fix(platform): support Windows storage and native filesystem boundaries

internal/testutil/filesystem_unix.go

@@ -0,0 +1,45 @@
+//go:build !windows
+
+// Package testutil provides real filesystem failure conditions for platform tests.
+package testutil
+
+import (
+	"os"
+	"path/filepath"
+	"sync"
+	"testing"
+)
+
+func denyMode(t *testing.T, name string, mode os.FileMode) func() {
+	t.Helper()
+	if os.Geteuid() == 0 {
+		t.Skip("Permission tests require an unprivileged user")
+	}
+	info, err := os.Stat(name)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Chmod(name, mode); err != nil {
+		t.Fatal(err)
+	}
+	release := sync.OnceFunc(func() {
+		if err := os.Chmod(name, info.Mode().Perm()); err != nil {
+			t.Error(err)
+		}
+	})
+	t.Cleanup(release)
+	return release
+}
+
+func DenyRead(t *testing.T, name string) func() {
+	t.Helper()
+	return denyMode(t, name, 0)
+}
+func DenyReplace(t *testing.T, name string) func() {
+	t.Helper()
+	return denyMode(t, filepath.Dir(name), 0555)
+}
+func DenyRemove(t *testing.T, directory string) func() {
+	t.Helper()
+	return denyMode(t, directory, 0500)
+}

internal/testutil/filesystem_windows.go

@@ -0,0 +1,41 @@
+// Package testutil provides real filesystem failure conditions for platform tests.
+package testutil
+
+import (
+	"sync"
+	"testing"
+
+	"golang.org/x/sys/windows"
+)
+
+func denySharing(t *testing.T, name string, share uint32) func() {
+	t.Helper()
+	path, err := windows.UTF16PtrFromString(name)
+	if err != nil {
+		t.Fatal(err)
+	}
+	handle, err := windows.CreateFile(path, windows.GENERIC_READ, share, nil, windows.OPEN_EXISTING, windows.FILE_FLAG_BACKUP_SEMANTICS, 0)
+	if err != nil {
+		t.Fatal(err)
+	}
+	release := sync.OnceFunc(func() {
+		if err := windows.CloseHandle(handle); err != nil {
+			t.Error(err)
+		}
+	})
+	t.Cleanup(release)
+	return release
+}
+
+func DenyRead(t *testing.T, name string) func() {
+	t.Helper()
+	return denySharing(t, name, 0)
+}
+func DenyReplace(t *testing.T, name string) func() {
+	t.Helper()
+	return denySharing(t, name, windows.FILE_SHARE_READ|windows.FILE_SHARE_WRITE)
+}
+func DenyRemove(t *testing.T, directory string) func() {
+	t.Helper()
+	return denySharing(t, directory, windows.FILE_SHARE_READ|windows.FILE_SHARE_WRITE)
+}