@wenathlan/getry 2.0.166 → 2.0.168

package/test/familyseats.test.ts

@@ -0,0 +1,220 @@
+// # familyseats.test — the two family seats battery (runnable with the
+// vitest runner):
+//   pnpm vitest run test/familyseats.test.ts
+//
+// The laws the battery pins (the owner's rules, the two gateway/account
+// lane seats):
+//  1. the gateway ports law (law 39 — "Gateway proxy ports: host/porta
+//     sorteados, never localhost literal", beside the anti localhost law
+//     the corpus records — "random host octets, port drawn from the
+//     cryptographic band 30000 to 59999"): the gateway boot never answers
+//     a literal host or port — the env pin rides when the env carries one,
+//     otherwise the port draws inside the documented cryptographic band
+//     (30000..59999, the saddle orchestrator grammar crypto.randomInt(30000)
+//     + 30000) and the host draws inside the loopback band 127.x.y.z with
+//     three drawn octets; the retired literal fallbacks (the || 3001 chain,
+//     the "0.0.0.0" host) answer nowhere in the gateway lane sources;
+//  2. the one signup law (law 40 — "One signup family-wide (guest identity
+//     never deleted)", beside the family sharing law the corpus records —
+//     "one signup and one account recognized in every app... the guest
+//     identity born on the first visit and never deleted"): the family
+//     carries ONE signup lane (the vault person's door, POST
+//     /api/v1/auth/signup over signupAccount in vault/account.ts) and the
+//     visitor identity rows ride zero delete lanes family-wide — the
+//     onboarding lanes upsert seen-wins (ON CONFLICT(visitor) DO UPDATE)
+//     and no sweep, retention or cleanup ever deletes the guest.
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import { drawgatewayhost, drawgatewayport, gatewayportband, resolvegatewaybind } from "../binddraw.ts";
+
+/** the monorepo root resolved from this test file location. */
+const monoreporoot = join(dirname(fileURLToPath(import.meta.url)), "..", "..");
+
+/** the family app roots (the deploy units the law names). */
+const FAMILYROOTS = [
+  "argan",
+  "cadria",
+  "cobaia",
+  "debonair",
+  "devthink",
+  "forge",
+  "foundry",
+  "getry",
+  "saddle",
+  "stealthhead",
+  "vault",
+];
+
+/** the walks the source scan skips (the tests-are-exempt law rides the
+ * test fixtures, the build ghosts never ride the tree). */
+const SKIPNAMES = new Set(["node_modules", "dist", "build", "test", "tests", ".git"]);
+
+/** walks every .ts/.tsx source under one app root (skips the exempt lanes). */
+function walksources(relroot: string): string[] {
+  const out: string[] = [];
+  const walk = (absdir: string): void => {
+    for (const entry of readdirSync(absdir)) {
+      const abs = join(absdir, entry);
+      const st = statSync(abs);
+      if (st.isDirectory()) {
+        if (SKIPNAMES.has(entry)) continue;
+        walk(abs);
+      } else if ((entry.endsWith(".ts") || entry.endsWith(".tsx")) && !entry.endsWith(".d.ts")) {
+        out.push(abs);
+      }
+    }
+  };
+  walk(join(monoreporoot, relroot));
+  return out;
+}
+
+/** reads one repo file as text (repo-root relative). */
+function source(relative: string): string {
+  return readFileSync(join(monoreporoot, relative), "utf8");
+}
+
+describe("the gateway ports law (host/porta sorteados, never localhost literal)", () => {
+  it("draws the port inside the documented cryptographic band 30000..59999", () => {
+    const draws = new Set<number>();
+    for (let i = 0; i < 400; i += 1) {
+      const port = drawgatewayport();
+      expect(port).toBeGreaterThanOrEqual(gatewayportband.first);
+      expect(port).toBeLessThanOrEqual(gatewayportband.last);
+      draws.add(port);
+    }
+    // the band answers a real draw, not a degenerate constant
+    expect(draws.size).toBeGreaterThanOrEqual(100);
+  });
+
+  it("draws the host inside the loopback band 127.x.y.z with three drawn octets", () => {
+    const draws = new Set<string>();
+    for (let i = 0; i < 200; i += 1) {
+      const host = drawgatewayhost();
+      const match = host.match(/^127\.(\d+)\.(\d+)\.(\d+)$/);
+      expect(match, `the drawn host ${host} rides 127.a.b.c`).not.toBeNull();
+      if (!match) continue;
+      for (const octet of match.slice(1)) {
+        const value = Number(octet);
+        expect(value).toBeGreaterThanOrEqual(1);
+        expect(value).toBeLessThanOrEqual(254);
+      }
+      draws.add(host);
+    }
+    expect(draws.size).toBeGreaterThanOrEqual(50);
+  });
+
+  it("rides the env pin when the env carries one (the pin is a pin, never a literal)", () => {
+    const pinned = resolvegatewaybind("41234", "127.9.9.9");
+    expect(pinned.port).toBe(41234);
+    expect(pinned.hostname).toBe("127.9.9.9");
+    expect(pinned.portdrawn).toBe(false);
+    expect(pinned.hostdrawn).toBe(false);
+    // an env value the operator set rides verbatim — the law bans the source
+    // literal fallback, never the operator's own pin
+    const operatorpin = resolvegatewaybind("3001", undefined);
+    expect(operatorpin.port).toBe(3001);
+    expect(operatorpin.portdrawn).toBe(false);
+    expect(operatorpin.hostdrawn).toBe(true);
+  });
+
+  it("draws when the env stays silent or lies (empty, zero, negative, junk)", () => {
+    for (const [portenv, hostenv] of [
+      [undefined, undefined],
+      ["", ""],
+      ["   ", "   "],
+      ["0", undefined],
+      ["-1", ""],
+      ["abc", undefined],
+    ] as const) {
+      const drawn = resolvegatewaybind(portenv, hostenv);
+      expect(drawn.portdrawn, `PORT=${String(portenv)} must not pin`).toBe(true);
+      expect(drawn.port).toBeGreaterThanOrEqual(gatewayportband.first);
+      expect(drawn.port).toBeLessThanOrEqual(gatewayportband.last);
+      expect(drawn.hostdrawn, `HOST=${String(hostenv)} must not pin`).toBe(true);
+      expect(drawn.hostname).toMatch(/^127\.\d+\.\d+\.\d+$/);
+    }
+  });
+
+  it("carries no literal bind fallback in the gateway lane sources", () => {
+    const servertxt = source("getry/server.ts");
+    expect(servertxt, "the transport main retired the || 3001 chain").not.toMatch(/\|\|\s*3001/);
+    expect(servertxt, "the transport main retired the 0.0.0.0 host").not.toContain('"0.0.0.0"');
+    expect(servertxt, "the transport main rides the drawn bind resolver").toContain("resolvegatewaybind(");
+    const clitxt = source("getry/cli.ts");
+    expect(clitxt, "the console serve seat retired the || 3001 chain").not.toMatch(/\|\|\s*3001/);
+    expect(clitxt, "the console serve seat retired the 0.0.0.0 host").not.toContain('"0.0.0.0"');
+    const bindtxt = source("getry/binddraw.ts");
+    expect(bindtxt, "the draw rides node:crypto randomInt").toContain('from "node:crypto"');
+    expect(bindtxt, "the port draw names the documented band").toMatch(/30000/);
+    // the localhost literal answers nowhere in the gateway boot lane
+    for (const file of ["getry/server.ts", "getry/cli.ts", "getry/binddraw.ts"]) {
+      expect(source(file), `${file} carries no localhost bind literal`).not.toMatch(/localhost:\d+/);
+    }
+  });
+
+  it("keeps the oauth callback seat on the os draw (port 0, env pin)", () => {
+    const oauthtxt = source("getry/oauth.ts");
+    expect(oauthtxt, "the callback server asks the os for the port").toMatch(/server\.listen\(0,/);
+    expect(oauthtxt, "the callback pin rides the env, never a literal").toContain("OAUTH_CALLBACK_PORT");
+    expect(oauthtxt, "the callback host rides the env loopback, never 0.0.0.0").not.toContain('"0.0.0.0"');
+  });
+});
+
+describe("the one signup law (one signup family-wide, the guest identity never deleted)", () => {
+  it("carries one signup lane — the vault person's door, and no sibling mounts one", () => {
+    const routestxt = source("vault/routes.ts");
+    expect(routestxt, "the one signup door rides the vault route table").toContain('signup: "/api/v1/auth/signup"');
+    const accounttxt = source("vault/account.ts");
+    expect(accounttxt, "the signup account lane lives in the vault account seat").toContain(
+      "export function signupAccount(",
+    );
+    expect(accounttxt, "the signup http door answers the route").toMatch(/POST \/api\/v1\/auth\/signup/);
+    // no sibling carries the signup lane (the walk answers only vault files)
+    const carriers: string[] = [];
+    for (const root of FAMILYROOTS) {
+      for (const file of walksources(root)) {
+        const text = readFileSync(file, "utf8");
+        if (text.includes("signupAccount") || text.includes("/api/v1/auth/signup")) carriers.push(file);
+      }
+    }
+    const strangers = carriers.filter((file) => !file.replaceAll("\\", "/").includes("/vault/"));
+    expect(strangers, `only vault carries the signup lane — strangers answered: ${strangers.join(", ")}`).toEqual([]);
+  });
+
+  it("upserts the visitor identity seen-wins — born on the first write, never replayed", () => {
+    expect(source("vault/db.ts"), "the vault onboarding lane upserts").toMatch(/ON CONFLICT\(visitor\) DO UPDATE SET/);
+    expect(source("vault/onboardingstore.ts"), "the onboarding store lane upserts").toMatch(
+      /ON CONFLICT\(visitor\) DO UPDATE SET/,
+    );
+    expect(source("getry/db.ts"), "the getry onboarding lane upserts").toMatch(/ON CONFLICT\(visitor\) DO UPDATE/);
+    expect(source("vault/db.ts"), "the visitor row rides the platform db").toMatch(
+      /CREATE TABLE IF NOT EXISTS onboarding_states/,
+    );
+  });
+
+  it("carries zero delete lanes against the visitor and person identity rows family-wide", () => {
+    // the identity rows: the visitor's onboarding_states and the person's
+    // accounts — no source in the family ever deletes them
+    const identitydelete = /DELETE\s+FROM\s+(IF\s+EXISTS\s+)?"?(onboarding_states|accounts|visitors|visitor)"?\b/i;
+    const carriers: string[] = [];
+    for (const root of FAMILYROOTS) {
+      for (const file of walksources(root)) {
+        const text = readFileSync(file, "utf8");
+        if (identitydelete.test(text)) carriers.push(file);
+      }
+    }
+    expect(carriers, `the guest identity never deletes — carriers answered: ${carriers.join(", ")}`).toEqual([]);
+  });
+
+  it("keeps the sweep lanes honest — the retention clock plans, it never deletes an identity", () => {
+    const retentiontxt = source("vault/retention.ts");
+    expect(retentiontxt, "the retention engine is a pure plan").not.toMatch(/\bDELETE\s+FROM\b/i);
+    expect(retentiontxt, "the retention clock never rides an identity lane").not.toMatch(/visitor|account/i);
+    const objectstxt = source("vault/objects.ts");
+    expect(objectstxt, "the object sweep never rides an identity lane").not.toMatch(
+      /DELETE\s+FROM\s+"?(onboarding_states|accounts)/i,
+    );
+  });
+});

package/{tests → test}/gateway.test.ts

@@ -889,9 +889,9 @@ describe("hardcoded provider url scan of the source tree", () => {
     const outsidescan = new Set([...gatewaysources, "providers.ts", "gateway.ts", "types.ts"]);
     for (const entry of await readdir(root))
       if (entry.endsWith(".ts") && !outsidescan.has(entry)) files.push(join(root, entry));
-    for (const entry of await readdir(join(root, "tests")))
+    for (const entry of await readdir(join(root, "test")))
       if (entry.endsWith(".ts") && !entry.endsWith(".test.ts") && entry !== "reviewedorigins.ts")
-        files.push(join(root, "tests", entry));
+        files.push(join(root, "test", entry));
     expect(files.length).toBeGreaterThan(40);
     const providerhosts = [
       /api\.openai\.com/,

package/{tests → test}/gatewayversions.test.ts

@@ -6,7 +6,7 @@
  * through the thinking seat. the suite pins its own DATABASE_URL before the
  * db import so the mirror opens its own seat (one writer per wal file — the
  * SQLITE_BUSY lesson). runnable with vitest:
- *   pnpm vitest run tests/gatewayversions.test.ts
+ *   pnpm vitest run test/gatewayversions.test.ts
  */
 import assert from "node:assert/strict";
 import { mkdtempSync, rmSync } from "node:fs";

package/{tests → test}/intelligence.test.ts

@@ -5,7 +5,7 @@
 // provenance and metrics domain rides its new owner — the battery
 // answers the same contracts the engine suite once pinned: the rag
 // chunking, the retrieval provenance and the token budget trio).
-// runnable with vitest: pnpm vitest run tests/intelligence.test.ts
+// runnable with vitest: pnpm vitest run test/intelligence.test.ts
 import assert from "node:assert/strict";
 import { describe, it } from "vitest";
 import {

package/{tests → test}/keyrotation.test.ts

@@ -3,7 +3,7 @@
  * the health-aware round-robin of nextkeyrow (the pr19 key rotation law —
  * never expose keys, rotation periods, per-provider health) beside the
  * masking discipline the render paths owe. runnable with vitest:
- *   pnpm vitest run tests/keyrotation.test.ts
+ *   pnpm vitest run test/keyrotation.test.ts
  */
 import assert from "node:assert/strict";
 import { describe, it } from "vitest";

package/{tests → test}/onboardingstate.test.ts

@@ -1,7 +1,7 @@
 // # onboardingstate.test — the pure contract of the seen flags: the host
 //   validation of the platform base (https only, public hosts only, mapped
 //   ipv6 normalized) and the seen-wins stage merge the accessor and the
-//   pages share. runnable with vitest: pnpm vitest run tests/onboardingstate.test.ts
+//   pages share. runnable with vitest: pnpm vitest run test/onboardingstate.test.ts
 import assert from "node:assert/strict";
 import { describe, it } from "vitest";
 import { hostallowed, mergeStage } from "../onboardingstate.ts";

package/{tests → test}/providerfixtures.ts

@@ -1,6 +1,6 @@
 /** The recorded provider wire fixtures of the gateway family as one dense typescript module: the streams, the completions, the model lists and the tags answer of the four provider shapes (anthropic, gemini, ollama and the openai compatible surface), each export holding the exact original file text of its tests root source. The localhost gateway fixture server serves them over plain http so the adapter suite and the container smoke run the full request cycle offline — no external network, no provider endpoint, no key — and the gateway tests parse the same bodies the stub transports answer. */
 
-/** the anthropic message stream (sse events of the content block delta family) — the exact text of the former tests/anthropic-stream.txt. */
+/** the anthropic message stream (sse events of the content block delta family) — the exact text of the former test/anthropic-stream.txt. */
 export const anthropicstream = `event: message_start
 data: {"type":"message_start","message":{"id":"msg-fixture-1","role":"assistant"}}
 
@@ -24,7 +24,7 @@ data: {"type":"message_stop"}
 
 `;
 
-/** the anthropic completion answer (the stop reason and the usage record) — the exact text of the former tests/anthropic-completion.json. */
+/** the anthropic completion answer (the stop reason and the usage record) — the exact text of the former test/anthropic-completion.json. */
 export const anthropiccompletion = `{
   "id": "msg-fixture-1",
   "type": "message",
@@ -41,7 +41,7 @@ export const anthropiccompletion = `{
 }
 `;
 
-/** the anthropic model list (the fixture claude shapes with their context windows) — the exact text of the former tests/anthropic-models.json. */
+/** the anthropic model list (the fixture claude shapes with their context windows) — the exact text of the former test/anthropic-models.json. */
 export const anthropicmodels = `{
   "data": [
     {
@@ -61,7 +61,7 @@ export const anthropicmodels = `{
 }
 `;
 
-/** the gemini generatecontent stream (the sse quoted-json chunks of the streamed answer) — the exact text of the former tests/gemini-stream.txt. */
+/** the gemini generatecontent stream (the sse quoted-json chunks of the streamed answer) — the exact text of the former test/gemini-stream.txt. */
 export const geministream = `data: {"candidates":[{"content":{"parts":[{"text":"gemini "}],"role":"model"},"index":0}]}
 
 data: {"candidates":[{"content":{"parts":[{"text":"candidate parts "}],"role":"model"},"index":0}]}
@@ -70,7 +70,7 @@ data: {"candidates":[{"content":{"parts":[{"text":"stream"}],"role":"model"},"in
 
 `;
 
-/** the gemini completion answer (the candidates with the finish reason) — the exact text of the former tests/gemini-completion.json. */
+/** the gemini completion answer (the candidates with the finish reason) — the exact text of the former test/gemini-completion.json. */
 export const geminicompletion = `{
   "candidates": [
     {
@@ -86,7 +86,7 @@ export const geminicompletion = `{
 }
 `;
 
-/** the gemini model list (the fixture gemini shapes) — the exact text of the former tests/gemini-models.json. */
+/** the gemini model list (the fixture gemini shapes) — the exact text of the former test/gemini-models.json. */
 export const geminimodels = `{
   "models": [
     {
@@ -106,13 +106,13 @@ export const geminimodels = `{
 }
 `;
 
-/** the ollama chat stream (the ndjson lines of the streamed answer) — the exact text of the former tests/ollama-stream.txt. */
+/** the ollama chat stream (the ndjson lines of the streamed answer) — the exact text of the former test/ollama-stream.txt. */
 export const ollamastream = `{"model":"fixture-local:7b","created_at":"2026-01-01T00:00:00Z","message":{"role":"assistant","content":"the local "},"done":false}
 {"model":"fixture-local:7b","created_at":"2026-01-01T00:00:00Z","message":{"role":"assistant","content":"runtime streams "},"done":false}
 {"model":"fixture-local:7b","created_at":"2026-01-01T00:00:00Z","message":{"role":"assistant","content":"line by line"},"done":true}
 `;
 
-/** the ollama chat completion answer (the message and the done record) — the exact text of the former tests/ollama-completion.json. */
+/** the ollama chat completion answer (the message and the done record) — the exact text of the former test/ollama-completion.json. */
 export const ollamacompletion = `{
   "model": "fixture-local:7b",
   "created_at": "2026-01-01T00:00:00Z",
@@ -126,7 +126,7 @@ export const ollamacompletion = `{
 }
 `;
 
-/** the ollama tags answer (the local model list with sizes and digests) — the exact text of the former tests/ollama-tags.json. */
+/** the ollama tags answer (the local model list with sizes and digests) — the exact text of the former test/ollama-tags.json. */
 export const ollamatags = `{
   "models": [
     {
@@ -161,7 +161,7 @@ export const ollamatags = `{
 }
 `;
 
-/** the openai compatible chat stream (the sse chunks of the streamed answer) — the exact text of the former tests/openaicompat-stream.txt. */
+/** the openai compatible chat stream (the sse chunks of the streamed answer) — the exact text of the former test/openaicompat-stream.txt. */
 export const openaicompatstream = `data: {"id":"chatcmpl-fixture-1","object":"chat.completion.chunk","choices":[{"index":0,"delta":{"role":"assistant","content":"{\\"goal\\":"}}]}
 
 data: {"id":"chatcmpl-fixture-1","object":"chat.completion.chunk","choices":[{"index":0,"delta":{"content":"\\"streamed answer\\","}}]}
@@ -172,7 +172,7 @@ data: [DONE]
 
 `;
 
-/** the openai compatible chat completion answer (the choices with the message and the usage) — the exact text of the former tests/openaicompat-completion.json. */
+/** the openai compatible chat completion answer (the choices with the message and the usage) — the exact text of the former test/openaicompat-completion.json. */
 export const openaicompatcompletion = `{
   "id": "chatcmpl-fixture-1",
   "object": "chat.completion",
@@ -191,7 +191,7 @@ export const openaicompatcompletion = `{
 }
 `;
 
-/** the openai compatible model list (the fixture model shapes) — the exact text of the former tests/openaicompat-models.json. */
+/** the openai compatible model list (the fixture model shapes) — the exact text of the former test/openaicompat-models.json. */
 export const openaicompatmodels = `{
   "object": "list",
   "data": [

package/{tests → test}/researchfixtures.ts

@@ -1,4 +1,4 @@
-/** The public research catalog sources as one dense typescript module: the twelve public github search exports beside the two markdown documents the catalog build derives from them, each export holding the exact original file text of its tests/code source. The exports record source metadata only — the catalog build never downloads or executes repository code — and the markdown documents carry the licensed sample, the method notes and the comparative feature and flow matrix the research review reads. */
+/** The public research catalog sources as one dense typescript module: the twelve public github search exports beside the two markdown documents the catalog build derives from them, each export holding the exact original file text of its test/code source. The exports record source metadata only — the catalog build never downloads or executes repository code — and the markdown documents carry the licensed sample, the method notes and the comparative feature and flow matrix the research review reads. */
 
 /** The public repository metadata of the browser agent search export (one recorded repository), harvested from the public github search index on 2026-08-27 — the exact text of the former reposagent.json. */
 export const reposagent = `[

package/{tests → test}/sandboxmodality.test.ts

@@ -9,7 +9,7 @@
 // modality id pins the seat for the platform's join to validate at
 // dispatch — this module never judges engine vocabulary). runnable with
 // vitest:
-//   pnpm vitest run tests/sandboxmodality.test.ts
+//   pnpm vitest run test/sandboxmodality.test.ts
 import assert from "node:assert/strict";
 import { describe, it } from "vitest";
 import { lanesof } from "@wenathlan/saddle/workloadlaw";

package/gatewayprobe.ts

@@ -1,61 +0,0 @@
-/**
- * gatewayprobe.ts — manual chat round trip against a deployed DevThink
- * gateway (the ZAI sandbox deploy of the getry template). This probe is
- * NOT wired into the deterministic gates: it needs the live network and
- * the deployed host is a runtime setting, never a tracked constant of a
- * gate. Run it by hand with the base URL as the first argument:
- *
- *   node gatewayprobe.ts https://<deployed-gateway-host>
- *
- * The probe exercises the exact surface the Sol chat client consumes:
- * GET /v1/models (the picker) and POST /v1/chat/completions with the
- * model "devthink" (content + reasoning_content on the answer turn).
- */
-
-const base = (process.argv[2] ?? "").replace(/\/+$/, "");
-
-if (!/^https?:\/\//.test(base)) {
-  console.error("usage: node gatewayprobe.ts https://<deployed-gateway-host>");
-  process.exit(1);
-}
-
-/* GET /v1/models — the chat picker surface. */
-const models = await fetch(`${base}/v1/models`);
-if (!models.ok) {
-  console.error(`models probe failed: ${models.status}`);
-  process.exit(1);
-}
-const modellist = (await models.json()) as { data?: Array<{ id?: string }> };
-const ids = (modellist.data ?? []).map((m) => m.id);
-console.log(`models: ${ids.join(", ") || "(none)"}`);
-
-/* POST /v1/chat/completions — one round trip on the chat surface. */
-const chat = await fetch(`${base}/v1/chat/completions`, {
-  method: "POST",
-  headers: { "content-type": "application/json" },
-  body: JSON.stringify({
-    model: "devthink",
-    messages: [{ role: "user", content: "Reply with exactly: gateway ok" }],
-    max_tokens: 20,
-  }),
-});
-if (!chat.ok) {
-  console.error(`chat probe failed: ${chat.status}`);
-  process.exit(1);
-}
-const answer = (await chat.json()) as {
-  choices?: Array<{ message?: { content?: string; reasoning_content?: string } }>;
-  usage?: unknown;
-};
-const turn = answer.choices?.[0]?.message;
-console.log(`chat: ${JSON.stringify(turn?.content ?? "")}`);
-console.log(`reasoning present: ${Boolean(turn?.reasoning_content)}`);
-console.log(`usage: ${JSON.stringify(answer.usage ?? {})}`);
-
-if (turn?.content !== "gateway ok") {
-  console.error("the gateway answered, but the round trip content drifted");
-  process.exit(1);
-}
-console.log("gateway probe: ok");
-
-export {};

package/gatewaysmoke.ts

@@ -1,64 +0,0 @@
-/** The containerfile gateway smoke of the 1.1.83 family: it starts the localhost fixture server, loads the built gateway module and runs one full request cycle against the recorded openaicompat fixture offline — no provider endpoint, no key, no external network — so the container image proves the gateway call path before it ships. */
-import { startgatewayfixtureserver } from "./tests/gatewayserver.ts";
-import type { baseurlconfig } from "./types.ts";
-
-const server = await startgatewayfixtureserver();
-try {
-  /* the smoke loads the BUILT gateway module — build/llm.js is a container
-   * build artifact a fresh checkout never carries, so the specifier rides a
-   * variable (tsc never fails on the absent artifact while the runtime
-   * keeps loading the built face) and the cast pins the module to the
-   * source contract that sits beside it. */
-  const builtpath = "./build/llm.js";
-  const gateway = (await import(builtpath)) as typeof import("./llm.ts");
-  const config: baseurlconfig = {
-    providerid: "smoke",
-    kind: "openaicompat",
-    baseurl: `http://127.0.0.1:${server.port}/openaicompat`,
-    enabled: true,
-    consented: true,
-    consentedat: Date.now(),
-    updatedat: Date.now(),
-  };
-  const outcome = await gateway.gatewaycall({
-    config,
-    model: "fixture-model-a",
-    messages: [{ role: "user", content: "draft one step" }],
-    requestid: "smoke-1",
-    transport: async (url: string, init: { method: string; headers: Record<string, string>; body?: string }) => {
-      const response = await fetch(url, { method: init.method, headers: init.headers, body: init.body });
-      return {
-        status: response.status,
-        headers: Object.fromEntries(response.headers.entries()),
-        body: await response.text(),
-      };
-    },
-  });
-  if (!outcome.text.includes("goal")) throw new Error("The gateway smoke answer carries no goal field.");
-  if (outcome.usage?.totaltokens !== 55) throw new Error("The gateway smoke usage did not parse.");
-  const streamed = await gateway.gatewaystream({
-    config: { ...config, providerid: "smoke-stream" },
-    model: "fixture-model-a",
-    messages: [{ role: "user", content: "stream" }],
-    transport: async (url: string, init: { method: string; headers: Record<string, string>; body?: string }) => {
-      const response = await fetch(url, { method: init.method, headers: init.headers, body: init.body });
-      return {
-        status: response.status,
-        headers: Object.fromEntries(response.headers.entries()),
-        body: await response.text(),
-      };
-    },
-  });
-  if (streamed.tokens.length !== 3)
-    throw new Error("The gateway smoke stream did not carry the three recorded deltas.");
-  console.log(
-    JSON.stringify({
-      valid: true,
-      requestid: outcome.requestid,
-      tokens: streamed.tokens.length,
-      usage: outcome.usage.totaltokens,
-    }),
-  );
-} finally {
-  await server.close();
-}