@agenthippo-ai/agenthippo 1.110.9 → 1.110.19

package/out/test/refreshPolicy.test.js

@@ -1,60 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-const assert = __importStar(require("assert"));
-const viewsConfigMerge_1 = require("../analytics/dashboard/viewsConfigMerge");
-suite('shouldRunScriptsOnNavigation', () => {
-    test('fleet widget script infers always refresh', () => {
-        const fleetView = { scripts: [viewsConfigMerge_1.FLEET_WIDGET_SCRIPT] };
-        assert.strictEqual((0, viewsConfigMerge_1.shouldRunScriptsOnNavigation)(fleetView, []), true);
-        assert.strictEqual((0, viewsConfigMerge_1.shouldRunScriptsOnNavigation)(fleetView, ['chart']), true);
-    });
-    test('refreshOnNavigate always runs scripts even without fleet widget', () => {
-        const liveView = { scripts: [], refreshOnNavigate: 'always' };
-        assert.strictEqual((0, viewsConfigMerge_1.shouldRunScriptsOnNavigation)(liveView, []), true);
-        assert.strictEqual((0, viewsConfigMerge_1.shouldRunScriptsOnNavigation)(liveView, ['chart']), true);
-    });
-    test('when-empty with chart artifacts skips scripts', () => {
-        assert.strictEqual((0, viewsConfigMerge_1.shouldRunScriptsOnNavigation)({ scripts: [] }, ['chart']), false);
-        assert.strictEqual((0, viewsConfigMerge_1.shouldRunScriptsOnNavigation)({ scripts: [], refreshOnNavigate: 'when-empty' }, ['report', 'chart']), false);
-    });
-    test('when-empty without charts runs scripts', () => {
-        assert.strictEqual((0, viewsConfigMerge_1.shouldRunScriptsOnNavigation)({ scripts: [] }, []), true);
-        assert.strictEqual((0, viewsConfigMerge_1.shouldRunScriptsOnNavigation)({ scripts: [] }, ['report', 'export']), true);
-    });
-});

package/out/test/registry.test.js

@@ -1,351 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-/*---------------------------------------------------------------------------------------------
- *  Tests for the local registry (JSON file-based).
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-require("mocha");
-const assert = __importStar(require("assert"));
-const path = __importStar(require("path"));
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const registry_1 = require("../registry");
-suite('LocalRegistry', () => {
-    let tempDir;
-    let registry;
-    setup(() => {
-        tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'agentide-registry-test-'));
-        const dbPath = path.join(tempDir, 'registry.json');
-        registry = new registry_1.LocalRegistry(dbPath);
-    });
-    teardown(() => {
-        fs.rmSync(tempDir, { recursive: true, force: true });
-    });
-    suite('Pack operations', () => {
-        test('registers and retrieves a pack', async () => {
-            await registry.registerPack({
-                slug: 'test-pack',
-                displayName: 'Test Pack',
-                description: 'A test pack',
-                github: { owner: 'user', repo: 'test-pack' },
-                latestVersion: '1.0.0',
-                tags: ['test', 'demo'],
-                stats: { installs: 0, stars: 5 },
-            });
-            const pack = await registry.getPack('test-pack');
-            assert.ok(pack);
-            assert.strictEqual(pack.slug, 'test-pack');
-            assert.strictEqual(pack.displayName, 'Test Pack');
-            assert.ok(pack.tags.includes('test'));
-        });
-        test('returns null for nonexistent pack', async () => {
-            const pack = await registry.getPack('nonexistent');
-            assert.strictEqual(pack, null);
-        });
-        test('lists packs sorted by installs', async () => {
-            await registry.registerPack({
-                slug: 'popular',
-                displayName: 'Popular',
-                github: { owner: 'user', repo: 'popular' },
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 100, stars: 0 },
-            });
-            await registry.registerPack({
-                slug: 'new',
-                displayName: 'New',
-                github: { owner: 'user', repo: 'new' },
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 5, stars: 0 },
-            });
-            const packs = await registry.listPacks();
-            assert.strictEqual(packs.length, 2);
-            assert.strictEqual(packs[0].slug, 'popular');
-            assert.strictEqual(packs[1].slug, 'new');
-        });
-        test('tracks installs', async () => {
-            await registry.registerPack({
-                slug: 'tracked',
-                displayName: 'Tracked',
-                github: { owner: 'user', repo: 'tracked' },
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 0, stars: 0 },
-            });
-            await registry.trackPackInstall('tracked');
-            await registry.trackPackInstall('tracked');
-            const pack = await registry.getPack('tracked');
-            assert.ok(pack);
-            assert.strictEqual(pack.installs, 2);
-        });
-    });
-    suite('Skill operations', () => {
-        test('registers and retrieves a skill', async () => {
-            await registry.registerSkill({
-                slug: 'typescript-testing',
-                displayName: 'TypeScript Testing',
-                description: 'Vitest patterns',
-                github: { owner: 'user', repo: 'skills', path: 'typescript-testing' },
-                latestVersion: '1.0.0',
-                tags: ['typescript', 'testing'],
-                stats: { installs: 50 },
-            });
-            const skill = await registry.getSkill('typescript-testing');
-            assert.ok(skill);
-            assert.ok(skill.tags.includes('typescript'));
-        });
-        test('tracks agent packs the skill is installed to', async () => {
-            // Install skill to first pack
-            await registry.registerSkill({
-                slug: 'test-skill',
-                displayName: 'Test Skill',
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 1 },
-                agentPackId: 'default',
-            });
-            let skill = await registry.getSkill('test-skill');
-            assert.ok(skill);
-            assert.ok(skill.installedTo.includes('default'));
-            // Install same skill to second pack (should merge)
-            await registry.registerSkill({
-                slug: 'test-skill',
-                displayName: 'Test Skill',
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 1 },
-                agentPackId: 'code-reviewer',
-            });
-            skill = await registry.getSkill('test-skill');
-            assert.ok(skill);
-            assert.strictEqual(skill.installedTo.length, 2);
-            assert.ok(skill.installedTo.includes('default'));
-            assert.ok(skill.installedTo.includes('code-reviewer'));
-        });
-        test('checks if skill is installed to a specific pack', async () => {
-            await registry.registerSkill({
-                slug: 'check-skill',
-                displayName: 'Check Skill',
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 1 },
-                agentPackId: 'my-pack',
-            });
-            const isInstalled = await registry.isSkillInstalledTo('check-skill', 'my-pack');
-            assert.strictEqual(isInstalled, true);
-            const notInstalled = await registry.isSkillInstalledTo('check-skill', 'other-pack');
-            assert.strictEqual(notInstalled, false);
-        });
-        test('unregisters skill from a pack', async () => {
-            await registry.registerSkill({
-                slug: 'unregister-skill',
-                displayName: 'Unregister Skill',
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 1 },
-                agentPackId: 'pack-a',
-            });
-            await registry.registerSkill({
-                slug: 'unregister-skill',
-                displayName: 'Unregister Skill',
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 1 },
-                agentPackId: 'pack-b',
-            });
-            // Unregister from pack-a
-            await registry.unregisterSkillFromPack('unregister-skill', 'pack-a');
-            const skill = await registry.getSkill('unregister-skill');
-            assert.ok(skill);
-            assert.strictEqual(skill.installedTo.length, 1);
-            assert.ok(!skill.installedTo.includes('pack-a'));
-            assert.ok(skill.installedTo.includes('pack-b'));
-        });
-    });
-    suite('MCP operations', () => {
-        test('registers and retrieves an MCP server', async () => {
-            await registry.registerMcp({
-                slug: 'github',
-                displayName: 'GitHub MCP',
-                description: 'GitHub API integration',
-                transport: 'stdio',
-                npmPackage: '@modelcontextprotocol/server-github',
-                latestVersion: '1.0.0',
-                tags: ['github', 'git'],
-                stats: { installs: 200 },
-            });
-            const mcp = await registry.getMcp('github');
-            assert.ok(mcp);
-            assert.strictEqual(mcp.transport, 'stdio');
-            assert.strictEqual(mcp.npmPackage, '@modelcontextprotocol/server-github');
-        });
-        test('tracks agent packs the MCP is installed to', async () => {
-            await registry.registerMcp({
-                slug: 'test-mcp',
-                displayName: 'Test MCP',
-                transport: 'stdio',
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 1 },
-                agentPackId: 'default',
-            });
-            const mcp = await registry.getMcp('test-mcp');
-            assert.ok(mcp);
-            assert.ok(mcp.installedTo.includes('default'));
-        });
-        test('checks if MCP is installed to a specific pack', async () => {
-            await registry.registerMcp({
-                slug: 'check-mcp',
-                displayName: 'Check MCP',
-                transport: 'stdio',
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 1 },
-                agentPackId: 'my-pack',
-            });
-            const isInstalled = await registry.isMcpInstalledTo('check-mcp', 'my-pack');
-            assert.strictEqual(isInstalled, true);
-            const notInstalled = await registry.isMcpInstalledTo('check-mcp', 'other-pack');
-            assert.strictEqual(notInstalled, false);
-        });
-        test('unregisters MCP from a pack', async () => {
-            await registry.registerMcp({
-                slug: 'unregister-mcp',
-                displayName: 'Unregister MCP',
-                transport: 'stdio',
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 1 },
-                agentPackId: 'pack-a',
-            });
-            await registry.registerMcp({
-                slug: 'unregister-mcp',
-                displayName: 'Unregister MCP',
-                transport: 'stdio',
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 1 },
-                agentPackId: 'pack-b',
-            });
-            await registry.unregisterMcpFromPack('unregister-mcp', 'pack-a');
-            const mcp = await registry.getMcp('unregister-mcp');
-            assert.ok(mcp);
-            assert.strictEqual(mcp.installedTo.length, 1);
-            assert.ok(!mcp.installedTo.includes('pack-a'));
-            assert.ok(mcp.installedTo.includes('pack-b'));
-        });
-    });
-    suite('Search', () => {
-        setup(async () => {
-            // Seed some data
-            await registry.registerPack({
-                slug: 'typescript-dev',
-                displayName: 'TypeScript Development',
-                description: 'TypeScript development tools',
-                github: { owner: 'user', repo: 'ts-dev' },
-                latestVersion: '1.0.0',
-                tags: ['typescript', 'development'],
-                stats: { installs: 100, stars: 0 },
-            });
-            await registry.registerPack({
-                slug: 'react-components',
-                displayName: 'React Components',
-                description: 'React component library',
-                github: { owner: 'user', repo: 'react' },
-                latestVersion: '1.0.0',
-                tags: ['react', 'ui'],
-                stats: { installs: 50, stars: 0 },
-            });
-            await registry.registerSkill({
-                slug: 'typescript-testing',
-                displayName: 'TypeScript Testing',
-                description: 'Testing patterns',
-                github: { owner: 'user', repo: 'skills' },
-                latestVersion: '1.0.0',
-                tags: ['typescript', 'testing'],
-                stats: { installs: 30 },
-            });
-        });
-        test('searches across all types', async () => {
-            const results = await registry.search('typescript');
-            assert.ok(results.length > 0);
-            const types = results.map(r => r.type);
-            assert.ok(types.includes('pack'));
-            assert.ok(types.includes('skill'));
-        });
-        test('filters by type', async () => {
-            const results = await registry.search('typescript', { types: ['skill'] });
-            assert.ok(results.every(r => r.type === 'skill'));
-        });
-        test('limits results', async () => {
-            const results = await registry.search('typescript', { limit: 1 });
-            assert.strictEqual(results.length, 1);
-        });
-        test('ranks popular items higher', async () => {
-            const results = await registry.search('typescript');
-            const packIndex = results.findIndex(r => r.slug === 'typescript-dev');
-            const skillIndex = results.findIndex(r => r.slug === 'typescript-testing');
-            assert.ok(packIndex < skillIndex);
-        });
-        test('returns empty for no matches', async () => {
-            const results = await registry.search('nonexistent-query-xyz');
-            assert.strictEqual(results.length, 0);
-        });
-    });
-    suite('Persistence', () => {
-        test('persists data across instances', async () => {
-            const dbPath = path.join(tempDir, 'persist-test.json');
-            // First instance
-            const reg1 = new registry_1.LocalRegistry(dbPath);
-            await reg1.registerPack({
-                slug: 'persisted',
-                displayName: 'Persisted',
-                github: { owner: 'user', repo: 'persisted' },
-                latestVersion: '1.0.0',
-                tags: [],
-                stats: { installs: 0, stars: 0 },
-            });
-            // Second instance (fresh load)
-            const reg2 = new registry_1.LocalRegistry(dbPath);
-            const pack = await reg2.getPack('persisted');
-            assert.ok(pack);
-            assert.strictEqual(pack.slug, 'persisted');
-        });
-    });
-});

package/out/test/remote-trust.test.js

@@ -1,242 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *
- *  `spec.remote.url` comes from a pack manifest — a file that arrives from the store, a PR, or a
- *  teammate. These tests pin that it can no longer be turned into a token-exfiltration sink.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-require("mocha");
-const assert = __importStar(require("assert"));
-const fs = __importStar(require("node:fs"));
-const os = __importStar(require("node:os"));
-const path = __importStar(require("node:path"));
-const remoteTrust_1 = require("../remote/remoteTrust");
-const serveClient_1 = require("../remote/serveClient");
-suite('remote serve URL classification', () => {
-    test('loopback is its own level — allowed, never prompted', () => {
-        for (const url of ['http://127.0.0.1:8080', 'http://localhost:9000/base', 'https://127.0.0.1:8443']) {
-            const v = (0, remoteTrust_1.classifyRemoteServeUrl)(url);
-            assert.strictEqual(v.level, 'loopback', url);
-            assert.strictEqual((0, remoteTrust_1.mayReceiveAccessToken)(v), true, `${url} is this machine`);
-        }
-    });
-    test('an untrusted host may NOT receive the access token', () => {
-        assert.strictEqual((0, remoteTrust_1.mayReceiveAccessToken)((0, remoteTrust_1.classifyRemoteServeUrl)('https://attacker.example')), false);
-    });
-    test('the product domain and its subdomains are trusted', () => {
-        assert.strictEqual((0, remoteTrust_1.classifyRemoteServeUrl)('https://agenthippo.ai').level, 'trusted');
-        assert.strictEqual((0, remoteTrust_1.classifyRemoteServeUrl)('https://serve.agenthippo.ai/v1').level, 'trusted');
-    });
-    test('a lookalike domain is NOT trusted', () => {
-        // The suffix match must be on a label boundary, not a substring.
-        assert.strictEqual((0, remoteTrust_1.classifyRemoteServeUrl)('https://agenthippo.ai.attacker.tld').level, 'untrusted');
-        assert.strictEqual((0, remoteTrust_1.classifyRemoteServeUrl)('https://notagenthippo.ai').level, 'untrusted');
-        assert.strictEqual((0, remoteTrust_1.classifyRemoteServeUrl)('https://evil-agenthippo.ai').level, 'untrusted');
-    });
-    test('cleartext http to a non-loopback host is refused outright — no consent path', () => {
-        const v = (0, remoteTrust_1.classifyRemoteServeUrl)('http://attacker.example/serve');
-        assert.strictEqual(v.level, 'refused');
-        assert.ok(v.reason?.includes('access token'), 'the reason names what would leak');
-    });
-    test('a non-http scheme and a malformed URL are refused', () => {
-        assert.strictEqual((0, remoteTrust_1.classifyRemoteServeUrl)('ftp://attacker.example').level, 'refused');
-        assert.strictEqual((0, remoteTrust_1.classifyRemoteServeUrl)('¬not a url').level, 'refused');
-    });
-    test('an explicitly approved origin becomes trusted', () => {
-        const v = (0, remoteTrust_1.classifyRemoteServeUrl)('https://serve.corp.example:8443/x', {
-            approvedOrigins: ['https://serve.corp.example:8443'],
-        });
-        assert.strictEqual(v.level, 'trusted');
-    });
-    test('an approval is per origin — a different port is a different host', () => {
-        const v = (0, remoteTrust_1.classifyRemoteServeUrl)('https://serve.corp.example:9999/x', {
-            approvedOrigins: ['https://serve.corp.example:8443'],
-        });
-        assert.strictEqual(v.level, 'untrusted');
-    });
-});
-suite('remote trust gate', () => {
-    function memoryStore(initial = []) {
-        const origins = [...initial];
-        return {
-            origins,
-            readApprovedOrigins: () => [...origins],
-            approveOrigin: (o) => { origins.push(o); },
-        };
-    }
-    test('with no prompt available, an untrusted host is REFUSED, not silently contacted', async () => {
-        const gate = (0, remoteTrust_1.createRemoteTrustGate)({ store: memoryStore(), trustedDomains: ['agenthippo.ai'] });
-        const result = await gate.evaluate('https://attacker.example/serve');
-        assert.strictEqual(result.allowed, false);
-        assert.strictEqual(result.sendAuth, false);
-        assert.ok(result.verdict.reason?.includes('attacker.example'));
-    });
-    test('declining the prompt refuses the turn and stores nothing', async () => {
-        const store = memoryStore();
-        const gate = (0, remoteTrust_1.createRemoteTrustGate)({
-            store,
-            trustedDomains: ['agenthippo.ai'],
-            prompt: async () => false,
-        });
-        const result = await gate.evaluate('https://attacker.example/serve');
-        assert.strictEqual(result.allowed, false);
-        assert.strictEqual(result.sendAuth, false);
-        assert.deepStrictEqual(store.origins, [], 'a declined host is not remembered');
-    });
-    test('approving the prompt allows the turn and remembers the origin', async () => {
-        const store = memoryStore();
-        let promptedWith;
-        const gate = (0, remoteTrust_1.createRemoteTrustGate)({
-            store,
-            trustedDomains: ['agenthippo.ai'],
-            prompt: async (v) => { promptedWith = v; return true; },
-        });
-        const result = await gate.evaluate('https://serve.corp.example/x');
-        assert.strictEqual(result.allowed, true);
-        assert.strictEqual(result.sendAuth, true);
-        assert.strictEqual(promptedWith?.hostname, 'serve.corp.example', 'the prompt names the host');
-        assert.deepStrictEqual(store.origins, ['https://serve.corp.example']);
-    });
-    test('a remembered origin is not prompted again', async () => {
-        const store = memoryStore(['https://serve.corp.example']);
-        let prompted = 0;
-        const gate = (0, remoteTrust_1.createRemoteTrustGate)({
-            store,
-            trustedDomains: ['agenthippo.ai'],
-            prompt: async () => { prompted++; return true; },
-        });
-        const result = await gate.evaluate('https://serve.corp.example/x');
-        assert.strictEqual(result.allowed, true);
-        assert.strictEqual(result.sendAuth, true);
-        assert.strictEqual(prompted, 0);
-    });
-    test('a refused scheme is never offered for consent', async () => {
-        let prompted = 0;
-        const gate = (0, remoteTrust_1.createRemoteTrustGate)({
-            store: memoryStore(),
-            prompt: async () => { prompted++; return true; },
-        });
-        const result = await gate.evaluate('http://attacker.example/serve');
-        assert.strictEqual(result.allowed, false);
-        assert.strictEqual(prompted, 0, 'cleartext is not a consent decision');
-    });
-    test('loopback is allowed without a prompt and never forces a sign-in', async () => {
-        let prompted = 0;
-        const gate = (0, remoteTrust_1.createRemoteTrustGate)({
-            store: memoryStore(),
-            prompt: async () => { prompted++; return true; },
-        });
-        const result = await gate.evaluate('http://127.0.0.1:7777');
-        assert.strictEqual(result.allowed, true);
-        assert.strictEqual(result.sendAuth, true, 'a token we already hold may go to our own machine');
-        assert.strictEqual(result.requireAuth, false, 'an unauthenticated local serve must keep working');
-        assert.strictEqual(prompted, 0);
-    });
-    test('a trusted host DOES force a sign-in — that is the point of signing in', async () => {
-        const gate = (0, remoteTrust_1.createRemoteTrustGate)({ store: memoryStore(), trustedDomains: ['agenthippo.ai'] });
-        const result = await gate.evaluate('https://serve.agenthippo.ai');
-        assert.strictEqual(result.allowed, true);
-        assert.strictEqual(result.sendAuth, true);
-        assert.strictEqual(result.requireAuth, true);
-    });
-});
-suite('remote trust store', () => {
-    test('approvals persist to a 0600 file outside any workspace, and a missing file approves nothing', () => {
-        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'ah-remote-trust-'));
-        const storePath = path.join(dir, 'nested', 'remote-trust.json');
-        try {
-            const store = new remoteTrust_1.RemoteTrustStore(storePath);
-            assert.deepStrictEqual(store.readApprovedOrigins(), [], 'no file ⇒ nothing approved (fail closed)');
-            store.approveOrigin('https://serve.corp.example');
-            assert.deepStrictEqual(store.readApprovedOrigins(), ['https://serve.corp.example']);
-            store.approveOrigin('https://serve.corp.example');
-            assert.strictEqual(store.readApprovedOrigins().length, 1, 'approving twice does not duplicate');
-            if (process.platform !== 'win32') {
-                assert.strictEqual(fs.statSync(storePath).mode & 0o777, 0o600, 'file is user-only');
-            }
-            store.revokeOrigin('https://serve.corp.example');
-            assert.deepStrictEqual(store.readApprovedOrigins(), []);
-        }
-        finally {
-            fs.rmSync(dir, { recursive: true, force: true });
-        }
-    });
-    test('a corrupt store file approves nothing rather than throwing', () => {
-        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'ah-remote-trust-'));
-        const storePath = path.join(dir, 'remote-trust.json');
-        try {
-            fs.writeFileSync(storePath, '{not json');
-            assert.deepStrictEqual(new remoteTrust_1.RemoteTrustStore(storePath).readApprovedOrigins(), []);
-        }
-        finally {
-            fs.rmSync(dir, { recursive: true, force: true });
-        }
-    });
-    test('extra trusted domains come from the environment, not from settings a repo could reach', () => {
-        assert.deepStrictEqual((0, remoteTrust_1.trustedDomainsFromEnv)({ AGENTHIPPO_REMOTE_TRUSTED_HOSTS: 'a.example, b.example ,' }), ['a.example', 'b.example']);
-        assert.deepStrictEqual((0, remoteTrust_1.trustedDomainsFromEnv)({}), []);
-    });
-});
-suite('serve client headers', () => {
-    test('no self-asserted identity header is sent alongside the bearer token', () => {
-        const headers = (0, serveClient_1.buildServeAuthHeaders)({ accessToken: 'tok', userEmail: 'victim@example.com' });
-        assert.strictEqual(headers.Authorization, 'Bearer tok');
-        // The serve side trusts `x-agent-user` as its first identity alias; sending a client-chosen
-        // value made cross-user session/state access a one-header change.
-        const identityHeaders = Object.keys(headers).filter((k) => k.toLowerCase() === 'x-agent-user');
-        assert.deepStrictEqual(identityHeaders, [], 'X-Agent-User must not be sent');
-    });
-    test('no credential means no headers at all', () => {
-        assert.deepStrictEqual((0, serveClient_1.buildServeAuthHeaders)(undefined), {});
-        assert.deepStrictEqual((0, serveClient_1.buildServeAuthHeaders)({ accessToken: '', userEmail: 'x@y.z' }), {});
-    });
-});
-suite('manifest remote URL extraction', () => {
-    test('a usable URL is returned unchanged', () => {
-        assert.strictEqual((0, serveClient_1.getRemoteServeUrl)({ spec: { remote: { url: 'https://serve.agenthippo.ai' } } }), 'https://serve.agenthippo.ai');
-        assert.strictEqual((0, serveClient_1.getRemoteServeUrl)({ spec: { remote: { url: 'http://127.0.0.1:8080' } } }), 'http://127.0.0.1:8080');
-    });
-    test('a cleartext remote host is dropped, with a diagnostic explaining why', () => {
-        const manifest = { spec: { remote: { url: 'http://attacker.example' } } };
-        assert.strictEqual((0, serveClient_1.getRemoteServeUrl)(manifest), undefined);
-        assert.ok((0, serveClient_1.getRemoteServeUrlDiagnostic)(manifest)?.includes('http://'), 'diagnostic explains the drop');
-    });
-    test('an absent remote block yields no URL and no diagnostic', () => {
-        assert.strictEqual((0, serveClient_1.getRemoteServeUrl)(undefined), undefined);
-        assert.strictEqual((0, serveClient_1.getRemoteServeUrlDiagnostic)({}), undefined);
-    });
-});