@pleri/olam-cli 0.1.70 → 0.1.73

package/dist/__tests__/registry-allowlist.test.js

@@ -1,129 +0,0 @@
-// C4 (Phase C — fresh-install self-bootstrap): registry allowlist for
-// OLAM_DEVBOX_IMAGE overrides. Flag-only override (env-var form was
-// dropped per Decision #19 to avoid ambient bypass via shell inheritance).
-import { describe, it, expect } from 'vitest';
-import { decideAllowlist, resolveDevboxImageOverride } from '../registry-allowlist.js';
-describe('decideAllowlist — default allowlist (ghcr.io/pleri/*)', () => {
-    it('accepts the canonical olam-devbox image with a tag', () => {
-        const d = decideAllowlist({
-            imageRef: 'ghcr.io/pleri/olam-devbox:0.2.0',
-            allowCustomRegistry: false,
-        });
-        expect(d.allowedByDefault).toBe(true);
-        expect(d.accepted).toBe(true);
-        expect(d.stderrLine).toBe('');
-    });
-    it('accepts olam-devbox@sha256: digest references', () => {
-        const d = decideAllowlist({
-            imageRef: 'ghcr.io/pleri/olam-devbox@sha256:abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789',
-            allowCustomRegistry: false,
-        });
-        expect(d.accepted).toBe(true);
-    });
-    it('accepts atlas-devbox under the pleri namespace (Decision #15)', () => {
-        const d = decideAllowlist({
-            imageRef: 'ghcr.io/pleri/olam-devbox-atlas:1.2.3',
-            allowCustomRegistry: false,
-        });
-        expect(d.allowedByDefault).toBe(true);
-        expect(d.accepted).toBe(true);
-    });
-    it('accepts host-cp + auth images for the publish-workflow', () => {
-        expect(decideAllowlist({ imageRef: 'ghcr.io/pleri/olam-host-cp:0.2.0', allowCustomRegistry: false }).accepted).toBe(true);
-        expect(decideAllowlist({ imageRef: 'ghcr.io/pleri/olam-auth:0.2.0', allowCustomRegistry: false }).accepted).toBe(true);
-    });
-});
-describe('decideAllowlist — out-of-allowlist refs', () => {
-    it('rejects a generic Docker Hub ref without the flag', () => {
-        const d = decideAllowlist({
-            imageRef: 'docker.io/library/ubuntu:24.04',
-            allowCustomRegistry: false,
-        });
-        expect(d.accepted).toBe(false);
-        expect(d.stderrLine).toContain('outside allowed registries');
-        expect(d.stderrLine).toContain('--allow-custom-registry');
-    });
-    it('rejects a different ghcr.io org without the flag', () => {
-        const d = decideAllowlist({
-            imageRef: 'ghcr.io/atlas/atlas-devbox:1.2.3',
-            allowCustomRegistry: false,
-        });
-        expect(d.accepted).toBe(false);
-    });
-    it('rejects an attacker-controlled registry without the flag', () => {
-        const d = decideAllowlist({
-            imageRef: 'evil.example/evil-devbox:latest',
-            allowCustomRegistry: false,
-        });
-        expect(d.accepted).toBe(false);
-        expect(d.stderrLine).toContain('outside allowed registries');
-    });
-    it('accepts an out-of-allowlist ref WITH the flag and emits a warning', () => {
-        const d = decideAllowlist({
-            imageRef: 'ghcr.io/atlas/atlas-devbox:1.2.3',
-            allowCustomRegistry: true,
-        });
-        expect(d.accepted).toBe(true);
-        expect(d.allowedByDefault).toBe(false);
-        expect(d.stderrLine).toContain('Warning');
-        expect(d.stderrLine).toContain("'ghcr.io/atlas/atlas-devbox:1.2.3'");
-        expect(d.stderrLine).toContain('--allow-custom-registry was specified');
-    });
-    it('keeps stderr empty for default-allowed refs even when the flag is set', () => {
-        const d = decideAllowlist({
-            imageRef: 'ghcr.io/pleri/olam-devbox:0.2.0',
-            allowCustomRegistry: true,
-        });
-        expect(d.accepted).toBe(true);
-        expect(d.stderrLine).toBe('');
-    });
-});
-describe('decideAllowlist — pattern boundaries', () => {
-    it('rejects look-alike namespace ghcr.io/pleri-evil/...', () => {
-        const d = decideAllowlist({
-            imageRef: 'ghcr.io/pleri-evil/olam-devbox:0.2.0',
-            allowCustomRegistry: false,
-        });
-        expect(d.accepted).toBe(false);
-    });
-    it('rejects look-alike registry ghcr.io.evil.com/pleri/...', () => {
-        const d = decideAllowlist({
-            imageRef: 'ghcr.io.evil.com/pleri/olam-devbox:0.2.0',
-            allowCustomRegistry: false,
-        });
-        expect(d.accepted).toBe(false);
-    });
-    it('rejects nested-namespace ghcr.io/pleri/foo/bar:tag (only one path segment after pleri/ allowed)', () => {
-        const d = decideAllowlist({
-            imageRef: 'ghcr.io/pleri/foo/bar:0.2.0',
-            allowCustomRegistry: false,
-        });
-        expect(d.accepted).toBe(false);
-    });
-});
-describe('resolveDevboxImageOverride — precedence', () => {
-    it('returns undefined when neither flag nor env var is set', () => {
-        expect(resolveDevboxImageOverride(undefined, {})).toBeUndefined();
-    });
-    it('returns the flag value when only the flag is set', () => {
-        expect(resolveDevboxImageOverride('ghcr.io/atlas/foo:1', {})).toBe('ghcr.io/atlas/foo:1');
-    });
-    it('returns the env value when only the env var is set', () => {
-        expect(resolveDevboxImageOverride(undefined, { OLAM_DEVBOX_IMAGE: 'ghcr.io/atlas/foo:1' })).toBe('ghcr.io/atlas/foo:1');
-    });
-    it('flag takes precedence over env var when both are set', () => {
-        expect(resolveDevboxImageOverride('ghcr.io/from-flag/img:1', {
-            OLAM_DEVBOX_IMAGE: 'ghcr.io/from-env/img:1',
-        })).toBe('ghcr.io/from-flag/img:1');
-    });
-    it('treats empty/whitespace flag value as unset and falls back to env', () => {
-        expect(resolveDevboxImageOverride('   ', { OLAM_DEVBOX_IMAGE: 'ghcr.io/from-env/img:1' })).toBe('ghcr.io/from-env/img:1');
-    });
-    it('treats empty/whitespace env value as unset', () => {
-        expect(resolveDevboxImageOverride(undefined, { OLAM_DEVBOX_IMAGE: '   ' })).toBeUndefined();
-    });
-    it('trims trailing whitespace in returned values', () => {
-        expect(resolveDevboxImageOverride('  ghcr.io/atlas/foo:1  ', {})).toBe('ghcr.io/atlas/foo:1');
-    });
-});
-//# sourceMappingURL=registry-allowlist.test.js.map

package/dist/__tests__/registry-allowlist.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry-allowlist.test.js","sourceRoot":"","sources":["../../src/__tests__/registry-allowlist.test.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAE3E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEvF,QAAQ,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,iCAAiC;YAC3C,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EACN,mGAAmG;YACrG,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,uCAAuC;YACjD,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1H,MAAM,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,gCAAgC;YAC1C,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,kCAAkC;YAC5C,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,iCAAiC;YAC3C,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,kCAAkC;YAC5C,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACrE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,iCAAiC;YAC3C,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,sCAAsC;YAChD,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,0CAA0C;YACpD,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,QAAQ,EAAE,6BAA6B;YACvC,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,0BAA0B,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CACJ,0BAA0B,CAAC,qBAAqB,EAAE,EAAE,CAAC,CACtD,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CACJ,0BAA0B,CAAC,SAAS,EAAE,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,CAAC,CACpF,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CACJ,0BAA0B,CAAC,yBAAyB,EAAE;YACpD,iBAAiB,EAAE,wBAAwB;SAC5C,CAAC,CACH,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CACJ,0BAA0B,CAAC,KAAK,EAAE,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,CAAC,CACnF,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CACJ,0BAA0B,CAAC,SAAS,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CACpE,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CACJ,0BAA0B,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAC1D,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/services.test.d.ts

@@ -1,8 +0,0 @@
-/**
- * Unit tests for services.ts and mcp-auth integration in upgrade.ts.
- *
- * Mirrors upgrade.test.ts philosophy: stateless helpers and injectable deps only.
- * Real docker subprocess not spawned.
- */
-export {};
-//# sourceMappingURL=services.test.d.ts.map

package/dist/__tests__/services.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"services.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/services.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/__tests__/services.test.js

@@ -1,185 +0,0 @@
-/**
- * Unit tests for services.ts and mcp-auth integration in upgrade.ts.
- *
- * Mirrors upgrade.test.ts philosophy: stateless helpers and injectable deps only.
- * Real docker subprocess not spawned.
- */
-import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-// ── exports surface ───────────────────────────────────────────────
-describe('services.ts exports', () => {
-    it('exports servicesUp, servicesDown, servicesStatus, registerServices', async () => {
-        const mod = await import('../commands/services.js');
-        expect(typeof mod.servicesUp).toBe('function');
-        expect(typeof mod.servicesDown).toBe('function');
-        expect(typeof mod.servicesStatus).toBe('function');
-        expect(typeof mod.registerServices).toBe('function');
-        expect(typeof mod.McpAuthContainerController).toBe('function');
-    });
-});
-// ── ImageDigests mcp-auth field ───────────────────────────────────
-describe('ImageDigests mcp-auth optional field', () => {
-    it('loadImageDigests parses json without mcp-auth (backward compat)', async () => {
-        const { loadImageDigests } = await import('../commands/bootstrap.js');
-        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'olam-digest-test-'));
-        const distDir = path.join(dir, 'dist');
-        fs.mkdirSync(distDir);
-        fs.writeFileSync(path.join(distDir, 'image-digests.json'), JSON.stringify({
-            'host-cp': 'sha256:' + 'a'.repeat(64),
-            auth: 'sha256:' + 'b'.repeat(64),
-            devbox: 'sha256:' + 'c'.repeat(64),
-            $registry: 'ghcr.io/pleri',
-        }));
-        const digests = loadImageDigests(dir);
-        expect(digests['host-cp']).toMatch(/^sha256:/);
-        expect(digests['mcp-auth']).toBeUndefined();
-        fs.rmSync(dir, { recursive: true, force: true });
-    });
-    it('loadImageDigests parses json with mcp-auth present', async () => {
-        const { loadImageDigests } = await import('../commands/bootstrap.js');
-        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'olam-digest-mcp-'));
-        const distDir = path.join(dir, 'dist');
-        fs.mkdirSync(distDir);
-        fs.writeFileSync(path.join(distDir, 'image-digests.json'), JSON.stringify({
-            'host-cp': 'sha256:' + 'a'.repeat(64),
-            auth: 'sha256:' + 'b'.repeat(64),
-            devbox: 'sha256:' + 'c'.repeat(64),
-            'mcp-auth': 'sha256:' + 'd'.repeat(64),
-            $registry: 'ghcr.io/pleri',
-        }));
-        const digests = loadImageDigests(dir);
-        expect(digests['mcp-auth']).toMatch(/^sha256:/);
-        fs.rmSync(dir, { recursive: true, force: true });
-    });
-});
-// ── runUpgradePullByDigest — mcp-auth integration ─────────────────
-function ok(stdout = '') {
-    return { exitCode: 0, stdout, stderr: '' };
-}
-function makeMockDocker() {
-    const calls = [];
-    return {
-        docker: {
-            info: vi.fn(async () => ok()),
-            pull: vi.fn(async (ref) => {
-                calls.push(ref);
-                return ok();
-            }),
-            inspectLabel: vi.fn(async () => ok('1\n')),
-            tag: vi.fn(async () => ok()),
-        },
-        calls,
-    };
-}
-const FIXTURE_DIGESTS_3 = {
-    'host-cp': 'sha256:' + 'a'.repeat(64),
-    auth: 'sha256:' + 'b'.repeat(64),
-    devbox: 'sha256:' + 'c'.repeat(64),
-    $registry: 'ghcr.io/pleri',
-    $published_version: '0.1.16',
-};
-const FIXTURE_DIGESTS_4 = {
-    ...FIXTURE_DIGESTS_3,
-    'mcp-auth': 'sha256:' + 'd'.repeat(64),
-};
-describe('runUpgradePullByDigest — mcp-auth pull', () => {
-    beforeEach(() => {
-        vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
-        vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
-    });
-    afterEach(() => vi.restoreAllMocks());
-    it('pulls 4 images when mcp-auth digest is in digests', async () => {
-        const { runUpgradePullByDigest } = await import('../commands/upgrade.js');
-        const { docker, calls } = makeMockDocker();
-        await runUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS_4,
-            composeFile: '/tmp/nonexistent-compose.yaml',
-            runComposeImpl: () => ({ ok: true, stdout: '', stderr: '' }),
-            recreateAuth: async () => ({ ok: true }),
-            recreateMcpAuth: async () => ({ ok: true }),
-            tagImpl: () => ({ ok: true }),
-        });
-        expect(calls).toHaveLength(4);
-        expect(calls.some((r) => r.includes('olam-mcp-auth@'))).toBe(true);
-    });
-    it('pulls only 3 images when mcp-auth digest absent (old tarball)', async () => {
-        const { runUpgradePullByDigest } = await import('../commands/upgrade.js');
-        const { docker, calls } = makeMockDocker();
-        await runUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS_3,
-            composeFile: '/tmp/nonexistent-compose.yaml',
-            runComposeImpl: () => ({ ok: true, stdout: '', stderr: '' }),
-            recreateAuth: async () => ({ ok: true }),
-            tagImpl: () => ({ ok: true }),
-        });
-        expect(calls).toHaveLength(3);
-        expect(calls.every((r) => !r.includes('mcp-auth'))).toBe(true);
-    });
-    it('exits EXIT_GENERIC_ERROR when mcp-auth recreate fails', async () => {
-        const { runUpgradePullByDigest } = await import('../commands/upgrade.js');
-        const { EXIT_GENERIC_ERROR } = await import('../exit-codes.js');
-        const { docker } = makeMockDocker();
-        const result = await runUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS_4,
-            composeFile: '/tmp/nonexistent-compose.yaml',
-            runComposeImpl: () => ({ ok: true, stdout: '', stderr: '' }),
-            recreateAuth: async () => ({ ok: true }),
-            recreateMcpAuth: async () => ({ ok: false, error: 'health timeout' }),
-            tagImpl: () => ({ ok: true }),
-        });
-        expect(result.exitCode).toBe(EXIT_GENERIC_ERROR);
-        expect(result.summary).toContain('mcp-auth');
-    });
-    it('exits 0 and skips mcp-auth recreate when digest absent', async () => {
-        const { runUpgradePullByDigest } = await import('../commands/upgrade.js');
-        const { docker } = makeMockDocker();
-        let mcpRecreateCalled = false;
-        const result = await runUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS_3,
-            composeFile: '/tmp/nonexistent-compose.yaml',
-            runComposeImpl: () => ({ ok: true, stdout: '', stderr: '' }),
-            recreateAuth: async () => ({ ok: true }),
-            recreateMcpAuth: async () => {
-                mcpRecreateCalled = true;
-                return { ok: true };
-            },
-            tagImpl: () => ({ ok: true }),
-        });
-        expect(result.exitCode).toBe(0);
-        expect(mcpRecreateCalled).toBe(false);
-    });
-    it('mcp-auth tagged to olam-mcp-auth:local when digest present', async () => {
-        const { runUpgradePullByDigest } = await import('../commands/upgrade.js');
-        const { docker } = makeMockDocker();
-        const tagCalls = [];
-        await runUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS_4,
-            composeFile: '/tmp/nonexistent-compose.yaml',
-            runComposeImpl: () => ({ ok: true, stdout: '', stderr: '' }),
-            recreateAuth: async () => ({ ok: true }),
-            recreateMcpAuth: async () => ({ ok: true }),
-            tagImpl: (from, to) => {
-                tagCalls.push({ from, to });
-                return { ok: true };
-            },
-        });
-        const mcpTag = tagCalls.find((t) => t.to === 'olam-mcp-auth:local');
-        expect(mcpTag).toBeDefined();
-        expect(mcpTag?.from).toContain('olam-mcp-auth@sha256:');
-    });
-});
-// ── olam auth up deprecation — exports shape ─────────────────────
-describe('auth.ts import shape', () => {
-    it('registerAuth is still exported from auth.ts', async () => {
-        const mod = await import('../commands/auth.js');
-        expect(typeof mod.registerAuth).toBe('function');
-    });
-});
-//# sourceMappingURL=services.test.js.map

package/dist/__tests__/services.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"services.test.js","sourceRoot":"","sources":["../../src/__tests__/services.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,qEAAqE;AAErE,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,GAAG,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,qEAAqE;AAErE,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtB,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,EACxC,IAAI,CAAC,SAAS,CAAC;YACb,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,IAAI,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,SAAS,EAAE,eAAe;SAC3B,CAAC,CACH,CAAC;QACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5C,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtB,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,EACxC,IAAI,CAAC,SAAS,CAAC;YACb,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,IAAI,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,UAAU,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,SAAS,EAAE,eAAe;SAC3B,CAAC,CACH,CAAC;QACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,qEAAqE;AAErE,SAAS,EAAE,CAAC,MAAM,GAAG,EAAE;IACrB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;gBAChC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,EAAE,CAAC;YACd,CAAC,CAAC;YACF,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAC1C,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;SAC7B;QACD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG;IACxB,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACrC,IAAI,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IAChC,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,SAAS,EAAE,eAAe;IAC1B,kBAAkB,EAAE,QAAQ;CAC7B,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,GAAG,iBAAiB;IACpB,UAAU,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;CACvC,CAAC;AAEF,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACjE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;IAEtC,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC1E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC;QAE3C,MAAM,sBAAsB,CAAC;YAC3B,MAAM;YACN,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,+BAA+B;YAC5C,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC5D,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACxC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC3C,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC1E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC;QAE3C,MAAM,sBAAsB,CAAC;YAC3B,MAAM;YACN,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,+BAA+B;YAC5C,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC5D,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACxC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC1E,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAChE,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QAEpC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;YAC1C,MAAM;YACN,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,+BAA+B;YAC5C,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC5D,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACxC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YACrE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC1E,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QACpC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;YAC1C,MAAM;YACN,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,+BAA+B;YAC5C,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC5D,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACxC,eAAe,EAAE,KAAK,IAAI,EAAE;gBAC1B,iBAAiB,GAAG,IAAI,CAAC;gBACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC1E,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAwC,EAAE,CAAC;QAEzD,MAAM,sBAAsB,CAAC;YAC3B,MAAM;YACN,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,+BAA+B;YAC5C,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC5D,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACxC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;gBACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,qBAAqB,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,oEAAoE;AAEpE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/status-app-urls.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=status-app-urls.test.d.ts.map

package/dist/__tests__/status-app-urls.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"status-app-urls.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/status-app-urls.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/status-app-urls.test.js

@@ -1,125 +0,0 @@
-import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
-import { Command } from 'commander';
-// Mock loadContext before importing the command so vitest can intercept
-vi.mock('../context.js', () => ({ loadContext: vi.fn() }));
-// After mock declaration, import the mocked function and the command registrar
-const { loadContext } = await import('../context.js');
-const { registerStatus } = await import('../commands/status.js');
-const ANSI_RE = /\x1b\[[0-9;]*[A-Za-z]/g;
-function strip(s) {
-    return s.replace(ANSI_RE, '');
-}
-const SAMPLE_URLS = [
-    { repoName: 'atlas-core', internalPort: 3000, hostPort: 13000, url: 'http://localhost:13000' },
-    { repoName: 'diner-app', internalPort: 4000, hostPort: 14000, url: 'http://localhost:14000' },
-];
-function makeWorld(overrides) {
-    return {
-        id: 'test-world-1',
-        name: 'Test World',
-        status: 'running',
-        repos: ['olam'],
-        branch: 'main',
-        portOffset: 0,
-        workspacePath: '/home/olam/workspace/olam',
-        computeProvider: 'docker',
-        totalCostUsd: 0.0042,
-        thoughtCount: 7,
-        createdAt: '2026-05-01T10:00:00.000Z',
-        updatedAt: '2026-05-01T11:00:00.000Z',
-        ...overrides,
-    };
-}
-function makeCtx(world) {
-    return {
-        worldManager: {
-            getWorld: vi.fn().mockReturnValue(world),
-        },
-        costTracker: {
-            getWorldCost: vi.fn().mockReturnValue(0.0042),
-        },
-    };
-}
-describe('olam status — appPortUrls output', () => {
-    let logSpy;
-    beforeEach(() => {
-        logSpy = vi.spyOn(console, 'log').mockImplementation(() => { });
-        vi.mocked(loadContext).mockReset();
-    });
-    afterEach(() => {
-        logSpy.mockRestore();
-        vi.unstubAllEnvs();
-    });
-    async function runStatus(worldId = 'test-world-1', extraArgs = []) {
-        const program = new Command().exitOverride();
-        registerStatus(program);
-        await program.parseAsync(['node', 'cli', 'status', worldId, ...extraArgs]);
-    }
-    it('prints Dashboard and Apps block when appPortUrls is present', async () => {
-        const world = makeWorld({ appPortUrls: SAMPLE_URLS });
-        vi.mocked(loadContext).mockResolvedValue({ ctx: makeCtx(world) });
-        await runStatus();
-        const output = logSpy.mock.calls.map((args) => strip(String(args[0]))).join('\n');
-        expect(output).toContain('http://localhost:19080'); // dashboard
-        expect(output).toContain('atlas-core');
-        expect(output).toContain('http://localhost:13000');
-        expect(output).toContain('diner-app');
-        expect(output).toContain('http://localhost:14000');
-    });
-    it('prints first app URL with "Apps" label, subsequent with empty label', async () => {
-        const world = makeWorld({ appPortUrls: SAMPLE_URLS });
-        vi.mocked(loadContext).mockResolvedValue({ ctx: makeCtx(world) });
-        await runStatus();
-        const lines = logSpy.mock.calls.map((args) => strip(String(args[0])));
-        const appsLine = lines.find((l) => l.includes('Apps') && l.includes('atlas-core'));
-        expect(appsLine).toBeDefined();
-        // Second app URL line uses empty label (14 spaces of padding)
-        const dinerLine = lines.find((l) => l.includes('diner-app') && l.includes('http://localhost:14000'));
-        expect(dinerLine).toBeDefined();
-        expect(dinerLine).not.toMatch(/Apps/);
-    });
-    it('does NOT print Apps block when appPortUrls is absent', async () => {
-        const world = makeWorld(); // no appPortUrls
-        vi.mocked(loadContext).mockResolvedValue({ ctx: makeCtx(world) });
-        await runStatus();
-        const output = logSpy.mock.calls.map((args) => strip(String(args[0]))).join('\n');
-        expect(output).not.toContain('Apps');
-        expect(output).toContain('http://localhost:19080'); // dashboard still present
-    });
-    it('does NOT print Apps block when appPortUrls is empty array', async () => {
-        const world = makeWorld({ appPortUrls: [] });
-        vi.mocked(loadContext).mockResolvedValue({ ctx: makeCtx(world) });
-        await runStatus();
-        const output = logSpy.mock.calls.map((args) => strip(String(args[0]))).join('\n');
-        expect(output).not.toContain('Apps');
-    });
-    it('--json output includes appPortUrls array', async () => {
-        const world = makeWorld({ appPortUrls: SAMPLE_URLS });
-        vi.mocked(loadContext).mockResolvedValue({ ctx: makeCtx(world) });
-        await runStatus('test-world-1', ['--json']);
-        const jsonCall = logSpy.mock.calls.find((args) => String(args[0]).startsWith('{'));
-        expect(jsonCall).toBeDefined();
-        const parsed = JSON.parse(String(jsonCall[0]));
-        expect(parsed.appPortUrls).toEqual(SAMPLE_URLS);
-        expect(parsed.dashboardUrl).toBe('http://localhost:19080');
-    });
-    it('--json output without appPortUrls omits the field', async () => {
-        const world = makeWorld(); // no appPortUrls
-        vi.mocked(loadContext).mockResolvedValue({ ctx: makeCtx(world) });
-        await runStatus('test-world-1', ['--json']);
-        const jsonCall = logSpy.mock.calls.find((args) => String(args[0]).startsWith('{'));
-        expect(jsonCall).toBeDefined();
-        const parsed = JSON.parse(String(jsonCall[0]));
-        expect(parsed.appPortUrls).toBeUndefined();
-        expect(parsed.dashboardUrl).toBe('http://localhost:19080');
-    });
-    it('uses portOffset to compute correct dashboardUrl', async () => {
-        const world = makeWorld({ portOffset: 200, appPortUrls: SAMPLE_URLS });
-        vi.mocked(loadContext).mockResolvedValue({ ctx: makeCtx(world) });
-        await runStatus('test-world-1', ['--json']);
-        const jsonCall = logSpy.mock.calls.find((args) => String(args[0]).startsWith('{'));
-        const parsed = JSON.parse(String(jsonCall[0]));
-        expect(parsed.dashboardUrl).toBe('http://localhost:19280'); // 19080 + 200
-    });
-});
-//# sourceMappingURL=status-app-urls.test.js.map

package/dist/__tests__/status-app-urls.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"status-app-urls.test.js","sourceRoot":"","sources":["../../src/__tests__/status-app-urls.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wEAAwE;AACxE,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAE3D,+EAA+E;AAC/E,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;AACtD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;AAEjE,MAAM,OAAO,GAAG,wBAAwB,CAAC;AACzC,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,WAAW,GAAiB;IAChC,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,wBAAwB,EAAE;IAC9F,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,wBAAwB,EAAE;CAC9F,CAAC;AAEF,SAAS,SAAS,CAAC,SAAmC;IACpD,OAAO;QACL,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,2BAA2B;QAC1C,eAAe,EAAE,QAAQ;QACzB,YAAY,EAAE,MAAM;QACpB,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,0BAA0B;QACrC,SAAS,EAAE,0BAA0B;QACrC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAmC;IAClD,OAAO;QACL,YAAY,EAAE;YACZ,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;SACzC;QACD,WAAW,EAAE;YACX,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC;SAC9C;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,IAAI,MAAmC,CAAC;IAExC,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/D,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,WAAW,EAAE,CAAC;QACrB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,SAAS,CAAC,OAAO,GAAG,cAAc,EAAE,YAAsB,EAAE;QACzE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC,YAAY,EAAE,CAAC;QAC7C,cAAc,CAAC,OAAO,CAAC,CAAC;QACxB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC,CAAC;QAE3E,MAAM,SAAS,EAAE,CAAC;QAElB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,YAAY;QAChE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC,CAAC;QAE3E,MAAM,SAAS,EAAE,CAAC;QAElB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,8DAA8D;QAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACrG,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,CAAC,iBAAiB;QAC5C,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC,CAAC;QAE3E,MAAM,SAAS,EAAE,CAAC;QAElB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,0BAA0B;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC,CAAC;QAE3E,MAAM,SAAS,EAAE,CAAC;QAElB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC,CAAC;QAE3E,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,CAAC,iBAAiB;QAC5C,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC,CAAC;QAE3E,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC,CAAC;QAE3E,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,cAAc;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/upgrade-gh-token-contract.test.d.ts

@@ -1,19 +0,0 @@
-/**
- * upgrade-gh-token-contract.test.ts — contractual regression test for
- * the GH_TOKEN forwarding through `olam upgrade`.
- *
- * Bug history: `olam host-cp start` correctly captured the operator's
- * gh-CLI token (via `captureGhToken()` → `buildComposeEnv(authSecret,
- * ghToken)`) and injected it into the host-cp container env. But
- * `olam upgrade -y` used a DIFFERENT call shape —
- * `buildComposeEnv(authSecret)` (single arg) — which omitted the token.
- * Every upgrade silently dropped GH_TOKEN, leaving the new container
- * with `GH_TOKEN=` (empty). The dashboard's PR filter + Cmd+K palette
- * silently 500'd because pr-merge-poller + /api/prs both gated on a
- * non-empty token.
- *
- * Pin the contract: every `buildComposeEnv` call site in upgrade.ts
- * MUST pass both authSecret AND captureGhToken().
- */
-export {};
-//# sourceMappingURL=upgrade-gh-token-contract.test.d.ts.map

package/dist/__tests__/upgrade-gh-token-contract.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"upgrade-gh-token-contract.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/upgrade-gh-token-contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG"}

package/dist/__tests__/upgrade-gh-token-contract.test.js

@@ -1,63 +0,0 @@
-/**
- * upgrade-gh-token-contract.test.ts — contractual regression test for
- * the GH_TOKEN forwarding through `olam upgrade`.
- *
- * Bug history: `olam host-cp start` correctly captured the operator's
- * gh-CLI token (via `captureGhToken()` → `buildComposeEnv(authSecret,
- * ghToken)`) and injected it into the host-cp container env. But
- * `olam upgrade -y` used a DIFFERENT call shape —
- * `buildComposeEnv(authSecret)` (single arg) — which omitted the token.
- * Every upgrade silently dropped GH_TOKEN, leaving the new container
- * with `GH_TOKEN=` (empty). The dashboard's PR filter + Cmd+K palette
- * silently 500'd because pr-merge-poller + /api/prs both gated on a
- * non-empty token.
- *
- * Pin the contract: every `buildComposeEnv` call site in upgrade.ts
- * MUST pass both authSecret AND captureGhToken().
- */
-import { describe, it, expect } from 'vitest';
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import { fileURLToPath } from 'node:url';
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const UPGRADE_PATH = path.join(__dirname, '..', 'commands', 'upgrade.ts');
-describe('upgrade.ts GH_TOKEN forwarding contract', () => {
-    it('imports captureGhToken from ./host-cp.js', () => {
-        const src = fs.readFileSync(UPGRADE_PATH, 'utf-8');
-        // The host-cp.js import line must include captureGhToken so the
-        // upgrade path can re-capture the operator's token at recreate time.
-        const hostCpImport = src.match(/import\s*\{[^}]*\}\s*from\s*['"]\.\/host-cp\.js['"]/);
-        expect(hostCpImport).not.toBeNull();
-        expect(hostCpImport[0]).toMatch(/\bcaptureGhToken\b/);
-    });
-    it('every buildComposeEnv call passes captureGhToken() as the second arg', () => {
-        const src = fs.readFileSync(UPGRADE_PATH, 'utf-8');
-        // Find every `buildComposeEnv(...)` invocation. The args may include
-        // a nested call like `captureGhToken()` — `[^)]+` would stop at the
-        // FIRST `)` (the inner paren). Capture ~120 chars after the name
-        // and check the full slice for the captureGhToken signature.
-        const callOffsets = [];
-        const re = /buildComposeEnv\s*\(/g;
-        let m;
-        while ((m = re.exec(src)) != null) {
-            callOffsets.push(m.index);
-        }
-        expect(callOffsets.length).toBeGreaterThan(0);
-        for (const off of callOffsets) {
-            const slice = src.slice(off, off + 120);
-            expect(slice, `buildComposeEnv call must include captureGhToken(). Slice:\n${slice}`)
-                .toMatch(/captureGhToken\s*\(\s*\)/);
-        }
-    });
-    it('contract holds across forward-upgrade, rollback, and source-mode call sites', () => {
-        // Sanity: at least 4 call sites exist (forward upgrade, source-mode
-        // build, rollback, source-mode SPA build) per the original code
-        // shape. If a future refactor consolidates them, this test should
-        // still hold per-call.
-        const src = fs.readFileSync(UPGRADE_PATH, 'utf-8');
-        const callCount = (src.match(/buildComposeEnv\s*\(/g) ?? []).length;
-        expect(callCount).toBeGreaterThanOrEqual(4);
-    });
-});
-//# sourceMappingURL=upgrade-gh-token-contract.test.js.map

package/dist/__tests__/upgrade-gh-token-contract.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"upgrade-gh-token-contract.test.js","sourceRoot":"","sources":["../../src/__tests__/upgrade-gh-token-contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAE1E,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACnD,gEAAgE;QAChE,qEAAqE;QACrE,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACtF,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,YAAa,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAEnD,qEAAqE;QACrE,oEAAoE;QACpE,iEAAiE;QACjE,6DAA6D;QAC7D,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,uBAAuB,CAAC;QACnC,IAAI,CAAC,CAAC;QACN,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,EAAE,+DAA+D,KAAK,EAAE,CAAC;iBAClF,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,oEAAoE;QACpE,gEAAgE;QAChE,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACpE,MAAM,CAAC,SAAS,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/upgrade.test.d.ts

@@ -1,9 +0,0 @@
-/**
- * Unit tests for upgrade.ts pure helpers.
- *
- * Only tests the stateless, side-effect-free helpers. The full upgrade
- * pipeline (git, npm, docker) is too side-effectful to integration-test
- * inside the devbox — same philosophy as host-cp.test.ts.
- */
-export {};
-//# sourceMappingURL=upgrade.test.d.ts.map

package/dist/__tests__/upgrade.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"upgrade.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/upgrade.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}