = await new Promise<Uint8Array>((resolve, reject) => {
-                const timer = setTimeout(() => {
-                    reject(new Error('no echo within 3s'));
-                }, 3000);
-                channel.onMessage((d) => {
-                    clearTimeout(timer);
-                    resolve(d);
-                });
-                // Send a TYPED message; the channel must encode it before the raw WS send.
-                (channel.send as unknown as (m: { text: string }) => void)({ text: 'typed' });
-            });
-            // The echo server returns the raw bytes it received -> proves the encoder ran on send.
-            expect(Buffer.from(echoed)).toEqual(Buffer.from('typed'));
-            channel.close();
-        } finally {
-            app.close();
-        }
-    });
-});

package/test/ui.test.ts

@@ -1,40 +0,0 @@
-import { describe, expect, it } from 'vitest';
-
-import { box, tagline } from '../src/cli/ui';
-
-describe('tagline', () => {
-    it('always yields a non-empty line, whichever variant is drawn', () => {
-        for (let i = 0; i < 100; i++) {
-            const t = tagline();
-            expect(t.length).toBeGreaterThan(0);
-            expect(t).not.toContain('undefined');
-        }
-    });
-});
-
-describe('box', () => {
-    it('frames lines in a rounded box sized to the widest line', () => {
-        expect(box(['hello', 'hi'])).toBe(
-            [
-                '  ╭─────────╮',
-                '  │  hello  │',
-                '  │  hi     │',
-                '  ╰─────────╯',
-            ].join('\n'),
-        );
-    });
-
-    it('pads on visible width, ignoring ANSI color codes', () => {
-        const colored = '\x1b[1mhello\x1b[22m';
-        const lines = box([colored, 'hi']).split('\n');
-        // Both content rows must end at the same column once colors are stripped.
-        const stripped = lines.map((l) => l.replace(/\x1b\[[0-9;]*m/g, ''));
-        expect(new Set(stripped.map((l) => l.length)).size).toBe(1);
-    });
-
-    it('paints only the border', () => {
-        const out = box(['hi'], (s) => `<${s}>`);
-        expect(out).toContain('<│>  hi  <│>');
-        expect(out).toContain('<╭──────╮>');
-    });
-});

package/test/update.test.ts

@@ -1,58 +0,0 @@
-import { describe, expect, it } from 'vitest';
-
-import { buildRows, classifyBump, parseNcuJson, withheldUpgrades } from '../src/cli/updates';
-
-describe('classifyBump', () => {
-    it('classifies major / minor / patch from ranges', () => {
-        expect(classifyBump('^19.2.6', '^20.0.0')).toBe('major');
-        expect(classifyBump('^19.2.6', '^19.3.0')).toBe('minor');
-        expect(classifyBump('^19.2.6', '^19.2.7')).toBe('patch');
-        expect(classifyBump('1.2.3', '1.2.3')).toBe('other');
-    });
-});
-
-describe('parseNcuJson', () => {
-    it('parses the jsonUpgraded object, tolerating surrounding noise', () => {
-        expect(parseNcuJson('{"react":"^19.3.0","eslint":"^10.4.1"}')).toEqual({
-            react: '^19.3.0',
-            eslint: '^10.4.1',
-        });
-        expect(parseNcuJson('npx noise\n{"a":"1.0.0"}\nbye')).toEqual({ a: '1.0.0' });
-        expect(parseNcuJson('{}')).toEqual({});
-        expect(parseNcuJson('not json')).toEqual({});
-    });
-});
-
-describe('buildRows', () => {
-    it('joins ncu output with current ranges and sorts major-first then by name', () => {
-        const rows = buildRows(
-            { react: '^20.0.0', eslint: '^10.4.1', vite: '^8.0.15' },
-            { react: '^19.2.6', eslint: '^10.2.0', vite: '^8.0.14' },
-        );
-        expect(rows.map((r) => `${r.name}:${r.bump}`)).toEqual([
-            'react:major',
-            'eslint:minor',
-            'vite:patch',
-        ]);
-        expect(rows[0]).toMatchObject({ name: 'react', from: '^19.2.6', to: '^20.0.0' });
-    });
-
-    it('marks a package missing from current deps with a "?" source', () => {
-        const rows = buildRows({ foo: '^2.0.0' }, {});
-        expect(rows[0]).toMatchObject({ name: 'foo', from: '?', to: '^2.0.0', bump: 'major' });
-    });
-});
-
-describe('withheldUpgrades', () => {
-    it('withholds an upgrade into typescript 7 (the native port has no compiler API)', () => {
-        expect(withheldUpgrades({ typescript: '^7.0.2', react: '^20.0.0' })).toEqual(['typescript']);
-    });
-
-    it('still offers typescript bumps inside the supported major', () => {
-        expect(withheldUpgrades({ typescript: '^6.1.0' })).toEqual([]);
-    });
-
-    it('ignores packages with no declared ceiling', () => {
-        expect(withheldUpgrades({ vite: '^9.0.0', eslint: '^11.0.0' })).toEqual([]);
-    });
-});

package/test/validate.test.ts

@@ -1,42 +0,0 @@
-import { describe, expect, it } from 'vitest';
-
-import { isPackageManager, isValidName, resolveProjectDir } from '../src/cli/validate';
-
-describe('isValidName', () => {
-    it('accepts simple and nested names', () => {
-        expect(isValidName('my-app')).toBe(true);
-        expect(isValidName('apps/web')).toBe(true);
-        expect(isValidName('@scope/app')).toBe(true);
-    });
-
-    it('rejects empty and illegal characters', () => {
-        expect(typeof isValidName('')).toBe('string');
-        expect(typeof isValidName('  ')).toBe('string');
-        expect(typeof isValidName('bad name!')).toBe('string');
-    });
-});
-
-describe('resolveProjectDir', () => {
-    it('resolves names inside cwd', () => {
-        expect(resolveProjectDir('/work', 'app')).toBe('/work/app');
-        expect(resolveProjectDir('/work', 'a/b')).toBe('/work/a/b');
-        expect(resolveProjectDir('/work', '.')).toBe('/work');
-    });
-
-    it('refuses to escape cwd (traversal / absolute)', () => {
-        expect(resolveProjectDir('/work', '../evil')).toBeNull();
-        expect(resolveProjectDir('/work', '../../etc')).toBeNull();
-        expect(resolveProjectDir('/work', '/etc/passwd')).toBeNull();
-    });
-});
-
-describe('isPackageManager', () => {
-    it('allowlists known package managers only', () => {
-        expect(isPackageManager('npm')).toBe(true);
-        expect(isPackageManager('pnpm')).toBe(true);
-        expect(isPackageManager('yarn')).toBe(true);
-        expect(isPackageManager('bun')).toBe(true);
-        expect(isPackageManager('npm && calc')).toBe(false);
-        expect(isPackageManager('rm -rf /')).toBe(false);
-    });
-});