agentic-workflow-manager 9.0.0 → 9.0.2

package/dist/tests/integration/published-doctor-evidence.e2e.test.js

@@ -19,8 +19,15 @@ const registryRemote = process.env.AWM_PUBLISHED_REGISTRY_REMOTE ?? 'https://git
 // fail at the provenance assertion rather than silently describe.skip.
 const enabled = Boolean(cliVersion && registryTag);
 const acceptance = enabled ? describe : describe.skip;
+// Windows resolves `npm` to `npm.cmd`; spawnSync can't execute a .cmd file
+// directly without a shell — it fails to spawn (status: null) instead of
+// running. git.exe and node.exe are real binaries and don't need this, so
+// scope it narrowly: unconditional shell:true would also apply to the
+// `node -e <script>` call below, and on POSIX Node's shell:true joins args
+// with plain spaces (no escaping), which would corrupt that script argument.
 function command(cwd, executable, args, env = process.env) {
-    return (0, child_process_1.spawnSync)(executable, args, { cwd, encoding: 'utf8', env });
+    const needsShell = process.platform === 'win32' && executable === 'npm';
+    return (0, child_process_1.spawnSync)(executable, args, { cwd, encoding: 'utf8', env, shell: needsShell });
 }
 /** Published evidence accepts only exact versions and immutable git tags. */
 function assertImmutableArtifacts(version, tag, commit, remote) {

package/dist/tests/structural/r3-cli-major-version.test.js

@@ -8,7 +8,6 @@ const path_1 = __importDefault(require("path"));
 const child_process_1 = require("child_process");
 const CLI_ROOT = path_1.default.resolve(__dirname, '../..');
 const DIST_ENTRYPOINT = path_1.default.join(CLI_ROOT, 'dist', 'src', 'index.js');
-const R3_MAJOR_VERSION = 8;
 function readJson(file) {
     return JSON.parse(fs_1.default.readFileSync(path_1.default.join(CLI_ROOT, file), 'utf8'));
 }
@@ -22,13 +21,19 @@ function runCompiledCli(...args) {
     return `${result.stdout}${result.stderr}`;
 }
 describe('R3 public major CLI release contract', () => {
-    it('retains the R3 major version consistently in package metadata and the lockfile root', () => {
+    // #92: the bump wrote only package.json, so the lockfile trailed by one
+    // version on EVERY release. This is the real invariant — package.json,
+    // package-lock.json, and its root entry must always agree. A hardcoded
+    // expected major (originally 8, from when this test was written) goes
+    // stale on every legitimate `!:`/BREAKING major bump and was never the
+    // actual contract, so it isn't asserted here.
+    it('retains a consistent version across package metadata and the lockfile root', () => {
         const pkg = readJson('package.json');
         const lock = readJson('package-lock.json');
         const root = lock.packages[''];
         const version = pkg.version;
         expect(typeof version).toBe('string');
-        expect(version).toMatch(new RegExp(`^${R3_MAJOR_VERSION}\\.`));
+        expect(version).toMatch(/^\d+\.\d+\.\d+$/);
         expect(lock.version).toBe(version);
         expect(root.version).toBe(version);
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-workflow-manager",
-  "version": "9.0.0",
+  "version": "9.0.2",
   "main": "dist/src/index.js",
   "bin": {
     "awm": "./dist/src/index.js"