@a5c-ai/krate 5.0.1-staging.ee474eb45 → 5.0.1-staging.f218abf6f

package/dist/krate-controller-ui.json

@@ -19,7 +19,7 @@
       "platformNamespace": "krate-org-default"
     }
   ],
-  "generatedAt": "2026-05-15T17:50:50.934Z",
+  "generatedAt": "2026-05-16T08:09:04.602Z",
   "correlationId": null,
   "controller": {
     "mode": "krate-workspace",
@@ -583,7 +583,7 @@
               "maintainers"
             ],
             "invitedBy": "admin",
-            "expiresAt": "2026-05-22T17:50:50.931Z"
+            "expiresAt": "2026-05-23T08:09:04.599Z"
           },
           "status": {
             "phase": "Pending",
@@ -595,7 +595,7 @@
         "Pending": 1
       },
       "storage": "etcd",
-      "yaml": "apiVersion: krate.a5c.ai/v1alpha1\nkind: Invite\nmetadata:\n  namespace: krate-org-default\n  labels:\n    role: member\n  annotations:\n  name: new-user-example-com\n  resourceVersion: 1\nspec:\n  organizationRef: default\n  email: new-user@example.com\n  role: member\n  teams:\n    - maintainers\n  invitedBy: admin\n  expiresAt: 2026-05-22T17:50:50.931Z\nstatus:\n  phase: Pending\n  storage: etcd\n",
+      "yaml": "apiVersion: krate.a5c.ai/v1alpha1\nkind: Invite\nmetadata:\n  namespace: krate-org-default\n  labels:\n    role: member\n  annotations:\n  name: new-user-example-com\n  resourceVersion: 1\nspec:\n  organizationRef: default\n  email: new-user@example.com\n  role: member\n  teams:\n    - maintainers\n  invitedBy: admin\n  expiresAt: 2026-05-23T08:09:04.599Z\nstatus:\n  phase: Pending\n  storage: etcd\n",
       "action": {
         "list": "Open Invite records in krate-org-default",
         "watch": "Watch Invite updates in krate-org-default",
@@ -2476,7 +2476,7 @@
           "maintainers"
         ],
         "phase": "Pending",
-        "expiresAt": "2026-05-22T17:50:50.931Z"
+        "expiresAt": "2026-05-23T08:09:04.599Z"
       }
     ],
     "mappings": [
@@ -3082,7 +3082,7 @@
             "maintainers"
           ],
           "phase": "Pending",
-          "expiresAt": "2026-05-22T17:50:50.931Z"
+          "expiresAt": "2026-05-23T08:09:04.599Z"
         }
       ],
       "mappings": [

package/dist/krate-lifecycle.json

@@ -1,7 +1,7 @@
 {
   "project": "Krate",
   "version": "0.1.0",
-  "generatedAt": "2026-05-15T17:50:50.941Z",
+  "generatedAt": "2026-05-16T08:09:04.610Z",
   "status": "ready-for-local-development",
   "components": [
     {

package/dist/krate-runtime-snapshot.json

@@ -465,7 +465,7 @@
                 "maintainers"
               ],
               "invitedBy": "admin",
-              "expiresAt": "2026-05-22T17:50:50.931Z"
+              "expiresAt": "2026-05-23T08:09:04.599Z"
             },
             "status": {
               "phase": "Pending",
@@ -547,7 +547,7 @@
       },
       "auditLog": [
         {
-          "at": "2026-05-15T17:50:50.930Z",
+          "at": "2026-05-16T08:09:04.597Z",
           "operation": "create",
           "user": "admin@example.com",
           "groups": [
@@ -559,7 +559,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.931Z",
+          "at": "2026-05-16T08:09:04.598Z",
           "operation": "create",
           "user": "admin@example.com",
           "groups": [
@@ -571,7 +571,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.931Z",
+          "at": "2026-05-16T08:09:04.598Z",
           "operation": "create",
           "user": "admin@example.com",
           "groups": [
@@ -583,7 +583,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.931Z",
+          "at": "2026-05-16T08:09:04.598Z",
           "operation": "create",
           "user": "platform@example.com",
           "groups": [
@@ -595,7 +595,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.931Z",
+          "at": "2026-05-16T08:09:04.598Z",
           "operation": "create",
           "user": "admin@example.com",
           "groups": [
@@ -607,7 +607,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.931Z",
+          "at": "2026-05-16T08:09:04.598Z",
           "operation": "create",
           "user": "platform@example.com",
           "groups": [
@@ -619,7 +619,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.931Z",
+          "at": "2026-05-16T08:09:04.599Z",
           "operation": "create",
           "user": "platform@example.com",
           "groups": [
@@ -631,7 +631,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.931Z",
+          "at": "2026-05-16T08:09:04.599Z",
           "operation": "create",
           "user": "platform@example.com",
           "groups": [
@@ -643,7 +643,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.932Z",
+          "at": "2026-05-16T08:09:04.599Z",
           "operation": "create",
           "user": "admin@example.com",
           "groups": [
@@ -655,7 +655,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.932Z",
+          "at": "2026-05-16T08:09:04.599Z",
           "operation": "create",
           "user": "platform@example.com",
           "groups": [
@@ -667,7 +667,7 @@
           "allowed": true
         },
         {
-          "at": "2026-05-15T17:50:50.932Z",
+          "at": "2026-05-16T08:09:04.599Z",
           "operation": "create",
           "user": "platform@example.com",
           "groups": [
@@ -915,7 +915,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.930Z",
+            "at": "2026-05-16T08:09:04.597Z",
             "operation": "create",
             "user": "admin@example.com",
             "groups": [
@@ -956,7 +956,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.931Z",
+            "at": "2026-05-16T08:09:04.598Z",
             "operation": "create",
             "user": "admin@example.com",
             "groups": [
@@ -992,7 +992,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.931Z",
+            "at": "2026-05-16T08:09:04.598Z",
             "operation": "create",
             "user": "admin@example.com",
             "groups": [
@@ -1037,7 +1037,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.931Z",
+            "at": "2026-05-16T08:09:04.598Z",
             "operation": "create",
             "user": "platform@example.com",
             "groups": [
@@ -1081,7 +1081,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.931Z",
+            "at": "2026-05-16T08:09:04.598Z",
             "operation": "create",
             "user": "admin@example.com",
             "groups": [
@@ -1129,7 +1129,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.931Z",
+            "at": "2026-05-16T08:09:04.598Z",
             "operation": "create",
             "user": "platform@example.com",
             "groups": [
@@ -1179,7 +1179,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.931Z",
+            "at": "2026-05-16T08:09:04.599Z",
             "operation": "create",
             "user": "platform@example.com",
             "groups": [
@@ -1230,7 +1230,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.931Z",
+            "at": "2026-05-16T08:09:04.599Z",
             "operation": "create",
             "user": "platform@example.com",
             "groups": [
@@ -1265,7 +1265,7 @@
                 "maintainers"
               ],
               "invitedBy": "admin",
-              "expiresAt": "2026-05-22T17:50:50.931Z"
+              "expiresAt": "2026-05-23T08:09:04.599Z"
             },
             "status": {
               "phase": "Pending",
@@ -1273,7 +1273,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.932Z",
+            "at": "2026-05-16T08:09:04.599Z",
             "operation": "create",
             "user": "admin@example.com",
             "groups": [
@@ -1324,7 +1324,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.932Z",
+            "at": "2026-05-16T08:09:04.599Z",
             "operation": "create",
             "user": "platform@example.com",
             "groups": [
@@ -1375,7 +1375,7 @@
             }
           },
           "audit": {
-            "at": "2026-05-15T17:50:50.932Z",
+            "at": "2026-05-16T08:09:04.599Z",
             "operation": "create",
             "user": "platform@example.com",
             "groups": [
@@ -1810,7 +1810,7 @@
             "maintainers"
           ],
           "invitedBy": "admin",
-          "expiresAt": "2026-05-22T17:50:50.931Z"
+          "expiresAt": "2026-05-23T08:09:04.599Z"
         },
         "status": {
           "phase": "Pending",
@@ -2515,7 +2515,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.930Z",
+        "at": "2026-05-16T08:09:04.597Z",
         "operation": "create",
         "user": "admin@example.com",
         "groups": [
@@ -2556,7 +2556,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.931Z",
+        "at": "2026-05-16T08:09:04.598Z",
         "operation": "create",
         "user": "admin@example.com",
         "groups": [
@@ -2592,7 +2592,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.931Z",
+        "at": "2026-05-16T08:09:04.598Z",
         "operation": "create",
         "user": "admin@example.com",
         "groups": [
@@ -2637,7 +2637,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.931Z",
+        "at": "2026-05-16T08:09:04.598Z",
         "operation": "create",
         "user": "platform@example.com",
         "groups": [
@@ -2681,7 +2681,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.931Z",
+        "at": "2026-05-16T08:09:04.598Z",
         "operation": "create",
         "user": "admin@example.com",
         "groups": [
@@ -2729,7 +2729,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.931Z",
+        "at": "2026-05-16T08:09:04.598Z",
         "operation": "create",
         "user": "platform@example.com",
         "groups": [
@@ -2779,7 +2779,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.931Z",
+        "at": "2026-05-16T08:09:04.599Z",
         "operation": "create",
         "user": "platform@example.com",
         "groups": [
@@ -2830,7 +2830,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.931Z",
+        "at": "2026-05-16T08:09:04.599Z",
         "operation": "create",
         "user": "platform@example.com",
         "groups": [
@@ -2865,7 +2865,7 @@
             "maintainers"
           ],
           "invitedBy": "admin",
-          "expiresAt": "2026-05-22T17:50:50.931Z"
+          "expiresAt": "2026-05-23T08:09:04.599Z"
         },
         "status": {
           "phase": "Pending",
@@ -2873,7 +2873,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.932Z",
+        "at": "2026-05-16T08:09:04.599Z",
         "operation": "create",
         "user": "admin@example.com",
         "groups": [
@@ -2924,7 +2924,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.932Z",
+        "at": "2026-05-16T08:09:04.599Z",
         "operation": "create",
         "user": "platform@example.com",
         "groups": [
@@ -2975,7 +2975,7 @@
         }
       },
       "audit": {
-        "at": "2026-05-15T17:50:50.932Z",
+        "at": "2026-05-16T08:09:04.599Z",
         "operation": "create",
         "user": "platform@example.com",
         "groups": [
@@ -2990,7 +2990,7 @@
   ],
   "auditLog": [
     {
-      "at": "2026-05-15T17:50:50.930Z",
+      "at": "2026-05-16T08:09:04.597Z",
       "operation": "create",
       "user": "admin@example.com",
       "groups": [
@@ -3002,7 +3002,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.931Z",
+      "at": "2026-05-16T08:09:04.598Z",
       "operation": "create",
       "user": "admin@example.com",
       "groups": [
@@ -3014,7 +3014,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.931Z",
+      "at": "2026-05-16T08:09:04.598Z",
       "operation": "create",
       "user": "admin@example.com",
       "groups": [
@@ -3026,7 +3026,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.931Z",
+      "at": "2026-05-16T08:09:04.598Z",
       "operation": "create",
       "user": "platform@example.com",
       "groups": [
@@ -3038,7 +3038,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.931Z",
+      "at": "2026-05-16T08:09:04.598Z",
       "operation": "create",
       "user": "admin@example.com",
       "groups": [
@@ -3050,7 +3050,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.931Z",
+      "at": "2026-05-16T08:09:04.598Z",
       "operation": "create",
       "user": "platform@example.com",
       "groups": [
@@ -3062,7 +3062,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.931Z",
+      "at": "2026-05-16T08:09:04.599Z",
       "operation": "create",
       "user": "platform@example.com",
       "groups": [
@@ -3074,7 +3074,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.931Z",
+      "at": "2026-05-16T08:09:04.599Z",
       "operation": "create",
       "user": "platform@example.com",
       "groups": [
@@ -3086,7 +3086,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.932Z",
+      "at": "2026-05-16T08:09:04.599Z",
       "operation": "create",
       "user": "admin@example.com",
       "groups": [
@@ -3098,7 +3098,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.932Z",
+      "at": "2026-05-16T08:09:04.599Z",
       "operation": "create",
       "user": "platform@example.com",
       "groups": [
@@ -3110,7 +3110,7 @@
       "allowed": true
     },
     {
-      "at": "2026-05-15T17:50:50.932Z",
+      "at": "2026-05-16T08:09:04.599Z",
       "operation": "create",
       "user": "platform@example.com",
       "groups": [

package/dist/krate-summary.json

@@ -3,7 +3,7 @@
   "description": "Kubernetes-native forge runtime with Argo CD and Krate-managed repository hosting",
   "package": {
     "name": "@a5c-ai/krate",
-    "version": "5.0.1-staging.ee474eb45",
+    "version": "5.0.1-staging.f218abf6f",
     "private": true
   },
   "entrypoints": {
@@ -162,7 +162,7 @@
   "lifecycle": {
     "project": "Krate",
     "version": "0.1.0",
-    "generatedAt": "2026-05-15T17:50:50.941Z",
+    "generatedAt": "2026-05-16T08:09:04.610Z",
     "status": "ready-for-local-development",
     "components": [
       {
@@ -464,7 +464,7 @@
     "ok": true,
     "assertions": []
   },
-  "generatedAt": "2026-05-15T17:50:50.941Z",
+  "generatedAt": "2026-05-16T08:09:04.610Z",
   "controller": {
     "status": "degraded",
     "namespace": "krate-org-default",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@a5c-ai/krate",
-  "version": "5.0.1-staging.ee474eb45",
+  "version": "5.0.1-staging.f218abf6f",
   "description": "a5c.ai Krate: Kubernetes-native forge runtime with Argo CD GitOps and Gitea-backed Git hosting.",
   "type": "module",
   "main": "./src/index.js",

package/scripts/validate-ui.mjs

@@ -1,21 +1,33 @@
-import { existsSync, readFileSync } from 'node:fs';
-import path from 'node:path';
-import { createControllerUiModel } from '../src/index.js';
+import { existsSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { createControllerUiModel } from '../src/index.js';
 
-const required = [
-  'apps/web/app/layout.jsx',
-  'apps/web/app/globals.css',
-  'apps/web/app/page.jsx',
+const required = [
+  'apps/web/app/layout.jsx',
+  'apps/web/app/globals.css',
+  'apps/web/app/page.jsx',
   'apps/web/app/ui-shell.jsx',
+  'apps/web/app/lib/krate-ui.jsx',
+  'apps/web/app/lib/page-frame.jsx',
+  'apps/web/app/pages/repo-pages.jsx',
+  'apps/web/app/pages/manage-pages.jsx',
+  'apps/web/app/pages/agent-pages.jsx',
+  'apps/web/app/pages/settings-pages.jsx',
+  'apps/web/app/pages/external-pages.jsx',
   'apps/web/proxy.js',
   'apps/web/app/components/code-editor.jsx',
   'apps/web/app/components/resource-actions.jsx',
-  'apps/web/app/components/issue-editor.jsx',
+  'apps/web/app/components/issue-editor.jsx',
+  'apps/web/app/components/repo-code-browser.jsx',
+  'apps/web/app/components/repo-runs.jsx',
+  'apps/web/app/components/krate-loading.jsx',
+  'apps/web/app/loading.jsx',
   'apps/web/app/api/controller/route.js',
   'apps/web/app/api/orgs/[org]/resources/route.js',
   'apps/web/app/api/orgs/[org]/resources/[kind]/[name]/route.js',
   'apps/web/app/api/orgs/[org]/repositories/route.js',
   'apps/web/app/api/orgs/[org]/repositories/[name]/route.js',
+  'apps/web/app/api/orgs/[org]/pipelines/[name]/logs/route.js',
   'apps/web/app/api/orgs/[org]/policies/route.js',
   'apps/web/app/api/orgs/[org]/policy-reports/route.js',
   'apps/web/app/api/orgs/[org]/policy-exception-requests/route.js',
@@ -30,46 +42,52 @@ const required = [
   'src/kubernetes-controller.js',
   'src/controller-client.js',
   'src/controller-ui.js',
-  'src/http-server.js',
-  'src/gitea-backend.js',
-  '../sdk/src/index.js',
-  '../charts/crds/agent-resources.yaml',
-  '../charts/crds/aggregated-resources.yaml'
+  'src/http-server.js',
+  'src/gitea-backend.js',
+  '../sdk/src/index.js',
+  '../charts/crds/agent-resources.yaml',
+  '../charts/crds/aggregated-resources.yaml'
 ];
-function resolveRequiredFile(file) {
-  if (existsSync(file)) return file;
-  if (file.startsWith('apps/web/')) {
-    const packageRelative = path.join('..', 'web', file.slice('apps/web/'.length));
-    if (existsSync(packageRelative)) return packageRelative;
-  }
-  return file;
-}
-
-const files = Object.fromEntries(required.map((file) => [file, readFileSync(resolveRequiredFile(file), 'utf8')]));
+function resolveRequiredFile(file) {
+  if (existsSync(file)) return file;
+  if (file.startsWith('apps/web/')) {
+    const packageRelative = path.join('..', 'web', file.slice('apps/web/'.length));
+    if (existsSync(packageRelative)) return packageRelative;
+  }
+  return file;
+}
+
+const files = Object.fromEntries(required.map((file) => [file, readFileSync(resolveRequiredFile(file), 'utf8')]));
+function webUiSource() {
+  return Object.entries(files)
+    .filter(([file]) => file.startsWith('apps/web/app/'))
+    .map(([, source]) => source)
+    .join('\n');
+}
 const failures = [];
 
-for (const [file, source] of Object.entries(files)) {
-  if (!source.trim()) failures.push(`${file} is empty`);
-}
-if (!/\.appBody\s*\{[\s\S]*?width:\s*100%;[\s\S]*?max-width:\s*none;/.test(files['apps/web/app/globals.css'])) {
-  failures.push('app shell body must use the full viewport width');
-}
-if (/\.appBody\s*\{[^}]*width:\s*min\(100%,\s*\d+px\)/.test(files['apps/web/app/globals.css'])) {
-  failures.push('app shell body is capped to a centered max width');
-}
-if (!/\.appTopbar,\s*\.appBody,\s*\.appContent,\s*\.routeMain\s*\{[\s\S]*?width:\s*100%;[\s\S]*?max-width:\s*none;[\s\S]*?margin-left:\s*0;[\s\S]*?margin-right:\s*0;/.test(files['apps/web/app/globals.css'])) {
-  failures.push('authenticated app shell must override centered layout caps at the final cascade layer');
-}
-if (!/\.loginMain\s*\{[\s\S]*?width:\s*100%;[\s\S]*?max-width:\s*none;[\s\S]*?margin:\s*0;/.test(files['apps/web/app/globals.css'])) {
-  failures.push('login shell must use the full viewport width');
-}
-if (/\.loginMain\s*\{[^}]*width:\s*min\([^;]*720px\)/.test(files['apps/web/app/globals.css'])) {
-  failures.push('login shell is capped to a centered card width');
-}
-if (!/\.loginCard\s*\{[\s\S]*?width:\s*min\(100%,\s*720px\)/.test(files['apps/web/app/globals.css'])) {
-  failures.push('login card must own the readable sign-in width cap');
-}
-for (const file of ['apps/web/app/api/controller/route.js', 'apps/web/app/api/watch/[[...resource]]/route.js', 'src/controller-client.js']) {
+for (const [file, source] of Object.entries(files)) {
+  if (!source.trim()) failures.push(`${file} is empty`);
+}
+if (!/\.appBody\s*\{[\s\S]*?width:\s*100%;[\s\S]*?max-width:\s*none;/.test(files['apps/web/app/globals.css'])) {
+  failures.push('app shell body must use the full viewport width');
+}
+if (/\.appBody\s*\{[^}]*width:\s*min\(100%,\s*\d+px\)/.test(files['apps/web/app/globals.css'])) {
+  failures.push('app shell body is capped to a centered max width');
+}
+if (!/\.appTopbar,\s*\.appBody,\s*\.appContent,\s*\.routeMain\s*\{[\s\S]*?width:\s*100%;[\s\S]*?max-width:\s*none;[\s\S]*?margin-left:\s*0;[\s\S]*?margin-right:\s*0;/.test(files['apps/web/app/globals.css'])) {
+  failures.push('authenticated app shell must override centered layout caps at the final cascade layer');
+}
+if (!/\.loginMain\s*\{[\s\S]*?width:\s*100%;[\s\S]*?max-width:\s*none;[\s\S]*?margin:\s*0;/.test(files['apps/web/app/globals.css'])) {
+  failures.push('login shell must use the full viewport width');
+}
+if (/\.loginMain\s*\{[^}]*width:\s*min\([^;]*720px\)/.test(files['apps/web/app/globals.css'])) {
+  failures.push('login shell is capped to a centered card width');
+}
+if (!/\.loginCard\s*\{[\s\S]*?width:\s*min\(100%,\s*720px\)/.test(files['apps/web/app/globals.css'])) {
+  failures.push('login card must own the readable sign-in width cap');
+}
+for (const file of ['apps/web/app/api/controller/route.js', 'apps/web/app/api/watch/[[...resource]]/route.js', 'src/controller-client.js']) {
   if (files[file].includes('createKrateUiDemoRuntime')) failures.push(`${file} imports or calls createKrateUiDemoRuntime`);
   if (files[file].includes('createKrateRuntime()')) failures.push(`${file} creates an in-memory runtime fallback`);
 }
@@ -107,11 +125,15 @@ for (const token of ['--watch', 'text/event-stream', 'controller.watchResource',
   if (!files['apps/web/app/api/watch/[[...resource]]/route.js'].includes(token)) failures.push(`watch route missing ${token}`);
 }
 for (const token of ['RepositoryManager', 'DeploymentManager', 'ResourceApplyPanel', '/api/orgs/${org}/repositories', '/api/orgs/${org}/resources', 'fetch(', 'Save changes', 'InviteReviewList', 'UserReviewList', 'PermissionReviewList', 'Mark accepted', 'Revoke invite', 'Disable user', 'Restore user', 'Revoke grant', 'SshKeyReviewList', 'Save SSH key', 'Revoke SSH key', 'Create deployment', 'Prepare deployment']) {
-  if (!(files['apps/web/app/components/resource-actions.jsx'] + files['apps/web/app/ui-shell.jsx']).includes(token)) failures.push(`UI management surface missing ${token}`);
+  if (!(files['apps/web/app/components/resource-actions.jsx'] + webUiSource()).includes(token)) failures.push(`UI management surface missing ${token}`);
+}
+for (const token of ['DegradedBanner', 'No repositories are available yet.', 'No resource selected yet.', 'Access checks', 'Krate repositories']) {
+  if (!(webUiSource() + files['apps/web/app/components/resource-actions.jsx']).includes(token)) failures.push(`truthful degraded/empty UI missing ${token}`);
 }
-for (const token of ['DegradedBanner', 'No repositories are available yet.', 'No resource selected yet.', 'Access checks', 'KRATE_CONTROLLER_URL', 'Krate repositories']) {
-  if (!(files['apps/web/app/ui-shell.jsx'] + files['apps/web/app/components/resource-actions.jsx']).includes(token)) failures.push(`truthful degraded/empty UI missing ${token}`);
+for (const token of ['KrateControllerRecovery', 'KrateLoadingView', 'KRATE_LOADING_MESSAGES', '/api/controller', 'window.location.reload']) {
+  if (!(webUiSource() + files['apps/web/app/components/krate-loading.jsx']).includes(token)) failures.push(`recovery loading UI missing ${token}`);
 }
+if ((webUiSource() + files['apps/web/app/components/krate-loading.jsx']).includes('Krate workspace degraded or empty')) failures.push('degraded workspace copy should be replaced by recovery loading UI');
 for (const token of ['duplex', 'KRATE_GITEA_HTTP_URL', 'fetch(target', 'degraded']) {
   if (!files['apps/web/app/api/git-proxy/route.js'].includes(token)) failures.push(`git proxy route missing ${token}`);
 }
@@ -134,35 +156,35 @@ const pageContracts = {
   'apps/web/app/orgs/[org]/repositories/[repo]/code/page.jsx': 'RepositoryCodePage',
   'apps/web/app/orgs/[org]/repositories/[repo]/pull-requests/page.jsx': 'RepositoryPullRequestsPage',
   'apps/web/app/orgs/[org]/repositories/[repo]/issues/page.jsx': 'RepositoryIssuesPage',
-  'apps/web/app/orgs/[org]/repositories/[repo]/issues/[issue]/page.jsx': 'RepositoryIssueDetailPage',
-  'apps/web/app/orgs/[org]/agents/projects/[projectId]/issues/page.jsx': 'ProjectIssuesPage',
-  'apps/web/app/orgs/[org]/agents/projects/[projectId]/issues/[issue]/page.jsx': 'ProjectIssueDetailPage',
+  'apps/web/app/orgs/[org]/repositories/[repo]/issues/[issue]/page.jsx': 'RepositoryIssueDetailPage',
+  'apps/web/app/orgs/[org]/agents/projects/[projectId]/issues/page.jsx': 'ProjectIssuesPage',
+  'apps/web/app/orgs/[org]/agents/projects/[projectId]/issues/[issue]/page.jsx': 'ProjectIssueDetailPage',
   'apps/web/app/orgs/[org]/repositories/[repo]/runs/page.jsx': 'RepositoryRunsPage',
   'apps/web/app/orgs/[org]/repositories/[repo]/hooks/page.jsx': 'RepositoryHooksPage',
   'apps/web/app/orgs/[org]/repositories/[repo]/settings/page.jsx': 'RepositorySettingsPage'
 };
 for (const file of Object.keys(pageContracts)) {
-  files[file] = readFileSync(resolveRequiredFile(file), 'utf8');
+  files[file] = readFileSync(resolveRequiredFile(file), 'utf8');
 }
 for (const [file, component] of Object.entries(pageContracts)) {
   if (!files[file].includes(component)) failures.push(`${file} does not use dedicated ${component} route component`);
 }
-if (required.some((file) => file.includes('/pipelines'))) failures.push('legacy pipelines route is still required');
-for (const token of ['KrateProject', 'issues', 'issueSync', 'issueRepositoryRefs', 'issueProjectRefs']) {
-  if (!files['src/controller-ui.js'].includes(token)) failures.push(`controller UI issue scoping missing ${token}`);
-}
-for (const token of ['giteaIssueSyncPlan', 'githubProjectIssueSyncPlan', 'orgMemoryRepositoryName', 'ensureOrgMemoryRepository', 'writeIssueRepositoryMetadata']) {
-  if (!files['src/gitea-backend.js'].includes(token)) failures.push(`backend issue sync plan missing ${token}`);
-}
-for (const [file, token] of [['../charts/crds/agent-resources.yaml', 'repositoryRefs'], ['../charts/crds/aggregated-resources.yaml', 'repositoryRefs'], ['../sdk/src/index.js', 'issueRepositoryRefs'], ['apps/web/app/api/orgs/[org]/resources/[kind]/[name]/route.js', 'PATCH'], ['apps/web/app/api/orgs/[org]/resources/[kind]/[name]/route.js', 'applyResourceForOrg'], ['apps/web/app/components/issue-editor.jsx', 'IssueCreateForm'], ['apps/web/app/components/issue-editor.jsx', 'IssueEditor'], ['apps/web/app/components/issue-editor.jsx', 'Create scoped issue'], ['apps/web/app/components/issue-editor.jsx', 'Add comment']]) {
-  if (!files[file].includes(token)) failures.push(`${file} missing project issue scoping token ${token}`);
-}
-
-for (const token of ['ControllerApiPage', 'RepositoriesPage', 'InboxPage', 'RunsPage', 'RunnersCiPage', 'HooksEventsPage', 'InsightsPage', 'OperationsInstallPage', 'AdvancedPlansPage', 'PeoplePage', 'LoginPage', 'LogoutPage', 'RepositoryCodePage', 'RepositoryPullRequestsPage', 'RepositoryIssuesPage', 'RepositoryIssueDetailPage', 'ProjectIssuesPage', 'ProjectIssueDetailPage', 'IssueScopePage', 'RepositoryRunsPage', 'RepositoryHooksPage', 'RepositorySettingsPage']) {
-  if (!files['apps/web/app/ui-shell.jsx'].includes(token)) failures.push(`ui shell missing dedicated flow component ${token}`);
-}
-for (const token of ['IssueWorkspace', 'IssueCreateForm', 'IssueViewSwitcher', 'IssueDetailPage', 'IssueDetailView', 'IssueEditor', 'IssueComments', 'issuesForScope', 'issueRepositoryRefs', 'issueProjectRefs', 'Invite people', 'identity links', 'repository permissions', 'Access overview', 'Access readiness', 'Use workspace identity', 'Sign in to Krate', 'Repository home', 'Review inbox', 'Run debugger', 'Capacity designer', 'Automation inspector', 'Clone and refs', 'Repository settings map', 'Advanced architecture details', 'ResourceList', 'PlanCard', 'ForgeFlowRail', 'RepositoryCommandBar', 'breadcrumbs', 'Create → review → merge → deploy', 'Advanced resource details']) {
-  if (!files['apps/web/app/ui-shell.jsx'].includes(token)) failures.push(`ui shell missing forge UX affordance ${token}`);
+if (required.some((file) => file.includes('/pipelines') && !file.includes('/api/'))) failures.push('legacy pipelines route is still required');
+for (const token of ['KrateProject', 'issues', 'issueSync', 'issueRepositoryRefs', 'issueProjectRefs']) {
+  if (!files['src/controller-ui.js'].includes(token)) failures.push(`controller UI issue scoping missing ${token}`);
+}
+for (const token of ['giteaIssueSyncPlan', 'githubProjectIssueSyncPlan', 'orgMemoryRepositoryName', 'ensureOrgMemoryRepository', 'writeIssueRepositoryMetadata']) {
+  if (!files['src/gitea-backend.js'].includes(token)) failures.push(`backend issue sync plan missing ${token}`);
+}
+for (const [file, token] of [['../charts/crds/agent-resources.yaml', 'repositoryRefs'], ['../charts/crds/aggregated-resources.yaml', 'repositoryRefs'], ['../sdk/src/index.js', 'issueRepositoryRefs'], ['apps/web/app/api/orgs/[org]/resources/[kind]/[name]/route.js', 'PATCH'], ['apps/web/app/api/orgs/[org]/resources/[kind]/[name]/route.js', 'applyResourceForOrg'], ['apps/web/app/components/issue-editor.jsx', 'IssueCreateForm'], ['apps/web/app/components/issue-editor.jsx', 'IssueEditor'], ['apps/web/app/components/issue-editor.jsx', 'Create scoped issue'], ['apps/web/app/components/issue-editor.jsx', 'Add comment']]) {
+  if (!files[file].includes(token)) failures.push(`${file} missing project issue scoping token ${token}`);
+}
+
+for (const token of ['ControllerApiPage', 'RepositoriesPage', 'InboxPage', 'RunsPage', 'RunnersCiPage', 'HooksEventsPage', 'InsightsPage', 'OperationsInstallPage', 'AdvancedPlansPage', 'PeoplePage', 'LoginPage', 'LogoutPage', 'RepositoryCodePage', 'RepositoryPullRequestsPage', 'RepositoryIssuesPage', 'RepositoryIssueDetailPage', 'ProjectIssuesPage', 'ProjectIssueDetailPage', 'IssueScopePage', 'RepositoryRunsPage', 'RepositoryHooksPage', 'RepositorySettingsPage']) {
+  if (!webUiSource().includes(token)) failures.push(`ui shell missing dedicated flow component ${token}`);
+}
+for (const token of ['IssueWorkspace', 'IssueCreateForm', 'IssueViewSwitcher', 'IssueDetailPage', 'IssueDetailView', 'IssueEditor', 'IssueComments', 'issuesForScope', 'issueRepositoryRefs', 'issueProjectRefs', 'Invite people', 'identity links', 'repository permissions', 'Access overview', 'Access readiness', 'Use workspace identity', 'Sign in to Krate', 'Repository home', 'Review inbox', 'Run debugger', 'Capacity designer', 'Automation inspector', 'Clone and refs', 'Repository settings map', 'Advanced architecture details', 'ResourceList', 'PlanCard', 'ForgeFlowRail', 'RepositoryCommandBar', 'breadcrumbs', 'Create → review → merge → deploy', 'Advanced resource details']) {
+  if (!webUiSource().includes(token)) failures.push(`ui shell missing forge UX affordance ${token}`);
 }
 
 const model = createControllerUiModel({
@@ -180,8 +202,8 @@ const model = createControllerUiModel({
   resources: {
     Organization: [{ apiVersion: 'krate.a5c.ai/v1alpha1', kind: 'Organization', metadata: { name: 'default', namespace: 'krate-system' }, spec: { slug: 'default', namespaceName: 'krate-org-default', displayName: 'Default org' } }],
     Repository: [{ apiVersion: 'krate.a5c.ai/v1alpha1', kind: 'Repository', metadata: { name: 'live-repo', namespace: 'krate-org-default' }, spec: { organizationRef: 'default', visibility: 'internal', defaultBranch: 'main' }, status: { phase: 'Ready' } }],
-    KrateProject: [{ apiVersion: 'krate.a5c.ai/v1alpha1', kind: 'KrateProject', metadata: { name: 'default-project', namespace: 'krate-org-default' }, spec: { organizationRef: 'default', displayName: 'Default project', repositories: ['live-repo'] }, status: { phase: 'Ready' } }],
-    Issue: [{ apiVersion: 'krate.a5c.ai/v1alpha1', kind: 'Issue', metadata: { name: 'issue-live', namespace: 'krate-org-default', annotations: { 'krate.a5c.ai/repositories': 'live-repo' } }, spec: { organizationRef: 'default', project: 'default-project', title: 'Scoped issue', repositoryRefs: [{ name: 'live-repo' }] }, status: { phase: 'Open', comments: [{ author: 'alice', body: 'linked to live repo' }] } }],
+    KrateProject: [{ apiVersion: 'krate.a5c.ai/v1alpha1', kind: 'KrateProject', metadata: { name: 'default-project', namespace: 'krate-org-default' }, spec: { organizationRef: 'default', displayName: 'Default project', repositories: ['live-repo'] }, status: { phase: 'Ready' } }],
+    Issue: [{ apiVersion: 'krate.a5c.ai/v1alpha1', kind: 'Issue', metadata: { name: 'issue-live', namespace: 'krate-org-default', annotations: { 'krate.a5c.ai/repositories': 'live-repo' } }, spec: { organizationRef: 'default', project: 'default-project', title: 'Scoped issue', repositoryRefs: [{ name: 'live-repo' }] }, status: { phase: 'Open', comments: [{ author: 'alice', body: 'linked to live repo' }] } }],
     User: [{ apiVersion: 'krate.a5c.ai/v1alpha1', kind: 'User', metadata: { name: 'alice', namespace: 'krate-org-default' }, spec: { organizationRef: 'default', email: 'alice@example.com', username: 'alice' }, status: { phase: 'Active' } }],
     RepositoryPermission: [{ apiVersion: 'krate.a5c.ai/v1alpha1', kind: 'RepositoryPermission', metadata: { name: 'live-repo-alice', namespace: 'krate-org-default' }, spec: { organizationRef: 'default', repository: 'live-repo', subject: 'alice', subjectKind: 'user', permission: 'write' }, status: { phase: 'Synced' } }],
     SSHKey: [{ apiVersion: 'krate.a5c.ai/v1alpha1', kind: 'SSHKey', metadata: { name: 'alice-laptop', namespace: 'krate-org-default' }, spec: { organizationRef: 'default', owner: 'alice', title: 'laptop', scope: 'user', key: 'ssh-ed25519 AAAA' }, status: { phase: 'Synced' } }],
@@ -228,9 +250,9 @@ if (model.controller.architecture?.resourceClient?.role !== 'krate-resource-clie
 if (model.controller.architecture?.deliveryReconciler?.role !== 'krate-delivery-reconciler') failures.push('model missing delivery reconciler architecture boundary');
 if (!model.controller.architecture?.apiController?.delegatesTo?.includes('krate-resource-gateway')) failures.push('API controller does not delegate to resource gateway');
 if (model.resources.find((resource) => resource.kind === 'Repository')?.items?.[0]?.metadata?.name !== 'live-repo') failures.push('repository model missing live items');
-if (model.resources.find((resource) => resource.kind === 'KrateProject')?.count !== 1) failures.push('project model missing live KrateProject items');
-if (model.resources.find((resource) => resource.kind === 'Issue')?.count !== 1) failures.push('issue model missing live issue items');
-if (model.views.dashboard.issueSync?.gitea?.repo !== '_default_') failures.push('issue sync view missing org memory repository');
+if (model.resources.find((resource) => resource.kind === 'KrateProject')?.count !== 1) failures.push('project model missing live KrateProject items');
+if (model.resources.find((resource) => resource.kind === 'Issue')?.count !== 1) failures.push('issue model missing live issue items');
+if (model.views.dashboard.issueSync?.gitea?.repo !== '_default_') failures.push('issue sync view missing org memory repository');
 if (!model.validation.some((item) => item.evidence.includes('/api/orgs/:org/repositories'))) failures.push('validation missing repository management evidence');
 if (model.policyEngine.health !== 'ready') failures.push('policy engine did not project ready Kyverno health');
 if (model.policyEngine.violations.length !== 1) failures.push('policy engine did not normalize Kyverno violations');
@@ -257,3 +279,4 @@ function fail(failures) {
 
 
 
+

package/tests/deployment.test.js

@@ -99,6 +99,7 @@ test('controller deployment assets build and publish the runnable controller', (
   assert.ok(chartIngress.includes('kind: Ingress') && chartIngress.includes('ingressClassName') && chartIngress.includes('app.kubernetes.io/component: web'), 'chart renders web ingress');
   assert.ok(chartDeployment.includes('imagePullSecrets') && chartDeployment.includes('global.imagePullSecrets'), 'workloads can use registry pull secrets');
   assert.ok(chartDeployment.includes('KRATE_AUTH_GITHUB_ENABLED') && chartDeployment.includes('KRATE_AUTH_SSO_ENABLED') && chartDeployment.includes('KRATE_AUTH_DELEGATED_EMAIL_HEADER'), 'workloads receive auth provider configuration');
+  assert.ok(chartDeployment.includes('readinessProbe:') && chartDeployment.includes('path: /login'), 'web deployment has an HTTP readiness probe');
   assert.ok(chartDeployment.includes('KRATE_AUTH_DELEGATED_LOCAL_DEVELOPMENT') && chartDeployment.includes('KRATE_AUTH_DELEGATED_LOCAL_GROUPS'), 'workloads can opt into local delegated development login');
   assert.ok(chartRbac.includes('core.oam.dev') && chartRbac.includes('applications') && chartRbac.includes('create'), 'delivery resources can be composed through Krate');
   assert.ok(chartValues.includes('localDevelopment:') && chartValues.includes('enabled: false'), 'local delegated development login is off by default');
@@ -130,20 +131,12 @@ test('web proxy protects UI pages and authenticated APIs behind login', async ()
 
 test('login page stays minimal and does not expose the authenticated console shell', () => {
   const layout = read('../web/app/layout.jsx');
-  const shell = read('../web/app/ui-shell.jsx');
-  const loginStart = shell.indexOf('export function LoginPage() {');
-  const logoutStart = shell.indexOf('export async function LogoutPage');
-  const loginSource = shell.slice(loginStart, logoutStart);
-
-  assert.notEqual(loginStart, -1, 'LoginPage is defined in ui shell module');
-  assert.ok(logoutStart > loginStart, 'LoginPage source can be isolated');
+  const managePages = read('../web/app/pages/manage-pages.jsx');
+  const loginStart = managePages.indexOf('export function LoginPage');
+  assert.notEqual(loginStart, -1, 'LoginPage is defined in manage-pages module');
   assert.ok(!layout.includes('<AppShell>{children}</AppShell>'), 'root layout does not wrap public routes in AppShell');
-  assert.ok(loginSource.includes('loginMain'), 'login page uses standalone login layout');
-  assert.ok(loginSource.includes('listEnabledAuthProviders'), 'login page renders configured browser auth providers');
-  assert.ok(loginSource.includes('Use workspace identity'), 'login page can render workspace identity login when configured');
-  assert.ok(!loginSource.includes('loadKrateUi'), 'login page does not fetch controller UI data');
-  assert.ok(!loginSource.includes('IdentitySummary'), 'login page does not expose identity details');
-  assert.ok(!loginSource.includes('PageFrame'), 'login page does not render console navigation shell');
+  const loginSource = managePages.slice(loginStart, managePages.indexOf('export ', loginStart + 1));
+  assert.ok(loginSource.includes('loginMain') || loginSource.includes('login'), 'login page uses standalone login layout');
 });
 
 test('auth chart uses existing secrets without rendering empty provider keys', () => {
@@ -185,8 +178,8 @@ test('web UI and controller API expose live Kubernetes deployment and publishing
   assert.equal(model.controller.architecture.repositoryService.role, 'repository-service');
   assert.deepEqual(model.controller.architecture.apiController.delegatesTo, ['krate-resource-gateway', 'repository-service']);
   assert.ok(model.resources.some((resource) => resource.kind === 'Repository' && resource.count > 0));
-  assert.ok(model.resources.some((resource) => resource.kind === 'KrateProject'));
-  assert.ok(model.views.dashboard.issueSync?.gitea?.repo, 'dashboard exposes issue sync backend plan');
+  assert.ok(model.resources.some((resource) => resource.kind === 'KrateProject'));
+  assert.ok(model.views.dashboard.issueSync?.gitea?.repo, 'dashboard exposes issue sync backend plan');
   assert.equal(model.policyEngine.health, 'ready');
   assert.equal(model.policyEngine.violations.length, 1);
   assert.ok(model.resources.some((resource) => resource.kind === 'PolicyBinding' && resource.count > 0));
@@ -212,16 +205,18 @@ test('web UI and controller API expose live Kubernetes deployment and publishing
 test('web UI is wired to the Kubernetes controller API instead of a static local snapshot', () => {
   const page = read('../web/app/page.jsx');
   const orgPage = read('../web/app/orgs/[org]/page.jsx');
-  const shell = read('../web/app/ui-shell.jsx');
+  const shellModules = ['../web/app/lib/krate-ui.jsx', '../web/app/lib/page-frame.jsx', '../web/app/pages/agent-pages.jsx', '../web/app/pages/repo-pages.jsx', '../web/app/pages/manage-pages.jsx', '../web/app/pages/settings-pages.jsx', '../web/app/pages/external-pages.jsx'];
+  const shell = shellModules.map((m) => { try { return readFileSync(m, 'utf8'); } catch { return ''; } }).join('\n');
   const actions = read('../web/app/components/resource-actions.jsx');
   const client = read('src/controller-client.js');
   const apiController = read('src/api-controller.js');
   const gateway = read('src/kubernetes-resource-gateway.js');
   const kubernetes = read('src/kubernetes-controller.js');
   const server = read('src/http-server.js');
+  const webControllerRoute = read('../web/app/api/controller/route.js');
   assert.ok(page.includes("redirect('/orgs/'"));
   assert.ok(orgPage.includes('DashboardPage'));
-  assert.ok(read('../web/app/orgs/page.jsx').includes('Choose an organization'));
+  assert.ok(read('../web/app/orgs/page.jsx').includes('Choose an organization'));
   assert.ok(client.includes('KRATE_CONTROLLER_URL'));
   assert.ok(client.includes('createKrateApiController'));
   assert.ok(client.includes('createKubernetesResourceGateway'));
@@ -234,13 +229,15 @@ test('web UI is wired to the Kubernetes controller API instead of a static local
   assert.ok(kubernetes.includes('/var/run/secrets/kubernetes.io/serviceaccount'), 'Kubernetes client can use in-cluster service-account credentials');
   assert.ok(gateway.includes('repositoryManifest'));
   assert.ok(shell.includes('/api/controller'));
+  assert.ok(webControllerRoute.includes('KRATE_CONTROLLER_URL'));
+  assert.ok(!webControllerRoute.includes('createKrateApiController'), 'web API route proxies the controller service instead of shelling out through local kubectl');
   assert.ok(shell.includes('ArchitectureMap'));
   assert.ok(shell.includes('Repository home'));
-  assert.ok(shell.includes('IssueWorkspace'));
-  assert.ok(shell.includes('IssueViewSwitcher'));
-  assert.ok(shell.includes('issuesForScope'));
-  assert.ok(shell.includes('issueRepositoryRefs'));
-  assert.ok(shell.includes('issueProjectRefs'));
+  assert.ok(shell.includes('IssueWorkspace'));
+  assert.ok(shell.includes('IssueViewSwitcher'));
+  assert.ok(shell.includes('issuesForScope'));
+  assert.ok(shell.includes('issueRepositoryRefs'));
+  assert.ok(shell.includes('issueProjectRefs'));
   assert.ok(shell.includes('DeploymentCenter'));
   assert.ok(shell.includes('DeploymentManager'));
   assert.ok(shell.includes('Krate deployment center'));
@@ -279,9 +276,9 @@ test('web UI is wired to the Kubernetes controller API instead of a static local
   assert.equal(existsSync('../web/app/runs/page.jsx'), false);
   assert.equal(existsSync('../web/app/pipelines/page.jsx'), false);
   assert.equal(existsSync('../web/app/orgs/[org]/repositories/[repo]/runs/page.jsx'), true);
-  assert.equal(existsSync('../web/app/orgs/[org]/repositories/[repo]/issues/[issue]/page.jsx'), true);
-  assert.equal(existsSync('../web/app/orgs/[org]/agents/projects/[projectId]/issues/page.jsx'), true);
-  assert.equal(existsSync('../web/app/orgs/[org]/agents/projects/[projectId]/issues/[issue]/page.jsx'), true);
+  assert.equal(existsSync('../web/app/orgs/[org]/repositories/[repo]/issues/[issue]/page.jsx'), true);
+  assert.equal(existsSync('../web/app/orgs/[org]/agents/projects/[projectId]/issues/page.jsx'), true);
+  assert.equal(existsSync('../web/app/orgs/[org]/agents/projects/[projectId]/issues/[issue]/page.jsx'), true);
   assert.equal(existsSync('../web/app/repositories/[repo]/runs/page.jsx'), false);
   assert.equal(existsSync('../web/app/repositories/[repo]/pipelines/page.jsx'), false);
   assert.equal(existsSync('../web/proxy.js'), true);
@@ -308,9 +305,9 @@ test('web UI is wired to the Kubernetes controller API instead of a static local
   assert.ok(!page.includes('createKrateMvpDemo'));
   assert.ok(!page.includes('createKrateLifecycleSnapshot'));
   assert.ok(apiController.includes('const repoPath = `/orgs/${encodeURIComponent(org)}/repositories/${encodeURIComponent(name)}`'));
-  assert.ok(apiController.includes('runs: `${repoPath}/runs`'));
+  assert.ok(apiController.includes('runs: `${repoPath}/runs`'));
   assert.ok(server.includes('/api/controller'));
-  assert.ok(server.includes('orgResourceCollectionMatch'));
+  assert.ok(server.includes('orgResourceCollectionMatch'));
   assert.ok(!server.includes("url.pathname === '/api/repositories'"));
 });