Skip to content

refactor: simplify runtime-driver test suites and archive openspec ch… #9

refactor: simplify runtime-driver test suites and archive openspec ch…

refactor: simplify runtime-driver test suites and archive openspec ch… #9

Triggered via push March 2, 2026 22:55
Status Failure
Total duration 1m 27s
Artifacts

ci.yml

on: push
typecheck-and-test
1m 22s
typecheck-and-test
Fit to window
Zoom out
Zoom in

Annotations

10 errors
tests/module-access.test.ts > moduleAccess overlay > keeps non-overlay host paths denied when overlay reads are allowed: packages/secure-exec/tests/module-access.test.ts#L366
AssertionError: expected 1 to be +0 // Object.is equality - Expected + Received - 0 + 1 ❯ tests/module-access.test.ts:366:23
tests/module-access.test.ts > moduleAccess overlay > rejects native addon artifacts in overlay: packages/secure-exec/tests/module-access.test.ts#L323
AssertionError: expected 'Cannot find module \'native-addon-pkg…' to contain 'ERR_MODULE_ACCESS_NATIVE_ADDON' Expected: "ERR_MODULE_ACCESS_NATIVE_ADDON" Received: "Cannot find module 'native-addon-pkg'" ❯ tests/module-access.test.ts:323:31
tests/module-access.test.ts > moduleAccess overlay > fails closed when overlay path escapes cwd/node_modules: packages/secure-exec/tests/module-access.test.ts#L296
AssertionError: expected 'Cannot find module \'escape-pkg\'' to contain 'ERR_MODULE_ACCESS_OUT_OF_SCOPE' Expected: "ERR_MODULE_ACCESS_OUT_OF_SCOPE" Received: "Cannot find module 'escape-pkg'" ❯ tests/module-access.test.ts:296:31
tests/module-access.test.ts > moduleAccess overlay > keeps projected node_modules read-only: packages/secure-exec/tests/module-access.test.ts#L251
AssertionError: expected 'ENOENT: no such file or directory, wr…' to contain 'EACCES: permission denied' - Expected + Received - EACCES: permission denied + ENOENT: no such file or directory, write '/app/node_modules/read-only-pkg/index.js' + ❯ tests/module-access.test.ts:251:28
tests/module-access.test.ts > moduleAccess overlay > loads overlay packages when base filesystem is mounted elsewhere: packages/secure-exec/tests/module-access.test.ts#L214
AssertionError: expected 1 to be +0 // Object.is equality - Expected + Received - 0 + 1 ❯ tests/module-access.test.ts:214:23
tests/module-access.test.ts > moduleAccess overlay > loads dependency-of-dependency chains (A -> B -> C): packages/secure-exec/tests/module-access.test.ts#L178
AssertionError: expected 1 to be +0 // Object.is equality - Expected + Received - 0 + 1 ❯ tests/module-access.test.ts:178:23
tests/module-access.test.ts > moduleAccess overlay > loads third-party packages from overlay without base filesystem: packages/secure-exec/tests/module-access.test.ts#L135
AssertionError: expected 1 to be +0 // Object.is equality - Expected + Received - 0 + 1 ❯ tests/module-access.test.ts:135:23
tests/module-access-compat.test.ts > moduleAccess compatibility fixture > matches host Node output for overlay-backed package loading: packages/secure-exec/tests/module-access-compat.test.ts#L109
AssertionError: expected 1 to be +0 // Object.is equality - Expected + Received - 0 + 1 ❯ tests/module-access-compat.test.ts:109:31
tests/isolate-runtime-injection-policy.test.ts > isolate runtime injection policy > avoids template-literal isolate eval snippets in Node runtime loader: packages/secure-exec/tests/isolate-runtime-injection-policy.test.ts#L13
AssertionError: expected '// Re-export core runtime surface.\ne…' to contain 'getIsolateRuntimeSource("globalExposu…' - Expected + Received - getIsolateRuntimeSource("globalExposureHelpers") + // Re-export core runtime surface. + export { NodeRuntime } from "./runtime.js"; + export type { NodeRuntimeOptions } from "./runtime.js"; + + // Re-export public types. + export type { + CommandExecutor, + NetworkAdapter, + Permissions, + RuntimeDriver, + RuntimeDriverFactory, + SystemDriver, + VirtualFileSystem, + } from "./types.js"; + export type { DirEntry, StatInfo } from "./fs-helpers.js"; + export type { + StdioChannel, + StdioEvent, + StdioHook, + ExecOptions, + ExecResult, + OSConfig, + ProcessConfig, + RunResult, + TimingMitigation, + } from "./shared/api-types.js"; + + // Re-export Node driver factories. + export { + createDefaultNetworkAdapter, + createNodeDriver, + createNodeRuntimeDriverFactory, + NodeExecutionDriver, + NodeFileSystem, + } from "./node/driver.js"; + export type { + ModuleAccessOptions, + NodeRuntimeDriverFactoryOptions, + } from "./node/driver.js"; + + // Re-export browser driver factories. + export { + createBrowserDriver, + createBrowserNetworkAdapter, + createBrowserRuntimeDriverFactory, + createOpfsFileSystem, + } from "./browser/index.js"; + export type { + BrowserDriverOptions, + BrowserRuntimeDriverFactoryOptions, + BrowserRuntimeSystemOptions, + } from "./browser/index.js"; + + export { createInMemoryFileSystem } from "./shared/in-memory-fs.js"; + export { + allowAll, + allowAllChildProcess, + allowAllEnv, + allowAllFs, + allowAllNetwork, + } from "./shared/permissions.js"; + ❯ tests/isolate-runtime-injection-policy.test.ts:13:23
tests/bridge-contract.test.ts > bridge contract registry > uses shared host bridge key constants for jail wiring: packages/secure-exec/tests/bridge-contract.test.ts#L28
AssertionError: expected '// Re-export core runtime surface.\ne…' to contain 'HOST_BRIDGE_GLOBAL_KEYS.dynamicImport' - Expected + Received - HOST_BRIDGE_GLOBAL_KEYS.dynamicImport + // Re-export core runtime surface. + export { NodeRuntime } from "./runtime.js"; + export type { NodeRuntimeOptions } from "./runtime.js"; + + // Re-export public types. + export type { + CommandExecutor, + NetworkAdapter, + Permissions, + RuntimeDriver, + RuntimeDriverFactory, + SystemDriver, + VirtualFileSystem, + } from "./types.js"; + export type { DirEntry, StatInfo } from "./fs-helpers.js"; + export type { + StdioChannel, + StdioEvent, + StdioHook, + ExecOptions, + ExecResult, + OSConfig, + ProcessConfig, + RunResult, + TimingMitigation, + } from "./shared/api-types.js"; + + // Re-export Node driver factories. + export { + createDefaultNetworkAdapter, + createNodeDriver, + createNodeRuntimeDriverFactory, + NodeExecutionDriver, + NodeFileSystem, + } from "./node/driver.js"; + export type { + ModuleAccessOptions, + NodeRuntimeDriverFactoryOptions, + } from "./node/driver.js"; + + // Re-export browser driver factories. + export { + createBrowserDriver, + createBrowserNetworkAdapter, + createBrowserRuntimeDriverFactory, + createOpfsFileSystem, + } from "./browser/index.js"; + export type { + BrowserDriverOptions, + BrowserRuntimeDriverFactoryOptions, + BrowserRuntimeSystemOptions, + } from "./browser/index.js"; + + export { createInMemoryFileSystem } from "./shared/in-memory-fs.js"; + export { + allowAll, + allowAllChildProcess, + allowAllEnv, + allowAllFs, + allowAllNetwork, + } from "./shared/permissions.js"; + ❯ tests/bridge-contract.test.ts:28:18