@productbrain/cli 0.1.0-beta.99 → 0.1.0-beta.997

package/dist/__tests__/update-check.test.js

@@ -0,0 +1,215 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+const files = new Map();
+// Controllable npm registry response for resolveLatestVersion's live fetch. `null` => the
+// request yields an empty body (JSON.parse fails) so fetchLatestVersion resolves null.
+let npmResponseVersion = null;
+vi.mock('node:os', () => ({
+    homedir: () => '/mock-home',
+}));
+vi.mock('node:https', () => ({
+    request: (_url, _opts, cb) => {
+        const res = {
+            on: (event, handler) => {
+                if (event === 'data' && npmResponseVersion !== null) {
+                    handler(Buffer.from(JSON.stringify({ version: npmResponseVersion })));
+                }
+                if (event === 'end')
+                    handler();
+                return res;
+            },
+        };
+        cb(res);
+        const req = { on: () => req, setTimeout: () => req, destroy: () => { }, end: () => { } };
+        return req;
+    },
+}));
+vi.mock('node:fs', async () => ({
+    existsSync: (path) => files.has(path),
+    readFileSync: (path) => files.get(path) ?? '',
+    writeFileSync: (path, body) => { files.set(path, body); },
+    mkdirSync: vi.fn(),
+    unlinkSync: (path) => { files.delete(path); },
+    statSync: () => ({ mtimeMs: Date.now() }),
+    readdirSync: () => [...files.keys()].map((p) => p.split('/').pop()),
+    openSync: (path) => { if (files.has(path)) {
+        const e = new Error('EEXIST');
+        e.code = 'EEXIST';
+        throw e;
+    } files.set(path, ''); return 1; },
+    closeSync: vi.fn(),
+}));
+vi.mock('../lib/session.js', () => ({ readSession: () => ({ sessionId: 'sess-test' }) }));
+import { clearPendingUpgradeCache, isNewer, recordServerLatest, readCachedLatestVersion, writeUpgradePendingSentinel, recordNpmLatest, resolveCachedLatest, resolveLatestVersion, checkForUpdate, _resetProcessGuardsForTest, } from '../lib/update-check.js';
+import { setOutputMode } from '../lib/runner.js';
+describe('update-check', () => {
+    const originalEnv = { ...process.env };
+    beforeEach(() => {
+        _resetProcessGuardsForTest();
+        files.clear();
+        npmResponseVersion = null;
+        process.env = { ...originalEnv };
+        setOutputMode('auto');
+        vi.clearAllMocks();
+    });
+    afterEach(() => {
+        process.env = { ...originalEnv };
+        setOutputMode('auto');
+        vi.restoreAllMocks();
+    });
+    it('compares prerelease channels by alpha < beta < rc < release', () => {
+        expect(isNewer('0.1.0-beta.32', '0.1.0-beta.108')).toBe(true);
+        expect(isNewer('0.1.0-beta.5', '0.1.0-rc.1')).toBe(true);
+        expect(isNewer('0.1.0-rc.1', '0.1.0-beta.5')).toBe(false);
+        expect(isNewer('0.1.0-rc.1', '0.1.0')).toBe(true);
+    });
+    it('recordServerLatest updates cache silently in JSON mode', () => {
+        setOutputMode('json');
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        recordServerLatest('0.1.0-beta.109');
+        expect(readCachedLatestVersion()).toBe('0.1.0-beta.109');
+        expect(stderrSpy).not.toHaveBeenCalled();
+    });
+    it('PB_NO_VERSION_CHECK disables cache writes and output', () => {
+        process.env.PB_NO_VERSION_CHECK = '1';
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        recordServerLatest('0.1.0-beta.109');
+        expect(readCachedLatestVersion()).toBeNull();
+        expect(stderrSpy).not.toHaveBeenCalled();
+    });
+    it('next startup clears upgrade sentinel and stale update cache', () => {
+        recordServerLatest('0.1.0-beta.109');
+        expect(readCachedLatestVersion()).toBe('0.1.0-beta.109');
+        writeUpgradePendingSentinel();
+        clearPendingUpgradeCache();
+        expect(readCachedLatestVersion()).toBeNull();
+    });
+    it('newest of fresh server/npm wins; server still wins only when it is the highest', () => {
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // (value, installed)
+        recordServerLatest('0.1.0-beta.130'); // fresh server, but LOWER than npm
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.140'); // npm wins — server no longer masks a newer npm
+    });
+    it('a fresh server that LAGS npm cannot mask the true npm latest (TEN-2199 smoke-walk regression)', () => {
+        // The live failure mode: server header advertises the committed cliVersion.ts value (beta.108),
+        // which trails the run-numbered npm publish (beta.958). Newest-wins must surface 958, not 108.
+        recordNpmLatest('0.1.0-beta.958', '0.1.0-beta.109');
+        recordServerLatest('0.1.0-beta.108'); // fresh but stale-valued, < installed
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.958');
+    });
+    it('server still wins when it is genuinely the newest source', () => {
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        recordServerLatest('0.1.0-beta.145'); // fresh server, HIGHER than npm
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.145');
+    });
+    it('npm wins when the server header is stale (>48h)', () => {
+        const realNow = Date.now;
+        recordServerLatest('0.1.0-beta.130');
+        Date.now = () => realNow() + 49 * 60 * 60 * 1000;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.140');
+        Date.now = realNow;
+    });
+    it('npm fallback is isNewer-gated against installed (never records older-or-equal)', () => {
+        recordNpmLatest('0.1.0-beta.1', '0.1.0-beta.109'); // stale tag, older than installed
+        expect(resolveCachedLatest()).toBeNull();
+    });
+    it('prints an update line to stderr in JSON mode (agent), once', () => {
+        setOutputMode('json');
+        recordServerLatest('0.1.0-beta.140');
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.109');
+        checkForUpdate('0.1.0-beta.109'); // same session => silent second time
+        expect(stderrSpy).toHaveBeenCalledTimes(1);
+        expect(stderrSpy.mock.calls[0][0]).toContain('pb:');
+        expect(stderrSpy.mock.calls[0][0]).toContain('pb upgrade');
+    });
+    it('prints nothing to stdout (stdout stays bare JSON)', () => {
+        setOutputMode('json');
+        recordServerLatest('0.1.0-beta.140');
+        const stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.109');
+        expect(stdoutSpy).not.toHaveBeenCalled();
+    });
+    it('cold cache → no print', () => {
+        setOutputMode('json');
+        const spy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.109');
+        expect(spy).not.toHaveBeenCalled();
+    });
+    it('sentinel records the installed version and suppresses re-notify for it', () => {
+        setOutputMode('json');
+        recordServerLatest('0.1.0-beta.140');
+        writeUpgradePendingSentinel('0.1.0-beta.140'); // just installed 140
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.140'); // running 140, latest 140 -> no notice
+        expect(stderrSpy).not.toHaveBeenCalled();
+    });
+    it('resolveLatestVersion serves a within-window npm fallback without refetching (P2)', async () => {
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // fresh (recordedAt = now)
+        npmResponseVersion = '0.1.0-beta.999'; // would win IF a fetch happened
+        const latest = await resolveLatestVersion('0.1.0-beta.109');
+        expect(latest).toBe('0.1.0-beta.140'); // fresh cache used, no network refresh
+    });
+    it('a lone fresh server header still triggers a live npm fetch — server-only cache is not trusted (P1)', async () => {
+        // Normal steady state: authenticated calls write a fresh server header, but the hot path never
+        // populates npm. If the server lags npm (108 vs 958), the live resolver must fetch npm rather
+        // than short-circuit on the server value, or pb doctor/upgrade would resolve the masked 108.
+        recordServerLatest('0.1.0-beta.108'); // fresh server only; no npm cache entry
+        npmResponseVersion = '0.1.0-beta.958'; // live npm is far newer
+        const latest = await resolveLatestVersion('0.1.0-beta.109');
+        expect(latest).toBe('0.1.0-beta.958'); // fetched + surfaced, not the masked server 108
+    });
+    it('resolveLatestVersion revalidates a stale npm fallback via a fresh fetch (P2)', async () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // recordedAt = now
+        Date.now = () => realNow() + 25 * 60 * 60 * 1000; // past the 24h npm window
+        npmResponseVersion = '0.1.0-beta.141'; // registry now serves a newer beta
+        try {
+            const latest = await resolveLatestVersion('0.1.0-beta.109');
+            expect(latest).toBe('0.1.0-beta.141'); // refreshed, not the stale 140
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+    it('successful revalidation replaces a stale cache even when the live tag is not newer (P2)', async () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // seed npm cache at 140
+        Date.now = () => realNow() + 25 * 60 * 60 * 1000; // age it past the 24h window
+        npmResponseVersion = '0.1.0-beta.142'; // registry now points lower than installed
+        try {
+            // Installed is 145 (post-upgrade). The live tag (142) is <= installed, so recordNpmLatest
+            // refuses to overwrite — but the resolver must return the live truth (142), NOT the disproven
+            // stale 140 it would otherwise fall back to.
+            const latest = await resolveLatestVersion('0.1.0-beta.145');
+            expect(latest).toBe('0.1.0-beta.142');
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+    it('falls back to a stale cached value only on fetch failure (offline backstop)', async () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        Date.now = () => realNow() + 25 * 60 * 60 * 1000; // stale npm entry
+        npmResponseVersion = null; // registry unreachable → fetch resolves null
+        try {
+            const latest = await resolveLatestVersion('0.1.0-beta.109');
+            expect(latest).toBe('0.1.0-beta.140'); // offline → stale cache is better than nothing
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+    it('hot-path resolveCachedLatest still returns a stale npm value (better than nothing)', () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        Date.now = () => realNow() + 100 * 60 * 60 * 1000; // far past every freshness window
+        try {
+            expect(resolveCachedLatest()).toBe('0.1.0-beta.140'); // sync hot path never blocks/forgets
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+});
+//# sourceMappingURL=update-check.test.js.map

package/dist/__tests__/update-check.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.test.js","sourceRoot":"","sources":["../../src/__tests__/update-check.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AACxC,0FAA0F;AAC1F,uFAAuF;AACvF,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY;CAC5B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,IAAa,EAAE,KAAc,EAAE,EAA0B,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG;YACV,EAAE,EAAE,CAAC,KAAa,EAAE,OAAgC,EAAE,EAAE;gBACtD,IAAI,KAAK,KAAK,MAAM,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;oBACpD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,IAAI,KAAK,KAAK,KAAK;oBAAE,OAAO,EAAE,CAAC;gBAC/B,OAAO,GAAG,CAAC;YACb,CAAC;SACF,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,CAAC;QACR,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;QACvF,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7C,YAAY,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;IACrD,aAAa,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACzC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACnE,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,GAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC;QAAC,MAAM,CAAC,CAAC;IAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvJ,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;CACnB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAE1F,OAAO,EACL,wBAAwB,EACxB,OAAO,EACP,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvC,UAAU,CAAC,GAAG,EAAE;QACd,0BAA0B,EAAE,CAAC;QAC7B,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;QACtC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEzD,2BAA2B,EAAE,CAAC;QAC9B,wBAAwB,EAAE,CAAC;QAE3B,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAG,qBAAqB;QAC5E,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAmB,mCAAmC;QAC3F,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAG,gDAAgD;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,gGAAgG;QAChG,+FAA+F;QAC/F,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAmB,sCAAsC;QAC9F,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAmB,gCAAgC;QACxF,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACjD,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC,kCAAkC;QACrF,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,qCAAqC;QAEvE,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7E,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC,qBAAqB;QACpE,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAc,uCAAuC;QACtF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,2BAA2B;QAChF,kBAAkB,GAAG,gBAAgB,CAAC,CAAe,gCAAgC;QACrF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAe,uCAAuC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;QAClH,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAG,wCAAwC;QAChF,kBAAkB,GAAG,gBAAgB,CAAC,CAAE,wBAAwB;QAChE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAE,gDAAgD;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,mBAAmB;QACxE,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAI,0BAA0B;QAC/E,kBAAkB,GAAG,gBAAgB,CAAC,CAAe,mCAAmC;QACxF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAa,+BAA+B;QACpF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,wBAAwB;QAC7E,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAK,6BAA6B;QACnF,kBAAkB,GAAG,gBAAgB,CAAC,CAAgB,2CAA2C;QACjG,IAAI,CAAC;YACH,0FAA0F;YAC1F,8FAA8F;YAC9F,6CAA6C;YAC7C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAK,kBAAkB;QACxE,kBAAkB,GAAG,IAAI,CAAC,CAA4B,6CAA6C;QACnG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAc,+CAA+C;QACrG,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAG,kCAAkC;QACvF,IAAI,CAAC;YACH,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,qCAAqC;QAC7F,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/upgrade-runner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=upgrade-runner.test.d.ts.map

package/dist/__tests__/upgrade-runner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-runner.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/upgrade-runner.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/upgrade-runner.test.js

@@ -0,0 +1,54 @@
+import { EventEmitter } from 'node:events';
+import { describe, expect, it, vi, beforeEach } from 'vitest';
+const spawnMock = vi.fn();
+vi.mock('node:child_process', () => ({
+    spawn: (...args) => spawnMock(...args),
+}));
+vi.mock('../lib/telemetry.js', () => ({
+    trackEvent: vi.fn(),
+}));
+vi.mock('../lib/update-check.js', () => ({
+    writeUpgradePendingSentinel: vi.fn(),
+}));
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { buildUpgradeCommand, detectInstallChannel, spawnUpgrade } from '../lib/upgrade-runner.js';
+describe('upgrade-runner', () => {
+    beforeEach(() => {
+        spawnMock.mockReset();
+    });
+    it('detects package-manager channels from execPath fixtures', () => {
+        expect(detectInstallChannel('/Users/r/.local/share/pnpm/node', {})).toBe('pnpm');
+        expect(detectInstallChannel('/opt/yarn/bin/node', {})).toBe('yarn');
+        expect(detectInstallChannel('/Users/r/.bun/bin/bun', {})).toBe('bun');
+        expect(detectInstallChannel('/opt/homebrew/Cellar/node/25/bin/node', {})).toBe('brew');
+        expect(detectInstallChannel('/usr/local/lib/node_modules/npm/bin/node', {})).toBe('npm');
+    });
+    it('builds beta upgrade commands instead of @latest', () => {
+        expect(buildUpgradeCommand('npm').display).toBe('npm install -g @productbrain/cli@beta');
+        expect(buildUpgradeCommand('unknown').display).toBe('npm install -g @productbrain/cli@beta');
+        expect(buildUpgradeCommand('pnpm').args).toEqual(['add', '-g', '@productbrain/cli@beta']);
+    });
+    it('throws UPGRADE_FAILED on spawn failure', async () => {
+        const child = new EventEmitter();
+        child.stdout = new EventEmitter();
+        child.stderr = new EventEmitter();
+        spawnMock.mockReturnValue(child);
+        const promise = spawnUpgrade('npm');
+        child.emit('error', Object.assign(new Error('spawn npm ENOENT'), { code: 'ENOENT' }));
+        await expect(promise).rejects.toBeInstanceOf(CLIError);
+        await expect(promise).rejects.toMatchObject({ code: ErrorCode.UPGRADE_FAILED });
+    });
+});
+describe('buildUpgradeCommand version pin', () => {
+    it('pins npm-family channels to the resolved version', () => {
+        expect(buildUpgradeCommand('npm', '0.1.0-beta.140').args).toEqual(['install', '-g', '@productbrain/cli@0.1.0-beta.140']);
+        expect(buildUpgradeCommand('pnpm', '0.1.0-beta.140').args).toContain('@productbrain/cli@0.1.0-beta.140');
+    });
+    it('leaves brew unchanged (no @version)', () => {
+        expect(buildUpgradeCommand('brew', '0.1.0-beta.140').args).toEqual(['upgrade', 'productbrain']);
+    });
+    it('falls back to @beta when no version is resolved', () => {
+        expect(buildUpgradeCommand('npm').args).toEqual(['install', '-g', '@productbrain/cli@beta']);
+    });
+});
+//# sourceMappingURL=upgrade-runner.test.js.map

package/dist/__tests__/upgrade-runner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-runner.test.js","sourceRoot":"","sources":["../../src/__tests__/upgrade-runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAE1B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CAClD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;CACpB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE;CACrC,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEnG,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,CAAC,SAAS,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,oBAAoB,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,oBAAoB,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,oBAAoB,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,oBAAoB,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACzF,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC7F,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,KAAK,GAAG,IAAI,YAAY,EAAmE,CAAC;QAClG,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEtF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,kCAAkC,CAAC,CAAC,CAAC;QACzH,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/upgrade.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=upgrade.test.d.ts.map

package/dist/__tests__/upgrade.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/upgrade.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/upgrade.test.js

@@ -0,0 +1,56 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+const { resolveLatestVersion } = vi.hoisted(() => ({
+    resolveLatestVersion: vi.fn(),
+}));
+vi.mock('../lib/update-check.js', async (orig) => ({
+    ...(await orig()),
+    resolveLatestVersion,
+}));
+import { runUpgrade } from '../commands/upgrade.js';
+import { setOutputMode } from '../lib/runner.js';
+import * as runner from '../lib/upgrade-runner.js';
+describe('runUpgrade anti-downgrade gate', () => {
+    let stdoutSpy;
+    let spawnSpy;
+    beforeEach(() => {
+        stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+        spawnSpy = vi
+            .spyOn(runner, 'spawnUpgrade')
+            .mockResolvedValue({ channel: 'npm', command: 'x', exitCode: 0, output: [] });
+    });
+    afterEach(() => {
+        stdoutSpy.mockRestore();
+        spawnSpy.mockRestore();
+        setOutputMode('auto');
+        resolveLatestVersion.mockReset();
+    });
+    it('no-ops when resolved latest is not newer than current', async () => {
+        setOutputMode('json');
+        resolveLatestVersion.mockResolvedValue('0.1.0-beta.108'); // older than current
+        await runUpgrade({ currentVersion: '0.1.0-beta.109' });
+        const out = stdoutSpy.mock.calls.flat().join('');
+        expect(out).toContain('current');
+        expect(spawnSpy).not.toHaveBeenCalled();
+    });
+    it('never installs a bare @beta tag when latest resolves to null (P1: no downgrade fallback)', async () => {
+        // Stale/unreachable registry → resolveLatestVersion returns null. The old code fell through
+        // to a bare `@productbrain/cli@beta` install, which could downgrade a newer installed CLI.
+        setOutputMode('json');
+        resolveLatestVersion.mockResolvedValue(null);
+        await runUpgrade({ currentVersion: '0.1.0-beta.109' });
+        const out = stdoutSpy.mock.calls.flat().join('');
+        expect(spawnSpy).not.toHaveBeenCalled();
+        // JSON consumers see an explicit "current"/null-latest signal, never an auto-install.
+        expect(out).toContain('"status":"current"');
+        expect(out).toContain('"latest":null');
+    });
+    it('pins the resolved newer version in the JSON upgrade command', async () => {
+        setOutputMode('json');
+        resolveLatestVersion.mockResolvedValue('0.1.0-beta.140'); // strictly newer
+        await runUpgrade({ currentVersion: '0.1.0-beta.109' });
+        const out = stdoutSpy.mock.calls.flat().join('');
+        expect(out).toContain('@productbrain/cli@0.1.0-beta.140');
+        expect(out).toContain('"latest":"0.1.0-beta.140"');
+    });
+});
+//# sourceMappingURL=upgrade.test.js.map

package/dist/__tests__/upgrade.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.test.js","sourceRoot":"","sources":["../../src/__tests__/upgrade.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAgD;CAC5E,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACjD,GAAG,CAAC,MAAM,IAAI,EAA2C,CAAC;IAC1D,oBAAoB;CACrB,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAC;AAEnD,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,IAAI,SAAsC,CAAC;IAC3C,IAAI,QAAqC,CAAC;IAE1C,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7E,QAAQ,GAAG,EAAE;aACV,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC;aAC7B,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAW,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,WAAW,EAAE,CAAC;QACxB,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvB,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,oBAAoB,CAAC,SAAS,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,oBAAoB,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,qBAAqB;QAC/E,MAAM,UAAU,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,4FAA4F;QAC5F,2FAA2F;QAC3F,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,oBAAoB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,UAAU,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,sFAAsF;QACtF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,oBAAoB,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB;QAC3E,MAAM,UAAU,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/vocabulary-leak.test.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Vocabulary leak test — WP-436 S2 + TEN-2053 S2 (PAT-229, DEC-1021).
+ *
+ * Asserts two classes of regression are absent from user-facing CLI/MCP output:
+ *
+ *   1. **Workspace-vocab leaks** (`bet`/`BET`) — caught when the workspace
+ *      vocabulary is overridden to non-bet labels. Any literal "bet"/"BET"
+ *      outside stored entry IDs means a label resolver was bypassed.
+ *
+ *   2. **Stale governance-ID leaks** (TEN-2053 S2) — bare governance-ID
+ *      prefixes without digits (e.g. typo'd "STD-" with no number, or
+ *      "DEC-foo"). Stored entry IDs (`STD-113`, `DEC-1021`, etc.) are
+ *      stripped BEFORE the leak check, so legitimate IDs don't false-
+ *      positive. We do NOT treat Product Brain Method vocabulary as a leak
+ *      (`Chain`, `Constellation`, `SSOT`, `shaping`, `handoff`, `gates`,
+ *      `verdict`, `blocking`, `advisory` are the product — not jargon).
+ *      The real leak class is OUR entry IDs (specific to our team's chain)
+ *      surfacing in customer-facing output.
+ *
+ * Coverage:
+ *   ALL_FIXTURES × { formatOrient, formatOrientBrief, formatSearchResults,
+ *                    formatCaptureReceipt, formatAudit (PASS/FAIL/verbose) }
+ *   plus runOrient end-to-end command wiring.
+ *
+ * MCP-side note: the MCP markdown response in
+ * `packages/mcp-server/src/tools/audit.ts:handleAuditRun` is structurally
+ * identical to `formatAudit` here — kept in sync by manual review; no
+ * dedicated MCP audit test currently exists (`find packages/mcp-server -name
+ * "*.test.ts" -path "*audit*"` returns empty as of TEN-2053 S2).
+ *
+ * Whitelist: stored entry IDs matching /\b[A-Z]+-\d+\b/ (e.g. WP-436, BET-42,
+ * DEC-1021) are stripped before the leak check — they're stable database
+ * references, not vocabulary labels.
+ *
+ * Perf: fixture workspaces are seeded purely in-memory (no Convex, no HTTP).
+ * BET-241: no fixture has >100 entries.
+ */
+export {};
+//# sourceMappingURL=vocabulary-leak.test.d.ts.map

package/dist/__tests__/vocabulary-leak.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary-leak.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/vocabulary-leak.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG"}