$ git rev-parse HEAD
bfd52848f9c02add53ab87e4a7dff31aae12b745
row: A-H-E
harness: Vitest verbose test-run transcript (no rendered UI)
UTC: 2026-10-27T14:37:02.089426+00:00
$ pwd
/home/ubuntu/wt/pr-25970/packages/provider-acp
$ env NODE_OPTIONS=--require=/tmp/lead-25970-r1/proof-audit-3/no-symlink-preload.cjs node --version
v26.12.1
$ env NODE_OPTIONS=--require=/tmp/lead-25970-r1/proof-audit-3/no-symlink-preload.cjs vp exec node --version
v26.12.1
$ env NODE_OPTIONS=--require=/tmp/lead-25970-r1/proof-audit-3/no-symlink-preload.cjs node -p ''"'"'NODE_OPTIONS='"'"' + (process.env.NODE_OPTIONS ?? '"'"'<unset>'"'"')'
NODE_OPTIONS=--require=/tmp/lead-25970-r1/proof-audit-3/no-symlink-preload.cjs
EPERM preload active: yes
$ sha256sum /tmp/lead-25970-r1/proof-audit-3/no-symlink-preload.cjs
e364864529ef79a816183b75d210f52b7fc134bc220b318de3dcaddf93cecdde  /tmp/lead-25970-r1/proof-audit-3/no-symlink-preload.cjs
$ uname -a
Linux fs-35 6.1.102 #1 SMP PREEMPT_DYNAMIC Wed Aug 26 20:12:24 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux
rendering: none; device emulation, DPR, font scaling, viewport, theme, frozen clock: N/A
$ env NODE_OPTIONS=--require=/tmp/lead-25970-r1/proof-audit-3/no-symlink-preload.cjs vp test run --config ../../vite.config.ts --dir . src/server/clientPolicy.test.ts --reporter=verbose
note: You are running `vp test` as a Vite+ built-in command. If you meant to run the test npm script, use `vpr test` instead.

 RUN  v5.0.5 /home/ubuntu/wt/pr-25970/packages/provider-acp

 ✓ src/server/clientPolicy.test.ts > acpPermissionDisposition > auto-allows mutations only when every location is in cwd or an additional writable root 3ms
 ✓ src/server/clientPolicy.test.ts > acpPermissionDisposition > denies missing or out-of-root mutation locations 1ms
 ✓ src/server/clientPolicy.test.ts > acpPermissionDisposition > keeps non-mutating workspace permissions and denials unchanged 0ms
 ✓ src/server/clientPolicy.test.ts > acpPermissionDisposition > auto-accept-edits approves file changes without locations and asks for the rest 0ms
 ✓ src/server/clientPolicy.test.ts > acpPermissionDisposition > auto-allows read-kind permission requests under on-request approval 0ms
 ↓ src/server/clientPolicy.test.ts > acpPermissionDisposition > denies mutations through workspace symlinks that escape the writable roots
 ↓ src/server/clientPolicy.test.ts > acpPermissionDisposition > allows existing and new files beneath canonical writable roots
 ✓ src/server/clientPolicy.test.ts > acpMcpToolApprovalElicitationDisposition > applies runtime policy only to explicitly tagged MCP approval elicitations 0ms
 ✓ src/server/clientPolicy.test.ts > client terminal disposition > asks in approval-required and auto-accept-edits, allows in auto and full access 0ms
 ✓ src/server/clientPolicy.test.ts > client terminal disposition > denies terminals under explicit read-only and workspace-write sandboxes 0ms
 ✓ src/server/clientPolicy.test.ts > makeAcpClientPolicyGrants > grants terminals only from commands, never from an approved read or edit 0ms
 ✓ src/server/clientPolicy.test.ts > makeAcpClientPolicyGrants > keeps accept-for-session command grants across turns 0ms
 ✓ src/server/clientPolicy.test.ts > makeAcpClientPolicyGrants > drops a turn's command grant when a later turn approves one 0ms

 Test Files  1 passed (1)
      Tests  11 passed | 2 skipped (13)
   Start at  14:37:02
   Duration  385ms (import 59%, setup 28%, transform 9%, tests 3%, worker 2%)


exit code: 0