coderifts 8.6.3 → 8.6.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coderifts",
-  "version": "8.6.3",
+  "version": "8.6.4",
   "description": "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
   "author": "CodeRifts <hello@coderifts.com>",
   "license": "MIT",

package/scripts/check-packed-install.js

@@ -85,7 +85,68 @@ try {
     fail('packed init --agents --atomic-v2 --dry-run did not mention atomic-v2 / WIRING_REQUIRED');
   }
 
-  process.stdout.write('packed install smoke: OK (atomic-v2 dry-run)\n');
+  // Packed `lock --check` must actually RUN two fixtures, not merely list the command.
+  // 8.6.3 threw CORE_UNAVAILABLE because mcp-lock-drift was a dynamic require outside the bundle.
+  const fixtures = path.join(tmp, 'lock-fixtures');
+  fs.mkdirSync(fixtures);
+  const lockedManifest = {
+    tools: [
+      { name: 'get_user', description: 'Get user', inputSchema: { type: 'object', properties: {} } },
+      { name: 'pay', description: 'Pay', inputSchema: { type: 'object', properties: {} } },
+    ],
+  };
+  const liveSame = JSON.parse(JSON.stringify(lockedManifest));
+  const liveDrift = {
+    tools: [
+      { name: 'get_user', description: 'Get user', inputSchema: { type: 'object', properties: {} } },
+    ],
+  };
+  const lockedPath = path.join(fixtures, 'locked.json');
+  const samePath = path.join(fixtures, 'live-same.json');
+  const driftPath = path.join(fixtures, 'live-drift.json');
+  fs.writeFileSync(lockedPath, `${JSON.stringify(lockedManifest)}\n`);
+  fs.writeFileSync(samePath, `${JSON.stringify(liveSame)}\n`);
+  fs.writeFileSync(driftPath, `${JSON.stringify(liveDrift)}\n`);
+
+  const lockOk = run(bin, [
+    'lock', '--check', '--json',
+    '--locked-manifest', lockedPath,
+    '--live-manifest', samePath,
+  ], { cwd: installDir, env: { ...process.env, NO_COLOR: '1' } });
+  if (lockOk.status !== 0) {
+    fail(`packed lock --check (identical fixtures) exited ${lockOk.status}:\n${lockOk.stderr}\n${lockOk.stdout}`);
+  }
+  if (/Cannot load mcp-lock-drift core/i.test(`${lockOk.stdout}\n${lockOk.stderr}`)) {
+    fail('packed lock --check still cannot load mcp-lock-drift core');
+  }
+  let okReport;
+  try { okReport = JSON.parse(lockOk.stdout); } catch (e) {
+    fail(`packed lock --check identical fixtures did not print JSON: ${e.message}\n${lockOk.stdout}`);
+  }
+  if (okReport.drift !== false) {
+    fail(`packed lock --check identical fixtures expected drift=false, got ${JSON.stringify(okReport)}`);
+  }
+
+  const lockDrift = run(bin, [
+    'lock', '--check', '--json',
+    '--locked-manifest', lockedPath,
+    '--live-manifest', driftPath,
+  ], { cwd: installDir, env: { ...process.env, NO_COLOR: '1' } });
+  if (lockDrift.status !== 3) {
+    fail(`packed lock --check (drift fixture) exited ${lockDrift.status}, expected 3:\n${lockDrift.stderr}\n${lockDrift.stdout}`);
+  }
+  if (/Cannot load mcp-lock-drift core/i.test(`${lockDrift.stdout}\n${lockDrift.stderr}`)) {
+    fail('packed lock --check drift fixture still cannot load mcp-lock-drift core');
+  }
+  let driftReport;
+  try { driftReport = JSON.parse(lockDrift.stdout); } catch (e) {
+    fail(`packed lock --check drift fixture did not print JSON: ${e.message}\n${lockDrift.stdout}`);
+  }
+  if (driftReport.drift !== true) {
+    fail(`packed lock --check drift fixture expected drift=true, got ${JSON.stringify(driftReport)}`);
+  }
+
+  process.stdout.write('packed install smoke: OK (atomic-v2 dry-run + lock --check two fixtures)\n');
 } finally {
   fs.rmSync(tmp, { recursive: true, force: true });
 }