test(integrations/client/packages): batch 2-4 unit coverage + zip-slip guard extraction
Batch 2-4 of the test-strategy rollout. Test-only except one minimal,
behaviour-preserving extraction in file.utils.ts. All suites green:
server 82 suites/836+1todo, editor-ext 86, mcp 270, client (new files) 86.
integrations (server):
- file.utils.ts: extract pure `isEntryPathSafe(entryName, targetDir)` from
extractZipInternal so the zip-slip/path-traversal guard is unit-testable;
call site rerouted, behaviour identical (only a warn-message string merged).
- file.utils.zip-safety.spec.ts: traversal/strip/__MACOSX/prefix-confusion
cases (mutation-resistant: fails if containment loses the path.sep).
- import-formatter / import.utils / table-utils / export utils / import.service
extractTitleAndRemoveHeading: pure import/export transforms, Notion/XWiki
formatting, table colspan widths (idempotent), slug/link rewriting.
client:
- safeRedirectPath: open-redirect guard, every reject branch independently.
- buildChatMarkdown (fence anti-breakout), label-colors, normalize-label,
share tree build, page URL builders, notification time-grouping (fake clock).
packages:
- editor-ext: deriveFootnoteId golden table, parseHtmlEmbedHeight crafted
values, orphan footnote extraction.
- mcp: deriveFootnoteId parity (drift guard vs editor-ext), applyTextEdits
idempotency + cross-block replaceAll, diffDocs/summarizeChange on reorder.
Reviewed (APPROVE): extraction behaviour-preserving, assertions mutation-resistant.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
0b2af34029