@productbrain/cli 0.1.0-beta.94 → 0.1.0-beta.945

package/dist/__tests__/skill-vocabulary.test.js

@@ -0,0 +1,187 @@
+/**
+ * Skill vocabulary fixture tests — WP-436 S3.
+ *
+ * 3 skill files × 3 workspace presets = 9 fixture assertions.
+ *
+ * Each test renders a tokenized skill file content through replaceVocabTokens
+ * with the given workspace preset and asserts:
+ *   1. No un-tokenized noun-form "bet" / "Bet" / "bets" / "Bets" remains
+ *      outside exclusions (code fences, inline code, already-tokenized lines).
+ *   2. No raw {{vocab:...}} token survives (resolver is exhaustive).
+ *   3. The rendered content contains the expected singular label for the preset.
+ *
+ * Workspace presets (methodology-neutral):
+ *   - Shape Up: singular=Bet, plural=Bets, verb_start=shape, verb_complete=ship
+ *   - Generic:  singular=Initiative, plural=Initiatives, verb_start=start, verb_complete=complete
+ *   - Linear:   singular=Issue, plural=Issues, verb_start=begin, verb_complete=archive
+ *
+ * Chain: WP-436 S3, STD-253, DEC-1021.
+ */
+import { readFileSync } from 'fs';
+import { join } from 'path';
+import { describe, expect, it } from 'vitest';
+import { replaceVocabTokens } from '../lib/canonicalRefs.js';
+// ── Helpers ───────────────────────────────────────────────────────────────────
+const PB_SKILLS_DIR = join(new URL('../../../..', import.meta.url).pathname, '.productbrain', 'skills');
+function readSkill(name) {
+    return readFileSync(join(PB_SKILLS_DIR, `${name}.md`), 'utf8');
+}
+// ── Workspace presets ─────────────────────────────────────────────────────────
+const PRESETS = {
+    'Shape Up': {
+        collectionLabels: {
+            work_package: {
+                singular: 'Bet',
+                plural: 'Bets',
+                verb_start: 'shape',
+                verb_complete: 'ship',
+                verb_archive: 'archive',
+            },
+        },
+    },
+    'Generic': {
+        collectionLabels: {
+            work_package: {
+                singular: 'Initiative',
+                plural: 'Initiatives',
+                verb_start: 'start',
+                verb_complete: 'complete',
+                verb_archive: 'close',
+            },
+        },
+    },
+    'Linear': {
+        collectionLabels: {
+            work_package: {
+                singular: 'Issue',
+                plural: 'Issues',
+                verb_start: 'begin',
+                verb_complete: 'archive',
+                verb_archive: 'archive',
+            },
+        },
+    },
+};
+// ── Assertion helpers ─────────────────────────────────────────────────────────
+/**
+ * Check that no raw {{vocab:...}} token survives in the rendered output.
+ * The resolver should replace ALL tokens.
+ */
+function assertNoRawTokens(rendered, description) {
+    const rawTokens = rendered.match(/\{\{vocab:[a-z_]+\.[a-z_]+\}\}/g) ?? [];
+    expect(rawTokens, `${description}: found raw {{vocab:...}} tokens after render: ${rawTokens.join(', ')}`).toHaveLength(0);
+}
+/**
+ * Check that no un-tokenized noun-form "bet" remains in prose (outside code fences and inline code).
+ *
+ * This replicates the verify-no-noun-bet exclusion logic inline.
+ * Note: after render, what we are checking is the OUTPUT — rendered prose that should use
+ * the workspace label (e.g. "Bet", "Initiative", "Issue") — NOT the raw token. So we only
+ * need to confirm no lowercase "bet"/"bets" remain that are NOT the resolved label.
+ *
+ * For the Shape Up preset where singular="Bet", the rendered text will contain "Bet" naturally.
+ * For Generic/Linear, "Bet" should NOT appear (it was replaced by Initiative/Issue).
+ */
+function assertNoUnresolved(rendered, preset, ctx) {
+    const singular = ctx.collectionLabels?.work_package?.singular ?? '';
+    const plural = ctx.collectionLabels?.work_package?.plural ?? '';
+    // If the preset maps to "Bet"/"Bets" (Shape Up), then rendered "Bet" is expected.
+    // Otherwise, we check that "bet" / "Bet" doesn't appear in prose outside inline code.
+    if (singular === 'Bet') {
+        // Shape Up: resolved labels are "Bet"/"Bets" (capital) — those are expected in prose.
+        // What MUST NOT appear: LOWERCASE noun-form "bet"/"bets"/possessives — that signals a
+        // token-rewrite miss (since resolved labels for this preset are always capital).
+        // Strip code fences + inline code first so legitimate `bet-XXX-short-name` etc. don't trip us.
+        const strippedForCheck = stripCodeSpans(stripFences(rendered));
+        expect(strippedForCheck, `${preset}: lowercase noun-form 'bet'/'bets' in prose = unresolved leak`)
+            .not.toMatch(/\bbet(s|'s|s')?\b(?!-)/);
+        return;
+    }
+    // For non-Shape Up presets: no "Bet" (capital) should appear in prose (it was replaced).
+    // Strip code fences + inline code before checking.
+    const strippedFences = stripFences(rendered);
+    const strippedAll = stripCodeSpans(strippedFences);
+    // Check for any remaining {{vocab:...}} already handled above.
+    // Check that prose noun-form "Bet" is gone (replaced by singular/plural preset label).
+    const betMatches = strippedAll.match(/\b[Bb]et(s|'s|s')?\b(?!-)/g) ?? [];
+    expect(betMatches, `${preset}: found un-resolved noun-form "bet" in prose: ${betMatches.join(', ')}`).toHaveLength(0);
+}
+function stripFences(text) {
+    // Remove code fence blocks (```...``` and ~~~~...~~~~)
+    return text.replace(/```[\s\S]*?```/g, ' ').replace(/~{4,}[\s\S]*?~{4,}/g, ' ');
+}
+function stripCodeSpans(text) {
+    // Remove inline backtick spans
+    return text.replace(/`[^`]+`/g, ' ');
+}
+// ── Fixture: Source file content (tokenized) loaded once ─────────────────────
+const SHAPING_SRC = readSkill('shaping');
+const PHASING_SRC = readSkill('phasing');
+const REVIEW_SRC = readSkill('implementation-review');
+// ── 3×3 tests ─────────────────────────────────────────────────────────────────
+const SKILL_FIXTURES = [
+    { name: 'shaping', src: SHAPING_SRC },
+    { name: 'phasing', src: PHASING_SRC },
+    { name: 'implementation-review', src: REVIEW_SRC },
+];
+for (const { name: skillName, src } of SKILL_FIXTURES) {
+    describe(`skill: ${skillName}`, () => {
+        for (const [presetName, ctx] of Object.entries(PRESETS)) {
+            it(`renders correctly under preset: ${presetName}`, () => {
+                const rendered = replaceVocabTokens(src, ctx);
+                const description = `${skillName} × ${presetName}`;
+                // 1. No raw {{vocab:...}} tokens survive
+                assertNoRawTokens(rendered, description);
+                // 2. Resolved content contains the workspace singular label (confirms resolution worked)
+                const singular = ctx.collectionLabels?.work_package?.singular ?? '';
+                expect(rendered, `${description}: rendered output should contain workspace singular label "${singular}"`).toContain(singular);
+                // 3. No un-resolved noun-form "bet" in prose (for non-Shape Up presets)
+                assertNoUnresolved(rendered, presetName, ctx);
+            });
+        }
+    });
+}
+// ── Additional: verify source file IS tokenized (has {{vocab:...}} tokens) ───
+describe('source files are tokenized', () => {
+    it('shaping.md contains vocab tokens', () => {
+        expect(SHAPING_SRC).toContain('{{vocab:work_package.');
+    });
+    it('phasing.md contains vocab tokens', () => {
+        expect(PHASING_SRC).toContain('{{vocab:work_package.');
+    });
+    it('implementation-review.md contains vocab tokens', () => {
+        expect(REVIEW_SRC).toContain('{{vocab:work_package.');
+    });
+});
+// ── Additional: verb-form preset assertion ─────────────────────────────────────
+//
+// shaping.md has one verb-form token: {{vocab:work_package.verb_start}} (from "shape a bet")
+// in the YAML triggers block. "ship a bet" was not literal text in any skill — so
+// verb_complete tokens only appear where we explicitly test with a custom fixture.
+describe('verb-form resolution across presets', () => {
+    it('Shape Up: verb_start resolves to "shape" (trigger line in shaping.md)', () => {
+        const rendered = replaceVocabTokens(SHAPING_SRC, PRESETS['Shape Up']);
+        // The trigger line was "- shape a bet" → "- {{vocab:work_package.verb_start}} a {{vocab:work_package.singular}}"
+        // After render with Shape Up: "- shape a Bet"
+        expect(rendered).toContain('shape a Bet');
+    });
+    it('Generic: verb_start resolves to "start" (trigger line in shaping.md)', () => {
+        const rendered = replaceVocabTokens(SHAPING_SRC, PRESETS['Generic']);
+        // After render with Generic: "- start a Initiative"
+        expect(rendered).toContain('start a Initiative');
+    });
+    it('Linear: verb_start resolves to "begin" (trigger line in shaping.md)', () => {
+        const rendered = replaceVocabTokens(SHAPING_SRC, PRESETS['Linear']);
+        // verb_start="begin" for Linear
+        // The "shape a bet" trigger → "begin a Issue"
+        expect(rendered).toContain('begin a Issue');
+    });
+    it('verb_complete inline fixture: each preset resolves correctly', () => {
+        // No "ship a bet" literal appeared in skills, so test verb_complete via an inline fixture.
+        const fixture = 'To {{vocab:work_package.verb_complete}} a {{vocab:work_package.singular}}, all slices must pass review.';
+        expect(replaceVocabTokens(fixture, PRESETS['Shape Up'])).toBe('To ship a Bet, all slices must pass review.');
+        expect(replaceVocabTokens(fixture, PRESETS['Generic'])).toBe('To complete a Initiative, all slices must pass review.');
+        expect(replaceVocabTokens(fixture, PRESETS['Linear'])).toBe('To archive a Issue, all slices must pass review.');
+    });
+});
+//# sourceMappingURL=skill-vocabulary.test.js.map

package/dist/__tests__/skill-vocabulary.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-vocabulary.test.js","sourceRoot":"","sources":["../../src/__tests__/skill-vocabulary.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAA0B,MAAM,yBAAyB,CAAC;AAErF,iFAAiF;AAEjF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AAExG,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,iFAAiF;AAEjF,MAAM,OAAO,GAAsC;IACjD,UAAU,EAAE;QACV,gBAAgB,EAAE;YAChB,YAAY,EAAE;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,OAAO;gBACnB,aAAa,EAAE,MAAM;gBACrB,YAAY,EAAE,SAAS;aACxB;SACF;KACF;IACD,SAAS,EAAE;QACT,gBAAgB,EAAE;YAChB,YAAY,EAAE;gBACZ,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,aAAa;gBACrB,UAAU,EAAE,OAAO;gBACnB,aAAa,EAAE,UAAU;gBACzB,YAAY,EAAE,OAAO;aACtB;SACF;KACF;IACD,QAAQ,EAAE;QACR,gBAAgB,EAAE;YAChB,YAAY,EAAE;gBACZ,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,OAAO;gBACnB,aAAa,EAAE,SAAS;gBACxB,YAAY,EAAE,SAAS;aACxB;SACF;KACF;CACF,CAAC;AAEF,iFAAiF;AAEjF;;;GAGG;AACH,SAAS,iBAAiB,CAAC,QAAgB,EAAE,WAAmB;IAC9D,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,iCAAiC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,GAAG,WAAW,kDAAkD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CAAC,QAAgB,EAAE,MAAc,EAAE,GAAsB;IAClF,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,EAAE,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,EAAE,YAAY,EAAE,MAAM,IAAI,EAAE,CAAC;IAEhE,kFAAkF;IAClF,sFAAsF;IACtF,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,sFAAsF;QACtF,sFAAsF;QACtF,iFAAiF;QACjF,+FAA+F;QAC/F,MAAM,gBAAgB,GAAG,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,gBAAgB,EAAE,GAAG,MAAM,+DAA+D,CAAC;aAC/F,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,yFAAyF;IACzF,mDAAmD;IACnD,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;IAEnD,+DAA+D;IAC/D,uFAAuF;IACvF,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;IACzE,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,iDAAiD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AACxH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,uDAAuD;IACvD,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,+BAA+B;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,gFAAgF;AAEhF,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;AACzC,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;AACzC,MAAM,UAAU,GAAG,SAAS,CAAC,uBAAuB,CAAC,CAAC;AAEtD,iFAAiF;AAEjF,MAAM,cAAc,GAAG;IACrB,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE;IACrC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE;IACrC,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,UAAU,EAAE;CACnD,CAAC;AAEF,KAAK,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,cAAc,EAAE,CAAC;IACtD,QAAQ,CAAC,UAAU,SAAS,EAAE,EAAE,GAAG,EAAE;QACnC,KAAK,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,EAAE,CAAC,mCAAmC,UAAU,EAAE,EAAE,GAAG,EAAE;gBACvD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,WAAW,GAAG,GAAG,SAAS,MAAM,UAAU,EAAE,CAAC;gBAEnD,yCAAyC;gBACzC,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAEzC,yFAAyF;gBACzF,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,EAAE,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;gBACpE,MAAM,CAAC,QAAQ,EAAE,GAAG,WAAW,8DAA8D,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAE9H,wEAAwE;gBACxE,kBAAkB,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,kFAAkF;AAClF,EAAE;AACF,6FAA6F;AAC7F,kFAAkF;AAClF,mFAAmF;AAEnF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACtE,iHAAiH;QACjH,8CAA8C;QAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACrE,oDAAoD;QACpD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpE,gCAAgC;QAChC,8CAA8C;QAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,2FAA2F;QAC3F,MAAM,OAAO,GAAG,yGAAyG,CAAC;QAE1H,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3D,6CAA6C,CAC9C,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAC1D,wDAAwD,CACzD,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CACzD,kDAAkD,CACnD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/update-check.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=update-check.test.d.ts.map

package/dist/__tests__/update-check.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/update-check.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/update-check.test.js

@@ -0,0 +1,56 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+const files = new Map();
+vi.mock('node:os', () => ({
+    homedir: () => '/mock-home',
+}));
+vi.mock('node:fs', async () => ({
+    existsSync: (path) => files.has(path),
+    readFileSync: (path) => files.get(path) ?? '',
+    writeFileSync: (path, body) => { files.set(path, body); },
+    mkdirSync: vi.fn(),
+    unlinkSync: (path) => { files.delete(path); },
+}));
+import { clearPendingUpgradeCache, isNewer, recordServerLatest, readCachedLatestVersion, writeUpgradePendingSentinel, } from '../lib/update-check.js';
+import { setOutputMode } from '../lib/runner.js';
+describe('update-check', () => {
+    const originalEnv = { ...process.env };
+    beforeEach(() => {
+        files.clear();
+        process.env = { ...originalEnv };
+        setOutputMode('auto');
+        vi.clearAllMocks();
+    });
+    afterEach(() => {
+        process.env = { ...originalEnv };
+        setOutputMode('auto');
+        vi.restoreAllMocks();
+    });
+    it('compares prerelease channels by alpha < beta < rc < release', () => {
+        expect(isNewer('0.1.0-beta.32', '0.1.0-beta.108')).toBe(true);
+        expect(isNewer('0.1.0-beta.5', '0.1.0-rc.1')).toBe(true);
+        expect(isNewer('0.1.0-rc.1', '0.1.0-beta.5')).toBe(false);
+        expect(isNewer('0.1.0-rc.1', '0.1.0')).toBe(true);
+    });
+    it('recordServerLatest updates cache silently in JSON mode', () => {
+        setOutputMode('json');
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        recordServerLatest('0.1.0-beta.109');
+        expect(readCachedLatestVersion()).toBe('0.1.0-beta.109');
+        expect(stderrSpy).not.toHaveBeenCalled();
+    });
+    it('PB_NO_VERSION_CHECK disables cache writes and output', () => {
+        process.env.PB_NO_VERSION_CHECK = '1';
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        recordServerLatest('0.1.0-beta.109');
+        expect(readCachedLatestVersion()).toBeNull();
+        expect(stderrSpy).not.toHaveBeenCalled();
+    });
+    it('next startup clears upgrade sentinel and stale update cache', () => {
+        recordServerLatest('0.1.0-beta.109');
+        expect(readCachedLatestVersion()).toBe('0.1.0-beta.109');
+        writeUpgradePendingSentinel();
+        clearPendingUpgradeCache();
+        expect(readCachedLatestVersion()).toBeNull();
+    });
+});
+//# sourceMappingURL=update-check.test.js.map

package/dist/__tests__/update-check.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.test.js","sourceRoot":"","sources":["../../src/__tests__/update-check.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY;CAC5B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7C,YAAY,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;IACrD,aAAa,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CACtD,CAAC,CAAC,CAAC;AAEJ,OAAO,EACL,wBAAwB,EACxB,OAAO,EACP,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvC,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;QACtC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEzD,2BAA2B,EAAE,CAAC;QAC9B,wBAAwB,EAAE,CAAC;QAE3B,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/upgrade-runner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=upgrade-runner.test.d.ts.map

package/dist/__tests__/upgrade-runner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-runner.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/upgrade-runner.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/upgrade-runner.test.js

@@ -0,0 +1,42 @@
+import { EventEmitter } from 'node:events';
+import { describe, expect, it, vi, beforeEach } from 'vitest';
+const spawnMock = vi.fn();
+vi.mock('node:child_process', () => ({
+    spawn: (...args) => spawnMock(...args),
+}));
+vi.mock('../lib/telemetry.js', () => ({
+    trackEvent: vi.fn(),
+}));
+vi.mock('../lib/update-check.js', () => ({
+    writeUpgradePendingSentinel: vi.fn(),
+}));
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { buildUpgradeCommand, detectInstallChannel, spawnUpgrade } from '../lib/upgrade-runner.js';
+describe('upgrade-runner', () => {
+    beforeEach(() => {
+        spawnMock.mockReset();
+    });
+    it('detects package-manager channels from execPath fixtures', () => {
+        expect(detectInstallChannel('/Users/r/.local/share/pnpm/node', {})).toBe('pnpm');
+        expect(detectInstallChannel('/opt/yarn/bin/node', {})).toBe('yarn');
+        expect(detectInstallChannel('/Users/r/.bun/bin/bun', {})).toBe('bun');
+        expect(detectInstallChannel('/opt/homebrew/Cellar/node/25/bin/node', {})).toBe('brew');
+        expect(detectInstallChannel('/usr/local/lib/node_modules/npm/bin/node', {})).toBe('npm');
+    });
+    it('builds beta upgrade commands instead of @latest', () => {
+        expect(buildUpgradeCommand('npm').display).toBe('npm install -g @productbrain/cli@beta');
+        expect(buildUpgradeCommand('unknown').display).toBe('npm install -g @productbrain/cli@beta');
+        expect(buildUpgradeCommand('pnpm').args).toEqual(['add', '-g', '@productbrain/cli@beta']);
+    });
+    it('throws UPGRADE_FAILED on spawn failure', async () => {
+        const child = new EventEmitter();
+        child.stdout = new EventEmitter();
+        child.stderr = new EventEmitter();
+        spawnMock.mockReturnValue(child);
+        const promise = spawnUpgrade('npm');
+        child.emit('error', Object.assign(new Error('spawn npm ENOENT'), { code: 'ENOENT' }));
+        await expect(promise).rejects.toBeInstanceOf(CLIError);
+        await expect(promise).rejects.toMatchObject({ code: ErrorCode.UPGRADE_FAILED });
+    });
+});
+//# sourceMappingURL=upgrade-runner.test.js.map

package/dist/__tests__/upgrade-runner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-runner.test.js","sourceRoot":"","sources":["../../src/__tests__/upgrade-runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAE1B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CAClD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;CACpB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE;CACrC,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEnG,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,CAAC,SAAS,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,oBAAoB,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,oBAAoB,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,oBAAoB,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,oBAAoB,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACzF,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC7F,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,KAAK,GAAG,IAAI,YAAY,EAAmE,CAAC;QAClG,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEtF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/vocabulary-leak.test.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Vocabulary leak test — WP-436 S2 + TEN-2053 S2 (PAT-229, DEC-1021).
+ *
+ * Asserts two classes of regression are absent from user-facing CLI/MCP output:
+ *
+ *   1. **Workspace-vocab leaks** (`bet`/`BET`) — caught when the workspace
+ *      vocabulary is overridden to non-bet labels. Any literal "bet"/"BET"
+ *      outside stored entry IDs means a label resolver was bypassed.
+ *
+ *   2. **Stale governance-ID leaks** (TEN-2053 S2) — bare governance-ID
+ *      prefixes without digits (e.g. typo'd "STD-" with no number, or
+ *      "DEC-foo"). Stored entry IDs (`STD-113`, `DEC-1021`, etc.) are
+ *      stripped BEFORE the leak check, so legitimate IDs don't false-
+ *      positive. We do NOT treat Product Brain Method vocabulary as a leak
+ *      (`Chain`, `Constellation`, `SSOT`, `shaping`, `handoff`, `gates`,
+ *      `verdict`, `blocking`, `advisory` are the product — not jargon).
+ *      The real leak class is OUR entry IDs (specific to our team's chain)
+ *      surfacing in customer-facing output.
+ *
+ * Coverage:
+ *   ALL_FIXTURES × { formatOrient, formatOrientBrief, formatSearchResults,
+ *                    formatCaptureReceipt, formatAudit (PASS/FAIL/verbose) }
+ *   plus runOrient end-to-end command wiring.
+ *
+ * MCP-side note: the MCP markdown response in
+ * `packages/mcp-server/src/tools/audit.ts:handleAuditRun` is structurally
+ * identical to `formatAudit` here — kept in sync by manual review; no
+ * dedicated MCP audit test currently exists (`find packages/mcp-server -name
+ * "*.test.ts" -path "*audit*"` returns empty as of TEN-2053 S2).
+ *
+ * Whitelist: stored entry IDs matching /\b[A-Z]+-\d+\b/ (e.g. WP-436, BET-42,
+ * DEC-1021) are stripped before the leak check — they're stable database
+ * references, not vocabulary labels.
+ *
+ * Perf: fixture workspaces are seeded purely in-memory (no Convex, no HTTP).
+ * BET-241: no fixture has >100 entries.
+ */
+export {};
+//# sourceMappingURL=vocabulary-leak.test.d.ts.map

package/dist/__tests__/vocabulary-leak.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary-leak.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/vocabulary-leak.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG"}