@robota-sdk/agent-ui-terminal 3.0.0-beta.85 → 3.0.0-beta.87

package/src/__tests__/pty/flow-2006-deep-link.ptytest.ts

@@ -31,7 +31,9 @@ import { spawnTui } from './pty-driver.js';
 import type { IPtySession } from './pty-driver.js';
 
 const REPO_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '../../../../..');
-const ROBOTA_BIN = join(REPO_ROOT, 'packages/agent-cli/bin/robota.cjs');
+const AGENT_BIN = join(REPO_ROOT, 'packages/agent-cli/bin/agent.cjs');
+const CLI_NAME = 'fixture-agent';
+const PROTOCOL_SCHEME = 'fixture-agent';
 const WAIT_MS = 20_000;
 const CASE_TIMEOUT_MS = 120_000;
 const PROMPT = 'Summarize the README in one sentence';
@@ -42,11 +44,12 @@ interface IFixture {
   trusted: string;
   untrusted: string;
   elsewhere: string;
+  userStateRoot: string;
   env: NodeJS.ProcessEnv;
 }
 
 function writeProviderSettings(home: string): void {
-  const dir = join(home, '.robota');
+  const dir = join(home, 'state');
   mkdirSync(dir, { recursive: true });
   // Skip the first-run welcome: it is an onboarding screen, not what this scenario observes.
   writeFileSync(join(dir, 'onboarded'), new Date().toISOString(), 'utf8');
@@ -68,7 +71,7 @@ function initRepo(path: string, env: NodeJS.ProcessEnv): void {
     execFileSync('git', args, { cwd: path, env, stdio: ['ignore', 'ignore', 'pipe'] });
   };
   run('init', '-q', '-b', 'main');
-  run('config', 'user.name', 'Robota Scenario');
+  run('config', 'user.name', 'Scenario Fixture');
   run('config', 'user.email', 'scenario@example.invalid');
   writeFileSync(join(path, 'README.md'), 'fixture\n');
   run('add', '--', 'README.md');
@@ -76,13 +79,37 @@ function initRepo(path: string, env: NodeJS.ProcessEnv): void {
 }
 
 function makeFixture(): IFixture {
-  const root = realpathSync(mkdtempSync(join(tmpdir(), 'robota-flow2006-')));
+  const root = realpathSync(mkdtempSync(join(tmpdir(), 'agent-flow2006-')));
   const home = join(root, 'home');
   mkdirSync(home, { recursive: true });
   writeProviderSettings(home);
+  const userStateRoot = join(home, 'state');
   const env: NodeJS.ProcessEnv = {
     PATH: process.env['PATH'] ?? '',
     HOME: home,
+    PRODUCT_ID: CLI_NAME,
+    PRODUCT_DISPLAY_NAME: 'Fixture Agent',
+    PRODUCT_CLI_NAME: CLI_NAME,
+    PRODUCT_ENV_PREFIX: 'FIXTURE_AGENT_',
+    PRODUCT_PACKAGE_SCOPE: '@fixture-agent',
+    PRODUCT_APP_ID: 'org.example.fixture-agent',
+    PRODUCT_PROTOCOL_SCHEME: PROTOCOL_SCHEME,
+    PRODUCT_TELEMETRY_SERVICE_NAME: 'fixture-agent',
+    PRODUCT_DAEMON_NAMESPACE: 'fixture-agent-daemon',
+    PRODUCT_DESKTOP_EXECUTABLE: 'fixture-robota',
+    PRODUCT_MCP_CLIENT_NAME: 'fixture-agent-client',
+    PRODUCT_MODEL_TOOL_PREFIX: 'fixture_agent_command_',
+    PRODUCT_PROMPT_TAG: 'fixture_agent_references',
+    PRODUCT_EDITOR_TEMP_PREFIX: 'fixture-agent-editor-',
+    PRODUCT_USER_STATE_DIR: userStateRoot,
+    PRODUCT_PROJECT_STATE_DIR: '.fixture-agent',
+    PRODUCT_CACHE_DIR: join(userStateRoot, 'cache'),
+    PRODUCT_LOG_DIR: join(userStateRoot, 'logs'),
+    PRODUCT_BROWSER_NAMESPACE: 'fixture-agent-browser',
+    PRODUCT_BROWSER_CREDENTIAL_DATABASE: 'fixture-agent-credentials',
+    PRODUCT_CREDENTIAL_SERVICE: 'org.example.fixture-agent.credentials',
+    PRODUCT_CRYPTO_NAMESPACE: 'fixture-agent-crypto',
+    SECURITY_MASTER_KEY_DERIVATION_PATH: '[123,0]',
     TERM: 'xterm-256color',
     GIT_CONFIG_NOSYSTEM: '1',
     GIT_CONFIG_GLOBAL: join(home, 'gitconfig'),
@@ -94,13 +121,14 @@ function makeFixture(): IFixture {
     trusted: join(root, 'trusted'),
     untrusted: join(root, 'untrusted'),
     elsewhere: join(root, 'elsewhere'),
+    userStateRoot,
     env,
   };
   initRepo(fixture.trusted, env);
   initRepo(fixture.untrusted, env);
   mkdirSync(fixture.elsewhere, { recursive: true });
   // Grant trust to the one repository a link is allowed to open.
-  const granted = spawnSync(process.execPath, [ROBOTA_BIN, 'trust', '--yes'], {
+  const granted = spawnSync(process.execPath, [AGENT_BIN, 'trust', '--yes'], {
     cwd: fixture.trusted,
     env,
     encoding: 'utf8',
@@ -110,16 +138,16 @@ function makeFixture(): IFixture {
 }
 
 function link(fixture: IFixture, extra = ''): string {
-  return `robota://open?v=1&prompt=${encodeURIComponent(PROMPT)}&cwd=${fixture.trusted}${extra}`;
+  return `${PROTOCOL_SCHEME}://open?v=1&prompt=${encodeURIComponent(PROMPT)}&cwd=${fixture.trusted}${extra}`;
 }
 
-/** Run `robota open <url>` as a process, headless — used for the refusal scenarios. */
+/** Run the fixture CLI's `open` command as a process, headless — used for the refusal scenarios. */
 function openHeadless(
   fixture: IFixture,
   url: string,
   cwd = fixture.elsewhere,
 ): ReturnType<typeof spawnSync> {
-  return spawnSync(process.execPath, [ROBOTA_BIN, 'open', url], {
+  return spawnSync(process.execPath, [AGENT_BIN, 'open', url], {
     cwd,
     env: { ...fixture.env, TERM: 'dumb' },
     encoding: 'utf8',
@@ -134,7 +162,7 @@ function openHeadless(
  */
 function sessionRecords(home: string): readonly string[] {
   try {
-    return readdirSync(join(home, '.robota', 'peers')).sort();
+    return readdirSync(join(home, 'state', 'peers')).sort();
   } catch {
     return [];
   }
@@ -143,7 +171,7 @@ function sessionRecords(home: string): readonly string[] {
 /** The trust store's bytes — a refused link must not add, remove or touch a grant. */
 function trustStoreDigest(home: string): string {
   return createHash('sha256')
-    .update(readFileSync(join(home, '.robota', 'workspace-trust.json')))
+    .update(readFileSync(join(home, 'state', 'workspace-trust.json')))
     .digest('hex');
 }
 
@@ -155,19 +183,19 @@ function malformedLinks(fixture: IFixture): readonly (readonly [string, string])
   return [
     [link(fixture, '&provider=anthropic'), 'provider'],
     [link(fixture, `&prompt=${encodeURIComponent('second')}`), 'more than once'],
-    [`robota://open?prompt=hi&cwd=${fixture.trusted}`, 'no `v`'],
-    [`robota://open?v=2&prompt=hi&cwd=${fixture.trusted}`, 'version 1'],
+    [`${PROTOCOL_SCHEME}://open?prompt=hi&cwd=${fixture.trusted}`, 'no `v`'],
+    [`${PROTOCOL_SCHEME}://open?v=2&prompt=hi&cwd=${fixture.trusted}`, 'version 1'],
     [
-      `robota://open?v=1&prompt=${encodeURIComponent('/mode bypassPermissions')}&cwd=${fixture.trusted}`,
+      `${PROTOCOL_SCHEME}://open?v=1&prompt=${encodeURIComponent('/mode bypassPermissions')}&cwd=${fixture.trusted}`,
       'not a command',
     ],
-    ['robota://open?v=1&prompt=hi&cwd=relative/path', 'absolute'],
-    [`robota://open?v=1&prompt=hi&cwd=${fixture.trusted}/../untrusted`, '`..`'],
-    [`robota://open?v=1&prompt=hi&cwd=${join(fixture.root, 'absent')}`, 'does not exist'],
+    [`${PROTOCOL_SCHEME}://open?v=1&prompt=hi&cwd=relative/path`, 'absolute'],
+    [`${PROTOCOL_SCHEME}://open?v=1&prompt=hi&cwd=${fixture.trusted}/../untrusted`, '`..`'],
+    [`${PROTOCOL_SCHEME}://open?v=1&prompt=hi&cwd=${join(fixture.root, 'absent')}`, 'does not exist'],
   ];
 }
 
-describe('robota open through the real binary (FLOW-2006 TC-09)', () => {
+describe('configured open deep link through the CLI binary (FLOW-2006 TC-09)', () => {
   let fixture: IFixture | undefined;
   let session: IPtySession | undefined;
 
@@ -191,6 +219,7 @@ describe('robota open through the real binary (FLOW-2006 TC-09)', () => {
         projectDir: current.elsewhere,
         homeDir: current.home,
         args: ['open', link(current), '--name', 'flow2006'],
+        env: current.env as Record<string, string>,
       });
 
       // The PREFILLED TEXT is the arrival signal, not the empty-composer placeholder (which never
@@ -227,7 +256,7 @@ describe('robota open through the real binary (FLOW-2006 TC-09)', () => {
       const current = fixture;
       if (!current) throw new Error('fixture');
       const recordsBefore = sessionRecords(current.home);
-      const settingsBefore = readFileSync(join(current.home, '.robota', 'settings.json'), 'utf8');
+      const settingsBefore = readFileSync(join(current.userStateRoot, 'settings.json'), 'utf8');
       const cases = malformedLinks(current);
       for (const [url, expected] of cases) {
         const result = openHeadless(current, url);
@@ -238,7 +267,7 @@ describe('robota open through the real binary (FLOW-2006 TC-09)', () => {
       // A SECOND LINK after the first is refused — the argv-appending shape the platforms document.
       const twoArgs = spawnSync(
         process.execPath,
-        [ROBOTA_BIN, 'open', link(current), link(current)],
+        [AGENT_BIN, 'open', link(current), link(current)],
         {
           cwd: current.elsewhere,
           env: { ...current.env, TERM: 'dumb' },
@@ -251,7 +280,7 @@ describe('robota open through the real binary (FLOW-2006 TC-09)', () => {
       // Nothing was started and nothing was configured: no session record appeared, and the
       // settings the `/mode bypassPermissions` link tried to reach are byte-identical.
       expect(sessionRecords(current.home)).toEqual(recordsBefore);
-      expect(readFileSync(join(current.home, '.robota', 'settings.json'), 'utf8')).toBe(
+      expect(readFileSync(join(current.userStateRoot, 'settings.json'), 'utf8')).toBe(
         settingsBefore,
       );
     },
@@ -266,19 +295,19 @@ describe('robota open through the real binary (FLOW-2006 TC-09)', () => {
       const digestBefore = trustStoreDigest(current.home);
       const untrusted = openHeadless(
         current,
-        `robota://open?v=1&prompt=hi&cwd=${current.untrusted}`,
+        `${PROTOCOL_SCHEME}://open?v=1&prompt=hi&cwd=${current.untrusted}`,
       );
       expect(untrusted.status).toBe(1);
-      expect(`${untrusted.stderr}`).toContain('robota trust --yes');
+      expect(`${untrusted.stderr}`).toContain(`${CLI_NAME} trust --yes`);
 
-      const slug = openHeadless(current, 'robota://open?v=1&prompt=hi&repo=nobody/not-a-clone');
+      const slug = openHeadless(current, `${PROTOCOL_SCHEME}://open?v=1&prompt=hi&repo=nobody/not-a-clone`);
       expect(slug.status).toBe(1);
       expect(`${slug.stderr}`).toContain('nobody/not-a-clone');
       expect(`${slug.stderr}`).not.toContain('cloning');
 
       // A refused link grants nothing and records nothing: the untrusted repository is still
       // untrusted and the store is byte-identical to what it was before the two invocations.
-      const status = spawnSync(process.execPath, [ROBOTA_BIN, 'trust', 'status'], {
+      const status = spawnSync(process.execPath, [AGENT_BIN, 'trust', 'status'], {
         cwd: current.untrusted,
         env: current.env,
         encoding: 'utf8',

package/src/__tests__/pty/ime-cursor-tmux.ptytest.ts

@@ -3,31 +3,46 @@
  *
  * Every other cell reads the cursor out of the byte stream our own VT interpreter replays. tmux is
  * a full, independent terminal emulator that can be driven headlessly AND queried: it runs the
- * built robota binary in a real pane, receives the Korean keystrokes through its own input path,
+ * built CLI binary in a real pane, receives the Korean keystrokes through its own input path,
  * and then reports where ITS state machine put the hardware cursor
  * (`#{cursor_x}` / `#{cursor_y}` / `#{cursor_flag}`). That makes this the strongest available
  * confirmation short of macOS hardware: a second implementation agrees the cursor sits on the
  * input row at the composition column — which is the cell an OS IME anchors its window to.
  *
- * Skipped when tmux is not installed; `ROBOTA_TMUX_BIN` overrides the binary. GitHub's ubuntu
+ * Skipped when tmux is not installed; `PRODUCT_TMUX_BIN` overrides the binary. GitHub's ubuntu
  * runner images ship tmux, so this runs in CI rather than quietly evaporating there.
  */
 
 import { execFileSync, spawnSync } from 'node:child_process';
-import { chmodSync, mkdirSync, mkdtempSync, rmSync, writeFileSync, realpathSync } from 'node:fs';
+import {
+  chmodSync,
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  rmSync,
+  writeFileSync,
+  realpathSync,
+} from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join, resolve } from 'node:path';
 
 import { afterEach, beforeEach, describe, expect, it } from 'vitest';
 
+import { fixtureProductEnvironment } from './isolated-home.js';
+
 const REPO_ROOT = resolve(__dirname, '../../../../..');
-const ROBOTA_BIN = join(REPO_ROOT, 'packages/agent-cli/bin/robota.cjs');
+const AGENT_BIN = join(REPO_ROOT, 'packages/agent-cli/bin/agent.cjs');
+const GIT_BIN =
+  (process.env['PATH'] ?? '/usr/bin:/bin')
+    .split(':')
+    .map((directory) => join(directory, 'git'))
+    .find((candidate) => existsSync(candidate)) ?? '/usr/bin/git';
 const COLS = 80;
 const COMPOSITION = '안녕';
 const COMPOSITION_WIDTH = 4;
 
 function resolveTmux(): string | undefined {
-  const override = process.env['ROBOTA_TMUX_BIN'];
+  const override = process.env['PRODUCT_TMUX_BIN'];
   if (override !== undefined && override !== '') return override;
   const which = spawnSync('sh', ['-c', 'command -v tmux'], { encoding: 'utf8' });
   const found = which.stdout.trim();
@@ -49,14 +64,16 @@ interface ITmuxRun {
   socket: string;
 }
 
-/** Run robota inside a real tmux pane and ask tmux where the cursor ended up. */
+/** Run the CLI inside a real tmux pane and ask tmux where the cursor ended up. */
 function runInTmux(run: ITmuxRun, rows: number, imeCursor: string | undefined): ITmuxProbe {
   const tmux = TMUX!;
   const projectDir = join(run.root, 'proj');
   const homeDir = join(run.root, 'home');
-  mkdirSync(join(homeDir, '.robota'), { recursive: true });
+  mkdirSync(projectDir, { recursive: true });
+  mkdirSync(join(homeDir, 'state'), { recursive: true });
+  writeFileSync(join(homeDir, 'state/onboarded'), new Date().toISOString(), 'utf8');
   writeFileSync(
-    join(homeDir, '.robota/settings.json'),
+    join(homeDir, 'state/settings.json'),
     JSON.stringify({
       currentProvider: 'anthropic',
       providers: {
@@ -69,14 +86,42 @@ function runInTmux(run: ITmuxRun, rows: number, imeCursor: string | undefined):
   // A wrapper keeps the pane's env explicit (never inheriting real provider keys) while letting
   // tmux itself set TERM/TERM_PROGRAM for the pane — the handshake under test.
   const wrapper = join(run.root, 'wrap.sh');
-  const imeAssignment = imeCursor === undefined ? '' : `ROBOTA_IME_CURSOR=${imeCursor} `;
+  const imeAssignment = imeCursor === undefined ? '' : `PRODUCT_IME_CURSOR=${imeCursor} `;
+  const productAssignments = Object.entries(fixtureProductEnvironment(homeDir))
+    .map(([key, value]) => `${key}='${value.replaceAll("'", "'\\''")}'`)
+    .join(' ');
+  const fixtureEnv = {
+    PATH: process.env['PATH'] || '/usr/bin:/bin:/opt/homebrew/bin',
+    HOME: homeDir,
+    ...fixtureProductEnvironment(homeDir),
+  };
+  execFileSync(GIT_BIN, ['init', '-q', '-b', 'main'], { cwd: projectDir });
+  execFileSync(
+    GIT_BIN,
+    [
+      '-c',
+      'user.name=PTY Fixture',
+      '-c',
+      'user.email=pty@example.invalid',
+      'commit',
+      '--allow-empty',
+      '-q',
+      '-m',
+      'fixture',
+    ],
+    { cwd: projectDir, env: fixtureEnv },
+  );
+  execFileSync(process.execPath, [AGENT_BIN, 'trust', '--yes'], {
+    cwd: projectDir,
+    env: fixtureEnv,
+  });
   writeFileSync(
     wrapper,
     [
       '#!/bin/sh',
       `cd "${projectDir}"`,
-      `exec env -i PATH="$PATH" HOME="${homeDir}" TERM="$TERM" TERM_PROGRAM="$TERM_PROGRAM" ${imeAssignment}` +
-        `"${process.execPath}" "${ROBOTA_BIN}" --name tmux-fixture`,
+      `exec env -i PATH="$PATH" HOME="${homeDir}" TERM="$TERM" TERM_PROGRAM="$TERM_PROGRAM" ${productAssignments} ${imeAssignment}` +
+        `"${process.execPath}" "${AGENT_BIN}" --name tmux-fixture`,
       '',
     ].join('\n'),
     'utf8',
@@ -95,7 +140,7 @@ function runInTmux(run: ITmuxRun, rows: number, imeCursor: string | undefined):
     if (pane.includes('Type a message')) break;
     sleepSync(250);
   }
-  expect(pane, 'robota never reached the prompt inside tmux').toContain('Type a message');
+  expect(pane, 'the CLI never reached the prompt inside tmux').toContain('Type a message');
   sleepSync(400);
 
   tmuxCall('send-keys', '-l', COMPOSITION);
@@ -127,7 +172,7 @@ describe.skipIf(TMUX === undefined)(
     let run: ITmuxRun;
 
     beforeEach(() => {
-      const root = realpathSync(mkdtempSync(join(tmpdir(), 'robota-tmux-ime-')));
+      const root = realpathSync(mkdtempSync(join(tmpdir(), 'agent-tmux-ime-')));
       run = { root, socket: join(root, 'sock') };
     });
 
@@ -154,7 +199,7 @@ describe.skipIf(TMUX === undefined)(
       expect(probe.cursorVisible).toBe(false);
     }, 90_000);
 
-    it('ROBOTA_IME_CURSOR=0 kill switch: tmux reports the cursor hidden even at 24 rows', () => {
+    it('PRODUCT_IME_CURSOR=0 kill switch: tmux reports the cursor hidden even at 24 rows', () => {
       const probe = runInTmux(run, 24, '0');
       const inputRow = probe.pane.findIndex((line) => line.includes(`> ${COMPOSITION}`));
       expect(inputRow).toBeGreaterThanOrEqual(0);

package/src/__tests__/pty/ime-cursor.ptytest.ts

@@ -1,7 +1,7 @@
 /**
  * CLI-062 — PTY regression for real-terminal-cursor positioning (the OS-IME evidence).
  *
- * Runs the BUILT robota binary in a real pseudo-terminal and interprets the raw ANSI stream the
+ * Runs the BUILT CLI binary in a real pseudo-terminal and interprets the raw ANSI stream the
  * way a terminal emulator (and the OS IME) does. Two geometries from the implementation contract
  * (.design/investigations/2026-07-25-cli-062-ime-cursor-design.md):
  *
@@ -105,7 +105,7 @@ describe('CLI-062 — IME hardware-cursor positioning through a real PTY', () =>
   let session: IPtySession | undefined;
 
   beforeEach(() => {
-    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'robota-pty-ime-')));
+    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'agent-pty-ime-')));
     writeTuiProviderSettings(projectDir);
   });
 
@@ -132,7 +132,7 @@ describe('CLI-062 — IME hardware-cursor positioning through a real PTY', () =>
  * PROVES, per cell: the built binary's observable cursor contract under exactly the environment
  * that terminal exports — positioned on the input row when the capability gate says yes, and no
  * cursor shown at all when it says no (Terminal.app's default-off I5 branch, and the
- * `ROBOTA_IME_CURSOR=0` kill switch).
+ * `PRODUCT_IME_CURSOR=0` kill switch).
  *
  * DOES NOT PROVE, for a `documented` row: anything about that emulator's own rendering, its
  * pre-edit display, or its OS IME. Terminal.app's historical Korean-IME SIGSEGV in particular is
@@ -145,7 +145,7 @@ describe('CLI-062 terminal matrix — observable cursor contract per terminal',
   let session: IPtySession | undefined;
 
   beforeEach(() => {
-    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'robota-pty-ime-matrix-')));
+    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'agent-pty-ime-matrix-')));
     writeTuiProviderSettings(projectDir);
   });
 

package/src/__tests__/pty/isolated-home.ts

@@ -2,7 +2,7 @@
  * Isolated HOME for PTY children (HARNESS-025).
  *
  * A PTY test that forwards the developer's real `HOME` runs its child against whatever happens to
- * be in that home directory — a `~/.robota` settings file, a shell rc, an `$EDITOR` preference.
+ * be in that home directory — a `~/state` settings file, a shell rc, an `$EDITOR` preference.
  * The suite then passes or fails depending on the machine it runs on: green on CI (empty HOME),
  * red on a developer box whose real config contradicts the fixture. That is the conditional flake
  * this module removes.
@@ -29,11 +29,11 @@ function installExitHook(): void {
 /**
  * Create a throwaway HOME directory for a PTY child and return its absolute path.
  *
- * The directory is empty: the child sees no `~/.robota`, no shell rc, no user preferences. Callers
+ * The directory is empty: the child sees no `~/state`, no shell rc, no user preferences. Callers
  * that need seeded content write it themselves after creating the directory.
  */
 export function createIsolatedHome(): string {
-  const dir = mkdtempSync(join(tmpdir(), 'robota-pty-home-'));
+  const dir = mkdtempSync(join(tmpdir(), 'agent-pty-home-'));
   createdHomes.push(dir);
   installExitHook();
   return dir;
@@ -55,10 +55,43 @@ export function disposeIsolatedHomes(): void {
  * visible at the call site. Pass `overrides` for anything else the fixture needs (e.g. `EDITOR`).
  */
 export function createPtyEnv(overrides: Readonly<NodeJS.ProcessEnv> = {}): NodeJS.ProcessEnv {
+  const home = typeof overrides.HOME === 'string' ? overrides.HOME : createIsolatedHome();
   return {
     PATH: process.env['PATH'] ?? '',
-    HOME: createIsolatedHome(),
+    HOME: home,
     TERM: 'xterm-256color',
+    ...fixtureProductEnvironment(home),
     ...overrides,
   };
 }
+
+/** Product identity and state roots for the compiled CLI's isolated PTY fixtures. */
+export function fixtureProductEnvironment(home: string): Record<string, string> {
+  const id = 'fixture-agent';
+  const stateRoot = join(home, 'state');
+  return {
+    PRODUCT_ID: id,
+    PRODUCT_DISPLAY_NAME: 'Fixture Agent',
+    PRODUCT_CLI_NAME: id,
+    PRODUCT_ENV_PREFIX: 'FIXTURE_AGENT_',
+    PRODUCT_PACKAGE_SCOPE: '@fixture-agent',
+    PRODUCT_APP_ID: 'org.example.fixture-agent',
+    PRODUCT_PROTOCOL_SCHEME: id,
+    PRODUCT_TELEMETRY_SERVICE_NAME: `${id}.agent`,
+    PRODUCT_DAEMON_NAMESPACE: `${id}.daemon`,
+    PRODUCT_DESKTOP_EXECUTABLE: `${id}-runtime`,
+    PRODUCT_MCP_CLIENT_NAME: `${id}-client`,
+    PRODUCT_MODEL_TOOL_PREFIX: 'fixture_agent_command_',
+    PRODUCT_PROMPT_TAG: 'fixture_agent_references',
+    PRODUCT_EDITOR_TEMP_PREFIX: `${id}-editor-`,
+    PRODUCT_USER_STATE_DIR: stateRoot,
+    PRODUCT_PROJECT_STATE_DIR: '.fixture-agent',
+    PRODUCT_CACHE_DIR: join(stateRoot, 'cache'),
+    PRODUCT_LOG_DIR: join(stateRoot, 'logs'),
+    PRODUCT_BROWSER_NAMESPACE: `${id}.browser`,
+    PRODUCT_BROWSER_CREDENTIAL_DATABASE: `${id}-credentials`,
+    PRODUCT_CREDENTIAL_SERVICE: `org.example.${id}.credentials`,
+    PRODUCT_CRYPTO_NAMESPACE: `${id}.crypto`,
+    SECURITY_MASTER_KEY_DERIVATION_PATH: '[123,0]',
+  };
+}

package/src/__tests__/pty/org-policy.ptytest.ts

@@ -1,7 +1,7 @@
 /**
  * Real-PTY organization-policy engineering regression scenario (CLI-083).
  *
- * Drives the built Robota CLI with an isolated HOME. Nothing injects a policy object into the
+ * Drives the built Fixture Agent CLI with an isolated HOME. Nothing injects a policy object into the
  * command module: the refusal can only come from the shipped `loadOrgPolicy()` startup path. The
  * update check is disabled so this isolated scenario performs no startup network request.
  */
@@ -17,7 +17,7 @@ import { spawnTui } from './pty-driver.js';
 import type { IPtySession } from './pty-driver.js';
 
 function writeOrgPolicyFixture(homeDir: string): void {
-  const settingsDir = join(homeDir, '.robota');
+  const settingsDir = join(homeDir, 'state');
   mkdirSync(settingsDir, { recursive: true });
   writeFileSync(
     join(settingsDir, 'settings.json'),
@@ -43,7 +43,7 @@ describe('organization policy through the built CLI (CLI-083)', () => {
   let session: IPtySession | undefined;
 
   beforeEach(() => {
-    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'robota-pty-org-policy-')));
+    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'agent-pty-org-policy-')));
     homeDir = join(projectDir, 'home');
     writeOrgPolicyFixture(homeDir);
   });

package/src/__tests__/pty/provider-setup.ptytest.ts

@@ -1,7 +1,7 @@
 /**
  * Real-PTY provider-setup ask suite (CMD-004 TC-09 done-gate).
  *
- * Drives the BUILT robota binary through `/provider add` so the unified ask seam renders end-to-end on
+ * Drives the BUILT CLI binary through `/provider add` so the unified ask seam renders end-to-end on
  * a real terminal: the provider command self-asks (via the injected `askHandler` → `TuiInteractionChannel.askUser`)
  * and the TUI renders the request through `PendingActionPrompt`. Proves the masked secret field hides
  * the typed API key on the real CLI — the User Execution evidence the done-gate requires (no human
@@ -26,7 +26,7 @@ describe('provider setup ask through a real PTY (CMD-004 TC-09)', () => {
   let session: IPtySession | undefined;
 
   beforeEach(() => {
-    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'robota-pty-provider-')));
+    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'agent-pty-provider-')));
     writeTuiProviderSettings(projectDir);
   });
 

package/src/__tests__/pty/pty-driver.ts

@@ -1,7 +1,7 @@
 /**
  * PTY TUI driver (CLI-074 TC-07/08).
  *
- * Built-CLI convenience over the shared `spawnPty` harness (TEST-007): spawns the built robota CLI in
+ * Built-CLI convenience over the shared `spawnPty` harness (TEST-007): spawns the built CLI in
  * a real pseudo-terminal so Ink renders exactly as in a user terminal, with per-key paced input
  * (expect(1)-style burst input gets bundled as a bracketed paste — the failure mode this driver
  * exists to avoid). Test-only; lives in a dedicated vitest project (*.ptytest.ts).
@@ -11,17 +11,18 @@ import { mkdirSync, writeFileSync } from 'node:fs';
 import { join, resolve } from 'node:path';
 
 import { spawnPty } from './spawn-pty.js';
+import { fixtureProductEnvironment } from './isolated-home.js';
 
 import type { IPtyRunSession } from './spawn-pty.js';
 
 const REPO_ROOT = resolve(__dirname, '../../../../..');
-const ROBOTA_BIN = join(REPO_ROOT, 'packages/agent-cli/bin/robota.cjs');
+const AGENT_BIN = join(REPO_ROOT, 'packages/agent-cli/bin/agent.cjs');
 
 /**
  * Signal the PTY child and await its ACTUAL exit before the caller removes the project dir.
  * `dispose()` sends SIGTERM (then SIGKILL after the grace window) but returns synchronously;
  * `expectExit()` resolves once the child has exited and **throws** if it has not within the timeout.
- * Awaiting this closes the INFRA-026 race where a dying child writes `<projectDir>/.robota` between
+ * Awaiting this closes the INFRA-026 race where a dying child writes under the selected state root between
  * `rmSync`'s readdir and rmdir. A child that refuses to die fails the test loudly — the exit is awaited
  * at the source, never masked by a removal fallback.
  * Extracted so the compose is unit-testable with a fake session.
@@ -69,7 +70,7 @@ export interface IPtySession {
    * Teardown that awaits ACTUAL child exit: signals the PTY child (`kill()`/`dispose()`) then awaits
    * `expectExit`, which resolves once the child has exited and **throws** if it has not within the
    * timeout (default ≥ the SIGTERM→SIGKILL grace). Await this before removing the project dir so the
-   * dying child cannot write `<projectDir>/.robota` between `rmSync`'s readdir and rmdir (INFRA-026).
+   * dying child cannot write under the selected state root between `rmSync`'s readdir and rmdir (INFRA-026).
    */
   disposeAsync(timeoutMs?: number): Promise<void>;
 }
@@ -95,7 +96,7 @@ export function writeTuiProviderSettings(projectDir: string): void {
   // ARCH-042: a capabilityless built CLI is Restricted and must not read project settings. PTY
   // fixtures therefore configure the host-owned user layer under the same isolated HOME that
   // `spawnTui` derives from the fixture root.
-  const settingsDir = join(projectDir, 'home', '.robota');
+  const settingsDir = join(projectDir, 'home', 'state');
   mkdirSync(settingsDir, { recursive: true });
   writeFileSync(
     join(settingsDir, 'settings.json'),
@@ -121,12 +122,13 @@ export function spawnTui(options: ISpawnTuiOptions): IPtySession {
 
   const session: IPtyRunSession = spawnPty({
     command: process.execPath,
-    args: [ROBOTA_BIN, ...defaultedArgs],
+    args: [AGENT_BIN, ...defaultedArgs],
     cwd: options.projectDir,
     env: {
       PATH: process.env['PATH'] ?? '',
       HOME: options.homeDir,
       TERM: 'xterm-256color',
+      ...fixtureProductEnvironment(options.homeDir),
       // Never inherit real provider keys into PTY runs.
       ...(options.env ?? {}),
     },

package/src/__tests__/pty/replay-conversation.ptytest.ts

@@ -1,7 +1,7 @@
 /**
  * INFRA-018: deterministic conversation through the real binary via `--session-log` (replay).
  *
- * Runs in the PTY vitest project against the BUILT robota CLI. Boots with
+ * Runs in the PTY vitest project against the BUILT CLI. Boots with
  * `--session-log <fixture>` so the INFRA-017 ReplayProvider answers from a recorded log (no model
  * key, no network), sends a user message, and asserts the recorded assistant response renders and
  * commits to `<Static>` scrollback while the input stays pinned — closing SCREEN-010 TC-02/03
@@ -30,7 +30,7 @@ describe('replay conversation through the real binary (INFRA-018)', () => {
   let session: IPtySession | undefined;
 
   beforeEach(() => {
-    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'robota-replay-pty-')));
+    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'agent-replay-pty-')));
     writeTuiProviderSettings(projectDir); // dummy provider profile so the CLI boots; key never used
   });
 

package/src/__tests__/pty/screen-005-prompt-footers.ptytest.ts

@@ -1,6 +1,6 @@
 /**
  * SCREEN-005 User Execution Test Scenarios — prompt footers and key-hint affordance on the BUILT
- * robota binary in a real PTY (run by `test:pty`; requires `pnpm build:deps` first).
+ * CLI binary in a real PTY (run by `test:pty`; requires `pnpm build:deps` first).
  *
  * Scenario 1: `/` opens the autocomplete → unified footer + `> ` indicator on the selected row.
  * Scenario 2: a replayed model turn drives a CMD-004 ask in each shape (single-select,
@@ -41,7 +41,7 @@ describe('SCREEN-005 prompt footers through the real binary', () => {
   let session: IPtySession | undefined;
 
   beforeEach(() => {
-    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'robota-screen005-pty-')));
+    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'agent-screen005-pty-')));
     writeTuiProviderSettings(projectDir);
   });
 

package/src/__tests__/pty/screen-006-no-color.ptytest.ts

@@ -1,6 +1,6 @@
 /**
  * SCREEN-006 User Execution Test Scenarios — color/motion degradation and palette-token colors on
- * the BUILT robota binary in a real PTY (run by `test:pty`; requires `pnpm build:deps` first).
+ * the BUILT CLI binary in a real PTY (run by `test:pty`; requires `pnpm build:deps` first).
  *
  * Scenario 1 (NO_COLOR legibility): `NO_COLOR=1` through a replayed conversation → the raw pty
  *   transcript contains ZERO SGR color sequences (30-38/40-48/90-97/100-107 params, incl. 38;5 /
@@ -60,7 +60,7 @@ describe('SCREEN-006 color/motion through the real binary', () => {
   let session: IPtySession | undefined;
 
   beforeEach(() => {
-    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'robota-screen006-pty-')));
+    projectDir = realpathSync(mkdtempSync(join(tmpdir(), 'agent-screen006-pty-')));
     writeTuiProviderSettings(projectDir);
   });
 
@@ -126,9 +126,9 @@ describe('SCREEN-006 color/motion through the real binary', () => {
     // eslint-disable-next-line no-control-regex -- asserting on raw SGR escape bytes by design
     expect(raw).toMatch(/\x1b\[32m[^\x1b]*✓ Shell/);
 
-    // Assistant label renders the accent token (cyan → ESC[36m ... "Robota:").
+    // Assistant label renders the accent token (cyan → ESC[36m ... "Fixture Agent:").
     // eslint-disable-next-line no-control-regex -- asserting on raw SGR escape bytes by design
-    expect(raw).toMatch(/\x1b\[36m(?:\x1b\[[0-9;]*m)*Robota:/);
+    expect(raw).toMatch(/\x1b\[36m(?:\x1b\[[0-9;]*m)*Fixture Agent:/);
 
     // Markdown diff block carries the resolved theme's SGR pair (added line: light green on a dark
     // green background) — SCREEN-2002 moved the values into the theme, the bytes are unchanged.