@1agh/maude 1.0.11 → 1.2.0

package/apps/studio/test/cloud-renew.test.ts

@@ -1,205 +0,0 @@
-// Silent hub-credential renewal (cloud/renew.ts) — the lane that keeps a
-// cloud link alive past the 12 h cell-session cap without a person pressing
-// Connect again. Every network hop is injected; nothing here talks to a real
-// host.
-
-import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
-import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-import { renewHubCredential } from '../cloud/renew.ts';
-
-const HUB_URL = 'https://alligators.cloud.test';
-
-let dir: string;
-let envBackup: Record<string, string | undefined>;
-
-beforeEach(() => {
-  dir = mkdtempSync(join(tmpdir(), 'maude-renew-'));
-  envBackup = {
-    MAUDE_CLOUD_CONFIG: process.env.MAUDE_CLOUD_CONFIG,
-    HUBS_CONFIG_PATH: process.env.HUBS_CONFIG_PATH,
-    MAUDE_CLOUD_URL: process.env.MAUDE_CLOUD_URL,
-  };
-  process.env.MAUDE_CLOUD_CONFIG = join(dir, 'cloud.json');
-  process.env.HUBS_CONFIG_PATH = join(dir, 'hubs.json');
-  process.env.MAUDE_CLOUD_URL = 'https://cloud.test';
-});
-
-afterEach(() => {
-  for (const [k, v] of Object.entries(envBackup)) {
-    if (v === undefined) delete process.env[k];
-    else process.env[k] = v;
-  }
-  rmSync(dir, { recursive: true, force: true });
-});
-
-function signIn(token = 'mpt_account'): void {
-  writeFileSync(
-    join(dir, 'cloud.json'),
-    JSON.stringify({ url: 'https://cloud.test', token, connectedAt: 1 })
-  );
-}
-
-function writeHubRecord(record: Record<string, unknown>): void {
-  writeFileSync(join(dir, 'hubs.json'), JSON.stringify({ hubs: { [HUB_URL]: record } }));
-}
-
-function readHubRecord(): Record<string, unknown> | undefined {
-  try {
-    return JSON.parse(readFileSync(join(dir, 'hubs.json'), 'utf8')).hubs[HUB_URL];
-  } catch {
-    return undefined;
-  }
-}
-
-/** Route-keyed fetch stub; records every URL it was asked for. */
-function fakeFetch(routes: Record<string, { status: number; body: unknown }>) {
-  const calls: string[] = [];
-  const doFetch = (async (input: string | URL | Request) => {
-    const url = String(input);
-    calls.push(url);
-    for (const [prefix, r] of Object.entries(routes)) {
-      if (url.startsWith(prefix)) {
-        return new Response(JSON.stringify(r.body), { status: r.status });
-      }
-    }
-    return new Response('{}', { status: 404 });
-  }) as typeof fetch;
-  return { doFetch, calls };
-}
-
-const HAPPY_ROUTES = {
-  'https://cloud.test/api/projects': {
-    status: 200,
-    body: { projects: [{ id: 'alligators', url: HUB_URL, role: 'owner' }] },
-  },
-  'https://cloud.test/projects/open': {
-    status: 200,
-    body: { token: 'proj_tok', url: HUB_URL, role: 'owner', expiresAt: 111 },
-  },
-  [`${HUB_URL}/auth/login`]: {
-    status: 200,
-    body: { token: 'mau_new', expiresAt: 12345, user: { email: 'm@x.cz', role: 'member' } },
-  },
-};
-
-describe('renewHubCredential', () => {
-  test('signed out → not-signed-in, and no network is touched', async () => {
-    const { doFetch, calls } = fakeFetch(HAPPY_ROUTES);
-    const r = await renewHubCredential(HUB_URL, doFetch);
-    expect(r).toEqual({ ok: false, reason: 'not-signed-in' });
-    expect(calls).toHaveLength(0);
-  });
-
-  test('happy path: projects → open → cell login → hubs.json updated, role preserved', async () => {
-    signIn();
-    writeHubRecord({ token: 'mau_stale', linkedAt: 1, role: 'member', expiresAt: 2 });
-    const { doFetch, calls } = fakeFetch(HAPPY_ROUTES);
-
-    const r = await renewHubCredential(HUB_URL, doFetch);
-    expect(r).toEqual({ ok: true, token: 'mau_new', expiresAt: 12345 });
-
-    const stored = readHubRecord();
-    expect(stored?.token).toBe('mau_new');
-    expect(stored?.expiresAt).toBe(12345);
-    // The upsert replaces the record — the vouched role must survive renewal.
-    expect(stored?.role).toBe('member');
-
-    // The cell login went to the STORED hub address, not anything the cloud named.
-    expect(calls[2]).toBe(`${HUB_URL}/auth/login`);
-  });
-
-  test('F5: the FRESH role from the cell login wins over the stale stored one', async () => {
-    signIn();
-    writeHubRecord({ token: 'mau_stale', linkedAt: 1, role: 'member' });
-    const { doFetch } = fakeFetch({
-      ...HAPPY_ROUTES,
-      [`${HUB_URL}/auth/login`]: {
-        status: 200,
-        body: { token: 'mau_new', expiresAt: 12345, user: { email: 'm@x.cz', role: 'owner' } },
-      },
-    });
-    const r = await renewHubCredential(HUB_URL, doFetch);
-    expect(r.ok).toBe(true);
-    expect(readHubRecord()?.role).toBe('owner'); // not the stale 'member'
-  });
-
-  test('F5: an older cell that omits the role falls back to the stored one', async () => {
-    signIn();
-    writeHubRecord({ token: 'mau_stale', linkedAt: 1, role: 'member' });
-    const { doFetch } = fakeFetch({
-      ...HAPPY_ROUTES,
-      [`${HUB_URL}/auth/login`]: { status: 200, body: { token: 'mau_new', expiresAt: 12345 } },
-    });
-    await renewHubCredential(HUB_URL, doFetch);
-    expect(readHubRecord()?.role).toBe('member');
-  });
-
-  test('claim-a: an embedded-credential hubUrl is refused, no network touched', async () => {
-    signIn();
-    const { doFetch, calls } = fakeFetch(HAPPY_ROUTES);
-    const r = await renewHubCredential('https://evil@alligators.cloud.test', doFetch);
-    expect(r).toEqual({ ok: false, reason: 'no-matching-project' });
-    expect(calls).toHaveLength(0);
-  });
-
-  test('account token revoked (401 on projects) → account-revoked, store untouched', async () => {
-    signIn();
-    writeHubRecord({ token: 'mau_stale', linkedAt: 1 });
-    const { doFetch } = fakeFetch({
-      'https://cloud.test/api/projects': { status: 401, body: {} },
-    });
-    const r = await renewHubCredential(HUB_URL, doFetch);
-    expect(r).toEqual({ ok: false, reason: 'account-revoked' });
-    expect(readHubRecord()?.token).toBe('mau_stale');
-  });
-
-  test('hub not among the account projects → no-matching-project', async () => {
-    signIn();
-    const { doFetch } = fakeFetch({
-      'https://cloud.test/api/projects': {
-        status: 200,
-        body: { projects: [{ id: 'other', url: 'https://other.cloud.test', role: 'owner' }] },
-      },
-    });
-    const r = await renewHubCredential(HUB_URL, doFetch);
-    expect(r).toEqual({ ok: false, reason: 'no-matching-project' });
-  });
-
-  test('a viewer role never renews an editor credential', async () => {
-    signIn();
-    const { doFetch } = fakeFetch({
-      'https://cloud.test/api/projects': {
-        status: 200,
-        body: { projects: [{ id: 'alligators', url: HUB_URL, role: 'viewer' }] },
-      },
-    });
-    const r = await renewHubCredential(HUB_URL, doFetch);
-    expect(r).toEqual({ ok: false, reason: 'no-matching-project' });
-  });
-
-  test('removed member: /projects/open refuses → open-refused (the right place to die)', async () => {
-    signIn();
-    const { doFetch } = fakeFetch({
-      'https://cloud.test/api/projects': HAPPY_ROUTES['https://cloud.test/api/projects'],
-      'https://cloud.test/projects/open': { status: 404, body: {} },
-    });
-    const r = await renewHubCredential(HUB_URL, doFetch);
-    expect(r).toEqual({ ok: false, reason: 'open-refused' });
-  });
-
-  test('cell refuses the exchange → cell-refused, store untouched', async () => {
-    signIn();
-    writeHubRecord({ token: 'mau_stale', linkedAt: 1 });
-    const { doFetch } = fakeFetch({
-      'https://cloud.test/api/projects': HAPPY_ROUTES['https://cloud.test/api/projects'],
-      'https://cloud.test/projects/open': HAPPY_ROUTES['https://cloud.test/projects/open'],
-      [`${HUB_URL}/auth/login`]: { status: 401, body: {} },
-    });
-    const r = await renewHubCredential(HUB_URL, doFetch);
-    expect(r).toEqual({ ok: false, reason: 'cell-refused' });
-    expect(readHubRecord()?.token).toBe('mau_stale');
-  });
-});

package/apps/studio/test/cloud-session-role.test.ts

@@ -1,161 +0,0 @@
-// Cloud Phase 27 A3/A4 + C2/C4 (DDR-209) — the studio in a cell.
-//
-// The behaviour under test is the one that makes a cell multi-tenant-safe: in
-// workspace mode this process serves an owner and a viewer at the SAME TIME, so
-// "what may this request do" cannot come from a file on disk. It comes from the
-// proxy in front, per request, and in the absence of proof it is `viewer`.
-//
-// The local gate this replaces fails OPEN by design — `isHubReadOnly()` returns
-// false from its `catch`, and `projectReadOnly()` returns false when `linkedHub`
-// is unset. That is correct for a tool on your own laptop and is the whole
-// ballgame on the internet, which is why the no-header case below is the most
-// important assertion in the file.
-
-import { afterAll, describe, expect, test } from 'bun:test';
-import type { Subprocess } from 'bun';
-
-import { bootServer, killProc, makeSandbox, nextPort } from './_helpers.ts';
-
-const procs: Subprocess[] = [];
-afterAll(async () => {
-  for (const p of procs) await killProc(p);
-});
-
-async function bootCell() {
-  const { root } = makeSandbox();
-  const port = nextPort();
-  const proc = await bootServer(root, port, {
-    MAUDE_WORKSPACE_MODE: '1',
-    // A dev checkout resolves Playwright (the E2E harness), which is a
-    // legitimate devDependency here and would otherwise fail the module half of
-    // the containment assert before workspace mode could be tested at all.
-    MAUDE_WORKSPACE_ALLOW_DEV_MODULES: '1',
-    HUB_DASHBOARD_URL: 'https://cloud.maude.sh',
-    MAUDE_PROJECT_NAME: 'Alligators',
-  });
-  procs.push(proc);
-  return { base: `http://localhost:${port}` };
-}
-
-describe('a cell resolves the role per request, and defaults to read-only', () => {
-  test('no injected role at all ⇒ read-only, and writes are refused', async () => {
-    const { base } = await bootCell();
-
-    const cfg = (await (await fetch(`${base}/_config`)).json()) as { readOnly?: boolean };
-    expect(cfg.readOnly).toBe(true);
-
-    const res = await fetch(`${base}/_api/edit-text`, {
-      method: 'POST',
-      headers: { 'content-type': 'application/json' },
-      body: JSON.stringify({ file: 'ui/Sample.tsx', id: 'x', text: 'y' }),
-    });
-    expect(res.status).toBe(403);
-    expect(((await res.json()) as { reason?: string }).reason).toBe('read-only');
-  });
-
-  test('a vouched editing role opens the same write', async () => {
-    const { base } = await bootCell();
-
-    const cfg = (await (
-      await fetch(`${base}/_config`, { headers: { 'x-maude-readonly': '0' } })
-    ).json()) as { readOnly?: boolean };
-    expect(cfg.readOnly).toBe(false);
-
-    const res = await fetch(`${base}/_api/edit-text`, {
-      method: 'POST',
-      headers: { 'content-type': 'application/json', 'x-maude-readonly': '0' },
-      body: JSON.stringify({ file: 'ui/Sample.tsx', id: 'x', text: 'y' }),
-    });
-    // Whatever the handler makes of the payload, the GATE let it through — the
-    // read-only refusal is the specific thing that must not happen.
-    expect(res.status).not.toBe(403);
-  });
-
-  test('anything other than a positive `0` is read-only', async () => {
-    // The failure mode this rules out: a truthy-string check, where
-    // `x-maude-readonly: false` (a plausible thing for a future caller to send)
-    // reads as "not read-only".
-    const { base } = await bootCell();
-    for (const value of ['1', 'false', 'no', '', 'true', 'owner']) {
-      const cfg = (await (
-        await fetch(`${base}/_config`, { headers: { 'x-maude-readonly': value } })
-      ).json()) as { readOnly?: boolean };
-      expect(cfg.readOnly).toBe(true);
-    }
-  });
-
-  test('two requests to ONE process get two different answers', async () => {
-    // The actual multi-tenancy property, stated as a test: this is what a
-    // per-PROCESS config file cannot do, and it is why A3 exists.
-    const { base } = await bootCell();
-    const [viewer, member] = await Promise.all([
-      fetch(`${base}/_config`, { headers: { 'x-maude-readonly': '1' } }).then((r) => r.json()),
-      fetch(`${base}/_config`, { headers: { 'x-maude-readonly': '0' } }).then((r) => r.json()),
-    ]);
-    expect((viewer as { readOnly: boolean }).readOnly).toBe(true);
-    expect((member as { readOnly: boolean }).readOnly).toBe(false);
-  });
-});
-
-describe('the cloud shell states what it is', () => {
-  test('/_config carries the cloud block C2 and C4 render from', async () => {
-    const { base } = await bootCell();
-    const cfg = (await (await fetch(`${base}/_config`)).json()) as {
-      cloud?: { dashboardUrl?: string; projectName?: string };
-    };
-    expect(cfg.cloud).toBeTruthy();
-    expect(cfg.cloud?.dashboardUrl).toBe('https://cloud.maude.sh');
-    expect(cfg.cloud?.projectName).toBe('Alligators');
-  });
-
-  // The shape every test above this line assumed away. A self-hosted
-  // `maude hub workspace` sets MAUDE_WORKSPACE_MODE but never
-  // HUB_DASHBOARD_URL (only cli/lib/cell-plan.mjs writes that), and the
-  // studio used to default it to the vendor's SaaS — so the ONE way out a
-  // browser tab offers walked a self-hoster off their own deployment onto
-  // cloud.maude.sh. Every cloud-block test booted WITH the variable set, so
-  // the whole suite was blind to the deployment the bug applies to.
-  test('a self-hosted hub gets the cloud block WITHOUT a dashboard link', async () => {
-    const { root } = makeSandbox();
-    const port = nextPort();
-    const proc = await bootServer(root, port, {
-      MAUDE_WORKSPACE_MODE: '1',
-      MAUDE_WORKSPACE_ALLOW_DEV_MODULES: '1',
-      MAUDE_PROJECT_NAME: 'Alligators',
-      // deliberately NO HUB_DASHBOARD_URL — this is what self-hosted looks like
-    });
-    procs.push(proc);
-    const cfg = (await (await fetch(`http://localhost:${port}/_config`)).json()) as {
-      cloud?: { dashboardUrl?: string; projectName?: string };
-    };
-    // The block still exists: "you are in a browser tab on somebody else's
-    // machine" is just as true self-hosted, and C2's stated agent absence,
-    // the account chip and the sign-out all hang off it.
-    expect(cfg.cloud).toBeTruthy();
-    expect(cfg.cloud?.projectName).toBe('Alligators');
-    // Only the platform-specific field is gone — absent, so the client's
-    // truthiness check is the single gate.
-    expect(cfg.cloud?.dashboardUrl).toBeUndefined();
-  });
-
-  test('the canvas capability is echoed only when the proxy minted one', async () => {
-    const { base } = await bootCell();
-    const without = (await (await fetch(`${base}/_config`)).json()) as { canvasToken?: string };
-    expect(without.canvasToken).toBeUndefined();
-
-    const with_ = (await (
-      await fetch(`${base}/_config`, { headers: { 'x-maude-canvas-token': 'cap-123' } })
-    ).json()) as { canvasToken?: string };
-    expect(with_.canvasToken).toBe('cap-123');
-  });
-
-  test('a cell SERVES the canvas surfaces it used to 404 (DDR-209 A′1)', async () => {
-    const { base } = await bootCell();
-    // The shell is a static harness; the browser is what evaluates it. Before
-    // DDR-209 this was a hard 404 in workspace mode, which is precisely why
-    // Phase 25 had to hand-roll a second studio.
-    const shell = await fetch(`${base}/_canvas-shell.html`);
-    expect(shell.status).toBe(200);
-    expect(shell.headers.get('content-type')).toContain('text/html');
-  });
-});

package/apps/studio/test/cloud-shell-surfaces.test.ts

@@ -1,170 +0,0 @@
-// Surfaces a cloud tab must not offer — Cloud Phase 27, found by using it.
-//
-// The phase's rule is C1's: role shapes what is OFFERED, never what is VISIBLE.
-// That rule is about ROLES. A different question turned up the moment the real
-// studio actually ran in a browser: what about a control whose feature cannot
-// exist in THIS SHELL at all?
-//
-// Three answers, and the difference between them is the whole point:
-//
-//   the agent chat        ABSENT, WITH A NOTICE. It runs on your own Claude
-//                         subscription on your own machine (DDR-123). The
-//                         feature exists and you can have it — the menu row
-//                         stays, disabled, saying where. (C2)
-//
-//   "Sign in to Maude     ABSENT, SILENTLY. It offers to do the thing you have
-//    Cloud"               already done: you reached this tab THROUGH a Maude
-//                         account. There is nothing to explain.
-//
-//   AI generation /       ABSENT, SILENTLY. These configure ffmpeg, mlx-vlm, a
-//   Subtitles / Video     HuggingFace cache and your own provider keys — none
-//                         of which a browser tab has, and whose routes a cell
-//                         refuses by design (DDR-209 D1). Left in, they render
-//                         as a wall of `HTTP 404`, which is what the owner saw.
-//
-// Source-level assertions, because the menubar's dropdowns do not open under a
-// synthetic click and a test that cannot fail is worse than no test. What these
-// pin is exactly what would regress: someone re-introducing `TABS.map` or
-// dropping the gate on `<CloudBar />`.
-
-import { describe, expect, test } from 'bun:test';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-const STUDIO = join(import.meta.dir, '..');
-const APP = readFileSync(join(STUDIO, 'client', 'app.jsx'), 'utf8');
-const SETTINGS = readFileSync(join(STUDIO, 'client', 'panels', 'SettingsPanel.jsx'), 'utf8');
-
-describe('the cloud shell offers nothing it cannot honour', () => {
-  test('the local-machine settings tabs are flagged — and the list is exact', () => {
-    // An exact list, not a `toContain`: the failure this guards is a tab that
-    // configures machine-local state shipping to the cloud shell UNFLAGGED,
-    // where its routes are refused by design (DDR-209 D1) and it renders as a
-    // wall of 404s. A new tab has to be classified deliberately, which means
-    // this assertion is SUPPOSED to fail when one is added.
-    //
-    // `figma` (DDR-216) is local-machine for the same reason `ai-generation`
-    // is: the credential lives in `~/.config/maude/keys.json` on this machine,
-    // and the import writes into this machine's design root.
-    const flagged = [
-      ...SETTINGS.matchAll(/\{ id: '([a-z-]+)', label: '[^']+', local: true \}/g),
-    ].map((m) => m[1]);
-    expect(flagged.sort()).toEqual(['ai-generation', 'figma', 'subtitles', 'video']);
-  });
-
-  test('the tab rail renders the FILTERED list, not the raw table', () => {
-    // `TABS.map` is what shipped the wall of 404s.
-    expect(SETTINGS).toContain('{tabs.map((t) => (');
-    expect(SETTINGS).not.toContain('{TABS.map(');
-    // …and every keyboard path must walk the same list, or End/Home select a
-    // tab that is not on screen.
-    expect(SETTINGS).not.toMatch(/setTab\(TABS\[/);
-    expect(SETTINGS).toContain('const tabs = useMemo(');
-  });
-
-  test('a remembered tab this shell does not have cannot select nothing', () => {
-    // Open Video on the desktop, then open Settings in the cloud.
-    const init =
-      /const \[tab, setTab\] = useState\(\(\) => \{[\s\S]*?\}\);/.exec(SETTINGS)?.[0] ?? '';
-    expect(init).toContain('!(cloud && t.local)');
-  });
-
-  test('the cloud sign-in is not offered inside the cloud', () => {
-    // `=== null`, not falsiness. `cloud` is undefined until `/_config` answers,
-    // and treating unknown as "not cloud" mounted this bar for one frame in
-    // every cloud tab — long enough to fire the one request the cell refuses.
-    // Matched on the GUARD rather than the whole element, so adding a prop to
-    // CloudBar (DDR-214 drilled the live sync payload in) does not read as a
-    // regression in a rule that is entirely about `=== null`.
-    expect(APP).toMatch(/\{cloud === null \? <CloudBar[^>]*\/> : null\}/);
-    expect(APP).not.toMatch(/\{cloud \? null : <CloudBar/);
-  });
-
-  test('the local export queue does not hydrate before the shell is known', () => {
-    expect(APP).toContain('useExportCenter({ enabled: cfg.cloud === null })');
-  });
-
-  test('every component that gates on the shell is actually GIVEN the flag', () => {
-    // The bug this exists for: three `cfg?.cloud` reads inside a component that
-    // never receives `cfg` — a ReferenceError at render, and a blank app.
-    for (const call of ['<Menubar', '<Sidebar', '<SettingsPanel']) {
-      const at = APP.indexOf(call);
-      expect(at).toBeGreaterThan(0);
-      const props = APP.slice(at, at + 900);
-      // Passed RAW — a `?? null` here would erase the "not known yet" state
-      // before any component could see it.
-      expect(props).toContain('cloud={cfg.cloud}');
-    }
-  });
-
-  test('no component reaches for `cfg` where only the flag was passed', () => {
-    // `cfg` is a real variable at the top level, so a stray reference in a
-    // child component is a ReferenceError the bundler happily emits.
-    for (const fn of ['function Menubar({', 'function Sidebar({']) {
-      const start = APP.indexOf(fn);
-      expect(start).toBeGreaterThan(0);
-      // Bounded window: the component's own body, not the whole file.
-      const body = APP.slice(start, APP.indexOf('\nfunction ', start + 10));
-      expect(body).not.toMatch(/\bcfg\?\./);
-      expect(body).not.toMatch(/\bcfg\./);
-    }
-  });
-});
-
-describe('"not known yet" survives every layer between /_config and the DOM', () => {
-  // The three-line bug: the call sites were fixed to pass `cfg.cloud` raw, and
-  // the components still declared `cloud = null` as a default parameter. A
-  // default fires on `undefined` — so "we have not asked yet" turned back into
-  // "this is not the cloud" one layer further in, the sign-in bar mounted for a
-  // frame, and the boot 404 came back looking exactly like the one just fixed.
-  const APP_SRC = readFileSync(join(STUDIO, 'client', 'app.jsx'), 'utf8');
-  const SETTINGS_SRC = readFileSync(join(STUDIO, 'client', 'panels', 'SettingsPanel.jsx'), 'utf8');
-
-  test('no component defaults the shell flag', () => {
-    for (const [label, src] of [
-      ['app.jsx', APP_SRC],
-      ['SettingsPanel.jsx', SETTINGS_SRC],
-    ] as const) {
-      expect(src, label).not.toMatch(/^\s*cloud = (null|false|\{\}),$/m);
-    }
-  });
-});
-
-describe('the way back out exists only where there is somewhere to go', () => {
-  // A self-hosted `maude hub workspace` is workspace mode too — the whole
-  // point of "one studio, three shells" — so it gets the `cloud` block, the
-  // stated agent absence, the account chip and the sign-out. What it does NOT
-  // have is a dashboard: one hub serves one project, and `HUB_DASHBOARD_URL`
-  // is written only by the managed fleet (cli/lib/cell-plan.mjs).
-  //
-  // Both sides had defaulted that URL to the vendor's SaaS, so the ONE way out
-  // a browser tab offers walked every self-hoster off their own deployment
-  // onto cloud.maude.sh — a dead end for an account most of them do not have.
-  // Fixing the server alone would not have fixed the button; the client
-  // carried its own copy of the same fallback.
-  test('the client never names the vendor as a fallback destination', () => {
-    // The literal is the bug. `dashboardUrl` is either configured or absent.
-    expect(APP).not.toContain("'https://cloud.maude.sh'");
-  });
-
-  test('the ← Dashboard anchor is gated on the URL, not on the shell', () => {
-    const at = APP.indexOf('data-testid="cloud-back"');
-    expect(at).toBeGreaterThan(0);
-    const block = APP.slice(at, at + 1200);
-    expect(block).toContain('{cloud.dashboardUrl ? (');
-    expect(block).toContain('href={cloud.dashboardUrl}');
-    // The project name is NOT gated with it: a tab must still say which
-    // project it is showing, dashboard or no dashboard.
-    expect(block).toContain('data-testid="cloud-project-name"');
-  });
-
-  test('the server sends the field only when it is configured', () => {
-    const HTTP = readFileSync(join(STUDIO, 'http.ts'), 'utf8');
-    // Conditional spread — the same shape `canvasToken` uses two fields down,
-    // so an absent value is absent rather than a string nobody can act on.
-    expect(HTTP).toContain(
-      '...(process.env.HUB_DASHBOARD_URL\n                  ? { dashboardUrl: process.env.HUB_DASHBOARD_URL }\n                  : {}),'
-    );
-    expect(HTTP).not.toContain("HUB_DASHBOARD_URL ?? 'https://cloud.maude.sh'");
-  });
-});