libmandoc-rs 0.9.1

#![doc = include_str!("../README.md")]
#![warn(missing_docs)]

#[cfg(test)]
mod build_config;

mod ast;
mod compression;
mod diagnostics;
#[allow(unsafe_code)]
mod ffi;
mod parser;
#[cfg(feature = "render")]
mod renderer;
mod source_bundle;
mod special_character;

pub use ast::{
    AuthorMode, DisplayKind, Document, MacroSet, Metadata, Node, NodeFlags, NodeKind,
    NormalizedEnclosure, NormalizedFont, NormalizedListKind, TableAlignment, TableCell,
};
pub use compression::MAX_DECOMPRESSED_SOURCE_BYTES;
pub use diagnostics::{Diagnostic, DiagnosticCode, DiagnosticLevel, SourceLocation};
pub use parser::{
    Compression, IncludePolicy, InputFormat, ParseError, ParseErrorKind, ParseOptions, ParseReport,
    Parser,
};
#[cfg(feature = "render")]
pub use renderer::{
    DEFAULT_RENDER_OUTPUT_BYTES, DEFAULT_RENDER_WIDTH, MAX_RENDER_OUTPUT_BYTES, MAX_RENDER_WIDTH,
    MIN_RENDER_WIDTH, RenderError, RenderErrorKind, RenderFormat, RenderReport, Renderer,
};
pub use source_bundle::{
    MAX_SOURCE_BUNDLE_BYTES, MAX_SOURCE_BUNDLE_FILE_BYTES, MAX_SOURCE_BUNDLE_FILES, SourceBundle,
    SourceBundleError, SourceBundleErrorKind,
};
pub use special_character::{SpecialCharacter, special_character};

/// Pinned upstream version compiled by this crate's build script.
pub const LIBMANDOC_VERSION: &str = "1.14.6";

/// Private output of the FFI boundary before diagnostics become public values.
struct RawDocument {
    document: Document,
    diagnostics: String,
    node_truncated: bool,
    equation_truncated: bool,
}

#[cfg(feature = "render")]
struct RawRender {
    output: Vec<u8>,
    diagnostics: String,
}

#[cfg(test)]
mod tests {
    use std::{
        fmt::Write as _,
        fs, process,
        sync::{Arc, Barrier},
    };

    #[cfg(windows)]
    use std::io::Write;

    #[cfg(windows)]
    use windows_sys::Win32::Foundation::ERROR_PRIVILEGE_NOT_HELD;

    #[cfg(feature = "serde")]
    use super::Diagnostic;

    use super::{
        AuthorMode, Compression, DiagnosticCode, DiagnosticLevel, DisplayKind, Document,
        IncludePolicy, InputFormat, MacroSet, Node, NodeKind, NormalizedFont, NormalizedListKind,
        ParseError, ParseOptions, Parser, SourceBundle, TableAlignment,
    };

    fn source_path(label: &str) -> std::path::PathBuf {
        std::env::temp_dir().join(format!("mant-{label}-{}.1", process::id()))
    }

    fn measured_depth(node: &Node) -> usize {
        1 + node.children.iter().map(measured_depth).max().unwrap_or(0)
    }

    fn parse_file(path: &std::path::Path, allow_includes: bool) -> Result<Document, ParseError> {
        Parser::new(ParseOptions {
            includes: if allow_includes {
                IncludePolicy::SourceTree
            } else {
                IncludePolicy::Deny
            },
            compression: Compression::Auto,
        })
        .parse_file(path)
        .map(|report| report.document)
    }

    fn find_macro<'a>(node: &'a Node, name: &str) -> Option<&'a Node> {
        (node.macro_name.as_deref() == Some(name))
            .then_some(node)
            .or_else(|| {
                node.children
                    .iter()
                    .find_map(|child| find_macro(child, name))
            })
    }

    fn find_kind(node: &Node, kind: NodeKind) -> Option<&Node> {
        (node.kind == kind).then_some(node).or_else(|| {
            node.children
                .iter()
                .find_map(|child| find_kind(child, kind))
        })
    }

    fn find_node<'a>(node: &'a Node, predicate: &impl Fn(&Node) -> bool) -> Option<&'a Node> {
        predicate(node).then_some(node).or_else(|| {
            node.children
                .iter()
                .find_map(|child| find_node(child, predicate))
        })
    }

    fn collect_visible_text<'a>(node: &'a Node, visible: &mut Vec<&'a str>) {
        if !node.flags.no_print
            && let Some(text) = node.text.as_deref()
        {
            visible.push(text);
        }
        for child in &node.children {
            collect_visible_text(child, visible);
        }
    }

    #[test]
    fn upstream_version_is_pinned() {
        assert_eq!(super::LIBMANDOC_VERSION, "1.14.6");
    }

    #[test]
    fn parser_session_returns_an_owned_man_tree() {
        let path = source_path("mandoc-session");
        fs::write(
            &path,
            ".TH MANT 1 \"2026-07-19\"\n.SH NAME\nmant \\- manual viewer\n",
        )
        .expect("write temporary manual source");

        let document = parse_file(&path, false).expect("parse temporary manual");
        fs::remove_file(path).expect("remove temporary manual source");

        assert_eq!(document.macro_set, MacroSet::Man);
        assert_eq!(document.metadata.title.as_deref(), Some("MANT"));
        assert_eq!(document.metadata.section.as_deref(), Some("1"));
        assert!(document.metadata.has_body);
        assert_eq!(document.root.kind, NodeKind::Root);
        assert!(!document.root.children.is_empty());
    }

    #[test]
    fn parser_recognizes_the_modern_man_reference_macro() {
        let report = Parser::default()
            .parse_bytes(
                "modern-reference.1",
                b".TH MODERN-REFERENCE 1\n.SH NAME\nmodern-reference \\- fixture\n\
.SH SEE ALSO\n.MR git-add 1 ,\n",
            )
            .expect("parse modern man reference");

        assert!(
            report
                .diagnostics
                .iter()
                .all(|diagnostic| !diagnostic.message.contains("unknown macro")),
            "MR must be a native parser node: {:?}",
            report.diagnostics
        );
        let reference = find_macro(&report.document.root, "MR").expect("MR node");
        assert_eq!(reference.kind, NodeKind::Element);
        assert_eq!(
            reference
                .children
                .iter()
                .filter_map(|child| child.text.as_deref())
                .collect::<Vec<_>>(),
            ["git-add", "1", ","]
        );
    }

    #[test]
    fn parser_retains_mdoc_include_arguments() {
        let report = Parser::default()
            .parse_bytes(
                "include.3",
                b".Dd August 19, 2026\n.Dt INCLUDE 3\n.Os\n.Sh SYNOPSIS\n.In fido.h\n",
            )
            .expect("parse mdoc include");

        let include = find_macro(&report.document.root, "In").expect("In node");
        assert_eq!(include.kind, NodeKind::Element);
        assert_eq!(
            include
                .children
                .iter()
                .filter_map(|child| child.text.as_deref())
                .collect::<Vec<_>>(),
            ["fido.h"]
        );
    }

    #[test]
    fn parser_can_pin_bare_mdoc_operating_system_metadata() {
        let parser = Parser::default()
            .with_mdoc_operating_system("PinnedOS 1.0")
            .expect("valid operating-system override");
        assert_eq!(
            parser.mdoc_operating_system().map(std::ffi::CStr::to_bytes),
            Some(b"PinnedOS 1.0".as_slice())
        );

        let bare = parser
            .parse_bytes(
                "bare-os.1",
                b".Dd August 24, 2026\n.Dt BARE-OS 1\n.Os\n.Sh NAME\n.Nm bare-os\n",
            )
            .expect("parse a caller-pinned bare Os macro");
        assert_eq!(bare.document.metadata.os.as_deref(), Some("PinnedOS 1.0"));

        let authored = parser
            .parse_bytes(
                "authored-os.1",
                b".Dd August 24, 2026\n.Dt AUTHORED-OS 1\n.Os AuthoredOS\n.Sh NAME\n.Nm authored-os\n",
            )
            .expect("parse an authored Os value");
        assert_eq!(authored.document.metadata.os.as_deref(), Some("AuthoredOS"));
    }

    #[test]
    fn public_text_normalizes_native_layout_sentinels() {
        let report = Parser::default()
            .parse_bytes(
                "visible-text.1",
                b".Dd August 24, 2026\n.Dt VISIBLE-TEXT 1\n.Os ManT\n.Sh NAME\n.Nm visible-text\n.Nd well-known read-only thing\n",
            )
            .expect("parse hyphenated visible text");
        let mut visible = Vec::new();
        collect_visible_text(&report.document.root, &mut visible);

        assert!(visible.join(" ").contains("well-known read-only thing"));
        assert!(
            find_node(&report.document.root, &|node| {
                node.text.as_deref().is_some_and(|text| {
                    text.chars()
                        .any(|character| ['\u{1d}', '\u{1e}', '\u{1f}'].contains(&character))
                })
            })
            .is_none(),
            "public AST text must not expose libmandoc layout sentinels"
        );
    }

    #[test]
    fn parser_expands_the_libbsd_library_name() {
        let report = Parser::default()
            .parse_bytes(
                "libbsd.3bsd",
                b".Dd August 19, 2026\n.Dt LIBBSD 3bsd\n.Os\n.Sh LIBRARY\n.Lb libbsd\n",
            )
            .expect("parse libbsd library declaration");
        let library = find_macro(&report.document.root, "Lb").expect("Lb node");
        let visible = library
            .children
            .iter()
            .filter(|child| !child.flags.no_print)
            .filter_map(|child| child.text.as_deref())
            .collect::<Vec<_>>();

        assert_eq!(
            visible,
            ["Utility functions from BSD systems (libbsd, \\-lbsd)"]
        );
        assert!(
            report
                .diagnostics
                .iter()
                .all(|diagnostic| !diagnostic.message.contains("unknown library"))
        );
    }

    #[test]
    fn parser_expands_current_mdoc_standard_names() {
        let report = Parser::default()
            .parse_bytes(
                "modern-standards.7",
                b".Dd August 19, 2026\n.Dt MODERN-STANDARDS 7\n.Os\n\
.Sh STANDARDS\n.St -isoC-2023\n.St -p1003.1-2024\n",
            )
            .expect("parse current standards declarations");

        let mut visible = Vec::new();
        collect_visible_text(&report.document.root, &mut visible);

        assert!(
            visible
                .iter()
                .any(|text| text.contains("ISO/IEC 9899:2024")),
            "C23 declaration must expand: {visible:?}"
        );
        assert!(
            visible
                .iter()
                .any(|text| text.contains("IEEE Std 1003.1-2024")),
            "POSIX.1-2024 declaration must expand: {visible:?}"
        );
    }

    #[test]
    fn parser_accepts_pandoc_verbatim_font_aliases() {
        let report = Parser::default()
            .parse_bytes(
                "pandoc-fonts.1",
                b".TH PANDOC-FONTS 1\n.SH NAME\npandoc-fonts \\- fixture\n\
.SH DESCRIPTION\n\\f[C]code\\f[R] \\f[V]verbatim\\f[R] \\f[VB]bold\\f[R] \\f[VI]italic\\f[R]\n",
            )
            .expect("parse Pandoc font aliases");

        assert!(
            report
                .diagnostics
                .iter()
                .all(|diagnostic| !diagnostic.message.contains("invalid escape sequence")),
            "supported font aliases must not emit invalid-escape diagnostics: {:?}",
            report.diagnostics
        );
    }

    #[test]
    fn parser_decompresses_zstd_sources_before_calling_libmandoc() {
        let path = source_path("zstd-mandoc-session").with_extension("1.zst");
        let source = b".TH ZSTD-MANT 1 \"2026-07-20\"\n.SH NAME\nzstd-mant \\- compressed manual\n";
        let compressed = zstd::stream::encode_all(source.as_slice(), 1).expect("compress source");
        fs::write(&path, compressed).expect("write compressed manual source");

        let report = Parser::default()
            .parse_file(&path)
            .expect("parse zstd manual");
        fs::remove_file(path).expect("remove compressed manual source");

        assert!(report.diagnostics.is_empty());
        let document = report.document;
        assert_eq!(document.macro_set, MacroSet::Man);
        assert_eq!(document.metadata.title.as_deref(), Some("ZSTD-MANT"));
        assert_eq!(document.metadata.section.as_deref(), Some("1"));
        assert!(document.metadata.has_body);
    }

    #[test]
    fn parser_preserves_infix_eqn_operators() {
        let report = Parser::default()
            .parse_bytes(
                "equation.3",
                b".TH EQUATION 3\n.SH DESCRIPTION\n.EQ\nx + {width over 2}\ny sub 1 sup 2\n.EN\n",
            )
            .expect("parse infix eqn operators");
        let equation = find_kind(&report.document.root, NodeKind::Equation)
            .and_then(|node| node.equation.as_deref())
            .expect("normalized equation");

        assert!(equation.contains("width / 2"), "{equation}");
        assert!(equation.contains("y _ 1 ^ 2"), "{equation}");
    }

    #[test]
    fn parser_normalizes_the_common_gnu_ldots_equation_macro() {
        let report = Parser::default()
            .parse_bytes(
                "equation-ldots.3",
                b".TH EQUATION 3\n.SH DESCRIPTION\n.EQ\nx sub 1 ldots x sub n\n.EN\n",
            )
            .expect("parse GNU ldots equation macro");
        let equation = find_kind(&report.document.root, NodeKind::Equation)
            .and_then(|node| node.equation.as_deref())
            .expect("normalized equation");

        assert_eq!(equation, "x _ 1 ... x _ n");
    }

    #[cfg(windows)]
    #[test]
    fn windows_parser_decompresses_gzip_before_calling_libmandoc() {
        use flate2::{Compression as GzipCompression, write::GzEncoder};

        let path = source_path("gzip-mandoc-session").with_extension("1.gz");
        let mut encoder = GzEncoder::new(Vec::new(), GzipCompression::fast());
        encoder
            .write_all(b".TH GZIP-MANT 1\n.SH NAME\ngzip-mant \\- compressed manual\n")
            .expect("encode gzip source");
        fs::write(&path, encoder.finish().expect("finish gzip source")).expect("write gzip source");

        let report = Parser::default()
            .parse_file(&path)
            .expect("parse gzip manual");
        fs::remove_file(path).expect("remove gzip source");

        assert_eq!(report.document.metadata.title.as_deref(), Some("GZIP-MANT"));
    }

    #[cfg(windows)]
    #[test]
    fn windows_parser_uses_native_gzip_fallback_for_top_level_files() {
        use flate2::{Compression as GzipCompression, write::GzEncoder};

        let requested = source_path("gzip-fallback-session");
        let mut compressed_path = requested.as_os_str().to_os_string();
        compressed_path.push(".gz");
        let compressed_path = std::path::PathBuf::from(compressed_path);
        let mut encoder = GzEncoder::new(Vec::new(), GzipCompression::fast());
        encoder
            .write_all(b".TH GZIP-FALLBACK 1\n.SH NAME\ngzip-fallback \\- compressed manual\n")
            .expect("encode fallback source");
        fs::write(
            &compressed_path,
            encoder.finish().expect("finish gzip source"),
        )
        .expect("write fallback source");

        let report = Parser::default()
            .parse_file(&requested)
            .expect("parse the implicit .gz fallback");
        fs::remove_file(compressed_path).expect("remove gzip fallback source");

        assert_eq!(
            report.document.metadata.title.as_deref(),
            Some("GZIP-FALLBACK")
        );
    }

    #[test]
    fn parser_accepts_the_date_formats_used_by_libmandoc() {
        for (date, normalized, normalized_with_style) in [
            ("2026-07-20", "2026-07-20", false),
            ("Jul 20, 2026", "July 20, 2026", true),
            ("July 20, 2026", "July 20, 2026", false),
            ("$Mdocdate: Jul 20 2026 $", "July 20, 2026", false),
        ] {
            let source =
                format!(".TH WINDOWS-DATE 1 \"{date}\"\n.SH NAME\nwindows-date \\- portable\n");
            let report = Parser::default()
                .parse_bytes("windows-date.1", source.as_bytes())
                .expect("parse a supported manual date");

            if normalized_with_style {
                assert_eq!(report.diagnostics.len(), 1);
                assert_eq!(report.diagnostics[0].level, DiagnosticLevel::Style);
                assert_eq!(
                    report.diagnostics[0].message,
                    "normalizing date format to: TH July 20, 2026"
                );
            } else {
                assert!(
                    report.diagnostics.is_empty(),
                    "unexpected diagnostics for {date}: {:?}",
                    report.diagnostics
                );
            }
            assert_eq!(report.document.metadata.date.as_deref(), Some(normalized));
        }
    }

    #[test]
    fn parser_normalizes_dates_consistently_across_supported_targets() {
        for (date, normalized) in [
            ("February 30, 2026", "March 2, 2026"),
            ("Jul  2, 2026", "July 2, 2026"),
            ("1-1-1", "1-1-1"),
            ("0000-01-01", "0000-01-01"),
            ("January 1, 1960", "January 1, 1960"),
        ] {
            let source =
                format!(".TH PORTABLE-DATE 1 \"{date}\"\n.SH NAME\nportable-date \\- portable\n");
            let report = Parser::default()
                .parse_bytes("portable-date.1", source.as_bytes())
                .expect("parse a portable manual date");

            assert_eq!(
                report.document.metadata.date.as_deref(),
                Some(normalized),
                "date input {date}"
            );
            assert!(
                report
                    .diagnostics
                    .iter()
                    .all(|diagnostic| !diagnostic.message.contains("bad date argument")),
                "date input {date}: {:?}",
                report.diagnostics
            );
        }
    }

    #[cfg(windows)]
    #[test]
    fn windows_rejects_ambient_source_tree_but_accepts_memory_parsing() {
        let report = Parser::default()
            .parse_bytes("memory.1", b".TH MEMORY 1\n.SH NAME\nmemory \\- portable\n")
            .expect("parse caller-owned bytes");
        assert_eq!(report.document.metadata.title.as_deref(), Some("MEMORY"));

        let error = Parser::new(ParseOptions {
            includes: IncludePolicy::SourceTree,
            compression: Compression::Plain,
        })
        .parse_bytes("memory.1", b".so target.1\n")
        .expect_err("reject ambient source-tree inclusion");
        assert_eq!(error.kind, super::ParseErrorKind::Unsupported);
        assert_eq!(error.path, std::path::Path::new("memory.1"));
    }

    #[test]
    fn invalid_zstd_sources_fail_before_reaching_libmandoc() {
        let path = source_path("invalid-zstd-mandoc-session").with_extension("1.zst");
        fs::write(&path, b"not a zstd frame").expect("write invalid compressed source");

        let error = parse_file(&path, false).expect_err("invalid zstd source must fail");
        fs::remove_file(path).expect("remove invalid compressed source");

        assert!(
            error
                .message
                .starts_with("could not decompress zstd manual source:")
        );
        assert_eq!(error.kind, super::ParseErrorKind::Decompression);
        assert!(!error.message.contains("unsupported control character"));
    }

    #[test]
    fn oversized_zstd_sources_fail_without_returning_partial_input() {
        let source = vec![b'x'; super::MAX_DECOMPRESSED_SOURCE_BYTES + 1];
        let compressed = zstd::stream::encode_all(source.as_slice(), 0)
            .expect("compress oversized source fixture");
        let error = Parser::default()
            .parse_bytes("oversized.1.zst", &compressed)
            .expect_err("reject a decoded source above the fixed limit");

        assert_eq!(error.kind, super::ParseErrorKind::Decompression);
        assert!(
            error.message.contains(&format!(
                "{}-byte limit",
                super::MAX_DECOMPRESSED_SOURCE_BYTES
            )),
            "unexpected decompression error: {error}"
        );
    }

    #[cfg(unix)]
    #[test]
    fn zstd_sources_keep_their_original_include_root() {
        let root = std::env::temp_dir().join(format!(
            "mant-zstd-include-mandoc-session-{}",
            process::id()
        ));
        let man1 = root.join("man1");
        fs::create_dir_all(&man1).expect("create temporary manual tree");
        let target = man1.join("target.1");
        fs::write(
            &target,
            ".TH ZSTD-INCLUDE 1\n.SH NAME\nzstd-include \\- included manual\n",
        )
        .expect("write included manual");
        let alias = man1.join("alias.1.zst");
        let compressed =
            zstd::stream::encode_all(b".so man1/target.1\n".as_slice(), 1).expect("compress alias");
        fs::write(&alias, compressed).expect("write compressed alias");

        let document = parse_file(&alias, true).expect("resolve include from zstd source");
        fs::remove_dir_all(root).expect("remove temporary manual tree");

        assert_eq!(document.macro_set, MacroSet::Man);
        assert_eq!(document.metadata.title.as_deref(), Some("ZSTD-INCLUDE"));
        assert!(document.metadata.has_body);
    }

    #[test]
    fn parser_preserves_same_line_layout_and_next_line_content_roles() {
        let path = source_path("line-role-mandoc-session");
        fs::write(
            &path,
            ".TH LINE-ROLE 1\n.SH EXAMPLES\n.TP \\w'man\\ 'u\n.BI man \\ ls\nBody.\n",
        )
        .expect("write tagged paragraph source");

        let document = parse_file(&path, false).expect("parse tagged paragraph source");
        fs::remove_file(path).expect("remove tagged paragraph source");

        let tagged_paragraph = find_macro(&document.root, "TP").expect("TP block");
        let head = tagged_paragraph
            .children
            .iter()
            .find(|child| child.kind == NodeKind::Head)
            .expect("TP head");
        assert_eq!(head.children[0].text.as_deref(), Some("96u"));
        assert!(!head.children[0].flags.line_start);
        assert_eq!(head.children[1].macro_name.as_deref(), Some("BI"));
        assert!(head.children[1].flags.line_start);
    }

    #[test]
    fn parser_preserves_mdoc_delimiter_spacing_roles() {
        let path = source_path("delimiter-role-mandoc-session");
        fs::write(
            &path,
            ".Dd August 4, 2026\n.Dt DELIMITERS 1\n.Os\n.Sh EXAMPLES\n\
             .Dl name ( ) command\n\
             .Dl local [ variable | - ] ...\n\
             .Dl return [ exitstatus ]\n",
        )
        .expect("write delimiter-role source");

        let document = parse_file(&path, false).expect("parse delimiter-role source");
        fs::remove_file(path).expect("remove delimiter-role source");

        let opening_parenthesis = find_node(&document.root, &|node| {
            node.line == 5 && node.text.as_deref() == Some("(")
        })
        .expect("opening parenthesis");
        let closing_parenthesis = find_node(&document.root, &|node| {
            node.line == 5 && node.text.as_deref() == Some(")")
        })
        .expect("closing parenthesis");
        let opening_bracket = find_node(&document.root, &|node| {
            node.line == 7 && node.text.as_deref() == Some("[")
        })
        .expect("opening bracket");
        let trailing_bracket = find_node(&document.root, &|node| {
            node.line == 7 && node.text.as_deref() == Some("]")
        })
        .expect("trailing bracket");

        assert!(opening_parenthesis.flags.delimiter_open);
        assert!(closing_parenthesis.flags.delimiter_close);
        assert!(opening_bracket.flags.delimiter_open);
        assert!(trailing_bracket.flags.delimiter_close);
    }

    #[test]
    fn parser_preserves_mdoc_synopsis_presentation_roles() {
        let path = source_path("synopsis-role-mandoc-session");
        fs::write(
            &path,
            ".Dd August 19, 2026\n.Dt SYNOPSIS-ROLE 3\n.Os\n\
             .Sh SYNOPSIS\n.Fn synopsis_call \"int value\"\n\
             .Fo explicit_call\n.Fa \"int value\"\n.Fc\n\
             .Sh DESCRIPTION\n.Fn prose_call \"int value\"\n",
        )
        .expect("write synopsis-role source");

        let document = parse_file(&path, false).expect("parse synopsis-role source");
        fs::remove_file(path).expect("remove synopsis-role source");

        let synopsis_function = find_node(&document.root, &|node| {
            node.macro_name.as_deref() == Some("Fn") && node.line == 5
        })
        .expect("synopsis Fn");
        let explicit_function = find_node(&document.root, &|node| {
            node.macro_name.as_deref() == Some("Fo") && node.kind == NodeKind::Body
        })
        .expect("synopsis Fo body");
        let prose_function = find_node(&document.root, &|node| {
            node.macro_name.as_deref() == Some("Fn") && node.line == 10
        })
        .expect("prose Fn");

        assert!(synopsis_function.flags.synopsis_pretty);
        assert!(explicit_function.flags.synopsis_pretty);
        assert!(!prose_function.flags.synopsis_pretty);
    }

    #[test]
    fn parser_marks_tbl_text_block_cells() {
        let path = source_path("tbl-text-block");
        fs::write(
            &path,
            ".Dd August 19, 2026\n.Dt TBL-TEXT-BLOCK 3\n.Os\n.Sh NAME\n.Nm demo\n.Nd demo\n.Sh ATTRIBUTES\n.TS\nallbox;\nl l.\nInterface\tValue\nT{\n.Nm\nT}\tMT-Safe\n.TE\n",
        )
        .expect("write tbl text block source");
        let document = parse_file(&path, false).expect("parse tbl text block source");
        fs::remove_file(path).expect("remove tbl text block source");
        let row = find_node(&document.root, &|node| {
            node.kind == NodeKind::Table && node.table_cells.iter().any(|cell| cell.text_block)
        })
        .expect("tbl row containing a text block");
        assert_eq!(row.table_cells.len(), 2);
        assert_eq!(row.table_cells[0].text.as_deref(), Some(""));
        assert!(row.table_cells[0].text_block);
        assert!(!row.table_cells[1].text_block);
    }

    #[test]
    fn parser_marks_both_tbl_vertical_continuation_forms() {
        let document = Parser::default()
            .parse_bytes(
                "tbl-vertical-continuations.1",
                b".TH TBL-VERTICAL-CONTINUATIONS 1\n.SH TABLES\n.TS\nl l.\nfirst\tvalue\n\\^\tcontinued\n.TE\n.TS\nl l,\n^ l.\nfirst\tvalue\n\tcontinued\n.TE\n",
            )
            .expect("parse tbl vertical continuations")
            .document;

        let explicit = find_node(&document.root, &|node| {
            node.kind == NodeKind::Table && node.line == 6
        })
        .expect("explicit continuation row");
        assert!(explicit.table_cells[0].vertical_continuation);

        let layout = find_node(&document.root, &|node| {
            node.kind == NodeKind::Table && node.line == 12
        })
        .expect("layout continuation row");
        assert!(layout.table_cells[0].vertical_continuation);
    }

    #[test]
    fn parser_session_reports_file_errors_as_values() {
        let path = source_path("missing-mandoc-session");
        let error = parse_file(&path, false).expect_err("missing source must fail");

        assert_eq!(error.path, path);
        assert!(!error.message.is_empty());
    }

    #[test]
    fn parser_replaces_repeated_input_traps_without_losing_following_content() {
        let mut source = String::from(".TH TRAPS 1\n.SH BODY\n");
        for index in 0..1_024 {
            writeln!(&mut source, ".it 100000 trap-{index}").expect("write test trap");
        }
        source.push_str(".SH TAIL\nretained tail marker\n");
        let report = Parser::default()
            .parse_bytes("traps.1", source.as_bytes())
            .expect("replacing input traps must retain a finite parse");
        let mut visible = Vec::new();
        collect_visible_text(&report.document.root, &mut visible);
        assert!(visible.join(" ").contains("retained tail marker"));
    }

    #[test]
    fn parser_sessions_reset_unfinished_roff_requests() {
        let parser = Parser::default();
        for round in 0..32 {
            parser
                .parse_bytes(
                    format!("unfinished-trap-{round}.1"),
                    b".TH UNFINISHED-TRAP 1\n.it 2 br\n",
                )
                .expect("parse page ending with an armed input trap");
            parser
                .parse_bytes(
                    format!("unfinished-center-{round}.1"),
                    b".TH UNFINISHED-CENTER 1\n.ce 2\nonly-one-line\n",
                )
                .expect("parse page ending with an active centering request");
            let next = parser
                .parse_bytes(
                    format!("clean-session-{round}.1"),
                    b".TH CLEAN-SESSION 1\n.SH NAME\nclean-session \\- independent state\n",
                )
                .expect("subsequent parser session must remain independent");
            assert_eq!(
                next.document.metadata.title.as_deref(),
                Some("CLEAN-SESSION")
            );
        }
    }

    #[test]
    fn concurrent_callers_keep_thread_local_parser_state_isolated() {
        const WORKERS: usize = 8;
        const ROUNDS: usize = 16;

        let start = Arc::new(Barrier::new(WORKERS));
        let workers: Vec<_> = (0..WORKERS)
            .map(|worker| {
                let start = Arc::clone(&start);
                std::thread::spawn(move || {
                    start.wait();
                    for round in 0..ROUNDS {
                        let title = format!("TLS-{worker}-{round}");
                        let source = format!(
                            ".Dd August 19, 2026\n.Dt {title} 1\n.Os\n.Sh NAME\n.Nm tls-{worker}-{round}\n.Nd concurrent \\(em parser state\n.Sh SEE ALSO\n.Xr pthread_create 3\n"
                        );
                        let report = Parser::default()
                            .parse_bytes(format!("tls-{worker}-{round}.1"), source.as_bytes())
                            .expect("concurrent memory parse must succeed");
                        assert_eq!(report.document.metadata.title.as_deref(), Some(title.as_str()));
                        let name = format!("tls-{worker}-{round}");
                        assert_eq!(report.document.metadata.name.as_deref(), Some(name.as_str()));
                    }
                })
            })
            .collect();
        for worker in workers {
            worker.join().expect("parser worker must not panic");
        }
    }

    #[test]
    fn explicit_input_format_overrides_detection_without_changing_parse_options() {
        let options = ParseOptions::default();
        let man = Parser::new(options.clone()).with_input_format(InputFormat::Man);
        let mdoc = Parser::new(options.clone()).with_input_format(InputFormat::Mdoc);

        assert_eq!(man.options(), &options);
        assert_eq!(mdoc.options(), &options);
        assert_eq!(man.input_format(), InputFormat::Man);
        assert_eq!(mdoc.input_format(), InputFormat::Mdoc);
        assert_eq!(
            man.parse_bytes("forced-man.1", b"plain input\n")
                .expect("force man parser")
                .document
                .macro_set,
            MacroSet::Man
        );
        assert_eq!(
            mdoc.parse_bytes("forced-mdoc.1", b"plain input\n")
                .expect("force mdoc parser")
                .document
                .macro_set,
            MacroSet::Mdoc
        );
    }

    #[test]
    fn source_bundle_normalizes_current_directory_and_resolves_same_directory_includes() {
        let mut bundle = SourceBundle::new();
        bundle
            .insert("man1/alias.1", b".so man1/redirect.1\n".to_vec())
            .expect("insert root source");
        bundle
            .insert("man1/redirect.1", b".so ./target.1\n".to_vec())
            .expect("insert redirect source");
        bundle
            .insert(
                "man1/target.1",
                b".TH BUNDLE-TARGET 1\n.SH NAME\nbundle-target \\- virtual source\n".to_vec(),
            )
            .expect("insert target source");

        let report = Parser::default()
            .parse_bundle("man1/alias.1", &bundle)
            .expect("parse virtual source tree");
        assert_eq!(
            report.document.metadata.title.as_deref(),
            Some("BUNDLE-TARGET")
        );
    }

    #[test]
    fn source_bundle_missing_include_is_diagnostic_not_a_host_lookup() {
        let missing = format!("mant-bundle-missing-{}.1", process::id());
        let mut bundle = SourceBundle::new();
        bundle
            .insert(
                "man1/root.1",
                format!(".TH BUNDLE-ROOT 1\n.SH NAME\nbundle-root \\- isolated\n.so {missing}\n")
                    .into_bytes(),
            )
            .expect("insert isolated root");

        let report = Parser::default()
            .parse_bundle("man1/root.1", &bundle)
            .expect("missing include degrades to a diagnostic");
        assert_eq!(
            report.document.metadata.title.as_deref(),
            Some("BUNDLE-ROOT")
        );
        assert!(
            report
                .diagnostics
                .iter()
                .any(|diagnostic| diagnostic.message.contains(&missing)),
            "missing bundle source must be reported: {:?}",
            report.diagnostics
        );
    }

    #[test]
    fn concurrent_source_bundles_keep_virtual_trees_isolated() {
        const WORKERS: usize = 8;
        let start = Arc::new(Barrier::new(WORKERS));
        let workers: Vec<_> = (0..WORKERS)
            .map(|worker| {
                let start = Arc::clone(&start);
                std::thread::spawn(move || {
                    let title = format!("BUNDLE-{worker}");
                    let mut bundle = SourceBundle::new();
                    bundle
                        .insert("man1/alias.1", b".so target.1\n".to_vec())
                        .expect("insert alias");
                    bundle
                        .insert(
                            "man1/target.1",
                            format!(".TH {title} 1\n.SH NAME\nbundle-{worker} \\- isolated\n")
                                .into_bytes(),
                        )
                        .expect("insert worker target");
                    start.wait();
                    for _ in 0..16 {
                        let report = Parser::default()
                            .parse_bundle("man1/alias.1", &bundle)
                            .expect("parse concurrent bundle");
                        assert_eq!(
                            report.document.metadata.title.as_deref(),
                            Some(title.as_str())
                        );
                    }
                })
            })
            .collect();
        for worker in workers {
            worker.join().expect("bundle worker must not panic");
        }
    }

    #[cfg(unix)]
    #[test]
    fn concurrent_source_tree_includes_keep_each_root_isolated() {
        const WORKERS: usize = 8;

        let root = std::env::temp_dir().join(format!(
            "libmandoc-rs-thread-local-includes-{}",
            process::id()
        ));
        let aliases: Vec<_> = (0..WORKERS)
            .map(|worker| {
                let tree = root.join(format!("tree-{worker}")).join("man1");
                fs::create_dir_all(&tree).expect("create isolated manual tree");
                fs::write(
                    tree.join("target.1"),
                    format!(
                        ".Dd August 19, 2026\n.Dt TLS-INCLUDE-{worker} 1\n.Os\n.Sh NAME\n.Nm tls-include-{worker}\n.Nd isolated include tree\n"
                    ),
                )
                .expect("write included manual source");
                let alias = tree.join("alias.1");
                fs::write(&alias, ".so target.1\n").expect("write manual redirect");
                alias
            })
            .collect();

        let start = Arc::new(Barrier::new(WORKERS));
        let workers: Vec<_> = aliases
            .into_iter()
            .enumerate()
            .map(|(worker, alias)| {
                let start = Arc::clone(&start);
                std::thread::spawn(move || {
                    start.wait();
                    let document = parse_file(&alias, true)
                        .expect("concurrent source-tree include must succeed");
                    assert_eq!(
                        document.metadata.title.as_deref(),
                        Some(format!("TLS-INCLUDE-{worker}").as_str())
                    );
                })
            })
            .collect();
        for worker in workers {
            worker.join().expect("include worker must not panic");
        }
        fs::remove_dir_all(root).expect("remove isolated manual trees");
    }

    #[cfg(unix)]
    #[test]
    fn source_relative_includes_do_not_change_process_cwd() {
        let root =
            std::env::temp_dir().join(format!("libmandoc-rs-relative-include-{}", process::id()));
        fs::create_dir_all(&root).expect("create temporary manual tree");
        let target = root.join("minimal-mdoc.1");
        fs::write(
            &target,
            ".Dd July 19, 2026\n.Dt INCLUDE-FIXTURE 1\n.Os\n.Sh NAME\ninclude-fixture\n",
        )
        .expect("write included source");
        let alias = root.join("alias-mdoc.1");
        fs::write(&alias, ".so minimal-mdoc.1\n").expect("write alias source");
        let cwd = std::env::current_dir().expect("current directory before parse");

        let document = parse_file(&alias, true).expect("resolve source-relative include");
        fs::remove_dir_all(root).expect("remove temporary manual tree");

        assert_eq!(document.macro_set, MacroSet::Mdoc);
        assert_eq!(document.metadata.title.as_deref(), Some("INCLUDE-FIXTURE"));
        assert_eq!(
            std::env::current_dir().expect("current directory after parse"),
            cwd
        );
    }

    #[test]
    fn parser_accepts_owned_bytes_and_detects_zstd_frames() {
        let source = b".TH BYTES 1\n.SH NAME\nbytes \\- parser input\n";
        let plain = Parser::default()
            .parse_bytes("memory.1", source)
            .expect("parse plain byte input");
        assert_eq!(plain.document.metadata.title.as_deref(), Some("BYTES"));

        let compressed = zstd::stream::encode_all(source.as_slice(), 1).expect("compress source");
        let zstd = Parser::default()
            .parse_bytes("memory.1", &compressed)
            .expect("detect and parse zstd byte input");
        assert_eq!(zstd.document.metadata.title.as_deref(), Some("BYTES"));
    }

    #[test]
    fn parser_only_expands_includes_when_policy_allows_a_root() {
        let base = std::env::temp_dir().join(format!(
            "libmandoc-rs-explicit-include-root-{}",
            process::id()
        ));
        let includes = base.join("includes");
        fs::create_dir_all(&includes).expect("create explicit include root");
        fs::write(
            includes.join("target.1"),
            ".TH EXPLICIT-ROOT 1\n.SH NAME\nexplicit-root \\- include fixture\n",
        )
        .expect("write included source");
        let alias = base.join("alias.1");
        fs::write(&alias, ".so target.1\n").expect("write alias source");

        let denied = Parser::default()
            .parse_file(&alias)
            .expect("parse alias without include expansion");
        let expanded = Parser::new(ParseOptions {
            includes: IncludePolicy::Root(includes),
            compression: Compression::Auto,
        })
        .parse_file(&alias)
        .expect("resolve alias against explicit root");
        fs::remove_dir_all(base).expect("remove temporary manual tree");

        assert_ne!(
            denied.document.metadata.title.as_deref(),
            Some("EXPLICIT-ROOT")
        );
        assert_eq!(
            expanded.document.metadata.title.as_deref(),
            Some("EXPLICIT-ROOT")
        );
    }

    #[test]
    fn explicit_root_resolves_compressed_includes_beside_the_source() {
        use std::io::Write;

        use flate2::{Compression as GzipCompression, write::GzEncoder};

        let root = std::env::temp_dir().join(format!(
            "libmandoc-rs-compressed-relative-include-{}",
            process::id()
        ));
        let man1 = root.join("man1");
        fs::create_dir_all(&man1).expect("create explicit manual section");
        let mut target = GzEncoder::new(Vec::new(), GzipCompression::fast());
        target
            .write_all(b".SH INCLUDED\ncompressed relative content\n")
            .expect("compress included source");
        fs::write(
            man1.join("target.1.gz"),
            target.finish().expect("finish included source"),
        )
        .expect("write compressed included source");
        let mut explicit = GzEncoder::new(Vec::new(), GzipCompression::fast());
        explicit
            .write_all(b".SH EXPLICIT\nexplicit compressed content\n")
            .expect("compress explicitly named include");
        fs::write(
            man1.join("explicit.1.gz"),
            explicit.finish().expect("finish explicit include"),
        )
        .expect("write explicitly named compressed include");
        let source = man1.join("source.1.gz");
        let mut source_bytes = GzEncoder::new(Vec::new(), GzipCompression::fast());
        source_bytes
            .write_all(
                b".TH SOURCE 1\n.SH NAME\nsource \\- include fixture\n.so target.1\n.so explicit.1.gz\n",
            )
            .expect("compress source manual");
        fs::write(
            &source,
            source_bytes.finish().expect("finish source manual"),
        )
        .expect("write source manual");

        let report = Parser::new(ParseOptions {
            includes: IncludePolicy::Root(root.clone()),
            compression: Compression::Auto,
        })
        .parse_file(&source)
        .expect("resolve compressed include beside source");
        fs::remove_dir_all(root).expect("remove temporary manual tree");

        let mut visible = Vec::new();
        collect_visible_text(&report.document.root, &mut visible);
        assert!(visible.contains(&"compressed relative content"));
        assert!(visible.contains(&"explicit compressed content"));
        assert!(
            report
                .diagnostics
                .iter()
                .all(|diagnostic| { !diagnostic.message.contains(".so request failed") })
        );
    }

    #[test]
    fn explicit_include_root_does_not_fall_back_to_process_cwd() {
        let identifier = format!("libmandoc-rs-ambient-{}", process::id());
        let cwd_target = std::env::current_dir()
            .expect("read test cwd")
            .join(format!("{identifier}.1"));
        fs::write(
            &cwd_target,
            ".TH AMBIENT 1\n.SH NAME\nambient \\- must not be included\n",
        )
        .expect("write ambient source");

        let base = std::env::temp_dir().join(format!("{identifier}-root"));
        fs::create_dir_all(&base).expect("create empty include root");
        let alias = base.join("alias.1");
        fs::write(&alias, format!(".so {identifier}.1\n")).expect("write alias source");

        let result = Parser::new(ParseOptions {
            includes: IncludePolicy::Root(base.clone()),
            compression: Compression::Auto,
        })
        .parse_file(&alias);
        fs::remove_file(cwd_target).expect("remove ambient source");
        fs::remove_dir_all(base).expect("remove temporary manual tree");

        match result {
            Ok(report) => assert_ne!(report.document.metadata.title.as_deref(), Some("AMBIENT")),
            Err(error) => assert_eq!(error.kind, super::ParseErrorKind::Parse),
        }
    }

    #[cfg(windows)]
    #[test]
    fn windows_relative_source_paths_resolve_beside_a_relative_root() {
        let root = std::path::PathBuf::from("target").join(format!(
            "libmandoc-rs-relative-windows-root-{}",
            process::id()
        ));
        let section = root.join("man1");
        fs::create_dir_all(&section).expect("create relative Windows root");
        fs::write(
            section.join("target.1"),
            ".TH RELATIVE-WINDOWS-ROOT 1\n.SH NAME\nrelative-root \\- included\n",
        )
        .expect("write relative Windows include target");
        let alias = section.join("alias.1");
        fs::write(&alias, ".so target.1\n").expect("write relative Windows alias");

        let report = Parser::new(ParseOptions {
            includes: IncludePolicy::Root(root.clone()),
            compression: Compression::Plain,
        })
        .parse_file(&alias)
        .expect("resolve beside a relative source below a relative root");
        fs::remove_dir_all(root).expect("remove relative Windows root");

        assert_eq!(
            report.document.metadata.title.as_deref(),
            Some("RELATIVE-WINDOWS-ROOT")
        );
        assert!(
            report
                .diagnostics
                .iter()
                .all(|diagnostic| !diagnostic.message.contains(".so request failed"))
        );
    }

    #[cfg(windows)]
    #[test]
    fn windows_source_paths_resolve_beside_a_differently_cased_root() {
        let root =
            std::env::temp_dir().join(format!("libmandoc-rs-cased-windows-root-{}", process::id()));
        let section = root.join("man1");
        fs::create_dir_all(&section).expect("create cased Windows root");
        fs::write(
            section.join("target.1"),
            ".TH CASED-WINDOWS-ROOT 1\n.SH NAME\ncased-root \\- included\n",
        )
        .expect("write cased include target");
        let alias = section.join("alias.1");
        fs::write(&alias, ".so ./target.1\n").expect("write cased alias");
        let differently_cased_root = std::path::PathBuf::from(
            root.to_string_lossy()
                .chars()
                .map(|character| {
                    if character.is_ascii_lowercase() {
                        character.to_ascii_uppercase()
                    } else {
                        character.to_ascii_lowercase()
                    }
                })
                .collect::<String>(),
        );

        let report = Parser::new(ParseOptions {
            includes: IncludePolicy::Root(differently_cased_root),
            compression: Compression::Plain,
        })
        .parse_file(&alias)
        .expect("resolve beside a source through a differently cased root");
        fs::remove_dir_all(root).expect("remove cased Windows root");

        assert_eq!(
            report.document.metadata.title.as_deref(),
            Some("CASED-WINDOWS-ROOT"),
            "diagnostics: {:#?}",
            report.diagnostics
        );
    }

    #[cfg(unix)]
    #[test]
    fn explicit_include_root_rejects_linked_target_files() {
        use std::os::unix::fs::symlink;

        let base = std::env::temp_dir().join(format!(
            "libmandoc-rs-linked-include-target-{}",
            process::id()
        ));
        let includes = base.join("includes");
        fs::create_dir_all(&includes).expect("create explicit include root");
        let outside = base.join("outside.1");
        fs::write(
            &outside,
            ".TH OUTSIDE 1\n.SH NAME\noutside \\- must not be included\n",
        )
        .expect("write outside target");
        symlink(&outside, includes.join("target.1")).expect("link target outside root");
        let alias = base.join("alias.1");
        fs::write(&alias, ".so target.1\n").expect("write alias source");

        let result = Parser::new(ParseOptions {
            includes: IncludePolicy::Root(includes),
            compression: Compression::Auto,
        })
        .parse_file(&alias);
        fs::remove_dir_all(base).expect("remove temporary manual tree");

        match result {
            Ok(report) => assert_ne!(report.document.metadata.title.as_deref(), Some("OUTSIDE")),
            Err(error) => assert_eq!(error.kind, super::ParseErrorKind::Parse),
        }
    }

    #[cfg(unix)]
    #[test]
    fn explicit_include_root_rejects_linked_intermediate_directories() {
        use std::os::unix::fs::symlink;

        let base = std::env::temp_dir().join(format!(
            "libmandoc-rs-linked-include-directory-{}",
            process::id()
        ));
        let includes = base.join("includes");
        let outside = base.join("outside");
        fs::create_dir_all(&includes).expect("create explicit include root");
        fs::create_dir_all(&outside).expect("create outside directory");
        fs::write(
            outside.join("target.1"),
            ".TH OUTSIDE-DIR 1\n.SH NAME\noutside-dir \\- must not be included\n",
        )
        .expect("write outside target");
        fs::write(outside.join("alias.1"), ".so target.1\n").expect("write alias source");
        symlink(&outside, includes.join("linked")).expect("link directory outside root");
        let alias = includes.join("linked/alias.1");

        let result = Parser::new(ParseOptions {
            includes: IncludePolicy::Root(includes),
            compression: Compression::Auto,
        })
        .parse_file(&alias);
        fs::remove_dir_all(base).expect("remove temporary manual tree");

        match result {
            Ok(report) => assert_ne!(
                report.document.metadata.title.as_deref(),
                Some("OUTSIDE-DIR")
            ),
            Err(error) => assert_eq!(error.kind, super::ParseErrorKind::Parse),
        }
    }

    #[cfg(windows)]
    #[test]
    fn explicit_include_root_rejects_windows_reparse_targets() {
        use std::os::windows::fs::symlink_file;

        let base = std::env::temp_dir().join(format!(
            "libmandoc-rs-windows-linked-include-target-{}",
            process::id()
        ));
        let includes = base.join("includes");
        fs::create_dir_all(&includes).expect("create explicit include root");
        let target = includes.join("real.1");
        fs::write(
            &target,
            ".TH REPARSE-TARGET 1\n.SH NAME\nreparse-target \\- must not be included\n",
        )
        .expect("write in-root target");
        if let Err(error) = symlink_file(&target, includes.join("target.1")) {
            let privilege_not_held = error
                .raw_os_error()
                .and_then(|code| u32::try_from(code).ok())
                == Some(ERROR_PRIVILEGE_NOT_HELD);
            if error.kind() == std::io::ErrorKind::PermissionDenied || privilege_not_held {
                fs::remove_dir_all(base).expect("remove skipped reparse fixture");
                return;
            }
            panic!("create Windows file link: {error}");
        }
        let alias = base.join("alias.1");
        fs::write(&alias, ".so target.1\n").expect("write alias source");

        let result = Parser::new(ParseOptions {
            includes: IncludePolicy::Root(includes),
            compression: Compression::Auto,
        })
        .parse_file(&alias);
        fs::remove_dir_all(base).expect("remove temporary manual tree");

        match result {
            Ok(report) => {
                assert_ne!(
                    report.document.metadata.title.as_deref(),
                    Some("REPARSE-TARGET")
                );
                assert!(
                    report
                        .diagnostics
                        .iter()
                        .any(|diagnostic| diagnostic.message.contains(".so request failed"))
                );
            }
            Err(error) => assert_eq!(error.kind, super::ParseErrorKind::Parse),
        }
    }

    #[cfg(windows)]
    #[test]
    fn explicit_include_root_rejects_windows_path_namespaces() {
        let root = std::env::temp_dir().join(format!(
            "libmandoc-rs-windows-path-namespace-{}",
            process::id()
        ));
        fs::create_dir_all(&root).expect("create explicit include root");
        for target in [
            "C:/outside.1",
            "target.1:stream",
            r"\\server\share\outside.1",
        ] {
            let report = Parser::new(ParseOptions {
                includes: IncludePolicy::Root(root.clone()),
                compression: Compression::Plain,
            })
            .parse_bytes("alias.1", format!(".so {target}\n").as_bytes())
            .expect("return a finite document for a denied include");
            assert!(
                report
                    .diagnostics
                    .iter()
                    .any(|diagnostic| diagnostic.message.contains(".so request failed")),
                "denied Windows namespace must remain observable: {target}"
            );
        }
        fs::remove_dir_all(root).expect("remove explicit include root");
    }

    #[cfg(windows)]
    #[test]
    fn windows_explicit_root_supports_unicode_paths_and_concurrent_sessions() {
        const WORKERS: usize = 8;

        let base =
            std::env::temp_dir().join(format!("libmandoc-rs-windows-root-日本-{}", process::id()));
        let roots = (0..WORKERS)
            .map(|worker| {
                let root = base.join(format!("文档-{worker}"));
                let section = root.join("章节");
                fs::create_dir_all(&section).expect("create Unicode include root");
                fs::write(
                    section.join("target.1"),
                    format!(".TH WINDOWS-ROOT-{worker} 1\n.SH NAME\nroot-{worker} \\- isolated\n"),
                )
                .expect("write isolated include target");
                (root, section.join("alias.1"))
            })
            .collect::<Vec<_>>();
        let start = Arc::new(Barrier::new(WORKERS));
        let workers = roots
            .into_iter()
            .enumerate()
            .map(|(worker, (root, alias))| {
                let start = Arc::clone(&start);
                std::thread::spawn(move || {
                    start.wait();
                    for _ in 0..100 {
                        let report = Parser::new(ParseOptions {
                            includes: IncludePolicy::Root(root.clone()),
                            compression: Compression::Plain,
                        })
                        .parse_bytes(&alias, b".so target.1\n")
                        .expect("resolve isolated Windows root");
                        assert_eq!(
                            report.document.metadata.title.as_deref(),
                            Some(format!("WINDOWS-ROOT-{worker}").as_str())
                        );
                    }
                })
            })
            .collect::<Vec<_>>();
        for worker in workers {
            worker.join().expect("root resolver worker must not panic");
        }
        fs::remove_dir_all(base).expect("remove concurrent Windows roots");
    }

    #[test]
    fn parser_returns_structured_nonfatal_diagnostics() {
        let report = Parser::default()
            .parse_bytes(
                "diagnostics.1",
                b".Dd July 19, 2026\n.Dt BAD 1\n.Os\n.Sh NAME\n.Nm bad\n.ab\n",
            )
            .expect("return best-effort document");

        assert!(
            report
                .diagnostics
                .iter()
                .any(|diagnostic| diagnostic.level == super::DiagnosticLevel::Unsupported)
        );
    }

    #[test]
    fn coding_declarations_never_disable_available_byte_decoding() {
        for declaration in ["latin-1", "ISO-8859-9"] {
            let mut source =
                format!(".\\\" -*- coding: {declaration} -*-\n.TH CD 1\n.SH BODY\nText: ")
                    .into_bytes();
            source.extend_from_slice(b"e\xf0itmen ba\xfelat\xfdr.\n");
            let report = Parser::default()
                .parse_bytes("coding.1", &source)
                .expect("unsupported coding declaration retains a best-effort parse");
            let mut visible = Vec::new();
            collect_visible_text(&report.document.root, &mut visible);
            let visible = visible.join(" ");
            assert!(
                visible.contains("e\\[u00F0]itmen ba\\[u00FE]lat\\[u00FD]r."),
                "{declaration}: {visible}"
            );
            assert!(!visible.contains('?'), "{declaration}: {visible}");
        }
    }

    #[test]
    fn parser_decodes_truncated_utf8_tails_without_reading_past_memory_input() {
        for byte in [0xc2, 0xe2, 0xf0] {
            let mut source = b".TH TRUNCATED 1\n.SH BODY\n".to_vec();
            source.push(byte);
            let source = source.into_boxed_slice();
            let report = Parser::default()
                .parse_bytes("truncated.1", &source)
                .expect("truncated UTF-8 tail must retain a best-effort parse");
            let mut visible = Vec::new();
            collect_visible_text(&report.document.root, &mut visible);
            assert!(
                visible.join(" ").contains(&format!("\\[u{byte:04X}]")),
                "byte {byte:#x} was not preserved as Latin-1: {visible:?}"
            );
        }
    }

    #[test]
    fn infinite_while_loop_is_bounded_with_a_diagnostic() {
        let report = Parser::default()
            .parse_bytes(
                "loop.1",
                b".TH LOOP 1\n.SH BODY\n.while 1 \\{\\\nloop\n.\\}\n.SH AFTER\nretained\n",
            )
            .expect("return the finite prefix of a looping manual");
        let mut visible = Vec::new();
        collect_visible_text(&report.document.root, &mut visible);

        assert!(
            report
                .diagnostics
                .iter()
                .any(|diagnostic| diagnostic.message.contains("infinite loop")),
            "loop budget must remain observable: {:?}",
            report.diagnostics
        );
        assert!(
            visible.contains(&"retained"),
            "parsing must continue after the bounded loop"
        );
        assert!(
            visible.iter().filter(|value| **value == "loop").count() <= 10_000,
            "the loop body must not exceed the documented budget"
        );
    }

    #[test]
    fn aggregate_while_replays_are_bounded_across_statements() {
        let mut source =
            String::from(".TH AGGREGATE 1\n.SH BODY\n.de M\n.while 1 \\{\\\nreplayed\n.\\}\n..\n");
        for _ in 0..3 {
            source.push_str(".M\n");
        }
        source.push_str(".SH AFTER\nretained aggregate tail\n");

        let report = Parser::default()
            .parse_bytes("aggregate.1", source.as_bytes())
            .expect("return the finite prefix across multiple loops");
        let mut visible = Vec::new();
        collect_visible_text(&report.document.root, &mut visible);

        let replayed = visible.iter().filter(|value| **value == "replayed").count();
        assert!(
            replayed <= 10_003,
            "three loop statements must share one replay budget: {replayed}"
        );
        assert!(visible.contains(&"retained aggregate tail"));
        assert!(
            report
                .diagnostics
                .iter()
                .any(|diagnostic| diagnostic.message.contains("infinite loop")),
            "aggregate exhaustion must remain observable: {:?}",
            report.diagnostics
        );
    }

    #[test]
    fn recursive_user_macro_retains_content_after_the_cycle() {
        let report = Parser::default()
            .parse_bytes(
                "recursive.7",
                b".TH RECUR 7\n.SH NAME\nrecur \\- x\n.de R\n.  R\n..\n.R\n.SH DESC\ntail marker ZZTAIL\n",
            )
            .expect("return the complete document around recursive macro input");
        let mut visible = Vec::new();
        collect_visible_text(&report.document.root, &mut visible);

        assert!(
            report
                .diagnostics
                .iter()
                .any(|diagnostic| diagnostic.message.contains("infinite loop")),
            "recursion limit must remain observable: {:?}",
            report.diagnostics
        );
        let visible = visible.join(" ");
        assert!(visible.contains("recur"), "{visible}");
        assert!(visible.contains("tail marker ZZTAIL"), "{visible}");
    }

    #[test]
    fn deeply_nested_callable_mdoc_macros_are_bounded_in_the_native_parser() {
        let mut source = String::from(
            ".Dd August 24, 2026\n.Dt DEEP-MDOC 1\n.Os\n.Sh NAME\n.Nm deep-mdoc\n.Nd bounded callable macros\n.Sh BODY\n.Op ",
        );
        for _ in 0..50_000 {
            source.push_str("Op ");
        }
        source.push_str("nested tail marker\n.Sh AFTER\nretained document tail\n");

        let report = Parser::default()
            .parse_bytes("deep-mdoc.1", source.as_bytes())
            .expect("return a finite document for deeply nested callable macros");
        let mut visible = Vec::new();
        collect_visible_text(&report.document.root, &mut visible);
        let visible = visible.join(" ");

        assert!(
            report
                .diagnostics
                .iter()
                .any(|diagnostic| diagnostic.message.contains("infinite loop")),
            "macro depth exhaustion must remain observable: {:?}",
            report.diagnostics
        );
        assert!(visible.contains("nested tail marker"), "{visible}");
        assert!(visible.contains("retained document tail"), "{visible}");
    }

    #[test]
    fn deeply_nested_input_is_bounded_instead_of_overflowing_the_stack() {
        // Far more nesting than the copy cap; the parse must return a finite
        // tree rather than recursing without limit while copying it out.
        let depth = 5_000;
        let mut source = String::from(".TH DEEP 1\n.SH BODY\n");
        for _ in 0..depth {
            source.push_str(".RS\n");
        }
        source.push_str("deep\n");

        let report = Parser::default()
            .parse_bytes("deep.1", source.as_bytes())
            .expect("deeply nested source parses");

        // The owned tree stays well under the input nesting, proving the copy
        // stopped descending at the cap.
        assert!(
            measured_depth(&report.document.root) <= 300,
            "tree depth must be bounded by the copy cap"
        );
        assert!(
            report
                .diagnostics
                .iter()
                .any(|diagnostic| diagnostic.code() == Some(DiagnosticCode::SyntaxTreeDepthLimit)),
            "node truncation must remain observable: {:?}",
            report.diagnostics
        );
    }

    #[test]
    fn deeply_nested_equation_is_bounded_instead_of_overflowing_the_stack() {
        // Braces nest eqn boxes, a recursive walk the node-copy cap never
        // enters: copy_equation descends box->first without limit, so a
        // pathologically nested equation overflows the stack while flattening
        // it. Each `sqrt` level emits text, so an unbounded render would grow
        // the string with the input depth; a bounded one plateaus at the cap.
        let depth = 5_000;
        let mut equation = String::new();
        for _ in 0..depth {
            equation.push_str("sqrt { ");
        }
        equation.push('x');
        for _ in 0..depth {
            equation.push_str(" }");
        }
        let source = format!(".TH DEEP 1\n.SH BODY\n.EQ\n{equation}\n.EN\n");

        let report = Parser::default()
            .parse_bytes("deep-eqn.1", source.as_bytes())
            .expect("deeply nested equation parses");

        let node = find_kind(&report.document.root, NodeKind::Equation).expect("equation node");
        let rendered = node.equation.as_deref().expect("equation text");
        // The render stopped at the cap: the flattened text is far shorter than
        // the ~30k chars all 5000 `sqrt` levels would emit, proving it did not
        // recurse through every box (and so could not overflow the stack).
        assert!(
            rendered.len() < 2_000,
            "equation text must be bounded by the copy cap, got {} bytes",
            rendered.len()
        );
        assert!(
            report
                .diagnostics
                .iter()
                .any(|diagnostic| diagnostic.code() == Some(DiagnosticCode::EquationTreeDepthLimit)),
            "equation truncation must remain observable: {:?}",
            report.diagnostics
        );
    }

    #[cfg(feature = "serde")]
    #[test]
    fn serde_feature_round_trips_the_public_parse_report() {
        let report = Parser::default()
            .parse_bytes("serde.1", b".TH SERDE 1\n.SH NAME\nserde \\- fixture\n")
            .expect("parse source for serialization");
        let encoded = serde_json::to_string(&report).expect("serialize parse report");
        let decoded: super::ParseReport =
            serde_json::from_str(&encoded).expect("deserialize parse report");

        assert_eq!(decoded, report);
    }

    #[cfg(feature = "serde")]
    #[test]
    fn serde_diagnostics_keep_the_patch_compatible_field_shape() {
        let diagnostic = Diagnostic {
            level: DiagnosticLevel::Warning,
            message: crate::diagnostics::SYNTAX_TREE_DEPTH_MESSAGE.to_owned(),
            location: None,
        };
        let encoded = serde_json::to_value(&diagnostic).expect("serialize diagnostic");

        assert_eq!(
            diagnostic.code(),
            Some(DiagnosticCode::SyntaxTreeDepthLimit)
        );
        assert!(encoded.get("code").is_none());
        assert_eq!(
            serde_json::from_value::<Diagnostic>(encoded).expect("deserialize diagnostic"),
            diagnostic
        );
    }

    #[test]
    fn parser_copies_normalized_list_and_display_attributes() {
        let path = source_path("normalized-mandoc-session");
        fs::write(
            &path,
            ".Dd July 19, 2026\n.Dt NORMALIZED 1\n.Os\n.Sh ITEMS\n\
             .Bl -tag -compact -offset indent -width 12n\n.It item\nfirst\n.El\n\
             .Bd -literal -offset indent\ncode line\n.Ed\n",
        )
        .expect("write normalized mdoc source");

        let document = parse_file(&path, false).expect("parse normalized mdoc source");
        fs::remove_file(path).expect("remove normalized mdoc source");

        let list = find_macro(&document.root, "Bl").expect("normalized list node");
        assert_eq!(list.list_kind, Some(NormalizedListKind::Definition));
        assert!(list.compact);
        assert_eq!(list.offset.as_deref(), Some("indent"));
        assert_eq!(list.width.as_deref(), Some("12n"));
        let display = find_macro(&document.root, "Bd").expect("normalized display node");
        assert_eq!(display.display_kind, Some(DisplayKind::Literal));
        assert_eq!(display.offset.as_deref(), Some("indent"));
    }

    #[test]
    fn parser_retains_column_list_cells() {
        let report = Parser::default()
            .parse_bytes(
                "columns.3",
                b".Dd August 19, 2026\n.Dt COLUMNS 3\n.Os\n.Sh DESCRIPTION\n\
.Bl -column name type description\n.It Dv CLSET_TIMEOUT Ta \"struct timeval *\" Ta \"set total timeout\"\n.El\n",
            )
            .expect("parse mdoc column list");
        let item = find_macro(&report.document.root, "It").expect("column item");
        let bodies = item
            .children
            .iter()
            .filter(|child| child.kind == NodeKind::Body)
            .collect::<Vec<_>>();

        assert_eq!(bodies.len(), 3);
        assert_eq!(
            bodies
                .iter()
                .map(|body| {
                    body.children
                        .iter()
                        .flat_map(|child| child.children.iter())
                        .chain(body.children.iter())
                        .filter_map(|child| child.text.as_deref())
                        .collect::<Vec<_>>()
                })
                .collect::<Vec<_>>(),
            [
                vec!["CLSET_TIMEOUT"],
                vec!["struct timeval *"],
                vec!["set total timeout"],
            ]
        );
    }

    #[test]
    fn parser_copies_normalized_font_and_author_modes() {
        let report = Parser::default()
            .parse_bytes(
                "normalized-modes.1",
                b".Dd July 19, 2026\n.Dt NORMALIZED-MODES 1\n.Os\n.Sh AUTHORS\n\
.An -split\n.An Alice Example\n.An -nosplit\n.An Bob Example\n\
.Sh DESCRIPTION\n.Bf -literal\nliteral text\n.Ef\n",
            )
            .expect("parse normalized mdoc modes");

        let split = find_node(&report.document.root, &|node| {
            node.macro_name.as_deref() == Some("An") && node.author_mode == Some(AuthorMode::Split)
        });
        let no_split = find_node(&report.document.root, &|node| {
            node.macro_name.as_deref() == Some("An")
                && node.author_mode == Some(AuthorMode::NoSplit)
        });
        let font = find_macro(&report.document.root, "Bf").expect("Bf node");

        assert!(split.is_some());
        assert!(no_split.is_some());
        assert_eq!(font.font, Some(NormalizedFont::Literal));
    }

    #[test]
    fn parser_resolves_stateful_mdoc_enclosures_onto_each_use() {
        let report = Parser::default()
            .parse_bytes(
                "normalized-enclosure.1",
                b".Dd August 17, 2026\n.Dt ENCLOSURE 1\n.Os\n.Sh DESCRIPTION\n\
.Es << >>\n.En value\n",
            )
            .expect("parse stateful mdoc enclosure");

        let enclosure = find_macro(&report.document.root, "En")
            .and_then(|node| node.enclosure.as_ref())
            .expect("resolved En delimiters");
        assert_eq!(enclosure.opening, "<<");
        assert_eq!(enclosure.closing.as_deref(), Some(">>"));
    }

    #[test]
    fn parser_copies_table_cells_and_equation_text() {
        let path = source_path("structured-payload-mandoc-session");
        fs::write(
            &path,
            ".TH PAYLOAD 1\n.SH TABLE\n.TS\ntab(|);\nl r.\nleft|right\n.TE\n\
             .SH EQUATION\n.EQ\nx sup 2\n.EN\n",
        )
        .expect("write table and equation source");

        let document = parse_file(&path, false).expect("parse table and equation source");
        fs::remove_file(path).expect("remove table and equation source");

        let table = find_kind(&document.root, NodeKind::Table).expect("table row node");
        assert_eq!(table.table_cells.len(), 2);
        assert_eq!(table.table_cells[0].text.as_deref(), Some("left"));
        assert_eq!(table.table_cells[1].alignment, TableAlignment::Right);
        let equation = find_kind(&document.root, NodeKind::Equation).expect("equation node");
        assert!(
            equation
                .equation
                .as_deref()
                .is_some_and(|value| value.contains('x'))
        );
    }

    #[test]
    fn parser_copies_validated_same_document_navigation() {
        let path = source_path("navigation-mandoc-session");
        fs::write(
            &path,
            ".Dd July 19, 2026\n.Dt NAVIGATION 1\n.Os\n.Sh FIRST\n\
             See\n\
             .Sx TARGET\n\
             for details.\n\
             .Tg explicit-target\n\
             .Fl x\n\
             .Sh TARGET\nTarget text.\n",
        )
        .expect("write navigation mdoc source");

        let document = parse_file(&path, false).expect("parse navigation mdoc source");
        fs::remove_file(path).expect("remove navigation mdoc source");

        assert!(find_macro(&document.root, "Sx").is_some());
        let explicit_target = find_node(&document.root, &|node| {
            node.flags.deep_link_target && node.tag.as_deref() == Some("explicit-target")
        });
        let explicit_target = explicit_target.expect("Tg must annotate its resolved destination");
        assert!(explicit_target.flags.permalink);
    }

    #[test]
    fn parser_normalizes_internal_sentinels_in_validated_tags() {
        let report = Parser::default()
            .parse_bytes(
                "tag-sentinel.1",
                b".TH TAG-SENTINEL 1\n.SH OPTIONS\n.TP\n\\fB\\-\\-new-window\\fR\nOpen a window.\n",
            )
            .expect("parse tagged paragraph");
        let tagged = find_node(&report.document.root, &|node| {
            node.tag
                .as_deref()
                .is_some_and(|tag| tag.contains("new-window"))
        });

        assert!(
            tagged.is_some(),
            "normalized TP tag must remain addressable"
        );
        assert!(
            find_node(&report.document.root, &|node| {
                node.tag.as_deref().is_some_and(|tag| {
                    tag.chars()
                        .any(|character| ['\u{1d}', '\u{1e}', '\u{1f}'].contains(&character))
                })
            })
            .is_none()
        );
    }
}