agentlas 0.7.0 → 0.9.1

package/test/run-api-regression.cjs

@@ -1,322 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-
-const assert = require("node:assert/strict");
-const fs = require("node:fs");
-const os = require("node:os");
-const path = require("node:path");
-
-const {
-  runApi,
-  DEFAULT_API_MODEL,
-  ANTHROPIC_COMPAT_API,
-} = require("../engine/agentlas.cjs");
-const { create: createParity } = require("../engine/agentlas-parity.cjs");
-
-function response(status, payload, errorText) {
-  return {
-    ok: status >= 200 && status < 300,
-    status,
-    json: async () => payload,
-    text: async () => errorText || "",
-  };
-}
-
-function openFixtureDb(file) {
-  try {
-    const Database = require("better-sqlite3");
-    return new Database(file);
-  } catch {
-    const { DatabaseSync } = require("node:sqlite");
-    return new DatabaseSync(file);
-  }
-}
-
-function quietUi() {
-  const same = (value) => String(value ?? "");
-  return {
-    lang: "en",
-    c: { paw: same, bold: same, text: same, dim: same },
-    line() {},
-    info() {},
-    warn() {},
-    error() {},
-    tool() {},
-    toolResult() {},
-    startSpinner() {},
-    stopSpinner() {},
-    markdown() {},
-  };
-}
-
-async function testAnthropicCompatibleProviders() {
-  for (const backend of ["glm", "kimi", "deepseek"]) {
-    const calls = [];
-    const text = await runApi(backend, null, "system", "prompt", {
-      apiKey: `${backend}-secret`,
-      fetch: async (url, init) => {
-        calls.push({ url, init });
-        return response(200, { content: [{ type: "text", text: `${backend}-ok` }] });
-      },
-    });
-
-    assert.equal(text, `${backend}-ok`);
-    assert.equal(calls.length, 1);
-    assert.equal(calls[0].url, `${ANTHROPIC_COMPAT_API[backend].baseUrl}/v1/messages`);
-    assert.equal(calls[0].init.headers["x-api-key"], `${backend}-secret`);
-    assert.equal(calls[0].init.headers.authorization, `Bearer ${backend}-secret`);
-    assert.equal(calls[0].init.headers["anthropic-version"], "2023-06-01");
-    assert.equal(JSON.parse(calls[0].init.body).model, DEFAULT_API_MODEL[backend]);
-  }
-}
-
-async function testCustomBaseUrlComesFromSharedDb() {
-  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "agentlas-run-api-"));
-  const previous = process.env.AGENTLAS_USER_DATA_DIR;
-  process.env.AGENTLAS_USER_DATA_DIR = dir;
-  const db = openFixtureDb(path.join(dir, "agentlas.sqlite"));
-  try {
-    db.exec("CREATE TABLE meta (key TEXT PRIMARY KEY, value TEXT NOT NULL)");
-    db.prepare("INSERT INTO meta(key, value) VALUES (?, ?)").run(
-      "custom_base_url",
-      "https://gateway.example.test/openai/v1/",
-    );
-
-    const calls = [];
-    const text = await runApi("custom", "company-model", "system", "prompt", {
-      apiKey: "custom-secret",
-      fetch: async (url, init) => {
-        calls.push({ url, init });
-        return response(200, { choices: [{ message: { content: "custom-ok" } }] });
-      },
-    });
-
-    assert.equal(text, "custom-ok");
-    assert.equal(calls.length, 1);
-    assert.equal(calls[0].url, "https://gateway.example.test/openai/v1/chat/completions");
-    assert.equal(calls[0].init.headers.authorization, "Bearer custom-secret");
-    assert.equal(JSON.parse(calls[0].init.body).model, "company-model");
-
-    db.prepare("UPDATE meta SET value = ? WHERE key = ?").run(
-      "http://public.example.test/v1",
-      "custom_base_url",
-    );
-    let unsafeFetchCalled = false;
-    await assert.rejects(
-      runApi("custom", "company-model", "system", "prompt", {
-        apiKey: "custom-secret",
-        fetch: async () => {
-          unsafeFetchCalled = true;
-          return response(200, {});
-        },
-      }),
-      /HTTPS.*localhost\/LAN/,
-    );
-    assert.equal(unsafeFetchCalled, false, "invalid public HTTP base URL must not receive the API key");
-  } finally {
-    try { db.close(); } catch { /* ignore */ }
-    if (previous === undefined) delete process.env.AGENTLAS_USER_DATA_DIR;
-    else process.env.AGENTLAS_USER_DATA_DIR = previous;
-    fs.rmSync(dir, { recursive: true, force: true });
-  }
-}
-
-async function testProviderErrorsNeverExitTheHostProcess() {
-  const originalExit = process.exit;
-  let exitCalls = 0;
-  process.exit = (code) => {
-    exitCalls += 1;
-    throw new Error(`unexpected process.exit(${code})`);
-  };
-  try {
-    await assert.rejects(
-      runApi("openai", "gpt-test", "system", "prompt", {
-        apiKey: "openai-secret",
-        fetch: async () => response(429, null, "rate limited"),
-      }),
-      /OpenAI 429: rate limited/,
-    );
-    await assert.rejects(
-      runApi("deepseek", "deepseek-chat", "system", "prompt", {
-        apiKey: "",
-        fetch: async () => response(200, {}),
-      }),
-      /deepseek API \ud0a4/,
-    );
-    await assert.rejects(
-      runApi("unknown", null, "system", "prompt", {
-        apiKey: "secret",
-        fetch: async () => response(200, {}),
-      }),
-      /\uc9c0\uc6d0\ud558\uc9c0 \uc54a\ub294 backend/,
-    );
-    assert.equal(exitCalls, 0, "runApi must throw to swarm/automation instead of exiting");
-  } finally {
-    process.exit = originalExit;
-  }
-}
-
-async function testSwarmAndAutomationContainProviderFailure() {
-  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "agentlas-run-api-host-"));
-  const db = openFixtureDb(path.join(dir, "agentlas.sqlite"));
-  const originalExit = process.exit;
-  const originalExitCode = process.exitCode;
-  let exitCalls = 0;
-  process.exit = (code) => {
-    exitCalls += 1;
-    throw new Error(`unexpected process.exit(${code})`);
-  };
-  try {
-    db.exec(`
-      CREATE TABLE installed_agents (
-        id TEXT PRIMARY KEY,
-        name TEXT NOT NULL,
-        system_prompt TEXT
-      );
-      CREATE TABLE automations (
-        id TEXT PRIMARY KEY,
-        name TEXT NOT NULL,
-        schedule TEXT,
-        target_type TEXT NOT NULL,
-        target_id TEXT NOT NULL,
-        prompt_template TEXT NOT NULL,
-        enabled INTEGER NOT NULL,
-        claimed_at TEXT,
-        lease_owner TEXT,
-        last_run_at TEXT,
-        next_run_at TEXT,
-        schedule_json TEXT,
-        timezone TEXT,
-        trigger_type TEXT,
-        run_count INTEGER NOT NULL DEFAULT 0,
-        max_runs INTEGER
-      );
-      CREATE TABLE run_history (
-        id TEXT PRIMARY KEY,
-        automation_id TEXT,
-        scheduled_for TEXT,
-        ran_at TEXT,
-        status TEXT,
-        skipped_count INTEGER,
-        error TEXT
-      );
-      INSERT INTO installed_agents(id, name, system_prompt)
-      VALUES ('agent-1', 'Regression Agent', 'System');
-      INSERT INTO automations(
-        id, name, schedule, target_type, target_id, prompt_template, enabled,
-        next_run_at, timezone, trigger_type, run_count
-      ) VALUES (
-        'automation-1', 'Regression Automation', 'daily-09:00', 'agent', 'agent-1', 'Run', 1,
-        '2026-01-01T00:00:00.000Z', 'Asia/Seoul', 'schedule', 0
-      );
-    `);
-
-    const failingRunApi = (backend, model, system, prompt) => runApi(backend, model, system, prompt, {
-      apiKey: "openai-secret",
-      fetch: async () => response(429, null, "rate limited"),
-    });
-    const parity = createParity({
-      prefsLang: () => "en",
-      resolveRuntime: () => ({ mode: "api", backend: "openai", model: "gpt-test" }),
-      buildChildEnvCli: async () => ({}),
-      runApi: failingRunApi,
-      captureRuntime: async () => "",
-      runCwd: () => dir,
-      out() {},
-      fail(message) { throw new Error(message); },
-    });
-
-    const swarm = await parity.swarmRun(db, "provider failure containment", { ui: quietUi(), concurrency: 2 });
-    assert.equal(swarm.ok, false, "all-failed swarm should finish normally with ok=false");
-
-    await parity.cmdAutomation(db, ["run", "automation-1"]);
-    const automation = db.prepare(
-      "SELECT claimed_at, lease_owner, last_run_at, run_count FROM automations WHERE id = ?",
-    ).get("automation-1");
-    assert.equal(automation.claimed_at, null, "automation lease must be released after provider error");
-    assert.equal(automation.lease_owner, null, "automation lease owner must be cleared after provider error");
-    assert.ok(automation.last_run_at, "automation failure must still be recorded");
-    assert.equal(automation.run_count, 0, "failed automation must not count as success");
-    const history = db.prepare(
-      "SELECT status, error FROM run_history WHERE automation_id = ? ORDER BY ran_at DESC LIMIT 1",
-    ).get("automation-1");
-    assert.equal(history.status, "error");
-    assert.match(history.error, /OpenAI 429: rate limited/);
-    assert.equal(exitCalls, 0, "swarm/automation must contain provider errors without exiting the host");
-
-    const fixedFrom = new Date("2026-07-10T00:30:00.000Z"); // 09:30 Asia/Seoul
-    assert.equal(
-      parity.nextAutomationRun(
-        { schedule: "daily-09:00", schedule_json: null, timezone: "Asia/Seoul" },
-        fixedFrom,
-      ).toISOString(),
-      "2026-07-11T00:00:00.000Z",
-      "legacy desktop token must advance in its stored timezone",
-    );
-
-    const scheduledFailureRow = db.prepare("SELECT * FROM automations WHERE id = ?").get("automation-1");
-    const failedScheduled = await parity.runAutomationOnce(db, scheduledFailureRow, {
-      ui: quietUi(),
-      advanceSchedule: true,
-      scheduledFor: scheduledFailureRow.next_run_at,
-    });
-    assert.equal(failedScheduled.ok, false);
-    const afterScheduledFailure = db.prepare(
-      "SELECT next_run_at, run_count, enabled FROM automations WHERE id = ?",
-    ).get("automation-1");
-    assert.ok(
-      Date.parse(afterScheduledFailure.next_run_at) > Date.now(),
-      "failed scheduled automation must advance beyond now instead of retrying every poll",
-    );
-    assert.equal(afterScheduledFailure.run_count, 0, "failed run remains excluded from success count");
-
-    db.prepare(
-      `INSERT INTO automations(
-        id, name, schedule, target_type, target_id, prompt_template, enabled,
-        next_run_at, timezone, trigger_type, run_count
-      ) VALUES ('automation-2', 'Success Automation', 'cron:*/5 * * * *', 'agent', 'agent-1', 'Run', 1,
-        '2026-01-01T00:00:00.000Z', 'UTC', 'schedule', 0)`,
-    ).run();
-    const successParity = createParity({
-      prefsLang: () => "en",
-      resolveRuntime: () => ({ mode: "api", backend: "openai", model: "gpt-test" }),
-      buildChildEnvCli: async () => ({}),
-      runApi: async () => "ok",
-      captureRuntime: async () => "",
-      runCwd: () => dir,
-      out() {},
-      fail(message) { throw new Error(message); },
-    });
-    const successRow = db.prepare("SELECT * FROM automations WHERE id = ?").get("automation-2");
-    const scheduledSuccess = await successParity.runAutomationOnce(db, successRow, {
-      ui: quietUi(),
-      advanceSchedule: true,
-      scheduledFor: successRow.next_run_at,
-    });
-    assert.equal(scheduledSuccess.ok, true);
-    const afterScheduledSuccess = db.prepare(
-      "SELECT next_run_at, run_count, enabled FROM automations WHERE id = ?",
-    ).get("automation-2");
-    assert.ok(Date.parse(afterScheduledSuccess.next_run_at) > Date.now());
-    assert.equal(afterScheduledSuccess.run_count, 1);
-    assert.equal(afterScheduledSuccess.enabled, 1);
-  } finally {
-    process.exit = originalExit;
-    process.exitCode = originalExitCode;
-    try { db.close(); } catch { /* ignore */ }
-    fs.rmSync(dir, { recursive: true, force: true });
-  }
-}
-
-async function main() {
-  await testAnthropicCompatibleProviders();
-  await testCustomBaseUrlComesFromSharedDb();
-  await testProviderErrorsNeverExitTheHostProcess();
-  await testSwarmAndAutomationContainProviderFailure();
-  process.stdout.write("run-api regression: PASS (BYOK parity + swarm/automation failure containment)\n");
-}
-
-main().catch((error) => {
-  process.stderr.write(`${error && error.stack ? error.stack : error}\n`);
-  process.exitCode = 1;
-});

package/test/runtime-env-protection.cjs

@@ -1,89 +0,0 @@
-#!/usr/bin/env node
-const assert = require("node:assert/strict");
-const runtime = require("../engine/agentlas.cjs");
-
-const base = {
-  HOME: "/trusted/home",
-  PATH: "/trusted/bin",
-  CODEX_HOME: "/trusted/codex",
-  AGENTLAS_CODEX_HOME: "/trusted/agentlas-codex",
-  AGENTLAS_USER_DATA_DIR: "/trusted/agentlas-data",
-  CLAUDE_CONFIG_DIR: "/trusted/claude",
-  GEMINI_CLI_HOME: "/trusted/gemini",
-  API_TOKEN: "old",
-};
-const maliciousDotenv = runtime.parseDotEnvCli([
-  "HOME=/tmp/attacker",
-  "PATH=/tmp/attacker/bin",
-  "CODEX_HOME=/tmp/attacker/codex",
-  "AGENTLAS_CODEX_HOME=/tmp/attacker/victim",
-  "AGENTLAS_USER_DATA_DIR=/tmp/attacker/data",
-  "CLAUDE_CONFIG_DIR=/tmp/attacker/claude",
-  "GEMINI_CLI_HOME=/tmp/attacker/gemini",
-  "GEMINI_CLI_EXTENSION_REGISTRY_URI=https://attacker.invalid/extensions",
-  "CLAUDE_CODE_SAFE_MODE=1",
-  "NODE_OPTIONS=--require=/tmp/attacker.js",
-  "API_TOKEN=new",
-].join("\n"));
-maliciousDotenv.Path = "/tmp/attacker/windows-bin";
-
-runtime.mergeChildEnvValuesCli(base, maliciousDotenv, true);
-
-assert.equal(base.HOME, "/trusted/home");
-assert.equal(base.PATH, "/trusted/bin");
-assert.equal(base.Path, undefined);
-assert.equal(base.CODEX_HOME, "/trusted/codex");
-assert.equal(base.AGENTLAS_CODEX_HOME, "/trusted/agentlas-codex");
-assert.equal(base.AGENTLAS_USER_DATA_DIR, "/trusted/agentlas-data");
-assert.equal(base.CLAUDE_CONFIG_DIR, "/trusted/claude");
-assert.equal(base.GEMINI_CLI_HOME, "/trusted/gemini");
-assert.equal(base.GEMINI_CLI_EXTENSION_REGISTRY_URI, undefined);
-assert.equal(base.CLAUDE_CODE_SAFE_MODE, undefined);
-assert.equal(base.NODE_OPTIONS, undefined);
-assert.equal(base.API_TOKEN, "new");
-
-// ── 네트워크 무결성 키: 비신뢰(프로젝트/에이전트) dotenv는 TLS/프록시/엔드포인트/세션을 못 바꾼다 ──
-// (bug-hunter 2026-07-12: 원샷 API 경로가 프로젝트 .env를 process.env에 병합해 MITM/SSRF/세션 하이재킹 가능했음)
-{
-  const untrustedBase = { API_TOKEN: "keep" };
-  const untrustedDotenv = runtime.parseDotEnvCli([
-    "NODE_TLS_REJECT_UNAUTHORIZED=0",
-    "HTTPS_PROXY=http://attacker.invalid:8080",
-    "HTTP_PROXY=http://attacker.invalid:8080",
-    "NODE_EXTRA_CA_CERTS=/tmp/attacker-ca.pem",
-    "AGENTLAS_SESSION=forged-session",
-    "AGENTLAS_MCP_BASE_URL=https://evil.example/mcp",
-    "AGENTLAS_WEB_BASE_URL=https://evil.example",
-    "OLLAMA_HOST=http://169.254.169.254",
-    "OPENAI_API_KEY=sk-project-supplied", // 일반 API 키는 프로젝트가 넣을 수 있어야 함
-  ].join("\n"));
-  runtime.mergeChildEnvValuesCli(untrustedBase, untrustedDotenv, true /* overwrite */, false /* untrusted */);
-  for (const k of ["NODE_TLS_REJECT_UNAUTHORIZED", "HTTPS_PROXY", "HTTP_PROXY", "NODE_EXTRA_CA_CERTS",
-    "AGENTLAS_SESSION", "AGENTLAS_MCP_BASE_URL", "AGENTLAS_WEB_BASE_URL", "OLLAMA_HOST"]) {
-    assert.equal(untrustedBase[k], undefined, `untrusted dotenv must not set ${k}`);
-  }
-  assert.equal(untrustedBase.OPENAI_API_KEY, "sk-project-supplied", "일반 API 키는 프로젝트 dotenv로 허용");
-}
-
-// 신뢰 출처(사용자 전역 credentials.env/볼트)는 같은 키를 정당하게 설정할 수 있다 —
-// 로컬 Ollama·자체호스팅 엔드포인트를 쓰는 정상 사용자를 깨지 않는다.
-{
-  const trustedBase = {};
-  const trustedDotenv = runtime.parseDotEnvCli([
-    "OLLAMA_HOST=http://127.0.0.1:11434",
-    "AGENTLAS_MCP_BASE_URL=https://self-hosted.internal/mcp",
-  ].join("\n"));
-  runtime.mergeChildEnvValuesCli(trustedBase, trustedDotenv, false /* overwrite */, true /* trusted */);
-  assert.equal(trustedBase.OLLAMA_HOST, "http://127.0.0.1:11434", "신뢰 출처는 OLLAMA_HOST 허용");
-  assert.equal(trustedBase.AGENTLAS_MCP_BASE_URL, "https://self-hosted.internal/mcp", "신뢰 출처는 엔드포인트 허용");
-}
-
-// 호스트 신원 키(HOME/PATH/NODE_OPTIONS 등)는 신뢰 출처라도 절대 불가
-{
-  const b = {};
-  runtime.mergeChildEnvValuesCli(b, runtime.parseDotEnvCli("NODE_OPTIONS=--require=/x.js\nPATH=/evil"), true, true);
-  assert.equal(b.NODE_OPTIONS, undefined, "NODE_OPTIONS는 신뢰 출처라도 불가");
-  assert.equal(b.PATH, undefined, "PATH는 신뢰 출처라도 불가");
-}
-
-console.log(JSON.stringify({ ok: true, checks: 25 }, null, 2));

package/test/semver-precedence.cjs

@@ -1,39 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-
-const assert = require("node:assert/strict");
-const fs = require("node:fs");
-const path = require("node:path");
-const { compareSemVer, normalizeSemVer, parseSemVer } = require("../engine/semver.cjs");
-
-const precedence = [
-  "1.0.0-alpha",
-  "1.0.0-alpha.1",
-  "1.0.0-alpha.beta",
-  "1.0.0-beta",
-  "1.0.0-beta.2",
-  "1.0.0-beta.11",
-  "1.0.0-rc.1",
-  "1.0.0",
-];
-
-for (let index = 0; index < precedence.length - 1; index += 1) {
-  assert.equal(compareSemVer(precedence[index], precedence[index + 1]), -1);
-  assert.equal(compareSemVer(precedence[index + 1], precedence[index]), 1);
-}
-
-assert.equal(compareSemVer("v2.3.4", "2.3.4"), 0);
-assert.equal(normalizeSemVer("v2.3.4-rc.1+build.7"), "2.3.4-rc.1+build.7");
-assert.equal(compareSemVer("1.0.0+build.1", "1.0.0+build.99"), 0);
-assert.equal(compareSemVer("1.0.0-1", "1.0.0-alpha"), -1);
-assert.equal(compareSemVer("999999999999999999999.0.0", "2.0.0"), 1);
-assert.equal(compareSemVer("1.0.0", "1.0.0-rc.99"), 1);
-assert.equal(parseSemVer("1.0.0-01"), null);
-assert.equal(parseSemVer("01.0.0"), null);
-assert.equal(compareSemVer("not-a-version", "1.0.0"), null);
-
-const updater = fs.readFileSync(path.join(__dirname, "../engine/agentlas.cjs"), "utf8");
-assert.match(updater, /compareSemVer\(currentVersion, latestVersion\)/);
-assert.doesNotMatch(updater, /function versionParts/);
-
-console.log("semver-precedence: PASS");

package/test/smoke.sh

@@ -1,93 +0,0 @@
-#!/bin/sh
-# agentlas 터미널 CLI 스모크 테스트.
-# 1) 기본(auto=bundled) where/version/list/doctor
-# 2) 신선 환경(빈 userData) 첫 실행: DB 부트스트랩 + 빌트인 시드
-set -eu
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-BIN="$SCRIPT_DIR/../bin/agentlas.cjs"
-
-pass=0
-fail=0
-check() {
-  name="$1"; shift
-  if out="$("$@" 2>&1)"; then
-    echo "PASS $name"
-    pass=$((pass + 1))
-  else
-    echo "FAIL $name"
-    echo "$out" | sed 's/^/    /'
-    fail=$((fail + 1))
-  fi
-}
-
-check "where"   node "$BIN" --where
-check "version" node "$BIN" version
-check "list"    node "$BIN" list
-check "doctor"  node "$BIN" doctor
-check "help"    node "$BIN" help
-check "usage"   node "$BIN" usage
-check "mcp"     node "$BIN" mcp
-check "chats"   node "$BIN" chats
-check "run-api-regression" node "$SCRIPT_DIR/run-api-regression.cjs"
-check "cloud-runtime-paths" node "$SCRIPT_DIR/cloud-runtime-paths.cjs"
-check "cloud-save-publish" node "$SCRIPT_DIR/cloud-save-publish.cjs"
-check "cloud-asset-restore" node "$SCRIPT_DIR/cloud-asset-restore.cjs"
-check "cloud-owner-restore" node "$SCRIPT_DIR/cloud-owner-restore.cjs"
-check "cloud-cas-client" node "$SCRIPT_DIR/cloud-cas-client.cjs"
-check "runtime-env-protection" node "$SCRIPT_DIR/runtime-env-protection.cjs"
-check "credential-env-regression" node "$SCRIPT_DIR/credential-env-regression.cjs"
-check "tool-workspace-boundary" node "$SCRIPT_DIR/tool-workspace-boundary.cjs"
-check "mcp-config-isolation" node "$SCRIPT_DIR/mcp-config-isolation.cjs"
-check "experience-mcp-contract" node "$SCRIPT_DIR/experience-mcp-contract.cjs"
-check "experience-exchange-contract" node "$SCRIPT_DIR/experience-exchange-contract.cjs"
-check "bootstrap-race" node "$SCRIPT_DIR/bootstrap-race.cjs"
-check "login-loopback-security" node "$SCRIPT_DIR/login-loopback-security.cjs"
-check "timeout-regression" node "$SCRIPT_DIR/timeout-regression.cjs"
-check "terminal-ui-regression" node "$SCRIPT_DIR/terminal-ui-regression.cjs"
-check "route-regression" node "$SCRIPT_DIR/route-regression.cjs"
-check "engine-hardening-regression" node "$SCRIPT_DIR/engine-hardening-regression.cjs"
-check "permission-mapping" node "$SCRIPT_DIR/permission-mapping.cjs"
-check "sqlite-driver-probe" node "$SCRIPT_DIR/sqlite-driver-probe.cjs"
-check "capture-runtime-guard" node "$SCRIPT_DIR/capture-runtime-guard.cjs"
-check "update-safety" node "$SCRIPT_DIR/update-safety.cjs"
-check "semver-precedence" node "$SCRIPT_DIR/semver-precedence.cjs"
-
-# Agentlas OS 표면: 무인자 호출은 usage를 내고 exit 1 (프롬프트 오라우팅 방지 확인)
-guard() {
-  name="$1"; shift
-  if out="$("$@" 2>&1)"; then echo "FAIL $name (should exit non-zero)"; fail=$((fail + 1));
-  else echo "PASS $name"; pass=$((pass + 1)); fi
-}
-guard "guard-search"  node "$BIN" search
-guard "guard-install" node "$BIN" install
-guard "guard-upload"  node "$BIN" upload
-
-# 신선 환경 첫 실행 (표준: mktemp 사용, 검증 후 Trash로 이동)
-FRESH="$(mktemp -d "${TMPDIR:-/tmp}/agentlas-smoke-XXXXXX")"
-check "fresh-first-run" env AGENTLAS_USER_DATA_DIR="$FRESH" node "$BIN" list
-if [ -f "$FRESH/agentlas.sqlite" ]; then
-  echo "PASS fresh-db-created"
-  pass=$((pass + 1))
-else
-  echo "FAIL fresh-db-created"
-  fail=$((fail + 1))
-fi
-mv "$FRESH" "$HOME/.Trash/agentlas-smoke-$(date +%s)" 2>/dev/null || true
-
-# Runtime Doctor 3제품 패리티 게이트 — 데스크탑 TS ↔ 이 repo CJS ↔ system-optimizer
-# 플레이북이 어긋나면 여기서 FAIL. (형제 repo가 없는 CI/신선 클론에선 자동 스킵)
-SYNC="$(cd "$(dirname "$0")/.." && pwd)/../scripts/sync-runtime-doctor.sh"
-if [ -f "$SYNC" ]; then
-  if bash "$SYNC"; then
-    echo "PASS doctor-parity"
-    pass=$((pass + 1))
-  else
-    echo "FAIL doctor-parity"
-    fail=$((fail + 1))
-  fi
-fi
-
-echo ""
-echo "smoke: $pass passed, $fail failed"
-[ "$fail" -eq 0 ]

package/test/sqlite-driver-probe.cjs

@@ -1,22 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-
-const assert = require("node:assert/strict");
-const { spawnSync } = require("node:child_process");
-const path = require("node:path");
-const { probeSqliteDriver } = require("../bin/agentlas.cjs");
-
-const driver = probeSqliteDriver();
-assert.ok(driver === "better-sqlite3" || driver === "node:sqlite", `unexpected SQLite driver: ${driver}`);
-
-const launcher = path.join(__dirname, "..", "bin", "agentlas.cjs");
-const result = spawnSync(process.execPath, [launcher, "--where"], {
-  encoding: "utf8",
-  env: { ...process.env, NODE_NO_WARNINGS: "" },
-});
-assert.equal(result.status, 0, result.stderr || result.stdout);
-assert.doesNotMatch(result.stderr, /ExperimentalWarning|SQLite is an experimental feature/i);
-const where = JSON.parse(result.stdout);
-assert.equal(where.sqliteDriver, driver, "--where must report the driver that can actually open a database");
-
-console.log(`sqlite-driver-probe: PASS (${driver})`);