test(encrypt): cover encryptPipeline, sealRaw and awaitAllOrAbort

[dobby-coder]

What

Adds unit tests for the encrypt/upload pipeline in src/crypto/encrypt.ts, which previously had no direct coverage.

• awaitAllOrAbort — the subtle concurrency helper (src/crypto/encrypt.ts:143):
  • resolves without aborting when both sides succeed
  • aborts the controller and re-throws the first error when either the seal side or the pipe side fails first
  • re-throws only the first error and swallows the loser's later rejection (no unhandled rejection)
  • falls back to a parameterless abort() when abort(reason) throws
• encryptPipeline — happy path (seal → chunk → upload) returns the upload uuid and carries the ZIP bytes through to the sink; an upload-sink failure aborts the shared signal driving the stream graph and re-throws.
• sealRaw — seals a Uint8Array payload and returns the concatenated ciphertext.

sealStream/loadWasm, fetchMPK, resolveSigningKeys, createZipReadable and the Cryptify upload sink are mocked; the real Chunker/withTransform and policy builders run.

Notes

• awaitAllOrAbort is now exported so the concurrency logic can be unit-tested directly and deterministically. It is not re-exported from src/index.ts, so the package's public API is unchanged.
• Each abort-related test was confirmed to fail when the abort/swallow logic is removed.
• Full suite green locally (npm test: 230 passed) and npm run typecheck clean.

Closes #109

[dobby-coder]

VERDICT: approve

Rules + review sign-off — clean. No blocking or style findings.

Checked the encrypt-pipeline test PR against the relevant TypeScript / test / PR-process rules:

• vitest-mock-hoisting ✓ — shared mocks are wrapped in vi.hoisted(() => ({...})) and referenced from the vi.mock factories, so no "cannot access before initialization" hazard.
• conventional-commit-pr-titles ✓ — test(encrypt): … is valid; pr-title.yml runs on this repo.
• pr-close-issue-keywords ✓ — Closes #109 on its own line will auto-close the tracking issue on merge.
• tests-required-on-fixes ✓ — this PR is the coverage; each abort-path test was confirmed to fail when the logic is removed.
• Exporting awaitAllOrAbort for testability is scoped correctly (not re-exported from src/index.ts), so the public API is unchanged.

Test suite green (230 passed) and typecheck clean per the prior step. Signing off and flipping to ready.

[github-actions]

🎉 This PR is included in version 2.3.2 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀