agentic-workflow-manager 9.7.1 → 9.8.0

package/dist/tests/structural/jest-environment-is-isolated.test.js

@@ -6,44 +6,49 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const os_1 = __importDefault(require("os"));
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
+function isWithin(parent, candidate, pathApi = path_1.default) {
+    const relative = pathApi.relative(parent, candidate);
+    return relative === '' || (relative !== '..' && !relative.startsWith(`..${pathApi.sep}`) && !pathApi.isAbsolute(relative));
+}
 describe('Jest environment isolation', () => {
+    it('treats a path on another volume as outside the operator home', () => {
+        expect(isWithin('C:\\operator-home', 'D:\\suite-root', path_1.default.win32)).toBe(false);
+    });
     it('does not inherit the operator Codex home', () => {
         expect(process.env.CODEX_HOME).toBeUndefined();
     });
     it('uses a suite-owned temporary directory', () => {
         expect(os_1.default.tmpdir()).toContain('awm-jest-');
     });
-    it('falls back to the system temp directory when the home cache is read-only', async () => {
+    it('routes every unscoped AWM write into the suite-owned temporary directory', () => {
+        expect(process.env.AWM_HOME).toBe(path_1.default.join(process.env.AWM_JEST_TMPDIR, 'awm-home'));
+    });
+    it('keeps the suite root and both homes outside the operator home', () => {
+        const suiteRoot = process.env.AWM_JEST_TMPDIR;
+        const operatorHome = fs_1.default.realpathSync(os_1.default.userInfo().homedir);
+        expect(isWithin(operatorHome, suiteRoot)).toBe(false);
+        expect(process.env.HOME).toBe(path_1.default.join(suiteRoot, 'home'));
+        expect(process.env.AWM_HOME).toBe(path_1.default.join(suiteRoot, 'awm-home'));
+    });
+    it('creates its physical root below the system temp directory, not the operator home', async () => {
         const originalEnv = { ...process.env };
-        const fallback = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-jest-fallback-'));
+        const systemTemp = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-jest-system-'));
+        const operatorHome = path_1.default.join(systemTemp, 'operator-home');
         try {
+            fs_1.default.mkdirSync(operatorHome);
             jest.resetModules();
             jest.doMock('os', () => ({
                 ...jest.requireActual('os'),
-                homedir: () => '/readonly-home',
-                tmpdir: () => fallback,
-            }));
-            const actualFs = jest.requireActual('fs');
-            jest.doMock('fs', () => ({
-                ...actualFs,
-                mkdirSync: jest.fn((target, ...args) => {
-                    if (String(target).includes('readonly-home')) {
-                        return undefined;
-                    }
-                    return actualFs.mkdirSync(target, ...args);
-                }),
-                mkdtempSync: jest.fn((prefix, ...args) => {
-                    if (prefix.includes('readonly-home')) {
-                        const error = new Error('read-only');
-                        error.code = 'EROFS';
-                        throw error;
-                    }
-                    return actualFs.mkdtempSync(prefix, ...args);
-                }),
+                homedir: () => operatorHome,
+                tmpdir: () => systemTemp,
             }));
             const setup = require('../../jest.global-setup.js');
             await expect(setup()).resolves.toBeUndefined();
-            expect(process.env.AWM_JEST_TMPDIR?.startsWith(path_1.default.join(fallback, 'awm-cache', 'awm-jest-'))).toBe(true);
+            const suiteRoot = process.env.AWM_JEST_TMPDIR;
+            expect(suiteRoot.startsWith(path_1.default.join(fs_1.default.realpathSync(systemTemp), 'awm-jest-'))).toBe(true);
+            expect(isWithin(operatorHome, suiteRoot)).toBe(false);
+            expect(process.env.HOME).toBe(path_1.default.join(suiteRoot, 'home'));
+            expect(process.env.AWM_HOME).toBe(path_1.default.join(suiteRoot, 'awm-home'));
         }
         finally {
             jest.dontMock('fs');
@@ -52,7 +57,7 @@ describe('Jest environment isolation', () => {
             for (const key of Object.keys(process.env))
                 delete process.env[key];
             Object.assign(process.env, originalEnv);
-            fs_1.default.rmSync(fallback, { recursive: true, force: true });
+            fs_1.default.rmSync(systemTemp, { recursive: true, force: true });
         }
     });
 });

package/dist/tests/structural/native-release-artifacts.test.js

@@ -9,6 +9,22 @@ const path_1 = __importDefault(require("path"));
 const CLI_ROOT = path_1.default.resolve(__dirname, '..', '..');
 const REPO_ROOT = path_1.default.resolve(CLI_ROOT, '..');
 describe('native release artifacts', () => {
+    it('checks Windows admission before full suites and stops a failed suite without weakening publication', () => {
+        for (const name of ['ci.yml', 'release.yml']) {
+            const workflow = fs_1.default.readFileSync(path_1.default.join(REPO_ROOT, '.github', 'workflows', name), 'utf8');
+            expect(workflow).toContain('- name: Windows admission smoke');
+            expect(workflow).toContain("if: runner.os == 'Windows'");
+            expect(workflow).toContain('run: npx jest tests/commands/plan/index.test.ts --runInBand --bail');
+            expect(workflow).toContain('run: npx jest --runInBand --bail');
+            expect(workflow.indexOf('- name: Windows admission smoke')).toBeLessThan(workflow.indexOf('run: npx jest --runInBand --bail'));
+        }
+        const release = fs_1.default.readFileSync(path_1.default.join(REPO_ROOT, '.github', 'workflows', 'release.yml'), 'utf8');
+        expect(release).toMatch(/release:\s*\n\s*needs: test/);
+        for (const target of ['linux-x64', 'linux-arm64', 'darwin-x64', 'darwin-arm64', 'win32-x64', 'win32-arm64']) {
+            expect(release).toContain(`target: ${target}`);
+        }
+        expect(release).toContain('cancel-in-progress: false');
+    });
     it('keeps native prebuilds generated instead of versioned source', () => {
         const gitignore = fs_1.default.readFileSync(path_1.default.join(REPO_ROOT, '.gitignore'), 'utf8');
         const tracked = (0, child_process_1.execFileSync)('git', ['ls-files', '--', 'cli/prebuilds'], {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-workflow-manager",
-  "version": "9.7.1",
+  "version": "9.8.0",
   "main": "dist/src/index.js",
   "bin": {
     "awm": "./dist/src/index.js"
@@ -47,7 +47,7 @@
   },
   "description": "CLI to manage Agentic Workflows - install skills, workflows, and processes for AI agents",
   "dependencies": {
-    "@clack/prompts": "^1.0.1",
+    "@clack/prompts": "^0.11.0",
     "commander": "^14.0.3",
     "picocolors": "^1.1.1",
     "semver": "^7.7.4",