From 18a1e347f9475f9c490e6d44ef285d3d65036b1f Mon Sep 17 00:00:00 2001
From: gunshiz <spsshop1047@gmail.com>
Date: Sat, 29 Aug 2026 06:18:59 +0000
Subject: [PATCH] test: use portable file reads under Vitest

---
 tests/deployment-contract.test.ts |  4 +++-
 tests/security-boundaries.test.ts | 12 +++++++++---
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/tests/deployment-contract.test.ts b/tests/deployment-contract.test.ts
index 2e481ee..e9b959b 100644
--- a/tests/deployment-contract.test.ts
+++ b/tests/deployment-contract.test.ts
@@ -1,7 +1,9 @@
+import { readFile } from "node:fs/promises";
+
 import { describe, expect, it } from "vitest";
 
 async function repositoryFile(path: string): Promise<string> {
-  return Bun.file(new URL(`../${path}`, import.meta.url)).text();
+  return readFile(new URL(`../${path}`, import.meta.url), "utf8");
 }
 
 describe("production deployment contract", () => {
diff --git a/tests/security-boundaries.test.ts b/tests/security-boundaries.test.ts
index 916bd05..fc79a1e 100644
--- a/tests/security-boundaries.test.ts
+++ b/tests/security-boundaries.test.ts
@@ -1,3 +1,5 @@
+import { readFile } from "node:fs/promises";
+
 import { describe, expect, it } from "vitest";
 
 const protectedEntryPoints = [
@@ -11,16 +13,20 @@ const protectedEntryPoints = [
 describe("administrative security boundaries", () => {
   for (const path of protectedEntryPoints) {
     it(`${path} repeats server-side admin authorization`, async () => {
-      const source = await Bun.file(new URL(`../${path}`, import.meta.url)).text();
+      const source = await readFile(
+        new URL(`../${path}`, import.meta.url),
+        "utf8",
+      );
       expect(source).toContain("requireAdmin");
       expect(source).toMatch(/await requireAdmin\(\)/u);
     });
   }
 
   it("same-origin media checks visibility before falling back to admin auth", async () => {
-    const source = await Bun.file(
+    const source = await readFile(
       new URL("../app/media/[id]/route.ts", import.meta.url),
-    ).text();
+      "utf8",
+    );
     expect(source).toContain("getMediaVisibility");
     expect(source).toContain("getAdminSession");
     expect(source.indexOf("getMediaVisibility")).toBeLessThan(