npm - @astrale-os/cli - Versions diffs - 1.0.0-beta.2 → 1.0.0-beta.20 - Mend

@astrale-os/cli 1.0.0-beta.2 → 1.0.0-beta.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (282) hide show

package/README.md +16 -1
package/dist/astrale.js +51105 -58057
package/dist/public/connect-core.js +2085 -30702
package/dist/public/keys/index.js +884 -29476
package/dist/public/paths/index.js +13101 -41452
package/dist/types/admin/contract.d.ts +26 -0
package/dist/types/admin/instance/client.d.ts +20 -0
package/dist/types/admin/instance/index.d.ts +2 -0
package/dist/types/admin/instance/model.d.ts +6 -10
package/dist/types/connection/auth.d.ts +3 -0
package/dist/types/connection/call.d.ts +3 -0
package/dist/types/connection/command.d.ts +27 -0
package/dist/types/connection/credential.d.ts +14 -0
package/dist/types/connection/errors.d.ts +1 -0
package/dist/types/connection/exchange.d.ts +9 -0
package/dist/types/connection/failure/classify.d.ts +2 -0
package/dist/types/connection/failure/index.d.ts +5 -0
package/dist/types/connection/failure/model.d.ts +25 -0
package/dist/types/connection/failure/render.d.ts +3 -0
package/dist/types/connection/index.d.ts +8 -0
package/dist/types/connection/reasons.d.ts +37 -0
package/dist/types/connection/self.d.ts +37 -0
package/dist/types/connection/session.d.ts +31 -0
package/dist/types/connection/target.d.ts +38 -0
package/dist/types/errors.d.ts +1 -1
package/dist/types/lib/admin-instance.d.ts +17 -0
package/dist/types/lib/admin-target.d.ts +11 -36
package/dist/types/lib/config.d.ts +7 -59
package/dist/types/lib/failure-debug.d.ts +1 -0
package/dist/types/lib/idp.d.ts +25 -173
package/dist/types/lib/instance-target.d.ts +1 -1
package/dist/types/lib/instance.d.ts +30 -88
package/dist/types/lib/log.d.ts +5 -3
package/dist/types/lib/output.d.ts +1 -1
package/dist/types/lib/proc.d.ts +43 -0
package/dist/types/lib/self.d.ts +9 -0
package/dist/types/lib/update.d.ts +109 -0
package/dist/types/lib/validation.d.ts +4 -1
package/package.json +15 -20
package/src/__tests__/fixtures/publication.ts +20 -0
package/src/admin/.spec/architecture.md +12 -5
package/src/admin/__tests__/fixture.ts +25 -0
package/src/admin/catalog/.spec/api.d.ts +1 -3
package/src/admin/catalog/.spec/architecture.md +5 -4
package/src/admin/catalog/__tests__/client.test.ts +143 -69
package/src/admin/catalog/client.ts +40 -54
package/src/admin/catalog/model.ts +3 -4
package/src/admin/contract.ts +46 -0
package/src/admin/graph/.spec/api.d.ts +4 -10
package/src/admin/graph/nodes.ts +1 -1
package/src/admin/instance/.spec/api.d.ts +5 -9
package/src/admin/instance/.spec/architecture.md +7 -7
package/src/admin/instance/__tests__/client.test.ts +157 -175
package/src/admin/instance/client.ts +39 -128
package/src/admin/instance/index.ts +1 -2
package/src/admin/instance/model.ts +12 -18
package/src/commands/__tests__/admin-instance.test.ts +11 -8
package/src/commands/__tests__/call-describe.test.ts +46 -33
package/src/commands/__tests__/call.test.ts +34 -0
package/src/commands/__tests__/domain-install-operation.test.ts +7 -22
package/src/commands/__tests__/domain-install-owned.test.ts +1 -1
package/src/commands/__tests__/domain-list.test.ts +5 -25
package/src/commands/__tests__/install-direct.test.ts +115 -8
package/src/commands/__tests__/install-identity-override.test.ts +3 -14
package/src/commands/__tests__/instance-list-rows.test.ts +1 -1
package/src/commands/__tests__/instance-status.test.ts +139 -0
package/src/commands/__tests__/introspect-parse.test.ts +80 -1
package/src/commands/__tests__/logs.test.ts +250 -2
package/src/commands/__tests__/read-commands.test.ts +62 -10
package/src/commands/__tests__/token-ttl.test.ts +49 -4
package/src/commands/__tests__/update.test.ts +25 -3
package/src/commands/__tests__/view.test.ts +49 -0
package/src/commands/call-describe.ts +60 -68
package/src/commands/call.ts +71 -59
package/src/commands/domain/install.ts +54 -35
package/src/commands/domain/list.ts +1 -1
package/src/commands/domain/publish.ts +14 -11
package/src/commands/domain/uninstall.ts +2 -2
package/src/commands/get.ts +14 -15
package/src/commands/identity/__tests__/register.test.ts +3 -3
package/src/commands/identity/register.ts +5 -4
package/src/commands/instance/create.ts +8 -16
package/src/commands/instance/delete.ts +12 -9
package/src/commands/instance/list.ts +2 -2
package/src/commands/instance/status.ts +66 -20
package/src/commands/instance/use.ts +16 -12
package/src/commands/introspect.ts +48 -35
package/src/commands/logs.ts +123 -33
package/src/commands/mutate.ts +6 -5
package/src/commands/query.ts +35 -32
package/src/commands/token.ts +42 -27
package/src/commands/ui/__tests__/commands.test.ts +152 -0
package/src/commands/ui/add.ts +51 -0
package/src/commands/ui/doctor.ts +13 -0
package/src/commands/ui/init.ts +38 -0
package/src/commands/ui/list.ts +26 -0
package/src/commands/ui/preset-apply.ts +19 -0
package/src/commands/ui/preset-list.ts +12 -0
package/src/commands/ui/shared.ts +25 -0
package/src/commands/update.ts +31 -11
package/src/commands/view.ts +82 -37
package/src/connection/.spec/api.d.ts +7 -8
package/src/connection/.spec/architecture.md +5 -4
package/src/connection/.spec/flows/session.ts +2 -2
package/src/connection/.spec/laws/connection.ts +6 -2
package/src/connection/.spec/layout.ts +1 -0
package/src/connection/__tests__/credential.test.ts +20 -1
package/src/connection/__tests__/errors.test.ts +27 -20
package/src/connection/__tests__/exchange.test.ts +30 -1
package/src/connection/__tests__/failure-fixtures.ts +39 -0
package/src/connection/__tests__/failure-safety.test.ts +75 -0
package/src/connection/__tests__/self.test.ts +31 -11
package/src/connection/__tests__/session.test.ts +3 -3
package/src/connection/__tests__/target.test.ts +1 -0
package/src/connection/auth.ts +13 -0
package/src/connection/call.ts +1 -1
package/src/connection/credential.ts +2 -2
package/src/connection/errors.ts +1 -355
package/src/connection/exchange.ts +47 -23
package/src/connection/failure/classify.ts +110 -0
package/src/connection/failure/index.ts +18 -0
package/src/connection/failure/model.ts +28 -0
package/src/connection/failure/render.ts +116 -0
package/src/connection/reasons.ts +16 -0
package/src/connection/self.ts +39 -21
package/src/connection/session.ts +19 -8
package/src/errors.ts +3 -2
package/src/graph/.spec/api.d.ts +12 -5
package/src/graph/.spec/layout.ts +9 -1
package/src/graph/__tests__/mutation.test.ts +2 -2
package/src/graph/__tests__/query.test.ts +25 -6
package/src/graph/class.ts +30 -0
package/src/graph/index.ts +1 -0
package/src/graph/query.ts +21 -32
package/src/identity/.spec/api.d.ts +2 -2
package/src/identity/__tests__/registration.test.ts +1 -1
package/src/identity/registration.ts +3 -3
package/src/keys/__tests__/keys.test.ts +4 -0
package/src/keys/credential.ts +1 -0
package/src/lib/__tests__/admin-target.test.ts +12 -0
package/src/lib/__tests__/binary.test.ts +16 -1
package/src/lib/__tests__/command-dx.test.ts +1 -1
package/src/lib/__tests__/domain-publication.test.ts +10 -16
package/src/lib/__tests__/idp.test.ts +34 -4
package/src/lib/__tests__/instance-candidates.test.ts +1 -3
package/src/lib/__tests__/instance-target.test.ts +7 -39
package/src/lib/__tests__/log-errors.test.ts +64 -0
package/src/lib/__tests__/studio-server-deps.test.ts +1 -1
package/src/lib/__tests__/update.test.ts +264 -11
package/src/lib/__tests__/view-assets.test.ts +14 -0
package/src/lib/__tests__/view-external-open-intent.test.ts +150 -0
package/src/lib/__tests__/view-external-open-origins.test.ts +27 -0
package/src/lib/__tests__/view-open-intent.test.ts +0 -2
package/src/lib/__tests__/view-server.test.ts +26 -3
package/src/lib/__tests__/view-session.test.ts +2 -1
package/src/lib/admin-instance.ts +14 -8
package/src/lib/admin-target.ts +21 -2
package/src/lib/binary.ts +22 -5
package/src/lib/command-dx.ts +9 -9
package/src/lib/domain-publication.ts +9 -7
package/src/lib/failure-debug.ts +26 -0
package/src/lib/idp.ts +34 -3
package/src/lib/instance-candidates.ts +2 -2
package/src/lib/instance-target.ts +3 -14
package/src/lib/instance.ts +16 -11
package/src/lib/log.ts +16 -9
package/src/lib/output.ts +1 -1
package/src/lib/proc.ts +7 -2
package/src/lib/provision-instance.ts +34 -57
package/src/lib/update.ts +298 -45
package/src/lib/validation.ts +2 -2
package/src/lib/view/assets.ts +11 -2
package/src/lib/view/external-open-intent.ts +41 -0
package/src/lib/view/external-open-origins.ts +37 -0
package/src/lib/view/host-capabilities.ts +17 -0
package/src/lib/view/resolve.ts +1 -1
package/src/lib/view/server.ts +18 -3
package/src/lib/view/session.ts +2 -0
package/src/program/.spec/api.d.ts +1 -0
package/src/program/__tests__/program.test.ts +163 -6
package/src/program/argv.ts +14 -0
package/src/program/build.ts +26 -4
package/src/program/command.ts +1 -0
package/src/program/index.ts +1 -0
package/src/program/registry.ts +2 -1
package/src/setup/__tests__/instance-step.test.ts +27 -10
package/src/setup/steps/instance.ts +22 -15
package/src/telemetry/__tests__/recorder.test.ts +1 -0
package/src/telemetry/recorder.ts +9 -1
package/src/ui/.spec/api.d.ts +14 -0
package/src/ui/.spec/architecture.md +10 -0
package/src/ui/.spec/laws.ts +36 -0
package/src/ui/.spec/layout.ts +16 -0
package/src/ui/__tests__/ui.test.ts +981 -0
package/src/ui/index.ts +13 -0
package/src/ui/lock.ts +87 -0
package/src/ui/model.ts +83 -0
package/src/ui/operations.ts +710 -0
package/src/ui/project.ts +219 -0
package/src/ui/release.ts +321 -0
package/src/ui/runner.ts +18 -0
package/studio/client/dist/assets/elk-api-DjmKsHXc.js +1 -0
package/studio/client/dist/assets/index-7YHdeCxp.js +81 -0
package/studio/client/dist/assets/index-C0FAnwNw.css +2 -0
package/studio/client/dist/assets/rolldown-runtime-Dd_uD5pT.js +1 -0
package/studio/client/dist/assets/schema-studio-BilUNb6Z.css +1 -0
package/studio/client/dist/assets/schema-studio-CABpTfvH.js +8 -0
package/studio/client/dist/index.html +3 -2
package/studio/package.json +7 -13
package/studio/server/agent/ask.test.ts +1 -1
package/studio/server/agent/bridge/grant.test.ts +1 -1
package/studio/server/agent/bridge/routes.test.ts +1 -1
package/studio/server/agent/harness/claude/adapter.test.ts +15 -5
package/studio/server/agent/harness/gateway/token.test.ts +1 -1
package/studio/server/agent/harness/gateway/token.ts +3 -3
package/studio/server/agent/prompts/anchors.test.ts +32 -36
package/studio/server/agent/prompts/anchors.ts +20 -49
package/studio/server/agent/prompts/system.test.ts +3 -2
package/studio/server/agent/prompts/system.ts +3 -3
package/studio/server/agent/routes.test.ts +1 -1
package/studio/server/agent/run/coordinator.test.ts +1 -1
package/studio/server/api/canvas.ts +0 -1
package/studio/server/api-agent-loadout.test.ts +1 -1
package/studio/server/api.test.ts +1 -1
package/studio/server/cache.test.ts +23 -12
package/studio/server/cache.ts +12 -15
package/studio/server/domain.test.ts +50 -68
package/studio/server/domain.ts +82 -63
package/studio/server/handoff/copy.ts +1 -1
package/studio/server/index.ts +1 -1
package/studio/server/instances/probe.test.ts +1 -1
package/studio/server/introspect/anatomy/views/routes.ts +46 -37
package/studio/server/introspect/anatomy/views.ts +9 -14
package/studio/server/introspect/anatomy-extras.test.ts +26 -42
package/studio/server/introspect/anatomy.test.ts +22 -14
package/studio/server/introspect/anatomy.ts +6 -9
package/studio/server/introspect/bundle.ts +0 -3
package/studio/server/introspect/canonical-schema.test.ts +94 -389
package/studio/server/introspect/canonical-schema.ts +227 -457
package/studio/server/introspect/core-extractor.ts +18 -127
package/studio/server/introspect/core.ts +1 -2
package/studio/server/introspect/diff.test.ts +11 -7
package/studio/server/introspect/diff.ts +18 -55
package/studio/server/introspect/extractor.ts +22 -117
package/studio/server/introspect/overlay-tsmorph.test.ts +119 -240
package/studio/server/introspect/overlay.test.ts +26 -54
package/studio/server/introspect/overlay.ts +10 -37
package/studio/server/introspect/revision.test.ts +1 -1
package/studio/server/introspect/revision.ts +1 -1
package/studio/server/introspect/runtime.test.ts +65 -183
package/studio/server/introspect/runtime.ts +8 -25
package/studio/server/introspect/schema-ir-json.test.ts +70 -0
package/studio/server/introspect/schema-ir-json.ts +38 -68
package/studio/server/introspect/schema-refs.test.ts +43 -88
package/studio/server/introspect/schema-refs.ts +14 -49
package/studio/server/introspect/source-overlay/handlers.ts +116 -636
package/studio/server/introspect/source-overlay/kernel-calls.ts +0 -3
package/studio/server/introspect/source-overlay/spans.ts +15 -45
package/studio/server/state/baseline.test.ts +14 -9
package/studio/server/state/baseline.ts +3 -5
package/studio/server/state/visibility.ts +1 -5
package/studio/server/views/model.ts +3 -3
package/studio/server/views/target.test.ts +17 -74
package/studio/server/views/target.ts +24 -50
package/studio/server/watch.test.ts +11 -11
package/studio/server/watch.ts +8 -4
package/studio/server/workspace-watch.ts +2 -2
package/studio/shared/contracts/schema.ts +38 -107
package/studio/shared/contracts/surface.test.ts +13 -15
package/studio/shared/contracts/workspace.ts +2 -11
package/studio/shared/schema/identity.test.ts +20 -44
package/studio/shared/schema/identity.ts +9 -23
package/viewer/dist/main.js +30 -51
package/.check-workspace.cjs +0 -40
package/src/admin/binding.ts +0 -168
package/src/commands/__tests__/instance-create-hosts.test.ts +0 -29
package/studio/client/dist/assets/elk-api-lwhFo7vB.js +0 -1
package/studio/client/dist/assets/index-B-c-smo9.js +0 -8
package/studio/client/dist/assets/index-BckHuAWk.js +0 -81
package/studio/client/dist/assets/index-C4aNQ6dz.css +0 -1
package/studio/client/dist/assets/index-ChOr3yP0.css +0 -1
package/studio/server/introspect/anatomy/views/legacy.ts +0 -232

package/src/lib/__tests__/update.test.ts CHANGED Viewed

@@ -1,22 +1,27 @@
 import { describe, expect, test } from 'bun:test'
-import { chmod, mkdir, mkdtemp, readFile, writeFile } from 'node:fs/promises'
+import { chmod, mkdir, mkdtemp, readFile, rename, rm, symlink, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
-import { join } from 'node:path'
+import { dirname, join } from 'node:path'
 import {
+  admitScriptInstall,
+  classifyUpdateExecution,
   DEFAULT_UPDATE_CHANNEL,
   InstallMetadataSchema,
+  readInstallMetadata,
   releaseBase,
+  replaceStandaloneCohort,
   shouldUpdate,
   updateAstrale,
   writeInstallMetadata,
   type InstallMetadata,
+  type UpdateExecution,
 } from '../update'
 async function makeFakeRelease(
   root: string,
   version: string,
-  options: { binaryVersion?: string; legacyManifest?: boolean } = {},
+  options: { binaryVersion?: string; legacyManifest?: boolean; omitViewerIndex?: boolean } = {},
 ): Promise<string> {
   const release = join(root, 'release')
   const payload = join(root, 'payload')
@@ -28,9 +33,14 @@ async function makeFakeRelease(
     `#!/usr/bin/env sh\nif [ "$1" = "--version" ]; then echo "${binaryVersion}"; exit 0; fi\necho astrale\n`,
   )
   await chmod(join(payload, 'astrale'), 0o755)
+  await mkdir(join(payload, 'viewer', 'dist'), { recursive: true })
+  await writeFile(join(payload, 'viewer', 'dist', 'main.js'), 'viewer main\n')
+  if (!options.omitViewerIndex) {
+    await writeFile(join(payload, 'viewer', 'dist', 'index.html'), '<!doctype html>\n')
+  }
   const asset = join(release, 'astrale-darwin-arm64.tar.gz')
-  const tar = Bun.spawn(['tar', '-C', payload, '-czf', asset, 'astrale'])
+  const tar = Bun.spawn(['tar', '-C', payload, '-czf', asset, 'astrale', 'viewer'])
   expect(await tar.exited).toBe(0)
   const shaProc = Bun.spawn(['shasum', '-a', '256', asset], { stdout: 'pipe' })
   const sha = (await new Response(shaProc.stdout).text()).trim().split(/\s+/)[0]
@@ -65,7 +75,7 @@ async function makeFakeRelease(
 async function makeInstall(
   root: string,
   version: string,
-): Promise<{ meta: InstallMetadata; path: string }> {
+): Promise<{ meta: InstallMetadata; path: string; execution: UpdateExecution }> {
   const bin = join(root, 'bin', 'astrale')
   await mkdir(join(root, 'bin'), { recursive: true })
   await writeFile(
@@ -73,6 +83,9 @@ async function makeInstall(
     `#!/usr/bin/env sh\nif [ "$1" = "--version" ]; then echo "${version}"; exit 0; fi\necho old\n`,
   )
   await chmod(bin, 0o755)
+  await mkdir(join(root, 'bin', 'viewer', 'dist'), { recursive: true })
+  await writeFile(join(root, 'bin', 'viewer', 'dist', 'main.js'), 'old viewer main\n')
+  await writeFile(join(root, 'bin', 'viewer', 'dist', 'index.html'), 'old viewer html\n')
   const path = join(root, 'home', 'install.json')
   const meta: InstallMetadata = {
     method: 'script',
@@ -82,10 +95,33 @@ async function makeInstall(
     bin,
   }
   await writeInstallMetadata(meta, path)
-  return { meta, path }
+  return { meta, path, execution: { kind: 'standalone', executable: bin } }
 }
 describe('update helpers', () => {
+  test('classifies only a Bun-compiled executable as standalone', () => {
+    expect(
+      classifyUpdateExecution({
+        bunVersion: '1.3.14',
+        executable: '/tmp/astrale',
+        entry: '/$bunfs/root/astrale',
+      }),
+    ).toEqual({ kind: 'standalone', executable: '/tmp/astrale' })
+    expect(
+      classifyUpdateExecution({
+        bunVersion: '1.3.14',
+        executable: '/opt/homebrew/bin/bun',
+        entry: '/tmp/astrale.ts',
+      }),
+    ).toEqual({ kind: 'package-managed', executable: '/opt/homebrew/bin/bun' })
+    expect(
+      classifyUpdateExecution({
+        executable: '/opt/homebrew/bin/node',
+        entry: '/tmp/astrale.js',
+      }),
+    ).toEqual({ kind: 'package-managed', executable: '/opt/homebrew/bin/node' })
+  })
   test('defaults missing install metadata to the beta channel', () => {
     expect(DEFAULT_UPDATE_CHANNEL).toBe('beta')
     expect(
@@ -118,10 +154,103 @@ describe('update helpers', () => {
   })
 })
+describe('script install admission', () => {
+  test('a metadata commit failure restores the exact previous file', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
+    const path = join(root, 'install.json')
+    const original = '{"exact":"previous metadata"}\n'
+    await writeFile(path, original)
+    await expect(
+      writeInstallMetadata(
+        {
+          method: 'script',
+          channel: 'beta',
+          version: '1.1.0',
+          repo: 'astrale-os/cli',
+          bin: '/tmp/astrale',
+        },
+        path,
+        {
+          mkdir,
+          rm,
+          writeFile,
+          rename: async (from, to) => {
+            if (String(from).endsWith('.next')) throw new Error('injected metadata commit failure')
+            await rename(from, to)
+          },
+        },
+      ),
+    ).rejects.toThrow('injected metadata commit failure')
+    expect(await readFile(path, 'utf8')).toBe(original)
+    await expect(readFile(`${path}.next`, 'utf8')).rejects.toMatchObject({ code: 'ENOENT' })
+    await expect(readFile(`${path}.previous`, 'utf8')).rejects.toMatchObject({ code: 'ENOENT' })
+  })
+  test('rejects malformed JSON with the stable metadata error', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
+    const path = join(root, 'install.json')
+    await writeFile(path, '{')
+    await expect(readInstallMetadata(path)).rejects.toMatchObject({
+      code: 'UPDATE_BAD_INSTALL_METADATA',
+    })
+  })
+  test('admits a symlink only when it resolves to the recorded binary', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
+    const { meta } = await makeInstall(root, '1.0.0')
+    const alias = join(root, 'astrale-alias')
+    await symlink(meta.bin, alias)
+    const admitted = await admitScriptInstall(meta, {
+      kind: 'standalone',
+      executable: alias,
+    })
+    expect(admitted.metadata).toEqual(meta)
+  })
+  test('rejects a standalone binary that does not own the recorded target', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
+    const { meta } = await makeInstall(root, '1.0.0')
+    const other = join(root, 'other-astrale')
+    await writeFile(other, '#!/bin/sh\n')
+    await expect(
+      admitScriptInstall(meta, { kind: 'standalone', executable: other }),
+    ).rejects.toMatchObject({ code: 'UPDATE_INSTALL_MISMATCH' })
+  })
+})
 describe('updateAstrale', () => {
+  test('a package-managed process never consults or mutates a coexisting script install', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
+    const { path, meta } = await makeInstall(root, '1.0.0')
+    const before = await readFile(meta.bin, 'utf8')
+    process.env.ASTRALE_UPDATE_BASE = 'file:///definitely-not-a-release'
+    try {
+      const result = await updateAstrale({
+        currentVersion: '2.0.0',
+        installPath: path,
+        execution: { kind: 'package-managed', executable: '/opt/homebrew/bin/node' },
+      })
+      expect(result).toEqual({
+        status: 'managed',
+        currentVersion: '2.0.0',
+        executable: '/opt/homebrew/bin/node',
+      })
+      expect(await readFile(meta.bin, 'utf8')).toBe(before)
+    } finally {
+      delete process.env.ASTRALE_UPDATE_BASE
+    }
+  })
   test('check compares the installed release identity from metadata', async () => {
     const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
-    const { path } = await makeInstall(root, 'main-abc123')
+    const { path, execution } = await makeInstall(root, 'main-abc123')
     const release = await makeFakeRelease(root, 'main-abc123', { binaryVersion: '1.0.0' })
     process.env.ASTRALE_UPDATE_BASE = `file://${release}`
     try {
@@ -130,6 +259,7 @@ describe('updateAstrale', () => {
         currentVersion: '1.0.0',
         platform: { os: 'darwin', arch: 'arm64' },
         installPath: path,
+        execution,
       })
       expect(result).toMatchObject({
@@ -144,7 +274,7 @@ describe('updateAstrale', () => {
   test('check reports available update without replacing the binary', async () => {
     const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
-    const { path, meta } = await makeInstall(root, '1.0.0')
+    const { path, meta, execution } = await makeInstall(root, '1.0.0')
     const release = await makeFakeRelease(root, '1.1.0')
     process.env.ASTRALE_UPDATE_BASE = `file://${release}`
     try {
@@ -153,6 +283,7 @@ describe('updateAstrale', () => {
         currentVersion: '1.0.0',
         platform: { os: 'darwin', arch: 'arm64' },
         installPath: path,
+        execution,
       })
       expect(result).toMatchObject({
@@ -168,7 +299,7 @@ describe('updateAstrale', () => {
   test('supports legacy string asset manifests', async () => {
     const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
-    const { path, meta } = await makeInstall(root, '1.0.0')
+    const { path, meta, execution } = await makeInstall(root, '1.0.0')
     const release = await makeFakeRelease(root, '1.1.0', { legacyManifest: true })
     process.env.ASTRALE_UPDATE_BASE = `file://${release}`
     try {
@@ -177,6 +308,7 @@ describe('updateAstrale', () => {
         currentVersion: '1.0.0',
         platform: { os: 'darwin', arch: 'arm64' },
         installPath: path,
+        execution,
       })
       expect(check).toMatchObject({
@@ -188,6 +320,7 @@ describe('updateAstrale', () => {
         currentVersion: '1.0.0',
         platform: { os: 'darwin', arch: 'arm64' },
         installPath: path,
+        execution,
       })
       expect(result).toMatchObject({
@@ -204,7 +337,7 @@ describe('updateAstrale', () => {
   test('updates the binary and install metadata', async () => {
     const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
-    const { path, meta } = await makeInstall(root, '1.0.0')
+    const { path, meta, execution } = await makeInstall(root, '1.0.0')
     const release = await makeFakeRelease(root, '1.1.0')
     process.env.ASTRALE_UPDATE_BASE = `file://${release}`
     try {
@@ -212,6 +345,7 @@ describe('updateAstrale', () => {
         currentVersion: '1.0.0',
         platform: { os: 'darwin', arch: 'arm64' },
         installPath: path,
+        execution,
       })
       expect(result).toMatchObject({
@@ -224,6 +358,124 @@ describe('updateAstrale', () => {
       expect(await versionProc.exited).toBe(0)
       const updatedMeta = JSON.parse(await readFile(path, 'utf8')) as InstallMetadata
       expect(updatedMeta.version).toBe('1.1.0')
+      expect(await readFile(join(dirname(meta.bin), 'viewer', 'dist', 'main.js'), 'utf8')).toBe(
+        'viewer main\n',
+      )
+      expect(await readFile(join(dirname(meta.bin), 'viewer', 'dist', 'index.html'), 'utf8')).toBe(
+        '<!doctype html>\n',
+      )
+    } finally {
+      delete process.env.ASTRALE_UPDATE_BASE
+    }
+  })
+  test('a partial Viewer archive leaves the installed cohort and metadata unchanged', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
+    const { path, meta, execution } = await makeInstall(root, '1.0.0')
+    const release = await makeFakeRelease(root, '1.1.0', { omitViewerIndex: true })
+    process.env.ASTRALE_UPDATE_BASE = `file://${release}`
+    const beforeBinary = await readFile(meta.bin, 'utf8')
+    const beforeMetadata = await readFile(path, 'utf8')
+    try {
+      await expect(
+        updateAstrale({
+          currentVersion: '1.0.0',
+          platform: { os: 'darwin', arch: 'arm64' },
+          installPath: path,
+          execution,
+        }),
+      ).rejects.toThrow()
+      expect(await readFile(meta.bin, 'utf8')).toBe(beforeBinary)
+      expect(await readFile(join(dirname(meta.bin), 'viewer', 'dist', 'main.js'), 'utf8')).toBe(
+        'old viewer main\n',
+      )
+      expect(await readFile(join(dirname(meta.bin), 'viewer', 'dist', 'index.html'), 'utf8')).toBe(
+        'old viewer html\n',
+      )
+      expect(await readFile(path, 'utf8')).toBe(beforeMetadata)
+    } finally {
+      delete process.env.ASTRALE_UPDATE_BASE
+    }
+  })
+  test('a Viewer commit failure rolls back binary, Viewer, and metadata', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
+    const { path, meta, execution } = await makeInstall(root, '1.0.0')
+    const release = await makeFakeRelease(root, '1.1.0')
+    process.env.ASTRALE_UPDATE_BASE = `file://${release}`
+    const beforeBinary = await readFile(meta.bin, 'utf8')
+    const beforeMetadata = await readFile(path, 'utf8')
+    try {
+      await expect(
+        updateAstrale(
+          {
+            currentVersion: '1.0.0',
+            platform: { os: 'darwin', arch: 'arm64' },
+            installPath: path,
+            execution,
+          },
+          {
+            replaceStandaloneCohort: (installed, next, viewer) =>
+              replaceStandaloneCohort(installed, next, viewer, {
+                rename: async (from, to) => {
+                  if (String(from).endsWith('viewer.next')) {
+                    throw Object.assign(new Error('injected Viewer commit failure'), {
+                      code: 'EIO',
+                    })
+                  }
+                  await rename(from, to)
+                },
+              }),
+          },
+        ),
+      ).rejects.toThrow('injected Viewer commit failure')
+      expect(await readFile(meta.bin, 'utf8')).toBe(beforeBinary)
+      expect(await readFile(join(dirname(meta.bin), 'viewer', 'dist', 'main.js'), 'utf8')).toBe(
+        'old viewer main\n',
+      )
+      expect(await readFile(join(dirname(meta.bin), 'viewer', 'dist', 'index.html'), 'utf8')).toBe(
+        'old viewer html\n',
+      )
+      expect(await readFile(path, 'utf8')).toBe(beforeMetadata)
+    } finally {
+      delete process.env.ASTRALE_UPDATE_BASE
+    }
+  })
+  test('a metadata failure after cohort commit restores binary, Viewer, and metadata', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
+    const { path, meta, execution } = await makeInstall(root, '1.0.0')
+    const release = await makeFakeRelease(root, '1.1.0')
+    process.env.ASTRALE_UPDATE_BASE = `file://${release}`
+    const beforeBinary = await readFile(meta.bin, 'utf8')
+    const beforeMetadata = await readFile(path, 'utf8')
+    try {
+      await expect(
+        updateAstrale(
+          {
+            currentVersion: '1.0.0',
+            platform: { os: 'darwin', arch: 'arm64' },
+            installPath: path,
+            execution,
+          },
+          {
+            writeInstallMetadata: async () => {
+              throw new Error('injected metadata write failure')
+            },
+          },
+        ),
+      ).rejects.toThrow('injected metadata write failure')
+      expect(await readFile(meta.bin, 'utf8')).toBe(beforeBinary)
+      expect(await readFile(join(dirname(meta.bin), 'viewer', 'dist', 'main.js'), 'utf8')).toBe(
+        'old viewer main\n',
+      )
+      expect(await readFile(join(dirname(meta.bin), 'viewer', 'dist', 'index.html'), 'utf8')).toBe(
+        'old viewer html\n',
+      )
+      expect(await readFile(path, 'utf8')).toBe(beforeMetadata)
     } finally {
       delete process.env.ASTRALE_UPDATE_BASE
     }
@@ -231,7 +483,7 @@ describe('updateAstrale', () => {
   test('updates canary-style releases whose binary reports the package version', async () => {
     const root = await mkdtemp(join(tmpdir(), 'astrale-update-test-'))
-    const { path, meta } = await makeInstall(root, 'main-old123')
+    const { path, meta, execution } = await makeInstall(root, 'main-old123')
     const release = await makeFakeRelease(root, 'main-new456', { binaryVersion: '1.0.0' })
     process.env.ASTRALE_UPDATE_BASE = `file://${release}`
     try {
@@ -239,6 +491,7 @@ describe('updateAstrale', () => {
         currentVersion: '1.0.0',
         platform: { os: 'darwin', arch: 'arm64' },
         installPath: path,
+        execution,
       })
       expect(result).toMatchObject({

package/src/lib/__tests__/view-assets.test.ts CHANGED Viewed

@@ -143,4 +143,18 @@ describe('viewer asset resolution', () => {
     expect(stderr).toBe('')
     expect(stdout.trim()).toBe(await realpath(viewer))
   })
+  test('resolves assets shipped beside a Bun-compiled standalone executable', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'astrale-view-standalone-'))
+    temporaryDirectories.push(root)
+    const executable = join(root, 'bin', 'astrale')
+    const viewer = join(root, 'bin', 'viewer', 'dist')
+    await mkdir(viewer, { recursive: true })
+    await writeFile(join(viewer, 'main.js'), '')
+    await writeFile(join(viewer, 'index.html'), '')
+    expect(viewerDistDir('file:///$bunfs/root/assets.ts', '/$bunfs/root/astrale', executable)).toBe(
+      viewer,
+    )
+  })
 })

package/src/lib/__tests__/view-external-open-intent.test.ts ADDED Viewed

@@ -0,0 +1,150 @@
+import type { ChildrenChannel, ExternalOpenRequest, Shell } from '@astrale-os/shell'
+import { capabilitiesMiddleware, createIntentPipeline, createIntentRouter } from '@astrale-os/shell'
+import { describe, expect, mock, test } from 'bun:test'
+import type { ExternalOpenIntentMessage } from '../view/external-open-intent'
+import {
+  installExternalOpenIntentHandler,
+  openExternalBrowserWindow,
+} from '../view/external-open-intent'
+import { viewHostCapabilities } from '../view/host-capabilities'
+describe('View external navigation host effect', () => {
+  test('the real Shell pipeline opens only an exact granted origin and replies to the physical child', async () => {
+    const sent: Array<{ windowId: string; message: unknown }> = []
+    const children = {
+      send: (windowId: string, value: unknown) => sent.push({ windowId, message: value }),
+      has: () => true,
+      on: () => () => undefined,
+      onClose: () => () => undefined,
+    } as ChildrenChannel
+    const capabilities = viewHostCapabilities(['https://connect.nango.dev'])
+    const pipeline = createIntentPipeline()
+    pipeline.use(
+      capabilitiesMiddleware({
+        lookup: (sender) => (sender === 'physical-child' ? capabilities : undefined),
+      }),
+    )
+    const router = createIntentRouter({
+      selfWindowId: 'root',
+      pipeline,
+      parent: null,
+      children,
+    })
+    const open = mock((_request: ExternalOpenRequest) => true)
+    installExternalOpenIntentHandler(
+      {
+        children,
+        onIntent: router.onLocal.bind(router),
+      } as unknown as Shell,
+      { open },
+    )
+    await router.handleInbound(
+      'child',
+      message('https://connect.nango.dev/session', 'forged-sibling'),
+      'physical-child',
+    )
+    expect(open).toHaveBeenCalledTimes(1)
+    expect(sent).toEqual([
+      {
+        windowId: 'physical-child',
+        message: expect.objectContaining({
+          envelope: expect.objectContaining({
+            payload: { correlationId: 'request-1', result: { outcome: 'opened' } },
+          }),
+        }),
+      },
+    ])
+    for (const denied of [
+      'http://connect.nango.dev/session',
+      'https://sub.connect.nango.dev/session',
+      'https://connect.nango.dev:444/session',
+      'https://evil.example/session',
+    ]) {
+      await router.handleInbound('child', message(denied), 'physical-child')
+    }
+    await router.handleInbound('child', message('https://connect.nango.dev/session'), 'ungranted')
+    expect(open).toHaveBeenCalledTimes(1)
+    expect(sent).toHaveLength(1)
+  })
+  test('reports a popup block through the admitted pipeline', async () => {
+    const sent = mock((_windowId: string, _message: unknown) => undefined)
+    const children = {
+      send: sent,
+      has: () => true,
+      on: () => () => undefined,
+      onClose: () => () => undefined,
+    } as ChildrenChannel
+    const pipeline = createIntentPipeline()
+    pipeline.use(
+      capabilitiesMiddleware({
+        lookup: () => viewHostCapabilities(['https://connect.nango.dev']),
+      }),
+    )
+    const router = createIntentRouter({ selfWindowId: 'root', pipeline, parent: null, children })
+    installExternalOpenIntentHandler(
+      { children, onIntent: router.onLocal.bind(router) } as unknown as Shell,
+      { open: () => false },
+    )
+    await router.handleInbound('child', message('https://connect.nango.dev/session'), 'child-1')
+    expect(sent).toHaveBeenCalledWith(
+      'child-1',
+      expect.objectContaining({
+        envelope: expect.objectContaining({
+          payload: { correlationId: 'request-1', result: { outcome: 'blocked' } },
+        }),
+      }),
+    )
+  })
+  test('isolates a fresh inert context before navigating and closes it when isolation fails', () => {
+    const replace = mock((_url: string) => undefined)
+    const opened = { opener: {}, location: { replace }, close: mock(() => undefined) }
+    const open = mock(() => opened)
+    expect(
+      openExternalBrowserWindow({ open } as never, {
+        url: 'https://connect.nango.dev/session',
+        mode: 'popup',
+      }),
+    ).toBe(true)
+    expect(open).toHaveBeenCalledWith('', '_blank', 'popup,width=720,height=760')
+    expect(opened.opener).toBeNull()
+    expect(replace).toHaveBeenCalledWith('https://connect.nango.dev/session')
+    const close = mock(() => undefined)
+    const unsafe = Object.defineProperty({ close, location: { replace: mock() } }, 'opener', {
+      set: () => {
+        throw new Error('opener isolation refused')
+      },
+    })
+    expect(
+      openExternalBrowserWindow({ open: () => unsafe } as never, {
+        url: 'https://connect.nango.dev/session',
+        mode: 'tab',
+      }),
+    ).toBe(false)
+    expect(close).toHaveBeenCalledTimes(1)
+  })
+})
+function message(url: string, sender = 'child-1'): ExternalOpenIntentMessage {
+  return {
+    type: 'intent',
+    version: 1,
+    envelope: {
+      name: 'browser.openExternal',
+      payload: { url, mode: 'popup' },
+      sender: { windowId: sender },
+      correlationId: 'request-1',
+    },
+  }
+}

package/src/lib/__tests__/view-external-open-origins.test.ts ADDED Viewed

@@ -0,0 +1,27 @@
+import { describe, expect, test } from 'bun:test'
+import { admitExternalOpenOrigins } from '../view/external-open-origins'
+describe('View external navigation grants', () => {
+  test('defaults to no authority and canonicalizes exact HTTPS origins', () => {
+    expect(admitExternalOpenOrigins(undefined)).toEqual([])
+    expect(
+      admitExternalOpenOrigins([
+        'https://connect.nango.dev',
+        'https://connect.nango.dev/',
+        'https://connect.composio.dev:443',
+      ]),
+    ).toEqual(['https://connect.nango.dev', 'https://connect.composio.dev'])
+  })
+  test.each([
+    'http://connect.nango.dev',
+    'https://user@connect.nango.dev',
+    'https://connect.nango.dev/path',
+    'https://connect.nango.dev?session=secret',
+    'https://*.example.com',
+    'not-a-url',
+  ])('rejects a non-origin grant: %s', (candidate) => {
+    expect(() => admitExternalOpenOrigins([candidate])).toThrow('exact HTTPS origin')
+  })
+})

package/src/lib/__tests__/view-open-intent.test.ts CHANGED Viewed

@@ -23,7 +23,6 @@ const profile: ResolvedView = {
         kind: 'definition',
         definitions: [{ origin: 'shell.test', kind: 'class', name: 'Person' }],
       },
-      auth: 'required',
     },
     href: 'https://shell.test/profile',
     handshake: 'shell',
@@ -41,7 +40,6 @@ const card: ResolvedView = {
         kind: 'definition',
         definitions: [{ origin: 'shell.test', kind: 'class', name: 'Person' }],
       },
-      auth: 'public',
     },
     href: 'https://shell.test/card',
     handshake: 'none',

package/src/lib/__tests__/view-server.test.ts CHANGED Viewed

@@ -1,10 +1,12 @@
-import { describe, expect, test } from 'bun:test'
+import type { AuthApi } from '@astrale-os/sdk/auth'
+import { describe, expect, mock, test } from 'bun:test'
 import { once } from 'node:events'
 import type { ViewServeConfig } from '../view/session'
 import { findFreePort } from '../port'
-import { startViewServer } from '../view/server'
+import { mintViewCredential, startViewServer } from '../view/server'
 const digest = (character: string) => `sha256:${character.repeat(64)}` as const
 const target = (value: string) => value as ViewServeConfig['session']['view']['target']
@@ -13,6 +15,19 @@ const revision = (character: string) =>
   digest(character) as ViewServeConfig['session']['view']['route']['revision']
 describe('view session server credentials', () => {
+  test('mints a proof-bounded credential for the Kernel audience', async () => {
+    const mint = mock(async () => 'minted-credential')
+    const auth = { mint } as unknown as Pick<AuthApi, 'mint'>
+    await expect(mintViewCredential(auth, issuer('https://kernel.test'))).resolves.toBe(
+      'minted-credential',
+    )
+    expect(mint).toHaveBeenCalledWith({
+      audience: 'https://kernel.test',
+      ttlSeconds: 240,
+    })
+  })
   /** @evidence TEST-CLI-PLAIN-VIEW-RECEIVES-NO-CREDENTIAL */
   test('refuses to mint a token for a handshake-none View', async () => {
     const nonce = 'plain-view'
@@ -29,7 +44,7 @@ describe('view session server credentials', () => {
           target: target('/:example.test'),
           route: {
             key: 'example.test:view.public',
-            declaration: { target: { kind: 'domain' }, auth: 'required' },
+            declaration: { target: { kind: 'domain' } },
             href: 'https://example.test/ui/public',
             handshake: 'none',
             issuer: issuer('https://example.test'),
@@ -45,12 +60,20 @@ describe('view session server credentials', () => {
         issuer: 'https://kernel.test',
         direct: true,
       },
+      externalOrigins: ['https://connect.nango.dev'],
       idleMs: 60_000,
     } satisfies ViewServeConfig
     const server = startViewServer(config)
     await once(server, 'listening')
     try {
+      const configResponse = await fetch(`http://127.0.0.1:${port}/s/${nonce}/config.json`)
+      expect(configResponse.status).toBe(200)
+      expect(await configResponse.json()).toMatchObject({
+        sessionId: 'v-plain',
+        externalOrigins: ['https://connect.nango.dev'],
+      })
       const response = await fetch(`http://127.0.0.1:${port}/s/${nonce}/token`, {
         method: 'POST',
       })