claudeup 6.5.1 → 6.6.0

package/src/__tests__/cli-tools-adapter.test.ts

@@ -0,0 +1,294 @@
+/**
+ * The TUI CLI Tools row is built from the shared probe facts and the shared
+ * classifier — the row can no longer disagree with `claudeup update`.
+ *
+ * Pure: `buildToolRow` over `specForCatalogTool`, with facts supplied the way
+ * `probeTools` would report them. No React, no IO.
+ */
+
+import { describe, expect, test } from "bun:test";
+import { cliTools } from "../data/cli-tools.js";
+import { cliToolInstall } from "../services/cli-tool-commands.js";
+import {
+	type ToolFacts,
+	classifyTool,
+	specForCatalogTool,
+} from "../services/tool-probe.js";
+import { binCommandFor } from "../services/update-engine.js";
+import { planBinUpdates } from "../services/update-plan.js";
+import type { ResolvedBin } from "../types/index.js";
+import {
+	buildToolRow,
+	cliToolStatusText,
+	countToolRows,
+} from "../ui/adapters/cliToolsAdapter.js";
+
+const catalogue = (name: string) => {
+	const tool = cliTools.find((t) => t.name === name);
+	if (!tool) throw new Error(`no catalogue tool ${name}`);
+	return tool;
+};
+
+function facts(name: string, over: Partial<ToolFacts> = {}): ToolFacts {
+	return {
+		name,
+		present: true,
+		resolvedPath: `/x/${name}`,
+		installed: "1.0.0",
+		latest: null,
+		behind: null,
+		managed: true,
+		sources: [],
+		...over,
+	};
+}
+
+describe("buildToolRow — which installer a catalogue row is judged through", () => {
+	test("catalogue says npm, detected bun: the spec is bun and the state is bun's", () => {
+		// codex and opencode on the reporter's machine: catalogued as npm,
+		// installed by bun into ~/.bun/install/global.
+		const codex = catalogue("codex");
+		expect(codex.packageManager).toBe("npm");
+		const install = { primary: "bun" as const, all: ["bun" as const] };
+		const spec = specForCatalogTool(codex, null, install);
+		expect(spec.via).toBe("bun");
+
+		const row = buildToolRow(
+			codex,
+			spec,
+			facts("codex", { installed: "0.153.2", latest: "0.154.0" }),
+			install,
+		);
+		expect(row.status).toMatchObject({
+			state: "upgrade",
+			target: "0.154.0",
+		});
+		// Enter names the same installer the row was probed through.
+		expect(row.updateCommand).toEqual({
+			cmd: "bun",
+			args: ["install", "-g", "@openai/codex@latest"],
+		});
+	});
+
+	test("declared by the closure with via npm: the closure wins, and the row equals the CLI plan", () => {
+		const codex = catalogue("codex");
+		const declared: ResolvedBin = {
+			name: "codex",
+			via: "npm",
+			package: "@openai/codex",
+			sources: ["profile:default.cliTools"],
+		};
+		const install = { primary: "bun" as const, all: ["bun" as const] };
+		const spec = specForCatalogTool(codex, [declared], install);
+		expect(spec).toBe(declared);
+
+		// Through npm, the bun-installed file is not npm's: not-managed.
+		const f = facts("codex", {
+			managed: false,
+			resolvedPath:
+				"/Users/j/.bun/install/global/node_modules/@openai/codex/bin/codex.js",
+			owner: "npm (root /Users/j/.local/lib/node_modules)",
+		});
+		const row = buildToolRow(codex, spec, f, install);
+		const [cli] = planBinUpdates([declared], [f]);
+		expect(row.status).toMatchObject({
+			state: cli!.action,
+			reason: cli!.reason,
+			note: cli!.note,
+			target: cli!.target,
+		});
+		expect(row.status?.reason).toBe("not-managed");
+	});
+
+	test("pinned and behind: the row's key installs the PIN, exactly what the CLI runs", () => {
+		// The defect this pins: the row read `→ v0.150.0` (the pin) while its
+		// key ran `npm install -g @openai/codex@latest`, which installs past the
+		// pin and leaves the tool `unknown / ahead-of-pin` for good.
+		const codex = catalogue("codex");
+		const declared: ResolvedBin = {
+			name: "codex",
+			via: "npm",
+			package: "@openai/codex",
+			version: "0.150.0",
+			sources: ["profile:default.cliTools"],
+		};
+		// Detected as bun — the installer the OLD command builder followed.
+		const install = { primary: "bun" as const, all: ["bun" as const] };
+		const spec = specForCatalogTool(codex, [declared], install);
+		const f = facts("codex", { installed: "0.149.0", managed: true });
+
+		const row = buildToolRow(codex, spec, f, install);
+		expect(row.status).toMatchObject({
+			state: "upgrade",
+			reason: "behind-pin",
+			target: "0.150.0",
+		});
+		expect(row.updateCommand).toEqual({
+			cmd: "npm",
+			args: ["install", "-g", "@openai/codex@0.150.0"],
+		});
+		// And it is the same command `claudeup update` would run for this row.
+		const [item] = planBinUpdates([declared], [f]);
+		expect(row.updateCommand).toEqual(binCommandFor(item!, declared)!);
+	});
+
+	test("declared and absent: Enter installs at the pin, not the catalogue's @latest", () => {
+		const codex = catalogue("codex");
+		const declared: ResolvedBin = {
+			name: "codex",
+			via: "npm",
+			package: "@openai/codex",
+			version: "0.150.0",
+			sources: ["profile:default.cliTools"],
+		};
+		const row = buildToolRow(
+			codex,
+			specForCatalogTool(codex, [declared], undefined),
+			facts("codex", { present: false, installed: null }),
+		);
+		expect(row.status?.state).toBe("install");
+		expect(row.updateCommand).toBeUndefined();
+		expect(row.installCommand).toEqual({
+			cmd: "npm",
+			args: ["install", "-g", "@openai/codex@0.150.0"],
+		});
+	});
+
+	test("declared, unpinned and behind: the closure's package, at latest", () => {
+		const codex = catalogue("codex");
+		const declared: ResolvedBin = {
+			name: "codex",
+			via: "npm",
+			package: "@openai/codex",
+			sources: ["plugin:dev@magus"],
+		};
+		const install = { primary: "bun" as const, all: ["bun" as const] };
+		const row = buildToolRow(
+			codex,
+			specForCatalogTool(codex, [declared], install),
+			facts("codex", { installed: "0.153.2", latest: "0.154.0" }),
+			install,
+		);
+		expect(row.status?.state).toBe("upgrade");
+		// npm, the PROFILE's installer — not bun, the detected one — because the
+		// row's state was judged through npm too.
+		expect(row.updateCommand).toEqual({
+			cmd: "npm",
+			args: ["install", "-g", "@openai/codex@latest"],
+		});
+	});
+
+	test("undeclared: the screen's own rule survives — how it IS installed", () => {
+		const codex = catalogue("codex");
+		const install = { primary: "bun" as const, all: ["bun" as const] };
+		const row = buildToolRow(
+			codex,
+			specForCatalogTool(codex, null, install),
+			facts("codex", { installed: "0.153.2", latest: "0.154.0" }),
+			install,
+		);
+		expect(row.updateCommand).toEqual({
+			cmd: "bun",
+			args: ["install", "-g", "@openai/codex@latest"],
+		});
+		expect(row.installCommand).toEqual(cliToolInstall(codex));
+	});
+
+	test("detected pnpm → the catalogue's via, and a not-managed row naming the real path", () => {
+		const opencode = catalogue("opencode");
+		const install = { primary: "pnpm" as const, all: ["pnpm" as const] };
+		const spec = specForCatalogTool(opencode, null, install);
+		expect(spec.via).toBe(opencode.packageManager);
+
+		const f = facts("opencode", {
+			managed: false,
+			resolvedPath:
+				"/Users/j/.local/share/pnpm/global/5/node_modules/opencode-ai/bin/opencode",
+			owner: "npm (root /Users/j/.local/lib/node_modules)",
+		});
+		const row = buildToolRow(opencode, spec, f, install);
+		expect(row.status?.reason).toBe("not-managed");
+		expect(row.status?.note).toContain("/Users/j/.local/share/pnpm/");
+		// Enter still follows how it IS installed (pnpm).
+		expect(row.updateCommand?.cmd).toBe("pnpm");
+	});
+
+	test("no facts yet → checking, no status, no command", () => {
+		const tool = catalogue("claudish");
+		const row = buildToolRow(
+			tool,
+			specForCatalogTool(tool, null, undefined),
+			undefined,
+		);
+		expect(row).toMatchObject({ checking: true, status: null });
+		expect(row.updateCommand).toBeUndefined();
+		expect(cliToolStatusText(row).suffix).toBe(" ...");
+	});
+
+	test("absent → install, with no update command", () => {
+		const tool = catalogue("cline");
+		const spec = specForCatalogTool(tool, null, undefined);
+		const row = buildToolRow(
+			tool,
+			spec,
+			facts("cline", { present: false, installed: null }),
+			{ primary: "unknown", all: [] },
+		);
+		expect(row.status?.state).toBe("install");
+		expect(row.updateCommand).toBeUndefined();
+	});
+});
+
+describe("cliToolStatusText — the row's words", () => {
+	test("unknown renders as ? <note>, the note verbatim", () => {
+		const tool = catalogue("crush");
+		const spec = specForCatalogTool(tool, null, {
+			primary: "npm",
+			all: ["npm"],
+		});
+		const f = facts("crush", { managed: false, owner: "npm (root /l)" });
+		const row = buildToolRow(tool, spec, f);
+		const text = cliToolStatusText(row);
+		expect(text.tone).toBe("warning");
+		expect(text.suffix).toBe(` ? ${classifyTool(spec, f).note}`);
+	});
+
+	test("upgrade names the target once, with one v", () => {
+		const tool = catalogue("mnemex");
+		const spec = specForCatalogTool(tool, null, {
+			primary: "bun",
+			all: ["bun"],
+		});
+		const row = buildToolRow(tool, spec, facts("mnemex", { latest: "v1.2.0" }));
+		expect(cliToolStatusText(row).suffix).toBe(" → v1.2.0");
+	});
+
+	test("current and install say nothing extra", () => {
+		const tool = catalogue("mnemex");
+		const spec = specForCatalogTool(tool, null, undefined);
+		expect(
+			cliToolStatusText(
+				buildToolRow(tool, spec, facts("mnemex", { behind: false })),
+			).suffix,
+		).toBe("");
+	});
+});
+
+describe("countToolRows — header counts from states", () => {
+	test("installed, updates and unverified", () => {
+		const tool = catalogue("mnemex");
+		const spec = specForCatalogTool(tool, null, undefined);
+		const rows = [
+			buildToolRow(tool, spec, facts("mnemex", { behind: false })),
+			buildToolRow(tool, spec, facts("mnemex", { behind: true })),
+			buildToolRow(tool, spec, facts("mnemex", { managed: false })),
+			buildToolRow(tool, spec, facts("mnemex", { present: false })),
+			buildToolRow(tool, spec, undefined),
+		];
+		expect(countToolRows(rows)).toEqual({
+			installed: 3,
+			updates: 1,
+			unverified: 1,
+		});
+	});
+});

package/src/__tests__/cli-update-view.test.ts

@@ -19,10 +19,14 @@ import {
 	applyFrame,
 	applyRow,
 	header,
+	nothingToApplyNotice,
 	planReport,
 	stepFrame,
 	stepRecord,
 	summaryLine,
+	uncheckedGateNotice,
+	unknownPluginsNotice,
+	unknownToolsNotice,
 } from "../cli/update-view.js";
 import type { UpdatePlan } from "../services/update-plan.js";
 
@@ -73,8 +77,26 @@ function plan(over: Partial<UpdatePlan> = {}): UpdatePlan {
 			},
 		],
 		bins: [
-			{ name: "tmux-mcp", action: "current", version: "v1.7.1", sources: [] },
-			{ name: "tmux", action: "upgrade", sources: [] },
+			{
+				name: "tmux-mcp",
+				action: "current",
+				reason: "at-pin",
+				version: "v1.7.1",
+				installed: "v1.7.1",
+				latest: null,
+				target: null,
+				sources: [],
+			},
+			{
+				name: "tmux",
+				action: "upgrade",
+				reason: "behind",
+				installed: "3.7b",
+				latest: "3.7c",
+				target: "3.7c",
+				note: "3.7c is available",
+				sources: [],
+			},
 		],
 		skills: [
 			{
@@ -271,6 +293,15 @@ describe("bars", () => {
 		const line = summaryLine(0, 0, 0, 0, 100)[1]!;
 		expect(line.match(/[█░]+/)![0]).toHaveLength(36);
 	});
+
+	test("unchanged is its own count, never folded into changed", () => {
+		setColorEnabled(false);
+		const line = summaryLine(1, 4, 0, 0, 100, 2)[1]!;
+		expect(line).toContain("1 changed");
+		expect(line).toContain("2 unchanged");
+		// Omitted when zero, and the parameter defaults to zero.
+		expect(summaryLine(1, 4, 0, 0, 100)[1]).not.toContain("unchanged");
+	});
 });
 
 // -- misc ---------------------------------------------------------------------
@@ -301,5 +332,114 @@ describe("sections", () => {
 			(l) => l.includes("tmux ") && l.includes("UPGRADE"),
 		)!;
 		expect(row).toContain("brew upgrade tmux");
+		expect(row).toContain("3.7b → 3.7c");
+	});
+
+	test("an unpinned CURRENT tool shows its version, not 'pinned —' (F8)", () => {
+		setColorEnabled(false);
+		const p = plan();
+		p.bins = [
+			{
+				name: "tmux",
+				action: "current",
+				reason: "up-to-date",
+				installed: "3.7c",
+				latest: null,
+				target: null,
+				sources: [],
+			},
+		];
+		const row = planReport(p).find(
+			(l) => l.includes("tmux ") && l.includes("CURRENT"),
+		)!;
+		expect(row).toContain("3.7c");
+		expect(row).not.toContain("pinned");
+	});
+
+	test("a pinned current tool still names its pin", () => {
+		setColorEnabled(false);
+		const row = planReport(plan()).find((l) => l.includes("tmux-mcp"))!;
+		expect(row).toContain("pinned v1.7.1");
+	});
+
+	test("an UNKNOWN tool shows its reason and no command", () => {
+		setColorEnabled(false);
+		const p = plan();
+		p.bins = [
+			{
+				name: "crush",
+				action: "unknown",
+				reason: "not-managed",
+				note: "on PATH at /n/crush.js, which npm (root /l) does not own",
+				installed: "0.7.1",
+				latest: null,
+				target: null,
+				sources: [],
+			},
+		];
+		p.binSpecs = new Map([
+			[
+				"crush",
+				{ name: "crush", via: "npm", package: "@charmland/crush", sources: [] },
+			],
+		]);
+		const row = planReport(p).find((l) => l.includes("crush"))!;
+		expect(row).toContain("0.7.1");
+		expect(row).toContain("which npm (root /l) does not own");
+		expect(row).not.toContain("npm install");
+	});
+});
+
+// -- unverified notices -------------------------------------------------------
+
+describe("unverified notices", () => {
+	// A plugin is `unknown` for several reasons, each printed on its own row. The
+	// closing notices must hold for every one of them. They used to say "re-run
+	// once the catalog is reachable", which is false advice for a plugin whose
+	// marketplace publishes no version — the case a real dry run showed five of.
+	const notices = () => [
+		unknownPluginsNotice(5),
+		nothingToApplyNotice(5),
+		unknownToolsNotice(1, ["crush"]),
+		uncheckedGateNotice(6),
+	];
+
+	test("never advise a re-run, never blame the catalog", () => {
+		setColorEnabled(false);
+		for (const line of notices()) {
+			expect(line).not.toMatch(/re-run/i);
+			expect(line).not.toContain("catalog is reachable");
+			expect(line).toContain("Reasons are shown above.");
+		}
+	});
+
+	test("an unverified plugin is never reported as up to date", () => {
+		setColorEnabled(false);
+		const under = unknownPluginsNotice(5);
+		expect(under).toContain("5 plugin(s) could not be checked");
+		expect(under).toContain("They are NOT reported as up to date.");
+		const nothing = nothingToApplyNotice(5);
+		expect(nothing.trimStart()).toStartWith("⚠  Nothing to apply.");
+		expect(nothing).toContain("5 plugin(s) could not be checked");
+		expect(nothing).toContain("They are NOT reported as up to date.");
+	});
+
+	test("the tool notice names the tools it could not check", () => {
+		setColorEnabled(false);
+		expect(unknownToolsNotice(2, ["crush", "tmux"])).toContain(
+			"2 tool(s) could not be checked: crush, tmux — not applied.",
+		);
+	});
+
+	test("the gate notice says the unknowns passed without being verified", () => {
+		// `--check` exits 0 with unknowns present, so this line carries the whole
+		// difference between "nothing is known to be behind" and "all verified".
+		setColorEnabled(false);
+		const line = uncheckedGateNotice(6);
+		expect(line).toContain("6 item(s) could not be checked");
+		expect(line).toContain("they do not fail this gate");
+		expect(line).toContain("They are NOT reported as up to date.");
+		// A warning, not a failure: the gate is about to pass.
+		expect(line.trimStart()).toStartWith("⚠");
 	});
 });

package/src/__tests__/content-drift.test.ts

@@ -16,6 +16,10 @@ import {
 	hasContentDrift,
 	repoHeadSha,
 } from "../services/content-drift.js";
+import {
+	type PluginInfo,
+	contentDriftCandidate,
+} from "../services/plugin-manager.js";
 
 let configDir: string;
 let prevConfigDir: string | undefined;
@@ -291,3 +295,59 @@ describe("repoHeadSha", () => {
 		).toBeUndefined();
 	});
 });
+
+describe("contentDriftCandidate — which plugins are even asked", () => {
+	const info = (over: Partial<PluginInfo> = {}): PluginInfo => ({
+		id: "dev@magus",
+		name: "dev",
+		version: "3.0.0",
+		description: "",
+		marketplace: "magus",
+		marketplaceDisplay: "magus",
+		enabled: true,
+		installedVersion: "3.0.0",
+		...over,
+	});
+
+	test("same version, provably: asked", () => {
+		expect(contentDriftCandidate(info())).toBe(true);
+		// The comparator, not string equality: "3.0" IS 3.0.0.
+		expect(contentDriftCandidate(info({ installedVersion: "3.0" }))).toBe(true);
+	});
+
+	test("the pre-classifier `hasUpdate` no longer decides", () => {
+		// It was the gate's first clause. It could only ever be true for a pair
+		// the version compare already rejects, and reading it here made the
+		// input the shared classifier consumes depend on the rule it replaced.
+		// A stale flag must not suppress the question.
+		expect(contentDriftCandidate(info({ hasUpdate: true }))).toBe(true);
+	});
+
+	test("behind the catalog: NOT asked — that is an update, not drift", () => {
+		// hasContentDrift diffs the installed commit against the clone HEAD, so
+		// a plugin that is merely behind always "differs". Calling that drift
+		// would make it a repair, and a repair reinstalls whatever the clone
+		// holds — past a pin.
+		expect(contentDriftCandidate(info({ installedVersion: "2.9.0" }))).toBe(
+			false,
+		);
+		expect(
+			contentDriftCandidate(
+				info({ hasUpdate: false, installedVersion: "2.9.0" }),
+			),
+		).toBe(false);
+	});
+
+	test("unorderable, not installed, no catalog version, orphaned: not asked", () => {
+		expect(
+			contentDriftCandidate(
+				info({ version: "517b2fcd1b60", installedVersion: "b819188d2eea" }),
+			),
+		).toBe(false);
+		expect(contentDriftCandidate(info({ installedVersion: undefined }))).toBe(
+			false,
+		);
+		expect(contentDriftCandidate(info({ version: null }))).toBe(false);
+		expect(contentDriftCandidate(info({ isOrphaned: true }))).toBe(false);
+	});
+});

package/src/__tests__/enabled-not-installed.test.ts

@@ -8,8 +8,7 @@ import type { PluginInfo } from "../services/plugin-manager.js";
  *
  * It is also invisible to every update path, because the check is
  * `installedVersion && compare(latest, installedVersion) > 0` — with no
- * installed version that is false, so neither the update list nor the
- * prerunner's auto-update will ever touch it.
+ * installed version that is false, so no update path will ever touch it.
  */
 
 const plugin = (over: Partial<PluginInfo>): PluginInfo =>

package/src/__tests__/fixtures/tool-probe/brew-list-versions-tmux.txt

@@ -0,0 +1,2 @@
+# captured 2026-09-12 00:40 AEST, read-only: brew list --versions tmux   (exit=0)
+tmux 3.7c

package/src/__tests__/fixtures/tool-probe/brew-outdated-behind-homebrew-spec.txt

@@ -0,0 +1,29 @@
+# NOT from this machine: nothing brew manages here is outdated, so no real non-empty output could be captured read-only.
+# This is Homebrew's OWN expected output for `brew outdated --json=v2`, copied verbatim from
+# /opt/homebrew/Library/Homebrew/test/cmd/outdated_spec.rb ("outputs JSON for outdated formulae and casks")
+# at Homebrew commit 088d2f79849d1b08792459b65026207a91c545d6 (JSON.pretty_generate of that hash).
+# The generator is cmd/outdated.rb json_info: { name: f.full_name, installed_versions, current_version, pinned, pinned_version }.
+{
+  "formulae": [
+    {
+      "name": "testball",
+      "installed_versions": [
+        "0.0.1"
+      ],
+      "current_version": "0.1",
+      "pinned": false,
+      "pinned_version": null
+    }
+  ],
+  "casks": [
+    {
+      "name": "local-caffeine",
+      "installed_versions": [
+        "1.2.2"
+      ],
+      "current_version": "1.2.3",
+      "pinned": false,
+      "pinned_version": null
+    }
+  ]
+}

package/src/__tests__/fixtures/tool-probe/brew-outdated-tmux-current.txt

@@ -0,0 +1,7 @@
+# captured 2026-09-11 23:12 AEST and again 2026-09-12 00:40 AEST on the reporter's machine (Homebrew 6.0.22), read-only:
+# HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_ENV_HINTS=1 NO_COLOR=1 brew outdated --json=v2 tmux
+# exit=0 (tmux 3.7c installed, current)
+{
+  "formulae": [],
+  "casks": []
+}

package/src/__tests__/fixtures/tool-probe/brew-outdated-unknown-formula.txt

@@ -0,0 +1,6 @@
+# captured 2026-09-12 00:40 AEST, read-only:
+# HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_ENV_HINTS=1 NO_COLOR=1 brew outdated --json=v2 cowsay-not-a-formula-xyz
+# exit=1, stdout empty, stderr below. (Assumption A5 was half wrong: a formula brew KNOWS but has not
+# installed — wget was tried before it turned out to be installed — exits 0 with formulae: [], so ownership
+# must be decided before brew's silence is believed.)
+Error: No available formula with the name "cowsay-not-a-formula-xyz".

package/src/__tests__/fixtures/tool-probe/go-version-m-tmux-mcp.txt

@@ -0,0 +1,27 @@
+# captured 2026-09-12 00:58 AEST, read-only: go version -m /Users/jack/go/bin/tmux-mcp   (go 1.27.1, exit=0)
+/Users/jack/go/bin/tmux-mcp: go1.27.1
+	path	github.com/MadAppGang/tmux-mcp/v2
+	mod	github.com/MadAppGang/tmux-mcp/v2	v2.0.0	h1:DhieVeG/e6K/+++7XrP9ruhCnywVatf8e+bnjzjMLXE=
+	dep	github.com/acarl005/stripansi	v0.0.0-20180116102854-5a71ef0e047d	h1:licZJFw2RwpHMqeKTCYkitsPqHNxTmd4SNR5r94FGM8=
+	dep	github.com/bahlo/generic-list-go	v0.2.0	h1:5sz/EEAK+ls5wF+NeqDpk5+iNdMDXrh3z3nPnH1Wvgk=
+	dep	github.com/buger/jsonparser	v1.1.1	h1:2PnMjfWD7wBILjqQbt530v576A/cAbQvEW9gGIpYMUs=
+	dep	github.com/google/uuid	v1.6.0	h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+	dep	github.com/invopop/jsonschema	v0.13.0	h1:KvpoAJWEjR3uD9Kbm2HWJmqsEaHt8lBUpd0qHcIi21E=
+	dep	github.com/mailru/easyjson	v0.7.7	h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
+	dep	github.com/mark3labs/mcp-go	v0.45.0	h1:s0S8qR/9fWaQ3pHxz7pm1uQ0DrswoSnRIxKIjbiQtkc=
+	dep	github.com/spf13/cast	v1.7.1	h1:cuNEagBQEHWN1FnbGEjCXL2szYEXqfJPbP2HNUaca9Y=
+	dep	github.com/wk8/go-ordered-map/v2	v2.1.8	h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/fJgbpc=
+	dep	github.com/yosida95/uritemplate/v3	v3.0.2	h1:Ed3Oyj9yrmi9087+NczuL5BwkIc4wvTb5zIM+UJPGz4=
+	dep	golang.org/x/sys	v0.42.0	h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=
+	dep	gopkg.in/yaml.v3	v3.0.1	h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+	build	-buildmode=exe
+	build	-compiler=gc
+	build	DefaultGODEBUG=tracebacklabels=0,x509sslcertoverrideplatform=0
+	build	CGO_ENABLED=1
+	build	CGO_CFLAGS=
+	build	CGO_CPPFLAGS=
+	build	CGO_CXXFLAGS=
+	build	CGO_LDFLAGS=
+	build	GOARCH=arm64
+	build	GOOS=darwin
+	build	GOARM64=v8.0

package/src/__tests__/fixtures/tool-probe/npm-dist-tags-missing-scoped.txt

@@ -0,0 +1,4 @@
+# captured 2026-09-12 00:50 AEST, read-only GET: curl -sS 'https://registry.npmjs.org/-/package/%40nope-xyz%2Fdoes-not-exist-zz/dist-tags'
+# http 401 — the registry answers 401, not 404, for a scoped name that does not exist (status trailer removed)
+"Unauthorized"
+# http=401

package/src/__tests__/fixtures/tool-probe/npm-dist-tags-openai-codex.txt

@@ -0,0 +1,4 @@
+# captured 2026-09-12 00:50 AEST, read-only GET (verifies A3: a scoped name with / encoded as %2F answers):
+# curl -sS 'https://registry.npmjs.org/-/package/%40openai%2Fcodex/dist-tags'   (http 200; curl's status trailer removed)
+{"beta":"0.1.2505172116","native":"0.1.2505291658","linux-arm64":"0.154.0-linux-arm64","latest":"0.154.0","linux-x64":"0.154.0-linux-x64","win32-arm64":"0.154.0-win32-arm64","darwin-arm64":"0.154.0-darwin-arm64","darwin-x64":"0.154.0-darwin-x64","win32-x64":"0.154.0-win32-x64","alpha-darwin-arm64":"0.155.0-alpha.3.9-darwin-arm64","alpha":"0.155.0-alpha.3.9","alpha-linux-arm64":"0.155.0-alpha.3.9-linux-arm64","alpha-darwin-x64":"0.155.0-alpha.3.9-darwin-x64","alpha-linux-x64":"0.155.0-alpha.3.9-linux-x64","alpha-win32-x64":"0.155.0-alpha.3.9-win32-x64","alpha-win32-arm64":"0.155.0-alpha.3.9-win32-arm64"}
+# http=200

package/src/__tests__/fixtures/tool-probe/pypi-cowsay.txt

@@ -0,0 +1,3 @@
+# captured 2026-09-12 00:50 AEST, read-only GET: curl -sS https://pypi.org/pypi/cowsay/json
+# TRIMMED to info.name + info.version (the full body is ~100 KB of releases); the values are verbatim
+{"info":{"name":"cowsay","version":"6.1"}}

package/src/__tests__/fixtures/tool-probe/uv-receipt-browser-use.toml

@@ -0,0 +1,10 @@
+# captured 2026-09-12 00:42 AEST, read-only: cat ~/.local/share/uv/tools/browser-use/uv-receipt.toml (uv 0.11.15)
+[tool]
+requirements = [{ name = "browser-use" }]
+entrypoints = [
+    { name = "browser", install-path = "/Users/jack/.local/bin/browser", from = "browser-use" },
+    { name = "browser-use", install-path = "/Users/jack/.local/bin/browser-use", from = "browser-use" },
+    { name = "browser-use-tui", install-path = "/Users/jack/.local/bin/browser-use-tui", from = "browser-use" },
+    { name = "browseruse", install-path = "/Users/jack/.local/bin/browseruse", from = "browser-use" },
+    { name = "bu", install-path = "/Users/jack/.local/bin/bu", from = "browser-use" },
+]

package/src/__tests__/fixtures/tool-probe/uv-receipt-cowsay-git.toml

@@ -0,0 +1,8 @@
+# captured 2026-09-12 00:55 AEST: UV_TOOL_DIR=$SESSION/validation/captures/uv-scratch/tools UV_TOOL_BIN_DIR=$SESSION/validation/captures/uv-scratch/bin UV_CACHE_DIR=$SESSION/validation/captures/uv-scratch/cache UV_PYTHON_INSTALL_DIR=$SESSION/validation/captures/uv-scratch/python NO_COLOR=1 uv tool install --force git+https://github.com/VaasuDevanS/cowsay-python@v6.1
+# then: cat $SESSION/validation/captures/uv-scratch/tools/cowsay/uv-receipt.toml
+# $SESSION = claudish worktree update-fix2 ai-docs/sessions/dev-feature-claudeup-unify-20260911-2240 (the user's real uv tools were never touched)
+[tool]
+requirements = [{ name = "cowsay", git = "https://github.com/VaasuDevanS/cowsay-python?rev=v6.1" }]
+entrypoints = [
+    { name = "cowsay", install-path = "/Users/jack/mag/claudish/.claude/worktrees/update-fix2/ai-docs/sessions/dev-feature-claudeup-unify-20260911-2240/validation/captures/uv-scratch/bin/cowsay", from = "cowsay" },
+]

package/src/__tests__/fixtures/tool-probe/uv-receipt-cowsay-pinned.toml

@@ -0,0 +1,8 @@
+# captured 2026-09-12 00:54 AEST: UV_TOOL_DIR=$SESSION/validation/captures/uv-scratch/tools UV_TOOL_BIN_DIR=$SESSION/validation/captures/uv-scratch/bin UV_CACHE_DIR=$SESSION/validation/captures/uv-scratch/cache UV_PYTHON_INSTALL_DIR=$SESSION/validation/captures/uv-scratch/python NO_COLOR=1 uv tool install 'cowsay==6.0'
+# then: cat $SESSION/validation/captures/uv-scratch/tools/cowsay/uv-receipt.toml
+# $SESSION = claudish worktree update-fix2 ai-docs/sessions/dev-feature-claudeup-unify-20260911-2240 (the user's real uv tools were never touched)
+[tool]
+requirements = [{ name = "cowsay", specifier = "==6.0" }]
+entrypoints = [
+    { name = "cowsay", install-path = "/Users/jack/mag/claudish/.claude/worktrees/update-fix2/ai-docs/sessions/dev-feature-claudeup-unify-20260911-2240/validation/captures/uv-scratch/bin/cowsay", from = "cowsay" },
+]