@productbrain/cli 0.1.0-beta.77 → 0.1.0-beta.7700

package/dist/__tests__/config-prod-fallthrough.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-prod-fallthrough.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/config-prod-fallthrough.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/config-prod-fallthrough.test.js

@@ -0,0 +1,93 @@
+/**
+ * TEN-2382 (CLI per-site decision): the published CLI's prod default is intended,
+ * so prod fall-through is NOT warned in general. The ONE exception is a CLAIMED
+ * binding that cannot be completed — config.local.json carrying the `preview`
+ * marker OR an apiKey of its own. Such a file has declared which workspace this
+ * repo talks to, so it must resolve to its own atomic apiKey+siteUrl pair and
+ * refuses before any profile pin or production fallback rather than borrowing
+ * another gateway (SF-3 / STD-261). The claim is the credential, not the marker:
+ * a scrubbed binding that kept its key still refuses even with no `preview: true`.
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { mkdirSync, writeFileSync, rmSync } from 'fs';
+import { resolve } from 'path';
+import { tmpdir } from 'os';
+import { randomUUID } from 'crypto';
+import { DEFAULT_SITE_URL } from '../lib/constants.js';
+vi.mock('../lib/profiles.js', () => ({
+    resolveProfileConfig: vi.fn(() => null),
+    resolveNamedProfileConfig: vi.fn(() => null),
+    getGlobalActiveProfile: vi.fn(() => null),
+}));
+vi.mock('os', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        homedir: vi.fn(() => '/tmp/pb-test-fake-home-' + process.pid),
+    };
+});
+describe('TEN-2382 CLI preview-scrub misroute refusal', () => {
+    let tempDir;
+    const originalCwd = process.cwd;
+    const savedEnv = {};
+    const envKeys = ['PRODUCTBRAIN_API_KEY', 'CONVEX_SITE_URL', 'PB_PROFILE', 'PB_ENV'];
+    let resolveConfig;
+    let resetConfigCache;
+    beforeEach(async () => {
+        vi.resetAllMocks();
+        for (const key of envKeys) {
+            savedEnv[key] = process.env[key];
+            delete process.env[key];
+        }
+        tempDir = resolve(tmpdir(), `pb-fallthrough-test-${randomUUID()}`);
+        mkdirSync(resolve(tempDir, '.productbrain'), { recursive: true });
+        process.cwd = () => tempDir;
+        const config = await import('../lib/config.js');
+        resolveConfig = config.resolveConfig;
+        resetConfigCache = config.resetConfigCache;
+        resetConfigCache();
+    });
+    afterEach(() => {
+        process.cwd = originalCwd;
+        for (const key of envKeys) {
+            if (savedEnv[key] === undefined)
+                delete process.env[key];
+            else
+                process.env[key] = savedEnv[key];
+        }
+        rmSync(tempDir, { recursive: true, force: true });
+        vi.restoreAllMocks();
+    });
+    const writeLocalConfig = (obj) => writeFileSync(resolve(tempDir, '.productbrain', 'config.local.json'), JSON.stringify(obj));
+    it('refuses when a marked preview binding has no siteUrl', () => {
+        writeLocalConfig({ apiKey: 'pb_sk_preview_test', preview: true });
+        const stderr = vi.spyOn(process.stderr, 'write').mockReturnValue(true);
+        expect(() => resolveConfig()).toThrow(/incomplete preview binding.*missing deployment URL/i);
+        expect(stderr).not.toHaveBeenCalled();
+    });
+    it('does NOT warn for a plain unconfigured CLI (no local binding)', () => {
+        const stderr = vi.spyOn(process.stderr, 'write').mockReturnValue(true);
+        const cfg = resolveConfig();
+        expect(cfg.source).toBe('default');
+        expect(stderr.mock.calls.some((c) => String(c[0]).includes(DEFAULT_SITE_URL))).toBe(false);
+    });
+    it('refuses a marker-less key rather than borrowing CONVEX_SITE_URL from the shell', () => {
+        // Same shape as the marked case above minus the marker — a scrub that cleared `preview`
+        // and `siteUrl` but kept the key. An exported CONVEX_SITE_URL is another gateway, not
+        // this binding's own, so it must not complete the pair.
+        writeLocalConfig({ apiKey: 'pb_sk_preview_test' });
+        process.env.CONVEX_SITE_URL = 'https://my-preview.convex.site';
+        const stderr = vi.spyOn(process.stderr, 'write').mockReturnValue(true);
+        expect(() => resolveConfig()).toThrow(/incomplete preview binding.*missing deployment URL/i);
+        expect(stderr).not.toHaveBeenCalled();
+    });
+    it('does NOT warn when CONVEX_SITE_URL redirects away from prod and no local key claims a binding', () => {
+        // The file's original point: an ordinary redirect is not a misroute, so nothing is warned.
+        process.env.CONVEX_SITE_URL = 'https://my-preview.convex.site';
+        const stderr = vi.spyOn(process.stderr, 'write').mockReturnValue(true);
+        const cfg = resolveConfig();
+        expect(cfg.siteUrl).toBe('https://my-preview.convex.site');
+        expect(stderr.mock.calls.some((c) => String(c[0]).includes(DEFAULT_SITE_URL))).toBe(false);
+    });
+});
+//# sourceMappingURL=config-prod-fallthrough.test.js.map

package/dist/__tests__/config-prod-fallthrough.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-prod-fallthrough.test.js","sourceRoot":"","sources":["../../src/__tests__/config-prod-fallthrough.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IACvC,yBAAyB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IAC5C,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;CAC1C,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAuB,CAAC;IAC3D,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC;KAC9D,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,IAAI,OAAe,CAAC;IACpB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAChC,MAAM,QAAQ,GAAuC,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpF,IAAI,aAAiE,CAAC;IACtE,IAAI,gBAAuE,CAAC;IAE5E,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,uBAAuB,UAAU,EAAE,EAAE,CAAC,CAAC;QACnE,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAChD,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QACrC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC3C,gBAAgB,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;gBACpD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,CAAC,GAAY,EAAE,EAAE,CACxC,aAAa,CACX,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,mBAAmB,CAAC,EACtD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CACpB,CAAC;IAEJ,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,gBAAgB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CACvE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,wFAAwF;QACxF,sFAAsF;QACtF,wDAAwD;QACxD,gBAAgB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,gCAAgC,CAAC;QAC/D,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,2FAA2F;QAC3F,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,gCAAgC,CAAC;QAC/D,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC3D,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CACvE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/config.test.d.ts

@@ -1,7 +1,7 @@
 /**
  * Tests for config resolution — WP-303 Slice 0.
  *
- * Tests resolveConfig(), getConfigSafe(), and .productbrain/config.json reading.
+ * Tests resolveConfig(), getConfigSafe(), findProjectRoot(), and config file reading.
  * Uses temp directories and mocks to isolate from real config on the filesystem.
  */
 export {};