- add macos memory tester

- fix coverage of js tests

Author: FrederickEngelhardt

.gitignore

@@ -73,4 +73,7 @@ js/domain-results.*
 js/domain-check-results.*
 
 js/domains-to-test.*
-domains-to-test.*
+domains-to-test.*
+
+# tsconfig
+tsconfig.tsbuildinfo

.pnp.cjs

@@ -62,8 +62,7 @@ describe("auditAutoApprove", () => {
 		vi.clearAllMocks();
 	});
 
-	afterAll(() => {
-	});
+	afterAll(() => {});
 
 	it("should pass when no risky patterns found", async () => {
 		// Mock file structure - return proper Dirent-like objects
@@ -153,6 +152,63 @@ describe("auditAutoApprove", () => {
 		);
 	});
 
+	it("should detect risky patterns in user settings", async () => {
+		mockReaddirSync.mockImplementation((dir: string, options?: any) => {
+			if (dir === "/test") {
+				return [
+					{ name: ".vscode", isDirectory: () => true, isFile: () => false },
+				] as any;
+			}
+			if (dir === "/test/.vscode") {
+				return [
+					{
+						name: "settings.json",
+						isDirectory: () => false,
+						isFile: () => true,
+					},
+				] as any;
+			}
+			return [];
+		});
+
+		mockReadFileSync.mockImplementation((path: string) => {
+			if (
+				path ===
+				"/mock-home/Library/Application Support/Code/User/settings.json"
+			) {
+				return JSON.stringify({
+					"chat.tools.terminal.autoApprove": {
+						":risky-task": true,
+					},
+				});
+			}
+			if (path === "/test/.vscode/settings.json") {
+				return JSON.stringify({
+					"chat.tools.terminal.autoApprove": {
+						":safe-task": true,
+					},
+				});
+			}
+			return "{}";
+		});
+
+		await auditAutoApprove({
+			allowPrefix: "safe",
+			failOnRisk: false,
+			json: false,
+			silent: false,
+		});
+
+		expect(consoleSpy).toHaveBeenCalledWith("⚠️  Found issues in 2 file(s):");
+		expect(consoleSpy).toHaveBeenCalledWith(
+			"- /mock-home/Library/Application Support/Code/User/settings.json",
+		);
+		expect(consoleSpy).toHaveBeenCalledWith(
+			"    \x1b[31m✖ risky (enabled & not allowed):\x1b[37m :risky-task\x1b[0m",
+		);
+		expect(consoleSpy).toHaveBeenCalledWith("- /test/.vscode/settings.json");
+	});
+
 	it("should exit with code 1 when failOnRisk is true and risks found", async () => {
 		mockReaddirSync.mockImplementation((dir: string, options?: any) => {
 			if (dir === "/test") {