@amg555/frameforge-mcp 2.7.6 → 2.7.7

package/.agent/skills/gstack-browse/test/path-security-realpath.test.ts

@@ -1,89 +0,0 @@
-/**
- * #3104: safe directories and target paths go through one realpath function.
- * On Windows `fs.realpathSync` keeps an 8.3 short temp dir (C:\Users\BURCIN~1)
- * while `fs.realpathSync.native` expands it, so a make-pdf target inside the
- * temp dir was rejected. Each case runs the validator in a child process whose
- * temp environment is the alias under test, the way the daemon computes its
- * safe directories once at startup. On POSIX the fixture lives under /var/tmp
- * because /tmp is always a safe directory there.
- */
-import { afterAll, beforeAll, describe, expect, test } from 'bun:test';
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-
-const VALIDATOR = path.resolve(import.meta.dir, '../src/path-security.ts');
-const WIN = process.platform === 'win32';
-let root = '';
-
-beforeAll(() => {
-  root = fs.realpathSync.native(fs.mkdtempSync(path.join(WIN ? os.tmpdir() : path.join(path.sep, 'var', 'tmp'), 'gstack-realpath-')));
-  fs.mkdirSync(path.join(root, 'cwd'));
-  fs.mkdirSync(path.join(root, 'Long Temp Directory'));
-});
-
-afterAll(() => {
-  if (root) fs.rmSync(root, { recursive: true, force: true });
-});
-
-function validate(tempDir: string, checks: Array<['output' | 'read', string]>): string[] {
-  const env: Record<string, string> = {};
-  for (const [key, value] of Object.entries(process.env)) if (value !== undefined) env[key] = value;
-  if (WIN) Object.assign(env, { TEMP: tempDir, TMP: tempDir });
-  else env.TMPDIR = tempDir;
-  const script = `
-    const v = require(${JSON.stringify(VALIDATOR)});
-    for (const [kind, target] of ${JSON.stringify(checks)}) {
-      try { (kind === 'output' ? v.validateOutputPath : v.validateReadPath)(target); console.log('OK'); }
-      catch (e) { console.log('REJECT ' + e.message); }
-    }`;
-  const result = Bun.spawnSync([process.execPath, '-e', script], { cwd: path.join(root, 'cwd'), env, stdout: 'pipe', stderr: 'pipe', timeout: 30_000 });
-  expect(result.stderr.toString()).toBe('');
-  return result.stdout.toString().trim().split(/\r?\n/);
-}
-
-function shortPath(dir: string): string {
-  const result = Bun.spawnSync(['powershell', '-NoProfile', '-NonInteractive', '-Command',
-    `(New-Object -ComObject Scripting.FileSystemObject).GetFolder($env:GSTACK_LONG_DIR).ShortPath`], {
-    env: { ...process.env, GSTACK_LONG_DIR: dir }, stdout: 'pipe', stderr: 'pipe', timeout: 30_000,
-  });
-  return result.stdout.toString().trim();
-}
-
-describe('#3104 one realpath for safe dirs and targets', () => {
-  test('a temp dir reached through an alias accepts outputs and reads inside it', () => {
-    const real = path.join(root, 'Long Temp Directory');
-    let alias = path.join(root, 'alias');
-    if (WIN) {
-      alias = shortPath(real);
-      if (!alias || alias.toLowerCase() === real.toLowerCase()) {
-        console.log(`[skip] 8.3 short names are disabled on this volume (${real}); the alias case cannot be built`);
-        return;
-      }
-    } else {
-      fs.symlinkSync(real, alias);
-    }
-    const work = path.join(alias, 'gstack-render-browse-probe');
-    fs.mkdirSync(work);
-    fs.writeFileSync(path.join(work, 'pdf-0.json'), '{}');
-    expect(validate(alias, [
-      ['output', path.join(work, 'artifact-0.pdf')],
-      ['output', path.join(work, 'new-dir', 'artifact-1.pdf')],
-      ['read', path.join(work, 'pdf-0.json')],
-      ['read', path.join(work, 'missing-dir', 'payload.json')],
-      ['output', path.join(root, 'outside.pdf')],
-    ])).toEqual(['OK', 'OK', 'OK', 'OK', expect.stringMatching(/^REJECT Path must be within: /)]);
-  });
-
-  test('a missing temp dir matches a target that differs only in case on Windows, and only there', () => {
-    const missing = path.join(root, 'Missing-Temp');
-    const [result] = validate(missing, [['output', path.join(root, 'missing-temp', 'artifact.pdf')]]);
-    if (WIN) expect(result).toBe('OK');
-    else expect(result).toMatch(/^REJECT Path must be within: /);
-  });
-
-  test('existing components compare exactly after resolution', () => {
-    const [result] = validate(path.join(root, 'Long Temp Directory'), [['output', path.join(root, 'Long Temp Directory-evil', 'x.pdf')]]);
-    expect(result).toMatch(/^REJECT Path must be within: /);
-  });
-});

package/.agent/skills/gstack-browse/test/path-validation.test.ts

@@ -1,268 +0,0 @@
-import { beforeAll, describe, it, expect } from 'bun:test';
-import { chromium } from 'playwright';
-import { validateOutputPath } from '../src/path-security';
-import { validateReadPath, SENSITIVE_COOKIE_NAME, SENSITIVE_COOKIE_VALUE } from '../src/read-commands';
-import { classifyAddress } from '../src/url-validation';
-import { mkdirSync, mkdtempSync, rmSync, symlinkSync, unlinkSync, writeFileSync, realpathSync } from 'fs';
-import { tmpdir, userInfo } from 'os';
-import { join } from 'path';
-
-describe('validateOutputPath', () => {
-  it('allows paths within /tmp', () => {
-    expect(() => validateOutputPath('/tmp/screenshot.png')).not.toThrow();
-  });
-
-  it('allows paths in subdirectories of /tmp', () => {
-    expect(() => validateOutputPath('/tmp/browse/output.png')).not.toThrow();
-  });
-
-  it('allows paths within cwd', () => {
-    expect(() => validateOutputPath(`${process.cwd()}/output.png`)).not.toThrow();
-  });
-
-  it('blocks paths outside safe directories', () => {
-    expect(() => validateOutputPath('/etc/cron.d/backdoor.png')).toThrow(/Path must be within/);
-  });
-
-  it('blocks /tmpevil prefix collision', () => {
-    expect(() => validateOutputPath('/tmpevil/file.png')).toThrow(/Path must be within/);
-  });
-
-  it('blocks home directory paths', () => {
-    expect(() => validateOutputPath('/Users/someone/file.png')).toThrow(/Path must be within/);
-  });
-
-  it('blocks path traversal via ..', () => {
-    expect(() => validateOutputPath('/tmp/../etc/passwd')).toThrow(/Path must be within/);
-  });
-});
-
-describe('upload command path validation', () => {
-  let observations: Record<string, {
-    error: string | null;
-    result: string | null;
-    files: { name: string; text: string }[];
-    inputEvents: number;
-  }>;
-
-  beforeAll(() => {
-    const root = mkdtempSync(join(userInfo().homedir, 'gstack-upload-paths-'));
-    try {
-      for (const dir of ['home', 'state', 'project', 'private', 'tmp']) {
-        mkdirSync(join(root, dir), { mode: 0o700 });
-      }
-      const probe = Bun.spawnSync([
-        process.execPath, join(import.meta.dir, 'fixtures', 'upload-path-validation.ts'), chromium.executablePath(),
-      ], {
-        cwd: join(root, 'project'),
-        env: {
-          ...process.env,
-          HOME: join(root, 'home'),
-          USERPROFILE: join(root, 'home'),
-          GSTACK_HOME: join(root, 'state'),
-          CLAUDE_PLUGIN_DATA: '',
-          XDG_CONFIG_HOME: join(root, 'home', '.config'),
-          XDG_CACHE_HOME: join(root, 'home', '.cache'),
-          CHROMIUM_PROFILE: join(root, 'profile'),
-          TMPDIR: join(root, 'tmp'),
-          TMP: join(root, 'tmp'),
-          TEMP: join(root, 'tmp'),
-        },
-        timeout: 60_000,
-      });
-      expect(probe.exitCode, probe.stderr.toString()).toBe(0);
-      observations = JSON.parse(probe.stdout.toString());
-    } finally {
-      rmSync(root, { recursive: true, force: true });
-    }
-  }, 70_000);
-
-  for (const selector of ['css', 'ref']) {
-    for (const scenario of [
-      'relative-file-link', 'absolute-file-link', 'absolute-outside', 'relative-traversal',
-      'relative-directory-link', 'absolute-directory-link', 'outside-directory-upload',
-      'mixed-valid-first', 'mixed-invalid-first', 'mixed-outside-absolute',
-    ]) {
-      it(`${selector}: rejects ${scenario} before delivering any file`, () => {
-        const actual = observations[`${selector}:${scenario}`];
-        expect(actual, JSON.stringify(actual)).toEqual({
-          error: expect.stringMatching(/Path must be within|Path traversal/),
-          result: null,
-          files: [],
-          inputEvents: 0,
-        });
-      });
-    }
-
-    for (const scenario of ['broken-link', 'missing-file', 'mixed-missing-file']) {
-      it(`${selector}: rejects ${scenario} before delivering any file`, () => {
-        expect(observations[`${selector}:${scenario}`]).toEqual({
-          error: expect.stringContaining('File not found'),
-          result: null,
-          files: [],
-          inputEvents: 0,
-        });
-      });
-    }
-
-    for (const scenario of ['relative-allowed', 'absolute-allowed', 'safe-file-link', 'safe-directory-link', 'safe-directory-upload']) {
-      it(`${selector}: uploads checked target bytes for ${scenario}`, () => {
-        expect(observations[`${selector}:${scenario}`]).toEqual({
-          error: null,
-          result: expect.stringContaining('Uploaded:'),
-          files: [{ name: 'allowed.txt', text: 'synthetic allowed bytes' }],
-          inputEvents: 1,
-        });
-      });
-    }
-
-    it(`${selector}: preserves allowed temp and multi-file uploads`, () => {
-      expect(observations[`${selector}:multiple-allowed`]).toEqual({
-        error: null,
-        result: expect.stringContaining('Uploaded:'),
-        files: [
-          { name: 'allowed.txt', text: 'synthetic allowed bytes' },
-          { name: 'temp.txt', text: 'synthetic temp bytes' },
-        ],
-        inputEvents: 1,
-      });
-    });
-  }
-});
-
-describe('validateReadPath', () => {
-  it('allows absolute paths within /tmp', () => {
-    expect(() => validateReadPath('/tmp/script.js')).not.toThrow();
-  });
-
-  it('allows absolute paths within cwd', () => {
-    expect(() => validateReadPath(`${process.cwd()}/test.js`)).not.toThrow();
-  });
-
-  it('allows relative paths without traversal', () => {
-    expect(() => validateReadPath('src/index.js')).not.toThrow();
-  });
-
-  it('blocks absolute paths outside safe directories', () => {
-    expect(() => validateReadPath('/etc/passwd')).toThrow(/Path must be within/);
-  });
-
-  it('blocks /tmpevil prefix collision', () => {
-    expect(() => validateReadPath('/tmpevil/file.js')).toThrow(/Path must be within/);
-  });
-
-  it('blocks path traversal sequences', () => {
-    expect(() => validateReadPath('../../../etc/passwd')).toThrow(/Path must be within/);
-  });
-
-  it('blocks nested path traversal', () => {
-    expect(() => validateReadPath('src/../../etc/passwd')).toThrow(/Path must be within/);
-  });
-
-  it('blocks symlink inside safe dir pointing outside', () => {
-    const linkPath = join(tmpdir(), 'test-symlink-bypass-' + Date.now());
-    try {
-      symlinkSync('/etc/passwd', linkPath);
-      expect(() => validateReadPath(linkPath)).toThrow(/Path must be within/);
-    } finally {
-      try { unlinkSync(linkPath); } catch {}
-    }
-  });
-
-  it('throws clear error on non-ENOENT realpathSync failure', () => {
-    // Attempting to resolve a path through a non-directory should throw
-    // a descriptive error (ENOTDIR), not silently pass through.
-    // Create a regular file, then try to resolve a path through it as if it were a directory.
-    const filePath = join(tmpdir(), 'test-notdir-' + Date.now());
-    try {
-      writeFileSync(filePath, 'not a directory');
-      // filePath is a file, so filePath + '/subpath' triggers ENOTDIR
-      const invalidPath = join(filePath, 'subpath');
-      expect(() => validateReadPath(invalidPath)).toThrow(/Cannot resolve real path|Path must be within/);
-    } finally {
-      try { unlinkSync(filePath); } catch {}
-    }
-  });
-});
-
-describe('validateOutputPath — symlink resolution', () => {
-  it('blocks symlink inside /tmp pointing outside safe dirs', () => {
-    const linkPath = join(tmpdir(), 'test-output-symlink-' + Date.now() + '.png');
-    try {
-      symlinkSync('/etc/passwd', linkPath); // /etc/passwd exists on every Unix — /etc/crontab is absent on Amazon Linux/Fedora minimal;
-      expect(() => validateOutputPath(linkPath)).toThrow(/Path must be within/);
-    } finally {
-      try { unlinkSync(linkPath); } catch {}
-    }
-  });
-
-  it('allows symlink inside /tmp pointing to another /tmp path', () => {
-    // Use /tmp (TEMP_DIR on macOS/Linux), not os.tmpdir() which may be a different path
-    const realTmp = realpathSync('/tmp');
-    const targetPath = join(realTmp, 'test-output-real-' + Date.now() + '.png');
-    const linkPath = join(realTmp, 'test-output-link-' + Date.now() + '.png');
-    try {
-      writeFileSync(targetPath, '');
-      symlinkSync(targetPath, linkPath);
-      expect(() => validateOutputPath(linkPath)).not.toThrow();
-    } finally {
-      try { unlinkSync(linkPath); } catch {}
-      try { unlinkSync(targetPath); } catch {}
-    }
-  });
-
-  it('blocks new file in symlinked directory pointing outside', () => {
-    const linkDir = join(tmpdir(), 'test-dirlink-' + Date.now());
-    try {
-      symlinkSync('/etc', linkDir);
-      expect(() => validateOutputPath(join(linkDir, 'evil.png'))).toThrow(/Path must be within/);
-    } finally {
-      try { unlinkSync(linkDir); } catch {}
-    }
-  });
-});
-
-describe('cookie redaction — production patterns', () => {
-  it('detects sensitive cookie names', () => {
-    expect(SENSITIVE_COOKIE_NAME.test('session_id')).toBe(true);
-    expect(SENSITIVE_COOKIE_NAME.test('auth_token')).toBe(true);
-    expect(SENSITIVE_COOKIE_NAME.test('csrf-token')).toBe(true);
-    expect(SENSITIVE_COOKIE_NAME.test('api_key')).toBe(true);
-    expect(SENSITIVE_COOKIE_NAME.test('jwt.payload')).toBe(true);
-  });
-
-  it('ignores non-sensitive cookie names', () => {
-    expect(SENSITIVE_COOKIE_NAME.test('theme')).toBe(false);
-    expect(SENSITIVE_COOKIE_NAME.test('locale')).toBe(false);
-    expect(SENSITIVE_COOKIE_NAME.test('_ga')).toBe(false);
-  });
-
-  it('detects sensitive cookie value prefixes', () => {
-    expect(SENSITIVE_COOKIE_VALUE.test('eyJhbGciOiJIUzI1NiJ9')).toBe(true); // JWT
-    expect(SENSITIVE_COOKIE_VALUE.test('sk-ant-abc123')).toBe(true); // Anthropic
-    expect(SENSITIVE_COOKIE_VALUE.test('ghp_xxxxxxxxxxxx')).toBe(true); // GitHub PAT
-    expect(SENSITIVE_COOKIE_VALUE.test('xoxb-token')).toBe(true); // Slack
-  });
-
-  it('ignores non-sensitive values', () => {
-    expect(SENSITIVE_COOKIE_VALUE.test('dark')).toBe(false);
-    expect(SENSITIVE_COOKIE_VALUE.test('en-US')).toBe(false);
-    expect(SENSITIVE_COOKIE_VALUE.test('1234567890')).toBe(false);
-  });
-});
-
-describe('DNS rebinding — production blocklist', () => {
-  it('blocks fd00:: IPv6 metadata address via validateNavigationUrl', async () => {
-    const { validateNavigationUrl } = await import('../src/url-validation');
-    await expect(validateNavigationUrl('http://[fd00::]/')).rejects.toThrow(/cloud metadata/i);
-  });
-
-  it('blocks AWS/GCP IPv4 metadata address', () => {
-    expect(classifyAddress('169.254.169.254')).toBe('blocked');
-  });
-
-  it('does not block normal addresses', () => {
-    expect(classifyAddress('8.8.8.8')).toBe('other');
-    expect(classifyAddress('2001:4860:4860::8888')).toBe('other');
-  });
-});

package/.agent/skills/gstack-browse/test/pdf-flags.test.ts

@@ -1,86 +0,0 @@
-/**
- * $B pdf flag contract tests.
- *
- * Pure unit tests of the parsing/validation logic. These do NOT spin up
- * Chromium — that's covered by make-pdf's integration tests.
- */
-
-import { describe, expect, test } from "bun:test";
-import * as fs from "node:fs";
-import * as path from "node:path";
-import * as os from "node:os";
-
-import { extractTabId } from "../src/cli";
-
-// We can't import the internal parsePdfArgs directly without exporting it,
-// but we can exercise it end-to-end through the browse CLI. For fast unit
-// coverage we test the flag-extraction layer here.
-
-describe("extractTabId", () => {
-  test("strips --tab-id and returns the value", () => {
-    const { tabId, args } = extractTabId(["--tab-id", "3", "extra"]);
-    expect(tabId).toBe(3);
-    expect(args).toEqual(["extra"]);
-  });
-
-  test("returns undefined when flag is absent", () => {
-    const { tabId, args } = extractTabId(["goto", "https://example.com"]);
-    expect(tabId).toBeUndefined();
-    expect(args).toEqual(["goto", "https://example.com"]);
-  });
-
-  test("ignores trailing --tab-id with no value", () => {
-    const { tabId, args } = extractTabId(["click", "@e1", "--tab-id"]);
-    expect(tabId).toBeUndefined();
-    expect(args).toEqual(["click", "@e1"]);
-  });
-
-  test("handles --tab-id at different positions", () => {
-    const front = extractTabId(["--tab-id", "5", "pdf", "/tmp/out.pdf"]);
-    expect(front.tabId).toBe(5);
-    expect(front.args).toEqual(["pdf", "/tmp/out.pdf"]);
-
-    const middle = extractTabId(["pdf", "--tab-id", "7", "/tmp/out.pdf"]);
-    expect(middle.tabId).toBe(7);
-    expect(middle.args).toEqual(["pdf", "/tmp/out.pdf"]);
-
-    const end = extractTabId(["pdf", "/tmp/out.pdf", "--tab-id", "9"]);
-    expect(end.tabId).toBe(9);
-    expect(end.args).toEqual(["pdf", "/tmp/out.pdf"]);
-  });
-
-  test("ignores non-numeric --tab-id values", () => {
-    const { tabId, args } = extractTabId(["--tab-id", "abc", "pdf"]);
-    expect(tabId).toBeUndefined();
-    expect(args).toEqual(["pdf"]);
-  });
-});
-
-describe("pdf --from-file payload shape", () => {
-  test("writes a JSON payload file and reads it back", () => {
-    const tmpPath = path.join(os.tmpdir(), `browse-pdf-test-${Date.now()}.json`);
-    const payload = {
-      output: "/tmp/browse-out.pdf",
-      format: "letter",
-      marginTop: "1in",
-      marginRight: "1in",
-      marginBottom: "1in",
-      marginLeft: "1in",
-      pageNumbers: true,
-      tagged: true,
-      outline: true,
-      toc: false,
-      headerTemplate: '<div style="font-size:9pt">Title</div>',
-      footerTemplate: undefined,
-    };
-    fs.writeFileSync(tmpPath, JSON.stringify(payload));
-    try {
-      const readBack = JSON.parse(fs.readFileSync(tmpPath, "utf8"));
-      expect(readBack.output).toBe("/tmp/browse-out.pdf");
-      expect(readBack.pageNumbers).toBe(true);
-      expect(readBack.headerTemplate).toContain("Title");
-    } finally {
-      fs.unlinkSync(tmpPath);
-    }
-  });
-});

package/.agent/skills/gstack-browse/test/platform.test.ts

@@ -1,37 +0,0 @@
-import { describe, test, expect } from 'bun:test';
-import { TEMP_DIR, isPathWithin, IS_WINDOWS } from '../src/platform';
-
-describe('platform constants', () => {
-  test('TEMP_DIR is /tmp on non-Windows', () => {
-    if (!IS_WINDOWS) {
-      expect(TEMP_DIR).toBe('/tmp');
-    }
-  });
-
-  test('IS_WINDOWS reflects process.platform', () => {
-    expect(IS_WINDOWS).toBe(process.platform === 'win32');
-  });
-});
-
-describe('isPathWithin', () => {
-  test('path inside directory returns true', () => {
-    expect(isPathWithin('/tmp/foo', '/tmp')).toBe(true);
-  });
-
-  test('path outside directory returns false', () => {
-    expect(isPathWithin('/etc/foo', '/tmp')).toBe(false);
-  });
-
-  test('exact match returns true', () => {
-    expect(isPathWithin('/tmp', '/tmp')).toBe(true);
-  });
-
-  test('partial prefix does not match (path traversal)', () => {
-    // /tmp-evil should NOT match /tmp
-    expect(isPathWithin('/tmp-evil/foo', '/tmp')).toBe(false);
-  });
-
-  test('nested path returns true', () => {
-    expect(isPathWithin('/tmp/a/b/c', '/tmp')).toBe(true);
-  });
-});

package/.agent/skills/gstack-browse/test/playwright-core-patch.test.ts

@@ -1,62 +0,0 @@
-/**
- * #2160/#1989: playwright-core is bun-patched to pass windowsHide at its two
- * Windows-visible child_process sites — the browser launch spawn (Node
- * defaults windowsHide to FALSE for spawn, so browser children could flash a
- * console window) and the force-kill taskkill spawnSync. This is the repo's
- * first patchedDependencies entry; these static checks pin the three-legged
- * coherence (patch file ↔ package.json ↔ installed tree) so a playwright
- * bump that forgets to re-target the patch fails CI instead of silently
- * dropping it. NOTE: bumping playwright (c25-style) REQUIRES regenerating
- * this patch against the new version — see the revert pairing in the wave
- * plan (reverting the bump means dropping the patch too).
- */
-
-import { describe, expect, test } from 'bun:test';
-import * as fs from 'fs';
-import * as path from 'path';
-
-const ROOT = path.resolve(import.meta.dir, '..', '..');
-
-function installedPlaywrightCoreVersion(): string {
-  const pkg = JSON.parse(fs.readFileSync(
-    path.join(ROOT, 'node_modules', 'playwright-core', 'package.json'), 'utf-8',
-  ));
-  return pkg.version as string;
-}
-
-describe('playwright-core windowsHide patch (#2160, #1989)', () => {
-  test('package.json declares the patch for the installed version', () => {
-    const pkg = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf-8'));
-    const version = installedPlaywrightCoreVersion();
-    const key = `playwright-core@${version}`;
-    expect(pkg.patchedDependencies).toBeDefined();
-    // Version-keyed on purpose: if playwright is bumped without re-targeting
-    // the patch, this fails with the exact key that needs regenerating.
-    expect(pkg.patchedDependencies[key]).toBe(`patches/playwright-core@${version}.patch`);
-  });
-
-  test('the patch file exists and carries both windowsHide sites', () => {
-    const version = installedPlaywrightCoreVersion();
-    const patchPath = path.join(ROOT, 'patches', `playwright-core@${version}.patch`);
-    expect(fs.existsSync(patchPath)).toBe(true);
-    const patch = fs.readFileSync(patchPath, 'utf-8');
-    // Launch spawnOptions site.
-    expect(patch).toContain('+    windowsHide: true,');
-    // taskkill force-kill site.
-    expect(patch).toContain('shell: true, windowsHide: true');
-  });
-
-  test('bun.lock is coherent: the lockfile records the patched dependency', () => {
-    const lock = fs.readFileSync(path.join(ROOT, 'bun.lock'), 'utf-8');
-    const version = installedPlaywrightCoreVersion();
-    expect(lock).toContain(`patches/playwright-core@${version}.patch`);
-  });
-
-  test('the INSTALLED tree actually has the patch applied (bun install ran it)', () => {
-    const bundle = fs.readFileSync(
-      path.join(ROOT, 'node_modules', 'playwright-core', 'lib', 'coreBundle.js'), 'utf-8',
-    );
-    expect(bundle).toContain('gstack patch (#2160/#1989)');
-    expect(bundle).toContain('shell: true, windowsHide: true');
-  });
-});