crewhaus 0.1.4 → 0.1.6

package/{src/justification-gate.ts → dist/justification-gate.d.ts}

@@ -1,7 +1,5 @@
-import { join } from "node:path";
 import type { JustificationJudge } from "@crewhaus/permission-engine";
 import type { JustificationAuditSink } from "@crewhaus/runtime-core";
-
 /**
  * FR-004 — Pillar 3 intent-gate wiring for `crewhaus run`, factored out of
  * the entry file `index.ts` (which runs a top-level argv switch and so cannot
@@ -26,40 +24,25 @@ import type { JustificationAuditSink } from "@crewhaus/runtime-core";
  *   `--justification-judge` flag > spec `security.justification.judge` >
  *   `"rule-based"`.
  */
-
 export type JudgeChoice = "rule-based" | "claude";
-
-const VALID_JUDGE_CHOICES: ReadonlyArray<JudgeChoice> = ["rule-based", "claude"];
-
 /** Thrown by `resolveJudgeChoice` on an unrecognised choice. The CLI entry
  *  file catches it and routes the message through `die()`; tests assert on
  *  `.choice` / `.message` without the process exiting. */
-export class InvalidJudgeChoiceError extends Error {
-  override readonly name = "InvalidJudgeChoiceError";
-  constructor(readonly choice: string) {
-    super(`invalid --justification-judge "${choice}" — allowed: ${VALID_JUDGE_CHOICES.join(", ")}`);
-  }
+export declare class InvalidJudgeChoiceError extends Error {
+    readonly choice: string;
+    readonly name = "InvalidJudgeChoiceError";
+    constructor(choice: string);
 }
-
-function isJudgeChoice(s: string): s is JudgeChoice {
-  return (VALID_JUDGE_CHOICES as ReadonlyArray<string>).includes(s);
-}
-
 /**
  * Pure resolution of the judge choice from the flag value + spec block.
  * `flagValue` is the raw `--justification-judge` value (or undefined when the
  * flag is absent). Throws `InvalidJudgeChoiceError` for any value outside the
  * allowed set so the caller can `die()` with a friendly message.
  */
-export function resolveJudgeChoice(
-  flagValue: string | undefined,
-  securityJustification: { judge?: JudgeChoice; model?: string } | undefined,
-): JudgeChoice {
-  const raw = flagValue ?? securityJustification?.judge ?? "rule-based";
-  if (!isJudgeChoice(raw)) throw new InvalidJudgeChoiceError(raw);
-  return raw;
-}
-
+export declare function resolveJudgeChoice(flagValue: string | undefined, securityJustification: {
+    judge?: JudgeChoice;
+    model?: string;
+} | undefined): JudgeChoice;
 /**
  * Build the `JustificationJudge` for a resolved choice. Returns `undefined`
  * for `"rule-based"` so the caller omits `justificationJudge` from
@@ -76,38 +59,21 @@ export function resolveJudgeChoice(
  * `createAnthropicAdapter()` + verbatim model string broke every
  * non-Anthropic judge with model-not-found.
  */
-export async function createJustificationJudge(
-  choice: JudgeChoice,
-  model: string | undefined,
-): Promise<JustificationJudge | undefined> {
-  if (choice === "rule-based") return undefined;
-  const { resolveModel } = await import("@crewhaus/model-router");
-  const { createClaudeJustificationJudge } = await import("@crewhaus/justification-judge-claude");
-  const resolution = await resolveModel(model ?? "claude-haiku-4-5");
-  return createClaudeJustificationJudge({
-    adapter: resolution.adapter,
-    model: resolution.modelId,
-  });
-}
-
+export declare function createJustificationJudge(choice: JudgeChoice, model: string | undefined): Promise<JustificationJudge | undefined>;
 /** Directory the run path roots the durable justification audit log at. */
-export function justificationAuditDir(cwd: string): string {
-  return join(cwd, ".crewhaus", "audit");
-}
-
+export declare function justificationAuditDir(cwd: string): string;
 export type OpenJustificationAuditSinkOptions = {
-  /** Working directory; the sink is rooted at `<cwd>/.crewhaus/audit`. */
-  readonly cwd: string;
-  /**
-   * When false, no durable sink is opened (the gate keeps only its ephemeral
-   * trace-bus event). Defaults to true: `crewhaus run` writes the durable,
-   * hash-chained `permission_justification_evaluated` record by default so
-   * the intent gate's decisions are tamper-evident. The `--no-justification-audit`
-   * flag flips this off for ephemeral/offline runs.
-   */
-  readonly enabled?: boolean;
+    /** Working directory; the sink is rooted at `<cwd>/.crewhaus/audit`. */
+    readonly cwd: string;
+    /**
+     * When false, no durable sink is opened (the gate keeps only its ephemeral
+     * trace-bus event). Defaults to true: `crewhaus run` writes the durable,
+     * hash-chained `permission_justification_evaluated` record by default so
+     * the intent gate's decisions are tamper-evident. The `--no-justification-audit`
+     * flag flips this off for ephemeral/offline runs.
+     */
+    readonly enabled?: boolean;
 };
-
 /**
  * Open the durable `JustificationAuditSink` the gate appends to. Returns
  * `undefined` when disabled (so the caller spreads nothing into
@@ -115,10 +81,4 @@ export type OpenJustificationAuditSinkOptions = {
  * real `@crewhaus/audit-log` `AuditLog`, which structurally satisfies the
  * `JustificationAuditSink` seam (its `append({ kind, payload })`).
  */
-export async function openJustificationAuditSink(
-  opts: OpenJustificationAuditSinkOptions,
-): Promise<JustificationAuditSink | undefined> {
-  if (opts.enabled === false) return undefined;
-  const { openAuditLog } = await import("@crewhaus/audit-log");
-  return await openAuditLog({ rootDir: justificationAuditDir(opts.cwd) });
-}
+export declare function openJustificationAuditSink(opts: OpenJustificationAuditSinkOptions): Promise<JustificationAuditSink | undefined>;

package/dist/justification-gate.js

@@ -0,0 +1,72 @@
+import { join } from "node:path";
+const VALID_JUDGE_CHOICES = ["rule-based", "claude"];
+/** Thrown by `resolveJudgeChoice` on an unrecognised choice. The CLI entry
+ *  file catches it and routes the message through `die()`; tests assert on
+ *  `.choice` / `.message` without the process exiting. */
+export class InvalidJudgeChoiceError extends Error {
+    choice;
+    name = "InvalidJudgeChoiceError";
+    constructor(choice) {
+        super(`invalid --justification-judge "${choice}" — allowed: ${VALID_JUDGE_CHOICES.join(", ")}`);
+        this.choice = choice;
+    }
+}
+function isJudgeChoice(s) {
+    return VALID_JUDGE_CHOICES.includes(s);
+}
+/**
+ * Pure resolution of the judge choice from the flag value + spec block.
+ * `flagValue` is the raw `--justification-judge` value (or undefined when the
+ * flag is absent). Throws `InvalidJudgeChoiceError` for any value outside the
+ * allowed set so the caller can `die()` with a friendly message.
+ */
+export function resolveJudgeChoice(flagValue, securityJustification) {
+    const raw = flagValue ?? securityJustification?.judge ?? "rule-based";
+    if (!isJudgeChoice(raw))
+        throw new InvalidJudgeChoiceError(raw);
+    return raw;
+}
+/**
+ * Build the `JustificationJudge` for a resolved choice. Returns `undefined`
+ * for `"rule-based"` so the caller omits `justificationJudge` from
+ * `runChatLoop` (runtime-core then uses `ruleBasedJustificationJudge`, the
+ * documented default for tests/offline runs). For `"claude"` it lazily
+ * imports the model-router + `@crewhaus/justification-judge-claude` so
+ * that model-backed code only loads when actually selected.
+ *
+ * The judge model is resolved through the model-router, so the spec's
+ * `security.justification.model` accepts the full router grammar
+ * (claude-*, openai/*, gemini/*, bedrock/*, local/<m>@<url>) — the judge
+ * package only needs a `ProviderAdapter`. The wire model is the
+ * resolution's *stripped* modelId; the previous hardcoded
+ * `createAnthropicAdapter()` + verbatim model string broke every
+ * non-Anthropic judge with model-not-found.
+ */
+export async function createJustificationJudge(choice, model) {
+    if (choice === "rule-based")
+        return undefined;
+    const { resolveModel } = await import("@crewhaus/model-router");
+    const { createClaudeJustificationJudge } = await import("@crewhaus/justification-judge-claude");
+    const resolution = await resolveModel(model ?? "claude-haiku-4-5");
+    return createClaudeJustificationJudge({
+        adapter: resolution.adapter,
+        model: resolution.modelId,
+    });
+}
+/** Directory the run path roots the durable justification audit log at. */
+export function justificationAuditDir(cwd) {
+    return join(cwd, ".crewhaus", "audit");
+}
+/**
+ * Open the durable `JustificationAuditSink` the gate appends to. Returns
+ * `undefined` when disabled (so the caller spreads nothing into
+ * `runChatLoop` and the durable path is a no-op). The returned object is a
+ * real `@crewhaus/audit-log` `AuditLog`, which structurally satisfies the
+ * `JustificationAuditSink` seam (its `append({ kind, payload })`).
+ */
+export async function openJustificationAuditSink(opts) {
+    if (opts.enabled === false)
+        return undefined;
+    const { openAuditLog } = await import("@crewhaus/audit-log");
+    return await openAuditLog({ rootDir: justificationAuditDir(opts.cwd) });
+}

package/{src/scope-audit.ts → dist/scope-audit.d.ts}

@@ -1,6 +1,5 @@
-import { type ScopeFinding, auditToolScopes, isOutwardName } from "@crewhaus/tool-builder";
+import { type ScopeFinding, auditToolScopes } from "@crewhaus/tool-builder";
 import type { RegisteredTool } from "@crewhaus/tool-catalog";
-
 /**
  * FR-002 — Pillar 3 sink-side build-time gate. The canonical per-tool
  * `auditToolScopes` (and its `ScopeFinding` type) now live in
@@ -12,7 +11,6 @@ import type { RegisteredTool } from "@crewhaus/tool-catalog";
  * unchanged.
  */
 export { type ScopeFinding, auditToolScopes };
-
 /**
  * FR-002 — the `compile --strict` audit over the *spec-level* tool names a
  * lowered IR references (the IR only carries names, never RegisteredTools).
@@ -40,26 +38,7 @@ export { type ScopeFinding, auditToolScopes };
  * `resolve` is injected so this is a pure function unit-testable without the
  * CLI importing the (heavy, side-effectful) built-in tool packages.
  */
-export function auditSpecToolNames(
-  names: readonly string[],
-  resolve: (name: string) => RegisteredTool | undefined,
-): ScopeFinding[] {
-  const findings: ScopeFinding[] = [];
-  for (const name of names) {
-    const tool = resolve(name);
-    if (tool) {
-      findings.push(...auditToolScopes([tool]));
-    } else if (isOutwardName(name)) {
-      findings.push({
-        toolName: name,
-        reason:
-          'is an outward-reaching sink by name but could not be resolved to a scope:"external" tool at compile time (dynamic/MCP sinks must be vetted, not assumed) — its egress scope is unverifiable offline',
-      });
-    }
-  }
-  return findings;
-}
-
+export declare function auditSpecToolNames(names: readonly string[], resolve: (name: string) => RegisteredTool | undefined): ScopeFinding[];
 /**
  * FR-002 — collect every tool NAME referenced anywhere in a lowered IR,
  * variant-agnostically. The IR is a JSON-serializable discriminated union
@@ -68,22 +47,4 @@ export function auditSpecToolNames(
  * each variant's shape, walk the serialized object and gather every string
  * under a `tools` key. Deterministic and dedup'd.
  */
-export function collectToolNames(ir: unknown): string[] {
-  const names = new Set<string>();
-  const visit = (node: unknown): void => {
-    if (Array.isArray(node)) {
-      for (const item of node) visit(item);
-      return;
-    }
-    if (node !== null && typeof node === "object") {
-      for (const [key, value] of Object.entries(node as Record<string, unknown>)) {
-        if (key === "tools" && Array.isArray(value)) {
-          for (const v of value) if (typeof v === "string") names.add(v);
-        }
-        visit(value);
-      }
-    }
-  };
-  visit(ir);
-  return [...names];
-}
+export declare function collectToolNames(ir: unknown): string[];

package/dist/scope-audit.js

@@ -0,0 +1,85 @@
+import { auditToolScopes, isOutwardName } from "@crewhaus/tool-builder";
+/**
+ * FR-002 — Pillar 3 sink-side build-time gate. The canonical per-tool
+ * `auditToolScopes` (and its `ScopeFinding` type) now live in
+ * `@crewhaus/tool-builder`, next to `isOutwardName` and `buildTool` — the two
+ * facts the gate keys on — so every consumer (this CLI's `compile --strict`
+ * and `doctor --philosophy-alignment`, plus the `compile()` library and the
+ * compiler-worker) audits identically rather than re-deriving the rule. They
+ * are re-exported here so the CLI's existing import sites and tests are
+ * unchanged.
+ */
+export { auditToolScopes };
+/**
+ * FR-002 — the `compile --strict` audit over the *spec-level* tool names a
+ * lowered IR references (the IR only carries names, never RegisteredTools).
+ *
+ * For each name we ask `resolve` (the offline built-in tool map) for the
+ * concrete RegisteredTool:
+ *
+ *   - Resolved → run the same per-tool `auditToolScopes` check (capability or
+ *     outward-name vs scope). This is how the six built-ins are verified.
+ *   - Unresolved AND outward-by-name (`mcp__*` or a known outward built-in
+ *     name not in the offline map) → FINDING. The name is statically known to
+ *     be an external sink (the FR lists MCP calls among the definitionally-
+ *     outward kinds, and `buildTool` infers `external` for `mcp__*`), but the
+ *     compiler cannot prove offline that its scope is `"external"`. `--strict`
+ *     refuses to emit a bundle that reaches an outward sink whose external
+ *     scope it cannot verify — this is the criterion's "I/O-capable tool left
+ *     at an unspecified scope" from the compiler's offline vantage. Without
+ *     this, a spec referencing `mcp__evil__exfiltrate` slipped through.
+ *   - Unresolved and NOT outward-by-name → skipped. A name the offline map
+ *     doesn't know and whose name carries no outward signal is either a
+ *     pure-compute custom tool registered in code or a typo; the offline gate
+ *     has no capability fact to assert (the live `doctor --philosophy-
+ *     alignment` audit, which sees real RegisteredTools, covers the registry).
+ *
+ * `resolve` is injected so this is a pure function unit-testable without the
+ * CLI importing the (heavy, side-effectful) built-in tool packages.
+ */
+export function auditSpecToolNames(names, resolve) {
+    const findings = [];
+    for (const name of names) {
+        const tool = resolve(name);
+        if (tool) {
+            findings.push(...auditToolScopes([tool]));
+        }
+        else if (isOutwardName(name)) {
+            findings.push({
+                toolName: name,
+                reason: 'is an outward-reaching sink by name but could not be resolved to a scope:"external" tool at compile time (dynamic/MCP sinks must be vetted, not assumed) — its egress scope is unverifiable offline',
+            });
+        }
+    }
+    return findings;
+}
+/**
+ * FR-002 — collect every tool NAME referenced anywhere in a lowered IR,
+ * variant-agnostically. The IR is a JSON-serializable discriminated union
+ * (14 variants); some carry tools at the top level (`IrV0.tools`), others
+ * nest them under steps / nodes / stages / sub-agents. Rather than couple to
+ * each variant's shape, walk the serialized object and gather every string
+ * under a `tools` key. Deterministic and dedup'd.
+ */
+export function collectToolNames(ir) {
+    const names = new Set();
+    const visit = (node) => {
+        if (Array.isArray(node)) {
+            for (const item of node)
+                visit(item);
+            return;
+        }
+        if (node !== null && typeof node === "object") {
+            for (const [key, value] of Object.entries(node)) {
+                if (key === "tools" && Array.isArray(value)) {
+                    for (const v of value)
+                        if (typeof v === "string")
+                            names.add(v);
+                }
+                visit(value);
+            }
+        }
+    };
+    visit(ir);
+    return [...names];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crewhaus",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "type": "module",
   "description": "CrewHaus — the meta-harness compiler for AI agents. Compile one crewhaus.yaml spec into a CLI agent, channel bot, RAG pipeline, multi-agent crew, eval harness, voice or browser agent, and more.",
   "keywords": [
@@ -17,80 +17,83 @@
     "rag",
     "eval"
   ],
-  "main": "src/index.ts",
+  "main": "dist/index.js",
   "bin": {
-    "crewhaus": "src/index.ts"
+    "crewhaus": "dist/index.js"
   },
   "exports": {
-    ".": "./src/index.ts"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
   },
   "scripts": {
     "test": "bun test src"
   },
   "dependencies": {
-    "@crewhaus/adapter-anthropic": "0.1.4",
-    "@crewhaus/agent-context-isolation": "0.1.4",
-    "@crewhaus/audit-log": "0.1.4",
-    "@crewhaus/eval-optimizer-orchestrator": "0.1.4",
-    "@crewhaus/prompt-optimizer": "0.1.4",
-    "@crewhaus/prompt-optimizer-claude": "0.1.4",
-    "@crewhaus/justification-judge-claude": "0.1.4",
-    "@crewhaus/spec-patch": "0.1.4",
-    "@crewhaus/canary-controller": "0.1.4",
-    "@crewhaus/compiler": "0.1.4",
-    "@crewhaus/computer-use-driver": "0.1.4",
-    "@crewhaus/context-bundle": "0.1.4",
-    "@crewhaus/deployment-controller": "0.1.4",
-    "@crewhaus/egress-classifier": "0.1.4",
-    "@crewhaus/egress-matcher-semantic": "0.1.4",
-    "@crewhaus/embedder": "0.1.4",
-    "@crewhaus/errors": "0.1.4",
-    "@crewhaus/eval-dataset": "0.1.4",
-    "@crewhaus/eval-grader": "0.1.4",
-    "@crewhaus/eval-report": "0.1.4",
-    "@crewhaus/eval-runner": "0.1.4",
-    "@crewhaus/hooks-engine": "0.1.4",
-    "@crewhaus/infra-utils": "0.1.4",
-    "@crewhaus/ir": "0.1.4",
-    "@crewhaus/logging": "0.1.4",
-    "@crewhaus/mcp-host": "0.1.4",
-    "@crewhaus/model-router": "0.1.4",
-    "@crewhaus/migration-engine": "0.1.4",
-    "@crewhaus/migration-runner": "0.1.4",
-    "@crewhaus/permission-engine": "0.1.4",
-    "@crewhaus/run-context": "0.1.4",
-    "@crewhaus/runtime-core": "0.1.4",
-    "@crewhaus/secrets-manager": "0.1.4",
-    "@crewhaus/session-store": "0.1.4",
-    "@crewhaus/spec-registry": "0.1.4",
-    "@crewhaus/skills-registry": "0.1.4",
-    "@crewhaus/slash-commands": "0.1.4",
-    "@crewhaus/spec": "0.1.4",
-    "@crewhaus/sub-agent-spawner": "0.1.4",
-    "@crewhaus/trace-event-bus": "0.1.4",
-    "@crewhaus/tool-bash": "0.1.4",
-    "@crewhaus/tool-builder": "0.1.4",
-    "@crewhaus/tool-catalog": "0.1.4",
-    "@crewhaus/tool-codegraph": "0.1.4",
-    "@crewhaus/tool-fetch": "0.1.4",
-    "@crewhaus/tool-fs": "0.1.4",
-    "@crewhaus/tool-image": "0.1.4",
-    "@crewhaus/tool-image-generation": "0.1.4",
-    "@crewhaus/tool-document-ingest": "0.1.4",
-    "@crewhaus/tool-mcp": "0.1.4",
-    "@crewhaus/tool-mouse-keyboard": "0.1.4",
-    "@crewhaus/tool-navigate": "0.1.4",
-    "@crewhaus/tool-screen-capture": "0.1.4",
-    "@crewhaus/tool-task": "0.1.4",
-    "@crewhaus/tool-todo": "0.1.4",
-    "@crewhaus/tool-vision-grounding": "0.1.4",
-    "@crewhaus/tool-web": "0.1.4",
-    "@crewhaus/docker-images": "0.1.4",
-    "@crewhaus/crewhaus-cloud": "0.1.4",
-    "@crewhaus/federation-discovery": "0.1.4",
-    "@crewhaus/sandbox": "0.1.4",
-    "@crewhaus/sandbox-image-registry": "0.1.4",
-    "@crewhaus/compliance-controls": "0.1.4"
+    "@crewhaus/adapter-anthropic": "0.1.6",
+    "@crewhaus/agent-context-isolation": "0.1.6",
+    "@crewhaus/audit-log": "0.1.6",
+    "@crewhaus/eval-optimizer-orchestrator": "0.1.6",
+    "@crewhaus/prompt-optimizer": "0.1.6",
+    "@crewhaus/prompt-optimizer-claude": "0.1.6",
+    "@crewhaus/justification-judge-claude": "0.1.6",
+    "@crewhaus/spec-patch": "0.1.6",
+    "@crewhaus/canary-controller": "0.1.6",
+    "@crewhaus/compiler": "0.1.6",
+    "@crewhaus/computer-use-driver": "0.1.6",
+    "@crewhaus/context-bundle": "0.1.6",
+    "@crewhaus/deployment-controller": "0.1.6",
+    "@crewhaus/egress-classifier": "0.1.6",
+    "@crewhaus/egress-matcher-semantic": "0.1.6",
+    "@crewhaus/embedder": "0.1.6",
+    "@crewhaus/errors": "0.1.6",
+    "@crewhaus/eval-dataset": "0.1.6",
+    "@crewhaus/eval-grader": "0.1.6",
+    "@crewhaus/eval-report": "0.1.6",
+    "@crewhaus/eval-runner": "0.1.6",
+    "@crewhaus/hooks-engine": "0.1.6",
+    "@crewhaus/infra-utils": "0.1.6",
+    "@crewhaus/ir": "0.1.6",
+    "@crewhaus/logging": "0.1.6",
+    "@crewhaus/mcp-host": "0.1.6",
+    "@crewhaus/model-router": "0.1.6",
+    "@crewhaus/migration-engine": "0.1.6",
+    "@crewhaus/migration-runner": "0.1.6",
+    "@crewhaus/permission-engine": "0.1.6",
+    "@crewhaus/run-context": "0.1.6",
+    "@crewhaus/runtime-core": "0.1.6",
+    "@crewhaus/secrets-manager": "0.1.6",
+    "@crewhaus/session-store": "0.1.6",
+    "@crewhaus/spec-registry": "0.1.6",
+    "@crewhaus/skills-registry": "0.1.6",
+    "@crewhaus/slash-commands": "0.1.6",
+    "@crewhaus/spec": "0.1.6",
+    "@crewhaus/sub-agent-spawner": "0.1.6",
+    "@crewhaus/trace-event-bus": "0.1.6",
+    "@crewhaus/tool-bash": "0.1.6",
+    "@crewhaus/tool-builder": "0.1.6",
+    "@crewhaus/tool-catalog": "0.1.6",
+    "@crewhaus/tool-codegraph": "0.1.6",
+    "@crewhaus/tool-fetch": "0.1.6",
+    "@crewhaus/tool-fs": "0.1.6",
+    "@crewhaus/tool-image": "0.1.6",
+    "@crewhaus/tool-image-generation": "0.1.6",
+    "@crewhaus/tool-document-ingest": "0.1.6",
+    "@crewhaus/tool-mcp": "0.1.6",
+    "@crewhaus/tool-mouse-keyboard": "0.1.6",
+    "@crewhaus/tool-navigate": "0.1.6",
+    "@crewhaus/tool-screen-capture": "0.1.6",
+    "@crewhaus/tool-task": "0.1.6",
+    "@crewhaus/tool-todo": "0.1.6",
+    "@crewhaus/tool-vision-grounding": "0.1.6",
+    "@crewhaus/tool-web": "0.1.6",
+    "@crewhaus/docker-images": "0.1.6",
+    "@crewhaus/crewhaus-cloud": "0.1.6",
+    "@crewhaus/federation-discovery": "0.1.6",
+    "@crewhaus/sandbox": "0.1.6",
+    "@crewhaus/sandbox-image-registry": "0.1.6",
+    "@crewhaus/compliance-controls": "0.1.6"
   },
   "devDependencies": {
     "zod": "^3.23.8"
@@ -113,5 +116,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "files": ["src", "README.md", "LICENSE", "NOTICE"]
+  "files": ["dist", "README.md", "LICENSE", "NOTICE"]
 }

package/src/doctor-checks.test.ts

@@ -1,122 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import { buildCredentialChecks, extractSpecModel, selectedProvider } from "./doctor-checks";
-
-const yamlFor = (model: string): string =>
-  `name: t\ntarget: cli\nagent:\n  model: ${model}\n  instructions: hi\n`;
-
-describe("extractSpecModel", () => {
-  test("extracts agent.model from a valid spec", () => {
-    expect(extractSpecModel(yamlFor("openai/gpt-4o-mini"))).toBe("openai/gpt-4o-mini");
-  });
-
-  test("returns undefined for an unparseable spec (doctor must not crash)", () => {
-    expect(extractSpecModel("name: t\ntarget: cli\n")).toBeUndefined();
-    expect(extractSpecModel(":::not yaml at all")).toBeUndefined();
-  });
-});
-
-describe("selectedProvider", () => {
-  test("maps the full router grammar to doctor providers", () => {
-    expect(selectedProvider("claude-sonnet-4-5")).toBe("anthropic");
-    expect(selectedProvider("openai/gpt-4o-mini")).toBe("openai");
-    expect(selectedProvider("gemini/gemini-2.5-flash")).toBe("gemini");
-    expect(selectedProvider("bedrock/us.anthropic.claude-sonnet-4-5-20250929-v1:0")).toBe(
-      "bedrock",
-    );
-    // local/<m>@<url> parses to openai WITH a baseUrl → credential-free.
-    expect(selectedProvider("local/llama3.2@http://localhost:11434/v1")).toBe("local");
-  });
-
-  test("returns undefined for unrecognised model strings", () => {
-    expect(selectedProvider("gpt-4o-mini")).toBeUndefined();
-  });
-});
-
-describe("buildCredentialChecks — model-aware", () => {
-  test("openai spec + OPENAI_API_KEY passes; missing Anthropic creds do NOT fail", () => {
-    const checks = buildCredentialChecks("openai/gpt-4o-mini", { OPENAI_API_KEY: "sk-x" });
-    const selected = checks[0];
-    expect(selected?.label).toContain("OpenAI credentials");
-    expect(selected?.pass).toBe(true);
-    expect(checks.every((c) => c.pass)).toBe(true);
-    expect(checks.some((c) => c.label.includes("Anthropic") && !c.pass)).toBe(false);
-  });
-
-  test("openai spec accepts OPENAI_BASE_URL as the credential surface", () => {
-    const checks = buildCredentialChecks("openai/gpt-4o-mini", {
-      OPENAI_BASE_URL: "http://vllm:8000/v1",
-    });
-    expect(checks[0]?.pass).toBe(true);
-  });
-
-  test("openai spec without provider env FAILS the selected check", () => {
-    const checks = buildCredentialChecks("openai/gpt-4o-mini", {});
-    expect(checks[0]?.pass).toBe(false);
-    expect(checks[0]?.reason).toContain("OPENAI_API_KEY");
-  });
-
-  test("gemini spec: GEMINI_API_KEY, GOOGLE_API_KEY, or Vertex env all satisfy", () => {
-    expect(buildCredentialChecks("gemini/gemini-2.5-flash", { GEMINI_API_KEY: "g" })[0]?.pass).toBe(
-      true,
-    );
-    expect(buildCredentialChecks("gemini/gemini-2.5-flash", { GOOGLE_API_KEY: "g" })[0]?.pass).toBe(
-      true,
-    );
-    expect(
-      buildCredentialChecks("gemini/gemini-2.5-flash", {
-        GOOGLE_GENAI_USE_VERTEXAI: "1",
-        GOOGLE_CLOUD_PROJECT: "p",
-      })[0]?.pass,
-    ).toBe(true);
-    const missing = buildCredentialChecks("gemini/gemini-2.5-flash", {});
-    expect(missing[0]?.pass).toBe(false);
-  });
-
-  test("bedrock spec is INFORMATIONAL — never fails even with no AWS env (SDK chain is authoritative)", () => {
-    const none = buildCredentialChecks("bedrock/us.anthropic.claude-sonnet-4-5-20250929-v1:0", {});
-    expect(none[0]?.pass).toBe(true);
-    expect(none[0]?.warn).toBe(true);
-    expect(none[0]?.reason).toContain("SDK default credential chain");
-    const some = buildCredentialChecks("bedrock/anthropic.claude-sonnet-4-5-20250929-v1:0", {
-      AWS_PROFILE: "dev",
-    });
-    expect(some[0]?.pass).toBe(true);
-  });
-
-  test("local spec needs no credentials", () => {
-    const checks = buildCredentialChecks("local/llama3.2@http://localhost:11434/v1", {});
-    expect(checks[0]?.pass).toBe(true);
-    expect(checks[0]?.label).toContain("Local endpoint");
-  });
-
-  test("non-selected providers with env set surface as informational warn lines, not failures", () => {
-    const checks = buildCredentialChecks("openai/gpt-4o-mini", {
-      OPENAI_API_KEY: "sk-x",
-      ANTHROPIC_API_KEY: "sk-ant",
-    });
-    const anthropicLine = checks.find((c) => c.label.includes("Anthropic"));
-    expect(anthropicLine?.pass).toBe(true);
-    expect(anthropicLine?.warn).toBe(true);
-    expect(anthropicLine?.label).toContain("not required");
-  });
-});
-
-describe("buildCredentialChecks — no spec model (legacy fallback)", () => {
-  test("Anthropic creds present → plain pass (unchanged behaviour)", () => {
-    const checks = buildCredentialChecks(undefined, { ANTHROPIC_API_KEY: "sk-ant" });
-    expect(checks).toEqual([{ label: "Anthropic credentials", pass: true }]);
-  });
-
-  test("no creds at all → hard fail (unchanged behaviour)", () => {
-    const checks = buildCredentialChecks(undefined, {});
-    expect(checks[0]?.pass).toBe(false);
-    expect(checks[0]?.reason).toContain("ANTHROPIC_AUTH_TOKEN");
-  });
-
-  test("missing Anthropic creds downgrade to informational when another provider env is clearly set", () => {
-    const checks = buildCredentialChecks(undefined, { OPENAI_API_KEY: "sk-x" });
-    expect(checks[0]?.pass).toBe(true);
-    expect(checks[0]?.warn).toBe(true);
-    expect(checks[0]?.reason).toContain("OpenAI");
-  });
-});