fix(vendor): classify vlt package dirs by layout, not a .zip suffix

#300 added .zip to artifact_is_file_shaped for pypi sdists. A vlt package
dir path ends in the npm package name, so a package such as lodash.zip
stopped being recognized as a vlt dir: its health check took the generic
dir branch, which refuses the dependency links under its node_modules,
and restore took the file branch and refused for want of an archive
SHA-256.

is_vlt_dir_entry now also accepts a path in the vendored vlt dir layout
(<name>-<version>/node_modules/<name>), whatever its suffix.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NEUik3Qo9HQtYGVEAMs1Di

Author: claude

crates/socket-patch-core/src/vendor/verify.rs

@@ -196,11 +196,16 @@ async fn verify_dir_members(
     Ok(())
 }
 
-/// A vlt package-dir entry: npm, flavor `vlt`, not a tarball.
+/// A vlt package-dir entry: npm, flavor `vlt`, not a tarball. The vendored
+/// dir layout decides before the suffix does: the path ends in the package
+/// name, which may itself end in one (`lodash.zip`).
 pub(crate) fn is_vlt_dir_entry(entry: &VendorEntry) -> bool {
     entry.ecosystem == "npm"
         && entry.flavor.as_deref() == Some(super::vlt_lock::FLAVOR)
-        && !artifact_is_file_shaped(&entry.artifact.path)
+        && (!artifact_is_file_shaped(&entry.artifact.path)
+            || parse_vendor_path(&entry.artifact.path)
+                .and_then(|p| super::vlt_lock_text::parse_vendored_dir_leaf(&p.leaf))
+                .is_some())
 }
 
 /// The largest afterHash blob the vlt manifest exemption reads.
@@ -1760,6 +1765,35 @@ mod tests {
         ));
     }
 
+    /// A vlt package whose name ends in an archive suffix (`lodash.zip`) is
+    /// still a vlt dir: its dependency links pass the vlt structure rule
+    /// instead of failing the generic whole-tree inventory walk.
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn vlt_dir_named_like_an_archive_is_still_a_vlt_dir() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let rel = format!(".socket/vendor/npm/{UUID}/lodash.zip-4.2.0/node_modules/lodash.zip");
+        let dir = root.join(&rel);
+        tokio::fs::create_dir_all(dir.join("node_modules"))
+            .await
+            .unwrap();
+        tokio::fs::write(dir.join("index.js"), PATCHED)
+            .await
+            .unwrap();
+        std::os::unix::fs::symlink("../../../dep", dir.join("node_modules/dep")).unwrap();
+        let rec = record(UUID, "package/index.js");
+        let mut ent = entry("npm", UUID, &rel);
+        ent.flavor = Some("vlt".into());
+        ent.artifact.file_inventory = Some(compute_package_dir_inventory(&dir).await.unwrap());
+        assert!(artifact_is_file_shaped(&rel));
+        assert!(is_vlt_dir_entry(&ent));
+        assert_eq!(
+            check_vendored_artifact(root, &ent, &rec).await,
+            ArtifactHealth::Healthy
+        );
+    }
+
     #[tokio::test]
     async fn vlt_manifest_blob_pins_the_inventory() {
         use sha2::Digest;