@bugmole/cli 0.4.0 → 0.6.0

package/LICENSE

@@ -1,7 +1,21 @@
+MIT License
+
 Copyright (c) 2026 The AI, Inc.
 
-All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
 
-This software and its source code are proprietary and confidential. No license
-or right to use, copy, modify, distribute, sublicense, or sell this software
-is granted without prior written permission from The AI, Inc.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bugmole/cli",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -27,7 +27,7 @@
     "bm": "scripts/bugmole.cjs"
   },
   "scripts": {
-    "postinstall": "node scripts/ensure-maestro.cjs",
+    "postinstall": "node scripts/ensure-maestro.cjs && node scripts/ensure-playwright.cjs",
     "bugmole:mcp": "NODE_OPTIONS=--max-old-space-size=512 tsx --no-cache scripts/bugmole.ts --mcp",
     "bugmole:explore": "NODE_OPTIONS=--max-old-space-size=512 tsx scripts/bugmole.ts --mode explore",
     "bugmole:plan": "NODE_OPTIONS=--max-old-space-size=512 tsx scripts/bugmole.ts --mode plan",
@@ -46,7 +46,7 @@
     "runner:dev": "wrangler dev -c wrangler.runner.jsonc",
     "runner:deploy": "wrangler deploy -c wrangler.runner.jsonc",
     "sync:catalog": "node scripts/sync-plan-catalog.mjs",
-    "test": "NODE_OPTIONS=--max-old-space-size=512 tsx --test --test-concurrency=1 scripts/bugmole.test.ts src/mcp/server.test.ts projects/registry.test.ts src/integrations/testflight-feedback.test.ts src/integrations/temp-email.test.ts src/storage/object-store.test.ts src/storage/local-artifact-server.test.ts src/storage/storage-directory.test.ts src/runtime/reset.test.ts src/runtime/serve-gateway.test.ts src/registry/task-scheduling.test.ts src/registry-worker/artifacts.test.ts src/registry-worker/runs.test.ts src/registry-worker/org/routes.test.ts src/registry-worker/billing/billing-core.test.ts src/registry-worker/billing/paypal.test.ts src/registry-worker/ai/routes.test.ts src/registry-worker/runner/runner.test.ts src/registry-worker/signup/signup.test.ts src/registry-worker/notifications/notifications.test.ts src/registry-worker/github/checks.test.ts src/registry-worker/gitlab/checks.test.ts src/registry-worker/personas/personas.test.ts src/registry-worker/feedback/feedback.test.ts src/registry-worker/devices/devices.test.ts src/registry-worker/domains/domains.test.ts src/registry-worker/sso/sso.test.ts src/registry-worker/mcp/mcp.test.ts src/integrations/github-app.test.ts src/runtime/run-once.test.ts src/runtime/appium-driver.test.ts src/integrations/aws-sigv4.test.ts src/runtime/ai-work.test.ts src/billing/plan-catalog.test.ts src/mcp/write-test-cases.test.ts src/runtime/pipeline.test.ts src/runtime/planner.test.ts src/runtime/test-case-verdicts.test.ts src/runtime/journey-graph.test.ts src/runtime/journey-evidence.test.ts src/runtime/local-browser.test.ts src/runtime/serve-worker.test.ts src/runtime/cursor-driver-run.test.ts src/runtime/explorer.test.ts src/runtime/nav-crawl.test.ts src/runtime/app-understanding.test.ts src/runtime/environment.test.ts src/runtime/blocker-resolution.test.ts src/runtime/ui-reverse-engineering/coordinator.test.ts src/runtime/maestro-driver.test.ts src/runtime/playwright-driver.test.ts src/runtime/flow-language.test.ts src/runtime/web-suite.test.ts src/runtime/canonical-flow.test.ts src/runtime/executor.test.ts src/runtime/ios-screen-record.test.ts src/runtime/android-screen-record.test.ts src/runtime/reviewer.test.ts src/runtime/reporter.test.ts src/runtime/cursor-cli-driver.test.ts src/runtime/local-registry-stub.test.ts src/runtime/browser-matrix.test.ts src/runtime/browser-matrix.integration.test.ts src/runtime/failure-analysis.test.ts src/runtime/site-discovery.test.ts src/runtime/ai-exploration.test.ts src/runtime/discovery-task.test.ts",
+    "test": "NODE_OPTIONS=--max-old-space-size=512 tsx --test --test-concurrency=1 scripts/bugmole.test.ts scripts/ensure-playwright.test.ts scripts/sync-launcher-version.test.ts src/mcp/server.test.ts projects/registry.test.ts src/integrations/testflight-feedback.test.ts src/integrations/temp-email.test.ts src/storage/object-store.test.ts src/storage/local-artifact-server.test.ts src/storage/storage-directory.test.ts src/storage/test-case-results.test.ts src/runtime/reset.test.ts src/runtime/run-job.test.ts src/runtime/apply-proposals.test.ts src/runtime/serve-gateway.test.ts src/registry/task-scheduling.test.ts src/registry/test-case-revisions.test.ts src/registry-worker/task-approval.test.ts src/registry-worker/proposals/proposals.test.ts src/registry-worker/artifacts.test.ts src/registry-worker/runs.test.ts src/registry-worker/org/routes.test.ts src/registry-worker/billing/billing-core.test.ts src/registry-worker/billing/paypal.test.ts src/registry-worker/billing/plan-gaps.test.ts src/registry-worker/ai/routes.test.ts src/registry-worker/runner/runner.test.ts src/registry-worker/signup/signup.test.ts src/registry-worker/signup/attribution.test.ts src/registry-worker/notifications/notifications.test.ts src/registry-worker/github/checks.test.ts src/registry-worker/gitlab/checks.test.ts src/registry-worker/personas/personas.test.ts src/registry-worker/feedback/feedback.test.ts src/registry-worker/devices/devices.test.ts src/registry-worker/domains/domains.test.ts src/registry-worker/sso/sso.test.ts src/registry-worker/mcp/mcp.test.ts src/registry-worker/feature-flags/feature-flags.test.ts scripts/bugmole-admin.test.mjs src/integrations/github-app.test.ts src/runtime/run-once.test.ts src/runtime/appium-driver.test.ts src/integrations/aws-sigv4.test.ts src/runtime/ai-work.test.ts src/billing/plan-catalog.test.ts src/runtime/scenario-matrix.test.ts src/mcp/write-test-cases.test.ts src/runtime/pipeline.test.ts src/runtime/planner.test.ts src/runtime/test-case-verdicts.test.ts src/runtime/journey-graph.test.ts src/runtime/journey-evidence.test.ts src/runtime/local-browser.test.ts src/runtime/serve-worker.test.ts src/runtime/cursor-driver-run.test.ts src/runtime/explorer.test.ts src/runtime/nav-crawl.test.ts src/runtime/app-understanding.test.ts src/runtime/environment.test.ts src/runtime/blocker-resolution.test.ts src/runtime/ui-reverse-engineering/coordinator.test.ts src/runtime/maestro-driver.test.ts src/runtime/playwright-driver.test.ts src/runtime/flow-language.test.ts src/runtime/web-suite.test.ts src/runtime/canonical-flow.test.ts src/runtime/executor.test.ts src/runtime/ios-screen-record.test.ts src/runtime/android-screen-record.test.ts src/runtime/reviewer.test.ts src/runtime/reporter.test.ts src/runtime/cursor-cli-driver.test.ts src/runtime/local-registry-stub.test.ts src/runtime/browser-matrix.test.ts src/runtime/browser-matrix.integration.test.ts src/runtime/failure-analysis.test.ts src/runtime/site-discovery.test.ts src/runtime/ai-exploration.test.ts src/registry-worker/task-resume.test.ts src/registry-worker/secrets/secrets.test.ts src/registry-worker/jira/jira.test.ts src/runtime/record-run-verdicts.test.ts src/runtime/cloud-secrets.test.ts src/runtime/secret-sources.test.ts src/runtime/vault-federation.test.ts src/registry-worker/identity/oidc.test.ts src/registry-worker/task-review.test.ts src/registry-worker/roles/roles.test.ts src/registry/roles.test.ts src/runtime/project-roles.test.ts src/runtime/roles-cli.test.ts src/mcp/roles-and-review.test.ts src/runtime/discovery-task.test.ts src/registry/project-identity.test.ts src/runtime/project-identity.test.ts src/registry-worker/projects/projects.test.ts",
     "test:mcp": "NODE_OPTIONS=--max-old-space-size=512 tsx --test --test-concurrency=1 scripts/bugmole.test.ts src/mcp/server.test.ts projects/registry.test.ts src/integrations/testflight-feedback.test.ts src/storage/object-store.test.ts src/runtime/maestro-driver.test.ts src/runtime/canonical-flow.test.ts",
     "typecheck": "NODE_OPTIONS=--max-old-space-size=512 tsc --noEmit"
   },
@@ -59,7 +59,7 @@
     "automation"
   ],
   "author": "",
-  "license": "UNLICENSED",
+  "license": "MIT",
   "dependencies": {
     "@aws-sdk/client-s3": "^3.1085.0",
     "@aws-sdk/s3-request-presigner": "^3.1085.0",
@@ -81,5 +81,8 @@
     "gaxios": {
       "uuid": "^11.1.1"
     }
+  },
+  "optionalDependencies": {
+    "@theaiinc/arcana-vault": "^0.1.0"
   }
 }

package/scripts/bugmole-admin.mjs

@@ -0,0 +1,194 @@
+#!/usr/bin/env node
+// Platform-operator CLI for feature overrides, beta opt-ins and contract plans.
+// It calls the registry's /api/platform routes (src/registry-worker/feature-flags/admin.ts).
+//
+//   PLATFORM_ADMIN_TOKEN=… node scripts/bugmole-admin.mjs flags list [workspace]
+//   node scripts/bugmole-admin.mjs flags set <workspace> <feature> on|off [--until 2026-12-31] [--reason "…"]
+//   node scripts/bugmole-admin.mjs flags clear <workspace> <feature>
+//   node scripts/bugmole-admin.mjs flags beta <workspace> <feature> on|off|clear
+//   node scripts/bugmole-admin.mjs plan show <workspace>
+//   node scripts/bugmole-admin.mjs plan set <workspace> enterprise [--projects N] [--minutes N] [--credits N]
+//        [--parallel N] [--retention-days N] [--feature scim=off ...] [--period-end 2027-09-30] [--note "…"]
+//   node scripts/bugmole-admin.mjs plan set <workspace> free
+//
+// Environment: PLATFORM_ADMIN_TOKEN (required; never printed), BUGMOLE_REGISTRY_URL
+// (default https://api.bugmole.com), BUGMOLE_OPERATOR (who you are, for the audit log;
+// defaults to $USER). Limits accept "unlimited". See docs/feature-flags.md.
+import os from "node:os";
+import { pathToFileURL } from "node:url";
+
+export const USAGE = `Usage:
+  bugmole-admin flags list [workspace]
+  bugmole-admin flags set <workspace> <feature> on|off [--until <date>] [--reason <text>]
+  bugmole-admin flags clear <workspace> <feature>
+  bugmole-admin flags beta <workspace> <feature> on|off|clear
+  bugmole-admin plan show <workspace>
+  bugmole-admin plan set <workspace> enterprise [--projects N] [--minutes N] [--credits N] [--parallel N]
+                [--retention-days N] [--feature <name>=on|off]... [--period-end <date>] [--note <text>]
+  bugmole-admin plan set <workspace> free`;
+
+const LIMIT_OPTIONS = {
+  projects: "projects",
+  minutes: "cloudMinutes",
+  credits: "aiCredits",
+  parallel: "parallel",
+  "retention-days": "retentionDays",
+};
+
+class UsageError extends Error {}
+
+function splitOptions(args) {
+  const positional = [];
+  const options = {};
+  for (let index = 0; index < args.length; index++) {
+    const arg = args[index];
+    if (!arg.startsWith("--")) {
+      positional.push(arg);
+      continue;
+    }
+    const [rawName, inline] = arg.slice(2).split(/=(.*)/s, 2);
+    const value = inline ?? args[++index];
+    if (value === undefined) throw new UsageError(`--${rawName} needs a value`);
+    if (rawName === "feature") (options.feature ??= []).push(value);
+    else options[rawName] = value;
+  }
+  return { positional, options };
+}
+
+function onOff(value, what) {
+  if (value === "on") return true;
+  if (value === "off") return false;
+  throw new UsageError(`${what} must be on or off`);
+}
+
+function limitValue(name, value) {
+  if (value === "unlimited") return null;
+  if (!/^\d+$/.test(value)) throw new UsageError(`--${name} must be a whole number or "unlimited"`);
+  return Number(value);
+}
+
+const segment = (value) => encodeURIComponent(value);
+
+/** Turns command-line arguments into one registry request. Exported for tests. */
+export function buildRequest(argv) {
+  const { positional, options } = splitOptions(argv);
+  const [group, action, workspace, ...rest] = positional;
+  const need = (value, name) => {
+    if (!value) throw new UsageError(`Missing ${name}`);
+    return value;
+  };
+  const known = (allowed) => {
+    for (const name of Object.keys(options)) if (!allowed.includes(name)) throw new UsageError(`Unknown option --${name}`);
+  };
+
+  if (group === "flags") {
+    if (action === "list") {
+      known([]);
+      return workspace
+        ? { method: "GET", path: `/api/platform/workspaces/${segment(workspace)}/features` }
+        : { method: "GET", path: "/api/platform/feature-overrides" };
+    }
+    const feature = need(rest[0], "feature");
+    const base = `/api/platform/workspaces/${segment(need(workspace, "workspace"))}`;
+    if (action === "set") {
+      known(["until", "reason"]);
+      const body = { enabled: onOff(need(rest[1], "on|off"), "The value") };
+      if (options.until) body.expiresAt = options.until;
+      if (options.reason) body.reason = options.reason;
+      return { method: "PUT", path: `${base}/features/${segment(feature)}`, body };
+    }
+    if (action === "clear") {
+      known([]);
+      return { method: "DELETE", path: `${base}/features/${segment(feature)}` };
+    }
+    if (action === "beta") {
+      known([]);
+      const value = need(rest[1], "on|off|clear");
+      if (value === "clear") return { method: "DELETE", path: `${base}/beta/${segment(feature)}` };
+      return { method: "PUT", path: `${base}/beta/${segment(feature)}`, body: { enabled: onOff(value, "The value") } };
+    }
+  }
+
+  if (group === "plan") {
+    const base = `/api/platform/workspaces/${segment(need(workspace, "workspace"))}`;
+    if (action === "show") {
+      known([]);
+      return { method: "GET", path: `${base}/features` };
+    }
+    if (action === "set") {
+      const plan = need(rest[0], "plan (enterprise or free)");
+      if (plan === "free") {
+        known(["note"]);
+        return { method: "PUT", path: `${base}/plan`, body: { plan, ...(options.note ? { note: options.note } : {}) } };
+      }
+      if (plan !== "enterprise") throw new UsageError("plan must be enterprise or free; Team and Business are bought through checkout");
+      known([...Object.keys(LIMIT_OPTIONS), "feature", "period-end", "note"]);
+      const limits = {};
+      for (const [name, key] of Object.entries(LIMIT_OPTIONS)) {
+        if (options[name] !== undefined) limits[key] = limitValue(name, options[name]);
+      }
+      const features = {};
+      for (const entry of options.feature ?? []) {
+        const [name, value] = entry.split("=");
+        if (!name || value === undefined) throw new UsageError("--feature takes <name>=on|off");
+        features[name] = onOff(value, `--feature ${name}`);
+      }
+      const body = { plan, limits, features };
+      if (options["period-end"]) body.periodEnd = options["period-end"];
+      if (options.note) body.note = options.note;
+      return { method: "PUT", path: `${base}/plan`, body };
+    }
+  }
+  throw new UsageError("Unknown command");
+}
+
+export async function main(argv = process.argv.slice(2), env = process.env, doFetch = fetch, out = console) {
+  if (!argv.length || argv[0] === "help" || argv.includes("--help")) {
+    out.log(USAGE);
+    return 0;
+  }
+  let request;
+  try {
+    request = buildRequest(argv);
+  } catch (error) {
+    if (!(error instanceof UsageError)) throw error;
+    out.error(`${error.message}\n\n${USAGE}`);
+    return 2;
+  }
+  const token = env.PLATFORM_ADMIN_TOKEN?.trim();
+  if (!token) {
+    out.error("Set PLATFORM_ADMIN_TOKEN (the registry's platform secret) in the environment.");
+    return 2;
+  }
+  const origin = (env.BUGMOLE_REGISTRY_URL || "https://api.bugmole.com").replace(/\/+$/, "");
+  const operator = env.BUGMOLE_OPERATOR || env.USER || os.userInfo().username || "unknown";
+  const result = await doFetch(`${origin}${request.path}`, {
+    method: request.method,
+    headers: {
+      authorization: `Bearer ${token}`,
+      "x-bugmole-operator": operator,
+      ...(request.body ? { "content-type": "application/json" } : {}),
+    },
+    body: request.body ? JSON.stringify(request.body) : undefined,
+  });
+  const text = await result.text();
+  let body = text;
+  try {
+    body = JSON.stringify(JSON.parse(text), null, 2);
+  } catch {
+    // not JSON; print as is
+  }
+  if (!result.ok) {
+    out.error(`${request.method} ${request.path} → ${result.status}\n${body}`);
+    return 1;
+  }
+  out.log(body);
+  return 0;
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
+  main().then((code) => { process.exitCode = code; }, (error) => {
+    console.error(error instanceof Error ? error.message : error);
+    process.exitCode = 1;
+  });
+}

package/scripts/bugmole-admin.test.mjs

@@ -0,0 +1,62 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { buildRequest, main } from "./bugmole-admin.mjs";
+
+test("flags commands map to the platform routes", () => {
+  assert.deepEqual(buildRequest(["flags", "list"]), { method: "GET", path: "/api/platform/feature-overrides" });
+  assert.deepEqual(buildRequest(["flags", "list", "acme"]), { method: "GET", path: "/api/platform/workspaces/acme/features" });
+  assert.deepEqual(buildRequest(["flags", "set", "acme", "sso", "on", "--until", "2026-12-31", "--reason", "Trial"]), {
+    method: "PUT",
+    path: "/api/platform/workspaces/acme/features/sso",
+    body: { enabled: true, expiresAt: "2026-12-31", reason: "Trial" },
+  });
+  assert.deepEqual(buildRequest(["flags", "set", "acme", "slack", "off"]).body, { enabled: false });
+  assert.deepEqual(buildRequest(["flags", "clear", "acme", "sso"]), { method: "DELETE", path: "/api/platform/workspaces/acme/features/sso" });
+  assert.deepEqual(buildRequest(["flags", "beta", "acme", "mcp", "on"]).body, { enabled: true });
+  assert.equal(buildRequest(["flags", "beta", "acme", "mcp", "clear"]).method, "DELETE");
+  assert.throws(() => buildRequest(["flags", "set", "acme", "sso", "maybe"]), /on or off/);
+  assert.throws(() => buildRequest(["flags", "set", "acme", "sso", "on", "--forever", "1"]), /Unknown option/);
+});
+
+test("plan set builds a contract", () => {
+  const request = buildRequest([
+    "plan", "set", "acme", "enterprise",
+    "--projects", "40", "--minutes", "unlimited", "--credits=20000", "--parallel", "60", "--retention-days", "400",
+    "--feature", "scim=off", "--feature", "self_hosted_workers=on", "--period-end", "2027-09-30", "--note", "C-17",
+  ]);
+  assert.deepEqual(request, {
+    method: "PUT",
+    path: "/api/platform/workspaces/acme/plan",
+    body: {
+      plan: "enterprise",
+      limits: { projects: 40, cloudMinutes: null, aiCredits: 20000, parallel: 60, retentionDays: 400 },
+      features: { scim: false, self_hosted_workers: true },
+      periodEnd: "2027-09-30",
+      note: "C-17",
+    },
+  });
+  assert.deepEqual(buildRequest(["plan", "set", "acme", "free"]).body, { plan: "free" });
+  assert.throws(() => buildRequest(["plan", "set", "acme", "team"]), /checkout/);
+  assert.throws(() => buildRequest(["plan", "set", "acme", "enterprise", "--projects", "-3"]), /whole number/);
+});
+
+test("main sends the token and operator, and refuses without a token", async () => {
+  const logs = [];
+  const out = { log: (line) => logs.push(line), error: (line) => logs.push(line) };
+  assert.equal(await main(["flags", "list"], {}, fetch, out), 2);
+  assert.match(logs.pop(), /PLATFORM_ADMIN_TOKEN/);
+
+  let seen;
+  const fakeFetch = async (url, init) => {
+    seen = { url, init };
+    return new Response(JSON.stringify({ ok: true }), { status: 200 });
+  };
+  const code = await main(["flags", "set", "acme", "sso", "on"], {
+    PLATFORM_ADMIN_TOKEN: "tok", BUGMOLE_REGISTRY_URL: "https://registry.test/", BUGMOLE_OPERATOR: "steve",
+  }, fakeFetch, out);
+  assert.equal(code, 0);
+  assert.equal(seen.url, "https://registry.test/api/platform/workspaces/acme/features/sso");
+  assert.equal(seen.init.headers.authorization, "Bearer tok");
+  assert.equal(seen.init.headers["x-bugmole-operator"], "steve");
+  assert.ok(!logs.some((line) => line.includes("tok\"")), "the token is never printed");
+});

package/scripts/bugmole.test.ts

@@ -1,8 +1,9 @@
 import { strict as assert } from "node:assert";
 import { fileURLToPath } from "node:url";
-import { mkdtemp, readFile, rm } from "node:fs/promises";
+import { mkdir, mkdtemp, readFile, rm } from "node:fs/promises";
 import { describe, it } from "node:test";
 import {
+  applyApprovalFlag,
   buildDashboardHandoffUrl,
   parseArgs,
   printHelp,
@@ -17,7 +18,7 @@ import {
 } from "./bugmole.js";
 import os from "node:os";
 import path from "node:path";
-import { runInitWizard, validateStorageProvider } from "../src/runtime/init-wizard.js";
+import { PlanLimitError, describePlanLimit, planLimitFromRegistry, runInitWizard, validateStorageProvider } from "../src/runtime/init-wizard.js";
 
 describe("Bugmole CLI contract", () => {
   it("starts MCP for the canonical --mcp flag", () => {
@@ -65,6 +66,7 @@ describe("Bugmole CLI contract", () => {
   it("leaves other modes' exit code alone regardless of their result", () => {
     assert.equal(runModeExitCode("explore", { status: "partial" }), 0);
     assert.equal(runModeExitCode("report", undefined), 0);
+    assert.equal(runModeExitCode("explore", { status: "error" }), 1);
   });
 
   it("accepts a dashboard URL override for serve handoffs", () => {
@@ -189,6 +191,53 @@ describe("Bugmole CLI contract", () => {
     }
   });
 
+  it("turns a registry plan refusal into its message and a billing link", () => {
+    const refusal = planLimitFromRegistry(402, {
+      error: "Your plan includes 1 project and this workspace has 1. Upgrade to Team to add more.",
+      code: "plan_limit",
+      upgradeUrl: "/billing?workspace=acme&plan=team",
+    }, "https://dash.test/");
+    assert.ok(refusal instanceof PlanLimitError);
+    assert.equal(refusal.billingUrl, "https://dash.test/billing?workspace=acme&plan=team");
+    assert.equal(
+      describePlanLimit(refusal),
+      "Your plan includes 1 project and this workspace has 1. Upgrade to Team to add more.\nSee plans and upgrade: https://dash.test/billing?workspace=acme&plan=team",
+    );
+    assert.equal(
+      planLimitFromRegistry(402, { error: "x", code: "free_workspace_exists", billingUrl: "https://app.bugmole.com/billing?plan=team" }, "https://dash.test")?.billingUrl,
+      "https://app.bugmole.com/billing?plan=team",
+      "the registry's absolute link wins",
+    );
+    assert.equal(planLimitFromRegistry(409, { error: "A project with this id already exists", code: "project_exists" }, "https://dash.test"), null);
+    assert.equal(planLimitFromRegistry(402, { code: "plan_limit", upgradeUrl: "https://evil.test/" }, "https://dash.test")?.billingUrl, "https://dash.test/billing", "only a relative Billing path is joined");
+  });
+
+  it("stops init with the plan message instead of a generic registration failure", async () => {
+    const cwd = await mkdtemp(path.join(os.tmpdir(), "bugmole-init-limit-"));
+    const saved = { key: process.env.BUGMOLE_API_KEY, registry: process.env.BUGMOLE_REGISTRY_URL, dashboard: process.env.BUGMOLE_DASHBOARD_URL };
+    const realFetch = globalThis.fetch;
+    process.env.BUGMOLE_API_KEY = "bm_live_test";
+    process.env.BUGMOLE_REGISTRY_URL = "https://registry.test";
+    process.env.BUGMOLE_DASHBOARD_URL = "https://dash.test";
+    globalThis.fetch = (async () => Response.json({
+      error: "Your plan includes 1 project and this workspace has 1. Upgrade to Team to add more.",
+      code: "plan_limit",
+      limit: "projects",
+      upgradeUrl: "/billing?workspace=acme&plan=team",
+    }, { status: 402 })) as typeof fetch;
+    try {
+      await assert.rejects(runInitWizard({ cwd, nonInteractive: true }), (error: unknown) =>
+        error instanceof PlanLimitError && error.billingUrl === "https://dash.test/billing?workspace=acme&plan=team" && /Upgrade to Team/.test(error.message));
+    } finally {
+      globalThis.fetch = realFetch;
+      for (const [name, value] of [["BUGMOLE_API_KEY", saved.key], ["BUGMOLE_REGISTRY_URL", saved.registry], ["BUGMOLE_DASHBOARD_URL", saved.dashboard]] as const) {
+        if (value === undefined) delete process.env[name];
+        else process.env[name] = value;
+      }
+      await rm(cwd, { recursive: true, force: true });
+    }
+  });
+
   it("accepts config alongside a boolean MCP flag", () => {
     assert.deepEqual(parseArgs(["node", "bugmole", "--mcp", "--config", "custom.yaml"]), {
       mcp: true,
@@ -342,3 +391,46 @@ describe("Bugmole CLI contract", () => {
     }
   });
 });
+
+describe("bugmole serve --approval", () => {
+  it("sets BUGMOLE_APPROVAL for the whole process, and refuses an unknown mode", () => {
+    const env: Record<string, string | undefined> = {};
+    assert.equal(applyApprovalFlag({ approval: "manual" }, env), "manual");
+    assert.equal(env.BUGMOLE_APPROVAL, "manual");
+    assert.equal(applyApprovalFlag({ approval: "yolo" }, {}), null);
+    assert.equal(applyApprovalFlag({}, { BUGMOLE_APPROVAL: "extreme" }), "extreme", "no flag: the environment decides");
+    assert.equal(applyApprovalFlag({}, {}), undefined, "neither: the project decides");
+  });
+});
+
+it("flag values that look like numbers stay names unless the flag is a count", () => {
+  const args = parseArgs(["node", "bugmole", "--mode", "suite", "--grep", "404", "--project", "2024", "--max-pages", "20", "--timeout", "5000"]);
+  assert.equal(args.grep, "404");
+  assert.equal(args.project, "2024");
+  assert.equal(args.maxpages, 20);
+  assert.equal(args.timeout, 5000);
+});
+
+it("dashed flags are readable in both spellings", () => {
+  const args = parseArgs(["node", "bugmole", "--mode", "review", "--file-path", "a.ts", "--change-summary", "b", "--diff", "c"]);
+  assert.equal(args.filepath, "a.ts");
+  assert.equal(args.filePath, "a.ts");
+  assert.equal(args.changeSummary, "b");
+});
+
+describe("init output", () => {
+  it("keeps .bugmole.env out of git and writes a config that passes validation", async () => {
+    const cwd = await mkdtemp(path.join(os.tmpdir(), "bugmole-init-git-"));
+    try {
+      await mkdir(path.join(cwd, ".git"));
+      const result = await runInitWizard({ cwd, nonInteractive: true });
+      assert.match(await readFile(path.join(cwd, ".gitignore"), "utf8"), /^\/\.bugmole\.env$/m);
+      const YAML = (await import("yaml")).default;
+      const { validateConfig } = await import("../src/runtime/config-validate.js");
+      const outcome = validateConfig(YAML.parse(await readFile(path.join(cwd, result.configPath), "utf8")));
+      assert.deepEqual(outcome.errors, []);
+    } finally {
+      await rm(cwd, { recursive: true, force: true });
+    }
+  });
+});