import fs from 'node:fs/promises';
import os from 'node:os';
import path from 'node:path';
import { describe, expect, it } from 'vitest';
import { ensureInsideRoot } from '../src/lib/security.js';

describe('zip slip helper', () => {
  it('accepts path inside root', async () => {
    const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sw-root-'));
    const file = path.join(root, 'a.txt');
    await fs.writeFile(file, 'x');
    expect(await ensureInsideRoot(root, file)).toBe(true);
  });
});