@alwaysmeticulous/cli 2.326.0 → 2.327.0

package/dist/commands/onboard/__tests__/install-skills.spec.js

@@ -0,0 +1,158 @@
+"use strict";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ad19583d-8538-5ed7-88f9-501d2a8dafd0")}catch(e){}}();
+
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const vitest_1 = require("vitest");
+const spawnSync = vitest_1.vi.fn();
+vitest_1.vi.mock("child_process", () => ({
+    spawnSync: (...args) => spawnSync(...args),
+}));
+const setup_agent_integrations_1 = require("../setup-agent-integrations");
+const dirs = [];
+const makeRoot = () => {
+    const root = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), "onboard-skills-hijack-"));
+    dirs.push(root);
+    return root;
+};
+(0, vitest_1.afterEach)(() => {
+    for (const dir of dirs.splice(0)) {
+        (0, fs_1.rmSync)(dir, { recursive: true, force: true });
+    }
+});
+(0, vitest_1.beforeEach)(() => {
+    spawnSync.mockReset();
+});
+(0, vitest_1.describe)("sanitizeSkillsInstallEnv", () => {
+    (0, vitest_1.it)("strips NODE_OPTIONS and NODE_PATH so a repo cannot inject preloads", () => {
+        const sanitized = (0, setup_agent_integrations_1.sanitizeSkillsInstallEnv)({
+            PATH: "/usr/bin",
+            NODE_OPTIONS: "--require ./evil.js",
+            NODE_PATH: "/evil/node_modules",
+            HOME: "/home/dev",
+        });
+        (0, vitest_1.expect)(sanitized.PATH).toBe("/usr/bin");
+        (0, vitest_1.expect)(sanitized.HOME).toBe("/home/dev");
+        (0, vitest_1.expect)(sanitized.NODE_OPTIONS).toBeUndefined();
+        (0, vitest_1.expect)(sanitized.NODE_PATH).toBeUndefined();
+    });
+    // `npm run` / `pnpm exec` export the repo's .npmrc as npm_config_*, and those
+    // beat the temp-dir cwd, so the download could still come from a planted
+    // registry or cache.
+    (0, vitest_1.it)("strips npm_config_* so a repo .npmrc cannot redirect the download", () => {
+        const sanitized = (0, setup_agent_integrations_1.sanitizeSkillsInstallEnv)({
+            PATH: "/usr/bin",
+            npm_config_registry: "http://127.0.0.1:9/",
+            npm_config_cache: "/repo/.npm-cache",
+            npm_config_userconfig: "/repo/.npmrc",
+            NPM_CONFIG_REGISTRY: "http://127.0.0.1:9/",
+        });
+        (0, vitest_1.expect)(sanitized.npm_config_registry).toBeUndefined();
+        (0, vitest_1.expect)(sanitized.npm_config_cache).toBeUndefined();
+        (0, vitest_1.expect)(sanitized.npm_config_userconfig).toBeUndefined();
+        (0, vitest_1.expect)(sanitized.NPM_CONFIG_REGISTRY).toBeUndefined();
+        (0, vitest_1.expect)(sanitized.PATH).toBe("/usr/bin");
+    });
+    // `npm run` prepends node_modules/.bin, so even `npm` could be repo-supplied.
+    (0, vitest_1.it)("drops node_modules/.bin from PATH so npm itself cannot be hijacked", () => {
+        const sanitized = (0, setup_agent_integrations_1.sanitizeSkillsInstallEnv)({
+            PATH: ["/repo/node_modules/.bin", "/usr/local/bin", "/usr/bin"].join(path_1.delimiter),
+        });
+        (0, vitest_1.expect)(sanitized.PATH).toBe(["/usr/local/bin", "/usr/bin"].join(path_1.delimiter));
+    });
+    (0, vitest_1.it)("preserves the developer's own npm config and unrelated vars", () => {
+        const sanitized = (0, setup_agent_integrations_1.sanitizeSkillsInstallEnv)({
+            PATH: "/usr/bin",
+            HOME: "/home/dev",
+            npm_lifecycle_event: "onboard",
+        });
+        // Only npm_config_* is repo-derived; HOME still points at the trusted
+        // ~/.npmrc that npm falls back to.
+        (0, vitest_1.expect)(sanitized.HOME).toBe("/home/dev");
+        (0, vitest_1.expect)(sanitized.npm_lifecycle_event).toBe("onboard");
+    });
+});
+(0, vitest_1.describe)("installSkills", () => {
+    (0, vitest_1.it)("never resolves the skills CLI from the customer repo", () => {
+        const projectRoot = makeRoot();
+        // Plant a local skills binary that would win under `npx skills`.
+        (0, fs_1.mkdirSync)((0, path_1.join)(projectRoot, "node_modules", ".bin"), { recursive: true });
+        (0, fs_1.writeFileSync)((0, path_1.join)(projectRoot, "node_modules", ".bin", "skills"), "#!/bin/sh\necho HIJACKED\nexit 42\n", { mode: 0o755 });
+        spawnSync.mockImplementation((command, args = [], options = {}) => {
+            if (command === "npm") {
+                const prefixIdx = args.indexOf("--prefix");
+                const prefix = args[prefixIdx + 1];
+                (0, vitest_1.expect)(prefix).toBeTruthy();
+                (0, vitest_1.expect)(prefix).not.toBe(projectRoot);
+                (0, vitest_1.expect)(options.cwd).not.toBe(projectRoot);
+                (0, vitest_1.expect)(args).toContain(setup_agent_integrations_1.SKILLS_CLI_PACKAGE_SPEC);
+                (0, vitest_1.expect)(args).toContain("--ignore-scripts");
+                (0, vitest_1.expect)(options.env?.NODE_OPTIONS).toBeUndefined();
+                (0, vitest_1.expect)(options.env?.npm_config_registry).toBeUndefined();
+                (0, vitest_1.expect)(options.env?.PATH ?? "").not.toContain("node_modules/.bin");
+                (0, fs_1.mkdirSync)((0, path_1.join)(prefix, "node_modules", "skills", "bin"), {
+                    recursive: true,
+                });
+                (0, fs_1.writeFileSync)((0, path_1.join)(prefix, "node_modules", "skills", "bin", "cli.mjs"), "// trusted\n");
+                return { status: 0, error: undefined, stderr: "", stdout: "" };
+            }
+            if (command === process.execPath) {
+                (0, vitest_1.expect)(args[0]).toMatch(/node_modules[/\\]skills[/\\]bin[/\\]cli\.mjs$/);
+                (0, vitest_1.expect)(args[0].startsWith(projectRoot)).toBe(false);
+                (0, vitest_1.expect)(args.slice(1)).toEqual([...setup_agent_integrations_1.SKILLS_ADD_ARGS]);
+                (0, vitest_1.expect)(options.cwd).toBe(projectRoot);
+                (0, vitest_1.expect)(options.env?.NODE_OPTIONS).toBeUndefined();
+                return { status: 0, error: undefined, stderr: "", stdout: "" };
+            }
+            throw new Error(`unexpected spawn: ${command} ${args.join(" ")}`);
+        });
+        const previousEnv = {
+            NODE_OPTIONS: process.env.NODE_OPTIONS,
+            npm_config_registry: process.env.npm_config_registry,
+            PATH: process.env.PATH,
+        };
+        process.env.NODE_OPTIONS = "--require ./evil.js";
+        process.env.npm_config_registry = "http://127.0.0.1:9/";
+        process.env.PATH = [
+            (0, path_1.join)(projectRoot, "node_modules", ".bin"),
+            previousEnv.PATH ?? "",
+        ].join(path_1.delimiter);
+        try {
+            (0, vitest_1.expect)((0, setup_agent_integrations_1.installSkills)(projectRoot)).toBe(true);
+        }
+        finally {
+            for (const [key, value] of Object.entries(previousEnv)) {
+                if (value === undefined) {
+                    delete process.env[key];
+                }
+                else {
+                    process.env[key] = value;
+                }
+            }
+        }
+        const commands = spawnSync.mock.calls.map((call) => call[0]);
+        (0, vitest_1.expect)(commands).toEqual(["npm", process.execPath]);
+        (0, vitest_1.expect)(commands).not.toContain("npx");
+        (0, vitest_1.expect)(commands).not.toContain("skills");
+    });
+    (0, vitest_1.it)("continues without skills when the registry download fails", () => {
+        const projectRoot = makeRoot();
+        spawnSync.mockImplementation(() => ({
+            status: 1,
+            error: undefined,
+            stderr: "network down",
+            stdout: "",
+        }));
+        const log = vitest_1.vi.spyOn(console, "log").mockImplementation(() => undefined);
+        try {
+            (0, vitest_1.expect)((0, setup_agent_integrations_1.installSkills)(projectRoot)).toBe(false);
+        }
+        finally {
+            log.mockRestore();
+        }
+    });
+});
+//# sourceMappingURL=install-skills.spec.js.map
+//# debugId=ad19583d-8538-5ed7-88f9-501d2a8dafd0

package/dist/commands/onboard/__tests__/install-skills.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-skills.spec.js","sources":["../../../../src/commands/onboard/__tests__/install-skills.spec.ts"],"sourceRoot":"","names":[],"mappings":";;;;AAAA,2BAAmE;AACnE,2BAA4B;AAC5B,+BAAuC;AACvC,mCAAyE;AAEzE,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC;AAE1B,WAAE,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CACtD,CAAC,CAAC,CAAC;AAEJ,0EAKqC;AAErC,MAAM,IAAI,GAAa,EAAE,CAAC;AAE1B,MAAM,QAAQ,GAAG,GAAW,EAAE;IAC5B,MAAM,IAAI,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAA,WAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,SAAS,CAAC,SAAS,EAAE,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAA,WAAE,EAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,SAAS,GAAG,IAAA,mDAAwB,EAAC;YACzC,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,qBAAqB;YACnC,SAAS,EAAE,oBAAoB;YAC/B,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,SAAS,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/C,IAAA,eAAM,EAAC,SAAS,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,yEAAyE;IACzE,qBAAqB;IACrB,IAAA,WAAE,EAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,IAAA,mDAAwB,EAAC;YACzC,IAAI,EAAE,UAAU;YAChB,mBAAmB,EAAE,qBAAqB;YAC1C,gBAAgB,EAAE,kBAAkB;YACpC,qBAAqB,EAAE,cAAc;YACrC,mBAAmB,EAAE,qBAAqB;SAC3C,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,aAAa,EAAE,CAAC;QACtD,IAAA,eAAM,EAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,aAAa,EAAE,CAAC;QACnD,IAAA,eAAM,EAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,aAAa,EAAE,CAAC;QACxD,IAAA,eAAM,EAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,aAAa,EAAE,CAAC;QACtD,IAAA,eAAM,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,IAAA,WAAE,EAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,SAAS,GAAG,IAAA,mDAAwB,EAAC;YACzC,IAAI,EAAE,CAAC,yBAAyB,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,IAAI,CAClE,gBAAS,CACV;SACF,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,gBAAS,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,SAAS,GAAG,IAAA,mDAAwB,EAAC;YACzC,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,WAAW;YACjB,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAC;QAEH,sEAAsE;QACtE,mCAAmC;QACnC,IAAA,eAAM,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,WAAW,GAAG,QAAQ,EAAE,CAAC;QAC/B,iEAAiE;QACjE,IAAA,cAAS,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAA,kBAAa,EACX,IAAA,WAAI,EAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,EACnD,qCAAqC,EACrC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QAEF,SAAS,CAAC,kBAAkB,CAC1B,CACE,OAAe,EACf,OAAiB,EAAE,EACnB,UAAqD,EAAE,EACvD,EAAE;YACF,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;gBACnC,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;gBAC5B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACrC,IAAA,eAAM,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1C,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kDAAuB,CAAC,CAAC;gBAChD,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;gBAC3C,IAAA,eAAM,EAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;gBAClD,IAAA,eAAM,EAAC,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,aAAa,EAAE,CAAC;gBACzD,IAAA,eAAM,EAAC,OAAO,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;gBACnE,IAAA,cAAS,EAAC,IAAA,WAAI,EAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;oBACvD,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,IAAA,kBAAa,EACX,IAAA,WAAI,EAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,EACxD,cAAc,CACf,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACjE,CAAC;YAED,IAAI,OAAO,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACjC,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CACrB,+CAA+C,CAChD,CAAC;gBACF,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,0CAAe,CAAC,CAAC,CAAC;gBACpD,IAAA,eAAM,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACtC,IAAA,eAAM,EAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACjE,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC,CACF,CAAC;QAEF,MAAM,WAAW,GAAG;YAClB,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;YACtC,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;YACpD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;SACvB,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,qBAAqB,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,qBAAqB,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG;YACjB,IAAA,WAAI,EAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC;YACzC,WAAW,CAAC,IAAI,IAAI,EAAE;SACvB,CAAC,IAAI,CAAC,gBAAS,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,IAAA,eAAM,EAAC,IAAA,wCAAa,EAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CACvC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAW,CACvC,CAAC;QACF,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,WAAW,GAAG,QAAQ,EAAE,CAAC;QAC/B,SAAS,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;YAClC,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,EAAE;SACX,CAAC,CAAC,CAAC;QAEJ,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,IAAA,eAAM,EAAC,IAAA,wCAAa,EAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","debugId":"ad19583d-8538-5ed7-88f9-501d2a8dafd0"}

package/dist/commands/onboard/__tests__/materialize-workspace.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=materialize-workspace.spec.d.ts.map

package/dist/commands/onboard/__tests__/materialize-workspace.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialize-workspace.spec.d.ts","sourceRoot":"","sources":["../../../../src/commands/onboard/__tests__/materialize-workspace.spec.ts"],"names":[],"mappings":""}

package/dist/commands/onboard/__tests__/materialize-workspace.spec.js

@@ -0,0 +1,116 @@
+"use strict";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="acc43c87-43a5-553a-aa9b-43c0b7920626")}catch(e){}}();
+
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const vitest_1 = require("vitest");
+const customer_agents_1 = require("../customer-agents");
+const customer_docs_1 = require("../customer-docs");
+const docs_urls_1 = require("../docs-urls");
+const materialize_workspace_1 = require("../materialize-workspace");
+const dirs = [];
+const makeProjectRoot = () => {
+    const root = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), "onboard-materialize-"));
+    dirs.push(root);
+    return root;
+};
+const materializeInto = (projectRoot) => (0, materialize_workspace_1.materializeOnboardWorkspace)({
+    projectRoot,
+    context: {
+        orgAndProject: null,
+        projectRoot,
+        meticulousSideSetupPath: (0, path_1.join)(projectRoot, ".meticulous-onboard", "meticulous-side-setup.md"),
+        repoUrl: null,
+        ciProvider: "unknown",
+        isGitHubIntegrationActive: null,
+        isGitLabIntegrationActive: null,
+        isBitbucketIntegrationActive: null,
+        meticulousSettingsUrl: null,
+        meticulousTokensUrl: null,
+        meticulousSessionsUrl: null,
+        githubConfigureProjectsUrl: null,
+        gitlabConfigureProjectsUrl: null,
+        bitbucketConfigureProjectsUrl: null,
+        secretsUrl: null,
+        secretsUrlLabel: null,
+        agentIntegrationPaths: [],
+        isMonorepo: false,
+        selectedAppPath: ".",
+        selectedAppName: "app",
+        selectedAppAbsolutePath: projectRoot,
+        frameworkDetection: null,
+    },
+});
+(0, vitest_1.afterEach)(() => {
+    for (const dir of dirs.splice(0)) {
+        (0, fs_1.rmSync)(dir, { recursive: true, force: true });
+    }
+});
+const canonicalAgentsDir = (0, path_1.join)(__dirname, "..", "..", "..", "..", "..", "..", "packages", "admin-cli", "src", "cli", "onboard", "templates", "agents");
+(0, vitest_1.describe)("materializeOnboardWorkspace", () => {
+    (0, vitest_1.it)("copies exactly the customer-safe agents", () => {
+        const workspaceDir = materializeInto(makeProjectRoot());
+        const copied = (0, fs_1.readdirSync)((0, path_1.join)(workspaceDir, ".claude", "agents")).sort();
+        (0, vitest_1.expect)(copied).toEqual([...customer_agents_1.CUSTOMER_AGENT_NAMES].sort().map((name) => `${name}.md`));
+    });
+    (0, vitest_1.it)("does not auto-approve Bash in Claude settings", () => {
+        const workspaceDir = materializeInto(makeProjectRoot());
+        const settings = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(workspaceDir, ".claude", "settings.json"), "utf8"));
+        (0, vitest_1.expect)(settings.permissions?.allow ?? []).not.toContain("Bash");
+    });
+    (0, vitest_1.it)("pre-approves fetching the public docs, and only from that host", () => {
+        const workspaceDir = materializeInto(makeProjectRoot());
+        const settings = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(workspaceDir, ".claude", "settings.json"), "utf8"));
+        const allow = settings.permissions?.allow ?? [];
+        (0, vitest_1.expect)(allow).toContain(`WebFetch(domain:${docs_urls_1.METICULOUS_DOCS_HOST})`);
+        // An unscoped WebFetch would let repo-controlled content exfiltrate anywhere.
+        (0, vitest_1.expect)(allow).not.toContain("WebFetch");
+    });
+    (0, vitest_1.it)("bundles the docs the playbooks cite into .claude/docs", () => {
+        const workspaceDir = materializeInto(makeProjectRoot());
+        const docsDir = (0, path_1.join)(workspaceDir, ".claude", "docs");
+        for (const docPath of customer_docs_1.CUSTOMER_DOC_FILES) {
+            (0, vitest_1.expect)((0, fs_1.existsSync)((0, path_1.join)(docsDir, docPath)), docPath).toBe(true);
+        }
+        // The recorder snippets are the content a WebFetch of the live docs cannot
+        // retrieve (client-rendered), so they must be present on disk.
+        const snippets = (0, fs_1.readdirSync)((0, path_1.join)(docsDir, "recorder-snippets"));
+        (0, vitest_1.expect)(snippets).toContain("script-based-instructions");
+        (0, vitest_1.expect)(snippets).toContain("npm-package-based-instructions");
+        (0, vitest_1.expect)((0, fs_1.readFileSync)((0, path_1.join)(docsDir, "recorder-snippets", "constants.ts"), "utf8")).toContain("snippet.meticulous.ai");
+    });
+    (0, vitest_1.it)("inlines the GitLab and Bitbucket steps the CI doc imports", () => {
+        const workspaceDir = materializeInto(makeProjectRoot());
+        const ciDoc = (0, fs_1.readFileSync)((0, path_1.join)(workspaceDir, ".claude", "docs", "github-actions-v2.ts"), "utf8");
+        // The docs site interpolates these; left as placeholders the agent has no
+        // GitLab/Bitbucket steps at all.
+        (0, vitest_1.expect)(ciDoc).not.toContain("${linkGitLabInstructions}");
+        (0, vitest_1.expect)(ciDoc).not.toContain("${linkBitbucketInstructions}");
+        (0, vitest_1.expect)(ciDoc).toContain("personal access token");
+        (0, vitest_1.expect)(ciDoc).toContain("repository access token");
+        // Imports resolved from webapp-frontend rather than the docs directory.
+        (0, vitest_1.expect)(ciDoc).not.toContain("${METICULOUS_SUPPORT_EMAIL}");
+        (0, vitest_1.expect)(ciDoc).toContain("support@meticulous.ai");
+    });
+    (0, vitest_1.it)("tells the agent to read local docs first with a URL fallback", () => {
+        const workspaceDir = materializeInto(makeProjectRoot());
+        const claudeMd = (0, fs_1.readFileSync)((0, path_1.join)(workspaceDir, ".claude", "CLAUDE.md"), "utf8");
+        (0, vitest_1.expect)(claudeMd).toContain(".claude/docs/");
+        (0, vitest_1.expect)(claudeMd).toContain(docs_urls_1.METICULOUS_DOCS_BASE_URL);
+    });
+    (0, vitest_1.it)("omits internal agents that only exist in the canonical directory", () => {
+        const internalAgents = (0, fs_1.readdirSync)(canonicalAgentsDir)
+            .filter((file) => file.endsWith(".md"))
+            .filter((file) => !customer_agents_1.CUSTOMER_AGENT_NAMES.includes(file.replace(/\.md$/, "")));
+        // Guards the assertion below from silently passing if the canonical set ever
+        // becomes entirely customer-safe.
+        (0, vitest_1.expect)(internalAgents.length).toBeGreaterThan(0);
+        const workspaceDir = materializeInto(makeProjectRoot());
+        const copied = (0, fs_1.readdirSync)((0, path_1.join)(workspaceDir, ".claude", "agents"));
+        (0, vitest_1.expect)(copied.filter((file) => internalAgents.includes(file))).toEqual([]);
+    });
+});
+//# sourceMappingURL=materialize-workspace.spec.js.map
+//# debugId=acc43c87-43a5-553a-aa9b-43c0b7920626

package/dist/commands/onboard/__tests__/materialize-workspace.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialize-workspace.spec.js","sources":["../../../../src/commands/onboard/__tests__/materialize-workspace.spec.ts"],"sourceRoot":"","names":[],"mappings":";;;;AAAA,2BAAgF;AAChF,2BAA4B;AAC5B,+BAA4B;AAC5B,mCAAyD;AACzD,wDAA0D;AAC1D,oDAAsD;AACtD,4CAA8E;AAC9E,oEAAuE;AAEvE,MAAM,IAAI,GAAa,EAAE,CAAC;AAE1B,MAAM,eAAe,GAAG,GAAW,EAAE;IACnC,MAAM,IAAI,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,WAAmB,EAAU,EAAE,CACtD,IAAA,mDAA2B,EAAC;IAC1B,WAAW;IACX,OAAO,EAAE;QACP,aAAa,EAAE,IAAI;QACnB,WAAW;QACX,uBAAuB,EAAE,IAAA,WAAI,EAC3B,WAAW,EACX,qBAAqB,EACrB,0BAA0B,CAC3B;QACD,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,SAAS;QACrB,yBAAyB,EAAE,IAAI;QAC/B,yBAAyB,EAAE,IAAI;QAC/B,4BAA4B,EAAE,IAAI;QAClC,qBAAqB,EAAE,IAAI;QAC3B,mBAAmB,EAAE,IAAI;QACzB,qBAAqB,EAAE,IAAI;QAC3B,0BAA0B,EAAE,IAAI;QAChC,0BAA0B,EAAE,IAAI;QAChC,6BAA6B,EAAE,IAAI;QACnC,UAAU,EAAE,IAAI;QAChB,eAAe,EAAE,IAAI;QACrB,qBAAqB,EAAE,EAAE;QACzB,UAAU,EAAE,KAAK;QACjB,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,KAAK;QACtB,uBAAuB,EAAE,WAAW;QACpC,kBAAkB,EAAE,IAAI;KACzB;CACF,CAAC,CAAC;AAEL,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAA,WAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAA,WAAI,EAC7B,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,WAAW,EACX,KAAK,EACL,KAAK,EACL,SAAS,EACT,WAAW,EACX,QAAQ,CACT,CAAC;AAEF,IAAA,iBAAQ,EAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,IAAA,WAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3E,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CACpB,CAAC,GAAG,sCAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,CAAC,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAC3B,CAAC;QAE5C,IAAA,eAAM,EAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAC3B,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;QAEhD,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,gCAAoB,GAAG,CAAC,CAAC;QACpE,8EAA8E;QAC9E,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAEtD,KAAK,MAAM,OAAO,IAAI,kCAAkB,EAAE,CAAC;YACzC,IAAA,eAAM,EAAC,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;QACD,2EAA2E;QAC3E,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACjE,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACxD,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAC7D,IAAA,eAAM,EACJ,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,OAAO,EAAE,mBAAmB,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACzE,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAA,iBAAY,EACxB,IAAA,WAAI,EAAC,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,CAAC,EAC7D,MAAM,CACP,CAAC;QAEF,0EAA0E;QAC1E,iCAAiC;QACjC,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACnD,wEAAwE;QACxE,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAA,iBAAY,EAC3B,IAAA,WAAI,EAAC,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC,EAC1C,MAAM,CACP,CAAC;QAEF,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,oCAAwB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,cAAc,GAAG,IAAA,gBAAW,EAAC,kBAAkB,CAAC;aACnD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACtC,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,sCAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CACpE,CAAC;QACJ,6EAA6E;QAC7E,kCAAkC;QAClC,IAAA,eAAM,EAAC,cAAc,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAEjD,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpE,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","debugId":"acc43c87-43a5-553a-aa9b-43c0b7920626"}

package/dist/commands/onboard/__tests__/resolve-app.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resolve-app.spec.d.ts.map

package/dist/commands/onboard/__tests__/resolve-app.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-app.spec.d.ts","sourceRoot":"","sources":["../../../../src/commands/onboard/__tests__/resolve-app.spec.ts"],"names":[],"mappings":""}

package/dist/commands/onboard/__tests__/resolve-app.spec.js

@@ -0,0 +1,166 @@
+"use strict";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7fa2bb6e-e3e7-5926-a3df-be917a1fc652")}catch(e){}}();
+
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const vitest_1 = require("vitest");
+const cli_user_error_1 = require("../../../utils/cli-user-error");
+const resolve_app_1 = require("../resolve-app");
+const isInteractive = vitest_1.vi.fn(() => false);
+const promptForConfirmation = vitest_1.vi.fn();
+vitest_1.vi.mock("@alwaysmeticulous/client", async (importOriginal) => ({
+    ...(await importOriginal()),
+    isInteractiveContext: () => isInteractive(),
+}));
+vitest_1.vi.mock("inquirer", () => ({
+    default: { prompt: (...args) => promptForConfirmation(...args) },
+}));
+const dirs = [];
+const makeProject = (files) => {
+    const root = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), "onboard-resolve-app-"));
+    dirs.push(root);
+    for (const [rel, content] of Object.entries(files)) {
+        const full = (0, path_1.join)(root, rel);
+        (0, fs_1.mkdirSync)((0, path_1.dirname)(full), { recursive: true });
+        (0, fs_1.writeFileSync)(full, content);
+    }
+    return root;
+};
+const MONOREPO_FILES = {
+    "package.json": JSON.stringify({
+        name: "root",
+        private: true,
+        workspaces: ["apps/*"],
+    }),
+    "apps/web/package.json": JSON.stringify({
+        name: "@acme/web",
+        dependencies: { react: "18.0.0" },
+        scripts: { dev: "vite" },
+    }),
+    "apps/admin/package.json": JSON.stringify({
+        name: "@acme/admin",
+        dependencies: { react: "18.0.0" },
+        scripts: { dev: "vite" },
+    }),
+};
+const SELECTED_APP = {
+    path: ".",
+    name: "web",
+    packageName: "web",
+};
+(0, vitest_1.afterEach)(() => {
+    for (const dir of dirs.splice(0)) {
+        (0, fs_1.rmSync)(dir, { recursive: true, force: true });
+    }
+});
+(0, vitest_1.describe)("resolveSelectedApp", () => {
+    (0, vitest_1.it)("matches the requested app by path", async () => {
+        const root = makeProject(MONOREPO_FILES);
+        const app = await (0, resolve_app_1.resolveSelectedApp)({
+            projectRoot: root,
+            app: "apps/web",
+        });
+        (0, vitest_1.expect)(app.path).toBe("apps/web");
+    });
+    (0, vitest_1.it)("matches the requested app by package name", async () => {
+        const root = makeProject(MONOREPO_FILES);
+        const app = await (0, resolve_app_1.resolveSelectedApp)({
+            projectRoot: root,
+            app: " @acme/admin ",
+        });
+        (0, vitest_1.expect)(app.path).toBe("apps/admin");
+    });
+    (0, vitest_1.it)("lists the available apps when the requested one is unknown", async () => {
+        const root = makeProject(MONOREPO_FILES);
+        await (0, vitest_1.expect)((0, resolve_app_1.resolveSelectedApp)({ projectRoot: root, app: "apps/nope" })).rejects.toThrow(/App 'apps\/nope' not found[\s\S]*apps\/web/);
+    });
+    (0, vitest_1.it)("selects the only app without prompting", async () => {
+        const root = makeProject({
+            "package.json": JSON.stringify({
+                name: "web",
+                dependencies: { react: "18.0.0" },
+                scripts: { dev: "vite" },
+            }),
+        });
+        const app = await (0, resolve_app_1.resolveSelectedApp)({ projectRoot: root, app: undefined });
+        (0, vitest_1.expect)(app.path).toBe(".");
+    });
+    (0, vitest_1.it)("falls back to the repo root when no frontend app is detected", async () => {
+        const root = makeProject({});
+        const app = await (0, resolve_app_1.resolveSelectedApp)({ projectRoot: root, app: undefined });
+        (0, vitest_1.expect)(app.path).toBe(".");
+        (0, vitest_1.expect)(app.packageName).toBeNull();
+    });
+    (0, vitest_1.it)("requires --app in a monorepo without an interactive terminal", async () => {
+        const root = makeProject(MONOREPO_FILES);
+        await (0, vitest_1.expect)((0, resolve_app_1.resolveSelectedApp)({ projectRoot: root, app: undefined })).rejects.toThrow(cli_user_error_1.CliUserError);
+    });
+});
+(0, vitest_1.describe)("assertSupportedSsr", () => {
+    const confident = {
+        framework: "nuxt",
+        rendering: "ssr",
+        isUnsupportedSsr: true,
+        unsupportedSsrConfidence: "high",
+        details: ["Nuxt detected (ssr=true)"],
+    };
+    const ambiguous = {
+        ...confident,
+        unsupportedSsrConfidence: "ambiguous",
+    };
+    const nextAppAmbiguous = {
+        framework: "nextjs-app",
+        rendering: "ssr",
+        isUnsupportedSsr: true,
+        unsupportedSsrConfidence: "ambiguous",
+        details: ["Next.js detected (router: app)"],
+    };
+    const check = (detection, skipSsrCheck = false) => (0, resolve_app_1.assertSupportedSsr)({ detection, selectedApp: SELECTED_APP, skipSsrCheck });
+    (0, vitest_1.beforeEach)(() => {
+        isInteractive.mockReturnValue(false);
+        promptForConfirmation.mockReset();
+    });
+    (0, vitest_1.it)("passes through supported setups", async () => {
+        await (0, vitest_1.expect)(check({
+            ...confident,
+            isUnsupportedSsr: false,
+            unsupportedSsrConfidence: null,
+        })).resolves.toBeUndefined();
+    });
+    (0, vitest_1.it)("lets the user confirm a high-confidence detection", async () => {
+        isInteractive.mockReturnValue(true);
+        promptForConfirmation.mockResolvedValue({ proceed: true });
+        await (0, vitest_1.expect)(check(confident)).resolves.toBeUndefined();
+        (0, vitest_1.expect)(promptForConfirmation).toHaveBeenCalledWith([
+            vitest_1.expect.objectContaining({
+                message: "We think web (.) is an unsupported SSR setup. Continue anyway?",
+            }),
+        ]);
+    });
+    (0, vitest_1.it)("is bypassed by --skip-ssr-check", async () => {
+        await (0, vitest_1.expect)(check(confident, true)).resolves.toBeUndefined();
+    });
+    (0, vitest_1.it)("points at the escape hatch when there is no terminal to confirm", async () => {
+        await (0, vitest_1.expect)(check(confident)).rejects.toThrow(/--skip-ssr-check/);
+        (0, vitest_1.expect)(promptForConfirmation).not.toHaveBeenCalled();
+    });
+    (0, vitest_1.it)("asks whether to continue when Next.js App Router is detected", async () => {
+        isInteractive.mockReturnValue(true);
+        promptForConfirmation.mockResolvedValue({ proceed: true });
+        await (0, vitest_1.expect)(check(nextAppAmbiguous)).resolves.toBeUndefined();
+        (0, vitest_1.expect)(promptForConfirmation).toHaveBeenCalledWith([
+            vitest_1.expect.objectContaining({
+                message: "We think web (.) uses Next.js App Router. Continue anyway?",
+            }),
+        ]);
+    });
+    (0, vitest_1.it)("stops an ambiguous detection when the user declines", async () => {
+        isInteractive.mockReturnValue(true);
+        promptForConfirmation.mockResolvedValue({ proceed: false });
+        await (0, vitest_1.expect)(check(ambiguous)).rejects.toThrow(cli_user_error_1.CliUserError);
+    });
+});
+//# sourceMappingURL=resolve-app.spec.js.map
+//# debugId=7fa2bb6e-e3e7-5926-a3df-be917a1fc652

package/dist/commands/onboard/__tests__/resolve-app.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-app.spec.js","sources":["../../../../src/commands/onboard/__tests__/resolve-app.spec.ts"],"sourceRoot":"","names":[],"mappings":";;;;AAAA,2BAAmE;AACnE,2BAA4B;AAC5B,+BAAqC;AAErC,mCAAyE;AACzE,kEAA6D;AAG7D,gDAAwE;AAExE,MAAM,aAAa,GAAG,WAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AACzC,MAAM,qBAAqB,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC;AAEtC,WAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IAC7D,GAAG,CAAC,MAAM,cAAc,EAAiC,CAAC;IAC1D,oBAAoB,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE;CAC5C,CAAC,CAAC,CAAC;AAEJ,WAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzB,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,EAAE;CAC5E,CAAC,CAAC,CAAC;AAEJ,MAAM,IAAI,GAAa,EAAE,CAAC;AAE1B,MAAM,WAAW,GAAG,CAAC,KAA6B,EAAU,EAAE;IAC5D,MAAM,IAAI,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAA,cAAS,EAAC,IAAA,cAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAA,kBAAa,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG;IACrB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC;QAC7B,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,CAAC,QAAQ,CAAC;KACvB,CAAC;IACF,uBAAuB,EAAE,IAAI,CAAC,SAAS,CAAC;QACtC,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;QACjC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;KACzB,CAAC;IACF,yBAAyB,EAAE,IAAI,CAAC,SAAS,CAAC;QACxC,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;QACjC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;KACzB,CAAC;CACH,CAAC;AAEF,MAAM,YAAY,GAAkB;IAClC,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,KAAK;CACnB,CAAC;AAEF,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAA,WAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAA,WAAE,EAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAA,gCAAkB,EAAC;YACnC,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAA,gCAAkB,EAAC;YACnC,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,eAAe;SACrB,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,IAAA,eAAM,EACV,IAAA,gCAAkB,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAC5D,CAAC,OAAO,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,WAAW,CAAC;YACvB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC7B,IAAI,EAAE,KAAK;gBACX,YAAY,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;gBACjC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;aACzB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAA,gCAAkB,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5E,IAAA,eAAM,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAA,gCAAkB,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5E,IAAA,eAAM,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAA,eAAM,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,IAAA,eAAM,EACV,IAAA,gCAAkB,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAC1D,CAAC,OAAO,CAAC,OAAO,CAAC,6BAAY,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,SAAS,GAAuB;QACpC,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,MAAM;QAChC,OAAO,EAAE,CAAC,0BAA0B,CAAC;KACtC,CAAC;IACF,MAAM,SAAS,GAAuB;QACpC,GAAG,SAAS;QACZ,wBAAwB,EAAE,WAAW;KACtC,CAAC;IACF,MAAM,gBAAgB,GAAuB;QAC3C,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,WAAW;QACrC,OAAO,EAAE,CAAC,gCAAgC,CAAC;KAC5C,CAAC;IAEF,MAAM,KAAK,GAAG,CACZ,SAA6B,EAC7B,YAAY,GAAG,KAAK,EACL,EAAE,CACjB,IAAA,gCAAkB,EAAC,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;IAE7E,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,qBAAqB,CAAC,SAAS,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,IAAA,eAAM,EACV,KAAK,CAAC;YACJ,GAAG,SAAS;YACZ,gBAAgB,EAAE,KAAK;YACvB,wBAAwB,EAAE,IAAI;SAC/B,CAAC,CACH,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACpC,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3D,MAAM,IAAA,eAAM,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACxD,IAAA,eAAM,EAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC;YACjD,eAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EACL,gEAAgE;aACnE,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,IAAA,eAAM,EAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,IAAA,eAAM,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACpC,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3D,MAAM,IAAA,eAAM,EAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC/D,IAAA,eAAM,EAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC;YACjD,eAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE,4DAA4D;aACtE,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACpC,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5D,MAAM,IAAA,eAAM,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,6BAAY,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","debugId":"7fa2bb6e-e3e7-5926-a3df-be917a1fc652"}

package/dist/commands/onboard/__tests__/safe-repo-fs.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=safe-repo-fs.spec.d.ts.map

package/dist/commands/onboard/__tests__/safe-repo-fs.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-repo-fs.spec.d.ts","sourceRoot":"","sources":["../../../../src/commands/onboard/__tests__/safe-repo-fs.spec.ts"],"names":[],"mappings":""}