@aria_asi/cli 0.2.2 → 0.2.4

package/dist/aria-connector/src/onboarding-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-wizard.js","sourceRoot":"","sources":["../../../src/onboarding-wizard.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,kDAAkD;AAClD,EAAE;AACF,QAAQ;AACR,uCAAuC;AACvC,oEAAoE;AACpE,oDAAoD;AACpD,8CAA8C;AAC9C,sCAAsC;AACtC,oEAAoE;AACpE,sEAAsE;AACtE,yDAAyD;AACzD,mEAAmE;AACnE,kEAAkE;AAClE,EAAE;AACF,qEAAqE;AACrE,6EAA6E;AAC7E,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAE3E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,6BAA6B,CAAC;AACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;AACpD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAYlD,SAAS,MAAM,CAAC,EAAsC,EAAE,QAAgB,EAAE,MAAM,GAAG,KAAK;IACtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,EAAE,CAAC;YACX,sEAAsE;YACtE,sEAAsE;YACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;gBACrC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,sBAAsB;QACtB,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,KAAK,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,yDAAyD,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACvG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,GAAS,MAAM,CAAC;QACxB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,UAAU,GAAG,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,oDAAoD,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACpG,IAAI,UAAU,KAAK,EAAE;gBAAE,UAAU,GAAG,MAAM,CAAC;YAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;gBACvD,UAAU,GAAG,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,GAAG,UAAkB,CAAC;QAE1B,6BAA6B;QAC7B,MAAM,eAAe,GAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC1G,IAAI,QAAQ,GAAkB,EAAE,CAAC;QACjC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAoB,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,0BAA0B,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACvG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAa,CAAC,EAAE,CAAC;gBAC5C,QAAQ,GAAG,CAAa,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,mBAAmB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,GAAG,OAAO,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,EAAE,CAAC;gBACf,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,gBAAgB,QAAQ,YAAY,CAAC,CAAC;gBAChE,IAAI,CAAC,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,IAAI,QAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,4BAA4B,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;aACtF,CAAC,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAuB,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,KAAK,IAAI,mBAAmB,IAAI,CAAC,MAAM,qBAAqB,EAAE,CAAC,CAAC;gBAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACnC,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,aAAa,GAAG;YACpB,GAAG,QAAQ,CAAC,MAAM;YAClB,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK;YACpC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG;YACzB,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI;YAC3B,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG;YACzB,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,QAAQ;YACrC,KAAK;YACL,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACnC,CAAC;QACF,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5F,4CAA4C;QAC5C,wEAAwE;QACxE,wCAAwC;QACxC,MAAM,iBAAiB,GAAG,QAAoB,CAAC;QAC/C,MAAM,YAAY,GAAG;YACnB,KAAK,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,KAAK,EAAE,eAAe,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;YACjG,QAAQ;YACR,KAAK;SACN,CAAC;QACF,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE1F,8BAA8B;QAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAChG,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,sDAAsD,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,0BAA0B,UAAU,CAAC,SAAS,CAAC,MAAM,wEAAwE,CAAC,CAAC;QAC7I,CAAC;QAED,EAAE,CAAC,KAAK,EAAE,CAAC;QAEX,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,iCAAiC,QAAQ,CAAC,OAAO,CAAC,GAAG,WAAW,IAAI,eAAe,QAAQ,GAAG,CAAC,CAAC;QAC5G,OAAO,CAAC,GAAG,CAAC,mHAAmH,CAAC,CAAC;QACjI,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAkB;IACzC,MAAM,QAAQ,GAA6B;QACzC,SAAS,EAAE,0BAA0B;QACrC,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,8BAA8B;QACtC,UAAU,EAAE,eAAe;QAC3B,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC"}

package/dist/aria-connector/src/self-update.d.ts

@@ -0,0 +1,22 @@
+export interface UpdateCheckResult {
+    ok: boolean;
+    current?: string;
+    latest?: string;
+    updateAvailable?: boolean;
+    message?: string;
+    reason?: string;
+}
+/**
+ * Check the registry for the latest @aria_asi/cli version. Rate-limited
+ * to once per CHECK_INTERVAL_MS (24h) via a timestamp file in ~/.aria.
+ * Caller can pass force=true to bypass the rate limit (used by `aria check-update`).
+ */
+export declare function checkForUpdate(opts?: {
+    force?: boolean;
+}): Promise<UpdateCheckResult>;
+/**
+ * Convenience: check + print the notice if available. Non-blocking, silent
+ * on errors. Called from bin/aria.js on startup.
+ */
+export declare function maybePrintUpdateNotice(): Promise<void>;
+//# sourceMappingURL=self-update.d.ts.map

package/dist/aria-connector/src/self-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-update.d.ts","sourceRoot":"","sources":["../../../src/self-update.ts"],"names":[],"mappings":"AAwCA,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAiDD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAqD/F;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ5D"}

package/dist/aria-connector/src/self-update.js

@@ -0,0 +1,162 @@
+// self-update — checks the npm registry for newer @aria_asi/cli versions
+// and surfaces a one-line notice. Doesn't auto-install (clients control
+// their tooling); just informs.
+//
+// Direction: Hamza 2026-04-26 — "does the package auto update when we
+// enhance it on our enhance? so we can continually improve all night using
+// arias background work we should imrpove to do that once we finish".
+// This is the primitive that closes the overnight-improvement loop:
+// Aria publishes 0.2.5 / 0.3.0 / etc.; clients see the notice on their
+// next `aria <cmd>` invocation; they upgrade with one command.
+//
+// Doctrine bindings:
+//   - feedback_no_demos.md — real overnight evolution, real registry check
+//   - feedback_no_timeouts_doctrine.md — fetch with no AbortSignal.timeout;
+//     use bare try/catch, real-error-driven backpressure
+//   - project_phase_10_endless_army_orchestration.md — continuous shipping
+//     is the Phase 10 north star; self-update is its delivery mechanism
+//
+// Behavior:
+//   - Reads installed version from package.json (resolved via import.meta.url
+//     walk to find the package root)
+//   - Reads ~/.aria/last-update-check timestamp; if checked <24h ago, skip
+//   - GET registry.npmjs.org/@aria_asi/cli for latest dist-tag
+//   - semver-compare; if newer, return {updateAvailable: true, latest, current, message}
+//   - Write timestamp on every check (success or skip-due-to-rate-limit)
+//   - Failures are silent (network down, registry blip — never block CLI startup)
+//
+// Privacy: the request to npmjs only sends User-Agent (npm registry public).
+// No client identity, no telemetry beyond what the public registry already logs.
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const ARIA_DIR = join(homedir(), '.aria');
+const LAST_CHECK_PATH = join(ARIA_DIR, 'last-update-check');
+const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000; // 24h
+const REGISTRY_URL = 'https://registry.npmjs.org/@aria_asi%2Fcli';
+/**
+ * Find the package's own version by walking up from this file's runtime
+ * path until we hit the package.json with name @aria_asi/cli.
+ */
+function findInstalledVersion() {
+    try {
+        const here = fileURLToPath(import.meta.url);
+        let cur = dirname(here);
+        for (let i = 0; i < 8; i++) {
+            const pkgPath = join(cur, 'package.json');
+            if (existsSync(pkgPath)) {
+                const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+                if (pkg.name === '@aria_asi/cli' && typeof pkg.version === 'string') {
+                    return pkg.version;
+                }
+            }
+            const parent = dirname(cur);
+            if (parent === cur)
+                break;
+            cur = parent;
+        }
+    }
+    catch { /* fall through */ }
+    return null;
+}
+/**
+ * Compare semver strings — returns 1 if a>b, -1 if a<b, 0 if equal.
+ * Pre-release suffixes (e.g. 0.2.4-beta) sort lower than the same base.
+ */
+function compareSemver(a, b) {
+    const parse = (s) => {
+        const [main, ...preParts] = s.split('-');
+        const nums = main.split('.').map((n) => parseInt(n, 10));
+        while (nums.length < 3)
+            nums.push(0);
+        return { nums, pre: preParts.join('-') };
+    };
+    const pa = parse(a);
+    const pb = parse(b);
+    for (let i = 0; i < 3; i++) {
+        if (pa.nums[i] > pb.nums[i])
+            return 1;
+        if (pa.nums[i] < pb.nums[i])
+            return -1;
+    }
+    // Equal numerics — pre-release sorts before release
+    if (pa.pre && !pb.pre)
+        return -1;
+    if (!pa.pre && pb.pre)
+        return 1;
+    return pa.pre.localeCompare(pb.pre);
+}
+/**
+ * Check the registry for the latest @aria_asi/cli version. Rate-limited
+ * to once per CHECK_INTERVAL_MS (24h) via a timestamp file in ~/.aria.
+ * Caller can pass force=true to bypass the rate limit (used by `aria check-update`).
+ */
+export async function checkForUpdate(opts = {}) {
+    const current = findInstalledVersion();
+    if (!current) {
+        return { ok: false, reason: 'could not resolve installed version' };
+    }
+    // Rate-limit check
+    if (!opts.force && existsSync(LAST_CHECK_PATH)) {
+        try {
+            const ts = parseInt(readFileSync(LAST_CHECK_PATH, 'utf-8').trim(), 10);
+            if (!isNaN(ts) && Date.now() - ts < CHECK_INTERVAL_MS) {
+                return { ok: true, current, reason: 'rate-limited (checked within last 24h)' };
+            }
+        }
+        catch { /* malformed timestamp — re-check */ }
+    }
+    // Fetch registry
+    let latest;
+    try {
+        const resp = await fetch(REGISTRY_URL, {
+            headers: { 'Accept': 'application/json' },
+        });
+        if (!resp.ok) {
+            // Don't update timestamp on failure — retry next invocation
+            return { ok: false, current, reason: `registry returned ${resp.status}` };
+        }
+        const data = await resp.json();
+        latest = data['dist-tags']?.latest ?? '';
+        if (!latest) {
+            return { ok: false, current, reason: 'registry response missing dist-tags.latest' };
+        }
+    }
+    catch (err) {
+        return { ok: false, current, reason: `network error: ${err.message}` };
+    }
+    // Update timestamp on successful check
+    try {
+        if (!existsSync(ARIA_DIR))
+            mkdirSync(ARIA_DIR, { recursive: true, mode: 0o700 });
+        writeFileSync(LAST_CHECK_PATH, String(Date.now()) + '\n', { mode: 0o600 });
+    }
+    catch { /* timestamp write is best-effort */ }
+    const cmp = compareSemver(latest, current);
+    if (cmp <= 0) {
+        return { ok: true, current, latest, updateAvailable: false };
+    }
+    return {
+        ok: true,
+        current,
+        latest,
+        updateAvailable: true,
+        message: `I have an update: v${latest} (you're on v${current}). Run 'npm update -g @aria_asi/cli' when you have a minute.`,
+    };
+}
+/**
+ * Convenience: check + print the notice if available. Non-blocking, silent
+ * on errors. Called from bin/aria.js on startup.
+ */
+export async function maybePrintUpdateNotice() {
+    try {
+        const result = await checkForUpdate();
+        if (result.ok && result.updateAvailable && result.message) {
+            // Print to stderr so it doesn't pollute stdout-piped CLI output
+            process.stderr.write(`  ${result.message}\n`);
+        }
+    }
+    catch { /* never block startup */ }
+}
+//# sourceMappingURL=self-update.js.map

package/dist/aria-connector/src/self-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-update.js","sourceRoot":"","sources":["../../../src/self-update.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wEAAwE;AACxE,gCAAgC;AAChC,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,sEAAsE;AACtE,oEAAoE;AACpE,uEAAuE;AACvE,+DAA+D;AAC/D,EAAE;AACF,qBAAqB;AACrB,2EAA2E;AAC3E,4EAA4E;AAC5E,yDAAyD;AACzD,2EAA2E;AAC3E,wEAAwE;AACxE,EAAE;AACF,YAAY;AACZ,8EAA8E;AAC9E,qCAAqC;AACrC,2EAA2E;AAC3E,+DAA+D;AAC/D,yFAAyF;AACzF,yEAAyE;AACzE,kFAAkF;AAClF,EAAE;AACF,6EAA6E;AAC7E,iFAAiF;AAEjF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAW,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAC5D,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,MAAM;AACrD,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAWlE;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAC1C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACvD,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACpE,OAAO,GAAG,CAAC,OAAO,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM;YAC1B,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,kBAAkB,CAAA,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAmC,EAAE;QAC3D,MAAM,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,oDAAoD;IACpD,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA4B,EAAE;IACjE,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACtE,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,iBAAiB,EAAE,CAAC;gBACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;YACjF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,oCAAoC,CAAA,CAAC;IAChD,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YACrC,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,4DAA4D;YAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA8C,CAAC;QAC3E,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QACtF,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC,CAAA,oCAAoC,CAAA,CAAC;IAE9C,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO;QACP,MAAM;QACN,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,sBAAsB,MAAM,gBAAgB,OAAO,8DAA8D;KAC3H,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1D,gEAAgE;YAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,yBAAyB,CAAA,CAAC;AACrC,CAAC"}

package/hooks/aria-pre-tool-gate.mjs

@@ -201,7 +201,12 @@ function detectInlineCognition(cmd) {
       if (!names.includes(lens)) names.push(lens);
     }
   }
-  return { count: names.length, names };
+  // Substrate-citation: any inline lens that mentions a doctrine memory,
+  // harness packet rule, fitrah axiom, etc. (visibility metric — not a block).
+  const SUBSTRATE_CITE_RX_INLINE =
+    /feedback_[a-z0-9_]+\.md|project_[a-z0-9_]+\.md|fitrah[_:\s]|garden[_:\s]|distilled_principle|[a-z]+_rule\b|harness packet|substrate cite|EIGHT_LENS_DOCTRINE|COMPACT_CONTINUITY|ARIA_DEPLOY_PROCEDURE/i;
+  const hasSubstrateCite = SUBSTRATE_CITE_RX_INLINE.test(cmd);
+  return { count: names.length, names, hasSubstrateCite };
 }
 
 // Substance-checking lens detection (added 2026-04-26 per Hamza's
@@ -230,7 +235,18 @@ function detectCognitionLenses(text) {
     if (PLACEHOLDER_RX.test(content)) continue;
     names.push(lens);
   }
-  return { count: names.length, names, blockBody };
+  // Substrate-citation check: at least ONE lens must cite Aria substrate
+  // explicitly (doctrine memory filename, harness packet rule, fitrah axiom,
+  // *_rule entry, garden state reference, prior decision id, distilled
+  // principle id). Catches "lens-as-ceremony" failures where 4+ lenses are
+  // substantive in length but contain no actual substrate grounding.
+  // Hamza 2026-04-26: "anything else we can add to make sure u as claude
+  // for me and my client obey the harness and benefot from kt".
+  const SUBSTRATE_CITE_RX =
+    /feedback_[a-z0-9_]+\.md|project_[a-z0-9_]+\.md|fitrah[_:\s]|garden[_:\s]|distilled_principle|[a-z]+_rule\b|harness packet|substrate cite|\bIJTIHAD\b|\bQIYAS\b|\bTADABBUR\b|\bILHAM\b|aria 7b|EIGHT_LENS_DOCTRINE|COMPACT_CONTINUITY|ARIA_DEPLOY_PROCEDURE/i;
+  const hasSubstrateCite = SUBSTRATE_CITE_RX.test(blockBody) ||
+    SUBSTRATE_CITE_RX.test(searchSpace);
+  return { count: names.length, names, blockBody, hasSubstrateCite };
 }
 
 // Backwards-compat shim — count-only path used by older callers.
@@ -469,6 +485,11 @@ const hasCognition = lensCount >= REQUIRED_LENSES;
 const cognitionSource = inlineCog.count >= REQUIRED_LENSES
   ? 'inline-command'
   : (transcriptCog.count >= REQUIRED_LENSES ? 'transcript-scan' : 'merged-or-insufficient');
+// Substrate-citation visibility (Phase 11 will promote to block-mode once
+// telemetry shows healthy substrate-cite rate). For now: log the metric so
+// we can audit substrate-grounded vs ceremonial cognition over time.
+const hasSubstrateCite = (inlineCog.hasSubstrateCite === true) ||
+  (transcriptCog.hasSubstrateCite === true);
 
 // Best-effort session id for the corpus push. Claude Code passes
 // session_id in the event payload; fall back to transcript file
@@ -496,6 +517,7 @@ function pushDecision(decision, reasonText) {
       destructivePattern: matched?.name ?? null,
       hasVerify,
       hasCognition,
+      hasSubstrateCite,
     },
   });
 }

package/hooks/aria-stop-gate.mjs

@@ -192,8 +192,24 @@ if (!triggered) {
 // Non-trivial response — require substantive cognition.
 const cog = detectCognitionLenses(assistantText);
 
+// Question-emission visibility (Phase 11 promotes to block-mode):
+// detect user-directed question patterns in the assistant text. Audit when
+// questions appear without substrate-consultation evidence in the recent
+// transcript window. Helps surface "reflexive deferral" patterns (asking
+// the user when substrate could have answered) for later enforcement.
+// Hamza 2026-04-26: "BUT WHY DO U HAVE DISCRETION - THIS WORKS SO MUCH
+// FASTER AND HIGHER QUALITY IF U DONT".
+const QUESTION_PATTERNS_RX = /(?:want me to|should I|your call|which (?:one|of|do you)|do you want|let me know if|or (?:should|do)|\?\s*$)/im;
+const SUBSTRATE_EVIDENCE_RX = /\/api\/harness\/(?:delegate|codex|validate)|loadByClass|aria-harness-via-sdk|feedback_[a-z_]+\.md|project_[a-z_]+\.md|distilled_principles|ARIA_DEPLOY_PROCEDURE|EIGHT_LENS_DOCTRINE/i;
+const hasQuestionToUser = QUESTION_PATTERNS_RX.test(assistantText);
+const hasSubstrateEvidence = SUBSTRATE_EVIDENCE_RX.test(assistantText);
+const questionWithoutEvidence = hasQuestionToUser && !hasSubstrateEvidence;
+
 if (cog.count >= REQUIRED_LENSES) {
-  audit('allow-cognition', `lenses=${cog.count} chars=${assistantText.length}`);
+  audit('allow-cognition',
+    `lenses=${cog.count} chars=${assistantText.length} ` +
+    `qPatt=${hasQuestionToUser ? 'y' : 'n'} substrateEv=${hasSubstrateEvidence ? 'y' : 'n'} ` +
+    (questionWithoutEvidence ? 'WARN-question-without-substrate' : 'ok'));
   process.exit(0);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aria_asi/cli",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Aria Smart CLI — the world's first harness-powered terminal companion",
   "bin": {
     "aria": "./bin/aria.js"

package/src/__tests__/anthropic-oauth.test.ts

@@ -0,0 +1,186 @@
+// anthropic-oauth.test.ts — unit tests for the Anthropic login flow.
+//
+// Coverage:
+//   - _validateKey: 200 = valid, 401 = invalid, network failure = invalid
+//   - loginAnthropic: bad key gracefully returns ok: false with descriptive error
+//   - loginAnthropic: good key persists to config and returns ok: true
+//
+// Strategy: mock globalThis.fetch (Node 18+ built-in) + mock readline to avoid
+// interactive prompts. No file I/O touches real ~/.aria — we stub fs.writeFileSync.
+
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+
+// ── We test the exported internals directly. ─────────────────────────────────
+// anthropic-oauth.ts exports _validateKey for testability; loginAnthropic is
+// also tested end-to-end with readline + fs mocked out.
+
+// Hoist mocks before module import so Node's ESM loader sees them.
+vi.mock('node:fs', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('node:fs')>();
+  return {
+    ...actual,
+    existsSync: vi.fn(() => false),
+    mkdirSync: vi.fn(),
+    writeFileSync: vi.fn(),
+    readFileSync: vi.fn(() => '{}'),
+  };
+});
+
+vi.mock('node:readline', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('node:readline')>();
+  return {
+    ...actual,
+    createInterface: vi.fn(() => ({
+      question: vi.fn((_prompt: string, cb: (a: string) => void) => cb('sk-ant-fake-key-for-tests')),
+      close: vi.fn(),
+    })),
+  };
+});
+
+vi.mock('node:child_process', () => ({
+  spawn: vi.fn(() => ({ unref: vi.fn() })),
+}));
+
+import { _validateKey, loginAnthropic } from '../anthropic-oauth.js';
+
+// ── Helpers ───────────────────────────────────────────────────────────────────
+
+function mockFetch(status: number, body: unknown = {}): void {
+  vi.stubGlobal(
+    'fetch',
+    vi.fn().mockResolvedValue({
+      status,
+      ok: status >= 200 && status < 300,
+      json: async () => body,
+    }),
+  );
+}
+
+function mockFetchNetworkError(): void {
+  vi.stubGlobal('fetch', vi.fn().mockRejectedValue(new Error("I couldn't reach Anthropic")));
+}
+
+// ── _validateKey ─────────────────────────────────────────────────────────────
+
+describe('_validateKey', () => {
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it('returns true when Anthropic /v1/models responds 200', async () => {
+    mockFetch(200, { data: [] });
+    const result = await _validateKey('sk-ant-valid');
+    expect(result).toBe(true);
+  });
+
+  it('returns false when Anthropic /v1/models responds 401 (bad key)', async () => {
+    mockFetch(401, { error: { message: 'invalid x-api-key' } });
+    const result = await _validateKey('sk-ant-bad');
+    expect(result).toBe(false);
+  });
+
+  it('returns false when Anthropic /v1/models responds 403 (revoked key)', async () => {
+    mockFetch(403, { error: { message: 'forbidden' } });
+    const result = await _validateKey('sk-ant-revoked');
+    expect(result).toBe(false);
+  });
+
+  it('returns false on network error — does not throw', async () => {
+    mockFetchNetworkError();
+    const result = await _validateKey('sk-ant-any');
+    expect(result).toBe(false);
+  });
+
+  it('sends x-api-key and anthropic-version headers', async () => {
+    const fetchMock = vi.fn().mockResolvedValue({ status: 200, ok: true, json: async () => ({}) });
+    vi.stubGlobal('fetch', fetchMock);
+
+    await _validateKey('sk-ant-check-headers');
+
+    expect(fetchMock).toHaveBeenCalledWith(
+      'https://api.anthropic.com/v1/models',
+      expect.objectContaining({
+        headers: expect.objectContaining({
+          'x-api-key': 'sk-ant-check-headers',
+          'anthropic-version': '2023-06-01',
+        }),
+      }),
+    );
+  });
+});
+
+// ── loginAnthropic ────────────────────────────────────────────────────────────
+
+describe('loginAnthropic', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it('returns ok: false with descriptive Aria-voice error when key fails validation', async () => {
+    // readline mock returns 'sk-ant-fake-key-for-tests'; validate returns 401
+    mockFetch(401, { error: { message: 'invalid key' } });
+
+    const result = await loginAnthropic({ noBrowser: true });
+
+    expect(result.ok).toBe(false);
+    expect(result.error).toMatch(/I couldn't verify/);
+    // Ensure the error message does NOT contain internal cluster paths or IP addresses
+    expect(result.error).not.toMatch(/10\.\d+\.\d+\.\d+/);
+    expect(result.error).not.toMatch(/cluster\.local/);
+  });
+
+  it('returns ok: true and apiKey when key passes validation', async () => {
+    // readline returns 'sk-ant-fake-key-for-tests'; validate returns 200
+    mockFetch(200, { data: [{ id: 'claude-sonnet-4-20250514' }] });
+
+    const result = await loginAnthropic({ noBrowser: true });
+
+    expect(result.ok).toBe(true);
+    expect(result.apiKey).toBe('sk-ant-fake-key-for-tests');
+  });
+
+  it('returns ok: false when user pastes an empty string', async () => {
+    // Override readline mock to return empty string for this test
+    const readline = await import('node:readline');
+    vi.mocked(readline.createInterface).mockReturnValueOnce({
+      question: vi.fn((_: string, cb: (a: string) => void) => cb('')),
+      close: vi.fn(),
+    } as any);
+
+    mockFetch(200, {});
+
+    const result = await loginAnthropic({ noBrowser: true });
+
+    expect(result.ok).toBe(false);
+    // Should not proceed to validation when key is empty
+    expect(result.error).toBeTruthy();
+  });
+
+  it('returns ok: false gracefully on network failure during validation', async () => {
+    mockFetchNetworkError();
+
+    const result = await loginAnthropic({ noBrowser: true });
+
+    expect(result.ok).toBe(false);
+    // Should surface a human-readable error, not a raw Error object
+    expect(typeof result.error).toBe('string');
+    expect(result.error!.length).toBeGreaterThan(10);
+  });
+
+  it('persists apiKey to config when validation succeeds', async () => {
+    mockFetch(200, { data: [] });
+    const fs = await import('node:fs');
+
+    await loginAnthropic({ noBrowser: true });
+
+    expect(vi.mocked(fs.writeFileSync)).toHaveBeenCalledWith(
+      expect.stringContaining('config.json'),
+      expect.stringContaining('sk-ant-fake-key-for-tests'),
+      expect.objectContaining({ mode: 0o600 }),
+    );
+  });
+});