@inneranimalmedia/agentsam-sdk 2.6.7 → 2.6.8

package/test/integration/cms-site-tenancy-contract.test.mjs

@@ -1,268 +0,0 @@
-import assert from 'node:assert/strict';
-import fs from 'node:fs';
-import path from 'node:path';
-import test from 'node:test';
-import { fileURLToPath } from 'node:url';
-import { assertProjectSlug, createCmsDbClient } from '../../apps/local-studio/backend/worker/cms-db.js';
-import { injectSitePartials, fetchSitePartial, putSitePartial } from '../../apps/local-studio/backend/worker/site-partials.js';
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../..');
-const at = (...parts) => path.join(root, ...parts);
-const read = (...parts) => fs.readFileSync(at(...parts), 'utf8');
-
-test('CMS D1 query helper strictly enforces projectSlug tenancy invariant', () => {
-  // Empty or invalid projectSlug must throw immediately
-  assert.throws(() => assertProjectSlug(''), /CMS Tenancy Invariant Violation/);
-  assert.throws(() => assertProjectSlug('   '), /CMS Tenancy Invariant Violation/);
-  assert.throws(() => assertProjectSlug(null), /CMS Tenancy Invariant Violation/);
-  assert.throws(() => assertProjectSlug(undefined), /CMS Tenancy Invariant Violation/);
-  assert.throws(() => createCmsDbClient({}, ''), /CMS Tenancy Invariant Violation/);
-
-  assert.equal(assertProjectSlug('agentsam-sdk'), 'agentsam-sdk');
-});
-
-test('CMS D1 queries all enforce project-scoped tenancy without cross-tenant leaks', async () => {
-  const capturedQueries = [];
-  const mockDb = {
-    prepare(query) {
-      return {
-        bind(...args) {
-          capturedQueries.push({ query, args });
-          return {
-            async all() {
-              if (query.includes('FROM cms_pages WHERE project_slug = ?')) {
-                return { results: [{ id: 'page_test', project_slug: 'agentsam-sdk', title: 'Test' }] };
-              }
-              if (query.includes('FROM cms_pages WHERE id = ? AND project_slug = ?')) {
-                return { results: [{ id: args[0], project_slug: 'agentsam-sdk', title: 'Test' }] };
-              }
-              if (query.includes('SELECT s.id FROM cms_page_sections s')) {
-                return { results: [{ id: 'sec_test' }] };
-              }
-              if (query.includes('SELECT b.* FROM cms_section_components b')) {
-                return { results: [{ id: 'blk_test', component_type: 'card', component_data: '{}' }] };
-              }
-              if (query.includes('SELECT s.* FROM cms_page_sections s')) {
-                return { results: [{ id: 'sec_test', section_name: 'Test', section_data: '{}' }] };
-              }
-              return { results: [] };
-            },
-            async run() {
-              return { success: true };
-            },
-          };
-        },
-      };
-    },
-  };
-
-  const client = createCmsDbClient(mockDb, 'agentsam-sdk');
-
-  await client.getProject();
-  await client.getPages();
-  await client.getPageById('page_123');
-  await client.getSectionsForPage('page_123');
-  await client.getAllSectionsForSite();
-  await client.getAllBlocksForSite();
-  await client.getBlocksForSection('sec_123');
-  await client.getThemeOverrides();
-  await client.getLiquidImports();
-  await client.getActivity();
-  await client.getTemplates();
-
-  // Audit every captured query
-  for (const { query, args } of capturedQueries) {
-    const hasProjectSlugConstraint =
-      query.includes('project_slug') ||
-      query.includes('iam_project_slug') ||
-      query.includes('project_id') ||
-      query.includes('projects WHERE id = ?');
-    assert.ok(
-      hasProjectSlugConstraint,
-      `Query must enforce project scoping: ${query}`,
-    );
-    assert.ok(
-      args.some((arg) => typeof arg === 'string' && (arg.includes('agentsam-sdk') || arg.includes('agentsam_sdk'))),
-      `Args must bind project slug: ${JSON.stringify(args)} for ${query}`,
-    );
-  }
-});
-
-test('Local Studio declares portable registry versions for client-cms-editor dependencies', () => {
-  const pkgPath = at('apps', 'local-studio', 'frontend', 'package.json');
-  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
-  const rootPkg = JSON.parse(fs.readFileSync(at('package.json'), 'utf8'));
-
-  for (const name of [
-    '@inneranimalmedia/agentsam-cms-frontend',
-    '@inneranimalmedia/agentsam-cms-backend',
-    '@inneranimalmedia/agentsam-cms-shared',
-  ]) {
-    const declared = pkg.dependencies[name];
-    assert.ok(declared, 'missing ' + name);
-    assert.equal(declared, rootPkg.version, name + ' must track the lockstep SDK release');
-    assert.doesNotMatch(declared, /^(?:file:|link:|workspace:)/, name + ' must install from the registry');
-  }
-});
-
-test('Local Studio mounts CMS route with default site agentsam-sdk', () => {
-  const liveRoute = at('apps', 'local-studio', 'frontend', 'src', 'routes', '(apps)', 'cms.tsx');
-  assert.ok(fs.existsSync(liveRoute), 'live CMS route must be routes/(apps)/cms.tsx');
-  const routeContent = read('apps', 'local-studio', 'frontend', 'src', 'routes', '(apps)', 'cms.tsx');
-
-  // Superseded donor must stay inert — do not revive obsolete _app/cms.tsx contracts.
-  const donor = read('apps', 'local-studio', 'frontend', 'src', 'routes', '_app', 'cms.tsx');
-  assert.match(donor, /SUPERSEDED/);
-  assert.doesNotMatch(donor, /from ["']@inneranimalmedia\/agentsam-cms-frontend["']/);
-  assert.doesNotMatch(donor, /createFileRoute\(/);
-  assert.match(donor, /export\s*\{\s*\}\s*;/);
-
-  // Live route defaults to agentsam-sdk and uses HttpCmsAdapter + site catalog.
-  assert.match(routeContent, /createHttpCmsAdapter/);
-  assert.match(routeContent, /slug:\s*"agentsam-sdk"/);
-  assert.match(routeContent, /search\.site \|\| search\.project_slug \|\| search\.project \|\| "agentsam-sdk"/);
-  assert.doesNotMatch(routeContent, /default\s*:\s*["']inneranimalmedia["']/);
-
-  // NavRail must include CMS entry
-  const navRail = read('apps', 'local-studio', 'frontend', 'src', 'components', 'shell', 'nav-rail.tsx');
-  assert.match(navRail, /to:\s*"\/cms"/);
-  assert.match(navRail, /label:\s*"CMS"/);
-});
-
-test('Local Studio Worker dispatches /api/cms/* with strict tenant isolation', () => {
-  const workerContent = read('apps', 'local-studio', 'backend', 'worker', 'index.js');
-  assert.match(workerContent, /url\.pathname\.startsWith\("\/api\/cms\/"\)/);
-  assert.match(workerContent, /handleCmsWorkerRequest/);
-
-  const cmsService = read('apps', 'local-studio', 'backend', 'worker', 'cms-service.js');
-  // Worker requests must name their tenant explicitly; the UI may choose its own default.
-  assert.match(cmsService, /site_slug_required/);
-  assert.doesNotMatch(cmsService, /['"]agentsam-sdk['"]/);
-  assert.match(cmsService, /createCmsDbClient\(env\.DB,\s*siteSlug\)/);
-});
-
-test('homepage.html is decomposed into reusable site partials with relative links and edge injection markers', () => {
-  assert.ok(fs.existsSync(at('sites', 'agentsam-sdk', 'partials', 'header.html')));
-  assert.ok(fs.existsSync(at('sites', 'agentsam-sdk', 'partials', 'footer.html')));
-  assert.ok(fs.existsSync(at('apps', 'frontend', 'public', 'site', 'global', 'asbd-header.html')));
-  assert.ok(fs.existsSync(at('apps', 'frontend', 'public', 'site', 'global', 'asbd-footer.html')));
-
-  const header = read('sites', 'agentsam-sdk', 'partials', 'header.html');
-  const footer = read('sites', 'agentsam-sdk', 'partials', 'footer.html');
-  const homepage = read('apps', 'frontend', 'public', 'site', 'homepage.html');
-
-  // Header and footer are non-empty
-  assert.ok(header.length > 500, 'header.html must contain full header content');
-  assert.ok(footer.length > 500, 'footer.html must contain full footer content');
-
-  // AgentSam public header navigation is relative and product-specific (R2 partial SSOT).
-  assert.match(header, /href="\/"/);
-  assert.match(header, /href="\/learn\/"/);
-  assert.match(header, /href="\/themes\/"/);
-  assert.match(header, /href="\/packages\/sdk\/help\/"/);
-  assert.match(header, /href="\/auth\/login\?next=\/agentsam"/);
-  assert.doesNotMatch(header, /href="https:\/\/inneranimalmedia\.com\/(learn|themes|packages\/sdk|agentsam)"/);
-
-  assert.match(footer, /href="\/work"/);
-  assert.match(footer, /href="\/about"/);
-  assert.match(footer, /href="\/services"/);
-  assert.match(footer, /href="\/contact"/);
-  assert.match(footer, /href="\/privacy"/);
-  assert.match(footer, /href="\/terms"/);
-  assert.match(footer, /href="\/sitemap"/);
-  assert.doesNotMatch(footer, /href="https:\/\/inneranimalmedia\.com\/(work|about|services|contact|privacy|terms|sitemap)"/);
-
-  // Public homepage shell uses ASBD mounts + client inject of global partials
-  // (R2 sites/{site}/partials remain the publish/edge SSOT via publish-website-assets).
-  assert.match(homepage, /id="asbd-header-mount"/);
-  assert.match(homepage, /id="asbd-footer-mount"/);
-  assert.match(homepage, /inject\('asbd-header-mount',\s*'\/site\/global\/asbd-header\.html'\)/);
-  assert.match(homepage, /inject\('asbd-footer-mount',\s*'\/site\/global\/asbd-footer\.html'\)/);
-  assert.doesNotMatch(homepage, /<nav class="iam-sidenav" id="iamSidenav"/, 'inline sidenav should be in partials');
-});
-
-function r2Stub(store = new Map()) {
-  return {
-    async get(key) {
-      if (!store.has(key)) return null;
-      return { text: async () => store.get(key) };
-    },
-    async put(key, content) {
-      store.set(key, typeof content === 'string' ? content : String(content));
-      return { key };
-    },
-    async head() {
-      return null;
-    },
-    async list() {
-      return { objects: [] };
-    },
-  };
-}
-
-test('site-partials service injects header and footer from R2 into HTML response', async () => {
-  const store = new Map();
-  store.set('sites/agentsam-sdk/partials/header.html', '<header id="injected-header">Header Content</header>');
-  store.set('sites/agentsam-sdk/partials/footer.html', '<footer id="injected-footer">Footer Content</footer>');
-
-  const env = { WEBSITE_ASSETS: r2Stub(store) };
-
-  // Fetch and put partials
-  const fetchedHeader = await fetchSitePartial(env, 'agentsam-sdk', 'header');
-  assert.equal(fetchedHeader, '<header id="injected-header">Header Content</header>');
-
-  await putSitePartial(env, 'agentsam-sdk', 'header', '<header id="updated">Updated</header>');
-  const updatedHeader = await fetchSitePartial(env, 'agentsam-sdk', 'header');
-  assert.equal(updatedHeader, '<header id="updated">Updated</header>');
-
-  // Test HTML injection
-  const baseHtml = '<!DOCTYPE html><html><head><title>Test</title></head><body><main>Main Content</main></body></html>';
-  const initialResponse = new Response(baseHtml, {
-    headers: { 'content-type': 'text/html; charset=utf-8' },
-  });
-
-  const injectedResponse = await injectSitePartials(initialResponse, env, 'agentsam-sdk');
-  const transformedText = await injectedResponse.text();
-
-  assert.ok(transformedText.includes('<header id="updated">Updated</header>'), 'Response must contain injected header');
-  assert.ok(transformedText.includes('<footer id="injected-footer">Footer Content</footer>'), 'Response must contain injected footer');
-  assert.ok(transformedText.includes('<main>Main Content</main>'), 'Response must preserve main content');
-
-  // Verify non-text/html responses are guarded and untouched
-  const jsonResponse = new Response(JSON.stringify({ ok: true }), {
-    headers: { 'content-type': 'application/json' },
-  });
-  const unedited = await injectSitePartials(jsonResponse, env, 'agentsam-sdk');
-  assert.equal(await unedited.text(), JSON.stringify({ ok: true }));
-});
-
-test('Local Studio canonical homepage serves with edge HTMLRewriter partial injection and text/html', async () => {
-  const { serveCanonicalHomepage } = await import('../../apps/local-studio/backend/worker/canonical-homepage.js');
-
-  const store = new Map([
-    ['sites/agentsam-sdk/partials/header.html', '<header id="live-header">SDK Header</header>'],
-    ['sites/agentsam-sdk/partials/footer.html', '<footer id="live-footer">SDK Footer</footer>'],
-  ]);
-  const env = { WEBSITE_ASSETS: r2Stub(store) };
-
-  const rootReq = new Request('https://agentsam.inneranimalmedia.com/', { method: 'GET' });
-  const rootRes = await serveCanonicalHomepage(rootReq, env, 'agentsam-sdk');
-  assert.equal(rootRes.status, 200);
-  assert.ok(rootRes.headers.get('content-type')?.includes('text/html'), 'Content type must be text/html');
-  const rootText = await rootRes.text();
-  assert.ok(rootText.includes('<header id="live-header">SDK Header</header>'), 'Edge injection must inject header at /');
-  assert.ok(rootText.includes('<footer id="live-footer">SDK Footer</footer>'), 'Edge injection must inject footer at /');
-  assert.ok(rootText.includes('@inneranimalmedia/agentsam-sdk'), 'Canonical homepage content must be present');
-
-  // Verify index.js routes / and /index.html to serveCanonicalHomepage
-  const indexJsContent = fs.readFileSync(at('apps/local-studio/backend/worker/index.js'), 'utf8');
-  assert.ok(
-    indexJsContent.includes('serveCanonicalHomepage(request, env)'),
-    'index.js must call serveCanonicalHomepage for root route'
-  );
-  assert.ok(
-    indexJsContent.includes('url.pathname === "/" || url.pathname === "/index.html"'),
-    'index.js must match both / and /index.html'
-  );
-});
-

package/test/integration/codebaseindex-ingest.test.mjs

@@ -1,255 +0,0 @@
-import assert from 'node:assert/strict';
-import { describe, it, before } from 'node:test';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { execFileSync } from 'node:child_process';
-import {
-  getCliCommand,
-  listCliCommands,
-  printAssistTip,
-  suggestCliCommands,
-} from '../../src/cli/command-catalog.js';
-import { parsePastedPaths, classifyMaterial, stageMaterials } from '../../src/indexing/ingest/materials.js';
-import { ensureSeedOperations, getSamOperation, AgentSamClient } from '../../src/sam/index.js';
-import { getSkill, loadSkill } from '../../src/skills/index.js';
-import { resolveHelpTopic, renderHelpOverview } from '../../src/ui/cli/help.js';
-import { runCodebaseindexIngest } from '../../src/commands/codebaseindex.js';
-import { buildInventory } from '../../src/indexing/ingest/inventory.js';
-
-describe('CLI command catalog assist', () => {
-  it('maps ingest alias to codebaseindex with skill tip', () => {
-    const entry = getCliCommand('ingest');
-    assert.equal(entry?.id, 'codebaseindex');
-    assert.equal(entry?.skill, 'agentsam-codebaseindex');
-    assert.equal(entry?.operation, 'codebaseindex.ingest');
-  });
-
-  it('prints tip: use skill for every catalogued command', () => {
-    const chunks = [];
-    for (const entry of listCliCommands()) {
-      if (!entry.skill) continue;
-      printAssistTip(entry, { write: (s) => chunks.push(s) });
-    }
-    const text = chunks.join('');
-    assert.match(text, /tip: use skill agentsam-codebaseindex/);
-    assert.match(text, /tip: use skill agentsam-app-fundamentals/);
-  });
-
-  it('suggests commands for typos', () => {
-    const hits = suggestCliCommands('codebase');
-    assert.ok(hits.some((h) => h.id === 'codebaseindex'));
-  });
-});
-
-describe('material paste/drop intake', () => {
-  it('parses pasted multi-path text', () => {
-    const paths = parsePastedPaths('/tmp/a.tar.gz\n"./site build"/index.html  screenshot.png');
-    assert.ok(paths.includes('/tmp/a.tar.gz'));
-    assert.ok(paths.some((p) => p.includes('index.html') || p.endsWith('screenshot.png')));
-  });
-
-  it('stages html and classifies archives', () => {
-    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'agentsam-ingest-'));
-    const html = path.join(root, 'page.html');
-    fs.writeFileSync(html, '<html><body>hi</body></html>');
-    const classified = classifyMaterial(html);
-    assert.equal(classified.kind, 'document');
-
-    const tarPath = path.join(root, 'site.tar');
-    const bundle = path.join(root, 'bundle');
-    fs.mkdirSync(bundle);
-    fs.writeFileSync(path.join(bundle, 'index.html'), '<html>build</html>');
-    execFileSync('tar', ['-cf', tarPath, '-C', bundle, '.']);
-
-    const staged = stageMaterials({ root, materials: [html, tarPath] });
-    assert.equal(staged.schema, 'agentsam.ingest.materials.v1');
-    assert.ok(staged.include.length >= 1);
-    assert.ok(staged.assets.some((a) => a.kind === 'document') || staged.items.some((i) => i.kind === 'archive'));
-    assert.ok(fs.existsSync(path.join(root, staged.stage_root, 'manifest.json')));
-  });
-});
-
-describe('codebaseindex SAM primitive', () => {
-  before(() => ensureSeedOperations());
-
-  it('registers codebaseindex.ingest', () => {
-    const op = getSamOperation('codebaseindex.ingest');
-    assert.ok(op);
-    assert.equal(op.execution.model, 'optional');
-    assert.deepEqual(op.cli.command[0], ['codebaseindex']);
-  });
-
-  it('skill agentsam-codebaseindex loads', () => {
-    assert.ok(getSkill('ingest'));
-    const loaded = loadSkill('agentsam-codebaseindex');
-    assert.match(loaded.instructions, /codebaseindex\.ingest/);
-    assert.match(loaded.instructions, /sam\.codebaseindex\.index\.run/);
-  });
-
-  it('describe + discover surface ingest', async () => {
-    const sam = new AgentSamClient();
-    const info = await sam.describe('codebaseindex.ingest');
-    assert.equal(info.ok, true);
-    const found = await sam.discover({ query: 'ingest archive embedding' });
-    assert.ok(found.operations.some((c) => c.id === 'codebaseindex.ingest'));
-  });
-
-  it('plan-only ingest via invoke (repo allowlist)', async () => {
-    const sam = new AgentSamClient();
-    const result = await sam.invoke('codebaseindex.ingest', {
-      root: process.cwd(),
-      include: ['src/sam'],
-      exclude: ['node_modules', '.git'],
-      embeddingChoice: 'none',
-      planOnly: true,
-    });
-    assert.equal(result.ok, true);
-    assert.equal(result.data?.pipeline, 'sam.codebaseindex.index.run');
-    assert.equal(result.data?.mode, 'plan');
-  });
-});
-
-describe('codebaseindex real execution', () => {
-  it('publishes, smoke-searches, completes the graph, and returns portable paths', async () => {
-    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'agentsam-codebaseindex-run-'));
-    fs.mkdirSync(path.join(root, 'src'), { recursive: true });
-    fs.writeFileSync(
-      path.join(root, 'src', 'demo.js'),
-      'export function hello() { return "hello AgentSam"; }\n',
-    );
-
-    const result = await runCodebaseindexIngest({
-      root,
-      include: ['src'],
-      exclude: [],
-      embeddingChoice: 'none',
-      embed: false,
-      planOnly: false,
-    });
-
-    assert.equal(result.mode, 'run');
-    assert.equal(result.root, '.');
-    assert.equal(result.inventory.root, '.');
-
-    assert.equal(result.index.published, true);
-    assert.equal(result.job_graph.status, 'completed');
-    assert.equal(result.job_graph.current, null);
-    assert.equal(
-      result.job_graph.nodes.find((node) => node.id === 'embedding.generate')?.status,
-      'skipped',
-    );
-    assert.equal(
-      result.job_graph.nodes.find((node) => node.id === 'search.smoke')?.status,
-      'done',
-    );
-
-    assert.equal(
-      result.search_smoke.generation_id,
-      result.index.generation_id,
-    );
-    assert.ok(result.search_smoke.sources_included >= 1);
-  });
-  it('executes a declared Vectorize lane through the Worker binding before publish', async () => {
-    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'agentsam-codebaseindex-vectorize-'));
-    fs.mkdirSync(path.join(root, 'src'), { recursive: true });
-    fs.writeFileSync(path.join(root, 'src', 'demo.js'), 'export const vectorized = true;\n');
-    fs.writeFileSync(path.join(root, 'wrangler.toml'), [
-      'name = \"customer-worker\"',
-      '[[vectorize]]',
-      'binding = \"MY_VECTORS\"',
-      'index_name = \"customer-code-index\"',
-      '',
-    ].join('\n'));
-    const upserts = [];
-    const workerBinding = {
-      async upsert(records) { upserts.push(records); return { mutationId: 'fixture' }; },
-      async query() { return { matches: [] }; },
-      async getByIds(ids) { return ids.map(id => ({ id })); },
-      async deleteByIds() { return { mutationId: 'fixture-delete' }; },
-    };
-
-    const result = await runCodebaseindexIngest({
-      root,
-      include: ['src'],
-      exclude: [],
-      embeddingChoice: 'fixture|deterministic|3',
-      embed: true,
-      vectors: 'vectorize',
-      workerBinding,
-      planOnly: false,
-    });
-
-    assert.equal(result.index.published, true);
-    assert.equal(result.index.vector_upsert?.transport, 'worker_binding');
-    assert.equal(result.storage_lanes.vectors, 'vectorize');
-    assert.equal(upserts.length, 1);
-    assert.ok(upserts[0].length >= 1);
-    assert.equal(upserts[0][0].values.length, 3);
-    const config = JSON.parse(fs.readFileSync(path.join(root, '.agentsam', 'knowledge.json'), 'utf8'));
-    assert.equal(config.lane.backend, 'cloudflare_vectorize');
-    assert.equal(config.lane.binding, 'MY_VECTORS');
-    assert.equal(config.lane.index, 'customer-code-index');
-  });
-});
-
-describe('catalog-driven help', () => {
-  it('resolves ingest topic from catalog', () => {
-    const topic = resolveHelpTopic('ingest');
-    assert.ok(topic);
-    assert.ok(topic.rows.some(([cmd]) => cmd.includes('codebaseindex')));
-  });
-
-  it('overview mentions skill baseline', () => {
-    const text = renderHelpOverview('2.6.3');
-    assert.match(text, /tip: use skill/);
-    assert.match(text, /command catalog/i);
-  });
-});
-
-describe('Cargo workspace inventory', () => {
-  it('treats workspace members as source and keeps generated/operational state out of the starting scope', () => {
-    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'agentsam-cargo-workspace-'));
-    try {
-      fs.writeFileSync(path.join(root, 'Cargo.toml'), `[workspace]
-members = [
-  "core",
-  "worker",
-]
-resolver = "2"
-`);
-      for (const crate of ['core', 'worker']) {
-        fs.mkdirSync(path.join(root, crate, 'src'), { recursive: true });
-        fs.writeFileSync(path.join(root, crate, 'Cargo.toml'), `[package]
-name = "${crate}"
-version = "0.1.0"
-edition = "2024"
-`);
-        fs.writeFileSync(path.join(root, crate, 'src', 'lib.rs'), `pub fn ${crate}_value() -> u32 { 1 }
-`);
-      }
-      fs.mkdirSync(path.join(root, 'docs'), { recursive: true });
-      fs.writeFileSync(path.join(root, 'docs', 'README.md'), '# docs\n');
-      fs.mkdirSync(path.join(root, 'target'), { recursive: true });
-      fs.writeFileSync(path.join(root, 'target', 'build.txt'), 'generated\n');
-      fs.mkdirSync(path.join(root, '.agentsam', 'machine'), { recursive: true });
-      fs.writeFileSync(path.join(root, '.agentsam', 'machine', 'state.sqlite'), '');
-
-      const inventory = buildInventory({ root });
-      assert.deepEqual(inventory.cargo_workspace_roots, ['core', 'worker']);
-      assert.ok(inventory.categories.source.includes('core'));
-      assert.ok(inventory.categories.source.includes('worker'));
-      assert.ok(inventory.categories.docs.includes('docs'));
-      assert.ok(inventory.categories.dependencies.includes('target'));
-      assert.ok(inventory.categories.operational.includes('.agentsam'));
-
-      assert.ok(inventory.suggested.include.includes('core'));
-      assert.ok(inventory.suggested.include.includes('worker'));
-      assert.ok(inventory.suggested.include.includes('docs'));
-      assert.ok(inventory.suggested.exclude.includes('target'));
-      assert.ok(inventory.suggested.exclude.includes('.agentsam'));
-    } finally {
-      fs.rmSync(root, { recursive: true, force: true });
-    }
-  });
-});

package/test/integration/core-client.integration.test.mjs

@@ -1,55 +0,0 @@
-import assert from 'node:assert/strict';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import test from 'node:test';
-import { getJson } from '../../src/lib/core-client.js';
-import { saveAccountSession } from '../../src/lib/account-session.js';
-
-test('core client accepts an already-resolved browser OAuth bearer without reclassifying it as an API key', async () => {
-  let authorization = '';
-  const result = await getJson('/api/sdk/context', {
-    bearer: 'browser_oauth_access_token',
-    env: { IAM_OAUTH_ISSUER: 'https://iam.example.test' },
-    fetchImpl: async (_url, options) => {
-      authorization = options.headers.Authorization;
-      return { ok: true, async json() { return { ok: true }; } };
-    },
-  });
-  assert.equal(result.ok, true);
-  assert.equal(authorization, 'Bearer browser_oauth_access_token');
-});
-
-test('legacy string credential form is treated as a resolved bearer for both API keys and OAuth tokens', async () => {
-  const original = globalThis.fetch;
-  let authorization = '';
-  globalThis.fetch = async (_url, options) => {
-    authorization = options.headers.Authorization;
-    return { ok: true, async json() { return { ok: true }; } };
-  };
-  try {
-    await getJson('/api/sdk/context', 'browser_oauth_access_token');
-    assert.equal(authorization, 'Bearer browser_oauth_access_token');
-  } finally {
-    globalThis.fetch = original;
-  }
-});
-
-test('core client refreshes browser OAuth once when IAM returns 401 before local expiry', async t => {
-  const home = fs.mkdtempSync(path.join(os.tmpdir(), 'agentsam-core-client-'));
-  t.after(() => fs.rmSync(home, { recursive: true, force: true }));
-  saveAccountSession({ access_token: 'stale_browser_token', refresh_token: 'refresh_token', expires_in: 3600 }, { home });
-  const seen = [];
-  const result = await getJson('/api/sdk/context', {
-    home,
-    env: { IAM_OAUTH_ISSUER: 'https://iam.example.test' },
-    refreshImpl: async () => ({ access_token: 'fresh_browser_token', refresh_token: 'refresh_token' }),
-    fetchImpl: async (_url, options) => {
-      seen.push(options.headers.Authorization);
-      const ok = seen.length > 1;
-      return { ok, status: ok ? 200 : 401, async json() { return ok ? { ok: true } : { error: 'Unauthorized' }; } };
-    },
-  });
-  assert.equal(result.ok, true);
-  assert.deepEqual(seen, ['Bearer stale_browser_token', 'Bearer fresh_browser_token']);
-});

package/test/integration/database-hosted-honesty.test.mjs

@@ -1,49 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-import { readFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import path from "node:path";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../..");
-
-test("listSources prefers oauth catalog and annotates deployment bindings", () => {
-  const src = readFileSync(
-    path.join(root, "apps/local-studio/backend/worker/database-service.js"),
-    "utf8",
-  );
-  assert.match(src, /source_kind: 'oauth_resource'/);
-  assert.match(src, /source_kind: 'deployment_binding'/);
-  assert.match(src, /owner_scope: 'deployment'/);
-  assert.match(src, /\.\.\.oauthD1,\s*\n\s*\.\.\.deploymentSources/s);
-  assert.match(src, /isOpaqueBindingDatabaseId/);
-  assert.match(src, /Never treat env\.DB as a generic user's Cloudflare catalog/);
-});
-
-test("local sqlite bridge hard-fails on hosted Worker runtime", () => {
-  const src = readFileSync(
-    path.join(root, "apps/local-studio/frontend/src/routes/api/database.local.bridge.ts"),
-    "utf8",
-  );
-  assert.match(src, /requires_local_runtime/);
-  assert.match(src, /isHostedWorkerRuntime/);
-  assert.match(src, /WebSocketPair/);
-  assert.match(src, /status: 501/);
-});
-
-test("database editor preserves null metrics and uses host font tokens", () => {
-  const app = readFileSync(
-    path.join(root, "packages/agentsam-database-editor/src/ui/DatabaseEditorApp.tsx"),
-    "utf8",
-  );
-  const css = readFileSync(
-    path.join(root, "packages/agentsam-database-editor/src/ui/database-editor.css"),
-    "utf8",
-  );
-  assert.doesNotMatch(app, /Number\(point\.queries \|\| 0\)/);
-  assert.match(app, /numOrNull/);
-  assert.match(app, /data-metrics-wired/);
-  assert.match(css, /var\(--font-sans/);
-  assert.match(css, /var\(--font-mono/);
-  assert.match(css, /data-provider="cloudflare"/);
-  assert.match(css, /data-provider="supabase"/);
-});