* Test 3: AbortController-only pattern (pre-fix) against black-hole * * This shows what happens WITHOUT Promise.race — just AbortController. * On

* Test 5: Access file through directory symlink * Attempt to access a file via the symlinked directory

* Test 6: Simulate broken AbortController (the exact #465 scenario) * * On affected platforms, AbortController.abort() fires but the fetch * promis

* Test 7: Broken symlink (pointing to non-existent target)

* Test 2: Current fetch pattern (AbortController only) against black-hole * * This replicates exactly what FeatureFlagManager.fetchFlags() does. *

* Test 4: Current pattern against slow 15s response server

* Test 2: Direct access to restricted directory (should fail)

* Test performance with large files of different line ending types * This is a modified version to work with the 100-line limit

* Test 5: Simulate the full onboarding path for new users * * For a new user (no cache), the init handler does: * await featureFlagManager.waitF

* Test 1: Normal file access within allowed directory (should succeed)

* Test 3: SYMLINK BYPASS - Directory symlink pointing outside allowed dirs * This is the main security test!

* Test 4: SYMLINK BYPASS - File symlink pointing outside allowed dirs

* Test 6: Symlink within allowed directory pointing to another allowed location (should succeed)

* Write PDF - creates from markdown or operations

* Write/create a DOCX file. * Content is plain text — each line becomes a paragraph. * Lines starting with # become headings (# = Heading1,