@productbrain/cli 0.1.0-beta.109 → 0.1.0-beta.1093

package/dist/__tests__/session-switch.test.js

@@ -0,0 +1,130 @@
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+const mockKernelCall = vi.fn();
+vi.mock('../lib/client.js', () => ({
+    kernelCall: (...a) => mockKernelCall(...a),
+    kernelCallWithSession: vi.fn(),
+}));
+const mockGetConfigOrGuide = vi.fn(async () => ({ apiKey: 'pb_sk_test', siteUrl: 'https://test.convex.site' }));
+const mockResolveEffectiveProfile = vi.fn(() => ({ profile: 'p', source: 'local' }));
+const mockReadLocalProjectConfig = vi.fn(() => null);
+vi.mock('../lib/config.js', () => ({
+    getConfigOrGuide: (...a) => mockGetConfigOrGuide(...a),
+    resolveEffectiveProfile: () => mockResolveEffectiveProfile(),
+    readLocalProjectConfig: () => mockReadLocalProjectConfig(),
+    readProjectConfig: vi.fn(() => null),
+    refreshPreviewApiKeyFromDisk: vi.fn(() => 'not-bound'),
+}));
+vi.mock('../lib/profiles.js', () => ({ getActiveProfile: vi.fn(() => 'p') }));
+const mockReadSession = vi.fn();
+const mockWriteSession = vi.fn();
+const mockDiscardSession = vi.fn();
+const mockReadClosedMarker = vi.fn(() => null);
+vi.mock('../lib/session.js', () => ({
+    readSession: () => mockReadSession(),
+    writeSession: (...a) => mockWriteSession(...a),
+    clearSession: vi.fn(),
+    discardSession: () => mockDiscardSession(),
+    readClosedMarker: () => mockReadClosedMarker(),
+    sessionFileExists: vi.fn(() => false),
+    addCapturedEntry: vi.fn(),
+}));
+vi.mock('../commands/handshake.js', () => ({ runHandshake: vi.fn(async () => { }) }));
+import { runSessionStart, runSessionClose } from '../commands/session.js';
+describe('runSessionStart switch-backstop', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        mockGetConfigOrGuide.mockResolvedValue({ apiKey: 'pb_sk_test', siteUrl: 'https://test.convex.site' });
+        mockReadClosedMarker.mockReturnValue(null);
+        mockReadLocalProjectConfig.mockReturnValue(null);
+    });
+    it('discards a session whose profile differs from the current effective profile, then starts fresh', async () => {
+        mockReadSession.mockReturnValue({
+            sessionId: 's-old', workspaceId: 'w-old', workspaceName: 'Old',
+            startedAt: '2026-01-01T00:00:00Z', entriesCaptured: [], profile: 'old',
+        });
+        mockResolveEffectiveProfile.mockReturnValue({ profile: 'new', source: 'local' });
+        mockKernelCall.mockImplementation(async (method) => {
+            if (method === 'resolveWorkspace')
+                return { _id: 'w-new', keyId: 'k1' };
+            if (method === 'agent.startSession')
+                return { sessionId: 's-new', workspaceName: 'New', initiatedBy: 'cli', toolsScope: 'rw' };
+            return {};
+        });
+        await runSessionStart({ json: true });
+        expect(mockDiscardSession).toHaveBeenCalled();
+        expect(mockWriteSession).toHaveBeenCalledWith(expect.objectContaining({ sessionId: 's-new', profile: 'new' }));
+    });
+    it('discards and starts fresh on a profile switch in pretty (non-json) mode too', async () => {
+        mockReadSession.mockReturnValue({
+            sessionId: 's-old', workspaceId: 'w-old', workspaceName: 'Old',
+            startedAt: '2026-01-01T00:00:00Z', entriesCaptured: [], profile: 'old',
+        });
+        mockResolveEffectiveProfile.mockReturnValue({ profile: 'new', source: 'local' });
+        mockKernelCall.mockImplementation(async (method) => {
+            if (method === 'resolveWorkspace')
+                return { _id: 'w-new', keyId: 'k1' };
+            if (method === 'agent.startSession')
+                return { sessionId: 's-new', workspaceName: 'New', initiatedBy: 'cli', toolsScope: 'rw' };
+            return {};
+        });
+        const writeSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+        try {
+            await runSessionStart({}); // no json → pretty mode
+            expect(mockDiscardSession).toHaveBeenCalled();
+            expect(mockKernelCall).toHaveBeenCalledWith('agent.startSession', expect.anything());
+            expect(mockWriteSession).toHaveBeenCalledWith(expect.objectContaining({ sessionId: 's-new', profile: 'new' }));
+        }
+        finally {
+            writeSpy.mockRestore();
+        }
+    });
+    it('preserves alreadyActive for a legacy session with no profile field (no discard)', async () => {
+        mockReadSession.mockReturnValue({
+            sessionId: 's1', workspaceId: 'w1', workspaceName: 'WS',
+            startedAt: '2026-01-01T00:00:00Z', entriesCaptured: [], // NOTE: no `profile`
+        });
+        mockResolveEffectiveProfile.mockReturnValue({ profile: 'new', source: 'local' });
+        const writeSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+        try {
+            await runSessionStart({ json: true });
+            const out = writeSpy.mock.calls.map((c) => String(c[0])).join('');
+            expect(out).toMatch(/alreadyActive/);
+            expect(mockDiscardSession).not.toHaveBeenCalled();
+        }
+        finally {
+            writeSpy.mockRestore();
+        }
+    });
+    it('keeps alreadyActive when the effective profile is unchanged', async () => {
+        mockReadSession.mockReturnValue({
+            sessionId: 's1', workspaceId: 'w1', workspaceName: 'WS',
+            startedAt: '2026-01-01T00:00:00Z', entriesCaptured: [], profile: 'same',
+        });
+        mockResolveEffectiveProfile.mockReturnValue({ profile: 'same', source: 'local' });
+        const writeSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+        try {
+            await runSessionStart({ json: true });
+            const out = writeSpy.mock.calls.map((c) => String(c[0])).join('');
+            expect(out).toMatch(/alreadyActive/);
+            expect(mockDiscardSession).not.toHaveBeenCalled();
+        }
+        finally {
+            writeSpy.mockRestore();
+        }
+    });
+});
+describe('runSessionClose --force hint', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        mockGetConfigOrGuide.mockResolvedValue({ apiKey: 'pb_sk_test', siteUrl: 'https://test.convex.site' });
+        mockReadSession.mockReturnValue({
+            sessionId: 's1', workspaceId: 'w1', workspaceName: 'WS',
+            startedAt: '2026-01-01T00:00:00Z', entriesCaptured: [],
+        });
+    });
+    it('puts the --force instruction in the error message itself', async () => {
+        mockKernelCall.mockRejectedValue(new Error('Internal server error'));
+        await expect(runSessionClose({})).rejects.toThrow(/pb session close --force/);
+    });
+});
+//# sourceMappingURL=session-switch.test.js.map

package/dist/__tests__/session-switch.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-switch.test.js","sourceRoot":"","sources":["../../src/__tests__/session-switch.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC/B,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,UAAU,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACrD,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC/B,CAAC,CAAC,CAAC;AAEJ,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;AAChH,MAAM,2BAA2B,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAgB,EAAE,CAAC,CAAC,CAAC;AAC9F,MAAM,0BAA0B,GAAG,EAAE,CAAC,EAAE,CAAC,GAAgC,EAAE,CAAC,IAAI,CAAC,CAAC;AAClF,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,gBAAgB,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAI,CAAQ,CAAC;IACzE,uBAAuB,EAAE,GAAG,EAAE,CAAC,2BAA2B,EAAE;IAC5D,sBAAsB,EAAE,GAAG,EAAE,CAAC,0BAA0B,EAAE;IAC1D,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IACpC,4BAA4B,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC;CACvD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAE9E,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAChC,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AACjC,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AACnC,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAC/C,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,WAAW,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE;IACpC,YAAY,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzD,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;IACrB,cAAc,EAAE,GAAG,EAAE,CAAC,kBAAkB,EAAE;IAC1C,gBAAgB,EAAE,GAAG,EAAE,CAAC,oBAAoB,EAAE;IAC9C,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;IACrC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC1B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAErF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE1E,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,oBAAoB,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACtG,oBAAoB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3C,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,eAAe,CAAC,eAAe,CAAC;YAC9B,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK;YAC9D,SAAS,EAAE,sBAAsB,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK;SACvE,CAAC,CAAC;QACH,2BAA2B,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,cAAc,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;YACzD,IAAI,MAAM,KAAK,kBAAkB;gBAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACxE,IAAI,MAAM,KAAK,oBAAoB;gBAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC/H,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtC,MAAM,CAAC,kBAAkB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,eAAe,CAAC,eAAe,CAAC;YAC9B,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK;YAC9D,SAAS,EAAE,sBAAsB,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK;SACvE,CAAC,CAAC;QACH,2BAA2B,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,cAAc,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;YACzD,IAAI,MAAM,KAAK,kBAAkB;gBAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACxE,IAAI,MAAM,KAAK,oBAAoB;gBAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC/H,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB;YACnD,MAAM,CAAC,kBAAkB,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC9C,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrF,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACjH,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,eAAe,CAAC,eAAe,CAAC;YAC9B,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;YACvD,SAAS,EAAE,sBAAsB,EAAE,eAAe,EAAE,EAAE,EAAE,qBAAqB;SAC9E,CAAC,CAAC;QACH,2BAA2B,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACrC,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,eAAe,CAAC,eAAe,CAAC;YAC9B,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;YACvD,SAAS,EAAE,sBAAsB,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM;SACxE,CAAC,CAAC;QACH,2BAA2B,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACrC,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,oBAAoB,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACtG,eAAe,CAAC,eAAe,CAAC;YAC9B,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;YACvD,SAAS,EAAE,sBAAsB,EAAE,eAAe,EAAE,EAAE;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,cAAc,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/update-check.test.js

@@ -1,21 +1,52 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 const files = new Map();
+// Controllable npm registry response for resolveLatestVersion's live fetch. `null` => the
+// request yields an empty body (JSON.parse fails) so fetchLatestVersion resolves null.
+let npmResponseVersion = null;
 vi.mock('node:os', () => ({
     homedir: () => '/mock-home',
 }));
+vi.mock('node:https', () => ({
+    request: (_url, _opts, cb) => {
+        const res = {
+            on: (event, handler) => {
+                if (event === 'data' && npmResponseVersion !== null) {
+                    handler(Buffer.from(JSON.stringify({ version: npmResponseVersion })));
+                }
+                if (event === 'end')
+                    handler();
+                return res;
+            },
+        };
+        cb(res);
+        const req = { on: () => req, setTimeout: () => req, destroy: () => { }, end: () => { } };
+        return req;
+    },
+}));
 vi.mock('node:fs', async () => ({
     existsSync: (path) => files.has(path),
     readFileSync: (path) => files.get(path) ?? '',
     writeFileSync: (path, body) => { files.set(path, body); },
     mkdirSync: vi.fn(),
     unlinkSync: (path) => { files.delete(path); },
+    statSync: () => ({ mtimeMs: Date.now() }),
+    readdirSync: () => [...files.keys()].map((p) => p.split('/').pop()),
+    openSync: (path) => { if (files.has(path)) {
+        const e = new Error('EEXIST');
+        e.code = 'EEXIST';
+        throw e;
+    } files.set(path, ''); return 1; },
+    closeSync: vi.fn(),
 }));
-import { clearPendingUpgradeCache, isNewer, recordServerLatest, readCachedLatestVersion, writeUpgradePendingSentinel, } from '../lib/update-check.js';
+vi.mock('../lib/session.js', () => ({ readSession: () => ({ sessionId: 'sess-test' }) }));
+import { clearPendingUpgradeCache, isNewer, recordServerLatest, readCachedLatestVersion, writeUpgradePendingSentinel, recordNpmLatest, resolveCachedLatest, resolveLatestVersion, checkForUpdate, _resetProcessGuardsForTest, } from '../lib/update-check.js';
 import { setOutputMode } from '../lib/runner.js';
 describe('update-check', () => {
     const originalEnv = { ...process.env };
     beforeEach(() => {
+        _resetProcessGuardsForTest();
         files.clear();
+        npmResponseVersion = null;
         process.env = { ...originalEnv };
         setOutputMode('auto');
         vi.clearAllMocks();
@@ -52,5 +83,133 @@ describe('update-check', () => {
         clearPendingUpgradeCache();
         expect(readCachedLatestVersion()).toBeNull();
     });
+    it('newest of fresh server/npm wins; server still wins only when it is the highest', () => {
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // (value, installed)
+        recordServerLatest('0.1.0-beta.130'); // fresh server, but LOWER than npm
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.140'); // npm wins — server no longer masks a newer npm
+    });
+    it('a fresh server that LAGS npm cannot mask the true npm latest (TEN-2199 smoke-walk regression)', () => {
+        // The live failure mode: server header advertises the committed cliVersion.ts value (beta.108),
+        // which trails the run-numbered npm publish (beta.958). Newest-wins must surface 958, not 108.
+        recordNpmLatest('0.1.0-beta.958', '0.1.0-beta.109');
+        recordServerLatest('0.1.0-beta.108'); // fresh but stale-valued, < installed
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.958');
+    });
+    it('server still wins when it is genuinely the newest source', () => {
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        recordServerLatest('0.1.0-beta.145'); // fresh server, HIGHER than npm
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.145');
+    });
+    it('npm wins when the server header is stale (>48h)', () => {
+        const realNow = Date.now;
+        recordServerLatest('0.1.0-beta.130');
+        Date.now = () => realNow() + 49 * 60 * 60 * 1000;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.140');
+        Date.now = realNow;
+    });
+    it('npm fallback is isNewer-gated against installed (never records older-or-equal)', () => {
+        recordNpmLatest('0.1.0-beta.1', '0.1.0-beta.109'); // stale tag, older than installed
+        expect(resolveCachedLatest()).toBeNull();
+    });
+    it('prints an update line to stderr in JSON mode (agent), once', () => {
+        setOutputMode('json');
+        recordServerLatest('0.1.0-beta.140');
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.109');
+        checkForUpdate('0.1.0-beta.109'); // same session => silent second time
+        expect(stderrSpy).toHaveBeenCalledTimes(1);
+        expect(stderrSpy.mock.calls[0][0]).toContain('pb:');
+        expect(stderrSpy.mock.calls[0][0]).toContain('pb upgrade');
+    });
+    it('prints nothing to stdout (stdout stays bare JSON)', () => {
+        setOutputMode('json');
+        recordServerLatest('0.1.0-beta.140');
+        const stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.109');
+        expect(stdoutSpy).not.toHaveBeenCalled();
+    });
+    it('cold cache → no print', () => {
+        setOutputMode('json');
+        const spy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.109');
+        expect(spy).not.toHaveBeenCalled();
+    });
+    it('sentinel records the installed version and suppresses re-notify for it', () => {
+        setOutputMode('json');
+        recordServerLatest('0.1.0-beta.140');
+        writeUpgradePendingSentinel('0.1.0-beta.140'); // just installed 140
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.140'); // running 140, latest 140 -> no notice
+        expect(stderrSpy).not.toHaveBeenCalled();
+    });
+    it('resolveLatestVersion serves a within-window npm fallback without refetching (P2)', async () => {
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // fresh (recordedAt = now)
+        npmResponseVersion = '0.1.0-beta.999'; // would win IF a fetch happened
+        const latest = await resolveLatestVersion('0.1.0-beta.109');
+        expect(latest).toBe('0.1.0-beta.140'); // fresh cache used, no network refresh
+    });
+    it('a lone fresh server header still triggers a live npm fetch — server-only cache is not trusted (P1)', async () => {
+        // Normal steady state: authenticated calls write a fresh server header, but the hot path never
+        // populates npm. If the server lags npm (108 vs 958), the live resolver must fetch npm rather
+        // than short-circuit on the server value, or pb doctor/upgrade would resolve the masked 108.
+        recordServerLatest('0.1.0-beta.108'); // fresh server only; no npm cache entry
+        npmResponseVersion = '0.1.0-beta.958'; // live npm is far newer
+        const latest = await resolveLatestVersion('0.1.0-beta.109');
+        expect(latest).toBe('0.1.0-beta.958'); // fetched + surfaced, not the masked server 108
+    });
+    it('resolveLatestVersion revalidates a stale npm fallback via a fresh fetch (P2)', async () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // recordedAt = now
+        Date.now = () => realNow() + 25 * 60 * 60 * 1000; // past the 24h npm window
+        npmResponseVersion = '0.1.0-beta.141'; // registry now serves a newer beta
+        try {
+            const latest = await resolveLatestVersion('0.1.0-beta.109');
+            expect(latest).toBe('0.1.0-beta.141'); // refreshed, not the stale 140
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+    it('successful revalidation replaces a stale cache even when the live tag is not newer (P2)', async () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // seed npm cache at 140
+        Date.now = () => realNow() + 25 * 60 * 60 * 1000; // age it past the 24h window
+        npmResponseVersion = '0.1.0-beta.142'; // registry now points lower than installed
+        try {
+            // Installed is 145 (post-upgrade). The live tag (142) is <= installed, so recordNpmLatest
+            // refuses to overwrite — but the resolver must return the live truth (142), NOT the disproven
+            // stale 140 it would otherwise fall back to.
+            const latest = await resolveLatestVersion('0.1.0-beta.145');
+            expect(latest).toBe('0.1.0-beta.142');
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+    it('falls back to a stale cached value only on fetch failure (offline backstop)', async () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        Date.now = () => realNow() + 25 * 60 * 60 * 1000; // stale npm entry
+        npmResponseVersion = null; // registry unreachable → fetch resolves null
+        try {
+            const latest = await resolveLatestVersion('0.1.0-beta.109');
+            expect(latest).toBe('0.1.0-beta.140'); // offline → stale cache is better than nothing
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+    it('hot-path resolveCachedLatest still returns a stale npm value (better than nothing)', () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        Date.now = () => realNow() + 100 * 60 * 60 * 1000; // far past every freshness window
+        try {
+            expect(resolveCachedLatest()).toBe('0.1.0-beta.140'); // sync hot path never blocks/forgets
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
 });
 //# sourceMappingURL=update-check.test.js.map

package/dist/__tests__/update-check.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-check.test.js","sourceRoot":"","sources":["../../src/__tests__/update-check.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY;CAC5B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7C,YAAY,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;IACrD,aAAa,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CACtD,CAAC,CAAC,CAAC;AAEJ,OAAO,EACL,wBAAwB,EACxB,OAAO,EACP,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvC,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;QACtC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEzD,2BAA2B,EAAE,CAAC;QAC9B,wBAAwB,EAAE,CAAC;QAE3B,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"update-check.test.js","sourceRoot":"","sources":["../../src/__tests__/update-check.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AACxC,0FAA0F;AAC1F,uFAAuF;AACvF,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY;CAC5B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,IAAa,EAAE,KAAc,EAAE,EAA0B,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG;YACV,EAAE,EAAE,CAAC,KAAa,EAAE,OAAgC,EAAE,EAAE;gBACtD,IAAI,KAAK,KAAK,MAAM,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;oBACpD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,IAAI,KAAK,KAAK,KAAK;oBAAE,OAAO,EAAE,CAAC;gBAC/B,OAAO,GAAG,CAAC;YACb,CAAC;SACF,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,CAAC;QACR,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;QACvF,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7C,YAAY,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;IACrD,aAAa,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACzC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACnE,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,GAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC;QAAC,MAAM,CAAC,CAAC;IAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvJ,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;CACnB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAE1F,OAAO,EACL,wBAAwB,EACxB,OAAO,EACP,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvC,UAAU,CAAC,GAAG,EAAE;QACd,0BAA0B,EAAE,CAAC;QAC7B,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;QACtC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEzD,2BAA2B,EAAE,CAAC;QAC9B,wBAAwB,EAAE,CAAC;QAE3B,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAG,qBAAqB;QAC5E,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAmB,mCAAmC;QAC3F,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAG,gDAAgD;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,gGAAgG;QAChG,+FAA+F;QAC/F,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAmB,sCAAsC;QAC9F,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAmB,gCAAgC;QACxF,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACjD,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC,kCAAkC;QACrF,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,qCAAqC;QAEvE,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7E,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC,qBAAqB;QACpE,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAc,uCAAuC;QACtF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,2BAA2B;QAChF,kBAAkB,GAAG,gBAAgB,CAAC,CAAe,gCAAgC;QACrF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAe,uCAAuC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;QAClH,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAG,wCAAwC;QAChF,kBAAkB,GAAG,gBAAgB,CAAC,CAAE,wBAAwB;QAChE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAE,gDAAgD;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,mBAAmB;QACxE,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAI,0BAA0B;QAC/E,kBAAkB,GAAG,gBAAgB,CAAC,CAAe,mCAAmC;QACxF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAa,+BAA+B;QACpF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,wBAAwB;QAC7E,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAK,6BAA6B;QACnF,kBAAkB,GAAG,gBAAgB,CAAC,CAAgB,2CAA2C;QACjG,IAAI,CAAC;YACH,0FAA0F;YAC1F,8FAA8F;YAC9F,6CAA6C;YAC7C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAK,kBAAkB;QACxE,kBAAkB,GAAG,IAAI,CAAC,CAA4B,6CAA6C;QACnG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAc,+CAA+C;QACrG,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAG,kCAAkC;QACvF,IAAI,CAAC;YACH,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,qCAAqC;QAC7F,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/upgrade-runner.test.js

@@ -39,4 +39,16 @@ describe('upgrade-runner', () => {
         await expect(promise).rejects.toMatchObject({ code: ErrorCode.UPGRADE_FAILED });
     });
 });
+describe('buildUpgradeCommand version pin', () => {
+    it('pins npm-family channels to the resolved version', () => {
+        expect(buildUpgradeCommand('npm', '0.1.0-beta.140').args).toEqual(['install', '-g', '@productbrain/cli@0.1.0-beta.140']);
+        expect(buildUpgradeCommand('pnpm', '0.1.0-beta.140').args).toContain('@productbrain/cli@0.1.0-beta.140');
+    });
+    it('leaves brew unchanged (no @version)', () => {
+        expect(buildUpgradeCommand('brew', '0.1.0-beta.140').args).toEqual(['upgrade', 'productbrain']);
+    });
+    it('falls back to @beta when no version is resolved', () => {
+        expect(buildUpgradeCommand('npm').args).toEqual(['install', '-g', '@productbrain/cli@beta']);
+    });
+});
 //# sourceMappingURL=upgrade-runner.test.js.map

package/dist/__tests__/upgrade-runner.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade-runner.test.js","sourceRoot":"","sources":["../../src/__tests__/upgrade-runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAE1B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CAClD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;CACpB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE;CACrC,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEnG,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,CAAC,SAAS,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,oBAAoB,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,oBAAoB,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,oBAAoB,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,oBAAoB,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACzF,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC7F,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,KAAK,GAAG,IAAI,YAAY,EAAmE,CAAC;QAClG,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEtF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"upgrade-runner.test.js","sourceRoot":"","sources":["../../src/__tests__/upgrade-runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAE1B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CAClD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;CACpB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE;CACrC,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEnG,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,CAAC,SAAS,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,oBAAoB,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,oBAAoB,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,oBAAoB,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,oBAAoB,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACzF,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC7F,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,KAAK,GAAG,IAAI,YAAY,EAAmE,CAAC;QAClG,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEtF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,kCAAkC,CAAC,CAAC,CAAC;QACzH,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/upgrade.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=upgrade.test.d.ts.map

package/dist/__tests__/upgrade.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/upgrade.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/upgrade.test.js

@@ -0,0 +1,56 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+const { resolveLatestVersion } = vi.hoisted(() => ({
+    resolveLatestVersion: vi.fn(),
+}));
+vi.mock('../lib/update-check.js', async (orig) => ({
+    ...(await orig()),
+    resolveLatestVersion,
+}));
+import { runUpgrade } from '../commands/upgrade.js';
+import { setOutputMode } from '../lib/runner.js';
+import * as runner from '../lib/upgrade-runner.js';
+describe('runUpgrade anti-downgrade gate', () => {
+    let stdoutSpy;
+    let spawnSpy;
+    beforeEach(() => {
+        stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+        spawnSpy = vi
+            .spyOn(runner, 'spawnUpgrade')
+            .mockResolvedValue({ channel: 'npm', command: 'x', exitCode: 0, output: [] });
+    });
+    afterEach(() => {
+        stdoutSpy.mockRestore();
+        spawnSpy.mockRestore();
+        setOutputMode('auto');
+        resolveLatestVersion.mockReset();
+    });
+    it('no-ops when resolved latest is not newer than current', async () => {
+        setOutputMode('json');
+        resolveLatestVersion.mockResolvedValue('0.1.0-beta.108'); // older than current
+        await runUpgrade({ currentVersion: '0.1.0-beta.109' });
+        const out = stdoutSpy.mock.calls.flat().join('');
+        expect(out).toContain('current');
+        expect(spawnSpy).not.toHaveBeenCalled();
+    });
+    it('never installs a bare @beta tag when latest resolves to null (P1: no downgrade fallback)', async () => {
+        // Stale/unreachable registry → resolveLatestVersion returns null. The old code fell through
+        // to a bare `@productbrain/cli@beta` install, which could downgrade a newer installed CLI.
+        setOutputMode('json');
+        resolveLatestVersion.mockResolvedValue(null);
+        await runUpgrade({ currentVersion: '0.1.0-beta.109' });
+        const out = stdoutSpy.mock.calls.flat().join('');
+        expect(spawnSpy).not.toHaveBeenCalled();
+        // JSON consumers see an explicit "current"/null-latest signal, never an auto-install.
+        expect(out).toContain('"status":"current"');
+        expect(out).toContain('"latest":null');
+    });
+    it('pins the resolved newer version in the JSON upgrade command', async () => {
+        setOutputMode('json');
+        resolveLatestVersion.mockResolvedValue('0.1.0-beta.140'); // strictly newer
+        await runUpgrade({ currentVersion: '0.1.0-beta.109' });
+        const out = stdoutSpy.mock.calls.flat().join('');
+        expect(out).toContain('@productbrain/cli@0.1.0-beta.140');
+        expect(out).toContain('"latest":"0.1.0-beta.140"');
+    });
+});
+//# sourceMappingURL=upgrade.test.js.map

package/dist/__tests__/upgrade.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.test.js","sourceRoot":"","sources":["../../src/__tests__/upgrade.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAgD;CAC5E,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACjD,GAAG,CAAC,MAAM,IAAI,EAA2C,CAAC;IAC1D,oBAAoB;CACrB,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAC;AAEnD,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,IAAI,SAAsC,CAAC;IAC3C,IAAI,QAAqC,CAAC;IAE1C,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7E,QAAQ,GAAG,EAAE;aACV,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC;aAC7B,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAW,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,WAAW,EAAE,CAAC;QACxB,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvB,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,oBAAoB,CAAC,SAAS,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,oBAAoB,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,qBAAqB;QAC/E,MAAM,UAAU,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,4FAA4F;QAC5F,2FAA2F;QAC3F,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,oBAAoB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,UAAU,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,sFAAsF;QACtF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,oBAAoB,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB;QAC3E,MAAM,UAAU,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/vocabulary-leak.test.d.ts

@@ -1,22 +1,36 @@
 /**
- * Vocabulary leak test — WP-436 S2 (PAT-229, DEC-1021).
+ * Vocabulary leak test — WP-436 S2 + TEN-2053 S2 (PAT-229, DEC-1021).
  *
- * Asserts that ZERO literal `bet`/`BET` appears in stdout of orient/get/capture/search
- * CLI formatters when the workspace vocabulary is overridden to non-bet labels.
+ * Asserts two classes of regression are absent from user-facing CLI/MCP output:
  *
- * Design (from phasing):
- *   3 fixture workspaces × 4 formatter surfaces = 12 scenarios minimum.
- *   Each workspace sets `work_package` labels to something non-bet.
- *   If any "bet"/"BET" appears in formatted output (outside stored entry IDs), it's a leak.
+ *   1. **Workspace-vocab leaks** (`bet`/`BET`) — caught when the workspace
+ *      vocabulary is overridden to non-bet labels. Any literal "bet"/"BET"
+ *      outside stored entry IDs means a label resolver was bypassed.
  *
- *   COMMAND-LEVEL layer (Gap 2 fix): 3 fixture workspaces × runOrient = 3 additional
- *   scenarios that prove the CLI command SUPPLIES vocabCtx to formatOrient/formatOrientBrief,
- *   not just that the formatters work when given ctx directly.
+ *   2. **Stale governance-ID leaks** (TEN-2053 S2) — bare governance-ID
+ *      prefixes without digits (e.g. typo'd "STD-" with no number, or
+ *      "DEC-foo"). Stored entry IDs (`STD-113`, `DEC-1021`, etc.) are
+ *      stripped BEFORE the leak check, so legitimate IDs don't false-
+ *      positive. We do NOT treat Product Brain Method vocabulary as a leak
+ *      (`Chain`, `Constellation`, `SSOT`, `shaping`, `handoff`, `gates`,
+ *      `verdict`, `blocking`, `advisory` are the product — not jargon).
+ *      The real leak class is OUR entry IDs (specific to our team's chain)
+ *      surfacing in customer-facing output.
  *
- * Whitelist: stored entry IDs matching /\b[A-Z]+-\d+\b/ (e.g. WP-436, BET-XXX) are
- * excluded from the leak check — they're stable database references, not user-facing labels.
+ * Coverage:
+ *   ALL_FIXTURES × { formatOrient, formatOrientBrief, formatSearchResults,
+ *                    formatCaptureReceipt, formatAudit (PASS/FAIL/verbose) }
+ *   plus runOrient end-to-end command wiring.
  *
- * Exclusion: `pb audit` is excluded per R7 (WP-313 owns the audit surface).
+ * MCP-side note: the MCP markdown response in
+ * `packages/mcp-server/src/tools/audit.ts:handleAuditRun` is structurally
+ * identical to `formatAudit` here — kept in sync by manual review; no
+ * dedicated MCP audit test currently exists (`find packages/mcp-server -name
+ * "*.test.ts" -path "*audit*"` returns empty as of TEN-2053 S2).
+ *
+ * Whitelist: stored entry IDs matching /\b[A-Z]+-\d+\b/ (e.g. WP-436, BET-42,
+ * DEC-1021) are stripped before the leak check — they're stable database
+ * references, not vocabulary labels.
  *
  * Perf: fixture workspaces are seeded purely in-memory (no Convex, no HTTP).
  * BET-241: no fixture has >100 entries.

package/dist/__tests__/vocabulary-leak.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vocabulary-leak.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/vocabulary-leak.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG"}
+{"version":3,"file":"vocabulary-leak.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/vocabulary-leak.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG"}