direxio-deployer 0.1.0 → 0.1.2

package/tests/skill_structure_test.sh

@@ -1,298 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT=$(cd "$(dirname "$0")/.." && pwd)
-cd "$ROOT"
-
-required=(
-  AGENTS.md
-  package.json
-  SKILL.md
-  README.md
-  README_zh.md
-  bin/direxio-deployer.mjs
-  scripts/orchestrate.sh
-  scripts/orchestrate.ps1
-  scripts/aws-credentials.sh
-  scripts/destroy.sh
-  scripts/destroy.ps1
-  scripts/update.sh
-  scripts/reset-app-data.sh
-  scripts/pricing-estimate.sh
-  scripts/mcp-tools-list.mjs
-  scripts/lib/ops.sh
-  scripts/lib/operation_report.sh
-  scripts/phases/s6_wire_local.sh
-  tests/operation_report_test.sh
-  tests/npm_skill_distribution_test.sh
-  tests/orchestrate_status_recovery_test.sh
-  tests/update_reset_ops_test.sh
-  tests/aws_credentials_test.sh
-  tests/connect_daemon_runtime_check_test.sh
-  tests/pricing_estimate_test.sh
-  tests/route53_zone_auto_create_test.sh
-  tests/route53_overwrite_guard_test.sh
-  tests/destroy_root_identity_test.sh
-  tests/destroy_route53_zone_test.sh
-  tests/domain_authoritative_dns_test.sh
-  tests/mcp_doctor_runtime_check_test.sh
-  tests/mcp_smoke_runtime_check_test.sh
-  tests/mcp_tools_runtime_check_test.sh
-  tests/root_volume_tracking_test.sh
-  tests/runtime_summary_check_test.sh
-  tests/user_confirmation_gates_test.sh
-  references/agent-targets.md
-  references/deployment-optimization-audit.md
-  references/runtime-wiring.md
-)
-
-for path in "${required[@]}"; do
-  [ -s "$path" ] || {
-    echo "missing or empty required file: $path" >&2
-    exit 1
-  }
-done
-
-grep -q 'direxio/message-server:latest' SKILL.md
-grep -q 'direxio-deployer' package.json
-grep -q 'bin/direxio-deployer.mjs' package.json
-grep -q 'skill install --agent' README.md
-grep -q 'skill update --agent' README_zh.md
-grep -q 'skill refresh --agent' SKILL.md
-grep -q 'Windows PowerShell' README.md
-grep -q 'Windows PowerShell' README_zh.md
-grep -q '.direxio-skill-install.json' references/agent-targets.md
-grep -q 'DIREXIO_DOMAIN' scripts/phases/s6_wire_local.sh
-grep -q 'DIREXIO_AGENT_TOKEN' scripts/phases/s6_wire_local.sh
-grep -q 'DIREXIO_AGENT_ROOM_ID' scripts/phases/s6_wire_local.sh
-grep -q 'DIREXIO_CC_CONNECT_REPO' scripts/phases/s6_wire_local.sh
-grep -q 'DIREXIO_LOCAL_PATH_STYLE' scripts/phases/s6_wire_local.sh
-grep -q 'DIREXIO_CREDENTIALS_FILE' scripts/phases/s6_wire_local.sh
-grep -q 'direxio-mcp' scripts/phases/s6_wire_local.sh
-grep -q 'PLATFORMS_INCLUDE=matrix' scripts/phases/s6_wire_local.sh
-grep -q 'YingSuiAI/direxio-connect.git' scripts/phases/s6_wire_local.sh
-grep -q 'DIREXIO_CC_CONNECT_AGENT' scripts/phases/s6_wire_local.sh
-grep -q 'orchestrate.ps1' README.md
-grep -q 'destroy.ps1' README.md
-grep -q 'destroy.ps1' README_zh.md
-grep -q 'destroy.ps1' SKILL.md
-grep -q 'destroy.ps1' references/deployment-workflow.md
-grep -q 'destroy.ps1' references/windows-deployment-notes.md
-grep -q 'cc-connect' SKILL.md
-grep -q 'mcp_config_dir' SKILL.md
-grep -q 'mcp_codex_config' references/runtime-wiring.md
-if grep -R '@direxio/agent-plugins' SKILL.md scripts README.md README_zh.md references >/dev/null; then
-  echo "current docs/scripts must not reference legacy agent plugin packages" >&2
-  exit 1
-fi
-grep -q '简体中文](README_zh.md)' README.md
-grep -q '通用 Agent Skill' README_zh.md
-grep -q 'PROJECT_ROOT/.cursor/skills/direxio-deployer' references/agent-targets.md
-grep -q 'direxio-connent' references/agent-targets.md
-grep -q 'direxio-connect daemon install' references/agent-targets.md
-grep -q 'acp antigravity claudecode codex copilot cursor devin gemini iflow kimi opencode pi qoder reasonix tmux' references/agent-targets.md
-
-if grep -R 'YingSuiAI/cc-connect\|github.com/YingSuiAI/cc-connect' SKILL.md scripts README.md README_zh.md references AGENTS.md >/dev/null; then
-  echo "current docs/scripts must use YingSuiAI/direxio-connect, not the old YingSuiAI/cc-connect repository" >&2
-  exit 1
-fi
-
-if grep -RE '(^|[^[:alnum:]_])([a-z0-9-]+\.)*example\.com([^[:alnum:]_]|$)' SKILL.md references scripts README.md README_zh.md >/dev/null; then
-  echo "published docs/scripts must use placeholders such as __DOMAIN__, not example.com-style domains" >&2
-  exit 1
-fi
-
-if grep -RE '(^|[^[:alnum:]_])([a-z0-9-]+\.)*direxio\.ai([^[:alnum:]_]|$)' SKILL.md references scripts README.md README_zh.md >/dev/null; then
-  echo "published docs/scripts must use placeholders such as __DOMAIN__, not real Direxio-owned domains" >&2
-  exit 1
-fi
-
-if grep -RE 'agentp2p\.im|54\.161\.73\.211' SKILL.md references scripts README.md README_zh.md >/dev/null; then
-  echo "published docs/scripts must use placeholders such as __DOMAIN__ and __EIP__, not session-specific domains or IPs" >&2
-  exit 1
-fi
-
-if awk '/_write_cc_connect_config\(\)/,/^}/' scripts/phases/s6_wire_local.sh | grep -q 'DIREXIO_CREDENTIALS_FILE'; then
-  echo "cc-connect config must not use DIREXIO_CREDENTIALS_FILE; it must use direct Matrix config" >&2
-  exit 1
-fi
-
-if awk '/_print_cc_connect_guidance\(\)/,/^}/' scripts/phases/s6_wire_local.sh | grep -q 'DIREXIO_CREDENTIALS_FILE'; then
-  echo "cc-connect guidance must not use DIREXIO_CREDENTIALS_FILE; MCP guidance owns that env var" >&2
-  exit 1
-fi
-
-if grep -RE 'fixed order.*\.codex.*\.hermes|\.codex.*checked before.*\.hermes' SKILL.md references scripts README.md README_zh.md >/dev/null; then
-  echo "published docs/scripts must not describe stale Codex-before-Hermes runtime detection" >&2
-  exit 1
-fi
-
-if grep -R 'direxio-mcp@0\.1\.[0-9]' SKILL.md references scripts README.md README_zh.md >/dev/null; then
-  echo "published docs/scripts must not reference stale direxio-mcp versions" >&2
-  exit 1
-fi
-
-if grep -R 'direxio-connent@1\.' SKILL.md references scripts README.md README_zh.md >/dev/null; then
-  echo "published docs/scripts must not pin direxio-connent by default" >&2
-  exit 1
-fi
-
-if grep -RE 'Elastic IP.*attached.*free|attached.*Elastic IP.*free' SKILL.md references scripts README.md README_zh.md >/dev/null; then
-  echo "published docs/scripts must not say attached Elastic IP or public IPv4 is free" >&2
-  exit 1
-fi
-
-if grep -F 'Host runtimes such as Hermes or OpenClaw are not cc-connect backends; when they are detected, set `DIREXIO_CC_CONNECT_AGENT` explicitly' SKILL.md >/dev/null; then
-  echo "SKILL.md must not override ACP-backed OpenClaw/Hermes defaults with stale explicit-agent guidance" >&2
-  exit 1
-fi
-
-if grep -F 'paste into the IM login form' scripts/orchestrate.sh SKILL.md >/dev/null; then
-  echo "delivery output must present the password field as an app initialization code, not an IM login form password" >&2
-  exit 1
-fi
-
-if grep -F 'Deployment Complete' scripts/orchestrate.sh SKILL.md references/deployment-workflow.md >/dev/null; then
-  echo "delivery output must not call S7 green the final deployment completion state" >&2
-  exit 1
-fi
-
-if grep -F 'Service URL' scripts/orchestrate.sh SKILL.md references/deployment-workflow.md >/dev/null; then
-  echo "new deployment delivery should give the App domain and init code, not a service URL/initialization URL" >&2
-  exit 1
-fi
-
-if grep -F 'Destroy      :' scripts/orchestrate.sh SKILL.md >/dev/null; then
-  echo "new deployment delivery should not present destroy as a user-copied command; ask the agent to destroy instead" >&2
-  exit 1
-fi
-
-if grep -R 'destroy command' SKILL.md references/user-journey.md references/deployment-lessons.md >/dev/null; then
-  echo "new deployment delivery docs should describe asking the agent to destroy, not delivering a destroy command" >&2
-  exit 1
-fi
-
-grep -q 'Root access keys are allowed when the operator explicitly chooses them' SKILL.md
-
-if grep -RE '_find_route53_zone.*does NOT create|never creates hosted zone|hosted zone must exist before S3_PROVISION|Do not rely on the script to create the zone' SKILL.md references README.md README_zh.md >/dev/null; then
-  echo "published docs must not preserve stale Route53 hosted-zone manual-create guidance" >&2
-  exit 1
-fi
-
-if grep -R 'IM passwords\|login password\|login form\|登录密码\|IM 地址' SKILL.md references scripts README.md README_zh.md >/dev/null; then
-  echo "published docs/scripts must call the user-facing field an initialization code, not a login password" >&2
-  exit 1
-fi
-
-grep -q 'eight-digit app initialization code' SKILL.md
-grep -q 'S7 green is not the final product-complete state' SKILL.md
-grep -q 'non-polluting' SKILL.md
-grep -q 'direxio-mcp@latest' SKILL.md
-grep -q 'direxio-connent@latest' SKILL.md
-grep -q 'DirexioDeployer' SKILL.md
-grep -q 'AdministratorAccess' SKILL.md
-grep -qi 'root access keys are allowed' SKILL.md
-grep -q 'Destroy uses the same AWS identity boundary as deployment' SKILL.md
-grep -q 'Destroy allows root AWS access-key identity' references/deployment-workflow.md
-grep -q 'Recovery summary' SKILL.md
-grep -q 'operation-report.json' SKILL.md
-grep -q 'destroy.evidence' SKILL.md
-grep -q 'user_confirmation_details' SKILL.md
-grep -q 'confirmation evidence is redacted' SKILL.md
-grep -q 'eight-or-more digit numeric strings' SKILL.md
-grep -q 'eight-or-more digit numeric strings' references/deployment-workflow.md
-grep -q 'credentials.status' SKILL.md
-grep -q 'mcp.status' SKILL.md
-grep -q 'credentials.status=refresh_pending' references/deployment-workflow.md
-grep -q 'mcp.status=refresh_pending' references/deployment-workflow.md
-grep -q 'stops only the matching service-scoped direxio-connect daemon' references/deployment-workflow.md
-grep -q 'possible_remaining_billable_resources' SKILL.md
-grep -q 'EBS root volume' SKILL.md
-grep -q 'destroy.evidence' references/deployment-workflow.md
-grep -q 'scripts/orchestrate.sh report new_deploy' SKILL.md
-grep -q 'scripts/update.sh' SKILL.md
-grep -q 'scripts/reset-app-data.sh' SKILL.md
-grep -q 'clears old user-confirmation/runtime-check evidence' SKILL.md
-grep -q 'agent_install_status=refresh_pending' SKILL.md
-grep -q 'stops only the matching service-scoped direxio-connect daemon' SKILL.md
-grep -q 'Local refresh:' SKILL.md
-grep -q 'rerun the deployment workflow to refresh S4-S7' SKILL.md
-grep -q 'refresh_pending' references/token-refresh.md
-grep -q 'user_confirmations.*runtime_checks' references/token-refresh.md
-grep -q 'stops only the matching service-scoped direxio-connect daemon' references/token-refresh.md
-grep -q 'Local refresh:' references/token-refresh.md
-grep -q 'rerun the deployment workflow to refresh S4-S7' references/token-refresh.md
-grep -q 'DIREXIO_RESET_APP_DATA_CONFIRM=1' SKILL.md
-grep -q 'scripts/aws-credentials.sh import-csv' SKILL.md
-grep -q 'scripts/aws-credentials.sh verify' SKILL.md
-grep -q 'scripts/pricing-estimate.sh' SKILL.md
-grep -q 'pricing-estimate.sh --state' references/deployment-workflow.md
-grep -q 'cost_estimate' SKILL.md
-grep -q 'cost_estimate' references/deployment-workflow.md
-grep -q 'orchestrate.sh confirm app_initialization' SKILL.md
-grep -q 'orchestrate.sh confirm agent_mcp_runtime' SKILL.md
-grep -q 'DIREXIO_CONFIRM_RUNTIME_PROBE=1' SKILL.md
-grep -q 'runtime_checks.summary.status' SKILL.md
-grep -q 'confirm` command requires `DIREXIO_CONFIRM_EVIDENCE`' SKILL.md
-grep -q 'at least 12 characters' SKILL.md
-grep -q 'orchestrate.sh verify connect_daemon' SKILL.md
-grep -q 'orchestrate.sh verify mcp_doctor' SKILL.md
-grep -q 'orchestrate.sh verify mcp_smoke' SKILL.md
-grep -q 'orchestrate.sh verify mcp_tools' SKILL.md
-grep -q 'orchestrate.sh verify runtime' SKILL.md
-grep -q 'orchestrate.sh confirm app_initialization' references/deployment-workflow.md
-grep -q 'DIREXIO_CONFIRM_RUNTIME_PROBE=1' references/deployment-workflow.md
-grep -q 'All `confirm` commands require `DIREXIO_CONFIRM_EVIDENCE`' references/deployment-workflow.md
-grep -q 'at least 12 characters' references/deployment-workflow.md
-grep -q 'orchestrate.sh verify connect_daemon' references/deployment-workflow.md
-grep -q 'orchestrate.sh verify mcp_doctor' references/deployment-workflow.md
-grep -q 'orchestrate.sh verify mcp_smoke' references/deployment-workflow.md
-grep -q 'orchestrate.sh verify mcp_tools' references/deployment-workflow.md
-grep -q 'orchestrate.sh verify runtime' references/deployment-workflow.md
-grep -q 'DIREXIO_CONFIRM_DNS_OVERWRITE=1' SKILL.md
-grep -q 'DIREXIO_CONFIRM_DNS_OVERWRITE=1' references/deployment-workflow.md
-grep -q 'authoritative DNS' SKILL.md
-grep -q 'AWS Budget' SKILL.md
-grep -q 'AWS Budget' references/deployment-workflow.md
-grep -q 'AWS Billing Console' SKILL.md
-grep -q 'Current MVP deployment path is EC2-only' SKILL.md
-grep -q 'Lightsail requires a separate deploy_mode=lightsail implementation before it can be offered' SKILL.md
-grep -q 'rotate/remove root access keys if used' SKILL.md
-grep -q 'temporary IAM key' scripts/orchestrate.sh
-
-for requirement_id in \
-  DEPLOY-P0-001 \
-  DEPLOY-P0-002 \
-  DEPLOY-P0-003 \
-  DEPLOY-P0-004 \
-  DEPLOY-P0-005 \
-  DEPLOY-P1-001 \
-  DEPLOY-P1-002 \
-  DEPLOY-P1-003 \
-  DEPLOY-P1-004 \
-  DEPLOY-P1-005 \
-  DEPLOY-P2-001 \
-  DEPLOY-P2-002 \
-  DEPLOY-P2-003 \
-  DEPLOY-P2-004; do
-  grep -q "$requirement_id" references/deployment-optimization-audit.md
-done
-
-grep -q 'Deployer-side implemented' references/deployment-optimization-audit.md
-grep -q 'Runtime evidence still required' references/deployment-optimization-audit.md
-grep -q 'Current best plan' references/deployment-optimization-audit.md
-grep -q '~/.direxio/nodes/<service_id>/' references/deployment-optimization-audit.md
-grep -q 'verify runtime is an internal non-polluting check' references/deployment-optimization-audit.md
-grep -q 'user App initialization and real chat evidence' references/deployment-optimization-audit.md
-grep -q 'update/reset are now first-class scripts' references/deployment-optimization-audit.md
-grep -q 'Local refresh' references/deployment-optimization-audit.md
-grep -q 'cleared old credentials, user confirmations, runtime checks, and bridge install proof' references/deployment-optimization-audit.md
-grep -q 'stops only the matching service-scoped direxio-connect daemon' references/deployment-optimization-audit.md
-grep -q 'Lightsail remains deferred' references/deployment-optimization-audit.md
-
-if grep -RE 'DOMAIN_MODE=lightsail|DEPLOY_MODE=lightsail|choose between EC2 and Lightsail|Lightsail automatic deployment is supported' SKILL.md README.md README_zh.md references scripts >/dev/null; then
-  echo "current docs/scripts must not offer Lightsail as an implemented automatic deployment path" >&2
-  exit 1
-fi
-
-echo "skill structure ok"

package/tests/update_reset_ops_test.sh

@@ -1,230 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT=$(cd "$(dirname "$0")/.." && pwd)
-tmp=$(mktemp -d)
-trap 'rm -rf "$tmp"' EXIT
-
-export HOME="$tmp/home"
-mkdir -p "$HOME"
-
-fakebin="$tmp/bin"
-mkdir -p "$fakebin"
-
-cat > "$fakebin/ssh" <<'EOF'
-#!/usr/bin/env bash
-set -euo pipefail
-printf 'ssh' >> "$CALLS"
-printf ' %q' "$@" >> "$CALLS"
-printf '\n' >> "$CALLS"
-exit 0
-EOF
-chmod 700 "$fakebin/ssh"
-
-cat > "$fakebin/direxio-connect" <<'EOF'
-#!/usr/bin/env bash
-set -euo pipefail
-printf 'direxio-connect' >> "$CALLS"
-printf ' %q' "$@" >> "$CALLS"
-printf '\n' >> "$CALLS"
-if [ "${1:-}" = "daemon" ] && [ "${2:-}" = "status" ]; then
-  cat <<STATUS
-Status:   ${CONNECT_STATUS:-Running}
-WorkDir:  ${CONNECT_WORK_DIR:-}
-STATUS
-fi
-exit 0
-EOF
-chmod 700 "$fakebin/direxio-connect"
-
-write_state() {
-  local state=$1 service_dir=$2
-  mkdir -p "$(dirname "$state")" "$service_dir"
-  jq -n \
-    --arg service_dir "$service_dir" \
-    '{
-      run_id: "ops-test",
-      region: "ap-northeast-1",
-      domain_mode: "user",
-      domain: "ops.example.test",
-      as_url: "https://ops.example.test",
-      instance_type: "t3.small",
-      password: "12345678",
-      access_token: "ACCESS_SECRET",
-      agent_token: "AGENT_SECRET",
-      agent_room_id: "!old:ops.example.test",
-      agent_service_id: "ops.example.test",
-      agent_service_dir: $service_dir,
-      agent_credentials_file: ($service_dir + "/credentials.json"),
-      agent_install_status: "installed",
-      cc_connect_config: ($service_dir + "/cc-connect/config.toml"),
-      cc_connect_binary: "direxio-connect",
-      cc_connect_agent: "codex",
-      mcp_config_dir: ($service_dir + "/mcp"),
-      mcp_codex_config: ($service_dir + "/mcp/codex.toml"),
-      mcp_openclaw_config: ($service_dir + "/mcp/openclaw.md"),
-      mcp_hermes_config: ($service_dir + "/mcp/hermes.mcp.json"),
-      mcp_doctor_command: ("DIREXIO_CREDENTIALS_FILE=" + $service_dir + "/credentials.json direxio-mcp doctor --json"),
-      resources: {
-        instance_id: "i-ops",
-        public_ip: "203.0.113.77",
-        eip_id: "eipalloc-ops",
-        key_file: "/tmp/ops.pem"
-      },
-      phases: {
-        S0_PREREQ_AWS: {status: "done"},
-        S1_PREFLIGHT: {status: "done"},
-        S2_DOMAIN: {status: "done"},
-        S3_PROVISION: {status: "done"},
-        S4_BOOTSTRAP_STACK: {status: "done"},
-        S5_INIT_TOKENS: {status: "done"},
-        S6_WIRE_LOCAL: {status: "done"},
-        S7_VERIFY_E2E: {status: "done"}
-      },
-      user_confirmations: {
-        app_initialization: {status: "confirmed", evidence: "old app confirmation"},
-        real_chat: {status: "confirmed", evidence: "old chat confirmation"},
-        agent_mcp_runtime: {
-          status: "confirmed",
-          evidence: "old runtime confirmation",
-          runtime_summary_status: "passed",
-          runtime_probe_confirmed: true
-        }
-      },
-      runtime_checks: {
-        summary: {status: "passed"},
-        connect_daemon: {status: "passed"},
-        mcp_doctor: {status: "passed"},
-        mcp_smoke: {status: "passed"},
-        mcp_tools: {status: "passed"}
-      }
-    }' > "$state"
-}
-
-assert_file_exists() {
-  [ -s "$1" ] || {
-    echo "expected non-empty file: $1" >&2
-    exit 1
-  }
-}
-
-assert_not_contains() {
-  local path=$1 pattern=$2
-  if grep -E "$pattern" "$path" >/dev/null; then
-    echo "unexpected pattern in $path: $pattern" >&2
-    cat "$path" >&2
-    exit 1
-  fi
-}
-
-assert_contains() {
-  local path=$1 pattern=$2
-  if ! grep -E "$pattern" "$path" >/dev/null; then
-    echo "missing pattern in $path: $pattern" >&2
-    cat "$path" >&2
-    exit 1
-  fi
-}
-
-service_dir="$HOME/.direxio/nodes/ops.example.test"
-state="$service_dir/state.json"
-write_state "$state" "$service_dir"
-
-update_calls="$tmp/update.calls"
-: > "$update_calls"
-CALLS="$update_calls" PATH="$fakebin:$PATH" CONNECT_WORK_DIR="$service_dir/cc-connect" MESSAGE_SERVER_IMAGE="direxio/message-server:test" bash "$ROOT/scripts/update.sh" "$state" > "$tmp/update.out"
-assert_contains "$tmp/update.out" 'Old user confirmations and runtime checks were cleared'
-assert_contains "$tmp/update.out" 'Scoped local bridge daemon was stopped'
-assert_contains "$tmp/update.out" 'rerun orchestrate with P2P_EXISTING_STATE_ACTION=continue'
-
-assert_contains "$update_calls" 'docker compose --env-file \.env pull'
-assert_contains "$update_calls" 'docker compose --env-file \.env up -d'
-assert_contains "$update_calls" 'bash /opt/p2p/init-tokens\.sh'
-assert_contains "$update_calls" 'direxio/message-server:test'
-assert_contains "$update_calls" 'MESSAGE_SERVER_IMAGE=\$escaped_image'
-assert_contains "$update_calls" 'direxio-connect daemon status --service-name ops\.example\.test'
-assert_contains "$update_calls" 'direxio-connect daemon stop --service-name ops\.example\.test'
-assert_not_contains "$update_calls" 'volume rm|down -v|postgres-data|message-config|message-data|caddy-data|caddy-config'
-
-jq -e '
-  (.password // "") == ""
-  and (.access_token // "") == ""
-  and (.agent_token // "") == ""
-  and (.agent_room_id // "") == ""
-  and .agent_install_status == "refresh_pending"
-  and .phases.S4_BOOTSTRAP_STACK.status == "pending"
-  and .phases.S5_INIT_TOKENS.status == "pending"
-  and .phases.S6_WIRE_LOCAL.status == "pending"
-  and .phases.S7_VERIFY_E2E.status == "pending"
-  and (.user_confirmations | not)
-  and (.runtime_checks | not)
-' "$state" >/dev/null
-
-update_report="$service_dir/operation-report.json"
-assert_file_exists "$update_report"
-jq -e '
-  .operation_type == "update"
-  and .status == "update_remote_restart_complete_refresh_pending"
-  and .security.secrets_included == false
-  and .gates.user_confirmation.app_initialization == "pending_user_confirmation"
-  and .gates.user_confirmation.real_chat == "pending_user_confirmation"
-  and .gates.user_confirmation.agent_mcp_runtime == "pending_runtime_confirmation"
-  and .runtime_checks.summary.status == "not_run"
-  and .connect.install_status == "refresh_pending"
-  and .credentials.status == "refresh_pending"
-  and .mcp.status == "refresh_pending"
-' "$update_report" >/dev/null
-
-write_state "$state" "$service_dir"
-if CALLS="$tmp/reset-unconfirmed.calls" PATH="$fakebin:$PATH" bash "$ROOT/scripts/reset-app-data.sh" "$state" >/dev/null 2>&1; then
-  echo "reset-app-data must require explicit confirmation" >&2
-  exit 1
-fi
-
-reset_calls="$tmp/reset.calls"
-: > "$reset_calls"
-CALLS="$reset_calls" PATH="$fakebin:$PATH" CONNECT_WORK_DIR="$service_dir/cc-connect" DIREXIO_RESET_APP_DATA_CONFIRM=1 bash "$ROOT/scripts/reset-app-data.sh" "$state" > "$tmp/reset.out"
-assert_contains "$tmp/reset.out" 'Old user confirmations and runtime checks were cleared'
-assert_contains "$tmp/reset.out" 'Scoped local bridge daemon was stopped'
-assert_contains "$tmp/reset.out" 'rerun orchestrate with P2P_EXISTING_STATE_ACTION=continue'
-
-assert_contains "$reset_calls" 'docker compose --env-file \.env down'
-assert_contains "$reset_calls" 'docker volume rm'
-assert_contains "$reset_calls" 'postgres-data'
-assert_contains "$reset_calls" 'message-config'
-assert_contains "$reset_calls" 'message-data'
-assert_contains "$reset_calls" 'docker compose --env-file \.env up -d'
-assert_contains "$reset_calls" 'bash /opt/p2p/init-tokens\.sh'
-assert_contains "$reset_calls" 'direxio-connect daemon status --service-name ops\.example\.test'
-assert_contains "$reset_calls" 'direxio-connect daemon stop --service-name ops\.example\.test'
-assert_not_contains "$reset_calls" 'caddy-data|caddy-config|down -v'
-
-jq -e '
-  (.password // "") == ""
-  and (.access_token // "") == ""
-  and (.agent_token // "") == ""
-  and (.agent_room_id // "") == ""
-  and .agent_install_status == "refresh_pending"
-  and .phases.S5_INIT_TOKENS.status == "pending"
-  and .phases.S6_WIRE_LOCAL.status == "pending"
-  and .phases.S7_VERIFY_E2E.status == "pending"
-  and (.user_confirmations | not)
-  and (.runtime_checks | not)
-' "$state" >/dev/null
-
-reset_report="$service_dir/operation-report.json"
-assert_file_exists "$reset_report"
-jq -e '
-  .operation_type == "reset_app_data"
-  and .status == "reset_remote_data_cleared_refresh_pending"
-  and .security.secrets_included == false
-  and .gates.user_confirmation.app_initialization == "pending_user_confirmation"
-  and .gates.user_confirmation.real_chat == "pending_user_confirmation"
-  and .gates.user_confirmation.agent_mcp_runtime == "pending_runtime_confirmation"
-  and .runtime_checks.summary.status == "not_run"
-  and .connect.install_status == "refresh_pending"
-  and .credentials.status == "refresh_pending"
-  and .mcp.status == "refresh_pending"
-' "$reset_report" >/dev/null
-
-echo "update reset ops ok"

package/tests/user_confirmation_gates_test.sh

@@ -1,152 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT=$(cd "$(dirname "$0")/.." && pwd)
-tmp=$(mktemp -d)
-trap 'rm -rf "$tmp"' EXIT
-
-export HOME="$tmp/home"
-mkdir -p "$HOME"
-
-service_dir="$HOME/.direxio/nodes/confirm.example.test"
-mkdir -p "$service_dir"
-state="$service_dir/state.json"
-jq -n \
-  --arg service_dir "$service_dir" \
-  '{
-    run_id: "confirm-test",
-    region: "ap-northeast-1",
-    domain_mode: "user",
-    domain: "confirm.example.test",
-    agent_service_id: "confirm.example.test",
-    agent_service_dir: $service_dir,
-    phase: "S7_VERIFY_E2E",
-    phases: {
-      S0_PREREQ_AWS: {status: "done"},
-      S1_PREFLIGHT: {status: "done"},
-      S2_DOMAIN: {status: "done"},
-      S3_PROVISION: {status: "done"},
-      S4_BOOTSTRAP_STACK: {status: "done"},
-      S5_INIT_TOKENS: {status: "done"},
-      S6_WIRE_LOCAL: {status: "done"},
-      S7_VERIFY_E2E: {status: "done"}
-    },
-    resources: {}
-  }' > "$state"
-
-set +e
-P2P_WORKDIR="$service_dir" bash "$ROOT/scripts/orchestrate.sh" confirm app_initialization > "$tmp/missing-app-evidence.out" 2>&1
-missing_app_evidence_rc=$?
-set -e
-[ "$missing_app_evidence_rc" -ne 0 ] || {
-  echo "app_initialization confirmation must require explicit evidence" >&2
-  exit 1
-}
-grep -q 'requires DIREXIO_CONFIRM_EVIDENCE' "$tmp/missing-app-evidence.out"
-jq -e '(.user_confirmations.app_initialization | not)' "$state" >/dev/null
-
-set +e
-P2P_WORKDIR="$service_dir" bash "$ROOT/scripts/orchestrate.sh" confirm real_chat > "$tmp/missing-real-chat-evidence.out" 2>&1
-missing_real_chat_evidence_rc=$?
-set -e
-[ "$missing_real_chat_evidence_rc" -ne 0 ] || {
-  echo "real_chat confirmation must require explicit evidence" >&2
-  exit 1
-}
-grep -q 'requires DIREXIO_CONFIRM_EVIDENCE' "$tmp/missing-real-chat-evidence.out"
-jq -e '(.user_confirmations.real_chat | not)' "$state" >/dev/null
-
-set +e
-P2P_WORKDIR="$service_dir" \
-  DIREXIO_CONFIRM_EVIDENCE="ok" \
-  bash "$ROOT/scripts/orchestrate.sh" confirm app_initialization > "$tmp/short-app-evidence.out" 2>&1
-short_app_evidence_rc=$?
-set -e
-[ "$short_app_evidence_rc" -ne 0 ] || {
-  echo "app_initialization confirmation must reject short generic evidence" >&2
-  exit 1
-}
-grep -q 'DIREXIO_CONFIRM_EVIDENCE is too short' "$tmp/short-app-evidence.out"
-jq -e '(.user_confirmations.app_initialization | not)' "$state" >/dev/null
-
-confirm_output=$(P2P_WORKDIR="$service_dir" DIREXIO_CONFIRM_EVIDENCE="user completed app initialization" bash "$ROOT/scripts/orchestrate.sh" confirm app_initialization)
-printf '%s\n' "$confirm_output" | grep -q 'confirmed gate: app_initialization'
-
-jq -e '
-  .user_confirmations.app_initialization.status == "confirmed"
-  and .user_confirmations.app_initialization.evidence == "user completed app initialization"
-  and (.user_confirmations.app_initialization.ts | type == "string")
-' "$state" >/dev/null
-
-report_output=$(P2P_WORKDIR="$service_dir" bash "$ROOT/scripts/orchestrate.sh" report new_deploy)
-report_path=$(printf '%s\n' "$report_output" | sed -nE 's/^operation report: //p' | tail -n 1)
-jq -e '
-  .gates.user_confirmation.app_initialization == "confirmed"
-  and .gates.user_confirmation.real_chat == "pending_user_confirmation"
-  and .gates.user_confirmation.agent_mcp_runtime == "pending_runtime_confirmation"
-' "$report_path" >/dev/null
-
-set +e
-P2P_WORKDIR="$service_dir" \
-  DIREXIO_CONFIRM_EVIDENCE="MCP runtime looks ok" \
-  bash "$ROOT/scripts/orchestrate.sh" confirm agent_mcp_runtime > "$tmp/mcp-runtime-blocked.out" 2>&1
-mcp_blocked_rc=$?
-set -e
-[ "$mcp_blocked_rc" -ne 0 ] || {
-  echo "agent_mcp_runtime confirmation must require runtime evidence" >&2
-  exit 1
-}
-grep -q 'requires runtime_checks.summary.status=passed' "$tmp/mcp-runtime-blocked.out"
-jq -e '(.user_confirmations.agent_mcp_runtime | not)' "$state" >/dev/null
-
-jq '.runtime_checks.summary = {
-  status: "passed",
-  failed_count: 0,
-  evidence: "all runtime checks passed",
-  checks: {
-    connect_daemon: "passed",
-    mcp_doctor: "passed",
-    mcp_tools: "passed",
-    mcp_smoke: "passed"
-  }
-}' "$state" > "$state.tmp" && mv "$state.tmp" "$state"
-
-set +e
-P2P_WORKDIR="$service_dir" \
-  DIREXIO_CONFIRM_EVIDENCE="MCP runtime looks ok" \
-  bash "$ROOT/scripts/orchestrate.sh" confirm agent_mcp_runtime > "$tmp/mcp-runtime-missing-probe.out" 2>&1
-mcp_missing_probe_rc=$?
-set -e
-[ "$mcp_missing_probe_rc" -ne 0 ] || {
-  echo "agent_mcp_runtime confirmation must require explicit runtime probe evidence" >&2
-  exit 1
-}
-grep -q 'requires DIREXIO_CONFIRM_RUNTIME_PROBE=1' "$tmp/mcp-runtime-missing-probe.out"
-jq -e '(.user_confirmations.agent_mcp_runtime | not)' "$state" >/dev/null
-
-mcp_confirm_output=$(
-  P2P_WORKDIR="$service_dir" \
-    DIREXIO_CONFIRM_RUNTIME_PROBE=1 \
-    DIREXIO_CONFIRM_EVIDENCE="runtime channel probe confirmed in Codex" \
-    bash "$ROOT/scripts/orchestrate.sh" confirm agent_mcp_runtime
-)
-printf '%s\n' "$mcp_confirm_output" | grep -q 'confirmed gate: agent_mcp_runtime'
-
-jq -e '
-  .user_confirmations.agent_mcp_runtime.status == "confirmed"
-  and .user_confirmations.agent_mcp_runtime.evidence == "runtime channel probe confirmed in Codex"
-  and .user_confirmations.agent_mcp_runtime.runtime_summary_status == "passed"
-  and .user_confirmations.agent_mcp_runtime.runtime_probe_confirmed == true
-' "$state" >/dev/null
-
-set +e
-P2P_WORKDIR="$service_dir" bash "$ROOT/scripts/orchestrate.sh" confirm unknown_gate > "$tmp/invalid.out" 2>&1
-invalid_rc=$?
-set -e
-[ "$invalid_rc" -ne 0 ] || {
-  echo "invalid confirmation gate should fail" >&2
-  exit 1
-}
-grep -q 'Usage: .* confirm' "$tmp/invalid.out"
-
-echo "user confirmation gates ok"