@agenthippo-ai/agenthippo 1.110.11 → 1.110.19

package/out/test/lease-validation.test.js

@@ -1,224 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  "Junk is dropped rather than trusted" — restored under the sandbox vocabulary.
- *
- *  `normalizeCaps` was the ONLY runtime validation a lease ever received, and it was deleted along
- *  with the cell→sandbox back-compat it happened to also carry. What replaced it was
- *  `cached = (await res.json()) as Lease` — a compile-time cast that checks nothing. These pin the
- *  properties that were lost, plus the one that was always wrong: an unrecognised breach action
- *  must fail closed to the STRICTER action, never silently to the weaker one.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-require("mocha");
-const assert = __importStar(require("assert"));
-const caps_1 = require("../pack/caps");
-const caps_2 = require("../pack/caps");
-const lease_schema_1 = require("../pack/lease-schema");
-const lease_1 = require("../pack/lease");
-const base = { pack: 'analyst', enabled: true, expiresAt: 1_800_003_600 };
-suite('lease validation — structural junk is refused, not trusted', () => {
-    const rejected = [
-        ['a string cap', { ...base, caps: { maxTurnsPerSession: 'lots' } }],
-        ['a negative cap', { ...base, caps: { maxSessionSeconds: -1 } }],
-        ['a zero cap', { ...base, caps: { maxConcurrentSandboxes: 0 } }],
-        ['a fractional cap', { ...base, caps: { maxTurnsPerSession: 1.5 } }],
-        ['an infinite cap', { ...base, caps: { maxTurnsPerSession: Number.POSITIVE_INFINITY } }],
-        ['a string enabled', { ...base, enabled: 'false' }],
-        ['a missing pack', { enabled: true, expiresAt: 1 }],
-        ['a string expiresAt', { ...base, expiresAt: '1800003600' }],
-        ['a non-object caps', { ...base, caps: 'none' }],
-        ['a non-array deny', { ...base, deny: { scope: 'pack' } }],
-        ['an unknown deny scope', { ...base, deny: [{ scope: 'tenant', match: 'x', mode: 'kill' }] }],
-        ['a deny rule with no match', { ...base, deny: [{ scope: 'pack', match: '', mode: 'kill' }] }],
-        ['a non-boolean requireSignedPack', { ...base, requireSignedPack: 'yes' }],
-        ['a non-boolean allowServiceTurns', { ...base, allowServiceTurns: 'true' }],
-        ['not an object at all', 'nope'],
-    ];
-    for (const [name, doc] of rejected) {
-        test(`${name} rejects the whole document`, () => {
-            const res = (0, lease_schema_1.parseLease)(doc);
-            assert.strictEqual(res.ok, false, `expected ${name} to be refused`);
-        });
-    }
-    test('NaN never reaches the meter, where every comparison against it is false', () => {
-        // The failure this prevents: `usage.turns >= NaN` is false for every value, so the cap is
-        // reported in the console and enforced nowhere.
-        assert.strictEqual((0, lease_schema_1.parseLease)({ ...base, caps: { maxTurnsPerSession: NaN } }).ok, false);
-        const meter = new caps_2.CapMeter({ maxTurnsPerSession: NaN });
-        meter.record('s1');
-        meter.record('s1');
-        meter.record('s1');
-        assert.strictEqual(meter.check('s1', 0).allowed, true, 'demonstrating why the validator has to catch it');
-    });
-    test('a well-formed lease survives intact', () => {
-        const res = (0, lease_schema_1.parseLease)({
-            ...base,
-            version: '1.4.1',
-            caps: { maxTurnsPerSession: 10, onBreach: 'destroy-sandbox' },
-            deny: [{ scope: 'session', match: 's1', mode: 'kill', reason: 'runaway', until: 1_800_004_000 }],
-            requireSignedPack: true,
-        });
-        assert.ok(res.ok);
-        assert.strictEqual(res.lease.caps?.maxTurnsPerSession, 10);
-        assert.strictEqual(res.lease.deny?.[0].mode, 'kill');
-        assert.strictEqual(res.lease.requireSignedPack, true);
-    });
-    test('an unknown cap field is tolerated but never silent', () => {
-        const res = (0, lease_schema_1.parseCapPolicy)({ maxSomethingNew: 5 });
-        assert.ok(res.ok);
-        assert.ok(res.warnings.some((w) => /NOT being enforced/.test(w)));
-    });
-});
-suite('unrecognised enums fail CLOSED to the stricter value', () => {
-    /**
-     * The concrete bug: an unrecognised `onBreach` fell through `mergeCaps`'s
-     * `=== 'destroy-sandbox'` test, so `governor.enforce` defaulted to `revoke-inference`. A typo
-     * in the control plane SOFTENED the breach action from "destroy the session" to "take away its
-     * model route", while the console displayed the stricter value the operator had entered.
-     */
-    test('an unknown lease onBreach clamps UP and warns', () => {
-        const res = (0, lease_schema_1.parseCapPolicy)({ onBreach: 'destroy_cell_typo' });
-        assert.ok(res.ok);
-        assert.strictEqual(res.caps.onBreach, lease_schema_1.STRICTEST_ON_BREACH);
-        assert.strictEqual(res.caps.onBreach, 'destroy-sandbox');
-        assert.ok(res.warnings.some((w) => /Failing CLOSED/.test(w)));
-    });
-    test('and the clamped value survives mergeCaps rather than being softened by it', () => {
-        const parsed = (0, lease_schema_1.parseCapPolicy)({ onBreach: 'nonsense' });
-        assert.ok(parsed.ok);
-        assert.strictEqual((0, caps_1.mergeCaps)(parsed.caps, { onBreach: 'revoke-inference' }).onBreach, 'destroy-sandbox');
-    });
-    test('an unknown deny mode clamps to kill rather than being dropped', () => {
-        const res = (0, lease_schema_1.parseLease)({ ...base, deny: [{ scope: 'pack', match: 'analyst', mode: 'pause' }] });
-        assert.ok(res.ok);
-        assert.strictEqual(res.lease.deny?.[0].mode, 'kill');
-        assert.ok(res.warnings.some((w) => /Failing CLOSED/.test(w)));
-    });
-    test('env: an unknown AGENTHIPPO_CAP_ON_BREACH fails closed instead of becoming undefined', () => {
-        const warnings = [];
-        const caps = (0, caps_1.capsFromEnv)({ AGENTHIPPO_CAP_ON_BREACH: 'destroy-everything' }, (m) => warnings.push(m));
-        assert.strictEqual(caps.onBreach, 'destroy-sandbox');
-        assert.ok(warnings.some((w) => /FAILING CLOSED/.test(w)));
-    });
-    test('CLI: the same resolver, so a flag and an env var cannot disagree', () => {
-        const r = (0, caps_1.resolveOnBreach)('destroy-everything', '--cap-on-breach');
-        assert.strictEqual(r.action, 'destroy-sandbox');
-        assert.ok(r.warnings.some((w) => /FAILING CLOSED/.test(w)));
-        assert.strictEqual((0, caps_1.resolveOnBreach)(undefined, '--cap-on-breach').action, undefined, 'unset stays unset');
-        assert.strictEqual((0, caps_1.resolveOnBreach)('revoke-inference', '--cap-on-breach').action, 'revoke-inference');
-    });
-});
-suite('deprecated cell vocabulary is aliased, loudly', () => {
-    test('destroy-cell maps to destroy-sandbox rather than softening enforcement', () => {
-        assert.strictEqual(lease_schema_1.ON_BREACH_ALIASES['destroy-cell'], 'destroy-sandbox');
-        const r = (0, caps_1.resolveOnBreach)('destroy-cell', 'AGENTHIPPO_CAP_ON_BREACH');
-        assert.strictEqual(r.action, 'destroy-sandbox');
-        assert.ok(r.warnings.some((w) => /DEPRECATED/.test(w)));
-    });
-    test('a lease using the old cap spelling is still enforced', () => {
-        assert.strictEqual(lease_schema_1.LEASE_CAP_ALIASES.maxConcurrentCells, 'maxConcurrentSandboxes');
-        const res = (0, lease_schema_1.parseCapPolicy)({ maxConcurrentCells: 4 });
-        assert.ok(res.ok);
-        assert.strictEqual(res.caps.maxConcurrentSandboxes, 4);
-    });
-    test('AGENTHIPPO_MAX_CONCURRENT_CELLS is honoured with a deprecation notice', () => {
-        const warnings = [];
-        const caps = (0, caps_1.capsFromEnv)({ AGENTHIPPO_MAX_CONCURRENT_CELLS: '3' }, (m) => warnings.push(m));
-        assert.strictEqual(caps.maxConcurrentSandboxes, 3);
-        assert.ok(warnings.some((w) => /DEPRECATED/.test(w)));
-        assert.strictEqual(caps_1.CAP_ENV_ALIASES.AGENTHIPPO_MAX_CONCURRENT_CELLS, 'AGENTHIPPO_MAX_CONCURRENT_SANDBOXES');
-    });
-    test('the current spelling wins when both are present', () => {
-        const caps = (0, caps_1.capsFromEnv)({
-            AGENTHIPPO_MAX_CONCURRENT_SANDBOXES: '7',
-            AGENTHIPPO_MAX_CONCURRENT_CELLS: '3',
-        }, () => undefined);
-        assert.strictEqual(caps.maxConcurrentSandboxes, 7);
-    });
-});
-/**
- * PLAN/agent-identity.md §10.3 — the lease flag that governs unattended runs.
- *
- * Its polarity is the INVERSE of every other flag on the lease. `requireSignedPack` is
- * tighten-only, so absent safely means "nobody asked for the restriction". `allowServiceTurns`
- * GRANTS a standing unattended identity, so absent has to mean deny — otherwise a control plane
- * that has not been taught the field silently authorises unsupervised runs across a fleet.
- */
-suite('lease: allowServiceTurns (PR-2 — a grant, so absent means deny)', () => {
-    test('parseLease carries a real boolean through', () => {
-        const res = (0, lease_schema_1.parseLease)({ ...base, allowServiceTurns: true });
-        assert.ok(res.ok);
-        assert.strictEqual(res.lease.allowServiceTurns, true);
-    });
-    test('the string "false" is refused, not coerced — it would flip deny into allow', () => {
-        // `Boolean("false") === true`. This is the single most dangerous coercion on the document,
-        // which is why the flag joined the existing strict-boolean loop rather than getting its own.
-        assert.strictEqual((0, lease_schema_1.parseLease)({ ...base, allowServiceTurns: 'false' }).ok, false);
-    });
-    test('an unknown field is ignored, so an OLDER serve simply never runs service turns', () => {
-        // Forward compatibility with no lockstep hazard: field-by-field parsing means a serve that
-        // predates the flag reads a lease containing it without erroring, and — because it never
-        // consults the flag — denies. Fail-safe in the skew direction that matters.
-        const res = (0, lease_schema_1.parseLease)({ ...base, someFutureField: { nested: true } });
-        assert.ok(res.ok);
-        assert.strictEqual(res.lease.someFutureField, undefined);
-    });
-    test('managed + lease says true ⇒ allowed', () => {
-        assert.deepStrictEqual((0, lease_1.resolveAllowServiceTurns)({ lease: true, managed: true }), { allowed: true, gate: 'lease_allows' });
-    });
-    test('managed + field absent ⇒ DENIED, and the reason distinguishes it from an explicit false', () => {
-        const absent = (0, lease_1.resolveAllowServiceTurns)({ lease: undefined, managed: true });
-        assert.strictEqual(absent.allowed, false);
-        assert.strictEqual(absent.gate, 'lease_absent_field');
-        const explicit = (0, lease_1.resolveAllowServiceTurns)({ lease: false, managed: true });
-        assert.strictEqual(explicit.allowed, false);
-        assert.strictEqual(explicit.gate, 'lease_denies');
-        // Same outcome, different explanation: an operator reading the audit row must be able to
-        // tell "nobody enabled it" from "somebody disabled it".
-        assert.notStrictEqual((0, lease_1.describeServiceTurnGate)(absent.gate), (0, lease_1.describeServiceTurnGate)(explicit.gate));
-    });
-    test('unmanaged (no control plane) ⇒ permitted, local env is the only gate', () => {
-        const r = (0, lease_1.resolveAllowServiceTurns)({ lease: undefined, managed: false });
-        assert.strictEqual(r.allowed, true);
-        assert.strictEqual(r.gate, 'unmanaged_no_lease');
-        assert.match((0, lease_1.describeServiceTurnGate)(r.gate), /AGENTHIPPO_SERVICE_USER/);
-    });
-    test('every gate has an operator-facing explanation naming what to change', () => {
-        for (const gate of ['lease_allows', 'unmanaged_no_lease', 'lease_absent_field', 'lease_denies']) {
-            assert.ok((0, lease_1.describeServiceTurnGate)(gate).length > 20, `${gate} needs a real explanation`);
-        }
-    });
-});

package/out/test/lease.test.js

@@ -1,114 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Lease admission — kill switch + rollback (PLAN/serve-v4-clean.md §5).
- *
- *  One mechanism, two jobs. The tests pin the operational contract, especially the
- *  fail-open-on-transport / fail-closed-on-content asymmetry, which is exactly the kind of
- *  property that silently inverts during a refactor.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-require("mocha");
-const assert = __importStar(require("assert"));
-const lease_1 = require("../pack/lease");
-const NOW = 1_800_000_000;
-const valid = { pack: 'analyst', expiresAt: NOW + 3600, enabled: true };
-suite('lease admission — kill switch', () => {
-    test('an enabled, unexpired lease admits', () => {
-        assert.doesNotThrow(() => (0, lease_1.assertAdmitted)(valid, { pack: 'analyst', version: '1.4.2', nowSeconds: NOW }));
-    });
-    test('no lease configured admits — self-hosted dev and free tier keep working', () => {
-        assert.doesNotThrow(() => (0, lease_1.assertAdmitted)(undefined, { pack: 'analyst', version: '1.4.2', nowSeconds: NOW }));
-    });
-    test('the kill switch refuses new sandboxes immediately, with the operator reason', () => {
-        assert.throws(() => (0, lease_1.assertAdmitted)({ ...valid, enabled: false, reason: 'incident 4412' }, { pack: 'analyst', version: '1.4.2', nowSeconds: NOW }), (e) => e instanceof lease_1.LeaseDeniedError && /kill switch active/.test(e.message) && /incident 4412/.test(e.message));
-    });
-    test('an expired lease is refused — fail closed on content', () => {
-        assert.throws(() => (0, lease_1.assertAdmitted)({ ...valid, expiresAt: NOW - 1 }, { pack: 'analyst', version: '1.4.2', nowSeconds: NOW }), /expired/);
-    });
-    test("a lease for another pack does not admit this one", () => {
-        assert.throws(() => (0, lease_1.assertAdmitted)({ ...valid, pack: 'other' }, { pack: 'analyst', version: '1.4.2', nowSeconds: NOW }), /lease is for pack other/);
-    });
-});
-suite('lease admission — rollback', () => {
-    test('a pinned version refuses any other version (rollback in force)', () => {
-        const pinned = { ...valid, version: '1.4.1' };
-        assert.doesNotThrow(() => (0, lease_1.assertAdmitted)(pinned, { pack: 'analyst', version: '1.4.1', nowSeconds: NOW }));
-        assert.throws(() => (0, lease_1.assertAdmitted)(pinned, { pack: 'analyst', version: '1.4.2', nowSeconds: NOW }), /pinned to 1\.4\.1.*refusing to start 1\.4\.2/);
-    });
-    test('an image that does not match the leased digest is refused (supply-chain pin)', () => {
-        const pinned = { ...valid, imageDigest: 'sha256:' + 'a'.repeat(64) };
-        assert.doesNotThrow(() => (0, lease_1.assertAdmitted)(pinned, {
-            pack: 'analyst', version: '1.4.2', image: `ghcr.io/x/analyst@sha256:${'a'.repeat(64)}`, nowSeconds: NOW,
-        }));
-        assert.throws(() => (0, lease_1.assertAdmitted)(pinned, {
-            pack: 'analyst', version: '1.4.2', image: `ghcr.io/x/analyst@sha256:${'b'.repeat(64)}`, nowSeconds: NOW,
-        }), /does not match the leased digest/);
-    });
-});
-suite('lease source — fail-open transport, fail-closed content', () => {
-    test('a network failure keeps serving on the cached lease', async () => {
-        let calls = 0;
-        const src = (0, lease_1.createLeaseSource)({
-            url: 'http://control.invalid/lease',
-            cacheSeconds: 0,
-            fetchImpl: (async () => {
-                calls++;
-                if (calls === 1) {
-                    return { ok: true, json: async () => valid };
-                }
-                throw new Error('control plane unreachable');
-            }),
-        });
-        assert.deepStrictEqual(await src.get(NOW), valid, 'first fetch populates the cache');
-        const during = await src.get(NOW + 1);
-        assert.deepStrictEqual(during, valid, 'an outage must not take a customer fleet down');
-    });
-    test('an outage cannot extend an entitlement — the cached lease still expires', async () => {
-        const shortLease = { pack: 'analyst', expiresAt: NOW + 10, enabled: true };
-        const src = (0, lease_1.createLeaseSource)({
-            url: 'http://control.invalid/lease',
-            cacheSeconds: 0,
-            fetchImpl: (async () => ({ ok: true, json: async () => shortLease })),
-        });
-        const lease = await src.get(NOW);
-        // Later, past its own expiry, the cached lease must still be refused by admission.
-        assert.throws(() => (0, lease_1.assertAdmitted)(lease, { pack: 'analyst', version: '1.4.2', nowSeconds: NOW + 11 }), /expired/);
-    });
-    test('a static lease works with no control plane at all (air-gapped)', async () => {
-        const src = (0, lease_1.createLeaseSource)({ staticLease: valid });
-        assert.deepStrictEqual(await src.get(NOW), valid);
-    });
-});

package/out/test/localFleetAdapter.test.js

@@ -1,91 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-const assert = __importStar(require("assert"));
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const path = __importStar(require("path"));
-const fleetRowDefaults_1 = require("../analytics/dashboard/fleetRowDefaults");
-const localFleetAdapter_1 = require("../analytics/dashboard/localFleetAdapter");
-suite('localFleetAdapter', () => {
-    test('mergeSessionJsonlIntoFleetRows adds completed one-shot session to Done', () => {
-        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'fleet-jsonl-merge-'));
-        const sessionId = '2e156640-96ed-4106-8e75-44018d221758';
-        const scheduleId = 'sched-then-why';
-        const started = Date.now() - 2 * 60 * 60_000;
-        const ended = started + 60_000;
-        fs.writeFileSync(path.join(dir, `${sessionId}.jsonl`), [
-            JSON.stringify({ session_id: sessionId, request_id: 'req-1', timestamp: started, event_type: 'turn_start', payload: {} }),
-            JSON.stringify({ session_id: sessionId, request_id: 'req-1', timestamp: ended, event_type: 'turn_end', payload: { success: true } }),
-        ].join('\n') + '\n', 'utf8');
-        fs.utimesSync(path.join(dir, `${sessionId}.jsonl`), ended / 1000, ended / 1000);
-        const sessionsById = new Map();
-        sessionsById.set(`schedule:${scheduleId}`, (0, fleetRowDefaults_1.buildFleetSessionRow)('local', {
-            sessionId: `schedule:${scheduleId}`,
-            status: 'scheduled',
-            startedAt: new Date(started - 60_000).toISOString(),
-            endedAt: '',
-            taskTitle: 'then why',
-            model: 'agentide-cursor::auto',
-            engine: 'cursor',
-            channelType: 'none',
-            channelTarget: sessionId,
-            turns: 0,
-            totalTokens: 0,
-            disconnectCapable: false,
-        }));
-        const scheduleByChatSessionId = new Map([
-            [sessionId, {
-                    id: scheduleId,
-                    sessionId,
-                    sessionResource: `vscode-chat-session://local/${sessionId}`,
-                    messageText: 'then why',
-                    runAt: started - 60_000,
-                    model: 'agentide-cursor::auto',
-                    engine: 'cursor',
-                }],
-        ]);
-        (0, localFleetAdapter_1.mergeSessionJsonlIntoFleetRows)(sessionsById, scheduleByChatSessionId, { scope: 'global' }, dir);
-        assert.strictEqual(sessionsById.has(`schedule:${scheduleId}`), false, 'schedule card should be replaced');
-        const row = sessionsById.get(sessionId);
-        assert.ok(row, 'expected chat session row');
-        assert.strictEqual(row.status, 'done');
-        assert.strictEqual(row.turns, 1);
-        assert.strictEqual(row.taskTitle, 'then why');
-    });
-});

package/out/test/mcp-obo.test.js

@@ -1,107 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-const assert = __importStar(require("assert"));
-const credential_context_1 = require("../cli/credential-context");
-const mcp_1 = require("../mcp");
-/**
- * The per-turn OBO credential must never reach MCP child env implicitly: the supported
- * transport is the loopback data-plane gateway + turn nonce (secure-obo-design §2/§3).
- * Inline resolution exists only behind the explicit local-dev opt-in.
- */
-suite('mcp: OBO token in MCP env (secure-obo-design §3.4 — inline is opt-in only)', () => {
-    const ENV_KEYS = ['DATABRICKS_TOKEN', 'AGENTHIPPO_DATA_TOKEN_ENV_VARS', mcp_1.ALLOW_INLINE_DATA_TOKEN_ENV];
-    const saved = {};
-    setup(() => {
-        for (const k of ENV_KEYS) {
-            saved[k] = process.env[k];
-            delete process.env[k];
-        }
-    });
-    teardown(() => {
-        for (const k of ENV_KEYS) {
-            if (saved[k] === undefined) {
-                delete process.env[k];
-            }
-            else {
-                process.env[k] = saved[k];
-            }
-        }
-    });
-    test('static PAT resolves from plain env when no credential scope', () => {
-        process.env.DATABRICKS_TOKEN = 'pat-static';
-        assert.strictEqual((0, mcp_1.resolveMcpEnvVar)('DATABRICKS_TOKEN'), 'pat-static');
-    });
-    test('WITHOUT the opt-in, a live OBO token never bakes into MCP child env', async () => {
-        process.env.AGENTHIPPO_DATA_TOKEN_ENV_VARS = 'DATABRICKS_TOKEN';
-        await (0, credential_context_1.runWithCredential)({ userId: 'u@x.com', dataToken: 'obo-live' }, async () => {
-            // alias reference falls back to ambient env (unset here → empty), never the credential
-            assert.strictEqual((0, mcp_1.resolveMcpEnvVar)('DATABRICKS_TOKEN'), '');
-            // explicit placeholder resolves to nothing → the connector fails closed
-            assert.strictEqual((0, mcp_1.resolveMcpEnvVar)('dataToken'), '');
-            const resolved = (0, mcp_1.resolveMcpServerEnv)({
-                DATABRICKS_HOST: 'dbc.example.com',
-                DATABRICKS_TOKEN: '${credential:dataToken}',
-            });
-            assert.ok(resolved);
-            assert.strictEqual(resolved.DATABRICKS_HOST, 'dbc.example.com');
-            assert.strictEqual(resolved.DATABRICKS_TOKEN, undefined, 'credential must not appear in spawn env without the opt-in');
-            assert.ok(!JSON.stringify(resolved).includes('obo-live'), 'the raw token must not leak anywhere in the resolved env');
-        });
-    });
-    test('WITH the explicit local-dev opt-in, inline resolution works (alias + placeholder)', async () => {
-        process.env[mcp_1.ALLOW_INLINE_DATA_TOKEN_ENV] = '1';
-        process.env.AGENTHIPPO_DATA_TOKEN_ENV_VARS = 'DATABRICKS_TOKEN';
-        process.env.DATABRICKS_TOKEN = 'pat-static';
-        await (0, credential_context_1.runWithCredential)({ userId: 'u@x.com', dataToken: 'obo-live' }, async () => {
-            assert.strictEqual((0, mcp_1.resolveMcpEnvVar)('DATABRICKS_TOKEN'), 'obo-live', 'OBO token overrides static PAT when opted in');
-            const resolved = (0, mcp_1.resolveMcpServerEnv)({ DATABRICKS_TOKEN: '${credential:dataToken}' });
-            assert.strictEqual(resolved.DATABRICKS_TOKEN, 'obo-live');
-        });
-    });
-    test('alias list is empty by default — DATABRICKS_TOKEN is no longer an implicit credential alias', async () => {
-        process.env[mcp_1.ALLOW_INLINE_DATA_TOKEN_ENV] = '1';
-        process.env.DATABRICKS_TOKEN = 'pat-static';
-        await (0, credential_context_1.runWithCredential)({ userId: 'u@x.com', dataToken: 'obo-live' }, async () => {
-            // No AGENTHIPPO_DATA_TOKEN_ENV_VARS declared → the plain env var wins even opted-in.
-            assert.strictEqual((0, mcp_1.resolveMcpEnvVar)('DATABRICKS_TOKEN'), 'pat-static');
-        });
-    });
-    test('no credential scope + placeholder → falls back to ambient env for local dev', () => {
-        process.env.DATABRICKS_TOKEN = 'pat-static';
-        const resolved = (0, mcp_1.resolveMcpServerEnv)({ DATABRICKS_TOKEN: '${credential:dataToken}' });
-        assert.strictEqual(resolved.DATABRICKS_TOKEN, 'pat-static');
-    });
-});